{"report_id":"3fa533de-3d29-4bbb-b1cb-05c5ea7dd57b","version":6,"status":"done","tags":[],"date":"2026-01-10T06:46:57Z","url":{"schema":"http","addr":"hclips-porn.cfd/hd/rail","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"172.67.158.108","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"hclips-porn.cfd/","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"title":"HCLIPS-PORN : HD XXX CLIPS VIDEO TUBE!","dom":{"size":2663,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (425)","md5":"3f83f06520d4f5fc047bc279c42c967c","sha1":"1e2617ba7c8e7328c9bc5475ca5dfa1a6e34f234","sha256":"6dcfd68609c2bb12bef10aaae68b20d4a75db980b1216252a281e01d400facac","sha512":"914351f3af8506de2ab3011e462c2d0ee59ab6858442f412a584a3a43654472935d1c3c4652891447cc6de56dc43a20aa334220482709537e7c828fa9793e464","ssdeep":"","tlshash":"145142a2c9920034061681ae19ffb1dd792a213ba901c841ffdde125af5c7eb5c768dc","dom_hash":"domhash473e3a5f89abd6bcc931cb2b35c73cc9","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"hclips-porn.cfd/hd/rail","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"172.67.158.108","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-14T06:46:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":17}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"fh-wgt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"fh-wgt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"js.wpushsdk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"2830fe954a.d88b2835c6.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"89ec4d544c.2f6dc696ee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"js.wpadmngr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cdn-fc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"js.capndr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"na.nawpush.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"ic-nss.flixcdn.com","ip":{"addr":"185.76.9.5","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2017-05-17","domain_rank":60032,"first_seen":"2024-04-26T14:40:12Z","last_seen":"2026-01-08T14:43:39.871316Z","alert_count":0,"request_count":12,"received_data":572673,"sent_data":6396,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"89ec4d544c.2f6dc696ee.com","ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2025-12-11","domain_rank":0,"first_seen":"2026-01-10T00:17:41.69941Z","last_seen":"2026-01-10T00:17:41.69941Z","alert_count":2,"request_count":2,"received_data":690,"sent_data":1682,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"accounts.google.com","ip":{"addr":"173.194.221.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":103,"first_seen":"2012-05-23T06:57:57Z","last_seen":"2026-01-05T00:14:18.31671Z","alert_count":0,"request_count":3,"received_data":6911,"sent_data":1784,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}]},{"fqdn":"tsyndicate.com","ip":{"addr":"136.243.90.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2017-03-08","domain_rank":1289,"first_seen":"2017-03-16T09:04:54Z","last_seen":"2026-01-06T09:56:19.20983Z","alert_count":0,"request_count":4,"received_data":49572,"sent_data":2403,"comment":"","tags":null,"fingerprints":[{"name":"TrafficStars","description":"TrafficStars is a self-served ad network and ad exchange that operates mainly in adult-related verticals.","website":"https://trafficstars.com","common_platform_enumeration":"","icon":"TrafficStars.png","categories":["Advertising"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"btds.zog.link","ip":{"addr":"109.206.176.75","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2015-01-11","domain_rank":370858,"first_seen":"2019-10-07T21:35:03Z","last_seen":"2026-01-08T22:20:18.492631Z","alert_count":0,"request_count":1,"received_data":3025,"sent_data":747,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"2830fe954a.d88b2835c6.com","ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2025-12-11","domain_rank":0,"first_seen":"2026-01-10T00:17:41.706223Z","last_seen":"2026-01-10T00:17:41.706223Z","alert_count":4,"request_count":4,"received_data":65748,"sent_data":10840,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"a.magsrv.com","ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2023-08-01","domain_rank":51490,"first_seen":"2023-08-04T16:18:00Z","last_seen":"2026-01-06T09:09:56.853915Z","alert_count":12,"request_count":4,"received_data":743600,"sent_data":1660,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"ntvpforever.com","ip":{"addr":"168.119.25.102","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2021-11-18","domain_rank":18811,"first_seen":"2021-11-19T01:49:18Z","last_seen":"2026-01-06T21:59:18.654092Z","alert_count":0,"request_count":4,"received_data":1386,"sent_data":2072,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"js.capndr.com","ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2021-08-30","domain_rank":156902,"first_seen":"2021-08-30T12:51:01Z","last_seen":"2026-01-08T20:47:22.364994Z","alert_count":2,"request_count":2,"received_data":798,"sent_data":832,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-04T22:17:15.216142Z","alert_count":0,"request_count":1,"received_data":3188,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.60ah.com","ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2023-01-18","domain_rank":285202,"first_seen":"2023-05-16T11:47:54Z","last_seen":"2026-01-09T06:39:42.899113Z","alert_count":0,"request_count":2,"received_data":5129,"sent_data":964,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"js.cabnnr.com","ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2021-08-30","domain_rank":185771,"first_seen":"2021-08-30T12:50:21Z","last_seen":"2026-01-08T12:58:18.108643Z","alert_count":0,"request_count":2,"received_data":86140,"sent_data":862,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"flepquix.com","ip":{"addr":"159.69.163.100","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2025-03-10","domain_rank":17067,"first_seen":"2025-03-24T12:50:40.052973Z","last_seen":"2026-01-09T06:39:43.255085Z","alert_count":0,"request_count":1,"received_data":322,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fh-wgt.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-10-24","domain_rank":18569,"first_seen":"2025-03-17T09:59:57.505629Z","last_seen":"2026-01-08T14:43:38.928745Z","alert_count":6,"request_count":3,"received_data":14928,"sent_data":1695,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"afrdtech.com","ip":{"addr":"31.220.27.154","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-04-19","domain_rank":19742,"first_seen":"2024-05-10T14:42:59Z","last_seen":"2026-01-06T20:04:27.998632Z","alert_count":0,"request_count":3,"received_data":52298,"sent_data":1370,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"static.bookmsg.com","ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2020-09-15","domain_rank":169473,"first_seen":"2020-11-24T14:56:32Z","last_seen":"2026-01-08T21:44:02.940628Z","alert_count":0,"request_count":2,"received_data":2251,"sent_data":983,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"js.wpushsdk.com","ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2021-05-07","domain_rank":210235,"first_seen":"2021-05-07T12:03:12Z","last_seen":"2026-01-09T00:35:10.30078Z","alert_count":2,"request_count":2,"received_data":861641,"sent_data":846,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fp.metricswpsh.com","ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2021-10-29","domain_rank":154722,"first_seen":"2022-04-22T11:20:32Z","last_seen":"2026-01-07T10:37:45.904728Z","alert_count":4,"request_count":4,"received_data":1641,"sent_data":2120,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"s.magsrv.com","ip":{"addr":"95.211.229.248","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2023-08-01","domain_rank":47665,"first_seen":"2023-08-04T12:48:00Z","last_seen":"2026-01-06T11:04:24.449199Z","alert_count":5,"request_count":5,"received_data":27929,"sent_data":4148,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"rtbrenab.net","ip":{"addr":"157.90.85.57","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2024-09-23","domain_rank":17910,"first_seen":"2024-10-01T12:19:47Z","last_seen":"2026-01-06T00:20:39.458674Z","alert_count":0,"request_count":2,"received_data":13771,"sent_data":7211,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.16.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"nereserv.com","ip":{"addr":"168.119.25.102","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2020-12-21","domain_rank":17097,"first_seen":"2020-12-21T11:07:56Z","last_seen":"2026-01-07T17:00:29.187884Z","alert_count":2,"request_count":1,"received_data":322,"sent_data":608,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"preroll.hostave3.net","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2005-09-05","domain_rank":304993,"first_seen":"2018-02-22T21:32:02Z","last_seen":"2026-01-08T22:20:18.590008Z","alert_count":0,"request_count":1,"received_data":802,"sent_data":454,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"s.uuidksinc.net","ip":{"addr":"31.220.27.135","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2015-05-05","domain_rank":47808,"first_seen":"2015-07-20T12:00:35Z","last_seen":"2026-01-08T16:57:00.010035Z","alert_count":0,"request_count":1,"received_data":570,"sent_data":472,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.23.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"jcdn.tsyndicate.com","ip":{"addr":"45.133.44.70","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2017-03-08","domain_rank":65259,"first_seen":"2024-09-05T14:47:10Z","last_seen":"2026-01-07T00:37:49.437213Z","alert_count":0,"request_count":1,"received_data":389,"sent_data":443,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ads.rdy.to","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-11-25T09:33:09.66977Z","last_seen":"2026-01-09T06:39:43.478201Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":523,"comment":"","tags":null,"fingerprints":null},{"fqdn":"a.adspector.io","ip":{"addr":"104.21.15.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-06-02","domain_rank":213577,"first_seen":"2024-06-28T02:35:48Z","last_seen":"2026-01-08T12:05:08.390168Z","alert_count":0,"request_count":1,"received_data":715,"sent_data":492,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"hclips-porn.cfd","ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-05","domain_rank":0,"first_seen":"2025-09-03T08:37:36.556453Z","last_seen":"2025-12-16T05:53:40.049578Z","alert_count":0,"request_count":129,"received_data":3481287,"sent_data":85058,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"TrafficStars","description":"TrafficStars is a self-served ad network and ad exchange that operates mainly in adult-related verticals.","website":"https://trafficstars.com","common_platform_enumeration":"","icon":"TrafficStars.png","categories":["Advertising"]}]},{"fqdn":"cdn.tsyndicate.com","ip":{"addr":"45.133.44.70","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2017-03-08","domain_rank":40822,"first_seen":"2017-07-04T06:00:09Z","last_seen":"2026-01-08T12:07:25.26082Z","alert_count":0,"request_count":15,"received_data":217420,"sent_data":7965,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"js.wpadmngr.com","ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2021-06-02","domain_rank":77954,"first_seen":"2021-06-02T14:43:46Z","last_seen":"2026-01-09T00:35:10.218251Z","alert_count":2,"request_count":2,"received_data":296242,"sent_data":846,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pxl-eu.tsyndicate.com","ip":{"addr":"148.251.4.157","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2017-03-08","domain_rank":61788,"first_seen":"2025-07-17T15:56:50.105461Z","last_seen":"2026-01-08T12:07:25.145604Z","alert_count":0,"request_count":3,"received_data":591,"sent_data":5708,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"na.nawpush.com","ip":{"addr":"45.133.44.25","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2020-12-21","domain_rank":175362,"first_seen":"2020-12-23T08:18:12Z","last_seen":"2026-01-08T23:26:54.730603Z","alert_count":2,"request_count":2,"received_data":4275,"sent_data":962,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pxl.tsyndicate.com","ip":{"addr":"46.4.88.147","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2017-03-08","domain_rank":83690,"first_seen":"2017-07-05T13:51:06Z","last_seen":"2026-01-06T23:44:31.877261Z","alert_count":0,"request_count":1,"received_data":210,"sent_data":622,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-04T22:14:09.841371Z","alert_count":0,"request_count":3,"received_data":85607,"sent_data":1620,"comment":"","tags":null,"fingerprints":null},{"fqdn":"s3t3d2y1.afcdn.net","ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2022-06-27","domain_rank":0,"first_seen":"2025-11-21T12:51:16.33547Z","last_seen":"2026-01-09T21:27:58.411726Z","alert_count":2,"request_count":2,"received_data":21091,"sent_data":976,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"cdn-fc.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-02-07","domain_rank":18430,"first_seen":"2023-03-03T11:19:00Z","last_seen":"2026-01-08T14:43:39.89756Z","alert_count":18,"request_count":18,"received_data":488063,"sent_data":12687,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"hclips-porn.cfd/","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"41eece0da217398b6f4d4ee2f01b6245","sha1":"72f2098b0520b07dd3c6874646c920a3d367a4e2","sha256":"62bba8c2295a14bb2d007a3f7f8730fd10cef7348a6474f3f832c99ca6795d35","sha512":"1009ef0076bfb735c9b40fa3b106c8de414943b27fd74cfd315265ad768592a9d3eaf408c2392269659fb5af26c32f454d8f8a86fe0044d5a0c46ef424ebe207","ssdeep":"","tlshash":"dec09b3d110413fedfd5359ddc05667d1811b1b1d1918cb04715d527605de144cf3801","size":134,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-04-16T20:56:43.812687Z","times_seen":11957,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/b.b.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.70","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa0d93d282f8683d19ac456c81debef0","sha1":"0d8b13271cdfd4e29a7c8763abf279297d2a84d1","sha256":"4a96c9570ebfa67dd93c6ea67b613e2bf108a4ad101342f33d4ab36a67198568","sha512":"94295f7da3b823de0d4961139a1c4e61ed232e4e087ffd29270d36fea950c82d870b0c359528375affb751f88ba642bda917a012c5080f6c2d409cb8ccf9fecf","ssdeep":"96:pJZEqoY9fBZeWGqHZvk++OIWtJxtomlGDWtVAQERhKBHYX1o4XT6:pJZmY9fBZeWGoZvkpOIWtloml0hq4L6","tlshash":"40c1d8bd6259f27580dd044b276bab64b7f60065bf238810e09e8c49357cf97c92acde","size":5847,"data":"","first_seen":"2025-12-19T14:41:02.491397Z","last_seen":"2026-04-16T19:36:05.830027Z","times_seen":776,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#233","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"3563d761573229ec213620cc74e9675a","sha1":"6073126dded1498207afc293e900a1af50014ac4","sha256":"5d05a8d6bf566d2b3ed05d90a3395bf22e91a9d9bbb2d22c352e96cbfe5f0c19","sha512":"ee366647e31dd9c08978e9aa6d0a9f6b2aa4d6666250955a442c3d87d967d49e871473d0b0f37aebc6ed638cefa17691d045d6b76a76efc3a157b4dc5e9339f6","ssdeep":"","tlshash":"9e41e84f3546bc3464eb0cb779f3d7cc362048268c45a0004179e92b9a29f97f56bac1","size":2313,"data":"","first_seen":"2026-01-10T06:47:19.769213Z","last_seen":"2026-01-10T06:47:19.769213Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#234","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d6e1510acdf99e4c4367300cd460060c","sha1":"13a12418dc704a923b3830f23bee720ceb5eafbe","sha256":"871a565756ae5bd3e6c5478b05e3035e320c958c9f634879ee7dcf0f705e2fa0","sha512":"806f1b6a06c94b0d172b6e936e5278b8daaad7b9051261d4e0e2302331c7ae5e524bacc06bc7de79b1f1bdafa579f53d1b01f604fc26e0f75fb2f03f0253b1e1","ssdeep":"","tlshash":"1e51d88fc558fd1094628ab7ee17e459db2dce4ccc8a9054c375502b0e47f1b588e49a","size":2768,"data":"","first_seen":"2026-01-10T06:47:19.770002Z","last_seen":"2026-01-10T06:47:19.770002Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=1567158389\u0026w=300\u0026h=250\u0026id=1433671","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"3c1bc1dd08f96349c433eb122aead61f","sha1":"604a16c0e2869cb47564301036b786202c8a8787","sha256":"869b75296a55932491e9a9847f1b8746d20031365f68588214df57565331437a","sha512":"33f6be39ce7c03944319279e0496969c0bc05f376f2b9587787d6bf108f043f75336b71a84a8a4dd9f47f2bf84137889bbf93dfef63a07ec2cc8fcc1008016ac","ssdeep":"","tlshash":"33a022a0b0c3b03033a32203802e8cece03000f000e0fee0c000a8302b22030b32c3ac","size":66,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-16T19:33:04.044244Z","times_seen":5960,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=1567158389\u0026w=300\u0026h=250\u0026id=1433671","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"f48f4887afd273629c89c18117c7d6ef","sha1":"b4d7ba70f042062ebce7b56bcb7ab452a944e375","sha256":"72720823e7778fd15730f6cdd8c0271b7a33da888493257fa17304785879bd6b","sha512":"67efd8ae6ee25ba84cef24d492542719792088a4aaa254f3911e57f7a3becb9625d582e9388def60bc662461ff47ca595159635283fdcd5d566130f3c70c132a","ssdeep":"","tlshash":"6fa022f0a3cb2c30b2c320c000a30ccc202888b0200888000082c28b082c0b3a23a02c","size":67,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-03T02:26:01.802013Z","times_seen":5554,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dc0fbd899f600b0cb6687880d3036037","sha1":"a9bf6de8622f90e73708ce814b64f9cfc6990bdf","sha256":"4a260f030d57218a4dd17c53290ea9c5fade005852c53e16a5feb12289197de8","sha512":"428ac57be2098801ffe24ea9fff43d57a0a8b7a6f1623ef2a587f3eacfd1fd9938cd0df78a7e5055761dfaa36c8303acdedeabd04743760a68ed48240b9e0eac","ssdeep":"","tlshash":"e20170ae10d21c788e6371b90fff62385135218754875b02b95d5d825fb470dc589c8c","size":742,"data":"","first_seen":"2025-10-05T06:06:00.188752Z","last_seen":"2026-04-12T14:36:08.338082Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.cabnnr.com/banner-admanager/build.m.js","fqdn":"js.cabnnr.com","domain":"cabnnr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"01903853e3410c57e30e0a7abc3c1f60","sha1":"094aa098801352ae39ce557b293e4eb0fc3eb6d1","sha256":"cf7169f391156797acf11a9da11225701c3ee3c16afebc35eeefa3fb25e8daf3","sha512":"146bd24d76c9a9050a3a68b7a6d85264812fd8b1e41e93c674fd7d80ec01ee246a1302fbb0e37945ec1c53fd67dc86603dea509f5d9464c25e20ece1d3e2ee03","ssdeep":"1536:7aNtpnDTPupIDxZJBpqgiZMZLUyzOBR6mXIEFWDDIYA:709DTP9PpqSL3bmLIE","tlshash":"4b836b843290b4b541e640afa43f430af3392d06b80b9458f16dede67b79e896176f39","size":84990,"data":"","first_seen":"2025-12-18T08:41:29.003596Z","last_seen":"2026-01-19T12:53:12.730062Z","times_seen":453,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=1567158389\u0026w=300\u0026h=250\u0026id=1433671","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"a0bb2b917a2139d1e28fe43296edbfd9","sha1":"30c72615ba6def457f66cc870475aa91f8a7d626","sha256":"46b547a2290e02d6379c03cb35d2d696000b0a69e950d4a987cab7631f039c05","sha512":"5fc9279c55799c4ed7baafd33331b8fa61ecba4a8e3cdf0a4d281af5955b85b69d9aef0afc730944cc17d7dd54fab79db45c629a947c955f5c19f658d6782585","ssdeep":"","tlshash":"2ca012b333c2840147c3209000172984c02583e200040943802089a7361d035f81692c","size":83,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-16T19:33:04.043431Z","times_seen":5952,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=1567158389\u0026w=300\u0026h=250\u0026id=1433671","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"baa6d30f18ea544c73cd0137a66018a8","sha1":"3784f42cd9573cdb55a633553e82da98352fbefd","sha256":"59d80d13ba6ff1ea36ea83d976e0a5a9f2c25a1a00a453b3d87865dcd33834ff","sha512":"a79613151ff50983e56ac032f05b77afa85ab475a2e371dd5cce69769a36c3edb00aac9532e2a3240383a94b8be670bc9d8047d7f5cda755404d12c3eb47059a","ssdeep":"","tlshash":"4190044f71c03134455751d055173fd40014047134455cc400c0f473fc53434111dcfc","size":42,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-03T02:26:01.799286Z","times_seen":5569,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpadmngr.com/static/adManager.js","fqdn":"js.wpadmngr.com","domain":"wpadmngr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf20c44981795047ce2c610a2100a35a","sha1":"24c225c700d3f4208417651f6779de9758cd90a1","sha256":"0ec0d01651f974e70dc3c7d4cc50599dbd3a818863b7011ef052c3a0641dc161","sha512":"97612ed9de3cfb245c7e6a70420ca817b99f7b6db0dae1395fbc16c1eef8e4cb4ff993954fbddc4917563840baeef269a9edea324b06e0131fc2e2e833266e7a","ssdeep":"1536:O18MdnC5OPz8QP9r2RcZSgtK8sBggHhO12FoX50FtQySd8uj6DzKEVKf7lbe0etc:mFSGSgtqZXqd8uODG0K5y0etsz","tlshash":"c8e34adcb2d2b07407e75099d83f1206b73a1a16b80c9058f6a6e9c17878ddb5237f7a","size":147733,"data":"","first_seen":"2025-12-24T08:41:20.196676Z","last_seen":"2026-01-15T08:09:34.935655Z","times_seen":438,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bd931315f9ec922d23220a34a506421","sha1":"92eb331739d51c65226b5fdb07ec2d74924f200f","sha256":"28f33740f0a341c823243413c7780d92e7ae39254641174a86a4f51ac805b576","sha512":"26bb36ab577ba2b6486f482177e31992c81c79322070edc9d55af10d7ab8f3e1b9dccc89f7c925a47a68e464f522736c0e64d3d7e4acaa016745e0104bddb167","ssdeep":"3072:cWYjf7+28VOk2DG2cUMaElwnRlqI1fsBHisiEolY4o/CXMXpo:U+28VOk262lElwnRjfs4sXhpo","tlshash":"96045c993792307441d3a11daaff53093371506ab80f4884bb4dd8a427adeea51a3ffd","size":185387,"data":"","first_seen":"2025-12-11T15:18:11.624048Z","last_seen":"2026-01-15T17:17:43.902034Z","times_seen":1441,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/b.b.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.70","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa0d93d282f8683d19ac456c81debef0","sha1":"0d8b13271cdfd4e29a7c8763abf279297d2a84d1","sha256":"4a96c9570ebfa67dd93c6ea67b613e2bf108a4ad101342f33d4ab36a67198568","sha512":"94295f7da3b823de0d4961139a1c4e61ed232e4e087ffd29270d36fea950c82d870b0c359528375affb751f88ba642bda917a012c5080f6c2d409cb8ccf9fecf","ssdeep":"96:pJZEqoY9fBZeWGqHZvk++OIWtJxtomlGDWtVAQERhKBHYX1o4XT6:pJZmY9fBZeWGoZvkpOIWtloml0hq4L6","tlshash":"40c1d8bd6259f27580dd044b276bab64b7f60065bf238810e09e8c49357cf97c92acde","size":5847,"data":"","first_seen":"2025-12-19T14:41:02.491397Z","last_seen":"2026-04-16T19:36:05.830027Z","times_seen":776,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/b.b.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.70","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa0d93d282f8683d19ac456c81debef0","sha1":"0d8b13271cdfd4e29a7c8763abf279297d2a84d1","sha256":"4a96c9570ebfa67dd93c6ea67b613e2bf108a4ad101342f33d4ab36a67198568","sha512":"94295f7da3b823de0d4961139a1c4e61ed232e4e087ffd29270d36fea950c82d870b0c359528375affb751f88ba642bda917a012c5080f6c2d409cb8ccf9fecf","ssdeep":"96:pJZEqoY9fBZeWGqHZvk++OIWtJxtomlGDWtVAQERhKBHYX1o4XT6:pJZmY9fBZeWGoZvkpOIWtloml0hq4L6","tlshash":"40c1d8bd6259f27580dd044b276bab64b7f60065bf238810e09e8c49357cf97c92acde","size":5847,"data":"","first_seen":"2025-12-19T14:41:02.491397Z","last_seen":"2026-04-16T19:36:05.830027Z","times_seen":776,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpushsdk.com/npc/sdk/wpu/npush.m.js","fqdn":"js.wpushsdk.com","domain":"wpushsdk.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5971e1aea23eb692c8ba321767e3d616","sha1":"573f09736f6f905afafc2c19c5f6eb4984aa9f80","sha256":"6cd87ca3f3fa6e118e5cdfca3e2f1120a9e2326574e3de7448aecdf8012ab8d5","sha512":"256c2cabfe3651ea7cc1410c5deea1944344a6442894e55b997ba7f3cb1af177a79cefff5e0d84bb65b27a8b7912a3dec518d8d64352ac3a22cb1e808ef24673","ssdeep":"3072:hfB/9Xkw+QIsv7iIB7xz2/3UepiBz3oQrcQ7clZyQ5CO3ABWV+PQc:hfF9XBz2scQ7iCOwBWV+Pj","tlshash":"88446cd1368478b40593c0aee0770201b2382609f52db56cbabddee96586dce2377f79","size":255991,"data":"","first_seen":"2025-12-11T16:15:42.321021Z","last_seen":"2026-01-29T09:34:31.743224Z","times_seen":825,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"68bc4026f9fba1757205d96ba3c61bd0","sha1":"47e3650084721a3a1cc01ff040b127186858f75e","sha256":"f58738296bc30b9e620e444bc295d3ca126fd63e9a1cd0dc284223b0fcdd753b","sha512":"a1d307f73e3f67eaa059438488de557f8e5b1c18ee6c8507694ba8d29c361ad3727d3db47a093a8815c311c199c94aaaaf4c9806bb63db8ae457bf9c3e11563c","ssdeep":"","tlshash":"d7600000000030000000c0003f0000300c00c0c000c0c000003000c000c00033000c00","size":12,"data":"","first_seen":"2026-01-10T06:47:19.77354Z","last_seen":"2026-01-10T06:47:19.77354Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=1567158389\u0026w=300\u0026h=250\u0026id=1433671","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"be7bfc2a908a684a210d585ed55d30e5","sha1":"c0459f4c57d2e1a980fcac6fac8e47d3a18f237d","sha256":"9e9bd85194604c6912fb8f12147e0bdab67f1932f029c8accfb629bed57945c3","sha512":"2c2f6e1ec8c1e59bb7c57acfc09ffd94c332e1e6f5cae8e481633b1a2294eec0453c88b995ea7ab17b4eabad583de7806c04d05125baf69ff8e3a363a3051dd2","ssdeep":"","tlshash":"4d9002bd9840919455572b9605965844092040612945dd500041a46218660705e0596c","size":45,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-16T13:49:02.506218Z","times_seen":5960,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=1567158389\u0026w=300\u0026h=250\u0026id=1433671","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"a3e1b26ce1ce08bf4ab2f623e5936f78","sha1":"36dc38e63d6d61672791ea9319134504def2ce9c","sha256":"f67d06b9b4c2938c52806c4801d3dc13946c9891a019b97f0608e9ffb4f99abc","sha512":"00913437703bba046f4422e7c21313193ddf026c11f5624362eec110934db74d3bdb96e35b37610b50f02833eee9e3a79054a124537810c52ff72c38dadde86b","ssdeep":"","tlshash":"cca024cf70c47101cc4730d0300f1c0c5454043c150c0cc443c0c5435d330d5c30555c","size":70,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-03T02:26:01.794133Z","times_seen":5574,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"41eece0da217398b6f4d4ee2f01b6245","sha1":"72f2098b0520b07dd3c6874646c920a3d367a4e2","sha256":"62bba8c2295a14bb2d007a3f7f8730fd10cef7348a6474f3f832c99ca6795d35","sha512":"1009ef0076bfb735c9b40fa3b106c8de414943b27fd74cfd315265ad768592a9d3eaf408c2392269659fb5af26c32f454d8f8a86fe0044d5a0c46ef424ebe207","ssdeep":"","tlshash":"dec09b3d110413fedfd5359ddc05667d1811b1b1d1918cb04715d527605de144cf3801","size":134,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-04-16T20:56:43.812687Z","times_seen":11957,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/bi.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.70","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f2df2696dec627783d1eb7170feea2d","sha1":"37e2e42f854e007185c942897b2a55e5d06a52eb","sha256":"45d1b15de00ad4e8b8551c7144dde989af93e1c9f3f91c514e3dc99545ef0ebd","sha512":"98e561b81de15c6d0f7269a0608f3c8a42ada04b6941bbe54933d75875b0fad3a708025a085f950a45bbb18ee8859d9918144b56f58f30969e36d93b0b786183","ssdeep":"192:p3osvtOztEOzGSC6npKyxtuyMYeUYK7r62Fii4zTd4/iiL/u:p3VOt/1pKEheUFrCDzTd4/iaW","tlshash":"45f1f9fa758231a4996794a1c5afe61fb6387a15360f8c50c07af5823c78dcb9037e6c","size":7702,"data":"","first_seen":"2025-11-12T10:23:36.745664Z","last_seen":"2026-02-09T11:49:45.468172Z","times_seen":349,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-fc.com/creatives/native/native.min.js?v=5.1","fqdn":"cdn-fc.com","domain":"cdn-fc.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"19c5c52051e21a28734a741b7a193778","sha1":"0e0bb3d82ad35cd8fe2e598af684e6ef9d7dc753","sha256":"a8455faca19605edac1444e10992f037087aa3909c3cccc0ea18ea44ba4c0ff4","sha512":"de77df06b77d1ab2aa9e3ffcb7807dea6623aa94dd2109ad9094aea6d4f2adb6a62465e2ea7a151ec9abd3629bc1bd48609f6d1671f74a8ded1b72cf77900d01","ssdeep":"","tlshash":"c961d7c5d2c49933073532cf4953a675f67c8f06beaa8c50a60b4b8a8e15e458b17fa4","size":3248,"data":"","first_seen":"2025-12-18T11:49:00.846008Z","last_seen":"2026-04-16T18:41:19.866585Z","times_seen":525,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=1567158389\u0026w=300\u0026h=250\u0026id=1433671","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"d5c96eb52a1711f3a2950348f2d115f9","sha1":"c2477218c9a9fd31c0e09166892f83381f5e0e26","sha256":"a65dc9d6d0e097cf39657dfb89d3deea54548c6b59805088214fe5622e8bec61","sha512":"3f9b89c57906a121dc5933b94b73efe961d28148e1878b50c809df9a24061b30d0406b1c97e852b7676151eacf1b4206b7c2cc9c2094271c0bf089611c1a569f","ssdeep":"","tlshash":"dfb0125867953032530211e240094c585b3e08f1c4e05cd6805ad87817f3c2273583dc","size":102,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-16T13:49:02.51968Z","times_seen":5951,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=1567158389\u0026w=300\u0026h=250\u0026id=1433671","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"5c452c885f0211e6f86a8025ffed6801","sha1":"45fc7697f8759fd1fd3fc494e06b4fb164917be1","sha256":"866857ca3216e90ef194ffb8b1ff66d7a1f8147a948c649d81595ac2591aca6c","sha512":"164653be411d0edc3572b2fdf6e898e261d1588dd8b2756f138b277f0340e1e4342534f6157e5738276ae910e0c979cdb309e2de59ac499400dc99f6558e14b8","ssdeep":"","tlshash":"919002a5d042504089db66b0872b1845043010752ec4ed9010c4b5d1585a5a51b454fd","size":54,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-03T02:26:01.803116Z","times_seen":5564,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/scripts/ars.min.js","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ce0fa9ff43f3e0ef0f94a4c850d18a5","sha1":"b057ebbbe39dfbb1cf8faab58c2f51759267167d","sha256":"bb91fb256ba4a5bdf280ef71861cadbf247c777f24ba75a4d3880f1f50916942","sha512":"aa6db0adcdcf9c0e293755e4016c33859e0ddc04870123fe7b89aaf0981b0cb1a11d05eb6b4a7b10d4dd997a14ed74725b01ee96920ff37aaa30c8d5fc173f48","ssdeep":"3072:/JBpGHlkl2DgRca+pDU9v8cnWM50Vz9+TG46VbzRht08LfD:/JBpwlkl2DgRca+pA9v8cnWM2Vz9+TG5","tlshash":"01d3d79c7320b1a556e72287d2a9c651e3b51840b809d4e471b90cab2c7dd8c13eeffe","size":139895,"data":"","first_seen":"2023-10-16T17:48:40Z","last_seen":"2026-04-12T14:48:43.580152Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=vgrVQ_vuRFRxeSWfjKPOnXitlaqqtsNempNBquKydHa58W6jrz4DRT3LrKFReABeBCRRzNgyS2-JbSql0ZKsCnQ5QkAcATjTV6uD-o8DY7mwtDU_gUIDRUi","fqdn":"cdn-fc.com","domain":"cdn-fc.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7af7effa0ae650554ef6c4175c96ba96","sha1":"0e6deba4632dd93cfd73f3a91a0f127e443f0a3f","sha256":"41cf9eb04f53419e890110ecb6ac27738c07cc05430994b9e06e149b9ff9c2d2","sha512":"4179a29cfaaba977d6392c43112154e7a40817d65be82ebaff2be0f73ff4b71137d195fabd90b465f1b4d46f693e63c2e419ff67f2eb38278d483fbd55482394","ssdeep":"192:GZelu0vJqFFwMqYbpoJ2ZQkMglAD8NKICgfv7FuJuzvLQ9j2UVEJeZI2I9ez46ZH:GMlu0ywxYbpoJTk1lA8NKICgfpuJubLU","tlshash":"8c227554ede89036227bd0c776f72fdaaffc3141e8610a40b6ac81ea07e9d85f443965","size":10305,"data":"","first_seen":"2025-12-29T22:00:57.624954Z","last_seen":"2026-01-12T09:18:23.323537Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=1567158389\u0026w=300\u0026h=250\u0026id=1433671","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"225e21c7e2bf1b5238d7138335602ce3","sha1":"1f018c8954063352ba37ce827019b1cee535337b","sha256":"bff6e99d71258f7cc6e620b22752116e44e86545faa6d5c25d0ef2782d95f7f0","sha512":"33d4dd7fde48bc8824e9a9572f87d3ef8579510c278f0814a0e5b81e5780ed8dab2ecf9fe0068a01af21f56e4c1ef56d113a01ddd2871fa82204841778c741c6","ssdeep":"","tlshash":"4c9004fd50c01004c5571550157f1c4d407401f05ddc4cc1c045f5510cd3070111d5fc","size":42,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-03T02:26:01.798784Z","times_seen":5553,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"82d0458a2d54e0cfef6df99db4c62c1f","sha1":"9c8e3ba37e9d96c5b3cbc43385c55647031d59d4","sha256":"c0e6fd79877b8856de456aa4f1dfc35b59b3b3ee8aa70c04cfb54be6d38a082c","sha512":"06a41a104ea9b841176332425cf5cd745b8fb2db0148a0fef6b57a801f9715777789bd4eb31ca15b9c638fcceebd734508fe82fb73d2474e9b51906613efdcf8","ssdeep":"","tlshash":"a5e02b4d000445228802f12d50e7194316188d07af86bca937dc5b605f1e01f42f7eae","size":312,"data":"","first_seen":"2025-10-13T00:01:01.260852Z","last_seen":"2026-04-12T14:48:43.720858Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#238","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"25c37d43745e1bb0c4983c87ac8f428a","sha1":"e0a6ddfc2dfc7c77b3d27921b344e1c1950715e1","sha256":"53c07a142d50ac35477f49df69ce186ef2d8568782aa6316f7c3ca5aec7a29ec","sha512":"b85e41419db7578eb5e29a95df9a1d2ae43a0da2b954902c531a4d584cd5cdd1a7f87ad8ddcf8d95b3a9f088b0216f8f0d45b229939c9598f3383cf646d7dea9","ssdeep":"","tlshash":"1331567837865c7346c9f159fb1e9715b9f949772149e0124408dcdc3ca4e164747af4","size":1574,"data":"","first_seen":"2025-07-28T21:31:50.383085Z","last_seen":"2026-04-16T20:52:26.51448Z","times_seen":1075,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=1567158389\u0026w=300\u0026h=250\u0026id=1433671","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"034d21c266d82b1579998cc036512358","sha1":"18502599f21b6fba79982d8801f2525b2fd3b988","sha256":"cfe1df1650cf9e5565b4d99de32961d73acedf09e4445d80ab2552aed9c8bd83","sha512":"dd0d92326aaa84f76da1b3ce77263e5c2bdbd070a479d049dcf317e74552449b4ea07f73ef2346f81de9706ec798de79771392eece35bdde0261bd04b93103a0","ssdeep":"","tlshash":"5ab092a7a1ee90894fab51d910c35481562a97263898868128b099a49e31cb0d63aadc","size":114,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-16T13:49:02.522391Z","times_seen":5952,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"de7507ad26c6c904109c87dd5dfac288","sha1":"952cae1ce6ce1e74b010b31b4357424c12a5960c","sha256":"09f81a5c463b570b389ce0b118a29bf489353d0ae7d47eefee9b9e7b703e0e02","sha512":"bf1e05b722c1990f20aba1abe8aa7bedeb660957e0adc012e757cfa9cd9b4d13b39d5f7d0688bc341f7d630b28c160b3e22dacc0ac0f9f37ed22230e6ffe68b1","ssdeep":"","tlshash":"fba002353403501e20265c517d266a0cf84e9475e198345707070470d0e3c4b5d004c7","size":59,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-04-16T20:56:43.813876Z","times_seen":11775,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/bi.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.70","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f2df2696dec627783d1eb7170feea2d","sha1":"37e2e42f854e007185c942897b2a55e5d06a52eb","sha256":"45d1b15de00ad4e8b8551c7144dde989af93e1c9f3f91c514e3dc99545ef0ebd","sha512":"98e561b81de15c6d0f7269a0608f3c8a42ada04b6941bbe54933d75875b0fad3a708025a085f950a45bbb18ee8859d9918144b56f58f30969e36d93b0b786183","ssdeep":"192:p3osvtOztEOzGSC6npKyxtuyMYeUYK7r62Fii4zTd4/iiL/u:p3VOt/1pKEheUFrCDzTd4/iaW","tlshash":"45f1f9fa758231a4996794a1c5afe61fb6387a15360f8c50c07af5823c78dcb9037e6c","size":7702,"data":"","first_seen":"2025-11-12T10:23:36.745664Z","last_seen":"2026-02-09T11:49:45.468172Z","times_seen":349,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#235","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"25c37d43745e1bb0c4983c87ac8f428a","sha1":"e0a6ddfc2dfc7c77b3d27921b344e1c1950715e1","sha256":"53c07a142d50ac35477f49df69ce186ef2d8568782aa6316f7c3ca5aec7a29ec","sha512":"b85e41419db7578eb5e29a95df9a1d2ae43a0da2b954902c531a4d584cd5cdd1a7f87ad8ddcf8d95b3a9f088b0216f8f0d45b229939c9598f3383cf646d7dea9","ssdeep":"","tlshash":"1331567837865c7346c9f159fb1e9715b9f949772149e0124408dcdc3ca4e164747af4","size":1574,"data":"","first_seen":"2025-07-28T21:31:50.383085Z","last_seen":"2026-04-16T20:52:26.51448Z","times_seen":1075,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=1567158389\u0026w=300\u0026h=250\u0026id=1433671","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fc9686f3967ae1d906ff602c496966bb","sha1":"e3442cfdc3a2e2bf5695047f0fa5ef98c746fa7b","sha256":"a65feb9ba129cf081f77467d24f9d3b40020c0817b8125dbe1787ed5663734be","sha512":"707a37434e52910bf1ba8477554c6c853b5db56b664223f3fc5c7c33632d65c0ce97a9887779dd7f089fcb458cc051c38d0357e355714aa46a4d81b18d9de7aa","ssdeep":"","tlshash":"a22161e6c65114380126c26d61bf78cebe27922efa40c448ff7da020bb9c2b7547549d","size":1384,"data":"","first_seen":"2025-06-25T19:13:05.843452Z","last_seen":"2026-04-16T13:49:02.511248Z","times_seen":729,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pxl-eu.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XMkEGGBg4xOMy0sGGQTAsaOXKUaYGDpJgWOcLUkCEjBwwxOQ7CEPEwTJ0xGW3gkBFjxo0aMFrEkEEjzEmiNGDSMGOjRZkaYszAyIGjTIwbOcTwhEjGDsUZRmHIeAinjliGMWAY7QkHzkKUXx_OgTNRhwwYR2vMcChiTBu7DGHQGGyzJxkzFB-KceNmYY0cG2UIfdjGDUaGmWGw7fz5q4waFUXUiZERDR06cOboePFiDBk3LcyMcTHmTZvacgrSSWOnzJwXddwQRzgnDJsXbsIML_7ix5w0esr0mAEDBp7TMLjU6a65Dp02X8aEORwmzRk3Pdq7aIMni3jyNsyj7-2GTpn-PcxRxxlnGOcfGV_ckQYZBdJxn1o2wBGcHWmUcccXbbxxUA9ovFGcHA9qNkcMPdhxhhxWRPGFHXVIYYQUeJQxxRVmqLEEFE-4gUUadLARRhxx0DGHE2Uc5oQQcdSxRB5kICETDlfYoIYcetBAhBRUzMCEHEu8WEYQQpQhxBBSSKGHE2fkMYUMLSghxhRxsAGDFkvMMYQbUdQQxRpBjBEEFWpQYUV-RLTwBg5EZHFDG3fQQUQVX5xRRRJXVpHGWGT41toYbKQRWwtwvCGHG7yZQcZY6vW1xQwxdCEZZDrA4EJ3hMlhB2LcPVRHHZfqANEMNNwQUg0rCWZGDS3UYIZRMOUwFUtiHBTTDWKEIdQMY3maUQ4xuGCTCzTI4EJDNIwlxxfa-sqtt7KGO24N5eoaRkZNvKFHGmz4-EINs4KAwhVpuJHpHXOA4AQVIMQ16w4gAOyGDTQwjAfEDNsKGg2zpgDCEWWMscYbL_wVFwxxxQCCEWkEZ8YbeLxQFMY7PTQGUL468cRYoqZHswg2j8XGzkU4gWkZdnwRHBsU1XCDsDMI1d1Dcry30Gk43PDQQUWLIcdCOOBwNdEYajh1S6mRIccbC83w0BsK6UADW2fjkYdlUH8hIctz60AY1l_QoUdGMYugcmuvxTbbC2hw6ukcoIpK6himvjDWHRnFxdRYaFQuAw6Bz2FrRmfTIZ2oLSTHY7I3uECGDDh7bpZfYAkVg2lqi0DGzgd9sfpY51F0g9MyHIUDYeexztDvnAdfw_CyO2a0cXB8IZ3vwAtPGNjOISTkQqtWBKyrEInRl-1lmOETGxOx9fNCohX2WftjZK7DFiKMZf9D99eP__7695-__V3ogwICAg%3D%3D\u0026s=885b71bc3a5ade450cd53ca4947dd98f737d8f6eeaf4902d56687c87d9d555e91768027585\u0026w=t\u0026r=1\u0026d=850\u0026priv=true","fqdn":"pxl-eu.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"148.251.4.157","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"0959ba36d476b6dc1994ba3c678b07c4","sha1":"d30b94da72daa02766965206a85b7e0356375f5e","sha256":"897410b87e27e3dfba3a7d6caab315a5e69cc941bb96d91fc74878a9b051843a","sha512":"843f2144ba55d59ba3e62053dc018f4f6d51ae482c741cb4dc85f7af3375b77c75f66e2e73ff55ff7fe3b79314e7ba28a92fddec1ba17839ba33b34792bfce22","ssdeep":"","tlshash":"ea70008030b22e88e022000802a08000000288220a8032b0020800a80002202ca3c30a","size":24,"data":"","first_seen":"2023-03-07T01:03:23Z","last_seen":"2026-04-16T20:52:26.472062Z","times_seen":6856,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bd931315f9ec922d23220a34a506421","sha1":"92eb331739d51c65226b5fdb07ec2d74924f200f","sha256":"28f33740f0a341c823243413c7780d92e7ae39254641174a86a4f51ac805b576","sha512":"26bb36ab577ba2b6486f482177e31992c81c79322070edc9d55af10d7ab8f3e1b9dccc89f7c925a47a68e464f522736c0e64d3d7e4acaa016745e0104bddb167","ssdeep":"3072:cWYjf7+28VOk2DG2cUMaElwnRlqI1fsBHisiEolY4o/CXMXpo:U+28VOk262lElwnRjfs4sXhpo","tlshash":"96045c993792307441d3a11daaff53093371506ab80f4884bb4dd8a427adeea51a3ffd","size":185387,"data":"","first_seen":"2025-12-11T15:18:11.624048Z","last_seen":"2026-01-15T17:17:43.902034Z","times_seen":1441,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=1567158389\u0026w=300\u0026h=250\u0026id=1433671","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"be5d9ebf54fefc6e38f077cef4bd6caa","sha1":"26a1f34155b4aa54100a69c778dc0b4be5c1a500","sha256":"00e0eac098edfd61cca6fe77139f78b66926ce917eb603a36311c4b64dab6c73","sha512":"1309dc64e26ba7e55efec514e1c4ca8654062c8f69ec54a04e51fd1fe9a398839e4f556ed24989e68383a0ca766bf6fd23288340b2c0212e2c2d4eb30e49f9ad","ssdeep":"","tlshash":"1fa01281e185519c11f321e810855dc070315820304944c04044d0124416c1aa70d028","size":84,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-16T19:33:04.048382Z","times_seen":5963,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=1567158389\u0026w=300\u0026h=250\u0026id=1433671","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"960fcd0655ec535371ba62b2f4dc6d52","sha1":"165a8f9dfc2cc679a818b292d7bcd20965dc9c8e","sha256":"e1e15579d2de91dfe6f5e8fec26a44bd3ced2fb71344ac6b32bbe24e514a3c79","sha512":"53b620c4cf923de7c1274041a5b3e76e2c81acc5284b5e5ea70d5c8aef25398286f480abaf2eeedde1f78b2387526abdd0e0619297294fcd0d68f8b2565f84e9","ssdeep":"","tlshash":"28800447d050145555533dd0141f1c44005001711c404c4004c4d4550c71c313507d5c","size":38,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-03T02:26:01.806721Z","times_seen":5565,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bd931315f9ec922d23220a34a506421","sha1":"92eb331739d51c65226b5fdb07ec2d74924f200f","sha256":"28f33740f0a341c823243413c7780d92e7ae39254641174a86a4f51ac805b576","sha512":"26bb36ab577ba2b6486f482177e31992c81c79322070edc9d55af10d7ab8f3e1b9dccc89f7c925a47a68e464f522736c0e64d3d7e4acaa016745e0104bddb167","ssdeep":"3072:cWYjf7+28VOk2DG2cUMaElwnRlqI1fsBHisiEolY4o/CXMXpo:U+28VOk262lElwnRjfs4sXhpo","tlshash":"96045c993792307441d3a11daaff53093371506ab80f4884bb4dd8a427adeea51a3ffd","size":185387,"data":"","first_seen":"2025-12-11T15:18:11.624048Z","last_seen":"2026-01-15T17:17:43.902034Z","times_seen":1441,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#237","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7d497857f849c6d9050aa4812e08151","sha1":"78cd66bfc8ee71a111d502e41b22e5813476a279","sha256":"7b0d478ed330e8c7764d6640149f05db58e4f1c44979e106ea00a03496e6ad2c","sha512":"43e35a20dd65c4c63c5ae2f35e2d562ac2d5f8fc96808a2326846fe13b6706f1ee7633e5fc82709fbccb7c952d6d1685546f2278b5e10191ef4abc9b00503753","ssdeep":"","tlshash":"3d51c94fc7a79db624016876cd59e2a1c0de8b853e15a1e699cfb9b1e03463cca0bc47","size":2774,"data":"","first_seen":"2026-01-10T06:47:19.781353Z","last_seen":"2026-01-10T06:47:19.781353Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"ca791ff8e5f53fb6fc7e1d4aac7c2ea1","sha1":"3fc9c7c5a4c8e546b8156c60f4944b6362483e1f","sha256":"fb51a896558ee913ae9f7d496db1c878943822d430547206511fcb94f522ab12","sha512":"9507f50d80eaebdb06c5b1b0c9bee52ccd355d1407f9acdacceee8735870a64ba8ed31a034e3a27bf1716769bcb35977a33b863c22687bffc94673fdba25d953","ssdeep":"","tlshash":"da600000000000000fc000000c0c0300c300fcc00300c00000c00000cc30c330c000cc","size":12,"data":"","first_seen":"2026-01-10T06:47:19.782261Z","last_seen":"2026-01-10T06:47:19.782261Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=1567158389\u0026w=300\u0026h=250\u0026id=1433671","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d53b967009f4978749d88accd62fe304","sha1":"8307659ee5d8d4e46e827446f0f8ca26a035c79b","sha256":"a840b2aa0a352feaba49d27012f2e891b9ea44c0bd391380899e7cc9e20af065","sha512":"9c308a74cd7028f2bd44c85e98e5170771022bdf277fd796cf83f282f32953a64870887eba2102c69c587c1178f87d930201f4da48977d7a2e92e1d991d7a11e","ssdeep":"","tlshash":"cff0ac65965b01300f6910db1ebf97fc306824325500e4033ec8e915af68faf6d26cc1","size":603,"data":"","first_seen":"2025-06-01T17:18:11.596999Z","last_seen":"2026-04-16T13:49:02.517114Z","times_seen":679,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=1567158389\u0026w=300\u0026h=250\u0026id=1433671","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"38bcc383b6fbba7928656b9040b282e4","sha1":"b2c4afbeba79d71db5df9e73f68b6bec4d2cd6d0","sha256":"07027ba340ef65872b6207efe05665f64bc5338b873ab256fd46a953f79f22df","sha512":"41cb43fc48199e9eba38e9df984023ddf78b9975efdfbb12c99f25cc08ee3ed1bae4c9c2a90020363ccc9d475cf49675ac38f1a3ae8bde344a1977fee373434d","ssdeep":"","tlshash":"6890025765d1a1115a6b72e1403b9d4a041641a194545850604c9c56585bc61134d8bd","size":52,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-16T13:49:02.520351Z","times_seen":5959,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/backup.v2.js?spot=bd16f693d3144ae0b0b2ce10c53c7d0a\u0026xu=00cffe1d2ade5a87\u0026count=3\u0026w=1280\u0026h=1024\u0026keywords=%7B%20hardcore%20%7D%2CHCLIPS-PORN%20%3A%20HD%20XXX%20CLIPS%20VIDEO%20TUBE!\u0026adtype=image\u0026tz=0\u0026callback=callback_vabaW","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.70","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4073ae4429669edf2b941fae7f12a135","sha1":"1704aec3757f7240b7e7bce529585b191491514d","sha256":"22c6bc9447a3404373c08203c6f9af463f97e5ab439714a854033c501761adc4","sha512":"5c7c34e0d6847c036bddbad6d12be3f73c9424a4fdbf7d7a4265a0208dcb24831c863de4ac3aad386e4028d202f52ac4b210d8143e6021c4576a049fb07b6b85","ssdeep":"192:pJJV/1ej/9CHQ8en0ecZer6eHB8eHzeAheuQljnanE1Isy6qIZ:pZ/1ej/9CHJen0ecZer6eHWeHzeAheuy","tlshash":"b2129503ca2f241bbc1c35846b8a7a45a59011633cb5cdb6c2f3497bc9f9f9741e3a62","size":9476,"data":"","first_seen":"2026-01-10T06:47:19.743107Z","last_seen":"2026-01-21T11:16:46.909957Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=it7_v9mINZsY2FHHRd8f7idZL-DxISKYUEWDNYzup2TzCEm0_qr7AdVAPKWiR3qPIzth_TWtgQ1ya3AKUJlgD5NNIe-7ua_9YB6L9C6SgJXZhEA_gUIDRUi","fqdn":"cdn-fc.com","domain":"cdn-fc.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7af7effa0ae650554ef6c4175c96ba96","sha1":"0e6deba4632dd93cfd73f3a91a0f127e443f0a3f","sha256":"41cf9eb04f53419e890110ecb6ac27738c07cc05430994b9e06e149b9ff9c2d2","sha512":"4179a29cfaaba977d6392c43112154e7a40817d65be82ebaff2be0f73ff4b71137d195fabd90b465f1b4d46f693e63c2e419ff67f2eb38278d483fbd55482394","ssdeep":"192:GZelu0vJqFFwMqYbpoJ2ZQkMglAD8NKICgfv7FuJuzvLQ9j2UVEJeZI2I9ez46ZH:GMlu0ywxYbpoJTk1lA8NKICgfpuJubLU","tlshash":"8c227554ede89036227bd0c776f72fdaaffc3141e8610a40b6ac81ea07e9d85f443965","size":10305,"data":"","first_seen":"2025-12-29T22:00:57.624954Z","last_seen":"2026-01-12T09:18:23.323537Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=1567158389\u0026w=300\u0026h=250\u0026id=1433671","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"9daba20cc0b62ef713a5a7f45045325f","sha1":"cc9083b0d3694a975ce99e281de797d4bf228115","sha256":"df290d8a6019595f4629829ff425382ab36241c211436f20e6e86a1a55bbe91e","sha512":"48dc2041be342c744bf6b781f483f08cf406b69eca6b850bdc37ede116ff5bcb7f328a7d1f2258245c79864bf07349875bda3a02a227ddff1c1031feac0cfa0e","ssdeep":"","tlshash":"67b09279678070e6e817231c2623ab804c3002b13849fe34901c9cc5aad9413020a019","size":116,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-16T19:33:04.04993Z","times_seen":5964,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=1567158389\u0026w=300\u0026h=250\u0026id=1433671","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"13c2dc77197ff1f368bd40a4c5f184b5","sha1":"d47b211e340da56424100c50d59d0c1038866763","sha256":"187b184b8a19450a4410b4c5d11d7ac9cd096c27983a55bf2c97048e0845380d","sha512":"e6e77b8623f06f3c925679405841da6e436d6e7bfd4355f90f4211bbb501eea546f9a79d640625d1d59d532c4258b760d0e84493fa14a3acdf9cc33da5b27f72","ssdeep":"","tlshash":"9aa022fe22c320082b022080803e2cea0e2202fa088acc80c2a0bc30882c83ca2080fc","size":70,"data":"","first_seen":"2023-06-14T15:24:26Z","last_seen":"2026-04-03T02:26:01.801544Z","times_seen":4589,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=1567158389\u0026w=300\u0026h=250\u0026id=1433671","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"1062fa6ded0164e25b5b275dfb895363","sha1":"fc336d7708976831ca87a805625ad1e937f72d36","sha256":"c69c01ecbd87b13f25156d07620fc3a3e3ec42b093e63fa99ccea511122faac9","sha512":"b7cd7a7b7f6eddc4ad5f62be3dfa9bbf48a67d0ff73e0501c237938d17e7431e68021dbb8b0f9db57895cba8ab6abf7b9dd9e85568b723ecdb9941cda1098913","ssdeep":"","tlshash":"439002e5a1c27010865251a540aa6985613954605499c94440b09762196b4b0a2e949c","size":53,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-03T02:26:01.805737Z","times_seen":5558,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"de7507ad26c6c904109c87dd5dfac288","sha1":"952cae1ce6ce1e74b010b31b4357424c12a5960c","sha256":"09f81a5c463b570b389ce0b118a29bf489353d0ae7d47eefee9b9e7b703e0e02","sha512":"bf1e05b722c1990f20aba1abe8aa7bedeb660957e0adc012e757cfa9cd9b4d13b39d5f7d0688bc341f7d630b28c160b3e22dacc0ac0f9f37ed22230e6ffe68b1","ssdeep":"","tlshash":"fba002353403501e20265c517d266a0cf84e9475e198345707070470d0e3c4b5d004c7","size":59,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-04-16T20:56:43.813876Z","times_seen":11775,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#240","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a29aa20b1e8aff35f06015cab6ac567","sha1":"99dc9c065b8f5400d428008848d541f443001908","sha256":"b24eee9f499aed80702716c22bf83e2efbfdbfad9ce48080f2e4f180ff21f251","sha512":"c216141cbd3e197d38c1558dd6b2597a9d487318881c24f5ec6de818977dee6b557fd690a56f7aa16c5cf1b84da51bd1f10f8c1f128e50dd8bf0336eb41d09bd","ssdeep":"","tlshash":"b85118ca42d76a3d7385413b94386a2ce3e18c07dab8b8f4a8f1705765f7c4b642b05d","size":2772,"data":"","first_seen":"2026-01-10T06:47:19.785461Z","last_seen":"2026-01-10T06:47:19.785461Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#236","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc0c277ac8f506dc792b78d9caffc082","sha1":"321715f2eca268dd472751cf1d5dc89d12b301aa","sha256":"8caaa8218268b985d5def04f95ce3d61d8138a5b45b005a3effa6616d9a0f576","sha512":"a5fa56b75167af121f804243605f03776d09fd7383d5315f082c7c50f2074e27bb009270c0e632e048c4a9ad46d7a6eadad693bca5e2d5b05f7caa80efc66a8a","ssdeep":"","tlshash":"8441b74b3693283535db1c775cf7c3d4711449926841a14244cbfe32e138eb9ea2bec1","size":2317,"data":"","first_seen":"2026-01-10T06:47:19.786263Z","last_seen":"2026-01-10T06:47:19.786263Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-fc.com/creatives/native/native.min.js?v=5.1","fqdn":"cdn-fc.com","domain":"cdn-fc.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"19c5c52051e21a28734a741b7a193778","sha1":"0e0bb3d82ad35cd8fe2e598af684e6ef9d7dc753","sha256":"a8455faca19605edac1444e10992f037087aa3909c3cccc0ea18ea44ba4c0ff4","sha512":"de77df06b77d1ab2aa9e3ffcb7807dea6623aa94dd2109ad9094aea6d4f2adb6a62465e2ea7a151ec9abd3629bc1bd48609f6d1671f74a8ded1b72cf77900d01","ssdeep":"","tlshash":"c961d7c5d2c49933073532cf4953a675f67c8f06beaa8c50a60b4b8a8e15e458b17fa4","size":3248,"data":"","first_seen":"2025-12-18T11:49:00.846008Z","last_seen":"2026-04-16T18:41:19.866585Z","times_seen":525,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/bi.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.70","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f2df2696dec627783d1eb7170feea2d","sha1":"37e2e42f854e007185c942897b2a55e5d06a52eb","sha256":"45d1b15de00ad4e8b8551c7144dde989af93e1c9f3f91c514e3dc99545ef0ebd","sha512":"98e561b81de15c6d0f7269a0608f3c8a42ada04b6941bbe54933d75875b0fad3a708025a085f950a45bbb18ee8859d9918144b56f58f30969e36d93b0b786183","ssdeep":"192:p3osvtOztEOzGSC6npKyxtuyMYeUYK7r62Fii4zTd4/iiL/u:p3VOt/1pKEheUFrCDzTd4/iaW","tlshash":"45f1f9fa758231a4996794a1c5afe61fb6387a15360f8c50c07af5823c78dcb9037e6c","size":7702,"data":"","first_seen":"2025-11-12T10:23:36.745664Z","last_seen":"2026-02-09T11:49:45.468172Z","times_seen":349,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpadmngr.com/static/adManager.js","fqdn":"js.wpadmngr.com","domain":"wpadmngr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf20c44981795047ce2c610a2100a35a","sha1":"24c225c700d3f4208417651f6779de9758cd90a1","sha256":"0ec0d01651f974e70dc3c7d4cc50599dbd3a818863b7011ef052c3a0641dc161","sha512":"97612ed9de3cfb245c7e6a70420ca817b99f7b6db0dae1395fbc16c1eef8e4cb4ff993954fbddc4917563840baeef269a9edea324b06e0131fc2e2e833266e7a","ssdeep":"1536:O18MdnC5OPz8QP9r2RcZSgtK8sBggHhO12FoX50FtQySd8uj6DzKEVKf7lbe0etc:mFSGSgtqZXqd8uODG0K5y0etsz","tlshash":"c8e34adcb2d2b07407e75099d83f1206b73a1a16b80c9058f6a6e9c17878ddb5237f7a","size":147733,"data":"","first_seen":"2025-12-24T08:41:20.196676Z","last_seen":"2026-01-15T08:09:34.935655Z","times_seen":438,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-fc.com/creatives/native/native.min.js?v=5.1","fqdn":"cdn-fc.com","domain":"cdn-fc.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"19c5c52051e21a28734a741b7a193778","sha1":"0e0bb3d82ad35cd8fe2e598af684e6ef9d7dc753","sha256":"a8455faca19605edac1444e10992f037087aa3909c3cccc0ea18ea44ba4c0ff4","sha512":"de77df06b77d1ab2aa9e3ffcb7807dea6623aa94dd2109ad9094aea6d4f2adb6a62465e2ea7a151ec9abd3629bc1bd48609f6d1671f74a8ded1b72cf77900d01","ssdeep":"","tlshash":"c961d7c5d2c49933073532cf4953a675f67c8f06beaa8c50a60b4b8a8e15e458b17fa4","size":3248,"data":"","first_seen":"2025-12-18T11:49:00.846008Z","last_seen":"2026-04-16T18:41:19.866585Z","times_seen":525,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=tpZT2Wvf2_df9BAhCONE6OAxGRnrPPtZ69jjd1ix8uT89g5RkUZ7ZXXevlAflAxJkC5VxHxjBV87vsOxVIGGaIQ83PSus_2fkT6MwmnTb1ZytaQ_gUIDRUi","fqdn":"cdn-fc.com","domain":"cdn-fc.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7af7effa0ae650554ef6c4175c96ba96","sha1":"0e6deba4632dd93cfd73f3a91a0f127e443f0a3f","sha256":"41cf9eb04f53419e890110ecb6ac27738c07cc05430994b9e06e149b9ff9c2d2","sha512":"4179a29cfaaba977d6392c43112154e7a40817d65be82ebaff2be0f73ff4b71137d195fabd90b465f1b4d46f693e63c2e419ff67f2eb38278d483fbd55482394","ssdeep":"192:GZelu0vJqFFwMqYbpoJ2ZQkMglAD8NKICgfv7FuJuzvLQ9j2UVEJeZI2I9ez46ZH:GMlu0ywxYbpoJTk1lA8NKICgfpuJubLU","tlshash":"8c227554ede89036227bd0c776f72fdaaffc3141e8610a40b6ac81ea07e9d85f443965","size":10305,"data":"","first_seen":"2025-12-29T22:00:57.624954Z","last_seen":"2026-01-12T09:18:23.323537Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.cabnnr.com/banner-admanager/iframe-scripts.js","fqdn":"js.cabnnr.com","domain":"cabnnr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"89433f6864b61ee5dc3398a327f35069","sha1":"14d840847e8154f6ec2931a9d90126ed5c91fdb9","sha256":"587fc8a495b9e66cfaa0092ac5c3ebe3aeff08fee83fab4be94dc4ae09c982cb","sha512":"96863711edb791ffefa6188b2077dc1db9e270a7e27874140740a0820481ade585e20765f42f6df33afb77e5b1d20db281bfa9541f2be87cf97481de257cbc6a","ssdeep":"","tlshash":"dfe0682821a067bc006f266ef29a5aacf93801a6704a040884b1488d7c3ed76a6f4f24","size":376,"data":"","first_seen":"2025-07-25T01:42:49.250588Z","last_seen":"2026-04-16T13:49:02.504761Z","times_seen":1593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/scripts/aqj.min.js","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c14a783dfeb3d238ccd3edd840d82ee","sha1":"ad886e472b3557f3dc7dfa2bc43468ab8d1cef5b","sha256":"80f04717f32ea0320c5e8618fbacedd1fee3a8775ad8292140a6113551d4b5b0","sha512":"fa3e021ca60a9adbe570c6565c7370727904c4396c23a4c519daf258d05fae3e17bfb7607a0ab6dfe2b7150a4ec1b6a95e6d49675291be5f6a4e5679ad78d858","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vN:DIh8GgP3hujzwbhd3XvSiDQ47GK/","tlshash":"6f9309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89500,"data":"","first_seen":"2023-03-07T01:06:20Z","last_seen":"2026-04-16T19:49:01.953575Z","times_seen":17227,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"de7507ad26c6c904109c87dd5dfac288","sha1":"952cae1ce6ce1e74b010b31b4357424c12a5960c","sha256":"09f81a5c463b570b389ce0b118a29bf489353d0ae7d47eefee9b9e7b703e0e02","sha512":"bf1e05b722c1990f20aba1abe8aa7bedeb660957e0adc012e757cfa9cd9b4d13b39d5f7d0688bc341f7d630b28c160b3e22dacc0ac0f9f37ed22230e6ffe68b1","ssdeep":"","tlshash":"fba002353403501e20265c517d266a0cf84e9475e198345707070470d0e3c4b5d004c7","size":59,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-04-16T20:56:43.813876Z","times_seen":11775,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"41eece0da217398b6f4d4ee2f01b6245","sha1":"72f2098b0520b07dd3c6874646c920a3d367a4e2","sha256":"62bba8c2295a14bb2d007a3f7f8730fd10cef7348a6474f3f832c99ca6795d35","sha512":"1009ef0076bfb735c9b40fa3b106c8de414943b27fd74cfd315265ad768592a9d3eaf408c2392269659fb5af26c32f454d8f8a86fe0044d5a0c46ef424ebe207","ssdeep":"","tlshash":"dec09b3d110413fedfd5359ddc05667d1811b1b1d1918cb04715d527605de144cf3801","size":134,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-04-16T20:56:43.812687Z","times_seen":11957,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#232","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"25c37d43745e1bb0c4983c87ac8f428a","sha1":"e0a6ddfc2dfc7c77b3d27921b344e1c1950715e1","sha256":"53c07a142d50ac35477f49df69ce186ef2d8568782aa6316f7c3ca5aec7a29ec","sha512":"b85e41419db7578eb5e29a95df9a1d2ae43a0da2b954902c531a4d584cd5cdd1a7f87ad8ddcf8d95b3a9f088b0216f8f0d45b229939c9598f3383cf646d7dea9","ssdeep":"","tlshash":"1331567837865c7346c9f159fb1e9715b9f949772149e0124408dcdc3ca4e164747af4","size":1574,"data":"","first_seen":"2025-07-28T21:31:50.383085Z","last_seen":"2026-04-16T20:52:26.51448Z","times_seen":1075,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#239","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ef153a992335628fcb8d2acb9226d4a","sha1":"4af049f9c12b9c6daaaea5b891cf386a0f2b033e","sha256":"8696668111450a2d6c3cd52ea0c27b981bd136c162ee1a13cdede8234c6478a9","sha512":"f6c415389a8a402e8b258b30110d26f9632be922afcf9eeb7182c70fe673cd6c7b3a8dd4c18133f5fd3de61900d1042cd2b1cadc5cb6ef0de4efc7cc2b7813c9","ssdeep":"","tlshash":"9941a58a35c3283c36db087b24f6d79c36604c638844a46144f5f827a1bad97f53bac4","size":2317,"data":"","first_seen":"2026-01-10T06:47:19.78708Z","last_seen":"2026-01-10T06:47:19.78708Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pxl-eu.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XAuDEGBo4bNcq0IJPDho0WNGKYmdFCjI0ZNFrcmGFjTA0xZmKUIYNjhoiHYeqMyUhmBowwNGjMEIMyTA6RNGTUiIkjh5kxLcbQECOjYBgYM2aMufETIhk7FMPegCHjIZw6YijGAHsDKBw4C2nkiFFXxBw4E3XI2FijxgyHIsa0wcsQhtIaOWAAJWOG4kMxbtwshDxDhgwbOB62cYORYefBbkeX5iu1oog6MTKioUMHzhwdL16MIeOmxVUXY9600S2nIJ00dsrMeVHHDXKEc8KweeEmzPHkL37MSaOnTA-jMPBIhcGlDgy2NurQafNlTJjFYdKccdMjvos2eLKUP_9ZPfvgbtBRRoA9zFHHGWcoJyAZX9yRBhkJ0rEfenAUZ0caZdzxRRtvHNQDGm8kJ8eEn80RQw9p0HHDF3bk0EYSTmgxRxYyGIEEElLwZMYND2rBRAtE4JHEFEtkUUURVxDhRBZ61AGHDFToMUQRbcDwRRxy3BAEGVYEAcUSV6QhxQxxQJGEHnSg8QUVV1wURQx5hDFDEEtUoQQbZxBRgxNOJCHSDXWE8UUOWQhhAxM5DGHDFGcogYUWaBQRxBdnVJEEEVJUkUZZZAgn2xhspGFbC3C8IYcbwJlBRlnuBbbFDDF0cVllOsDgwnmIyWEHY0Y9VEcdm-oAEUw34GBGSC0YdmyyK93QQg450GBGCziIcVAOYdwgRhig-fSQqBnt5UJkLkTlQkM0lCXHF-AKKy655qJbVqAZNfGGHmmwwUYYL9RwKwgohOlGp3fMAYITVIAw1607gCCwDTQ0jAfEDetqGg23pgDCEWWMscYbLww2FwxzxQCCEWkUZ8YbeLwQA0y3sjqUsE48UZap7c0sQs1lsaFzEU5wWoYdXxTHBkU13FAsTTic95Ac8y0k1UcPHUS0GHIshENoIli9YYdS42CDa2TI8cZCMzz0hkI60OCW2XjksdnTX1TIstw6IOY1HXpkBIO6ZdA6EG224fYCGqCKOgeppqI6hqovlHVHRnPJkO5DaFAuQ9NlzaFrRmbTYZ2pLTSXYgsku0CGDDd7jhZDn8WQw1o37FW1zgd9sXpZ61F0A2hsgYQDYuuxztDvTcsgfA025NCWWUUrB8cX1vkOvPI1DP_Q0NSzgRAdbL9aEUyyQiRGYF0HHhQbE7nl80KSJVZa_GNkrsMWIpSl_0P758____4LYP_014U-KCAg\u0026s=ce43d0076706cb001992fb7664692ad6814638d463cb945a6484968d4d640eb31768027585\u0026w=t\u0026r=1\u0026d=734\u0026priv=true","fqdn":"pxl-eu.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"148.251.4.157","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"0959ba36d476b6dc1994ba3c678b07c4","sha1":"d30b94da72daa02766965206a85b7e0356375f5e","sha256":"897410b87e27e3dfba3a7d6caab315a5e69cc941bb96d91fc74878a9b051843a","sha512":"843f2144ba55d59ba3e62053dc018f4f6d51ae482c741cb4dc85f7af3375b77c75f66e2e73ff55ff7fe3b79314e7ba28a92fddec1ba17839ba33b34792bfce22","ssdeep":"","tlshash":"ea70008030b22e88e022000802a08000000288220a8032b0020800a80002202ca3c30a","size":24,"data":"","first_seen":"2023-03-07T01:03:23Z","last_seen":"2026-04-16T20:52:26.472062Z","times_seen":6856,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=1567158389\u0026w=300\u0026h=250\u0026id=1433671","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"9fb507f661392bb18734a143229795e8","sha1":"004279a4f630424371fbe72b6c2c45ac86b59ddd","sha256":"e495c02fb62945e7a859af557a81c73673dde7789fa538536b9b8eb3958cf16f","sha512":"1c209d5ac784cc5f12d74cbc9a195349b1aee933077ec935720bfd1d38d6634b3e49552e96d1290bf351e298e37bf38886c8edf12a13409cd819ce6d271ce4ef","ssdeep":"","tlshash":"51b0127820e520d60d6311c920fb5b98e8a0523010204801c148cc7434f4d61401541c","size":91,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-16T19:33:04.042557Z","times_seen":5956,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/scripts/asf.js","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0191ea32bd357f18cdcdd82c739d754","sha1":"e9158d2a0035c4477cfc8ad1e462f6a1e3c7650e","sha256":"9a5d48b1ed565a6c36e5cbaa144ead8a89300a2cfb3c9777bab6fedae4425943","sha512":"75a7fe267bde393709fc822fdd5454f952d580ee8993c33bfb03ddb732b72b1217159d7c1337fcd9a195e794e051dc269e773a85bb0d4f1458f0269cde8440ce","ssdeep":"","tlshash":"7f517741f6ae7aa050bb212d8bf741443fad185f71099954fcec0cd91f213aea89270f","size":2706,"data":"","first_seen":"2023-10-16T17:48:40Z","last_seen":"2026-04-12T14:48:43.577565Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jcdn.tsyndicate.com/bd16f693d3144ae0b0b2ce10c53c7d0a.js","fqdn":"jcdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.70","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-16T21:13:50.169784Z","times_seen":580403,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"de7507ad26c6c904109c87dd5dfac288","sha1":"952cae1ce6ce1e74b010b31b4357424c12a5960c","sha256":"09f81a5c463b570b389ce0b118a29bf489353d0ae7d47eefee9b9e7b703e0e02","sha512":"bf1e05b722c1990f20aba1abe8aa7bedeb660957e0adc012e757cfa9cd9b4d13b39d5f7d0688bc341f7d630b28c160b3e22dacc0ac0f9f37ed22230e6ffe68b1","ssdeep":"","tlshash":"fba002353403501e20265c517d266a0cf84e9475e198345707070470d0e3c4b5d004c7","size":59,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-04-16T20:56:43.813876Z","times_seen":11775,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpushsdk.com/skins/nmain.m.js","fqdn":"js.wpushsdk.com","domain":"wpushsdk.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc975e803629b2688e2e36525ce024c9","sha1":"6ac03bb75a489cd0a49fb67b5b53513d61b0d1a1","sha256":"e2b93e3762332c11ea5ea691614926d6bd50ad11e162434699fc56eca9405e5d","sha512":"10efae7e45a6a456818e53fc52ab7ae9b1f550c4ca6adb3ec1e9d40e66cf0b9671e4e68ef8a699339e615d5161b38b3e794e6c782012d72e8b632f4169abb20b","ssdeep":"12288:bO6w3S6RowOCoO68XFxz9CuIgoQfKjbTxoWbPOSbvVTQBUfRLsddHxchOXEJOOzu:bOxVqufz9CNgoRbxdZUWZW","tlshash":"66d45a3132911139b0bfc8c6aa66278d336cf247e9170f55f96faaa483dbd54f625380","size":604874,"data":"","first_seen":"2025-12-11T16:15:42.358852Z","last_seen":"2026-01-29T09:34:31.702939Z","times_seen":800,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtbrenab.net/get/?go=1\u0026data=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","fqdn":"rtbrenab.net","domain":"rtbrenab.net","tld":"net"},"ip":{"addr":"157.90.85.57","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"e0bb4905296d8aee3a521a063c2c3433","sha1":"c40388a9a20bdb205a3e9c185fef3f3b9a906e20","sha256":"c85cee568d1b86908f39f6254ea817df5e13a25b3764595f7eef53ea9c3793bc","sha512":"82c9d3bcae6c5313eece3925d3270a0d8d888cebe6e218f2db81ef7ce5e7386c41d9a90997fe2ebb3066beeb70ca615800031620b82005750bf784b2c4bddd20","ssdeep":"96:D8AEO0RjSBbpQkD1X12XF0RjSBbpQkD1X12Xgh0RjSBbpQkD1X12XT0RjSBbpQk1:nmSpNJsFmSpNJs4mSpNJsTmSpNJs/y","tlshash":"fc12c9c4dd1ac93655d8c212917d752ca6ac778395cc6c98fabcc335cb743ae225ae0c","size":9265,"data":"","first_seen":"2026-01-10T06:47:19.788339Z","last_seen":"2026-01-10T06:47:19.788339Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=1567158389\u0026w=300\u0026h=250\u0026id=1433671","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"63116ca3bdfc7ef0c9a09579faa8cb15","sha1":"d89ca9be8c6cead2d2a12f3e9a79edc27de2a6cc","sha256":"f670b2247c591e2af8adc9e0b31c64592554871c81deb0ccc4e7246f1ac4a5e2","sha512":"25de0033af0ccfafee7d4e9c99231c8bfc6004b082a03158be40c3536513493c4d8f7cfab57cf6c1a7e807ff4fe367c327f34bd9934978c352d294159e570a18","ssdeep":"","tlshash":"b7b0126612ce000bdf2212d452263c410f26317798c04c0161915c542c12c351114f6c","size":94,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-16T19:33:04.049254Z","times_seen":5965,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afrdtech.com/v1/script.js?kmnrKey=239040355","fqdn":"afrdtech.com","domain":"afrdtech.com","tld":"com"},"ip":{"addr":"31.220.27.154","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f381d35003241d2f2b05d11d1b5b936","sha1":"be5ac6c2d2859e19c50ea385b3371872c343f948","sha256":"c4f6d32027a300e7d30527ec293f5abd893b6ad6c59893d948f04c08cfdb7dac","sha512":"3f1fc8fd9c1cf06e0ea4a10b8aff9ea76cd3f1e16cbebb35ee8b4ca0f4fa4ea863e5d98e64f76a38b2994ea4e497873b7e98b9b0e1fb42b13a885ce2e43c2a69","ssdeep":"768:6YLCnCAt9PEqlSUZOq2Q5qS54vzQsHNk6qeBT1svGraiRJRXHBZV/D:6FPp92QEtLceBRs+rhJR3BZVb","tlshash":"96332bae76a6a42490b7217a403f7605f13e1e6ad50484d0e566ccc03de9f8b6127ffd","size":50643,"data":"","first_seen":"2025-12-10T23:32:32.446523Z","last_seen":"2026-01-13T12:38:38.959583Z","times_seen":183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"06efc88b82982b6248bdabbebddb6310","sha1":"600dc307871cb5a742c485b6578dc75831686b33","sha256":"0b6e6b2d9579cb224b4f6be8e592a19b29ca2408e92b45156c698bca5cfda72c","sha512":"7d48181d181b614d02e782b2cf23a983f013e013a2f76f6ad321b4ccb40b15be6c8c17ad1efb719f3d2417943a9a02e31365c3e07f36112dc501c5d9e03d99a6","ssdeep":"","tlshash":"dc60003000c03003cc0330300303000000c0003000c0c00c3000003000c00033c0ccf0","size":12,"data":"","first_seen":"2026-01-10T06:47:19.789603Z","last_seen":"2026-01-10T06:47:19.789603Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pxl-eu.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XMwEFDhhgcZsy0qDFDjI0WNMLQgNECR44yNVqQyXHDzI0cY2CEKRODjIiHYeqMyRjGDBkYOcLgYFkjRwwaKMtsbCFmxg2WN8LotCFGTFMZMWb8hEjGDsUZVmHIeAinjhiKMWBYBQoHzkIaTm88nANnog4ZMG7UIOlQxJg2dhnCoDGjKQygZMxQfCjGjZuFTWfIkGEDx8M2bjAy1AyYLWjRMW7IqFFRRJ0YGdHQoQNnjo4XL8aQcdPCzBgXY960yS2nIJ00dsrMeVHHDXKEc8KweeEmzPHkL37MSaOnTI8ZMGDgWQ2DS53wnOvQafNlTBjEYdKccdMjvos2eLKYR29DPfvgbtBRRoA9zFHHGWcoJyAZX9yRBhkJ0rGfWjbAUZwdaZRxxxdtvHFQD2i8kZwcE3I2Rww90KYFFTJcYYcZMnwRWQ5CBIHGEE84UYQNTwSBxxFSuCEHFFDQoYUNOaihBhkxpIEHDnVQ4dIZNUixRhVa3KAFFliUYQcbQZgBJh5KrDFEDVbggQQeaghhBQ432DHHE3hYkcQRR4SRRBQ4zADFFHXM8YUMZqxBhQ1N3AEaFWLEoEUedIQRxRdnVJEEEVJUkcZYZAgX2xhspFFbC3C8IYcbwBk1lnt-bTFDDF1QJpkOMLgQXmFy2JEYeA_VUcemOkA0Aw03gFRDGSPNYEZMNZhhVQs55ECDSDiIcVBSN4gRRmdiPSRqRk65kEOtHbnQEA1jyfHFt8GGO64L5Z47Vh1hZNTEG3qkwQYbYbxQg60goHBFGm50esccIDhBBQhx2boDCAO7YQMND-Mx8cO5jkaDrSmAcEQZY6zxxguAxQVDXDGAYEQaxZnxBh4vhLUxDKsOFawTT4xlans2i4DzWGz0XIQTnHr5RXFsUFTDDcXO0Fl4D8kx30KrwfnQQXZ8IYYcC-HgmQhYc-gh1TjY0BoZcryx0AwPvaGQDjSwlTYeeWAW9RcWvly3DoWFTYceGdEcdRmzDjRbbbe9gAaoos5BqqmojmHUC2PdkVFcMqD7EBqXy7DUWHPkmlHakdJhagvNpUEHSv-SIYPOoZulQ582WLV0DmuB3fNBMr5uURsU3fC0DILhUNh6rzMk_FLE12A8kq0ZdLRycHxhXfDDF1-Y0dIhRMfbrlY0bKwQieEX2IQHxcZEbAW90GOGiQb_GJzrsIUIY-X_kP747-9__wDkX_660AcFBAQ%3D\u0026s=ed962c10baa2dc29f3a2621a00f64f3c47b64d29102e7fa0965d2864584697441768027585\u0026w=t\u0026r=1\u0026d=761\u0026priv=true","fqdn":"pxl-eu.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"148.251.4.157","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"0959ba36d476b6dc1994ba3c678b07c4","sha1":"d30b94da72daa02766965206a85b7e0356375f5e","sha256":"897410b87e27e3dfba3a7d6caab315a5e69cc941bb96d91fc74878a9b051843a","sha512":"843f2144ba55d59ba3e62053dc018f4f6d51ae482c741cb4dc85f7af3375b77c75f66e2e73ff55ff7fe3b79314e7ba28a92fddec1ba17839ba33b34792bfce22","ssdeep":"","tlshash":"ea70008030b22e88e022000802a08000000288220a8032b0020800a80002202ca3c30a","size":24,"data":"","first_seen":"2023-03-07T01:03:23Z","last_seen":"2026-04-16T20:52:26.472062Z","times_seen":6856,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"41eece0da217398b6f4d4ee2f01b6245","sha1":"72f2098b0520b07dd3c6874646c920a3d367a4e2","sha256":"62bba8c2295a14bb2d007a3f7f8730fd10cef7348a6474f3f832c99ca6795d35","sha512":"1009ef0076bfb735c9b40fa3b106c8de414943b27fd74cfd315265ad768592a9d3eaf408c2392269659fb5af26c32f454d8f8a86fe0044d5a0c46ef424ebe207","ssdeep":"","tlshash":"dec09b3d110413fedfd5359ddc05667d1811b1b1d1918cb04715d527605de144cf3801","size":134,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-04-16T20:56:43.812687Z","times_seen":11957,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/n.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.70","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa64621906a918100344c598750cbcfd","sha1":"178b3fa0f05c42c26e4f3cd8f3f021636bcf5f3b","sha256":"1f19d263a53dc13a027cfc3b486d593bf9880a64f21a0693778a7edbbe9cd83f","sha512":"f06455d557fb9507150292a021e574e8e7b48208a31895ef7a4d95023e800058ac4c05b4a0da0dd247ee95c2885e7ac5840f9dcd13838a7c648f403443b37d37","ssdeep":"768:pSNqIzQEzZFj+rvia6JSbHigWuN8sMySCcYLcY50XxGTsG:pYqA9+zN6s+gV8sMQcYr5rH","tlshash":"53130aed75927035216b00a681af130bb33e2617a90d4c00d477edd57abcdcad27bea9","size":43063,"data":"","first_seen":"2026-01-09T15:27:49.613088Z","last_seen":"2026-01-12T14:37:23.36234Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ab23ddc5958c1676a0a09004142c0275","sha1":"e823f53714e2ac09ed7451ce8517bbb5babacd23","sha256":"d128fb06a34c557f59618431262beb18a72257a4d680fd36f4b47bee82653d14","sha512":"3f616f81a2ae0e0264b0444702a456adcc4740a32b9a379311316ee8a9d99cd23054ca940a3694438534afdb10b75495d3524d23d359ff6c643086944a1be1af","ssdeep":"","tlshash":"96e0a797057091661213332fc92f4301227048479978fd35344d01840f0c00d12ff6d5","size":308,"data":"","first_seen":"2023-10-16T17:48:40Z","last_seen":"2026-04-12T14:48:43.733391Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bd931315f9ec922d23220a34a506421","sha1":"92eb331739d51c65226b5fdb07ec2d74924f200f","sha256":"28f33740f0a341c823243413c7780d92e7ae39254641174a86a4f51ac805b576","sha512":"26bb36ab577ba2b6486f482177e31992c81c79322070edc9d55af10d7ab8f3e1b9dccc89f7c925a47a68e464f522736c0e64d3d7e4acaa016745e0104bddb167","ssdeep":"3072:cWYjf7+28VOk2DG2cUMaElwnRlqI1fsBHisiEolY4o/CXMXpo:U+28VOk262lElwnRjfs4sXhpo","tlshash":"96045c993792307441d3a11daaff53093371506ab80f4884bb4dd8a427adeea51a3ffd","size":185387,"data":"","first_seen":"2025-12-11T15:18:11.624048Z","last_seen":"2026-01-15T17:17:43.902034Z","times_seen":1441,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/119_ewyryueuieiiojeowj1008-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/119_ewyryueuieiiojeowj1008-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12109\r\nlast-modified: Fri, 29 Aug 2025 06:43:11 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bff-2f4d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236696\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X7JY8BeyuLRshbMQoT%2BCTEbtiHKIkY%2FOE2GM2wP3s0RdDOqjidL1LegopWgLPIPzY28KJSUX0W1JJohXkG8l5GT3Gr1ZCWqjDnEP4VpkAw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37908aa6783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12109,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"a2de624becea400b82628416a6281aab","sha1":"9d565cd779b21492b4cd5038d8053c5fee54e937","sha256":"a4213d824b9ca9f1d00e4ccb2d5c8c050cef1404b678bf90fed4ef62122c8479","sha512":"12315be639642499ff2a334d2689e0f9b458675831139034eb6a16eac76abfdc50ce556280fc6098707a0b6d90a79a70cc5ff8f0c9f6627f93b89a7da25aed1e","ssdeep":"192:Vw1n5qp5DWWLVqynMNoUu6jTUJxBPVR9cPyqCMi1swJB60Hrw3jJFm8rcXACV31j:C1n5UyaVTMz3TGxBPKnCtsaB6Kk3jPmd","tlshash":"db42bf82cb74f0b1d9fd8d7c34dc93695b3e7e2157a68318a12af4f469727006a23d14","first_seen":"2025-10-05T06:05:59.963747Z","last_seen":"2026-04-12T14:36:08.265388Z","times_seen":32,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/quicksand/v37/6xKtdSZaM9iE8KbpRA_hJVQNcOM.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:25.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/quicksand/v37/6xKtdSZaM9iE8KbpRA_hJVQNcOM.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26616\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 08 Jan 2026 20:03:02 GMT\r\nexpires: Fri, 08 Jan 2027 20:03:02 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 27 Aug 2025 19:19:12 GMT\r\ncontent-type: font/woff2\r\nage: 125003\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26616,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26616, version 1.0","md5":"7ee01e648403b775b222bba928ecaf81","sha1":"6491d8199b90cbaef5d78d57dd5f04586ec9805c","sha256":"b5a37861949c4489894ff1e76d3657819830e91316b40effa16c5a6923bc0928","sha512":"bd97741369dede7ec5a21b379e4ed78a38abcfea5945195e8255d7a683c771ee253a9f9b31e760a48180d6b2a53b2dbddfc042ec01214c7243fe5528e8cc05af","ssdeep":"768:MYfELTwnle40ZQT5ATVyzOYU72V6YgpX2wSo8Nh:xER40g5A4JUiVMpXxSom","tlshash":"b3c2e1e5e72517a9a6f05ec7c9e5d3c600879d2e3b2dac23d89319c417b9ee04c0c399","first_seen":"2025-09-03T05:24:58.825259Z","last_seen":"2026-04-16T19:43:28.017239Z","times_seen":531,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/129744/8d5f6ea35200fe5171e109fdcfe6ebc48879cc66.webp","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:26.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/129744/8d5f6ea35200fe5171e109fdcfe6ebc48879cc66.webp HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12208\r\nlast-modified: Fri, 01 Dec 2023 01:53:48 GMT\r\netag: \"65693cac-2fb0\"\r\nexpires: Thu, 29 Oct 2026 21:05:00 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap02-sec02-prg1-1\r\nx-77-nzt: EwwBX63NDQH3+XNfAAwBuUwKCQH3LgAAAAwBT3/Y+AG3HwAAAA\r\nx-77-nzt-ray: 2a494a15e936f2f9e7f56169a8c9f715\r\nx-77-cache: HIT\r\nx-77-age: 6255609\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":12208,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e780d3c06f4f159c2d8cb7d1f672ae2f","sha1":"8d5f6ea35200fe5171e109fdcfe6ebc48879cc66","sha256":"511c913e1fe55d57e4564982c58e529dee13d853b3ad1e90a9735b7bbf5d534e","sha512":"d1d461e192f13de815e1f3e331eb02b103b04294c691e2e02042a22d9eb8c5d5aef48f0fb9a59385f4ee4114f58916360237d16da2b3386b0d16e632023b966b","ssdeep":"192:is4/qGppYMFKCUSQkhR098yNnqYQWh0gLEJ0PGP0dfmT1p57Dn1YsTGwL9:isMp6MFET6R0986nqqh0OEIMT1pdOsTH","tlshash":"7542bfeace1d233b994794089447f693c7b211f5cf5fe4bf004918822d4e2eda76b2a4","first_seen":"2024-12-09T11:08:10.476633Z","last_seen":"2026-02-15T06:58:54.132516Z","times_seen":192,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":38,"dns":34,"connect":1,"send":0,"wait":2,"receive":1,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/102_x1xb7cf316483b4d8b937-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/102_x1xb7cf316483b4d8b937-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21530\r\nlast-modified: Fri, 29 Aug 2025 06:42:52 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bec-541a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YeZEN4pA1YwvpPj%2Fp7qbgqrjD306%2BsohilhXMjLgFXkLA2%2BRbgp6r2Dl8tlMR6OGgmbEzPBd3nInOAUlYISx1xIWcGOM%2Fk5%2BhsOg8ywxXA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37902a75783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21530,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 640x639, segment length 16, baseline, precision 8, 400x300, components 3","md5":"1190bd9907b0c2c4d520ef6c1326d12c","sha1":"cd798a1eeeb18cc1d01646897e3dcd18fa6ce945","sha256":"66a43788f253d7bd0bdfb2faae97d73719ac4e7bcfdea7ec7ce43ea027cde9b8","sha512":"0b3d728b0ff935bac6ca0ee7e4505f450dfaf0eb5582e262fc1797691ee41d847ae6f954d081e867c98afe192ca143dcd41e0e1be019e762f3d4a257b487c2c8","ssdeep":"384:JeNIC5/dAyRp10dECcybj5Y25Rx4F+oZHQUEaI+nmtzjviaNVaY7GtFN2ir1AIL5:JfCRSyRIcyP5xROFVHQUHIWmtKaL17G7","tlshash":"0fa2e1795a2c908fcf4903fbd8435f76b815311a0983bce76c0f9be1ad1e4a6401a57e","first_seen":"2025-10-19T02:15:20.260606Z","last_seen":"2026-04-12T14:36:08.130074Z","times_seen":30,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/127_x3x50ba1fdabfc98cd2c3-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/127_x3x50ba1fdabfc98cd2c3-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16715\r\nlast-modified: Fri, 29 Aug 2025 06:43:21 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14c09-414b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M8s0pUn3mJaUFQWdJXeKwq8mhHUIdTpmUw5ZXUR5EggNFNSanBAqgeeLAwtBlKNSte%2FoiHNTMYWPuu%2B6xikD7ZNNZXbhMxUBaP6x6iBiqg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba3790baaa783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16715,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 640x639, segment length 16, baseline, precision 8, 400x300, components 3","md5":"7960457af031b40da2718661f4a82fab","sha1":"994c4e2e2cdc7e5ab91833cbaeeaa43c941a8ecd","sha256":"3f379678477b18a9fa84da55bbc64fa047e0c1faaa11bb566af12828d7c41b99","sha512":"6595737be759f6c0e3da27fedadf30aa50433edd04772d1c02638bfd62178590b3096c7d3b6ddf44a289a712fbef2c43aadd2a8b44dc9e92644062b553fefba1","ssdeep":"384:lV4uDa73rPoHpQ5jjh6dWpgi7ZEckGOe9TxQ:ltG3rgHpAjjh6dWllv99Q","tlshash":"8172c07ebe407174da9cc17015d774c3d8d578925c898f22a6a930ec8f7e1c943d8e89","first_seen":"2025-10-05T06:06:00.162496Z","last_seen":"2026-04-12T14:36:08.280541Z","times_seen":33,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/199688/382c69cfec26cb595b0cc9144957070a819ac725.webp","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:26.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/199688/382c69cfec26cb595b0cc9144957070a819ac725.webp HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7780\r\nlast-modified: Thu, 25 Jul 2024 08:11:25 GMT\r\netag: \"66a208ad-1e64\"\r\nexpires: Fri, 25 Jul 2025 08:58:10 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-77-nzt: EwwBX63NDQH3+oTeAAwBuUwKEwH3FUgAAAwBJRPCNAG3cDDDAA\r\nx-77-nzt-ray: 2a494a15e936f2f9e7f561696a302516\r\nx-77-cache: HIT\r\nx-77-age: 14583034\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":7780,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"afd7eef3f03fe90084f45c93770ed7bc","sha1":"382c69cfec26cb595b0cc9144957070a819ac725","sha256":"1b86ae194b8fe85ea8fa6ebc6adc7915215831d0acdb41dcc29e494483d5232f","sha512":"3f3d4f5b389d5877a0ad4b184b74d67b039a4925388a012bc5cf72a008115483fd9f4cb2e9ebf3978960cb747dc9b6e4067d974e7a8616217d9ace74e59173a2","ssdeep":"192:4HzkWCH+cq9I1A/l6Cx4KYzQqquQA7reFvDAMGxG/:4HzkWCH+cq9wA/ACCKoQvTA7KVn","tlshash":"5bf1af7b2936fbccd031d5faaadfd572ac471a12d155e7091629a6039262323870dc3c","first_seen":"2025-03-01T23:33:09.728761Z","last_seen":"2026-02-03T09:29:09.629658Z","times_seen":683,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":25,"dns":9,"connect":5,"send":0,"wait":2,"receive":1,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fh-wgt.com/api/request/v1/affiliate_1?exp={%222008%22:{%22g%22:%22b%22,%22v%22:2}}\u0026language=en\u0026orientation=straight\u0026quantity=4\u0026target=video\u0026utmCampaign=ai.mxY","fqdn":"fh-wgt.com","domain":"fh-wgt.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=it7_v9mINZsY2FHHRd8f7idZL-DxISKYUEWDNYzup2TzCEm0_qr7AdVAPKWiR3qPIzth_TWtgQ1ya3AKUJlgD5NNIe-7ua_9YB6L9C6SgJXZhEA_gUIDRUi","date":"2026-01-10T06:46:27.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fh-wgt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 07:52:18 GMT","end":"Thu, 12 Mar 2026 08:46:58 GMT"},"fingerprint":{"sha1":"B2:24:80:80:56:D5:4B:BA:F0:B8:F8:4C:4B:04:5B:49:EE:43:C3:09","sha256":"EF:9B:90:58:7D:7D:6C:99:D2:BF:9C:64:29:CD:E7:76:55:A3:D8:89:AF:7A:BE:85:CE:55:06:D9:57:E4:E9:95"}}},"request":{"raw":"GET /api/request/v1/affiliate_1?exp={%222008%22:{%22g%22:%22b%22,%22v%22:2}}\u0026language=en\u0026orientation=straight\u0026quantity=4\u0026target=video\u0026utmCampaign=ai.mxY HTTP/1.1\r\nHost: fh-wgt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cdn-fc.com/\r\nOrigin: https://cdn-fc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:27 GMT\r\ncontent-type: application/json; charset=UTF-8\r\naccess-control-allow-origin: https://cdn-fc.com\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-headers: Cache-Control,Content-Language,Content-Type,Expires,Last-Modified,Pragma,Access-Control-Allow-Credentials,Access-Control-Allow-Origin,X-Referrer,X-URL,x-stats-uid,x-guid\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 600\r\nx-robots-tag: googlebot:noindex, indexifembedded\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fceFQzllGmnHj%2FXJHIhMBb3cK6XjJWZasugqXY9Z2IM2SZYhu6M%2Fk%2FmUwSq88Lk5dFxEDqgsIZC95AxnSbyPB23CIQnFhlv%2F\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9bba37a50dce56c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4017,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"ce4f79dd8ed57bb9ac029bcbec61dbf8","sha1":"6a15a3912e04d751534607c68c41e9b25cb1b839","sha256":"d9e903c48bdf8065cf4c212ea5c211b3eaec2d077707825c150c81cbb734de6a","sha512":"b20da7918cf921158cfd3f39c5409529a69316ccaa2ed4157ff98b87a34c9c68b457105c1e6394b574e1db2e7ff7ee6a55052c2de1f2ad49b9509ab70e18d328","ssdeep":"","tlshash":"038162f70b8e07771f8417d38c8bf95da6a61c4558c0ee82fc21d99d417c8bba52e18a","first_seen":"2026-01-10T06:47:19.594333Z","last_seen":"2026-01-10T06:47:19.594333Z","times_seen":1,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":73,"dns":12,"connect":3,"send":0,"wait":51,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"fh-wgt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"fh-wgt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"afrdtech.com/v2/check","fqdn":"afrdtech.com","domain":"afrdtech.com","tld":"com"},"ip":{"addr":"31.220.27.154","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cdn.60ah.com/b/banner_dev.html?source=1567158389\u0026w=300\u0026h=250\u0026id=1433671","date":"2026-01-10T06:46:28.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afrdtech.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Oct 2025 10:13:45 GMT","end":"Sun, 18 Jan 2026 10:13:44 GMT"},"fingerprint":{"sha1":"36:C0:A3:65:FA:F3:BE:60:5E:FB:4A:07:B1:25:84:57:D1:80:FD:B1","sha256":"D0:4F:77:FD:EF:29:9C:9A:26:DF:FE:81:37:65:5C:99:B2:88:E0:FA:82:4A:14:02:45:70:2D:FD:5F:BC:22:40"}}},"request":{"raw":"OPTIONS /v2/check HTTP/1.1\r\nHost: afrdtech.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nOrigin: https://cdn.60ah.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 06:46:28 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://cdn.60ah.com\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,pragma,Authorization,\r\naccess-control-allow-methods: POST, GET, OPTIONS, DELETE, PUT, PATCH, HEAD, TRACE, CONNECT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":46,"dns":1,"connect":17,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/059.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/059.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21970\r\nlast-modified: Fri, 29 Aug 2025 06:41:37 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14ba1-55d2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7BmN3wfswuIF1VoNxARj5sYk7TS6XPKfiaA7YS3oLk1HNoJfUzQzka9GzBTAXH6fSzgrPS0S7tnZwBbgi8f8u9wL3yXmhrFfHwsKhMIvzg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba378ffa4c783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21970,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"a6c568950e4dc6a290f0406596147c13","sha1":"8758eea43ed5ac3877ffab1c8de674e2b43f4467","sha256":"34133ef8e8fc568f459c058e0b032b35c419bcd9ebe7b6efbf1dafb8b902899a","sha512":"fc314baa10a209b354ca3d66e45976a84dac376d5f8e7737ec8849c4636458f424b15b5a39eef3bbc58c31ae2f230e01adf21581d1d44e2d13fe4b7c62f83b34","ssdeep":"384:JX9Qtt+e0az91w5ACu03XRn5ejzpvlqfq0R+kdwvYuAhUI:JNQN0Qu+CuSXRn5Q0fq8urAmI","tlshash":"2ea2e13c5c96e65cf684de7a0b5f5249037296d527d286c6210f02f6db132ae79fc01e","first_seen":"2025-10-31T12:17:26.859548Z","last_seen":"2026-04-12T14:36:08.320604Z","times_seen":25,"resource_available":false,"data":null}},"time_used":354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/069_hardcore-colouring-tachibana.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/069_hardcore-colouring-tachibana.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22149\r\nlast-modified: Fri, 29 Aug 2025 06:41:57 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bb5-5685\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PvEvDzvMVHBJDBR4GghuoPDvJYz%2FBiUvf1cav37llaUxXOXZhIj%2FV13VKPVoOC7PJ8hdqq8vJccbgsseCmXwH7V4O4U9iC4VdkSSxemqCw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37901a6b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22149,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"ceb5411f0c800be4b5480583ad0ad25a","sha1":"f060819d9f1f215b2d1bd93d3f5d8567fb6344eb","sha256":"ce62e0aea2540ea6fe52c396266c04b42b2ffe71c03ac730b42bf92f432294d1","sha512":"4e672eb7cb0494f0e034afcb5a4918cb121c00d9c56605c113801900acd75def8970a1325022bb6f405d4bcdd652cf0781aa4cd818b018c01dfbdcd15278f4b9","ssdeep":"384:Lx+CM/CYi18MsYJ8RH7ym4Te45OLocf5qUyZkASjR7+x+Rodc:VC/ChTJ8N7ym4RqTqjcjR7+x+RB","tlshash":"f1a2d080f96be56df11b3a3626aac33b03d3555314a969f80ab436ce517c4128fb193a","first_seen":"2025-10-19T03:23:58.722402Z","last_seen":"2026-04-12T14:36:08.267368Z","times_seen":29,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpushsdk.com/npc/sdk/wpu/npush.m.js","fqdn":"js.wpushsdk.com","domain":"wpushsdk.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:26.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.wpushsdk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 09:32:17 GMT","end":"Wed, 01 Apr 2026 09:32:16 GMT"},"fingerprint":{"sha1":"6D:B0:3B:81:96:12:26:E9:2D:C1:A0:D0:4E:2F:05:FD:52:33:8A:53","sha256":"03:BA:62:FC:6E:CC:AA:AA:D4:2F:A8:36:8A:7A:73:40:61:B9:D9:55:C2:BC:2C:6C:C0:FD:9C:FD:DD:47:A7:94"}}},"request":{"raw":"GET /npc/sdk/wpu/npush.m.js HTTP/1.1\r\nHost: js.wpushsdk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Thu, 11 Dec 2025 12:18:11 GMT\r\netag: W/\"693ab683-3e7f7\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 10 Jan 2026 06:51:26 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1747\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":255991,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5971e1aea23eb692c8ba321767e3d616","sha1":"573f09736f6f905afafc2c19c5f6eb4984aa9f80","sha256":"6cd87ca3f3fa6e118e5cdfca3e2f1120a9e2326574e3de7448aecdf8012ab8d5","sha512":"256c2cabfe3651ea7cc1410c5deea1944344a6442894e55b997ba7f3cb1af177a79cefff5e0d84bb65b27a8b7912a3dec518d8d64352ac3a22cb1e808ef24673","ssdeep":"3072:hfB/9Xkw+QIsv7iIB7xz2/3UepiBz3oQrcQ7clZyQ5CO3ABWV+PQc:hfF9XBz2scQ7iCOwBWV+Pj","tlshash":"88446cd1368478b40593c0aee0770201b2382609f52db56cbabddee96586dce2377f79","first_seen":"2025-12-11T16:15:42.321021Z","last_seen":"2026-01-29T09:34:31.743224Z","times_seen":825,"resource_available":true,"data":null}},"time_used":317,"timings":{"blocked":139,"dns":32,"connect":22,"send":0,"wait":36,"receive":0,"ssl":84},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"js.wpushsdk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/024_left-side.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/024_left-side.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24527\r\nlast-modified: Fri, 29 Aug 2025 06:40:57 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b79-5fcf\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jojgxOTXMT0tc5T2OsYbYQrND3C0MOo0Bb%2F127mykwH1BOvb7LsgmQz7u3a8cGRuq68ux5jY4HAUMQQD6rN%2BKSQNqhzsQpw23atB0PEZvw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba378fba29783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24527,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x300, components 3","md5":"1e650d31cd056b05c3f48be580b7a7bd","sha1":"fd7cf82ac8d36c42e5cf7f1716d1ef440303afa2","sha256":"b62d5a7312618847aee3cb6900c697d9ac7629ee858b8d94e936ee64c16121cc","sha512":"58ebd1f81dcae7a84f239e16ac302aa83e96ef4444430d9bf77f1bf0b06f875c5a0fa4e8f73fd883110df86245c245e97304cd951a2bdb46dc77623f9d8135d5","ssdeep":"384:YFJ0aghP+1lC5Lb3GREI3vqZHXHNdchNzX4Yn0tC6Eso+sXZPrFrcB5QVluo4wA+:YFJ05h+wXtRlfchNzX9n0cso+MtFrcBC","tlshash":"51b2e147c6b93282406594b9ec2d37df8a26ecb911a530c11d4972cc0e7dfb54723fa8","first_seen":"2025-10-31T12:17:27.066352Z","last_seen":"2026-01-10T09:02:32.695779Z","times_seen":11,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":119,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/061_over.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/061_over.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25865\r\nlast-modified: Fri, 29 Aug 2025 06:41:41 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14ba5-6509\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z5bg1W5DzmbHFK9YWJLqDQHMFRC%2BW8gSoG%2F8xUIGZs1omCi6bGfJJS9OymeUF9uBa4YW9pupsTnnX1A5%2FHPE5fV55zehwXbOWJKKj0f5OQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37901a62783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25865,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"c7cd3303e5dce83f5cd48c15c4f53f62","sha1":"c87258ef4c3a25b00049e1820252118991be81bf","sha256":"917523f22b9912c67653114f187b64540e96531df27abb6b3f7c2a4ff405bd8d","sha512":"0edef990a1daf8a6529933fd8a0a1816e09e339d930f489a7a256ae7f55e928a4a3223f7a1c9bdd7031aea8b0cb3ae53ad976f4afa11b7e15901ce44bc4314d8","ssdeep":"384:VD93vxEcEFNOg/m+WF765lwK8MYwFv7lsOB+W+FB6n0oXiu3ZXYEelPlqk8X3lvR:VDp5EccmL6H8q3s0+yponL4lvtC2","tlshash":"59c2f1cd27e920bfe86a8d2179815cfa1c10c41d27bcd26b2dde2cca418558fe69e44d","first_seen":"2025-10-31T12:17:26.821341Z","last_seen":"2026-04-12T14:36:08.267986Z","times_seen":23,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/087_distance-xxx-far.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/087_distance-xxx-far.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23196\r\nlast-modified: Fri, 29 Aug 2025 06:42:27 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bd3-5a9c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hqmu5dw4aDj15bnhBWsqmnpT4l8aO2rryqpbklCy4KOrsdR8cUBWzIoM06BJWu7d6mZWtf5xI7ruiiqImpHYpR7WSWywcGsO9FOCSPTeuw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37902a6d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23196,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"bbc2966669b5a4110d77ddcd220523b5","sha1":"c0123529d82b824b0baa272832562838db1b7ed3","sha256":"eead7d6e28fa8050bfa6ad8a09745fa981c7fc08633a6ae436b1b0d954d1ecfc","sha512":"8b450c039d8c3b53044e311a393f74529fa9ecca035aa1221b4bbf8ca27356608e366df689e457928dd7f1f6edc23c36dddf5a4bc103f4e80cd9487466061e52","ssdeep":"384:yiBDOcGOT0rDwJk/DGH1WvgyzLnFcg05HsZTILQ4BD1vcAK3/mo6rFLG:dKgiwRkYMLv0JsZTIE4BKlvmHS","tlshash":"7fa2e0e7d3a93f26d4d313e83b9e4db288c020e56294e6691ed5f1cc20713993931a1f","first_seen":"2025-10-19T02:15:14.704695Z","last_seen":"2026-04-12T14:36:08.187629Z","times_seen":30,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/108_--k1.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/108_--k1.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24129\r\nlast-modified: Fri, 29 Aug 2025 06:42:56 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bf0-5e41\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xldUpK25%2FXeN5aTgEjaAJ6D2VhMJEe7x4YB0OSUkbqi%2F4mKK%2BjrniS0SPeycOgHvYFz6BvVnnGUB2oG6uyXa7IVvz%2B5U9W5hwpomuYB%2BYQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37903a84783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24129,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 853x852, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"504efff3261d35044d811d89056a4746","sha1":"6c95f337aec8830610508a8d2cfc276dcd52c2e1","sha256":"b65ed5b51cfc8a38b13e594f309069c060c0302be90065ac3f9a88fb0d7f03db","sha512":"64d68aab8116cbde790098e9bcf86d951baed9749cf8de0a5ec0ad41a23c62402f77bbc4669602fcfa0eb2595dcdf71d0d8e83931c57c7172be806c9881222ed","ssdeep":"384:8Ai/cELUblMCChAvlMKWsu4C/n8GzAAB0kxVGVyRPpwjcURzW+NdYMNQ:8AkcELUCtWvll6nrzxB0oiyRPaj1capC","tlshash":"e7b2e16ae1ca2622c4b103a3624d1d765a8e0f464af27b934804dff4ca9f9546cfb917","first_seen":"2025-10-05T06:06:00.09492Z","last_seen":"2026-04-12T14:36:08.123401Z","times_seen":32,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/112_x2x6f5de60018d92bd879-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/112_x2x6f5de60018d92bd879-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 34252\r\nlast-modified: Fri, 29 Aug 2025 06:43:00 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bf4-85cc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=72%2BbfWf7yeEkJNXT8ClgMTFhjJlYNP6%2BJvMudQG04pcJMwwk9TnDnI51Jsa%2F3lzN9V1pRYFgfwm99LHj4IgZx%2B5q8vF7VXV343u%2FbZIjmQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37903a87783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34252,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 640x639, segment length 16, baseline, precision 8, 400x300, components 3","md5":"7933a9c74e1afd59d899aef510afb068","sha1":"d4b55426373d2951aaf0dfb76fdf926ed4062d92","sha256":"757c0cdbed9771ed4778b3c6e9222ee1a3209d325ae79b583089e9a930962a6f","sha512":"f4c9057820a7f345f81c462e16c7c02072d8099072bcb1c873769f072c747a748aac2d45f29aa8b60d2fb2ea2d1050af5371aa158b792143af1b5de23a1ec03e","ssdeep":"768:ciwzhsCf2jb44CPGeRiPfBYrXk2uM44NR9pSvXPXKuwWl8370w2Sv:/wz2I5M36r7uMP3psCo3w2A","tlshash":"2cf2f193865bceba18c9f1bfab4e556ab58bdcc3809b80f0c25560fd993f8527141289","first_seen":"2025-10-05T06:06:00.11616Z","last_seen":"2026-04-12T14:36:08.319903Z","times_seen":32,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ic-nss.flixcdn.com/a/MzAzYmY2NmEyMzEyNzdjNDhmZmYwZmJjY2EzNzczZDE/jpeg%2Cs%28w%3A480%2Ch%3A300%29/video/rs/rsItYS/screen/1-MA7.jpg","fqdn":"ic-nss.flixcdn.com","domain":"flixcdn.com","tld":"com"},"ip":{"addr":"185.76.9.5","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=it7_v9mINZsY2FHHRd8f7idZL-DxISKYUEWDNYzup2TzCEm0_qr7AdVAPKWiR3qPIzth_TWtgQ1ya3AKUJlgD5NNIe-7ua_9YB6L9C6SgJXZhEA_gUIDRUi","date":"2026-01-10T06:46:27.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1029385688.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Dec 2025 18:50:04 GMT","end":"Tue, 24 Mar 2026 18:50:03 GMT"},"fingerprint":{"sha1":"89:82:7B:71:7C:2C:D8:62:C2:8F:3E:F9:76:0C:8B:29:7D:68:59:20","sha256":"C0:00:52:93:BF:15:D7:B9:32:32:A5:60:99:A4:6E:A4:AC:B1:57:6F:3F:46:CD:1C:9E:CF:BF:7E:21:62:F9:76"}}},"request":{"raw":"GET /a/MzAzYmY2NmEyMzEyNzdjNDhmZmYwZmJjY2EzNzczZDE/jpeg%2Cs%28w%3A480%2Ch%3A300%29/video/rs/rsItYS/screen/1-MA7.jpg HTTP/1.1\r\nHost: ic-nss.flixcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-fc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 64812\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: ic-1\r\ncache-control: public, max-age=1296000\r\nexpires: 1769084452\r\nx-rsic-cached: yes\r\nx-rsic-responder: ic-0\r\nstrict-transport-security: max-age=63072000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-77-nzt: EgwBuUwJAQH3H6YDAAwBT3/TaAGTksYTAA\r\nx-77-nzt-ray: 5637663579d1b59dc3f561692fa2e52a\r\nx-77-cache: HIT\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nx-77-age: 239135\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":64812,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 480x300, components 3","md5":"df16aa0f132fbf7e7421087bcab1ab25","sha1":"ace3edc9442513f04c3124579e833e4fa983886e","sha256":"295f07355e2fdc12fca10d21e205cf4958a16512902fa8e9e1ed4b6ae2614e55","sha512":"cef4686885f5c19353ec22eb1165dfca3cea0733535bac51a21c733fc0f67a89caba3b0945404ace22c5950833b56654ca72aae06f52bc1aba1399d3fe5ed5be","ssdeep":"1536:qwQ8GO0HOO7G/z1e4k37J0TUAbuUl4GWPUsxLYBKHgU0P6p6JVeEqc/Lbil:qkwHO8G/z3k3ILyUOdNxVEI6JoyLb6","tlshash":"6a53022047a24707e2c2d5770aab2abb1ef7732ad5c031e8e2c4ac0c6e26c54352dbc5","first_seen":"2026-01-10T06:47:19.609005Z","last_seen":"2026-01-12T00:09:39.893596Z","times_seen":13,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":93,"dns":0,"connect":0,"send":0,"wait":25,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ic-nss.flixcdn.com/a/Mzk0NDQ4NTIwZGVhMjY3ZTQ5ZjljNDQxYmJjODU4Y2E/jpeg%2Cs%28w%3A480%2Ch%3A300%29/video/lr/lrIu1T/screen/4-m5u.jpg","fqdn":"ic-nss.flixcdn.com","domain":"flixcdn.com","tld":"com"},"ip":{"addr":"185.76.9.5","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=it7_v9mINZsY2FHHRd8f7idZL-DxISKYUEWDNYzup2TzCEm0_qr7AdVAPKWiR3qPIzth_TWtgQ1ya3AKUJlgD5NNIe-7ua_9YB6L9C6SgJXZhEA_gUIDRUi","date":"2026-01-10T06:46:27.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1029385688.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Dec 2025 18:50:04 GMT","end":"Tue, 24 Mar 2026 18:50:03 GMT"},"fingerprint":{"sha1":"89:82:7B:71:7C:2C:D8:62:C2:8F:3E:F9:76:0C:8B:29:7D:68:59:20","sha256":"C0:00:52:93:BF:15:D7:B9:32:32:A5:60:99:A4:6E:A4:AC:B1:57:6F:3F:46:CD:1C:9E:CF:BF:7E:21:62:F9:76"}}},"request":{"raw":"GET /a/Mzk0NDQ4NTIwZGVhMjY3ZTQ5ZjljNDQxYmJjODU4Y2E/jpeg%2Cs%28w%3A480%2Ch%3A300%29/video/lr/lrIu1T/screen/4-m5u.jpg HTTP/1.1\r\nHost: ic-nss.flixcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-fc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24380\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: ic-0\r\ncache-control: public, max-age=1296000\r\nexpires: 1768711912\r\nx-rsic-cached: mem\r\nx-rsic-responder: ic-0\r\nstrict-transport-security: max-age=63072000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-77-nzt: EgwBuUwJAQH3OJwIAAwBisclzQH38LgAAA\r\nx-77-nzt-ray: 5637663579d1b59dc3f56169c4b4b72b\r\nx-77-cache: HIT\r\nx-77-age: 564280\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24380,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 480x300, components 3","md5":"e1df323c86c4efe54c13b4cd5c582da4","sha1":"7c756b5818035a376fe3e462ac866f4aa6dbc180","sha256":"4df4c0dff4aaa571a15f24e7670c35da148c907e010757b296d61dc4e0ff34f8","sha512":"84dee66767456fac5cecba23f7c6f46a0ca67adeb72aebefdf6f6f265a6813f87e793abbdde1c298794dc7d64a5662008e33243b30e69c7296d4d406d9bfdf38","ssdeep":"384:pQzzjisLM/RUjmV418Pcex0KqXPNMpfX+GxCgdMqW6nyYk0ytyw8rxRhgWDzW:Wf+/ujm9Pce0xMpfRQgdMde7k0ytgxRU","tlshash":"07b2d052fb2931c3ec518db026733ee3a3cb9932e641ddd6d2f9abe15e02a45681054e","first_seen":"2026-01-10T00:50:12.360244Z","last_seen":"2026-01-12T00:09:39.975614Z","times_seen":14,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":100,"dns":0,"connect":0,"send":0,"wait":15,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/030_stepmom-apologizes.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/030_stepmom-apologizes.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25934\r\nlast-modified: Fri, 29 Aug 2025 06:41:02 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b7e-654e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=alKZsBFeqDV71eXogm8PF5kf9xMxbA6E50aS5AGtY0tVoZIDTDCn250JJOjHnBw%2Bbc6zpOrb7MetZfk2Z9wvdyhIy8hSb%2FfiOA1WMfDaXQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba378fca33783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25934,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"15c6763773b49b935210c0e374248e51","sha1":"78ca37b154393609bcdb7766256f77463aadefd0","sha256":"776c5907e9cde8f1862f7f2986fc34318cfca9a61ea34b601e28b6baf0b2f5f7","sha512":"35cd90548179601be66f429f3281665b5e29e587697f970c85b8161e747ef77bce6ac159e24e471c1d2e8f9d7d1ea85bec0b1a174dfb91a7831a71d6a6928885","ssdeep":"384:cC5+jt2QQEKEUngippGCpsIXap+2dY3+oA4TIS5waLPHv3LrarXp:cC4jtEE6P7GCOkak22+otTIiwajP8Z","tlshash":"88c2d090574d63f2268fd6374e61b81517ead04b61e56f4cba608fa0093e0f3e79ac29","first_seen":"2025-10-31T12:17:27.001802Z","last_seen":"2026-04-12T14:36:08.287297Z","times_seen":19,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/050_uchimura-in-hardcore.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/050_uchimura-in-hardcore.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18193\r\nlast-modified: Fri, 29 Aug 2025 06:41:27 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b97-4711\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K6zYMkda0igMwePbKFqxNKt9ekJQ6l9fUiJngjGn9kjPCMhQ5dbOIWiq1XRcU3uwg0oS6dE6f4R9pJN47tUpgTmE9yskrFGpf%2F2YFjehMA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37900a56783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18193,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"3b9cdf9245c8324510152632dfbde9a4","sha1":"96491e6e851e4903c63ba54dbd456db639cb4e9a","sha256":"a416ed7515cbb7af7ec7e34d0555439e875bb80975c7df5e5ed214e8c482b4c5","sha512":"3cc356ced1da0b8a264971d6c87c546fffb0cea9d03979f74354312de9686265424dcf6333809d59a3833d906637c686c37a987e225cfd27b3fce250517c09c6","ssdeep":"384:rTgt3wzS5Xq65dA+kVz4ilgeRKtRX5AkiVsNHFgCYCzV4Vvg/E+hT:rk6645V8mg4oJcV8lg5wB1T","tlshash":"9f82d0cd636c150a5e541dd8e0aec9df9afbad44da7b074f200544f4ca9a1327544e08","first_seen":"2025-10-31T12:17:26.959446Z","last_seen":"2026-04-12T14:36:08.271199Z","times_seen":23,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/099_x2x14f9d00d9338138460-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/099_x2x14f9d00d9338138460-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25470\r\nlast-modified: Fri, 29 Aug 2025 06:42:48 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14be8-637e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CSIqPIXY0EZuBySvyLaDEGSgRaPEPY4742UOC4ie%2BaGJV2r4jLi6t%2FH%2FovRKIIEhVX%2FcUDEdsd5s6hLL0FxjOWAdrL6piBgbdxbcYIuYNQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37902a76783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25470,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 640x639, segment length 16, baseline, precision 8, 400x300, components 3","md5":"847e67b5f8a6898280c7a05df7a394b7","sha1":"17b463039ae3be28d32fcf4487a1ad6e08345f2f","sha256":"a31f063243b9477da3871a0f03eb15d202e0c4208fc17bec119c8ffa31ef94e8","sha512":"fbee6264ffce4e86813defd1b1d5943c8f510c37a890025e356a22487dfa515b2ad3887b024e16144272942f13d3823266f8c086b45e9fd6b830d7b577a52d27","ssdeep":"768:Si/EVWbwb0a5HQHb/SlJFbMEX5aUTs/Q3IxEWmLC:73w0Ywr2MEJzTs/Q3IxmO","tlshash":"d8b2d12b28619d10c00f25343d2fce728b3bd90efa6d91da1ac9b9d777a90421d7e539","first_seen":"2025-10-05T06:06:00.160768Z","last_seen":"2026-04-12T14:36:08.250583Z","times_seen":32,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":119,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2830fe954a.d88b2835c6.com/in/show/?tag_ab=b\u0026site_id=311433588\u0026adblock=0\u0026testab=0\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=mq\u0026pr=\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=0\u0026conditions=dch_ip,tz_offset,all\u0026ssp=3964\u0026page=https%3A%2F%2Fhclips-porn.cfd%2F\u0026refdom=hclips-porn.cfd\u0026auction_time=1768027587\u0026subid=485853577\u0026sid=3055912473\u0026tcid=0\u0026ver=8.244.2\u0026ver_c=\u0026spot_id=1433588\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2026-01-10\u0026iabcat=IAB25-3\u0026user_fp=3062215412326782139\u0026score=85.55848099375856\u0026kubik_score=94.245\u0026kaminari_bot_ip=1\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D485853577%26spot_id%3D1433588%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fhclips-porn.cfd%252F%26idzone%3D0%26sid%3D1886\u0026is_cpm=0\u0026resp_type=\u0026crid=\u0026crtid=b0681ff5c1739e7f8bdbb8527f77d810\u0026url=https%3A%2F%2Fad.twinrdengine.com%2Fadraw%3Fzone%3D01K3R8RBM8WCV45TJMNQZ9M78G%26subid%3D485853577a0%26kw%3Dhclips-porn%2Chd%2Cxxx%2Cclips%2Cvideo%2Ctube%21\u0026icons=GONN5VCHTLqVhvjWdpz5qJqJESX6tYHJjL2LDyL_kRgUTQkiYQUGjVCOPHgERlxeE2OTyLWU1s684cdK22p1RYiLdpIuK2JSbEVeuUW0LmYMOtXiQtXM46SZSNxLQLmU6Qd5lc5j8Q1IuPBB4FW7hqU0StbXwtyLg2XUTR5cGRSka5VUog\u0026ext_cid=0\u0026pop_price=3.5000000000000004e-05\u0026pop_ecpm=0.008461142471500992\u0026px_id=0\u0026min_cpm=0.20533500549838607\u0026out_id=1\u0026campaign_type=lq-pop-ext\u0026aid=4167\u0026cid=21764\u0026uniq=\u0026mid=4922339818344730175\u0026skin_id=52\u0026vertical_id=11\u0026skin_test=0\u0026from_cache=0\u0026ecpm=0.035\u0026cpm=0.035\u0026verify_hash=147515ce3b8821a7e0bf962ca8058102\u0026verify_hash_v2=c181e2cc6308f30d15fbed82fdb339a8b898bc3b4a56f7a0d505f9bacc75e299\u0026is_native=3\u0026real_bid=3.5000000000000004e-05\u0026pop_real_cpm=0\u0026pop_real_bid=3.5000000000000004e-05\u0026original_bid_usd=0.035\u0026original_bid=0\u0026show_type=0\u0026exp=0\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=4,20,27,150,11,123\u0026need_redirect_show=0\u0026applied_features=coef_095,main-skins-settings\u0026show_count=1\u0026expiration_timestamp=0\u0026image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FSG%2FSG_083be47dfc3e28c9a68305b76181a5033bc45790.webp\u0026site=native-push-adult\u0026price=0\u0026hostname=auc-inpage-hz-12-b\u0026auc_type=1\u0026pop_type=1\u0026is_pop_cpc=0\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=\u0026pop_cpc=0\u0026ext_campaign_id_str=101785\u0026is_webview=0\u0026client_price=0\u0026direct_client_price=0\u0026priority=0\u0026client_payment_model=\u0026is_in_app=0\u0026auc_domain_type=hash\u0026script_type=general\u0026tma_wallet_balance=0\u0026processed_keywords=HD%2CAdult\u0026is_iframe=0\u0026traffic_category=adult\u0026iframe_click=0\u0026estimated_ctr=0.06261344078843094\u0026social_network=\u0026publisher_id=116783\u0026advanced_pub_id=0\u0026user_click_counter=1\u0026lv_id=0\u0026service_spot_id=1461443\u0026mediation_ecpm=0.035\u0026mediation_type=default\u0026entry_source=direct\u0026is_second_price=0\u0026payment_model=cpm\u0026final_source_id=0\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=iosNotification-view-m_m-body\u0026mlf=1\u0026mlc=1\u0026cpa=cfeaf4bd-26c0-4fb5-9e4a-4dc6545d9625\u0026prev_step_diff=1117\u0026st=0.04","fqdn":"2830fe954a.d88b2835c6.com","domain":"d88b2835c6.com","tld":"com"},"ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:28.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d88b2835c6.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 14:04:20 GMT","end":"Mon, 06 Apr 2026 14:04:19 GMT"},"fingerprint":{"sha1":"19:7E:14:5C:52:F5:58:1B:92:F8:BC:EE:8A:81:46:3B:40:CF:48:B7","sha256":"21:D0:B6:E8:BD:CA:35:15:D3:F6:42:8D:1F:1A:A9:4A:6C:4F:0E:49:FC:70:1C:E2:2B:58:63:F0:FA:AE:09:71"}}},"request":{"raw":"GET /in/show/?tag_ab=b\u0026site_id=311433588\u0026adblock=0\u0026testab=0\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=mq\u0026pr=\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=0\u0026conditions=dch_ip,tz_offset,all\u0026ssp=3964\u0026page=https%3A%2F%2Fhclips-porn.cfd%2F\u0026refdom=hclips-porn.cfd\u0026auction_time=1768027587\u0026subid=485853577\u0026sid=3055912473\u0026tcid=0\u0026ver=8.244.2\u0026ver_c=\u0026spot_id=1433588\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2026-01-10\u0026iabcat=IAB25-3\u0026user_fp=3062215412326782139\u0026score=85.55848099375856\u0026kubik_score=94.245\u0026kaminari_bot_ip=1\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D485853577%26spot_id%3D1433588%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fhclips-porn.cfd%252F%26idzone%3D0%26sid%3D1886\u0026is_cpm=0\u0026resp_type=\u0026crid=\u0026crtid=b0681ff5c1739e7f8bdbb8527f77d810\u0026url=https%3A%2F%2Fad.twinrdengine.com%2Fadraw%3Fzone%3D01K3R8RBM8WCV45TJMNQZ9M78G%26subid%3D485853577a0%26kw%3Dhclips-porn%2Chd%2Cxxx%2Cclips%2Cvideo%2Ctube%21\u0026icons=GONN5VCHTLqVhvjWdpz5qJqJESX6tYHJjL2LDyL_kRgUTQkiYQUGjVCOPHgERlxeE2OTyLWU1s684cdK22p1RYiLdpIuK2JSbEVeuUW0LmYMOtXiQtXM46SZSNxLQLmU6Qd5lc5j8Q1IuPBB4FW7hqU0StbXwtyLg2XUTR5cGRSka5VUog\u0026ext_cid=0\u0026pop_price=3.5000000000000004e-05\u0026pop_ecpm=0.008461142471500992\u0026px_id=0\u0026min_cpm=0.20533500549838607\u0026out_id=1\u0026campaign_type=lq-pop-ext\u0026aid=4167\u0026cid=21764\u0026uniq=\u0026mid=4922339818344730175\u0026skin_id=52\u0026vertical_id=11\u0026skin_test=0\u0026from_cache=0\u0026ecpm=0.035\u0026cpm=0.035\u0026verify_hash=147515ce3b8821a7e0bf962ca8058102\u0026verify_hash_v2=c181e2cc6308f30d15fbed82fdb339a8b898bc3b4a56f7a0d505f9bacc75e299\u0026is_native=3\u0026real_bid=3.5000000000000004e-05\u0026pop_real_cpm=0\u0026pop_real_bid=3.5000000000000004e-05\u0026original_bid_usd=0.035\u0026original_bid=0\u0026show_type=0\u0026exp=0\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=4,20,27,150,11,123\u0026need_redirect_show=0\u0026applied_features=coef_095,main-skins-settings\u0026show_count=1\u0026expiration_timestamp=0\u0026image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FSG%2FSG_083be47dfc3e28c9a68305b76181a5033bc45790.webp\u0026site=native-push-adult\u0026price=0\u0026hostname=auc-inpage-hz-12-b\u0026auc_type=1\u0026pop_type=1\u0026is_pop_cpc=0\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=\u0026pop_cpc=0\u0026ext_campaign_id_str=101785\u0026is_webview=0\u0026client_price=0\u0026direct_client_price=0\u0026priority=0\u0026client_payment_model=\u0026is_in_app=0\u0026auc_domain_type=hash\u0026script_type=general\u0026tma_wallet_balance=0\u0026processed_keywords=HD%2CAdult\u0026is_iframe=0\u0026traffic_category=adult\u0026iframe_click=0\u0026estimated_ctr=0.06261344078843094\u0026social_network=\u0026publisher_id=116783\u0026advanced_pub_id=0\u0026user_click_counter=1\u0026lv_id=0\u0026service_spot_id=1461443\u0026mediation_ecpm=0.035\u0026mediation_type=default\u0026entry_source=direct\u0026is_second_price=0\u0026payment_model=cpm\u0026final_source_id=0\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=iosNotification-view-m_m-body\u0026mlf=1\u0026mlc=1\u0026cpa=cfeaf4bd-26c0-4fb5-9e4a-4dc6545d9625\u0026prev_step_diff=1117\u0026st=0.04 HTTP/1.1\r\nHost: 2830fe954a.d88b2835c6.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Sat, 10 Jan 2026 06:46:28 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"2830fe954a.d88b2835c6.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026dsh=S-450980237%3A1768027587700448\u0026hl=en\u0026ifkv=AXbMIuDG47-s1LFpYkvfsvogqVeAYHc0Y_56NGFAxqs44N4cnnhb20_qso3E0en6zV_qJYyzUDzK\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"173.194.221.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:28.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:50:09 GMT","end":"Wed, 25 Feb 2026 15:50:08 GMT"},"fingerprint":{"sha1":"70:35:5F:58:F3:50:B0:2A:0E:11:9A:FD:D4:67:00:94:17:0E:03:EF","sha256":"01:93:34:8C:59:AC:52:25:54:81:E8:50:E1:E9:8A:11:1F:3C:82:81:00:B2:90:35:17:5F:25:9C:C2:2D:D2:E2"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026dsh=S-450980237%3A1768027587700448\u0026hl=en\u0026ifkv=AXbMIuDG47-s1LFpYkvfsvogqVeAYHc0Y_56NGFAxqs44N4cnnhb20_qso3E0en6zV_qJYyzUDzK\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 10 Jan 2026 06:46:28 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-HW2F_qZWO7FynwrERnsG5A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/recaptcha/enterprise.js https://www.gstatic.com/recaptcha/ https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.O2IxjaDA--M.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/092_deference-lorelei.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/092_deference-lorelei.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27646\r\nlast-modified: Fri, 29 Aug 2025 06:42:35 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bdb-6bfe\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iDcbs50UWwliPcsPuApkWBvEeQ0nWRMI1UOGtt8CTzId%2FlucQzuc9%2FvIhsWNt%2BvsEQ3bYqSrq%2BlO2ew%2FiqMKVFGGT5BeMdfeYJ8MTDLLNQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37904a91783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27646,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"330603c0c5f333adc68b0d161957c8e7","sha1":"97ea93dcbdd6b8ae2a74880e55e446749ac31fcf","sha256":"d5c986916c452e03be9f1d90ef1a8c078ffa02fc1e85816c01b93a20eed5d0fa","sha512":"1aa7fdea7c902941d5e87c144620f528ffed0b8b51c9b969ad77b8da68031df49050f5e3d1dccb7e4a8706b3bc534315e3b9c04f6ac8c067b298cdc212079254","ssdeep":"768:CY3WbJe7b8BiVu5ohOzExWZUtCGIIS+UQyeaD:C3A7AYVkYWoO0y1","tlshash":"d4c2f0f4be1b76d7df3dc1e358c58db469d29241fd8621609ac720f39780a24d6f2066","first_seen":"2025-10-19T02:15:19.567431Z","last_seen":"2026-04-12T14:36:08.285175Z","times_seen":30,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:25.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:25 GMT\r\ncontent-type: application/javascript\r\netag: W/\"92eb331739d51c65226b5fdb07e\"\r\nexpires: Wed, 07 Jan 2026 17:40:28 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3YA8AAAwBuUwKDAH3AQAAAAwBw7WvAgG3VAAAAA\r\nx-77-nzt-ray: 2a494a150440e8ebe6f561693f078f18\r\nx-77-cache: HIT\r\nx-77-age: 3936\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":185387,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39040)","md5":"6bd931315f9ec922d23220a34a506421","sha1":"92eb331739d51c65226b5fdb07ec2d74924f200f","sha256":"28f33740f0a341c823243413c7780d92e7ae39254641174a86a4f51ac805b576","sha512":"26bb36ab577ba2b6486f482177e31992c81c79322070edc9d55af10d7ab8f3e1b9dccc89f7c925a47a68e464f522736c0e64d3d7e4acaa016745e0104bddb167","ssdeep":"3072:cWYjf7+28VOk2DG2cUMaElwnRlqI1fsBHisiEolY4o/CXMXpo:U+28VOk262lElwnRjfs4sXhpo","tlshash":"96045c993792307441d3a11daaff53093371506ab80f4884bb4dd8a427adeea51a3ffd","first_seen":"2025-12-11T15:18:11.624048Z","last_seen":"2026-01-15T17:17:43.902034Z","times_seen":1441,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fh-wgt.com/api/request/v1/affiliate_1?exp={%222008%22:{%22g%22:%22b%22,%22v%22:2}}\u0026language=en\u0026orientation=straight\u0026quantity=4\u0026target=video\u0026utmCampaign=ai.mxY","fqdn":"fh-wgt.com","domain":"fh-wgt.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=vgrVQ_vuRFRxeSWfjKPOnXitlaqqtsNempNBquKydHa58W6jrz4DRT3LrKFReABeBCRRzNgyS2-JbSql0ZKsCnQ5QkAcATjTV6uD-o8DY7mwtDU_gUIDRUi","date":"2026-01-10T06:46:27.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fh-wgt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 07:52:18 GMT","end":"Thu, 12 Mar 2026 08:46:58 GMT"},"fingerprint":{"sha1":"B2:24:80:80:56:D5:4B:BA:F0:B8:F8:4C:4B:04:5B:49:EE:43:C3:09","sha256":"EF:9B:90:58:7D:7D:6C:99:D2:BF:9C:64:29:CD:E7:76:55:A3:D8:89:AF:7A:BE:85:CE:55:06:D9:57:E4:E9:95"}}},"request":{"raw":"GET /api/request/v1/affiliate_1?exp={%222008%22:{%22g%22:%22b%22,%22v%22:2}}\u0026language=en\u0026orientation=straight\u0026quantity=4\u0026target=video\u0026utmCampaign=ai.mxY HTTP/1.1\r\nHost: fh-wgt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cdn-fc.com/\r\nOrigin: https://cdn-fc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:27 GMT\r\ncontent-type: application/json; charset=UTF-8\r\naccess-control-allow-origin: https://cdn-fc.com\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-headers: Cache-Control,Content-Language,Content-Type,Expires,Last-Modified,Pragma,Access-Control-Allow-Credentials,Access-Control-Allow-Origin,X-Referrer,X-URL,x-stats-uid,x-guid\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 600\r\nx-robots-tag: googlebot:noindex, indexifembedded\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ToPSU6MjsNvfH2m2BYM6TF7OkOFAKEC0x86NOjOIBJBynCfa9hLxT2MVEw0AHVtLoiMpwczLYHEWnwrWf%2Bp8mn%2FGIZaJREP7\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9bba37a50dc156c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4017,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"68b1d74e7c38e9dea73d4eea5ac34a2c","sha1":"16bd0947494c853c0f7f4007276c1748ca52adca","sha256":"c49f2d0a41c598f4e0d5749947e48d1c20cf209d8ec64e62af908fd89f8d5d13","sha512":"1616b5359437b7f6408762b5d4683d4526e235910489d0c25a771cf112510fac490678326cd344956021fae834ed264d4b1eb0485c1d9d5ab6a0158a0b2a3907","ssdeep":"","tlshash":"618151f70b8e07771b8417d38c8bf95da6a61c4554c0ee82fc21d99d413c8bba52e18a","first_seen":"2026-01-10T06:47:19.622593Z","last_seen":"2026-01-10T06:47:19.622593Z","times_seen":1,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"fh-wgt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"fh-wgt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/064_tomoka-at.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/064_tomoka-at.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24644\r\nlast-modified: Fri, 29 Aug 2025 06:41:46 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14baa-6044\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kwud8CoeGn8wfCdxrjPIGXqn1spR09VemZ1XCGJ8sdQFlYx9xz%2FhJvCKgsadaVjOKka25AXs3dCs1enHrUJsb7u4ajrOXS6IQtF0AyRgzg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37900a54783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24644,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"ee5b949c4b9f84969414916e0864599c","sha1":"16039da582c8db37f8354ba2ab8a21e730ccf1b8","sha256":"3356b06ed80694bd959e89024c291182da5490729c15276327f0d597baaa5fd1","sha512":"c92120b2c646484b5d866b4e5db058b191fdb7b97466fe094fcfbfe243a3767f82bf58b3151da3a9551a22b98773b79e24c479237b8dfc058c7386d304ca52a1","ssdeep":"384:RZts0dye2pj48fb/oghtDOk8JZNvHai+RFtRa98PtQzvIf8kML1x4wBs:vvX2pU8fr/Hf8JT/+RFK98ld+hxXm","tlshash":"1ab2e141c80fbf8cec081ea69a753b5b866c4db98b5152b440a17adc4330eac8ff1d31","first_seen":"2025-10-31T12:17:27.074744Z","last_seen":"2026-04-12T14:36:08.218772Z","times_seen":27,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/068_hear-hclips-ichijo.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/068_hear-hclips-ichijo.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21535\r\nlast-modified: Fri, 29 Aug 2025 06:41:56 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bb4-541f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ku%2Fic8xzqzlObQH2C1FDoY1Lo%2BxkwR%2Fc7kjjoJVxmMmMB8mqmuehgEMSJ9dVVUncWMOPQ1mu4unuWmFzsLM3xmZs4x5%2FHHj4XahuzD%2BBRw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37900a5e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21535,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"b4d945c37b87dab9313077d2a368bb01","sha1":"79f479ab8ed55498017c586572678ab49a510ea4","sha256":"2475d35d40582419128720077d9e715a931a00a94b6c6c5a004bacf544220f02","sha512":"d3b580732421f63a311e43ea5c879fa5de410ecc2d04b6ca79d7d683341cd0354535e7890f7296dda2116d32d7b83b6a433c1c97ffae767d689494090e3883ef","ssdeep":"384:Fi4NHsZPvpHGUi7bskFSZRjFMuStl2xI3/+9Lc5l8AAZsAs10scP4FtgdO0Bwg:Fi4NHQvpBm4os56u0l2x0sLYl8AvAs18","tlshash":"70a2d0b62f458914ef4c70c856f389694bfcae7964395a2c4c8bede24005b139ef498e","first_seen":"2025-10-31T12:17:27.086718Z","last_seen":"2026-04-12T14:36:08.285747Z","times_seen":25,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ntvpforever.com/keywords","fqdn":"ntvpforever.com","domain":"ntvpforever.com","tld":"com"},"ip":{"addr":"168.119.25.102","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:26.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 02:02:57 GMT","end":"Wed, 25 Mar 2026 02:02:56 GMT"},"fingerprint":{"sha1":"C4:80:D6:E8:F3:2B:FD:8A:89:D9:CF:8B:78:3F:74:35:34:B3:68:8A","sha256":"DF:07:A2:74:C6:6C:63:AA:37:DD:AA:4F:E0:F5:C5:D7:9C:B8:28:C4:9C:45:3F:F7:BC:1B:0A:AE:7F:38:FF:B1"}}},"request":{"raw":"OPTIONS /keywords HTTP/1.1\r\nHost: ntvpforever.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://hclips-porn.cfd/\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.18.0\r\ndate: Sat, 10 Jan 2026 06:46:26 GMT\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":87,"dns":9,"connect":25,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/133_hclips-absorbing-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/133_hclips-absorbing-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25918\r\nlast-modified: Fri, 29 Aug 2025 06:43:27 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14c0f-653e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CZduH5ov4qOh7Z%2Fg696itEsqc5Udq0jaU2K4YBNnwKqMhjtfAeetDpofIJJq7nlIa7jPTPf5ZOyCQ2MD%2BJ8QCiK%2Fs4V928kThIfxkWxHYQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37905a98783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25918,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"f252728cfc68bd70b8f7025b4f362fe5","sha1":"ed5e049c5f4535ed9a0bc77f4a17460015d669d6","sha256":"3bf91da371298490e795ed715b970394379543c4f8eab2a6b5fd514c8a3f8b68","sha512":"e35ebe46059b56cb0427c40b64fc7b2c3cb447de120e7c155314d1fa9095e7d663cfe8ef4675b781580414cb0bf2c025455a766d061b070e668d58e40ac713b2","ssdeep":"768:byuojNQOm3ZsRnSplOVHLIf55/fFLra2s0:sjNBm3ZeNm7fZra2s0","tlshash":"37c2d1001be9fb2b5b22b7f2051c7a8e68b9c6f176ab55f58dc382c5159ed0a50f1e08","first_seen":"2025-10-05T06:05:59.907027Z","last_seen":"2026-04-12T14:36:08.30594Z","times_seen":31,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/028_butch-away.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/028_butch-away.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:23 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21722\r\nlast-modified: Fri, 29 Aug 2025 06:41:00 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b7c-54da\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZPFOMDnkTdiMg7LvDX8EsPdlCO47KN40kLvr8EnYIWYwc7rwE%2F4h5m0o4c%2FNVfhc0xRizpTDP0XPg34BH7ON5TeTniiM%2Frvny%2BjiBgBJGg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba378fca36783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21722,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"054228884fba7025be0af6210858ac4e","sha1":"845033a8c39d65fbf71edffeba333b2dc1b899b2","sha256":"904a4e35e5cab95a81238f50e4760fb53c448ac36710f14e65e15ab7457c0235","sha512":"25a5e89a0b0ba4921cee72994f34308c35947ed969ff0808fb0a288ab888f2a8262c26dd2229c2faf5f01a6c69ec1cb9a832d57406df8a055c51b187fee6d3e9","ssdeep":"384:mDYe1rvyi6X0T1eYbisa/zByoDvyLIbF2OrJuHJLPtCYPfequ25Me5vjIX0:mDXTVTjro7yFEJuHJPoSNJ5Me5jK0","tlshash":"56a2e17a67257ba2e7f30b33e893817d84f5391da24497f124d1e8d850952cbb23364d","first_seen":"2025-10-31T12:17:26.889855Z","last_seen":"2026-04-12T14:36:08.153941Z","times_seen":14,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/022_fanfick-dem-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/022_fanfick-dem-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:23 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23580\r\nlast-modified: Fri, 29 Aug 2025 06:35:57 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14a4d-5c1c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uy09L2n6xNPjmHUj%2BXZ8xUSjc4RJfcFnZYsOztZsO7vKPIaLJUhQDDoiDlA%2F2hhSc%2FPXE8xFvitytIbwYwj%2BlDgcKEAYm7bgWXlewQrZbw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba378fca32783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23580,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"c1fc479d4d395a9f057af09cac162b6e","sha1":"f27f91e9da4fcaa73eec7a928869ebb8029f0b2f","sha256":"2e75a69f8bfebda7fffcb17a0a6282c941847bd7a569c00a67aebc745d03645a","sha512":"928bc5cf05661ff1c6a2c5a5c8b73039e1a5c155977503c18ab667869eb288dff4f574dca5e1d90d0869bb37d5629fe6f827c4e9dae4c8a758d5030db2fe7e52","ssdeep":"384:hy1rHdQxBxqmo9p0BNdp6eKLHDu3QVX+N6wXDlOWLFwVBdzUUHkE1pUlrW6Q:hy121qX9INdp6eKW3aeTnpwVwE1pUa","tlshash":"10b2d0b2407ca6336736da7556fceb2998be0c40c72fe8332e5486f530c925a4635d17","first_seen":"2025-10-31T12:17:26.965864Z","last_seen":"2026-01-10T09:02:32.788064Z","times_seen":11,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/051_say.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/051_say.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23338\r\nlast-modified: Fri, 29 Aug 2025 06:41:28 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b98-5b2a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iRg89JAqnBMuSH77fHK4hHyZ%2FQpToQiJHu5FvPmKmCXB1Z7m5CzMHnOTv4hF%2B6NxEToUee7qi%2BqEBvV4COUdg6W8V0ThBaJqYzalgMN0FQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba378fea45783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23338,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"4b5b4a3ec6af24a9d5f54af4c0d58e50","sha1":"9dcbbc5f04aa2dc86c14b409f1ba438aa22061cb","sha256":"cfaae528d3eb102b3c1e2f55f1696b1745be8ae2c98c776d0dd4e746fbfe9e9e","sha512":"2f7552e84c6f8d13030128ef91736ceb8e65a88cf15e011c3611a14a8bb2152af0dfc2305c545ae8b4741386adab1e43dbf1de0de675c5d137e98f885c0fed78","ssdeep":"384:tPAPv/9bDkQPF/6NXDuaoFi8bZ/ZF06njibUHfe31VMVrY2amaLCeL0D+G2Geder:tPA1DgNXiaoAAZO6n+dPMVmLF0Dz29dA","tlshash":"b1a2e173a31980468f22b83d05b3b556fe4b7f3982d6f13d5920d0eda2b85e109e4c6e","first_seen":"2025-10-31T12:17:26.996517Z","last_seen":"2026-04-12T14:36:08.284593Z","times_seen":27,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/124_roughly-the.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/124_roughly-the.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25279\r\nlast-modified: Fri, 29 Aug 2025 06:43:18 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14c06-62bf\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a9y9mAcaTHVcUJUm3R70eUoDBnn6MA1WbztPl88VUgdTxjm3RB2FrOhRo6xvbtJC30Xxew3IM5UXkLMzO21tde3a5plJPLq59pNnqwn6MA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37904a8e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25279,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"b9f4db9280e7e89094778cb489a0f0c4","sha1":"e72baf09858fe9fd44d10c3b9f49b2654315b410","sha256":"db675e7863eaec180382956e211778c3da105b1f12913371d9db3881e36cd504","sha512":"f77020656eaa9c74edaceb907ed517b5f4685fa1294ce8dfa7cf0eaacabcf9c46b26588ad7489ba1e25227f4149f47021fa4fbfed49b443d574d0d042cf9c030","ssdeep":"768:qTphm7o/4YM0cBdQr0FyudxXdkN18SPY/vRAG:Kjkow0cBdvXdkkH/vCG","tlshash":"70b2d0537e5617c9f1a1bc258622c38523e1b7c6ac7192674b342bf1827f0f54f91a4e","first_seen":"2025-10-05T06:05:59.982453Z","last_seen":"2026-04-12T14:36:08.275506Z","times_seen":31,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/132_dewy.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/132_dewy.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20198\r\nlast-modified: Fri, 29 Aug 2025 06:43:26 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14c0e-4ee6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236696\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6wu1BNE2OW2HtZZt8p%2FpKbRCNhxE3MTX4aw8gaGx6bqq%2FQjNSYt%2FAMQ4oyTMMfS3cxkWvAiIf7BKJBS54u4O%2FeTRqRoB9RP85fuccjA8TA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37905a97783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20198,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"5b957177ec016c4a61bf364abbea9d6e","sha1":"2f254fbb0cc4180f33893da352e7f59cbccd01cf","sha256":"4c7e5a744bc640460e39388b0a6e19a8d7179f6661d5204b13a9b2b220da587f","sha512":"67d285f1eed4184f190c6ebd335a059dd31ef070f0f4ce1a0932e57878ecc761b2d12e68023a72b9596850c28767f449c4d037f55e57d37db1921066f7297cd9","ssdeep":"384:lwbRkL5RIJ+cGClFipDVXC/jLstn5Fh+t9kXsmCd0GV/3E:2bMiFijXC/kbCeXstd0GV/0","tlshash":"f292d0efd3375919684f1ba5442102d9fa504f30e7a247784a8aeedaf7470724628db0","first_seen":"2025-10-05T06:06:00.052607Z","last_seen":"2026-04-12T14:36:08.220657Z","times_seen":32,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/073_anna-lip-long.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/073_anna-lip-long.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24553\r\nlast-modified: Fri, 29 Aug 2025 06:42:04 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bbc-5fe9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8%2F9JcDSJ0H0toY5bW1vFIK9DkMv%2FFT9P5OeBe7y10JUZNbjzd4IF8WawP6FyEBzwyTOgl9zuFuS%2BQO2OkgGOdIuArFmqnyACguBNa119Xw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba3790baab783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24553,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"6c449e8828cc6801266555bafbcfd933","sha1":"bf68e0db3db8184b4ab0b7393dbe87c287a44e1d","sha256":"d87bcd322f497597aeb3220a5691e55cf09a0810ad255c3836dc4e458bd066c0","sha512":"cc892516b78feedd0afd453fae24384727463b0406e9d1b3736a04389f1d9a25d1336834baed485aa25166406b7615c5cce319f465739cf247ace4068084607b","ssdeep":"384:Ay6DSiUgOp8y7PjC7+JjNAoswhI8WUH0T8ClbvaG9Oxd+77+BnsxVr0KufrFJxjM:AnTUgOr7PTbAy33MH9gUyBnbfrzxjNFg","tlshash":"fdb2e16ba78b1415c63c4276312939c3ce4bce166fe047d07eda1ac4936448bb0f3b68","first_seen":"2025-10-19T02:15:15.008986Z","last_seen":"2026-04-12T14:36:08.188812Z","times_seen":29,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ic-nss.flixcdn.com/a/M2QzYjNlZWJkNWZkMGE4Nzk4ZTEyZGY3YzkzMjYyYjk/jpeg%2Cs%28w%3A480%2Ch%3A300%29/video/W9/W9zQWp/screen/6-Yv7.jpg","fqdn":"ic-nss.flixcdn.com","domain":"flixcdn.com","tld":"com"},"ip":{"addr":"185.76.9.5","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=vgrVQ_vuRFRxeSWfjKPOnXitlaqqtsNempNBquKydHa58W6jrz4DRT3LrKFReABeBCRRzNgyS2-JbSql0ZKsCnQ5QkAcATjTV6uD-o8DY7mwtDU_gUIDRUi","date":"2026-01-10T06:46:27.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1029385688.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Dec 2025 18:50:04 GMT","end":"Tue, 24 Mar 2026 18:50:03 GMT"},"fingerprint":{"sha1":"89:82:7B:71:7C:2C:D8:62:C2:8F:3E:F9:76:0C:8B:29:7D:68:59:20","sha256":"C0:00:52:93:BF:15:D7:B9:32:32:A5:60:99:A4:6E:A4:AC:B1:57:6F:3F:46:CD:1C:9E:CF:BF:7E:21:62:F9:76"}}},"request":{"raw":"GET /a/M2QzYjNlZWJkNWZkMGE4Nzk4ZTEyZGY3YzkzMjYyYjk/jpeg%2Cs%28w%3A480%2Ch%3A300%29/video/W9/W9zQWp/screen/6-Yv7.jpg HTTP/1.1\r\nHost: ic-nss.flixcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-fc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 65685\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: ic-0\r\ncache-control: public, max-age=1296000\r\nexpires: 1768907861\r\nx-rsic-cached: yes\r\nx-rsic-responder: ic-1\r\nstrict-transport-security: max-age=63072000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-77-nzt: EgwBuUwJAQH32FYGAAwBnJIhLgH3FgEAAA\r\nx-77-nzt-ray: 5637663579d1b59dc3f56169792bf12b\r\nx-77-cache: HIT\r\nx-77-age: 415448\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":65685,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 480x300, components 3","md5":"b51420e7ad93a8edd65d9a2953cb5e9b","sha1":"c51305e8b05bbd003f2e04492615c7ee42e759c0","sha256":"e3ae5741dbe21d5853288636468bb4ebef5096a3c974a3da60bb54a524bd3f82","sha512":"dccf43fee39af9c9956ecb11c158a2e5422d714d09ea1589df5bd185d4b0822b1b52d30ae951191c5ca96e2cefe099fc9682e9425bcda2c6472f4c9f6707a385","ssdeep":"1536:qQet23Wuja8TEXCglLUNnL0xd0aKaZ55/3:q3t23WujaBXx0nA/0aKaV","tlshash":"d05302645af25fc6f8b97075f8c01a11b68ebd0c5f8a605105cc337a9bdeec04c9d266","first_seen":"2026-01-10T06:47:19.645956Z","last_seen":"2026-01-11T14:33:37.157569Z","times_seen":7,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":131,"dns":53,"connect":7,"send":0,"wait":14,"receive":29,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:25.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:25 GMT\r\ncontent-type: application/javascript\r\netag: W/\"92eb331739d51c65226b5fdb07e\"\r\nexpires: Wed, 07 Jan 2026 17:40:28 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3YA8AAAwBuUwKDAH3AQAAAAwBw7WvAgG3VAAAAA\r\nx-77-nzt-ray: 2a494a150440e8ebe6f56169c849cf18\r\nx-77-cache: HIT\r\nx-77-age: 3936\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":185387,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39040)","md5":"6bd931315f9ec922d23220a34a506421","sha1":"92eb331739d51c65226b5fdb07ec2d74924f200f","sha256":"28f33740f0a341c823243413c7780d92e7ae39254641174a86a4f51ac805b576","sha512":"26bb36ab577ba2b6486f482177e31992c81c79322070edc9d55af10d7ab8f3e1b9dccc89f7c925a47a68e464f522736c0e64d3d7e4acaa016745e0104bddb167","ssdeep":"3072:cWYjf7+28VOk2DG2cUMaElwnRlqI1fsBHisiEolY4o/CXMXpo:U+28VOk262lElwnRjfs4sXhpo","tlshash":"96045c993792307441d3a11daaff53093371506ab80f4884bb4dd8a427adeea51a3ffd","first_seen":"2025-12-11T15:18:11.624048Z","last_seen":"2026-01-15T17:17:43.902034Z","times_seen":1441,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/dsp-pixels","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.70","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:25.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Nov 2025 07:32:01 GMT","end":"Sat, 28 Feb 2026 07:32:00 GMT"},"fingerprint":{"sha1":"30:27:D8:5A:59:AD:E2:2E:0E:9D:6A:5B:1B:BF:60:BE:D2:80:8B:DF","sha256":"A9:DE:14:B5:E6:07:9A:21:0C:4B:AC:5D:B3:F1:DB:EB:1F:27:9B:A9:C9:AD:51:72:F0:5B:0D:91:81:C1:D3:6D"}}},"request":{"raw":"GET /dsp-pixels HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:25 GMT\r\ncontent-type: application/json\r\ncontent-length: 70\r\nserver: nginx\r\ncache-control: max-age=172800\r\nx-request-id: ed1d85ca-f079-4978-a9b5-c4e027fef67d\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Accept\r\nexpires: Mon, 12 Jan 2026 06:46:25 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: DS9225,DS9201\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d65d54baa73d8c5cf1b4145ed2f566ce","sha1":"1924c807418dc7cdf8135bbf2be4e89402e21bfd","sha256":"282322db040ca32cc2f1657864a542d7b60f5d47f4f0f0f7708704acb3c54a88","sha512":"4d9b73b80c65606c0e31a0666a398ee5660fba63277c5abba2938038ba02c1de315fc3e9be8db67e252b8789699f93644347c5805b5a6cdc1b1063cfc9eb4b37","ssdeep":"","tlshash":"5ba022bb00a8b0ceaf20e0c83008a0000ccf80b820a88088ccf22cc0820b3a23030288","first_seen":"2025-06-26T11:56:09.222052Z","last_seen":"2026-04-16T18:41:19.953194Z","times_seen":3026,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"89ec4d544c.2f6dc696ee.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIxNTUxNDg1OTU4NzcxODExMTAwMCIsInRpbWV6b25lIjowLCJ2ZXIiOiIyLjQwLjIiLCJ0YWdfaWQiOjI4MTIxNSwic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjowLjgxLCJpc192MiI6MCwiaXNfdjJfZW1wdHkiOjB9","fqdn":"89ec4d544c.2f6dc696ee.com","domain":"2f6dc696ee.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:26.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89ec4d544c.2f6dc696ee.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 02:47:52 GMT","end":"Tue, 07 Apr 2026 02:47:51 GMT"},"fingerprint":{"sha1":"24:ED:A5:DE:7F:72:58:7E:AD:8F:78:1A:81:C2:52:19:CB:C3:2D:F9","sha256":"BE:07:AF:49:79:D5:9F:8E:FD:3B:B0:D9:4E:91:4F:20:06:DE:5C:C7:F6:DD:40:E6:D7:6B:EF:22:37:D9:AB:3F"}}},"request":{"raw":"GET /in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIxNTUxNDg1OTU4NzcxODExMTAwMCIsInRpbWV6b25lIjowLCJ2ZXIiOiIyLjQwLjIiLCJ0YWdfaWQiOjI4MTIxNSwic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjowLjgxLCJpc192MiI6MCwiaXNfdjJfZW1wdHkiOjB9 HTTP/1.1\r\nHost: 89ec4d544c.2f6dc696ee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:26 GMT\r\ncontent-length: 0\r\nserver: nginx/1.18.0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nx-cdn-host-id: AH1747\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":375,"timings":{"blocked":173,"dns":74,"connect":38,"send":0,"wait":32,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"89ec4d544c.2f6dc696ee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/039_the-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/039_the-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23336\r\nlast-modified: Fri, 29 Aug 2025 06:41:11 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b87-5b28\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GUeSZ2w95j4A9ipUKvVTh%2Fsxt7y%2BnIxDSaSnZnUlTzb6tc%2FRM3aifQXPc5NWOT7HBkV%2F8mU8W%2FGfC%2FzY1yi8niqQHIL3hrciE4aU%2Bg9AbQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba378fda41783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23336,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x300, components 3","md5":"0852b79c73978ba355c4046afa95f70f","sha1":"3fda4eda4ad4166b816ab7e2d85c20ae1684d2a1","sha256":"0254394d79aad3c95bf5c17454c6dadd7961941b56592315c911eb57884ce745","sha512":"a4566dc56f04ae2241b44f8022765908d377dfcaaf97e461df5c17574dadd21c210e89073ba507891809a83d7eee3927a7272ee9bf0349c09b8e5736cb56f9ba","ssdeep":"384:8F69u2DgspoMFtpOT6Clk+fhx7tsi+J0J6BxH/CiaV+BoZB/41twma:6lsGMQR5zZ+J0JeCialZBgt/a","tlshash":"b5a2e035750013a4a8f3a5326e4c7d362fcb00514885a33e9b4bd6e2a71cbc1097b7de","first_seen":"2025-10-31T12:17:26.999938Z","last_seen":"2026-04-12T14:36:08.223264Z","times_seen":26,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/042_japanese-milf.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/042_japanese-milf.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25702\r\nlast-modified: Fri, 29 Aug 2025 06:41:15 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b8b-6466\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O7cigPXeYfZH3%2BLFK7gTQpLrSnqBC2fylGgAzUAF%2F%2B1HQMExrx2OOsLrNnxImpWWc99Z3tKRl%2F1CM243SHQp7TM1F%2FQTa5usYyw4nfF6Yw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba378fea46783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25702,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x300, components 3","md5":"e0a28a3eec60a400f5b56a6d8f616b24","sha1":"5e5570ed5d6979a98d1eefeb8e93d92e6e42387e","sha256":"19d5ddcdc8647a7e1830bf74eb4a6084424ec5123fcfbba001c6b2f2436a8e40","sha512":"9114267af473b2fefc57ef8b554862bdbf231a1507be50effc01e6114d335028c9a9c0af6831817b33c610f93fc5b80b95233bc356abaebf5485959bdeae2fd3","ssdeep":"768:18KbVvCInvdNgXCF89HfW+aOJHlXhhV0L9pXEg:18KxaVCCVe6JFhhi30g","tlshash":"03b2d0ac37c99849ce924a656e9457c33d2b0709399ca713328fcbc29ba0fd8ed11665","first_seen":"2025-10-31T12:17:27.202863Z","last_seen":"2026-04-12T14:36:08.270032Z","times_seen":23,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/062_anna-xxx-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/062_anna-xxx-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19319\r\nlast-modified: Fri, 29 Aug 2025 06:41:43 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14ba7-4b77\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NpKgvSeEGOC5ay3SqHkOsXkYYZlKb0PCAiYrUCjeYvj7XbtwzsuoDeHLzTxomPDYkHH7dmO3BVi6HS4kVeV88sWoq%2B8T0WYsp6NpDBtrRQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37900a5c783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19319,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"b0de1ca5d310e909407252bbdf0484a3","sha1":"1be6267157f5c1c365a50da401338cd70d8d1373","sha256":"c4cdff8de5506be977b0ff9e42a6c6323021d7f909e5376caf2e83c9c9e0a784","sha512":"a9bcb202fd9cb0b9ae7a5f8f0080c23f7eb0d21ca8a2d5c69b791d06c6811aba18d5890112838f498d271315a4b3303d53b11c9e71a72e3c9fe12e3c777eb419","ssdeep":"384:aIASjk6z2q2ws00ts/bqo2E+g/GU52b+KLyIDzGCY/7jpqiXI:aIAZW2q2Dfpo2EjJ5uyUz1gPkCI","tlshash":"d082d0c68b3e3627a76c44da913d8e25a2355c79403207eaca8d5df39caabd12059622","first_seen":"2025-10-31T12:17:27.014656Z","last_seen":"2026-04-12T14:36:08.135178Z","times_seen":26,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/100_--.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/100_--.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24843\r\nlast-modified: Fri, 29 Aug 2025 06:42:50 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bea-610b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UsL53YqsI5G0SaBXADfwUV686fV0jFh20ihScI20jiikZw4deCweJQdP9xnHChgsPnCtHWJumha7K0z4p1kVh0sX96BoVSYccl4su3pn0g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37902a7a783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24843,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"40e945f3f9a4dbfc02fcf28e058d7551","sha1":"8f0aba0dac426b70ec3fb510ec9b9e25b2b8764a","sha256":"971e2ba1213501b98a474d0e585034866c113e759c272a267ce21a07ba61ae4d","sha512":"7ef134c166959f44cde99bad1ecc61006d54ea2e58f8f6f183618f423ed79c2b53b891a564b835414ef1021ce6592b4d1cc1073355adbf789f141b3d3f6c5f40","ssdeep":"768:wkE1jBD+7gnGWuO/szla6nvAj9HnhRloIodKofL:wB+UGWd0ztnvAFloVUUL","tlshash":"3db2e15887279dbf17e81e32e7ac856ec5f000aa26759b47eba6bac400704477268e17","first_seen":"2025-10-19T02:15:16.746826Z","last_seen":"2026-04-12T14:36:08.308935Z","times_seen":30,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/103_hardcore-arisa.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/103_hardcore-arisa.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21234\r\nlast-modified: Fri, 29 Aug 2025 06:42:53 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bed-52f2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oXe8LReVJ1viu%2F0L4mzNpvC8TobDWZpz7j87MT6H5IAlgEYrp3JsoetPUrjwZnna6gmQvAs4gDKXqmlNzWjd%2B0UKDx691d8vxrKn%2FgukUA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37902a7e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21234,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"3be180f77b947f062ae0d0f05737d029","sha1":"c10ec5b67aaca03af28c2086057b5704d739a829","sha256":"9a655e0512953ac00fd886bd26c85219d9e38a6685c8993ad5676ede55cdbfab","sha512":"b45b3c01f015f575ec3ed7894d863415314d2736021ac070cac5aed1fcb90eccf4576340c737feb6bb38d5ae4c0cc25891e1dfdd1851b6f908e9669837f51df7","ssdeep":"384:G04tz0nMZgvl193idBb5cRnijxjBToatogYY4m6KBrpywBOI878dM:G04mnMuFab5ctGihtFKhpz/zdM","tlshash":"2f92e1d9e20d34446e44d2ae0e0973ecf696b73768f886d87c9060f69593c21dba16a8","first_seen":"2025-10-19T02:15:18.864894Z","last_seen":"2026-04-12T14:36:08.266469Z","times_seen":30,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/114_gives-winning-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/114_gives-winning-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 30062\r\nlast-modified: Fri, 29 Aug 2025 06:43:03 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bf7-756e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xjnb6N4iBvd0Lp8Pu7LcMHrEhCtBGzf3nNfshL%2Bqzfg0%2Be8ImQmTt5Ekwb%2F1dcSt6%2BmBhaYVmWNwnZf%2F9onTiAARj5z6tbPdKrmcYJtyfA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37904a88783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30062,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"acb495353d59b45378dcd4cf6b50aec7","sha1":"33acd9b239f39be6f3ea15579feeaa2002e2e096","sha256":"b3d5b00a6e3482b45e8efe30f9136df42b6c1285e9a4ab907f211b5bc90cbea4","sha512":"15b94bf35c1d577fc90ebacdff77f0ebc8d4f1a79b61b6f77a31cd67dc661965a86fde322d34559635e8ca24e7059cd77555d33beb2f312e52da27c0fe7c2e0f","ssdeep":"768:RJHcL9RzIlcjAN1qU5CKssDeFcQc8HKd4IAsx9myumbl:jHA9V4cjQ1qFsDeWQc8HKqIDl5bl","tlshash":"b7d2f1583ab1248feb1090769e48a116fa985f9c8290c2c7d6db32d1d8f6e4d1f30b5e","first_seen":"2025-10-05T06:06:00.152299Z","last_seen":"2026-04-12T14:36:08.249877Z","times_seen":31,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/077_side-lovemaking-karin.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/077_side-lovemaking-karin.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19321\r\nlast-modified: Fri, 29 Aug 2025 06:42:11 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bc3-4b79\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wp8dedI3OBConADqr1mv3yb41k5m4JLosDzgTZ7jNe7lJ1%2F3jVbx0RGCxlhKUhmTMTbRtADqRpPSnWJED%2BkSOv1GjnFcqsIBVUxtYBry4Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37900a5d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19321,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"0aa5498cd1da060b60da9452d3ce7454","sha1":"c9d65cbaa7045df445379ce7bb92e16e2e2b56e7","sha256":"a6899050d901408c1112e96abfacd6b20c07590fa508056adca8620ddd76a2ad","sha512":"26e871a569eff9c3fa042b2561987a20a203f6e0509b0a1c70a99fb653fbb86e8196ad9f7f5addedf9c3c4e6dd53a1975a8181cd17df09cb2a7c519c672a628c","ssdeep":"384:uylBYe3QRQIcvbLrUNLlSrIAuBIYjkZYE51uX/qMaP8RkOGzSu3pN:uylBB3mEvQNpS0FaokyJyfP8+zf5N","tlshash":"d282f110953ce1f6d19e25b7101546fd98a84c3078f716d2afda22fbc6f0ad0b9c6a68","first_seen":"2025-10-05T06:06:00.085134Z","last_seen":"2026-04-12T14:36:08.289225Z","times_seen":32,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":127,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpadmngr.com/static/adManager.js","fqdn":"js.wpadmngr.com","domain":"wpadmngr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:25.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.wpadmngr.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 05:32:34 GMT","end":"Tue, 31 Mar 2026 05:32:33 GMT"},"fingerprint":{"sha1":"50:AC:07:EC:79:B5:32:ED:7F:C5:56:C7:D3:5B:2F:F0:0D:A1:DB:81","sha256":"04:83:11:68:E8:6D:EA:03:69:80:2F:F0:AF:3E:A6:1D:46:55:C1:87:6E:C7:D9:C1:48:93:67:CF:0E:20:0B:BA"}}},"request":{"raw":"GET /static/adManager.js HTTP/1.1\r\nHost: js.wpadmngr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Wed, 24 Dec 2025 08:35:28 GMT\r\netag: W/\"694ba5d0-24115\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 10 Jan 2026 06:51:25 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: DS8138\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":147733,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bf20c44981795047ce2c610a2100a35a","sha1":"24c225c700d3f4208417651f6779de9758cd90a1","sha256":"0ec0d01651f974e70dc3c7d4cc50599dbd3a818863b7011ef052c3a0641dc161","sha512":"97612ed9de3cfb245c7e6a70420ca817b99f7b6db0dae1395fbc16c1eef8e4cb4ff993954fbddc4917563840baeef269a9edea324b06e0131fc2e2e833266e7a","ssdeep":"1536:O18MdnC5OPz8QP9r2RcZSgtK8sBggHhO12FoX50FtQySd8uj6DzKEVKf7lbe0etc:mFSGSgtqZXqd8uODG0K5y0etsz","tlshash":"c8e34adcb2d2b07407e75099d83f1206b73a1a16b80c9058f6a6e9c17878ddb5237f7a","first_seen":"2025-12-24T08:41:20.196676Z","last_seen":"2026-01-15T08:09:34.935655Z","times_seen":438,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"js.wpadmngr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=281437","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:26.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 11:47:47 GMT","end":"Sun, 08 Feb 2026 11:47:46 GMT"},"fingerprint":{"sha1":"05:1E:63:2F:40:1F:87:C3:0D:F0:42:C7:EA:E8:B1:D8:6F:76:7C:FC","sha256":"1C:13:0E:F6:58:8A:8C:D7:DE:1F:9F:20:D5:17:50:15:02:D5:C8:8E:39:40:68:3F:01:24:F2:73:14:BA:25:0F"}}},"request":{"raw":"OPTIONS /fp?tag_id=281437 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://hclips-porn.cfd/\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.20.1\r\nDate: Sat, 10 Jan 2026 06:46:26 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nAccess-Control-Allow-Origin: https://hclips-porn.cfd\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":97,"dns":0,"connect":29,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-fc.com/creatives/native/native.min.js?v=5.1","fqdn":"cdn-fc.com","domain":"cdn-fc.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=tpZT2Wvf2_df9BAhCONE6OAxGRnrPPtZ69jjd1ix8uT89g5RkUZ7ZXXevlAflAxJkC5VxHxjBV87vsOxVIGGaIQ83PSus_2fkT6MwmnTb1ZytaQ_gUIDRUi","date":"2026-01-10T06:46:27.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 05:59:35 GMT","end":"Sun, 01 Mar 2026 06:57:06 GMT"},"fingerprint":{"sha1":"1B:6D:8E:48:22:E7:FC:C2:4F:06:18:95:F0:8E:39:C2:A6:C8:47:2C","sha256":"DD:CF:71:A7:71:DB:68:1A:18:D5:6C:B8:43:76:78:71:E2:E1:0D:30:1E:09:92:A8:A5:4D:14:57:D3:66:8C:E5"}}},"request":{"raw":"GET /creatives/native/native.min.js?v=5.1 HTTP/1.1\r\nHost: cdn-fc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=tpZT2Wvf2_df9BAhCONE6OAxGRnrPPtZ69jjd1ix8uT89g5RkUZ7ZXXevlAflAxJkC5VxHxjBV87vsOxVIGGaIQ83PSus_2fkT6MwmnTb1ZytaQ_gUIDRUi\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 17 Dec 2025 09:37:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=3600, must-revalidate\r\nage: 2899\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=801OX0cq6i26Ehox%2BQ%2Fgvww0rFzpb%2BSnlYQICklSKS4qef7IrpUaNvVr%2B9MSD26OvBJrfqdqHF1tMy8dMBJqOF6EBL51fL%2Bx\"}]}\r\netag: W/\"694279ec-cb0\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9bba37a41f530b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3248,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3248), with no line terminators","md5":"19c5c52051e21a28734a741b7a193778","sha1":"0e0bb3d82ad35cd8fe2e598af684e6ef9d7dc753","sha256":"a8455faca19605edac1444e10992f037087aa3909c3cccc0ea18ea44ba4c0ff4","sha512":"de77df06b77d1ab2aa9e3ffcb7807dea6623aa94dd2109ad9094aea6d4f2adb6a62465e2ea7a151ec9abd3629bc1bd48609f6d1671f74a8ded1b72cf77900d01","ssdeep":"","tlshash":"c961d7c5d2c49933073532cf4953a675f67c8f06beaa8c50a60b4b8a8e15e458b17fa4","first_seen":"2025-12-18T11:49:00.846008Z","last_seen":"2026-04-16T18:41:19.866585Z","times_seen":525,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cdn-fc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ic-nss.flixcdn.com/a/MzAzYmY2NmEyMzEyNzdjNDhmZmYwZmJjY2EzNzczZDE/jpeg%2Cs%28w%3A480%2Ch%3A300%29/video/rs/rsItYS/screen/1-MA7.jpg","fqdn":"ic-nss.flixcdn.com","domain":"flixcdn.com","tld":"com"},"ip":{"addr":"185.76.9.5","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=tpZT2Wvf2_df9BAhCONE6OAxGRnrPPtZ69jjd1ix8uT89g5RkUZ7ZXXevlAflAxJkC5VxHxjBV87vsOxVIGGaIQ83PSus_2fkT6MwmnTb1ZytaQ_gUIDRUi","date":"2026-01-10T06:46:27.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1029385688.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Dec 2025 18:50:04 GMT","end":"Tue, 24 Mar 2026 18:50:03 GMT"},"fingerprint":{"sha1":"89:82:7B:71:7C:2C:D8:62:C2:8F:3E:F9:76:0C:8B:29:7D:68:59:20","sha256":"C0:00:52:93:BF:15:D7:B9:32:32:A5:60:99:A4:6E:A4:AC:B1:57:6F:3F:46:CD:1C:9E:CF:BF:7E:21:62:F9:76"}}},"request":{"raw":"GET /a/MzAzYmY2NmEyMzEyNzdjNDhmZmYwZmJjY2EzNzczZDE/jpeg%2Cs%28w%3A480%2Ch%3A300%29/video/rs/rsItYS/screen/1-MA7.jpg HTTP/1.1\r\nHost: ic-nss.flixcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-fc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 64812\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: ic-1\r\ncache-control: public, max-age=1296000\r\nexpires: 1769084452\r\nx-rsic-cached: yes\r\nx-rsic-responder: ic-0\r\nstrict-transport-security: max-age=63072000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-77-nzt: EgwBuUwJAQH3H6YDAAwBT3/TaAGTksYTAA\r\nx-77-nzt-ray: 5637663579d1b59dc3f56169b09d852d\r\nx-77-cache: HIT\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nx-77-age: 239135\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":64812,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 480x300, components 3","md5":"df16aa0f132fbf7e7421087bcab1ab25","sha1":"ace3edc9442513f04c3124579e833e4fa983886e","sha256":"295f07355e2fdc12fca10d21e205cf4958a16512902fa8e9e1ed4b6ae2614e55","sha512":"cef4686885f5c19353ec22eb1165dfca3cea0733535bac51a21c733fc0f67a89caba3b0945404ace22c5950833b56654ca72aae06f52bc1aba1399d3fe5ed5be","ssdeep":"1536:qwQ8GO0HOO7G/z1e4k37J0TUAbuUl4GWPUsxLYBKHgU0P6p6JVeEqc/Lbil:qkwHO8G/z3k3ILyUOdNxVEI6JoyLb6","tlshash":"6a53022047a24707e2c2d5770aab2abb1ef7732ad5c031e8e2c4ac0c6e26c54352dbc5","first_seen":"2026-01-10T06:47:19.609005Z","last_seen":"2026-01-12T00:09:39.893596Z","times_seen":13,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":153,"dns":52,"connect":11,"send":0,"wait":17,"receive":2,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:25.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:25 GMT\r\ncontent-type: application/javascript\r\netag: W/\"92eb331739d51c65226b5fdb07e\"\r\nexpires: Wed, 07 Jan 2026 17:40:28 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3YA8AAAwBuUwKDAH3AQAAAAwBw7WvAgG3VAAAAA\r\nx-77-nzt-ray: 2a494a150440e8ebe6f5616948c0a318\r\nx-77-cache: HIT\r\nx-77-age: 3936\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":185387,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39040)","md5":"6bd931315f9ec922d23220a34a506421","sha1":"92eb331739d51c65226b5fdb07ec2d74924f200f","sha256":"28f33740f0a341c823243413c7780d92e7ae39254641174a86a4f51ac805b576","sha512":"26bb36ab577ba2b6486f482177e31992c81c79322070edc9d55af10d7ab8f3e1b9dccc89f7c925a47a68e464f522736c0e64d3d7e4acaa016745e0104bddb167","ssdeep":"3072:cWYjf7+28VOk2DG2cUMaElwnRlqI1fsBHisiEolY4o/CXMXpo:U+28VOk262lElwnRjfs4sXhpo","tlshash":"96045c993792307441d3a11daaff53093371506ab80f4884bb4dd8a427adeea51a3ffd","first_seen":"2025-12-11T15:18:11.624048Z","last_seen":"2026-01-15T17:17:43.902034Z","times_seen":1441,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"js.capndr.com/advertising.js","fqdn":"js.capndr.com","domain":"capndr.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:25.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.capndr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Dec 2025 02:32:13 GMT","end":"Thu, 12 Mar 2026 02:32:12 GMT"},"fingerprint":{"sha1":"5D:9C:D7:15:7D:69:8C:F7:40:12:0E:10:F1:FF:68:59:A6:F6:E2:38","sha256":"7D:0B:09:36:73:70:FE:A2:CB:1A:80:52:3B:1A:C0:0D:64:38:DA:DC:AB:9E:7A:95:F4:55:F2:6A:A4:F0:A8:FE"}}},"request":{"raw":"GET /advertising.js HTTP/1.1\r\nHost: js.capndr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 0\r\nserver: nginx/1.18.0\r\nlast-modified: Fri, 14 Jul 2023 08:23:25 GMT\r\netag: \"64b105fd-0\"\r\nexpires: Sat, 10 Jan 2026 06:51:25 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1747\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":83,"dns":16,"connect":26,"send":0,"wait":20,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"js.capndr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/images/native/backup/stripchat/aryanna_ray_1.jpeg","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.70","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:26.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Nov 2025 07:32:01 GMT","end":"Sat, 28 Feb 2026 07:32:00 GMT"},"fingerprint":{"sha1":"30:27:D8:5A:59:AD:E2:2E:0E:9D:6A:5B:1B:BF:60:BE:D2:80:8B:DF","sha256":"A9:DE:14:B5:E6:07:9A:21:0C:4B:AC:5D:B3:F1:DB:EB:1F:27:9B:A9:C9:AD:51:72:F0:5B:0D:91:81:C1:D3:6D"}}},"request":{"raw":"GET /images/native/backup/stripchat/aryanna_ray_1.jpeg HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: cookie_user_id=a3478f5e-53f5-5f37-994f-8bde9a7ba683; bfq=APeIECNCx5YaOWbIkGEDRxcWIsYU3BLjoYgyE2PcaBgjxowcOGp06aMg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:26 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 28768\r\nserver: nginx\r\nlast-modified: Tue, 30 Dec 2025 14:19:28 GMT\r\netag: \"6953df70-7060\"\r\nx-robots-tag: noindex, nofollow\r\ncache-control: max-age=172800\r\nexpires: Mon, 12 Jan 2026 06:46:26 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: DS9225,DS9201\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28768,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 300x300, components 3","md5":"8d683be3cb77927c5ac41df7ce171bb3","sha1":"bd0fe671bb23cd40b15917ef35dfe20fb6231be6","sha256":"9887ad5f91d038526c91c72011792fa739855ff85c84e31f7933148533244628","sha512":"ea62dce3894ae020cf327b13efff53381d4c1110029050af910b273a027786b91c0198be921977cc29e79b5b80ed8cce5d0095017d85680675c88a05265356c2","ssdeep":"768:CtuDRUiHoZmMni55HwZOKKOtj414FNJBUUIdBzKr2oI/Sy2HF/UvahQ:CtkpH1ci5FwEK/hFNJAdBzMS2HFaH","tlshash":"1cd2f16c26e22839a879b0d27a089c2f4d9dad784c740d4f710636c9f71e62bc66f48c","first_seen":"2023-11-23T11:42:50Z","last_seen":"2026-04-14T15:35:14.330034Z","times_seen":4,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=281215","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:26.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 11:47:47 GMT","end":"Sun, 08 Feb 2026 11:47:46 GMT"},"fingerprint":{"sha1":"05:1E:63:2F:40:1F:87:C3:0D:F0:42:C7:EA:E8:B1:D8:6F:76:7C:FC","sha256":"1C:13:0E:F6:58:8A:8C:D7:DE:1F:9F:20:D5:17:50:15:02:D5:C8:8E:39:40:68:3F:01:24:F2:73:14:BA:25:0F"}}},"request":{"raw":"OPTIONS /fp?tag_id=281215 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://hclips-porn.cfd/\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.20.1\r\nDate: Sat, 10 Jan 2026 06:46:26 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nAccess-Control-Allow-Origin: https://hclips-porn.cfd\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":136,"dns":3,"connect":28,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ntvpforever.com/keywords","fqdn":"ntvpforever.com","domain":"ntvpforever.com","tld":"com"},"ip":{"addr":"168.119.25.102","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:26.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 02:02:57 GMT","end":"Wed, 25 Mar 2026 02:02:56 GMT"},"fingerprint":{"sha1":"C4:80:D6:E8:F3:2B:FD:8A:89:D9:CF:8B:78:3F:74:35:34:B3:68:8A","sha256":"DF:07:A2:74:C6:6C:63:AA:37:DD:AA:4F:E0:F5:C5:D7:9C:B8:28:C4:9C:45:3F:F7:BC:1B:0A:AE:7F:38:FF:B1"}}},"request":{"raw":"POST /keywords HTTP/1.1\r\nHost: ntvpforever.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 96\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":96,"data":"{\"ad_tags\":\"HCLIPS-PORN%2CHD%2CXXX%2CCLIPS%2CVIDEO%2CTUBE!\",\"page\":\"https%3A//hclips-porn.cfd/\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sat, 10 Jan 2026 06:46:26 GMT\r\ncontent-type: application/json\r\ncontent-length: 27\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8830c782ba58b177918e0af708332e1a","sha1":"98c5671ae30c35a8202e63126f290f298a6f480d","sha256":"97436775d6bc61cbbdef428903a320962ba45a4e388e1226cb27b5fcb1fb7c18","sha512":"4d253600c9c5bcff54aa3a271dbc37133766da3e3d729d23506c9bd4ffe0f2d830e4dcc125f09837171db2a9f3fabd514eb009eb05a0a7f1e1ec25dbb1f5fb06","ssdeep":"","tlshash":"0980000cb08a0e030c80a00032008a082008a00a800ebcac20e00c088300200008ca8c","first_seen":"2025-08-22T12:13:06.069507Z","last_seen":"2026-04-12T14:36:08.212576Z","times_seen":119,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ic-nss.flixcdn.com/a/M2QzYjNlZWJkNWZkMGE4Nzk4ZTEyZGY3YzkzMjYyYjk/jpeg%2Cs%28w%3A480%2Ch%3A300%29/video/W9/W9zQWp/screen/6-Yv7.jpg","fqdn":"ic-nss.flixcdn.com","domain":"flixcdn.com","tld":"com"},"ip":{"addr":"185.76.9.5","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=it7_v9mINZsY2FHHRd8f7idZL-DxISKYUEWDNYzup2TzCEm0_qr7AdVAPKWiR3qPIzth_TWtgQ1ya3AKUJlgD5NNIe-7ua_9YB6L9C6SgJXZhEA_gUIDRUi","date":"2026-01-10T06:46:27.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1029385688.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Dec 2025 18:50:04 GMT","end":"Tue, 24 Mar 2026 18:50:03 GMT"},"fingerprint":{"sha1":"89:82:7B:71:7C:2C:D8:62:C2:8F:3E:F9:76:0C:8B:29:7D:68:59:20","sha256":"C0:00:52:93:BF:15:D7:B9:32:32:A5:60:99:A4:6E:A4:AC:B1:57:6F:3F:46:CD:1C:9E:CF:BF:7E:21:62:F9:76"}}},"request":{"raw":"GET /a/M2QzYjNlZWJkNWZkMGE4Nzk4ZTEyZGY3YzkzMjYyYjk/jpeg%2Cs%28w%3A480%2Ch%3A300%29/video/W9/W9zQWp/screen/6-Yv7.jpg HTTP/1.1\r\nHost: ic-nss.flixcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-fc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 65685\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: ic-0\r\ncache-control: public, max-age=1296000\r\nexpires: 1768907861\r\nx-rsic-cached: yes\r\nx-rsic-responder: ic-1\r\nstrict-transport-security: max-age=63072000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-77-nzt: EgwBuUwJAQH32FYGAAwBnJIhLgH3FgEAAA\r\nx-77-nzt-ray: 5637663579d1b59dc3f56169e1d4e82a\r\nx-77-cache: HIT\r\nx-77-age: 415448\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65685,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 480x300, components 3","md5":"b51420e7ad93a8edd65d9a2953cb5e9b","sha1":"c51305e8b05bbd003f2e04492615c7ee42e759c0","sha256":"e3ae5741dbe21d5853288636468bb4ebef5096a3c974a3da60bb54a524bd3f82","sha512":"dccf43fee39af9c9956ecb11c158a2e5422d714d09ea1589df5bd185d4b0822b1b52d30ae951191c5ca96e2cefe099fc9682e9425bcda2c6472f4c9f6707a385","ssdeep":"1536:qQet23Wuja8TEXCglLUNnL0xd0aKaZ55/3:q3t23WujaBXx0nA/0aKaV","tlshash":"d05302645af25fc6f8b97075f8c01a11b68ebd0c5f8a605105cc337a9bdeec04c9d266","first_seen":"2026-01-10T06:47:19.645956Z","last_seen":"2026-01-11T14:33:37.157569Z","times_seen":7,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":90,"dns":0,"connect":0,"send":0,"wait":25,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/bi.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.70","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Nov 2025 07:32:01 GMT","end":"Sat, 28 Feb 2026 07:32:00 GMT"},"fingerprint":{"sha1":"30:27:D8:5A:59:AD:E2:2E:0E:9D:6A:5B:1B:BF:60:BE:D2:80:8B:DF","sha256":"A9:DE:14:B5:E6:07:9A:21:0C:4B:AC:5D:B3:F1:DB:EB:1F:27:9B:A9:C9:AD:51:72:F0:5B:0D:91:81:C1:D3:6D"}}},"request":{"raw":"GET /sdk/v1/bi.js HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 11 Nov 2025 11:07:54 GMT\r\netag: W/\"6913190a-1e16\"\r\nx-robots-tag: noindex, nofollow\r\ncontent-encoding: gzip\r\ncache-control: max-age=172800\r\nexpires: Mon, 12 Jan 2026 06:46:24 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: DS9225,DS9201\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7702,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7623)","md5":"0f2df2696dec627783d1eb7170feea2d","sha1":"37e2e42f854e007185c942897b2a55e5d06a52eb","sha256":"45d1b15de00ad4e8b8551c7144dde989af93e1c9f3f91c514e3dc99545ef0ebd","sha512":"98e561b81de15c6d0f7269a0608f3c8a42ada04b6941bbe54933d75875b0fad3a708025a085f950a45bbb18ee8859d9918144b56f58f30969e36d93b0b786183","ssdeep":"192:p3osvtOztEOzGSC6npKyxtuyMYeUYK7r62Fii4zTd4/iiL/u:p3VOt/1pKEheUFrCDzTd4/iaW","tlshash":"45f1f9fa758231a4996794a1c5afe61fb6387a15360f8c50c07af5823c78dcb9037e6c","first_seen":"2025-11-12T10:23:36.745664Z","last_seen":"2026-02-09T11:49:45.468172Z","times_seen":349,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":2,"connect":25,"send":0,"wait":26,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/b.b.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.70","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:26.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Nov 2025 07:32:01 GMT","end":"Sat, 28 Feb 2026 07:32:00 GMT"},"fingerprint":{"sha1":"30:27:D8:5A:59:AD:E2:2E:0E:9D:6A:5B:1B:BF:60:BE:D2:80:8B:DF","sha256":"A9:DE:14:B5:E6:07:9A:21:0C:4B:AC:5D:B3:F1:DB:EB:1F:27:9B:A9:C9:AD:51:72:F0:5B:0D:91:81:C1:D3:6D"}}},"request":{"raw":"GET /sdk/v1/b.b.js HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: cookie_user_id=a3478f5e-53f5-5f37-994f-8bde9a7ba683; bfq=APeIECNCx5YaOWbIkGEDRxcWIsYU3BLjoYgyE2PcaBgjxowcOGp06aMg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 19 Dec 2025 13:51:37 GMT\r\netag: W/\"69455869-16d7\"\r\nx-robots-tag: noindex, nofollow\r\ncontent-encoding: gzip\r\ncache-control: max-age=172800\r\nexpires: Mon, 12 Jan 2026 06:46:26 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: DS9225,DS9201\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5847,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5783)","md5":"fa0d93d282f8683d19ac456c81debef0","sha1":"0d8b13271cdfd4e29a7c8763abf279297d2a84d1","sha256":"4a96c9570ebfa67dd93c6ea67b613e2bf108a4ad101342f33d4ab36a67198568","sha512":"94295f7da3b823de0d4961139a1c4e61ed232e4e087ffd29270d36fea950c82d870b0c359528375affb751f88ba642bda917a012c5080f6c2d409cb8ccf9fecf","ssdeep":"96:pJZEqoY9fBZeWGqHZvk++OIWtJxtomlGDWtVAQERhKBHYX1o4XT6:pJZmY9fBZeWGoZvkpOIWtloml0hq4L6","tlshash":"40c1d8bd6259f27580dd044b276bab64b7f60065bf238810e09e8c49357cf97c92acde","first_seen":"2025-12-19T14:41:02.491397Z","last_seen":"2026-04-16T19:36:05.830027Z","times_seen":776,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-fc.com/creatives/universal/native/logo.svg","fqdn":"cdn-fc.com","domain":"cdn-fc.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=it7_v9mINZsY2FHHRd8f7idZL-DxISKYUEWDNYzup2TzCEm0_qr7AdVAPKWiR3qPIzth_TWtgQ1ya3AKUJlgD5NNIe-7ua_9YB6L9C6SgJXZhEA_gUIDRUi","date":"2026-01-10T06:46:27.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 05:59:35 GMT","end":"Sun, 01 Mar 2026 06:57:06 GMT"},"fingerprint":{"sha1":"1B:6D:8E:48:22:E7:FC:C2:4F:06:18:95:F0:8E:39:C2:A6:C8:47:2C","sha256":"DD:CF:71:A7:71:DB:68:1A:18:D5:6C:B8:43:76:78:71:E2:E1:0D:30:1E:09:92:A8:A5:4D:14:57:D3:66:8C:E5"}}},"request":{"raw":"GET /creatives/universal/native/logo.svg HTTP/1.1\r\nHost: cdn-fc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=it7_v9mINZsY2FHHRd8f7idZL-DxISKYUEWDNYzup2TzCEm0_qr7AdVAPKWiR3qPIzth_TWtgQ1ya3AKUJlgD5NNIe-7ua_9YB6L9C6SgJXZhEA_gUIDRUi\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:27 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 15 Dec 2025 17:20:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=3600, must-revalidate\r\nage: 117\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PSqtR9r5ABka3Z7SWQXdHumKnZpGxTIq04TDq7XmpQgaYtVjgCiJxCH2FAhIBJ%2FQEPg1RDDLFow4Ue23wgUEzAQ%2FDnMZBGk%2B\"}]}\r\netag: W/\"6940435b-2bed\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9bba37a48f7b0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11245,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5cdfc68fa98e909b02a11337921001bd","sha1":"e27527d996d5a18fa59dc57a8256322e3bdd7aab","sha256":"e24329d29028e4b19b6d3cc62fa35a0cf895ed41436bf0beb35ced7a8b3175d0","sha512":"66153f76e7b48910afa84fedee99f1329e359fbbf31963c12829b10dc34014526aa5e4ca1b21808d3400198b5df3fbf6eed8a602d814cead3f877239587d8afa","ssdeep":"192:pN6Eg4NAU6qWvCurNj4Z775M/acCSu4PU1h7kuN6w6J7/:pSkWKAiZgCLP87/","tlshash":"7b32d9e02276d2e4a606ffddde3398216a2d1cfdbfc48196c2d09da950250c98c6dcf6","first_seen":"2025-12-18T11:49:01.074798Z","last_seen":"2026-02-16T17:00:56.144035Z","times_seen":91,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cdn-fc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/058_over-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/058_over-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23125\r\nlast-modified: Fri, 29 Aug 2025 06:41:36 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14ba0-5a55\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K4hK1oeSrn3DSNiFIl0KPIvEBPIZFtUa7na%2FUxvKD5ucIwBjycBQR1d%2FXNESFJx7KhZHB4IlJ7CuHXVGMGIJmTpl8YtmH%2BGPoVDan8rARA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba378ffa51783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23125,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"da8534cf4507104db6656d42ca17f5f3","sha1":"51bb2d8e7b363f15a1a241a2d646b4fb64ae665d","sha256":"cb87af4bc8afff7be96c06feba0b5395fcb7b9c199dbae61013944dbd2e2f1ea","sha512":"409420d07f8019fc96478c8c44a0884aec46b97e8403fcb685bf819f3ea4f30d5b4985dfeeaef6cb0c16c3674c92cc8c1a81aa2e28ed16dba54ee8ee01724b85","ssdeep":"384:yqviiwD9uV4wCh9anljGA0djGe2dl4B0s1AiDUQsCeBL0TIvzv/2sJNu076A9ZVM:yq6iwDwVWPala3694fUQWBVbV7lbVKss","tlshash":"f7a2e1fc873223fbbcbbc42c602462dd770e55ca3c2a294949d5a3ef6589981fc8c540","first_seen":"2025-10-31T12:17:26.860584Z","last_seen":"2026-04-12T14:48:43.560135Z","times_seen":31,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/images/3/4/f7e46f429156bae462c2e820148f277a5a8389/main.webp","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.70","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:26.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Nov 2025 07:32:01 GMT","end":"Sat, 28 Feb 2026 07:32:00 GMT"},"fingerprint":{"sha1":"30:27:D8:5A:59:AD:E2:2E:0E:9D:6A:5B:1B:BF:60:BE:D2:80:8B:DF","sha256":"A9:DE:14:B5:E6:07:9A:21:0C:4B:AC:5D:B3:F1:DB:EB:1F:27:9B:A9:C9:AD:51:72:F0:5B:0D:91:81:C1:D3:6D"}}},"request":{"raw":"GET /images/3/4/f7e46f429156bae462c2e820148f277a5a8389/main.webp HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: cookie_user_id=a3478f5e-53f5-5f37-994f-8bde9a7ba683; bfq=APeIECNCx5YaOWbIkGEDRxcWIsYU3BLjoYgyE2PcaBgjxowcOGp06aMg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2938\r\nserver: nginx\r\nlast-modified: Mon, 20 Mar 2023 14:35:18 GMT\r\netag: \"64186f26-b7a\"\r\nx-robots-tag: noindex, nofollow\r\ncache-control: max-age=172800\r\nexpires: Mon, 12 Jan 2026 06:46:26 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: ds8138,DS9201\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2938,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 260x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2641f8acab1628e495f3e116794df9cc","sha1":"76887722e579df95c4a21b505f47df61324eb396","sha256":"7818373d0513b876e8abae6acbc43119affae57b4eb9e005ce84049838cf5478","sha512":"dd64e744105cfd5533365b3dbc7b872f7e3cbd693475c572b957ef6a99abe66a94701f484db8c50e3ae00396d78aa77a97c12d2be704b64163e3bfd39091893c","ssdeep":"","tlshash":"4a513dc7d326745ccd88607f25e1f989d522fd2763bc13134c2ecb0d1aa1e62d645e15","first_seen":"2023-04-11T00:21:59Z","last_seen":"2026-04-15T20:56:07.035619Z","times_seen":885,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/images/native/backup/stripchat/johanna_purple_6.jpeg","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.70","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:26.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Nov 2025 07:32:01 GMT","end":"Sat, 28 Feb 2026 07:32:00 GMT"},"fingerprint":{"sha1":"30:27:D8:5A:59:AD:E2:2E:0E:9D:6A:5B:1B:BF:60:BE:D2:80:8B:DF","sha256":"A9:DE:14:B5:E6:07:9A:21:0C:4B:AC:5D:B3:F1:DB:EB:1F:27:9B:A9:C9:AD:51:72:F0:5B:0D:91:81:C1:D3:6D"}}},"request":{"raw":"GET /images/native/backup/stripchat/johanna_purple_6.jpeg HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: cookie_user_id=a3478f5e-53f5-5f37-994f-8bde9a7ba683; bfq=APeIECNCx5YaOWbIkGEDRxcWIsYU3BLjoYgyE2PcaBgjxowcOGp06aMg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:26 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 30882\r\nserver: nginx\r\nlast-modified: Tue, 30 Dec 2025 14:19:28 GMT\r\netag: \"6953df70-78a2\"\r\nx-robots-tag: noindex, nofollow\r\ncache-control: max-age=172800\r\nexpires: Mon, 12 Jan 2026 06:46:26 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: DS9225,DS9201\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30882,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 300x300, components 3","md5":"9f9a58d129cf4b3d60e5a0713404a394","sha1":"ee4a227a6662124123ddae4266d3df6fc282fd1d","sha256":"995e425851595decdd9918c4c2b5ac347591be84429922fea216e918123efa6e","sha512":"6af08cd6ccc5f6f116d9628f1114f07de447ce4a2daeac39d3a1e727b1a5226ab2d1eeacbe7472c544115b1a6c86a5cca3fe27937247e65bb405b5a56dd2d525","ssdeep":"768:A8Sz9siXeZsv8pSPT5g+X0+LU7+7/bXKurTw9:A8mJcSPtg20q/7T3w9","tlshash":"aad2e0127904dd8de56cd6323206028a5e35ff2bbbce642fad111d249c266b6cfde442","first_seen":"2026-01-10T06:47:19.660522Z","last_seen":"2026-03-22T17:36:45.340161Z","times_seen":5,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/093_japanese-the.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/093_japanese-the.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27765\r\nlast-modified: Fri, 29 Aug 2025 06:42:37 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bdd-6c75\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uZ0ztQq%2B1PIHPCHG6BhtG9c%2FAWXcVtQbZFhifoiHi0wzhLs2%2FJBF09VHhNGUs%2Bn1KCKbpN4jQ6rCIPnOBRcP7UyFrBRgSw16bsSbG0QAWw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37902a70783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27765,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"91072b32ec4cf8d1e0d846435cb6ff31","sha1":"c9dfc950affd97bb6bd06c441d9d05f2605affda","sha256":"a10337791049e76af74169a186cbebede835bcd77ffaaa0d9bb473f90f6ee705","sha512":"bf1afc6a5b6aa9b76c1ab8427f521917413a4e636a7252b2702e2548e0afa67bc1d2a7466b5759266055241afa2b7b91cea79be8a32d9e76fae4c7976c28b0b3","ssdeep":"768:MOgYB79E0M7SqAR5mlmrn4EGLrYJARSsUcCP8697:Md+9kXla4EGLkJAAsUcS7","tlshash":"5fc2e136493bd98dc35a02f503300bf4862dab44ed1ca099d881eff93d1275ead8a6f4","first_seen":"2025-10-19T02:15:15.737617Z","last_seen":"2026-04-12T14:36:08.21463Z","times_seen":30,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/106_x1x17519ab5d9339de8e2-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/106_x1x17519ab5d9339de8e2-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16386\r\nlast-modified: Fri, 29 Aug 2025 06:42:55 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bef-4002\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EO%2F64rzG4d4eiDSqyoTXTghpvKmKTQQ55KZqSyBWNfSef6VPNZpiCdAOrzgsZDRmvoVf%2Bn7kD8yP7jrrpT01xKXtjzKi%2FrUxewhBXZbleA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37902a82783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16386,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 640x639, segment length 16, baseline, precision 8, 400x300, components 3","md5":"aa3ff403187cf5731b223a4675963076","sha1":"676dc0da2cd3e684e317b5f113b3394255dfe4a8","sha256":"97dd352a1429a7c2f667fdc9aabdacc5b48772aa273b1ef1acdd1ec271787654","sha512":"c222ca32ecfb75dd3452f22ae79084f42edcbe7f3e97ee5acc410ea794924f4bd35a28bb72c0d1c117e3b5e9717e02901e0d5db19348b256819e043c247f438f","ssdeep":"384:8cd3eREpGXoab0ADiZfYr59IWQDyuGWesdYgh/aT:88uhXZbeZfYLI7DJZeClO","tlshash":"1372d1b1c8d4e11bfc353e340819433805786ad215b36e7a17bb7ee9ba3da3058c56ad","first_seen":"2025-10-19T02:15:16.433971Z","last_seen":"2026-04-12T14:36:08.272075Z","times_seen":30,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA01P0WrDMAz8lf1AjE6RY7nP2+sGHf0Ax0m2wtqUBkoH+vg57trNZ+zjrDvJTNw1hAb0RNhIt2FvES6SE3bwYq9vWxPY9XrZD+O8uJwNMXaq1hLFKCYsqmLwIQTtzJNaaLVdOcBeoxeyslujAvatSGWBbPf+bC+7rcEhAPeLzVDbGlNhBax0BfHqC37SHGNKoY+h60OaFHEC0SgjpzIOStFn/tqfluY0n48uT0NtV+AAWvP4LhQ0a30LabmMVRZZldPyfcxmjzJ/m9nXX/AasPrsX9AfwoOhnos7pI/lfHF5PhTp14XbYxUqEWakPql6QRq7RJkFojQNknXoww/N7WszqgEAAA==\u0026cb=e2e_6961f5c1b32ab9.61642531","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.248","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:26.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA01P0WrDMAz8lf1AjE6RY7nP2+sGHf0Ax0m2wtqUBkoH+vg57trNZ+zjrDvJTNw1hAb0RNhIt2FvES6SE3bwYq9vWxPY9XrZD+O8uJwNMXaq1hLFKCYsqmLwIQTtzJNaaLVdOcBeoxeyslujAvatSGWBbPf+bC+7rcEhAPeLzVDbGlNhBax0BfHqC37SHGNKoY+h60OaFHEC0SgjpzIOStFn/tqfluY0n48uT0NtV+AAWvP4LhQ0a30LabmMVRZZldPyfcxmjzJ/m9nXX/AasPrsX9AfwoOhnos7pI/lfHF5PhTp14XbYxUqEWakPql6QRq7RJkFojQNknXoww/N7WszqgEAAA==\u0026cb=e2e_6961f5c1b32ab9.61642531 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: __uvt=s%3A32%3A%220405a8a3eef143a6018d8c336564261b%22%3B\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 10 Jan 2026 06:46:26 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://hclips-porn.cfd\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":25,"dns":1,"connect":26,"send":0,"wait":25,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pxl-eu.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XMkEGGBg4xOMy0sGGQTAsaOXKUaYGDpJgWOcLUkCEjBwwxOQ7CEPEwTJ0xGW3gkBFjxo0aMFrEkEEjzEmiNGDSMGOjRZkaYszAyIGjTIwbOcTwhEjGDsUZRmHIeAinjliGMWAY7QkHzkKUXx_OgTNRhwwYR2vMcChiTBu7DGHQGGyzJxkzFB-KceNmYY0cG2UIfdjGDUaGmWGw7fz5q4waFUXUiZERDR06cOboePFiDBk3LcyMcTHmTZvacgrSSWOnzJwXddwQRzgnDJsXbsIML_7ix5w0esr0mAEDBp7TMLjU6a65Dp02X8aEORwmzRk3Pdq7aIMni3jyNsyj7-2GTpn-PcxRxxlnGOcfGV_ckQYZBdJxn1o2wBGcHWmUcccXbbxxUA9ovFGcHA9qNkcMPdhxhhxWRPGFHXVIYYQUeJQxxRVmqLEEFE-4gUUadLARRhxx0DGHE2Uc5oQQcdSxRB5kICETDlfYoIYcetBAhBRUzMCEHEu8WEYQQpQhxBBSSKGHE2fkMYUMLSghxhRxsAGDFkvMMYQbUdQQxRpBjBEEFWpQYUV-RLTwBg5EZHFDG3fQQUQVX5xRRRJXVpHGWGT41toYbKQRWwtwvCGHG7yZQcZY6vW1xQwxdCEZZDrA4EJ3hMlhB2LcPVRHHZfqANEMNNwQUg0rCWZGDS3UYIZRMOUwFUtiHBTTDWKEIdQMY3maUQ4xuGCTCzTI4EJDNIwlxxfa-sqtt7KGO24N5eoaRkZNvKFHGmz4-EINs4KAwhVpuJHpHXOA4AQVIMQ16w4gAOyGDTQwjAfEDNsKGg2zpgDCEWWMscYbL_wVFwxxxQCCEWkEZ8YbeLxQFMY7PTQGUL468cRYoqZHswg2j8XGzkU4gWkZdnwRHBsU1XCDsDMI1d1Dcry30Gk43PDQQUWLIcdCOOBwNdEYajh1S6mRIccbC83w0BsK6UADW2fjkYdlUH8hIctz60AY1l_QoUdGMYugcmuvxTbbC2hw6ukcoIpK6himvjDWHRnFxdRYaFQuAw6Bz2FrRmfTIZ2oLSTHY7I3uECGDDh7bpZfYAkVg2lqi0DGzgd9sfpY51F0g9MyHIUDYeexztDvnAdfw_CyO2a0cXB8IZ3vwAtPGNjOISTkQqtWBKyrEInRl-1lmOETGxOx9fNCohX2WftjZK7DFiKMZf9D99eP__7695-__V3ogwICAg%3D%3D\u0026s=885b71bc3a5ade450cd53ca4947dd98f737d8f6eeaf4902d56687c87d9d555e91768027585\u0026w=t\u0026r=1\u0026d=850\u0026priv=true","fqdn":"pxl-eu.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"148.251.4.157","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:27.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tsyndicate.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 21:10:04 GMT","end":"Tue, 10 Feb 2026 21:10:03 GMT"},"fingerprint":{"sha1":"BB:2C:CE:C9:92:0E:A9:18:50:BD:8C:7E:7D:B2:E6:CC:72:54:29:18","sha256":"3B:E3:8E:A4:C5:EC:08:3B:96:2B:B0:16:ED:56:3F:0A:CD:55:81:4A:8F:FC:97:83:57:FC:6E:F9:FD:F4:43:83"}}},"request":{"raw":"GET /api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XMkEGGBg4xOMy0sGGQTAsaOXKUaYGDpJgWOcLUkCEjBwwxOQ7CEPEwTJ0xGW3gkBFjxo0aMFrEkEEjzEmiNGDSMGOjRZkaYszAyIGjTIwbOcTwhEjGDsUZRmHIeAinjliGMWAY7QkHzkKUXx_OgTNRhwwYR2vMcChiTBu7DGHQGGyzJxkzFB-KceNmYY0cG2UIfdjGDUaGmWGw7fz5q4waFUXUiZERDR06cOboePFiDBk3LcyMcTHmTZvacgrSSWOnzJwXddwQRzgnDJsXbsIML_7ix5w0esr0mAEDBp7TMLjU6a65Dp02X8aEORwmzRk3Pdq7aIMni3jyNsyj7-2GTpn-PcxRxxlnGOcfGV_ckQYZBdJxn1o2wBGcHWmUcccXbbxxUA9ovFGcHA9qNkcMPdhxhhxWRPGFHXVIYYQUeJQxxRVmqLEEFE-4gUUadLARRhxx0DGHE2Uc5oQQcdSxRB5kICETDlfYoIYcetBAhBRUzMCEHEu8WEYQQpQhxBBSSKGHE2fkMYUMLSghxhRxsAGDFkvMMYQbUdQQxRpBjBEEFWpQYUV-RLTwBg5EZHFDG3fQQUQVX5xRRRJXVpHGWGT41toYbKQRWwtwvCGHG7yZQcZY6vW1xQwxdCEZZDrA4EJ3hMlhB2LcPVRHHZfqANEMNNwQUg0rCWZGDS3UYIZRMOUwFUtiHBTTDWKEIdQMY3maUQ4xuGCTCzTI4EJDNIwlxxfa-sqtt7KGO24N5eoaRkZNvKFHGmz4-EINs4KAwhVpuJHpHXOA4AQVIMQ16w4gAOyGDTQwjAfEDNsKGg2zpgDCEWWMscYbL_wVFwxxxQCCEWkEZ8YbeLxQFMY7PTQGUL468cRYoqZHswg2j8XGzkU4gWkZdnwRHBsU1XCDsDMI1d1Dcry30Gk43PDQQUWLIcdCOOBwNdEYajh1S6mRIccbC83w0BsK6UADW2fjkYdlUH8hIctz60AY1l_QoUdGMYugcmuvxTbbC2hw6ukcoIpK6himvjDWHRnFxdRYaFQuAw6Bz2FrRmfTIZ2oLSTHY7I3uECGDDh7bpZfYAkVg2lqi0DGzgd9sfpY51F0g9MyHIUDYeexztDvnAdfw_CyO2a0cXB8IZ3vwAtPGNjOISTkQqtWBKyrEInRl-1lmOETGxOx9fNCohX2WftjZK7DFiKMZf9D99eP__7695-__V3ogwICAg%3D%3D\u0026s=885b71bc3a5ade450cd53ca4947dd98f737d8f6eeaf4902d56687c87d9d555e91768027585\u0026w=t\u0026r=1\u0026d=850\u0026priv=true HTTP/1.1\r\nHost: pxl-eu.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: cookie_user_id=a3478f5e-53f5-5f37-994f-8bde9a7ba683; bfq=APeIECNCx5YaOWbIkGEDRxcWIsYU3BLjoYgyE2PcaBgjxowcOGp06aMg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 06:46:27 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 24\r\nx-robots-tag: noindex, nofollow\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"0959ba36d476b6dc1994ba3c678b07c4","sha1":"d30b94da72daa02766965206a85b7e0356375f5e","sha256":"897410b87e27e3dfba3a7d6caab315a5e69cc941bb96d91fc74878a9b051843a","sha512":"843f2144ba55d59ba3e62053dc018f4f6d51ae482c741cb4dc85f7af3375b77c75f66e2e73ff55ff7fe3b79314e7ba28a92fddec1ba17839ba33b34792bfce22","ssdeep":"","tlshash":"ea70008030b22e88e022000802a08000000288220a8032b0020800a80002202ca3c30a","first_seen":"2023-03-07T01:03:23Z","last_seen":"2026-04-16T20:52:26.472062Z","times_seen":6856,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ic-nss.flixcdn.com/a/N2Y3MjMyOTczYTZlZjA0NWY4NGM5MDliY2FmYzM0ZmE/jpeg%2Cs%28w%3A480%2Ch%3A300%29/video/o1/o1y0af/screen/1-11o.jpg","fqdn":"ic-nss.flixcdn.com","domain":"flixcdn.com","tld":"com"},"ip":{"addr":"185.76.9.5","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=it7_v9mINZsY2FHHRd8f7idZL-DxISKYUEWDNYzup2TzCEm0_qr7AdVAPKWiR3qPIzth_TWtgQ1ya3AKUJlgD5NNIe-7ua_9YB6L9C6SgJXZhEA_gUIDRUi","date":"2026-01-10T06:46:27.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1029385688.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Dec 2025 18:50:04 GMT","end":"Tue, 24 Mar 2026 18:50:03 GMT"},"fingerprint":{"sha1":"89:82:7B:71:7C:2C:D8:62:C2:8F:3E:F9:76:0C:8B:29:7D:68:59:20","sha256":"C0:00:52:93:BF:15:D7:B9:32:32:A5:60:99:A4:6E:A4:AC:B1:57:6F:3F:46:CD:1C:9E:CF:BF:7E:21:62:F9:76"}}},"request":{"raw":"GET /a/N2Y3MjMyOTczYTZlZjA0NWY4NGM5MDliY2FmYzM0ZmE/jpeg%2Cs%28w%3A480%2Ch%3A300%29/video/o1/o1y0af/screen/1-11o.jpg HTTP/1.1\r\nHost: ic-nss.flixcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-fc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 33106\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: ic-1\r\ncache-control: public, max-age=1296000\r\nexpires: 1768735762\r\nx-rsic-cached: yes\r\nx-rsic-responder: ic-1\r\nstrict-transport-security: max-age=63072000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-77-nzt: EgwBuUwJAQH3BfAHAAwBT3/TaAH3LAgBAA\r\nx-77-nzt-ray: 5637663579d1b59dc3f56169894f712b\r\nx-77-cache: HIT\r\nx-77-age: 520197\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":33106,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 480x300, components 3","md5":"87d52bfbdea0ddbb7e49d0554efc119e","sha1":"b024f56c45167ccb13bfff35651e43d842518cab","sha256":"697c50f5cccb01c0395dce2baf16cb8925420178bc5b1620679553fba4714ef7","sha512":"33e2c84b3c6d3726a40704dcd84920ad9ab8ff915142a28705348a10a9cdbc3fcdf147fc904cb2b78d49688cf6524c9ca968f4e256bdf56cd6bd4dcb2514fde3","ssdeep":"768:qcVumP7cApnbTy2qOxOGEscIG4pxKFzFgDsQV1Cs2XUUeiK1lKz:qcVuwpnb/KIG4pAFgDsu1CsDl6","tlshash":"2ae2f16e3500bbe7fa7b0f336b45df4ba3e89e82956c710b46d64e1b13946c4c621b02","first_seen":"2026-01-07T22:17:32.167062Z","last_seen":"2026-01-12T12:36:17.899052Z","times_seen":18,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":97,"dns":0,"connect":0,"send":0,"wait":19,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/130_akino-chihiro-xxx.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/130_akino-chihiro-xxx.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19641\r\nlast-modified: Fri, 29 Aug 2025 06:43:23 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14c0b-4cb9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jVWaKkgOUKLB%2BGIjBvocb7fHzMz9l98pYjuSFyP3DiFv1Af5aRHTTuVj4BBsIwF8%2B3jIn49%2B7HBqp0tKFvwWW0KU1nCKVMsvHl%2BayFz3Lg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37905a96783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19641,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"7a06fd72cf1acbcfac02a6366ed0bc1f","sha1":"c6308a5017338627edeb9a065d515c5cd2c0bfaf","sha256":"26acfefef6905757b1fbd42ce665b4f7e4accf10bbbfa6ad34f23e8665c9c315","sha512":"12dc1d8ea73f36e376cb18180e83e9c47b9844e5611c438dc73a2337845b30360f67210251ed8a727c10470e53d2f3d05d78e76b50b6e849ca29861f00609964","ssdeep":"384:Z2Z+8BlZbgUrtYb8j2AQ+hi4Sr8VAuUODxM5ILzDlXm3T2G7q7DVNjYN:Z2Z+8Bfbg6jQ+hi5r8VqODxMW/JXmT2I","tlshash":"3c92d0278f54044e8cb45f964149f6802e11e8349607d43274edbbd2a4f2bbb6e4bf63","first_seen":"2025-10-05T06:06:00.086628Z","last_seen":"2026-04-12T14:48:43.675024Z","times_seen":35,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":115,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ic-nss.flixcdn.com/a/Mzk0NDQ4NTIwZGVhMjY3ZTQ5ZjljNDQxYmJjODU4Y2E/jpeg%2Cs%28w%3A480%2Ch%3A300%29/video/lr/lrIu1T/screen/4-m5u.jpg","fqdn":"ic-nss.flixcdn.com","domain":"flixcdn.com","tld":"com"},"ip":{"addr":"185.76.9.5","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=vgrVQ_vuRFRxeSWfjKPOnXitlaqqtsNempNBquKydHa58W6jrz4DRT3LrKFReABeBCRRzNgyS2-JbSql0ZKsCnQ5QkAcATjTV6uD-o8DY7mwtDU_gUIDRUi","date":"2026-01-10T06:46:27.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1029385688.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Dec 2025 18:50:04 GMT","end":"Tue, 24 Mar 2026 18:50:03 GMT"},"fingerprint":{"sha1":"89:82:7B:71:7C:2C:D8:62:C2:8F:3E:F9:76:0C:8B:29:7D:68:59:20","sha256":"C0:00:52:93:BF:15:D7:B9:32:32:A5:60:99:A4:6E:A4:AC:B1:57:6F:3F:46:CD:1C:9E:CF:BF:7E:21:62:F9:76"}}},"request":{"raw":"GET /a/Mzk0NDQ4NTIwZGVhMjY3ZTQ5ZjljNDQxYmJjODU4Y2E/jpeg%2Cs%28w%3A480%2Ch%3A300%29/video/lr/lrIu1T/screen/4-m5u.jpg HTTP/1.1\r\nHost: ic-nss.flixcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-fc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24380\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: ic-0\r\ncache-control: public, max-age=1296000\r\nexpires: 1768711912\r\nx-rsic-cached: mem\r\nx-rsic-responder: ic-0\r\nstrict-transport-security: max-age=63072000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-77-nzt: EgwBuUwJAQH3OJwIAAwBisclzQH38LgAAA\r\nx-77-nzt-ray: 5637663579d1b59dc3f56169b63f962c\r\nx-77-cache: HIT\r\nx-77-age: 564280\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24380,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 480x300, components 3","md5":"e1df323c86c4efe54c13b4cd5c582da4","sha1":"7c756b5818035a376fe3e462ac866f4aa6dbc180","sha256":"4df4c0dff4aaa571a15f24e7670c35da148c907e010757b296d61dc4e0ff34f8","sha512":"84dee66767456fac5cecba23f7c6f46a0ca67adeb72aebefdf6f6f265a6813f87e793abbdde1c298794dc7d64a5662008e33243b30e69c7296d4d406d9bfdf38","ssdeep":"384:pQzzjisLM/RUjmV418Pcex0KqXPNMpfX+GxCgdMqW6nyYk0ytyw8rxRhgWDzW:Wf+/ujm9Pce0xMpfRQgdMde7k0ytgxRU","tlshash":"07b2d052fb2931c3ec518db026733ee3a3cb9932e641ddd6d2f9abe15e02a45681054e","first_seen":"2026-01-10T00:50:12.360244Z","last_seen":"2026-01-12T00:09:39.975614Z","times_seen":14,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":139,"dns":50,"connect":11,"send":0,"wait":9,"receive":16,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ic-nss.flixcdn.com/a/N2Y3MjMyOTczYTZlZjA0NWY4NGM5MDliY2FmYzM0ZmE/jpeg%2Cs%28w%3A480%2Ch%3A300%29/video/o1/o1y0af/screen/1-11o.jpg","fqdn":"ic-nss.flixcdn.com","domain":"flixcdn.com","tld":"com"},"ip":{"addr":"185.76.9.5","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=tpZT2Wvf2_df9BAhCONE6OAxGRnrPPtZ69jjd1ix8uT89g5RkUZ7ZXXevlAflAxJkC5VxHxjBV87vsOxVIGGaIQ83PSus_2fkT6MwmnTb1ZytaQ_gUIDRUi","date":"2026-01-10T06:46:27.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1029385688.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Dec 2025 18:50:04 GMT","end":"Tue, 24 Mar 2026 18:50:03 GMT"},"fingerprint":{"sha1":"89:82:7B:71:7C:2C:D8:62:C2:8F:3E:F9:76:0C:8B:29:7D:68:59:20","sha256":"C0:00:52:93:BF:15:D7:B9:32:32:A5:60:99:A4:6E:A4:AC:B1:57:6F:3F:46:CD:1C:9E:CF:BF:7E:21:62:F9:76"}}},"request":{"raw":"GET /a/N2Y3MjMyOTczYTZlZjA0NWY4NGM5MDliY2FmYzM0ZmE/jpeg%2Cs%28w%3A480%2Ch%3A300%29/video/o1/o1y0af/screen/1-11o.jpg HTTP/1.1\r\nHost: ic-nss.flixcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-fc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 33106\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: ic-1\r\ncache-control: public, max-age=1296000\r\nexpires: 1768735762\r\nx-rsic-cached: yes\r\nx-rsic-responder: ic-1\r\nstrict-transport-security: max-age=63072000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-77-nzt: EgwBuUwJAQH3BfAHAAwBT3/TaAH3LAgBAA\r\nx-77-nzt-ray: 5637663579d1b59dc3f561691a36de2a\r\nx-77-cache: HIT\r\nx-77-age: 520197\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33106,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 480x300, components 3","md5":"87d52bfbdea0ddbb7e49d0554efc119e","sha1":"b024f56c45167ccb13bfff35651e43d842518cab","sha256":"697c50f5cccb01c0395dce2baf16cb8925420178bc5b1620679553fba4714ef7","sha512":"33e2c84b3c6d3726a40704dcd84920ad9ab8ff915142a28705348a10a9cdbc3fcdf147fc904cb2b78d49688cf6524c9ca968f4e256bdf56cd6bd4dcb2514fde3","ssdeep":"768:qcVumP7cApnbTy2qOxOGEscIG4pxKFzFgDsQV1Cs2XUUeiK1lKz:qcVuwpnb/KIG4pAFgDsu1CsDl6","tlshash":"2ae2f16e3500bbe7fa7b0f336b45df4ba3e89e82956c710b46d64e1b13946c4c621b02","first_seen":"2026-01-07T22:17:32.167062Z","last_seen":"2026-01-12T12:36:17.899052Z","times_seen":18,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":96,"dns":0,"connect":0,"send":0,"wait":25,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.bookmsg.com/creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790_icon.webp","fqdn":"static.bookmsg.com","domain":"bookmsg.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:28.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.bookmsg.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Nov 2025 02:32:10 GMT","end":"Tue, 24 Feb 2026 02:32:09 GMT"},"fingerprint":{"sha1":"29:5C:89:52:D7:80:3C:68:75:40:DE:B6:BD:B5:5F:35:72:C7:1D:EF","sha256":"D8:38:DC:B0:0F:D6:AA:DF:02:2B:D2:7C:72:6A:97:38:42:7A:02:CE:89:F1:AE:0B:95:0B:DF:F4:4D:18:1E:DE"}}},"request":{"raw":"GET /creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790_icon.webp HTTP/1.1\r\nHost: static.bookmsg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 486\r\nserver: nginx/1.24.0\r\nlast-modified: Fri, 31 May 2024 10:56:43 GMT\r\netag: \"6659aceb-1e6\"\r\nexpires: Sun, 10 Jan 2027 06:46:28 GMT\r\ncache-control: max-age=31536000\r\nx-cdn-host-id: DS5058\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":486,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ceeb4e8840c24621c0e0352b42b38a5b","sha1":"03cbceb0134a39267014595938705e2916580644","sha256":"50cb77ae9715629235f102dd53a68559df1b64416f71179dbb4aa942725790b3","sha512":"80d4128488580567597ba5eb65dbff2dd4a8efc625c64cac6a027a1bb5c229545206669f04a50a252b54f471bee4fdc892e6bfe8347a50dd216bba67bd671a03","ssdeep":"","tlshash":"9bf00544191cd36c2a3c607afd74eb74a4074aa459226017cce447b08956811e856c1c","first_seen":"2024-02-20T18:30:33Z","last_seen":"2026-04-16T21:16:41.131677Z","times_seen":10966,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":123,"dns":26,"connect":19,"send":0,"wait":30,"receive":1,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"na.nawpush.com/tags/281437?version_name=b\u0026domain=hclips-porn.cfd","fqdn":"na.nawpush.com","domain":"nawpush.com","tld":"com"},"ip":{"addr":"45.133.44.25","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:25.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"na.nawpush.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 02:32:21 GMT","end":"Mon, 16 Feb 2026 02:32:20 GMT"},"fingerprint":{"sha1":"2B:B2:C7:E4:0C:35:8B:EA:A3:45:09:54:58:1F:96:D4:28:92:9E:24","sha256":"5D:DA:64:89:43:2F:60:A7:F1:43:BE:04:58:13:73:0E:73:99:6E:4B:50:A4:E4:06:23:B2:73:B0:E0:22:86:AF"}}},"request":{"raw":"GET /tags/281437?version_name=b\u0026domain=hclips-porn.cfd HTTP/1.1\r\nHost: na.nawpush.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:25 GMT\r\ncontent-type: application/json\r\nserver: nginx/1.24.0\r\ncache-control: max-age=300, public\r\nx-cdn-host-id: DS5058\r\nx-proxy-cache: EXPIRED\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2233,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1ad95206053042ed13756ebfb98c5aee","sha1":"e32c2669ed8105ac55a8fbcee2ab83b09c38a735","sha256":"c20b1087842c4be8938fe1e6236dc7b6d65a56a799681d5d7f4e7e347b51067a","sha512":"305b8e7570b5cb9cb1b339cf40d39b86e73193a001b8aeb1fdf589e444a893e959922ac5ea71dc2a4b9a2639891fc17589a29be68974156dacd68ef967b49339","ssdeep":"","tlshash":"9941bfbc9aa844ff41e507cae688350902563047b4d8b599e5bc8e7c22cf6e61b6734f","first_seen":"2025-12-16T05:53:54.145317Z","last_seen":"2026-04-12T14:36:08.298116Z","times_seen":5,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":94,"dns":27,"connect":24,"send":0,"wait":32,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"na.nawpush.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-fc.com/creatives/universal/native/fonts/Roboto-Regular.woff2","fqdn":"cdn-fc.com","domain":"cdn-fc.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=tpZT2Wvf2_df9BAhCONE6OAxGRnrPPtZ69jjd1ix8uT89g5RkUZ7ZXXevlAflAxJkC5VxHxjBV87vsOxVIGGaIQ83PSus_2fkT6MwmnTb1ZytaQ_gUIDRUi","date":"2026-01-10T06:46:27.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 05:59:35 GMT","end":"Sun, 01 Mar 2026 06:57:06 GMT"},"fingerprint":{"sha1":"1B:6D:8E:48:22:E7:FC:C2:4F:06:18:95:F0:8E:39:C2:A6:C8:47:2C","sha256":"DD:CF:71:A7:71:DB:68:1A:18:D5:6C:B8:43:76:78:71:E2:E1:0D:30:1E:09:92:A8:A5:4D:14:57:D3:66:8C:E5"}}},"request":{"raw":"GET /creatives/universal/native/fonts/Roboto-Regular.woff2 HTTP/1.1\r\nHost: cdn-fc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=tpZT2Wvf2_df9BAhCONE6OAxGRnrPPtZ69jjd1ix8uT89g5RkUZ7ZXXevlAflAxJkC5VxHxjBV87vsOxVIGGaIQ83PSus_2fkT6MwmnTb1ZytaQ_gUIDRUi\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:27 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 64184\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 15 Dec 2025 17:20:27 GMT\r\netag: \"6940435b-fab8\"\r\ncache-control: public, max-age=3600, must-revalidate\r\naccept-ranges: bytes\r\nage: 2317\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jSSMvIRzrtHJPFaO%2BIY%2FqKC8EMvZQk1vTpj0HTG0ufthu7zsE1iCEYf8u1Zet7inNsQQrvBX7PMIE2j3ROYLAqYg8aukO5Ys\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9bba37a44f670b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64184,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 64184, version 2.0","md5":"b2a6341ae7440130ec4b4b186aff8413","sha1":"a18bcf95ada923da31f176137b8add02b0ba60f3","sha256":"fdffd706005defc7e4f5e07cac7cc371c5bb0b0c895e5ec7c16c1ea0baa43f59","sha512":"244f8100af24f5a7f9e666494d0f6199ba91fb8942a433a58159f03932ccbd640ddd01f87af50e92817a78949c4242d0b8f342e7d5ecd35076e7f27b4ac8c48b","ssdeep":"1536:LUotCx25+W81Zq65IbUER7e5bLTAU+3zQh8dHT6L21:LU2Cx2UWYWbbiTAUozD8L21","tlshash":"5c5312d0530b4a2d712be238dcfe8965f20605620df60474ec9c7df9631b68992a6f77","first_seen":"2023-04-10T11:26:03Z","last_seen":"2026-04-16T18:41:19.900105Z","times_seen":1405,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cdn-fc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-fc.com/creatives/universal/native/arrow-right.svg","fqdn":"cdn-fc.com","domain":"cdn-fc.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=it7_v9mINZsY2FHHRd8f7idZL-DxISKYUEWDNYzup2TzCEm0_qr7AdVAPKWiR3qPIzth_TWtgQ1ya3AKUJlgD5NNIe-7ua_9YB6L9C6SgJXZhEA_gUIDRUi","date":"2026-01-10T06:46:27.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 05:59:35 GMT","end":"Sun, 01 Mar 2026 06:57:06 GMT"},"fingerprint":{"sha1":"1B:6D:8E:48:22:E7:FC:C2:4F:06:18:95:F0:8E:39:C2:A6:C8:47:2C","sha256":"DD:CF:71:A7:71:DB:68:1A:18:D5:6C:B8:43:76:78:71:E2:E1:0D:30:1E:09:92:A8:A5:4D:14:57:D3:66:8C:E5"}}},"request":{"raw":"GET /creatives/universal/native/arrow-right.svg HTTP/1.1\r\nHost: cdn-fc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=it7_v9mINZsY2FHHRd8f7idZL-DxISKYUEWDNYzup2TzCEm0_qr7AdVAPKWiR3qPIzth_TWtgQ1ya3AKUJlgD5NNIe-7ua_9YB6L9C6SgJXZhEA_gUIDRUi\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:27 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 15 Dec 2025 17:20:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=3600, must-revalidate\r\nage: 574\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=euxADmJXxbt6ejOekhASKFVRyJ1UI1nR33AEL%2Fot7qn0bUhIF2zhN0GvNv4MkI1eZ2NIPQWEwbKMQnDJTD0ZaT63UZ0B%2BDps\"}]}\r\netag: W/\"6940435b-106\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9bba37a48f7d0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":262,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c61202e74caf93f3a4ce077e692ebb68","sha1":"9504e4e00f264128b69e99e9a8fb26e7d1675541","sha256":"1472a258b094cf98e60d3798a0bcb74ccd8b65e82ef977ed31346847652aaf66","sha512":"8f228e136b776f097c7cead8a5f9dce8fc2f41d6bd5abe91457d14d7a032a5710ba38ac06704a342696c06866cfa1899198e9ffceb9f993b26691a58e896f37c","ssdeep":"","tlshash":"2bd02bf654048890800102017128f869107b709762ce48fcc5c03cc3b41a5ca2952197","first_seen":"2025-12-18T11:49:00.941884Z","last_seen":"2026-02-16T17:00:56.125319Z","times_seen":91,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cdn-fc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/bi.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.70","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:25.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Nov 2025 07:32:01 GMT","end":"Sat, 28 Feb 2026 07:32:00 GMT"},"fingerprint":{"sha1":"30:27:D8:5A:59:AD:E2:2E:0E:9D:6A:5B:1B:BF:60:BE:D2:80:8B:DF","sha256":"A9:DE:14:B5:E6:07:9A:21:0C:4B:AC:5D:B3:F1:DB:EB:1F:27:9B:A9:C9:AD:51:72:F0:5B:0D:91:81:C1:D3:6D"}}},"request":{"raw":"GET /sdk/v1/bi.js HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 11 Nov 2025 11:07:54 GMT\r\netag: W/\"6913190a-1e16\"\r\nx-robots-tag: noindex, nofollow\r\ncontent-encoding: gzip\r\ncache-control: max-age=172800\r\nexpires: Mon, 12 Jan 2026 06:46:25 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: DS9225,DS9201\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7702,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7623)","md5":"0f2df2696dec627783d1eb7170feea2d","sha1":"37e2e42f854e007185c942897b2a55e5d06a52eb","sha256":"45d1b15de00ad4e8b8551c7144dde989af93e1c9f3f91c514e3dc99545ef0ebd","sha512":"98e561b81de15c6d0f7269a0608f3c8a42ada04b6941bbe54933d75875b0fad3a708025a085f950a45bbb18ee8859d9918144b56f58f30969e36d93b0b786183","ssdeep":"192:p3osvtOztEOzGSC6npKyxtuyMYeUYK7r62Fii4zTd4/iiL/u:p3VOt/1pKEheUFrCDzTd4/iaW","tlshash":"45f1f9fa758231a4996794a1c5afe61fb6387a15360f8c50c07af5823c78dcb9037e6c","first_seen":"2025-11-12T10:23:36.745664Z","last_seen":"2026-02-09T11:49:45.468172Z","times_seen":349,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-fc.com/creatives/universal/native/fonts/Roboto-Bold.woff2","fqdn":"cdn-fc.com","domain":"cdn-fc.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=vgrVQ_vuRFRxeSWfjKPOnXitlaqqtsNempNBquKydHa58W6jrz4DRT3LrKFReABeBCRRzNgyS2-JbSql0ZKsCnQ5QkAcATjTV6uD-o8DY7mwtDU_gUIDRUi","date":"2026-01-10T06:46:27.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 05:59:35 GMT","end":"Sun, 01 Mar 2026 06:57:06 GMT"},"fingerprint":{"sha1":"1B:6D:8E:48:22:E7:FC:C2:4F:06:18:95:F0:8E:39:C2:A6:C8:47:2C","sha256":"DD:CF:71:A7:71:DB:68:1A:18:D5:6C:B8:43:76:78:71:E2:E1:0D:30:1E:09:92:A8:A5:4D:14:57:D3:66:8C:E5"}}},"request":{"raw":"GET /creatives/universal/native/fonts/Roboto-Bold.woff2 HTTP/1.1\r\nHost: cdn-fc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=vgrVQ_vuRFRxeSWfjKPOnXitlaqqtsNempNBquKydHa58W6jrz4DRT3LrKFReABeBCRRzNgyS2-JbSql0ZKsCnQ5QkAcATjTV6uD-o8DY7mwtDU_gUIDRUi\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:27 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 63596\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 15 Dec 2025 17:20:27 GMT\r\netag: \"6940435b-f86c\"\r\ncache-control: public, max-age=3600, must-revalidate\r\naccept-ranges: bytes\r\nage: 2340\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BZeIn%2FM2xjP0LrptalGA0mh0iDb%2F%2FoI8wT6g4Pu6y4nn8q%2BnnS1TowPpDPSMSK%2FmLkhh3F8QYhyzegEOqDaHS6qo3c97KJSr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9bba37a4ff9c0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63596,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63596, version 2.0","md5":"ab96cca26751239828b8e9c524cca5bb","sha1":"9074123ec9d4d6a7e21c2bee3f0110ca9a73733d","sha256":"6a57148ab4e668ab23194912a9d40f0b254a7dc4dd6391c6f039f079b22a3ed4","sha512":"afc4d398140df59387d75a6a6f13379c28c29774e32a16918f0b9d448943f8abbb01242741d41306c67340a6893737a1443ff15ef88094ac1994b895809db815","ssdeep":"1536:DqphAXbGzIwR7bhG9CdZTTfCeckI9VhEXrAEtanio:Dcyi7U0GjTPEXrArX","tlshash":"2153019793e47120bc53bb416e97a704710edfe2039268a86807f4c32bdee535d5aa87","first_seen":"2023-04-10T11:26:03Z","last_seen":"2026-04-16T08:42:10.980997Z","times_seen":612,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cdn-fc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Quicksand:wght@400;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=Quicksand:wght@400;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 10 Jan 2026 06:46:24 GMT\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2502,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a24505ab43fb92b485b3ec9db136af86","sha1":"225daade2b7f4394995f97235316a3385d944bed","sha256":"e0307bcbd8d4fd955b90970a7ca30c6d5215d893dfa75777653f849e3451beef","sha512":"4e8e3c2c6e0c475147164ad766ad99776550e57026631b7e6667c265796d39efb3488a7bf433a5c363ea9196f8968b36c785c7be5fdf91e327916c1aa199ca3c","ssdeep":"","tlshash":"3551afd1447f7510db871cc122ce7d32ae4ea1547061d9799ffd1888ac9ac253395b2d","first_seen":"2025-09-04T01:55:54.011593Z","last_seen":"2026-04-16T08:16:55.11901Z","times_seen":326,"resource_available":false,"data":null}},"time_used":1542,"timings":{"blocked":699,"dns":0,"connect":24,"send":0,"wait":34,"receive":0,"ssl":772},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/049_the.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/049_the.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23984\r\nlast-modified: Fri, 29 Aug 2025 06:41:24 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b94-5db0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W7xIKF51E8IwY3jilGJePJMqDY2KW3YsstjolCU%2BR%2B7TNCT2CImXVQh%2BXXhR%2FpW7UiAEK%2FSUIxiNOmJ9zRdWYEDK4F0jXMIon6PhrKHj1g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37900a5a783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23984,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"c683ae497f424098712292c0dd65bac3","sha1":"cba8efa2cd890d9050191571d457ec541ef5eb31","sha256":"b4ccabc9f8d930ab38aecffe2ad37ba8507ffa1c8ae271bdba29674e2091c50e","sha512":"b8688bd165e50a27da0a0f2d235c4eea7eb6bfe4ed31ce1463404aec83dac0906f61b4c129281724e3ab05ae3732a5a5172ecdf2d2ab96459699f259e9c8417f","ssdeep":"384:UixA1AdPy+BFPJJ0B2fNp0myCVI+uK0zDi6SQGZRhMmGv1VH+eYnupUnquQVU3:UixA6goFv0GG1CVIvkQ67G3HS2UnOVQ","tlshash":"1bb2e12c64f7c00473bac8969dc9a71a5ba7828071fe470090ac5ce573dc5d6fe9ae1a","first_seen":"2025-10-31T12:17:26.863961Z","last_seen":"2026-04-12T14:36:08.308158Z","times_seen":26,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":134,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ic-nss.flixcdn.com/a/N2Y3MjMyOTczYTZlZjA0NWY4NGM5MDliY2FmYzM0ZmE/jpeg%2Cs%28w%3A480%2Ch%3A300%29/video/o1/o1y0af/screen/1-11o.jpg","fqdn":"ic-nss.flixcdn.com","domain":"flixcdn.com","tld":"com"},"ip":{"addr":"185.76.9.5","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=vgrVQ_vuRFRxeSWfjKPOnXitlaqqtsNempNBquKydHa58W6jrz4DRT3LrKFReABeBCRRzNgyS2-JbSql0ZKsCnQ5QkAcATjTV6uD-o8DY7mwtDU_gUIDRUi","date":"2026-01-10T06:46:27.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1029385688.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Dec 2025 18:50:04 GMT","end":"Tue, 24 Mar 2026 18:50:03 GMT"},"fingerprint":{"sha1":"89:82:7B:71:7C:2C:D8:62:C2:8F:3E:F9:76:0C:8B:29:7D:68:59:20","sha256":"C0:00:52:93:BF:15:D7:B9:32:32:A5:60:99:A4:6E:A4:AC:B1:57:6F:3F:46:CD:1C:9E:CF:BF:7E:21:62:F9:76"}}},"request":{"raw":"GET /a/N2Y3MjMyOTczYTZlZjA0NWY4NGM5MDliY2FmYzM0ZmE/jpeg%2Cs%28w%3A480%2Ch%3A300%29/video/o1/o1y0af/screen/1-11o.jpg HTTP/1.1\r\nHost: ic-nss.flixcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-fc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 33106\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: ic-1\r\ncache-control: public, max-age=1296000\r\nexpires: 1768735762\r\nx-rsic-cached: yes\r\nx-rsic-responder: ic-1\r\nstrict-transport-security: max-age=63072000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-77-nzt: EgwBuUwJAQH3BfAHAAwBT3/TaAH3LAgBAA\r\nx-77-nzt-ray: 5637663579d1b59dc3f5616910a6fd2b\r\nx-77-cache: HIT\r\nx-77-age: 520197\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33106,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 480x300, components 3","md5":"87d52bfbdea0ddbb7e49d0554efc119e","sha1":"b024f56c45167ccb13bfff35651e43d842518cab","sha256":"697c50f5cccb01c0395dce2baf16cb8925420178bc5b1620679553fba4714ef7","sha512":"33e2c84b3c6d3726a40704dcd84920ad9ab8ff915142a28705348a10a9cdbc3fcdf147fc904cb2b78d49688cf6524c9ca968f4e256bdf56cd6bd4dcb2514fde3","ssdeep":"768:qcVumP7cApnbTy2qOxOGEscIG4pxKFzFgDsQV1Cs2XUUeiK1lKz:qcVuwpnb/KIG4pAFgDsu1CsDl6","tlshash":"2ae2f16e3500bbe7fa7b0f336b45df4ba3e89e82956c710b46d64e1b13946c4c621b02","first_seen":"2026-01-07T22:17:32.167062Z","last_seen":"2026-01-12T12:36:17.899052Z","times_seen":18,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":131,"dns":45,"connect":10,"send":0,"wait":13,"receive":17,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/019_temper.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/019_temper.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27791\r\nlast-modified: Fri, 29 Aug 2025 06:35:51 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14a47-6c8f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d5yOcbklw1hdEQocVizJjOYpsJWDUo8K2mnMjxplypF%2Bu%2F2eiu2gRgQ2MHVGXiMkttxRLUI8boFMiPGqMXDcaWMfrrKZcsSbNg8msYyLCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba378fca37783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27791,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"50bb220144aebd62d6f971cd2a56c6f7","sha1":"e920e76c69c4f040d8e97b15890cc7328439119e","sha256":"4bdc4e61c47d01b9a52d9fa066a49885d31ad020c6e8741a64b239ed388eac32","sha512":"f435dbdd4554efbf5b5a1c97fb44a486925b01f3ea067e1dfd64b51e54eee43021a1f877d813c25dd4784ba6211e0cebf0e4626cc8dbd6f5b862562c1b476c65","ssdeep":"768:qfQg+yXI65Zhlfe44KvQ1zULRsuoOlvz90cCNeCH:qfQhyXI65/s4ESVsuoOlehNeCH","tlshash":"2bc2f198eb3e3874e23d3101386deeae6e4d5e43c54414724b7ba7dc7588248e4b892b","first_seen":"2025-10-31T12:17:26.891196Z","last_seen":"2026-01-10T09:02:32.816101Z","times_seen":10,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/052_2-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/052_2-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:23 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 26870\r\nlast-modified: Fri, 29 Aug 2025 06:41:29 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b99-68f6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ck8Y47kO%2Fm8r3NuuzlYSJ2Dcej8JTCD7HgkLwO%2B8xUCxvWbxPyFQoOTnpsu4goCN2d4ehyFlYRoDTsrGiEUjl1LHHuF%2B7PEXmSmG3ddCIg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba378ffa4f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26870,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"eef857136c116d9dfc073a4c5176769f","sha1":"2752c27fcc781129132ef64a72ab55de4cdbbc57","sha256":"ec3605ad6639da67169af0865c3f1019ef20e748a2790b6b6abedd2eb652353f","sha512":"53e8bb5ced9c9439616544c1e1b18048104d46da826041f5c24cfa42b59548a484d73571c364628ded82bc5d77b28a79b16e77ed51de4985cb2228af27303286","ssdeep":"768:d/L2B+qOgW5xlrw9Hv3Vv0SnRGKUZAZOkQs875:dD6+rgN9P3+iEse5","tlshash":"5dc2e19518938469366802e598730ec7ae73746d7bfd07720bc917e5b6a3b3e9ea1800","first_seen":"2025-10-31T12:17:27.105162Z","last_seen":"2026-04-12T14:36:08.125624Z","times_seen":27,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":153,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/045_disposal.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/045_disposal.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24021\r\nlast-modified: Fri, 29 Aug 2025 06:41:19 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b8f-5dd5\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jZ3cwvmQoZ2dmBxeTCWf8n0wbfhv26YhRlf7ngLF%2FCVoTaA0hRVKvTxGU3qSP0AStoLIjVuZck5ChKmi24k3E4uDetXa1zS2Q%2BbE0sLgiA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37900a5b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24021,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"35b2282457057db4ada071013571f482","sha1":"7a0f96146bac680240e74c5651d44615af848d20","sha256":"81a9205f64f5626bb0e8ebe19ae3dcce3d2d7edb035bea90368435255a785e21","sha512":"dd098b4ff0e853d13ecfc057a29c481179357c4b09b92fef7fc3b2a984eeeee8162ee3a49e8940bbef737b167fa8b0e91e01f71802a8a2ec3dee80345384d4d9","ssdeep":"384:65pBQ0o5B9tWqBxpr6n6vhVUtBQGGKEO5stxmDmvldOpVDQIf+hzFsrWFevpUBwF:6vBQ0oL9YqBxFbtGGKfCzC2hzF6WFevh","tlshash":"b8b2d0af1fb3e814d2146e4001b85ce9a3aa74c9fed496d669d342e47c243cd1bc16d8","first_seen":"2025-10-31T12:17:27.173831Z","last_seen":"2026-04-12T14:36:08.321441Z","times_seen":25,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":134,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/041_time-be-xxx.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/041_time-be-xxx.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18939\r\nlast-modified: Fri, 29 Aug 2025 06:41:14 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b8a-49fb\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236698\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w5qlYpRaTs%2BU2jTzS8fdpIBXMDrLVOHNSBwK0OGWI20katCY9Cldkh%2FFC8HFIA0h9vckObW2X%2BZntc2oMcGWSAJypRkfG2LMfmOLeRHsTQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37905a9f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18939,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"ea2c46ba5639eb0b5f8818f16fc23e92","sha1":"1aed8c18c45eee3fc7dc97f46cebfece0165f019","sha256":"381cd5d93450f9aec15ea98fe9df623508744e17df4f36c3afcdc2f35c589f5c","sha512":"cfa82b09085086916efef921344216c160cea6d131cb9bcfc8b87629c7adc3f020c9dffa4d67bf87cc07a5f65a43c7ab902195b0d3e4bf01841f35b21d58dc9c","ssdeep":"384:1tUhL9XEhSkKPxdMCd8wV7OBXFShM4gN3D0lorpNGwf:TwL9083dZ7sSm4sD0oRf","tlshash":"eb82d16eb1e583ba97c7c46429156fcefbcf9a1dc6c90b0c52e456e53680563381f40e","first_seen":"2025-10-31T12:17:27.073465Z","last_seen":"2026-04-12T14:36:08.146938Z","times_seen":27,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/118_x3x15ecaa5a35af3c8959.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/118_x3x15ecaa5a35af3c8959.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15871\r\nlast-modified: Fri, 29 Aug 2025 06:43:07 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bfb-3dff\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w%2BEeaLLpl1%2Be%2BW3HRBp025lI2joHXzAXhEeQUerX5prSlb7%2BtSfabyRrb%2FBSDeJSEgBOzgg9vDZvLUEDHdiNpA9sW1JjasEmyS7f95ietg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37905a9e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15871,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 640x639, segment length 16, baseline, precision 8, 400x300, components 3","md5":"d0a3979e11f5311307f326467d4eebf4","sha1":"aaa195c01f9775773445ee17444ee288cd7ec3e3","sha256":"d9f7c58c9c7e1e381e5c32f9539407581a69ac581cba9c8e1c8c9a6c9db9e68e","sha512":"ccfa52b80052618eae013b755b6955f7754a3220a2e4c2ed4caf8c4525676e8dedafc2b2fe1ec401128ac7cf09154ebf1b02e23e682fbf3b0019fc3307d0a092","ssdeep":"384:vh6LQxaHQcR4OBAGfxov2STIGoLkQ44ucjx9AyUzBk:560xEQcJBAZhTRoTrnANe","tlshash":"ac62bfa78cee03c38dd299b0989210e4d5415ede81cc2b5fd1c30966aafe66608f65ed","first_seen":"2025-10-05T06:05:59.929289Z","last_seen":"2026-04-12T14:36:08.24634Z","times_seen":32,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/quicksand/v37/6xKtdSZaM9iE8KbpRA_hK1QN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:25.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/quicksand/v37/6xKtdSZaM9iE8KbpRA_hK1QN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28244\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 09 Jan 2026 19:09:22 GMT\r\nexpires: Sat, 09 Jan 2027 19:09:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 41823\r\nlast-modified: Wed, 27 Aug 2025 19:19:09 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28244,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28244, version 1.0","md5":"9d503278216c2225184a236c64e0924b","sha1":"0c24c621374506ce70403a7473b47acd86bbf919","sha256":"2add7d60b1cd2ab84c9967e23d5ec08eb3fc9635c46855b17d59404dec6b410e","sha512":"fa1aca723eb40b6026aa1d21b36ce2573e4164516c9a0b55ff830a434c3954833a06b1df76236b1d682107df1bd3d263ed19cba854c1a6795566a7091749696d","ssdeep":"768:/6zZ6KBVHUlHvwCa0z1sCvODsIBMTKmJ3GG5x4:yzdKvwtszvdNjz4","tlshash":"3cc2e083d14afb33d0afb77adc52d022e9756bccec7e587a97a900398895c1b0644285","first_seen":"2025-09-02T18:36:17.739185Z","last_seen":"2026-04-16T21:17:56.220235Z","times_seen":7996,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":68,"dns":1,"connect":7,"send":0,"wait":8,"receive":8,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/scripts/ars.min.js","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /scripts/ars.min.js HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 22 Feb 2023 12:21:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"63f608bc-22277\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZmCbnGdgepzmOlDKYqOfB4ykku1r9UFXlUUdZb8mc3YXla03QEQBpIaEhpJfIw2DCa8cl4lcTZ%2FaLbvLOWbiyCm3xrRLFqXJ%2FyyFjD8juQ%3D%3D\"}]}\r\ncf-ray: 9bba378fba27783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":139895,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8ce0fa9ff43f3e0ef0f94a4c850d18a5","sha1":"b057ebbbe39dfbb1cf8faab58c2f51759267167d","sha256":"bb91fb256ba4a5bdf280ef71861cadbf247c777f24ba75a4d3880f1f50916942","sha512":"aa6db0adcdcf9c0e293755e4016c33859e0ddc04870123fe7b89aaf0981b0cb1a11d05eb6b4a7b10d4dd997a14ed74725b01ee96920ff37aaa30c8d5fc173f48","ssdeep":"3072:/JBpGHlkl2DgRca+pDU9v8cnWM50Vz9+TG46VbzRht08LfD:/JBpwlkl2DgRca+pA9v8cnWM2Vz9+TG5","tlshash":"01d3d79c7320b1a556e72287d2a9c651e3b51840b809d4e471b90cab2c7dd8c13eeffe","first_seen":"2023-10-16T17:48:40Z","last_seen":"2026-04-12T14:48:43.580152Z","times_seen":62,"resource_available":true,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/096_-wholesale.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/096_-wholesale.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 28431\r\nlast-modified: Fri, 29 Aug 2025 06:42:44 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14be4-6f0f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H3yqE263NTzUrYboimdZgoErSjAFc89cpBqkgUo0dYN1FK4oc%2FEGsxEYnHyjRFECwVnZ0JiRShAWjzrTEnbRrADeNbuaFUjJvOTT29F5Nw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba378fca31783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28431,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"0f2a224fec6267a95043dbebdfe9bedd","sha1":"446cc2ce04b6ed6e56aae76d0ca941531637d749","sha256":"648e0cc21165d2bdd87674d83ef3bfc30daf49607f02f1d766e11ea71455c35c","sha512":"21e62db4758b2c7f1bb293425a8351f09499bacef9c21b02689eeea148e04d5889c559549da8560fe78aafe18e2b0bd5d7e98f91b8e626bb6cf89bec918ad3b9","ssdeep":"768:siroo6CjqSWKfbRcChFyFzoSCBrbThM/uD5+lrYl7Dn:sYrW0T+XQ7grYhn","tlshash":"98d2e102a042aec0be7999661d61a39b267cb8739beed54cd467f4cb23f7042d771848","first_seen":"2025-10-19T02:15:20.393452Z","last_seen":"2026-04-12T14:36:08.268572Z","times_seen":29,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/075.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/075.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18524\r\nlast-modified: Fri, 29 Aug 2025 06:42:07 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bbf-485c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v%2BOZr%2F1rHmCqIBw%2B3SisnpgK9hbwysD40sZGSKdjSAyouU93pPlnN%2Bt5BA9ujbtGcJ%2BrqduCFjy9OaoqyPdxBYLKOdAwoDOx0j%2FoZnTDtg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37902a71783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18524,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x300, components 3","md5":"6834ce0b03113285371273e4461ad3a7","sha1":"e264db5be7f39047387b714afc1ea054a44fdb68","sha256":"45a79942fefdc8401fe6dad7b5ca2d83e2e4fee20eaf07e28c0c40033601c1b4","sha512":"bf9b99e744b91760198911bbbacee4572e6da4ce4bfbafb5e2d314a759f7054dbd91a40e884b1007c6c05cf8d53e6e88e3a4394d8ba388ca469b85bb5ca579e3","ssdeep":"384:FX1HUm1ePwSWNZtlUHIyLHx0uMzeCvVyaes+vKBEJ7npE5Rb0luQPb:FL1e4SWNtUxR0uMzeCm4EJtsb0keb","tlshash":"2e82c0505faa80d3c2baeb36a097790bc75af51f538480f9e66406f1993b4c755403cb","first_seen":"2025-10-19T02:15:13.989572Z","last_seen":"2026-04-12T14:36:08.120254Z","times_seen":30,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/128_x1xf250e5b1f3879ae159-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/128_x1xf250e5b1f3879ae159-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 29433\r\nlast-modified: Fri, 29 Aug 2025 06:43:22 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14c0a-72f9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=URgfNJsERx3%2B1a0jJAuNWRmNawd6RhPO16Xz3XnmuBWA5XJaIKj%2Bue5BuMqpblipd3OJaMDfox2JfrAfWG0HGfYrmVtWwRIFPCozlzWv8A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37904a8f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29433,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 640x639, segment length 16, baseline, precision 8, 400x300, components 3","md5":"cbc79e1f09e0484b8d93b4100dc77e23","sha1":"34a997deb9b35fcb62d10cfc9df97364664887b8","sha256":"0cf72dbfcbd720723578a0a0d30ae895bc738cd5c395de3ef6c4c2fbc7a627ca","sha512":"8925ce8d0ccdf9a3255a458763d788fea3423f7302c8fa86cf65699c6348df2fd69378fc3092f3cfdfe978b95b129a5835e0f03549f5560a4baa49a0bb5cc57b","ssdeep":"768:CxkVtd1T/0vjuhLF2MruvzE/h5ff+EmYpxWuS7I:CYtdR0bkF5ruvzmvpxWdk","tlshash":"a5d2f24460feb5cfdd631f4d02894b2cee052eb1d656a124d7617beb2d247a1f3580e8","first_seen":"2025-10-05T06:06:00.007099Z","last_seen":"2026-04-12T14:48:43.682095Z","times_seen":36,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/014_chum.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/014_chum.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16942\r\nlast-modified: Fri, 29 Aug 2025 06:35:41 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14a3d-422e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0mlOqHhMxIK%2F25U0IzhvxpmXqbskFYzVy0gfTUUlfQDOumLtd%2FB8AVdC%2FcERmt%2BFXTFG6ecf2Glj891%2BWt%2BkksZeG69vsW3v4TR9lcLgbg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37906aa0783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16942,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"9666be5521042c5a0c2d94fb7a8e617e","sha1":"47be741f63ed73a8628d9d25b74504dcfc6ebb36","sha256":"0109ce81c2c41bcf2a3e464cb481caee98421699f4e05999a340267a6f79e5e7","sha512":"54bfc80c06b706112909765c9ac81fd1c9d79ae0828ab9044f59001b9d612efe822db4b968334a1521b8d742d1257d5a3c7ab0843a4d40a59a8be995c4e15af1","ssdeep":"384:wDNmrPYJ8PrqJD1LxTaIfN9pVxYNWVjNByABLHnfvXq:wDNmArF1LBH19pjYOjjyABLHfvXq","tlshash":"f472d07430fde372d26c866350968e27f1832d91b65842bd029cd7fafa7d2a7827d049","first_seen":"2025-10-31T12:17:27.059688Z","last_seen":"2026-01-10T09:02:32.744767Z","times_seen":3,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpushsdk.com/skins/nmain.m.js","fqdn":"js.wpushsdk.com","domain":"wpushsdk.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:27.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.wpushsdk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 09:32:17 GMT","end":"Wed, 01 Apr 2026 09:32:16 GMT"},"fingerprint":{"sha1":"6D:B0:3B:81:96:12:26:E9:2D:C1:A0:D0:4E:2F:05:FD:52:33:8A:53","sha256":"03:BA:62:FC:6E:CC:AA:AA:D4:2F:A8:36:8A:7A:73:40:61:B9:D9:55:C2:BC:2C:6C:C0:FD:9C:FD:DD:47:A7:94"}}},"request":{"raw":"GET /skins/nmain.m.js HTTP/1.1\r\nHost: js.wpushsdk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Thu, 11 Dec 2025 12:18:05 GMT\r\netag: W/\"693ab67d-93aca\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 10 Jan 2026 06:51:27 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1747\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":604874,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"dc975e803629b2688e2e36525ce024c9","sha1":"6ac03bb75a489cd0a49fb67b5b53513d61b0d1a1","sha256":"e2b93e3762332c11ea5ea691614926d6bd50ad11e162434699fc56eca9405e5d","sha512":"10efae7e45a6a456818e53fc52ab7ae9b1f550c4ca6adb3ec1e9d40e66cf0b9671e4e68ef8a699339e615d5161b38b3e794e6c782012d72e8b632f4169abb20b","ssdeep":"12288:bO6w3S6RowOCoO68XFxz9CuIgoQfKjbTxoWbPOSbvVTQBUfRLsddHxchOXEJOOzu:bOxVqufz9CNgoRbxdZUWZW","tlshash":"66d45a3132911139b0bfc8c6aa66278d336cf247e9170f55f96faaa483dbd54f625380","first_seen":"2025-12-11T16:15:42.358852Z","last_seen":"2026-01-29T09:34:31.702939Z","times_seen":800,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"js.wpushsdk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/b_as_n.css?v4","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rtbrenab.net/get/?go=1\u0026data=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","date":"2026-01-10T06:46:27.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.60ah.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 02:32:17 GMT","end":"Tue, 10 Feb 2026 02:32:16 GMT"},"fingerprint":{"sha1":"8C:90:19:3E:3B:52:BA:5A:83:BB:53:5A:21:83:80:EF:19:C2:0B:E0","sha256":"F6:E2:47:9C:35:03:88:26:95:E2:E4:39:DA:2E:E5:71:3B:6F:DB:51:DC:BF:1C:5A:C4:0F:A7:7F:B6:9C:95:E4"}}},"request":{"raw":"GET /b/b_as_n.css?v4 HTTP/1.1\r\nHost: cdn.60ah.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rtbrenab.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:27 GMT\r\ncontent-type: text/css\r\nserver: nginx/1.20.1\r\nlast-modified: Tue, 04 Mar 2025 13:12:58 GMT\r\netag: W/\"67c6fc5a-6d6\"\r\ncache-control: max-age=172800\r\nx-request-id: afc474e974460d801cb443d59b4334c6\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jan 2026 06:46:27 GMT\r\nx-cdn-host-id: DS5058\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1750,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"4710815dcdb221d8c5193cc0fa3d7d99","sha1":"3e44ee99da6a9b8d4d50d12b3fdb450fb5f20e8b","sha256":"f492ad6b8d8f9b56191233c65e6464b17ca2d2e585a03bfffa00a24bbc8be8fe","sha512":"f3172565b50840be7a37c2dc5d9da6862398fe8a50b07389377320c30743a8db9e10cc9e5dc7d19637b61e67daa17fc296b0f4d9124be37deeac23140653f558","ssdeep":"","tlshash":"813162a49a65a105d037e7f82751071962aed010e303091ebff07229a2dfdad7a25ffc","first_seen":"2025-04-07T07:53:53.259552Z","last_seen":"2026-04-16T07:34:00.602992Z","times_seen":1711,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":129,"dns":33,"connect":37,"send":0,"wait":20,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/031_interracial-surrounding-with.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/031_interracial-surrounding-with.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:23 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 37596\r\nlast-modified: Fri, 29 Aug 2025 06:41:03 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b7f-92dc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XIt3o%2BEEzYfOSrn90Abk%2F%2BqlmLxqaavEhhoboaZicgFpIYO3jXDUk4g5awFuWUEZl5Rr7z4s7oI48ZUgFChRH72qTLrJiHxtMb%2BPOMa4iQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba378fca30783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37596,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"74b33d03b4607405ca148213567b6843","sha1":"76c4aa3d1368507fc4aa2bcccfe170cc956e5c2b","sha256":"5c44f9a270924fb8a6670911a46dc9cb527c5cef672ef0dbd7dcb46628eae61f","sha512":"f3a357ac4361fec4b0f28b8d33870520800991d7bb6284ae630192f69ba8fa1fd6053ee92f09becb57622c48e6f34fb85fde5cae8229fa098fc3483bce423571","ssdeep":"768:fbWji82a+vpJT2NcXR8enhrGxwzo5i0zMhzvrLLvVfgU96U:f6jNB+hFhBa2zrzDVvp","tlshash":"c4f2f11ccc56812be9323cba661db24cc8eb2d872d61466c9fd452610895ce47bcb7db","first_seen":"2025-10-31T12:17:27.063776Z","last_seen":"2026-04-12T14:36:08.245074Z","times_seen":27,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtbrenab.net/get/?go=1\u0026data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImIiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6MTQ5NiwidHlwZSI6InBvcCIsImlkem9uZSI6bnVsbCwiYWRfdGFncyI6IkhDTElQUy1QT1JOJTJDSEQlMkNYWFglMkNDTElQUyUyQ1ZJREVPJTJDVFVCRSEsIiwibGFiZWxzIjoiIiwiYWxsb3dlZF9sYWJlbHMiOiIiLCJ0aXRsZSI6IiIsInN1YmlkIjoiMTU2NzE1ODM4OSIsInJlZnJlc2giOjEsInV0bTEiOiIiLCJ1dG0yIjoiIiwidXRtNCI6IiIsInNwb3RfaWQiOjE0MzM2NzEsIm11bHRpcGxlIjpmYWxzZSwiaXNfaWZyYW1lIjpmYWxzZSwicmVmZG9tYWluIjoiIiwicGwiOjAsInN0cmF0YWdlbSI6IiIsImd5ciI6MCwiYWNjZWwiOjAsInNzcCI6Mzc1OCwiYnR5cGUiOjAsInYyIjowLCJyY2hhbmdlIjpmYWxzZSwicG9zIjowLCJldmVudF9pZCI6IjIyNTQxZmE0LWU2OTktNDM3Yy04Y2NmLTM1M2ZmNjg1OWJiOCIsImFwcHJvdmVkX21haW5zdHJlYW0iOjAsIndsIjoxLCJ0ZXN0YWIiOjAsInZlciI6IjYuOTAuMTIifSwiYmFubmVyIjp7InciOjMwMCwiaCI6MjUwfSwibWV0cmljcyI6eyJ0b3BpY3MiOltdfX1dLCJzaXRlIjp7ImlkIjoiMTQzMzY3MSIsImNhdCI6WyJJQUIyNSJdLCJwYWdlIjoiaHR0cHM6Ly9oY2xpcHMtcG9ybi5jZmQvIiwiY3RpZCI6MX0sImRldmljZSI6eyJ3IjoxMjgwLCJoIjoxMDI0fSwiZnBfcGFyYW1zIjp7InBsdWdpbnMiOlsiUERGIFZpZXdlciIsIkNocm9tZSBQREYgVmlld2VyIiwiQ2hyb21pdW0gUERGIFZpZXdlciIsIk1pY3Jvc29mdCBFZGdlIFBERiBWaWV3ZXIiLCJXZWJLaXQgYnVpbHQtaW4gUERGIl0sImxhbmd1YWdlcyI6WyJlbi1VUyIsImVuIl0sImZvbnRzIjpbIkJpdHN0cmVhbSBWZXJhIFNhbnMgTW9ubyIsIkNlbnR1cnkiXSwiZm9udFByZWZlcmVuY2VzIjp7ImRlZmF1bHQiOjE3My4xMTY2Njg3MDExNzE4OCwiYXBwbGUiOjE3My4xMTY2Njg3MDExNzE4OCwic2VyaWYiOjE3My4xMTY2Njg3MDExNzE4OCwic2FucyI6MTYyLjAxNjY2MjU5NzY1NjI1LCJtb25vIjoxMjIuNjgzMzM0MzUwNTg1OTQsIm1pbiI6MTAuODAwMDAzMDUxNzU3ODEyLCJzeXN0ZW0iOjE2Mi4wMTY2NjI1OTc2NTYyNX0sInBsYXRmb3JtIjoiV2luMzIiLCJjb2xvckRlcHRoIjoyNCwiZGV2aWNlTWVtb3J5IjowLCJoYXJkd2FyZUNvbmN1cnJlbmN5Ijo0OCwiaW5kZXhlZERCIjp0cnVlLCJzZXNzaW9uU3RvcmFnZSI6dHJ1ZSwibG9jYWxTdG9yYWdlIjp0cnVlLCJjb29raWVzRW5hYmxlZCI6dHJ1ZSwiY29sb3JHYW11dCI6InNyZ2IifSwidXNlciI6eyJpZCI6IjU5YWY5NjI4ODdmMzM3ZDcyOTliMTQyZmE2MzM3Njg0IiwiZnAiOm51bGwsImZwX3N0ciI6IiIsInVhX2RhdGEiOm51bGwsImlzX3dlYnZpZXciOmZhbHNlLCJzb2NpYWxfbmV0d29yayI6IiJ9LCJleHQiOnsiZHQiOjE3NjgwMjc1ODcyMDd9fQ==","fqdn":"rtbrenab.net","domain":"rtbrenab.net","tld":"net"},"ip":{"addr":"157.90.85.57","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:27.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"banner.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 01:51:50 GMT","end":"Mon, 09 Mar 2026 01:51:49 GMT"},"fingerprint":{"sha1":"15:BF:4B:65:46:08:22:8D:E9:38:46:3E:D4:56:B1:02:94:D7:17:A4","sha256":"84:24:50:A3:0F:03:EA:54:61:3B:C5:4D:33:7B:1D:61:84:80:E3:A6:B0:1F:90:D1:38:32:01:C5:35:7B:D2:F6"}}},"request":{"raw":"GET /get/?go=1\u0026data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImIiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6MTQ5NiwidHlwZSI6InBvcCIsImlkem9uZSI6bnVsbCwiYWRfdGFncyI6IkhDTElQUy1QT1JOJTJDSEQlMkNYWFglMkNDTElQUyUyQ1ZJREVPJTJDVFVCRSEsIiwibGFiZWxzIjoiIiwiYWxsb3dlZF9sYWJlbHMiOiIiLCJ0aXRsZSI6IiIsInN1YmlkIjoiMTU2NzE1ODM4OSIsInJlZnJlc2giOjEsInV0bTEiOiIiLCJ1dG0yIjoiIiwidXRtNCI6IiIsInNwb3RfaWQiOjE0MzM2NzEsIm11bHRpcGxlIjpmYWxzZSwiaXNfaWZyYW1lIjpmYWxzZSwicmVmZG9tYWluIjoiIiwicGwiOjAsInN0cmF0YWdlbSI6IiIsImd5ciI6MCwiYWNjZWwiOjAsInNzcCI6Mzc1OCwiYnR5cGUiOjAsInYyIjowLCJyY2hhbmdlIjpmYWxzZSwicG9zIjowLCJldmVudF9pZCI6IjIyNTQxZmE0LWU2OTktNDM3Yy04Y2NmLTM1M2ZmNjg1OWJiOCIsImFwcHJvdmVkX21haW5zdHJlYW0iOjAsIndsIjoxLCJ0ZXN0YWIiOjAsInZlciI6IjYuOTAuMTIifSwiYmFubmVyIjp7InciOjMwMCwiaCI6MjUwfSwibWV0cmljcyI6eyJ0b3BpY3MiOltdfX1dLCJzaXRlIjp7ImlkIjoiMTQzMzY3MSIsImNhdCI6WyJJQUIyNSJdLCJwYWdlIjoiaHR0cHM6Ly9oY2xpcHMtcG9ybi5jZmQvIiwiY3RpZCI6MX0sImRldmljZSI6eyJ3IjoxMjgwLCJoIjoxMDI0fSwiZnBfcGFyYW1zIjp7InBsdWdpbnMiOlsiUERGIFZpZXdlciIsIkNocm9tZSBQREYgVmlld2VyIiwiQ2hyb21pdW0gUERGIFZpZXdlciIsIk1pY3Jvc29mdCBFZGdlIFBERiBWaWV3ZXIiLCJXZWJLaXQgYnVpbHQtaW4gUERGIl0sImxhbmd1YWdlcyI6WyJlbi1VUyIsImVuIl0sImZvbnRzIjpbIkJpdHN0cmVhbSBWZXJhIFNhbnMgTW9ubyIsIkNlbnR1cnkiXSwiZm9udFByZWZlcmVuY2VzIjp7ImRlZmF1bHQiOjE3My4xMTY2Njg3MDExNzE4OCwiYXBwbGUiOjE3My4xMTY2Njg3MDExNzE4OCwic2VyaWYiOjE3My4xMTY2Njg3MDExNzE4OCwic2FucyI6MTYyLjAxNjY2MjU5NzY1NjI1LCJtb25vIjoxMjIuNjgzMzM0MzUwNTg1OTQsIm1pbiI6MTAuODAwMDAzMDUxNzU3ODEyLCJzeXN0ZW0iOjE2Mi4wMTY2NjI1OTc2NTYyNX0sInBsYXRmb3JtIjoiV2luMzIiLCJjb2xvckRlcHRoIjoyNCwiZGV2aWNlTWVtb3J5IjowLCJoYXJkd2FyZUNvbmN1cnJlbmN5Ijo0OCwiaW5kZXhlZERCIjp0cnVlLCJzZXNzaW9uU3RvcmFnZSI6dHJ1ZSwibG9jYWxTdG9yYWdlIjp0cnVlLCJjb29raWVzRW5hYmxlZCI6dHJ1ZSwiY29sb3JHYW11dCI6InNyZ2IifSwidXNlciI6eyJpZCI6IjU5YWY5NjI4ODdmMzM3ZDcyOTliMTQyZmE2MzM3Njg0IiwiZnAiOm51bGwsImZwX3N0ciI6IiIsInVhX2RhdGEiOm51bGwsImlzX3dlYnZpZXciOmZhbHNlLCJzb2NpYWxfbmV0d29yayI6IiJ9LCJleHQiOnsiZHQiOjE3NjgwMjc1ODcyMDd9fQ== HTTP/1.1\r\nHost: rtbrenab.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.16.0\r\ndate: Sat, 10 Jan 2026 06:46:27 GMT\r\ncontent-type: text/html\r\ncontent-length: 2301\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.16.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12964,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (2391)","md5":"0befd0767c4e6527cc0dfc7132eebeec","sha1":"7a41c9373c5cb57d54a110f4c0622c5fbbfa9a07","sha256":"bade0280377183398d3c752a7e9793d851dbd94ce1e9ea486e7b9c793ecb6d35","sha512":"0b405a48a01f04a882a0500312b93137dea71748e2284493049f3f8d98cb0c2881be98a7a55b280fd59e028356d049deecde1caa12f7af261e1c9ddd92acea39","ssdeep":"384:Zk7Ep1pNl7zGW1pNJ01pNJZ1pNJc1pNJr:ZV33lnd3G3h3O3t","tlshash":"8742e7d0dd1ac83a55d4c202917c752ca6ad3793958c2c94fafdc335c7b43ee219aa5c","first_seen":"2026-01-10T06:47:19.679464Z","last_seen":"2026-01-10T06:47:19.679464Z","times_seen":1,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":107,"dns":25,"connect":33,"send":0,"wait":144,"receive":1,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/hd/rail","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-10T06:46:23.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /hd/rail HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sat, 10 Jan 2026 06:46:23 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nlocation: https://hclips-porn.cfd/\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L6pIAWG7boE36cFTuFirQGLJVU1zSGKCrfuK%2BuVG%2BFvlvaLCt8nwXlcs1fz0pfVPi35maqrkUunWTsNSD6aDRYwT0LaobS%2B0wMcAe7e2Nw%3D%3D\"}]}\r\ncf-ray: 9bba378a688db1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78247,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":388,"timings":{"blocked":71,"dns":49,"connect":1,"send":0,"wait":246,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-10T06:46:23.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:23 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nset-cookie: 07703aded3c6848c9c99b6be0d6c5474=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/\n090e621d3974b5ef07e55ea947a6ccbf=noref; expires=Sun, 11-Jan-2026 06:46:23 GMT; Max-Age=86400; path=/\n74cb3a1086270c57e87a73565fee0b80=noref; expires=Sun, 11-Jan-2026 06:46:23 GMT; Max-Age=86400; path=/\n79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; expires=Sun, 11-Jan-2026 06:46:23 GMT; Max-Age=86400; path=/\n6cad29f337c0737293ec3c3ada398eb4=%2F; expires=Sun, 11-Jan-2026 06:46:23 GMT; Max-Age=86400; path=/\nc1fbee398ec90caf6f208bb55a474685=1; expires=Sun, 11-Jan-2026 06:46:23 GMT; Max-Age=86400; path=/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IJHcbl2EsCubXECaoY9bEw%2BfOm%2BtiSCEo0wGhwucqHBqv5zCbHYlTHusggKtm1oW7aT92BkEC5NF9GHkeXeT6aTw5r6Bz92dimH%2Bv61fGQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9bba378bfabab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"TrafficStars","description":"TrafficStars is a self-served ad network and ad exchange that operates mainly in adult-related verticals.","website":"https://trafficstars.com","common_platform_enumeration":"","icon":"TrafficStars.png","categories":["Advertising"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78247,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (360), with CRLF, LF line terminators","md5":"04a6ac08c638ce6d301b54cc5d635b66","sha1":"401eec8b0df66ace20e7568ceda8e26a411fa72a","sha256":"8ffbb5b4051f460c997719fab3a32902f36988acb82a7d0a75ec653651c604bf","sha512":"ce9b873e2478ea0b9931faacb2555b7168b240b18ddbea79083ff24afe7298bbed0a01086d205f951f795aa507dfd47698b76b494cdfb498c24d27733901c992","ssdeep":"384:HnM/QQ6g44LLhwaW6zgRqDgtrrGp6cNGKLzRYz6HOVAKffix:HnMouqaWEg8DgpypVTLzR+1ffix","tlshash":"cd737a6186d2843b8533c5c656a99faefe992207c1825645bbec3bc71ffad01fc13429","first_seen":"2026-01-10T06:47:19.680264Z","last_seen":"2026-01-10T06:47:19.680264Z","times_seen":1,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pxl.tsyndicate.com/api/v1/backup.gif?t=native\u0026tct=adult\u0026s=bd16f693d3144ae0b0b2ce10c53c7d0a","fqdn":"pxl.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"46.4.88.147","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:26.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tsyndicate.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 21:10:04 GMT","end":"Tue, 10 Feb 2026 21:10:03 GMT"},"fingerprint":{"sha1":"BB:2C:CE:C9:92:0E:A9:18:50:BD:8C:7E:7D:B2:E6:CC:72:54:29:18","sha256":"3B:E3:8E:A4:C5:EC:08:3B:96:2B:B0:16:ED:56:3F:0A:CD:55:81:4A:8F:FC:97:83:57:FC:6E:F9:FD:F4:43:83"}}},"request":{"raw":"GET /api/v1/backup.gif?t=native\u0026tct=adult\u0026s=bd16f693d3144ae0b0b2ce10c53c7d0a HTTP/1.1\r\nHost: pxl.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: cookie_user_id=a3478f5e-53f5-5f37-994f-8bde9a7ba683; bfq=APeIECNCx5YaOWbIkGEDRxcWIsYU3BLjoYgyE2PcaBgjxowcOGp06aMg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 06:46:26 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-robots-tag: noindex, nofollow\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ba036c43037cfe89320d1ef7b64cd43f","sha1":"88c72d3e26047eb1e45e5564a76427734f120efe","sha256":"42cb846e07917f6731406e500f24aeb2e88c42cda124eaa59e08c5331cad8bcb","sha512":"aa80ccd27c05eb729f730b9d830b011650bcf12cbb25d19edf29efcf962c7465bb5685a5ff5d084356c6710c08e829d16b59e7a59a41767eb14744f326b6c124","ssdeep":"","tlshash":"19900403f5400003d175d03107170340134cd110057c0307405d505cdc553510c01010","first_seen":"2023-05-10T09:10:20Z","last_seen":"2026-04-16T21:00:46.297828Z","times_seen":14741,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":69,"dns":22,"connect":24,"send":0,"wait":24,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nereserv.com/in/dip?site=native-push\u0026wl=1\u0026event_id=89fb90e4-d000-4aec-a60c-2bfc2479c2ed\u0026subid=485853577\u0026sid=3055912473\u0026spot_id=1433588\u0026created_at=2026-01-10\u0026timezone=0\u0026ver=8.244.2\u0026is_native=1","fqdn":"nereserv.com","domain":"nereserv.com","tld":"com"},"ip":{"addr":"168.119.25.102","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:27.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 02:02:57 GMT","end":"Wed, 25 Mar 2026 02:02:56 GMT"},"fingerprint":{"sha1":"C4:80:D6:E8:F3:2B:FD:8A:89:D9:CF:8B:78:3F:74:35:34:B3:68:8A","sha256":"DF:07:A2:74:C6:6C:63:AA:37:DD:AA:4F:E0:F5:C5:D7:9C:B8:28:C4:9C:45:3F:F7:BC:1B:0A:AE:7F:38:FF:B1"}}},"request":{"raw":"GET /in/dip?site=native-push\u0026wl=1\u0026event_id=89fb90e4-d000-4aec-a60c-2bfc2479c2ed\u0026subid=485853577\u0026sid=3055912473\u0026spot_id=1433588\u0026created_at=2026-01-10\u0026timezone=0\u0026ver=8.244.2\u0026is_native=1 HTTP/1.1\r\nHost: nereserv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sat, 10 Jan 2026 06:46:27 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-fc.com/creatives/universal/native/logo.svg","fqdn":"cdn-fc.com","domain":"cdn-fc.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=vgrVQ_vuRFRxeSWfjKPOnXitlaqqtsNempNBquKydHa58W6jrz4DRT3LrKFReABeBCRRzNgyS2-JbSql0ZKsCnQ5QkAcATjTV6uD-o8DY7mwtDU_gUIDRUi","date":"2026-01-10T06:46:27.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 05:59:35 GMT","end":"Sun, 01 Mar 2026 06:57:06 GMT"},"fingerprint":{"sha1":"1B:6D:8E:48:22:E7:FC:C2:4F:06:18:95:F0:8E:39:C2:A6:C8:47:2C","sha256":"DD:CF:71:A7:71:DB:68:1A:18:D5:6C:B8:43:76:78:71:E2:E1:0D:30:1E:09:92:A8:A5:4D:14:57:D3:66:8C:E5"}}},"request":{"raw":"GET /creatives/universal/native/logo.svg HTTP/1.1\r\nHost: cdn-fc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=vgrVQ_vuRFRxeSWfjKPOnXitlaqqtsNempNBquKydHa58W6jrz4DRT3LrKFReABeBCRRzNgyS2-JbSql0ZKsCnQ5QkAcATjTV6uD-o8DY7mwtDU_gUIDRUi\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:27 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 15 Dec 2025 17:20:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=3600, must-revalidate\r\nage: 117\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HcSyer7dnRMiLCaTu36MhaX7%2Fd0oZfUa9nijNrcasa3c%2Fmmy5VbORXZmLKiYjWDslNDm%2FnK00dDazH5ji10tKQlrEwPUECCk\"}]}\r\netag: W/\"6940435b-2bed\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9bba37a4ef9a0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11245,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5cdfc68fa98e909b02a11337921001bd","sha1":"e27527d996d5a18fa59dc57a8256322e3bdd7aab","sha256":"e24329d29028e4b19b6d3cc62fa35a0cf895ed41436bf0beb35ced7a8b3175d0","sha512":"66153f76e7b48910afa84fedee99f1329e359fbbf31963c12829b10dc34014526aa5e4ca1b21808d3400198b5df3fbf6eed8a602d814cead3f877239587d8afa","ssdeep":"192:pN6Eg4NAU6qWvCurNj4Z775M/acCSu4PU1h7kuN6w6J7/:pSkWKAiZgCLP87/","tlshash":"7b32d9e02276d2e4a606ffddde3398216a2d1cfdbfc48196c2d09da950250c98c6dcf6","first_seen":"2025-12-18T11:49:01.074798Z","last_seen":"2026-02-16T17:00:56.144035Z","times_seen":91,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cdn-fc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/047_matsuoka.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/047_matsuoka.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:23 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19310\r\nlast-modified: Fri, 29 Aug 2025 06:41:22 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b92-4b6e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DSVke%2BYOvshWT2ovuXXgtYBF76QJR%2FsA60hqArIGgigO8qhIuOYpUHAI1iOdnv97VA%2FHlvloCmIUvzxaE9nTv9bzrm%2FE5XqeMZm6AafApQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba378fda3d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19310,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"3d80b1ac5ff8f956de7c3735c93fb436","sha1":"9e1966e5777bb384b8dc9fa262f639de45eca245","sha256":"a7decf823ee51d8993d01a28d868b05111ddd9679022de3cec1741b5b4df45bf","sha512":"212e7130489e8237bc3e9ff2b1ebec05a086e582e91967c843133a70a8e836cc4247a168994eea600ee45f0b428987b0d3b5b29c0a6c2dea314512578e72e409","ssdeep":"384:/E1RIrnERaMBjtz/PTI/5XAVHdkFX+A7+RtBCrf3/yD4lsviJyHNjbEUSMORA:/EH0nExBZ/PTIRXoEL7+XEj/yDMsviM7","tlshash":"cf82e2225711f114c03b3777403a65fe835b6e675972034a42b271db99ee88f456294e","first_seen":"2025-10-31T12:17:27.038068Z","last_seen":"2026-04-12T14:36:08.278864Z","times_seen":24,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/079_gravure.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/079_gravure.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21713\r\nlast-modified: Fri, 29 Aug 2025 06:42:13 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bc5-54d1\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lTKPTtnFJp0DfHWgBykSvKEVtF5yQu35LqNzu3%2BYWIZej%2FjGX0TdLjcWE4RXOVM7E735RC%2FXplwuLN7rGg6%2BiMuvgs0l67db10PlrLJYzg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37901a69783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21713,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x300, components 3","md5":"bacec8c0a3e4c311492ee40f7abaf040","sha1":"333b0b4493ad255e7809b298370f42aef6ef1b5d","sha256":"39be549ef43377d8b52e714c0b576d054fe9df72f950617a68151ebda2031b5c","sha512":"a1f0462d114d15bcf5792b62a2e2c82e7a0be8160f82db8ba3ca14f7a6be1417b202d2f8c65b5e3772dec1b66982b8ab3d7318852c7503454f3a2560b7cf8afe","ssdeep":"384:imd1Hkl2IFeL3fYB9sqkaGIJrm9ecAJwxU0zIyJ/PRd+Uc297HsXB:bd1E7u3gfhGIJSsJwxDIG/D+6G","tlshash":"46a2e0220753a04e750fd7bd88b0d17950f9100f97a60fd1eec4cd98389aa8b993e5b3","first_seen":"2025-10-19T02:15:13.935997Z","last_seen":"2026-04-12T14:36:08.324007Z","times_seen":31,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/088_mechanical.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/088_mechanical.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15520\r\nlast-modified: Fri, 29 Aug 2025 06:42:29 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bd5-3ca0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z3oRL2wODWu63Z2s8xY%2FrWU6JayOtdKPqQhaDaSX8GcJ2JbIlSVvtQ1GF%2BKsRzWSr2Hl0ctAQWQ39QxykMmTDPWFLEOsgMZF5NJd7SHfag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37901a68783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15520,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"46ae439e26a6d6dc6449587f3d467554","sha1":"b24a99bd9c49a7cc39faa8187dc9b72e740c4b1a","sha256":"aa69a5e032dd46dc06ba0f0163577936674418dd369ae5f12c43c318cba06a28","sha512":"ea4ec69d6348d3c57951a12ffc6f21c560fc9b5e6a7193976019afbee0cec9fcc286220340acca740f328a103d61e7e7b3500c1249ccd583c8660e5269882c88","ssdeep":"384:qPk4MYJ8KAPdwpAftdteY1Za8RUha8AtPBmTrZhCH4T:y3MYOKVAfbtD17RUha8A6ZhRT","tlshash":"a062d0bfcec43c6cf5584774141e194672ab8fe453859fb5a5b264bca2117077140cde","first_seen":"2025-10-19T02:15:18.881715Z","last_seen":"2026-04-12T14:36:08.163339Z","times_seen":27,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":125,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/104_x3xf71e91795568880121.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/104_x3xf71e91795568880121.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18284\r\nlast-modified: Fri, 29 Aug 2025 06:42:53 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bed-476c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7oqzEE0Ggzm3bVcb4kzW5kvon35xfSQsMksheGqFU4yx4pMQtmWbwlVE1rel2DTs0uC0k3HwxJHp6nTz%2FJSrx0u43cqFGKF8TVw%2Fiq1gQA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37902a80783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18284,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 640x639, segment length 16, baseline, precision 8, 400x300, components 3","md5":"3676333a633d8699b7b7c4d182bb5a5a","sha1":"7497cc791596abcb32523ed71606026d4e814111","sha256":"a2790a3dc20e6d7951cb0311d64441503fa41b3728268cb846fa0ce1a490b8fe","sha512":"2c201af1119a3477f707a815a9fd4667ef0c8c06aa2510b339fddc93176c20c288af2561521afb6f3b2bf2e95555150d6b34fc1acc3ae6c5313def7ccf112378","ssdeep":"384:kbM8L9y+4z02nqiVVeJJTx0z37+DjS0jq5lDAHddu:cMu9ydRvEJTx0z3K2R5lWdu","tlshash":"2f82e147d132a829ec6ac5fca489523b6fd18c8271439ba5473871f8d8c064b175fcab","first_seen":"2025-10-19T02:15:18.758072Z","last_seen":"2026-04-12T14:36:08.204741Z","times_seen":30,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/129_indulges-creampie.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/129_indulges-creampie.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18554\r\nlast-modified: Fri, 29 Aug 2025 06:43:22 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14c0a-487a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3fie6nGEsAzVaFwkC8M2TmtH8dhbo3jLG0glQxfikxWRtDyJxZVOdGlvXqM6Sv02Znh4uOYuKHrlwuobRg9ykIeqpZOimjDmrAK5pMYx4w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37905a95783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18554,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"3a4e1aece850e3200975980eabca83e9","sha1":"6bda336276890696d0f125a62c1867c4a5a98c70","sha256":"92b9fa8e33b4bd95373be290451858b7f6a8460ec6c8c78541b6302f34ac7ab5","sha512":"ef11ef39e3214a94cfdce263c69b80583f28b69eada116f3a7a4e9a9deb0111473ca4c32a9d4565dad198cae87ee31f6deb2d7ed2485999fb7182a8c80e339a8","ssdeep":"384:laU6sJc6MnHOvUvhT138TWYaOXtokNMfrZQQXSNloI+zs/hh4opq:IsJvwxhT13yW7OXtotFyaHgh4oI","tlshash":"d482e0d6f2acc0fd51acaf761dce8160d3ade2a93570c53ced02eea4112c1816a69e94","first_seen":"2025-10-19T02:15:18.859405Z","last_seen":"2026-04-12T14:48:43.701373Z","times_seen":34,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/232/925.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/232/925.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18771\r\nlast-modified: Wed, 06 Aug 2025 03:52:18 GMT\r\npriority: u=4,i=?0\r\netag: \"6892d172-4953\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236696\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tPLW%2BfYNRUTPUAFVRC39AIMlfmF6SP5iFUCISLogNzkT8SdGfS2AKfjAnVMEA6I54UjoOCYVlbnQ1D%2FUlQR8%2FVA6oZEitT1T760wMWLUQQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37905a9c783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18771,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 640x639, segment length 16, baseline, precision 8, 400x300, components 3","md5":"adf185e855bc94b0d2795b88b1ea1447","sha1":"673200a86a516423b12d02480ced24c5396f643b","sha256":"5fa161ad9f8d9d5dae508a87db25f3c8061965d1a60c02932c2304615a075fe9","sha512":"bfd014dd9bffc060863a26b15eca54e90cab13a6fbb491c433e752152f872af84dc3e59374b83597e49e168c3b819d8fd56cf8840f52b6e1cb507e49591dd570","ssdeep":"384:VFhUN+YAYD8IAjTXI6RejHoqaEdAGZDjxnGNAi68bXISCeh4mEmiof1:VF6N+YeDjTXRejiEdpPGNAd8bXTE4f1","tlshash":"3682e0226bb4b4fed0480275250f3fdb956055554abb383cbfe055b69407a23c7c4a9b","first_seen":"2025-12-31T19:23:10.83092Z","last_seen":"2026-01-10T09:02:32.723226Z","times_seen":4,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/054_dinner.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/054_dinner.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20136\r\nlast-modified: Fri, 29 Aug 2025 06:41:31 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b9b-4ea8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236696\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BLYdU17RA8S7NdrgXv4yEzj%2FE4Jq0XoTzVxuCB9TiXrFvfUavtoPr7fJHUYkZLspQm%2BnrOEOYOYqcohHrwvwhjPvk%2BlzUARmxkDIzhEqJg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba3790caaf783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20136,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"4561c1ed0d4ba0bb405c302c7ee1c8b2","sha1":"22462714c5c30558e27b9c06ab7eabf0bc752c35","sha256":"147b46241e8fe8454a01a787cf0a4efe9d3fa518eafd756c197e2c7d40845c9e","sha512":"8b779f2814ee8b53ea20ce35d7cd00ba103922007e05caf060afcaeb2246caeaa99fd33c4ea9b2adf0eb91885b7d9a38cf6dbc811eff46e82b0ade2793c34bbc","ssdeep":"384:7T1E20EijXl7WmagssqvEvNTDHP/eZmJHW+N/+vw1f7aI8Yd+odk:v1EaijYmagsGN3HPWAJfNWSJlbk","tlshash":"b792e1d846021453cb290af191e9ca0d99692e45db3ddeeeb46127df31fd3c920b86c8","first_seen":"2025-10-31T12:17:27.197425Z","last_seen":"2026-04-12T14:36:08.222685Z","times_seen":24,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-fc.com/creatives/universal/native/fonts/Roboto-Bold.woff2","fqdn":"cdn-fc.com","domain":"cdn-fc.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=it7_v9mINZsY2FHHRd8f7idZL-DxISKYUEWDNYzup2TzCEm0_qr7AdVAPKWiR3qPIzth_TWtgQ1ya3AKUJlgD5NNIe-7ua_9YB6L9C6SgJXZhEA_gUIDRUi","date":"2026-01-10T06:46:27.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 05:59:35 GMT","end":"Sun, 01 Mar 2026 06:57:06 GMT"},"fingerprint":{"sha1":"1B:6D:8E:48:22:E7:FC:C2:4F:06:18:95:F0:8E:39:C2:A6:C8:47:2C","sha256":"DD:CF:71:A7:71:DB:68:1A:18:D5:6C:B8:43:76:78:71:E2:E1:0D:30:1E:09:92:A8:A5:4D:14:57:D3:66:8C:E5"}}},"request":{"raw":"GET /creatives/universal/native/fonts/Roboto-Bold.woff2 HTTP/1.1\r\nHost: cdn-fc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=it7_v9mINZsY2FHHRd8f7idZL-DxISKYUEWDNYzup2TzCEm0_qr7AdVAPKWiR3qPIzth_TWtgQ1ya3AKUJlgD5NNIe-7ua_9YB6L9C6SgJXZhEA_gUIDRUi\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:27 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 63596\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 15 Dec 2025 17:20:27 GMT\r\netag: \"6940435b-f86c\"\r\ncache-control: public, max-age=3600, must-revalidate\r\naccept-ranges: bytes\r\nage: 2340\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G3J6wl8ACG6fl4LpcQ1Xt%2FLgtg2d08XyVUviStxZffMMShIOcCk%2BQCKmElBHkmLA9O95CnFgluUyIajZkLqvsuPmCOjwq1xO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9bba37a49f810b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63596,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63596, version 2.0","md5":"ab96cca26751239828b8e9c524cca5bb","sha1":"9074123ec9d4d6a7e21c2bee3f0110ca9a73733d","sha256":"6a57148ab4e668ab23194912a9d40f0b254a7dc4dd6391c6f039f079b22a3ed4","sha512":"afc4d398140df59387d75a6a6f13379c28c29774e32a16918f0b9d448943f8abbb01242741d41306c67340a6893737a1443ff15ef88094ac1994b895809db815","ssdeep":"1536:DqphAXbGzIwR7bhG9CdZTTfCeckI9VhEXrAEtanio:Dcyi7U0GjTPEXrArX","tlshash":"2153019793e47120bc53bb416e97a704710edfe2039268a86807f4c32bdee535d5aa87","first_seen":"2023-04-10T11:26:03Z","last_seen":"2026-04-16T08:42:10.980997Z","times_seen":612,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cdn-fc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-fc.com/creatives/universal/native/arrow-right.svg","fqdn":"cdn-fc.com","domain":"cdn-fc.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=tpZT2Wvf2_df9BAhCONE6OAxGRnrPPtZ69jjd1ix8uT89g5RkUZ7ZXXevlAflAxJkC5VxHxjBV87vsOxVIGGaIQ83PSus_2fkT6MwmnTb1ZytaQ_gUIDRUi","date":"2026-01-10T06:46:27.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 05:59:35 GMT","end":"Sun, 01 Mar 2026 06:57:06 GMT"},"fingerprint":{"sha1":"1B:6D:8E:48:22:E7:FC:C2:4F:06:18:95:F0:8E:39:C2:A6:C8:47:2C","sha256":"DD:CF:71:A7:71:DB:68:1A:18:D5:6C:B8:43:76:78:71:E2:E1:0D:30:1E:09:92:A8:A5:4D:14:57:D3:66:8C:E5"}}},"request":{"raw":"GET /creatives/universal/native/arrow-right.svg HTTP/1.1\r\nHost: cdn-fc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=tpZT2Wvf2_df9BAhCONE6OAxGRnrPPtZ69jjd1ix8uT89g5RkUZ7ZXXevlAflAxJkC5VxHxjBV87vsOxVIGGaIQ83PSus_2fkT6MwmnTb1ZytaQ_gUIDRUi\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:27 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 15 Dec 2025 17:20:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=3600, must-revalidate\r\nage: 574\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C7SS1wJT4U9YWObPC7pMm8uXbnYD3lKfpGWhHf1n40L8cIvxdgHAgZsojIJIaIhLRNDjVWd%2B37RJK6SvXo63YmgZ6dG43xUS\"}]}\r\netag: W/\"6940435b-106\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9bba37a4bf8e0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":262,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c61202e74caf93f3a4ce077e692ebb68","sha1":"9504e4e00f264128b69e99e9a8fb26e7d1675541","sha256":"1472a258b094cf98e60d3798a0bcb74ccd8b65e82ef977ed31346847652aaf66","sha512":"8f228e136b776f097c7cead8a5f9dce8fc2f41d6bd5abe91457d14d7a032a5710ba38ac06704a342696c06866cfa1899198e9ffceb9f993b26691a58e896f37c","ssdeep":"","tlshash":"2bd02bf654048890800102017128f869107b709762ce48fcc5c03cc3b41a5ca2952197","first_seen":"2025-12-18T11:49:00.941884Z","last_seen":"2026-02-16T17:00:56.125319Z","times_seen":91,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cdn-fc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/040_milf-grown-up.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/040_milf-grown-up.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22364\r\nlast-modified: Fri, 29 Aug 2025 06:41:13 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b89-575c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xMzTHc0g7Ksi4gNpCrtlIwZj7IeNkAgNKiuDpM23miySjshpiSUz%2BdN8eqTyZCpOOdZvt1TpeoYsIhLdBaYc04IfyvVfH8m9d5zfYDAVEQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba378ffa4e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22364,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"d63a06cc2e8b283b693badb28536e827","sha1":"bbe258fa58d1db41040c0090d58c4b24c31b62b4","sha256":"b6ba6f3772c630052293e1cc9be4a0824cddb06313fbde39c64f76ff45d20880","sha512":"5cd80cd519570a1506ee52a08bdf8c05fafcc4b386dc67de5115c5fff5ac8fb237170092865cdc54d681c020913b6e7d40bfac3b7107f80857825607b8cd4303","ssdeep":"384:1cwZrqLVJUkbdeeKYuvvk3PHDzbNHx2pMNIDyM6k6pcfd:1GLVuk/Avvk//ZRsMCDynk6pe","tlshash":"8ba2f1f719f89814c8323b3a672563f08e667621170447b96c17b8fc8b6127d5baf984","first_seen":"2025-10-31T12:17:26.896166Z","last_seen":"2026-04-12T14:36:08.310662Z","times_seen":27,"resource_available":false,"data":null}},"time_used":354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/115_fit-asian-enough.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/115_fit-asian-enough.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22588\r\nlast-modified: Fri, 29 Aug 2025 06:43:04 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bf8-583c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w6srogD3%2FmVnqtNv3%2F2F%2F55c0H2oo0sQbbAi7VuWy0LmjEWf%2Bno%2FaLPvUlYDKjqHl2Atl75Dhr%2FLSDGfIqRhhOdHuIdtC4Y6GuLgpTwXiA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37903a85783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22588,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"8e94cb6757b105fc70330e8fbea8f970","sha1":"c6442ca23ddb37e7dc465ae2d4c9c6c1335f6d68","sha256":"f56607dcef3e908495cd21eca1f72b16be6efd1cc7f058df52c03864f34bef72","sha512":"c66614a97033ece83862d861ecb05fbf4d38557e73fd17d666e58ddaa5d3573b849f64a46de856bac701e67fe130b19c04cdea3e747124e9e1be780a599d64c9","ssdeep":"384:lkMItcJolCOd4guUfchfWjOr+8rMR4UFowzVi2Ra7rSlvQckqW8VAwpE+z5im:Oxce7d4UefeOC8ie2+r8XkZKAOEa5p","tlshash":"58a2e086bfcd5508de6b87164f5d81c052a3b461ac52b3382912f3be598c9378fec155","first_seen":"2025-10-05T06:06:00.062266Z","last_seen":"2026-04-12T14:36:08.273403Z","times_seen":31,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":119,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tsyndicate.com/iframes2/fc768f97a2f74ef6a818a54f5de471ce.html?keywords=HCLIPS-PORN%20%3A%20HD%20XXX%20CLIPS%20VIDEO%20TUBE!\u0026extid=%7Bextid%7D\u0026adb=0\u0026clientjs=1\u0026w=1280\u0026h=1024\u0026tz=0","fqdn":"tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"136.243.90.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:25.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tsyndicate.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 21:10:04 GMT","end":"Tue, 10 Feb 2026 21:10:03 GMT"},"fingerprint":{"sha1":"BB:2C:CE:C9:92:0E:A9:18:50:BD:8C:7E:7D:B2:E6:CC:72:54:29:18","sha256":"3B:E3:8E:A4:C5:EC:08:3B:96:2B:B0:16:ED:56:3F:0A:CD:55:81:4A:8F:FC:97:83:57:FC:6E:F9:FD:F4:43:83"}}},"request":{"raw":"GET /iframes2/fc768f97a2f74ef6a818a54f5de471ce.html?keywords=HCLIPS-PORN%20%3A%20HD%20XXX%20CLIPS%20VIDEO%20TUBE!\u0026extid=%7Bextid%7D\u0026adb=0\u0026clientjs=1\u0026w=1280\u0026h=1024\u0026tz=0 HTTP/1.1\r\nHost: tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 06:46:25 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: https://hclips-porn.cfd\r\naccess-control-allow-methods: POST, GET, HEAD\r\naccess-control-allow-headers: Accept, X-Requested-With, X-Forwarded-For, X-Real-IP, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Legacy, Content-Type,Authorization, Nav-Ua-He-Mobile, Nav-Ua-He-Platform, Nav-Ua-He-Brands, Nav-Ua-He-Platformversion, Nav-Ua-He-Model, Nav-Ua-He-Architecture, Nav-Ua-He-Bitness, Nav-Ua-He-Fullversionlist, Nav-Ua-He-Uafullversion, Nav-Ua-He-Wow64\r\naccess-control-allow-credentials: true\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding, *\r\nset-cookie: cookie_user_id=a3478f5e-53f5-5f37-994f-8bde9a7ba683; expires=Fri, 10 Jul 2026 06:46:25 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None\nbfq=APeIECNCx5YaOWbIkGEDRxcWIsYU3BLjoYgyE2PcaBgjxowcOGp06aMg; expires=Sun, 11 Jan 2026 06:46:25 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, no-transform\r\nx-robots-tag: none, noindex, nofollow\r\nreport-to: { \"url\": \"https://pxl.tsyndicate.com/api/v1/heavy-ad/report\", \"max_age\": 86401 }\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\npermissions-policy: ch-ua-model=(self \"https://tsyndicate.com\"), ch-ua-platform-version=(self)\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"TrafficStars","description":"TrafficStars is a self-served ad network and ad exchange that operates mainly in adult-related verticals.","website":"https://trafficstars.com","common_platform_enumeration":"","icon":"TrafficStars.png","categories":["Advertising"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11963,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (7152)","md5":"71d6ccf6af13b28ebab76133c281d672","sha1":"9cbe205e048353dc49967b4803cff31805987330","sha256":"274e39a2ae9dbbfdc49ee647bd814eb58a7cda8734a5be9a23dacff9a9aa3401","sha512":"9a78e06337cef9455ee2565d46d8904fc475b9900e8a35e95521b50db64e1e697db0e95110d9bb73d3031e3860e79b93bd236eae73080497a0c4f413fac5d051","ssdeep":"192:QRSKXILOKCtHf5/keTv0FP1ciWqlgaoQpViWqlga5GiWqlgNWiWqlgguw5yI:kXbKCtHVLTsFP77qaoQa7qa5b7qJ7qgX","tlshash":"1a324ba222c31839b28a50baf879d75cb3a58c13e900c47554f1b42aa5e7ed7473b7dc","first_seen":"2026-01-10T06:47:19.689655Z","last_seen":"2026-01-10T06:47:19.689655Z","times_seen":1,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":81,"dns":1,"connect":28,"send":0,"wait":59,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fh-wgt.com/api/request/v1/affiliate_1?exp={%222008%22:{%22g%22:%22b%22,%22v%22:2}}\u0026language=en\u0026orientation=straight\u0026quantity=4\u0026target=video\u0026utmCampaign=ai.mxY","fqdn":"fh-wgt.com","domain":"fh-wgt.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=tpZT2Wvf2_df9BAhCONE6OAxGRnrPPtZ69jjd1ix8uT89g5RkUZ7ZXXevlAflAxJkC5VxHxjBV87vsOxVIGGaIQ83PSus_2fkT6MwmnTb1ZytaQ_gUIDRUi","date":"2026-01-10T06:46:27.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fh-wgt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 07:52:18 GMT","end":"Thu, 12 Mar 2026 08:46:58 GMT"},"fingerprint":{"sha1":"B2:24:80:80:56:D5:4B:BA:F0:B8:F8:4C:4B:04:5B:49:EE:43:C3:09","sha256":"EF:9B:90:58:7D:7D:6C:99:D2:BF:9C:64:29:CD:E7:76:55:A3:D8:89:AF:7A:BE:85:CE:55:06:D9:57:E4:E9:95"}}},"request":{"raw":"GET /api/request/v1/affiliate_1?exp={%222008%22:{%22g%22:%22b%22,%22v%22:2}}\u0026language=en\u0026orientation=straight\u0026quantity=4\u0026target=video\u0026utmCampaign=ai.mxY HTTP/1.1\r\nHost: fh-wgt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cdn-fc.com/\r\nOrigin: https://cdn-fc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:27 GMT\r\ncontent-type: application/json; charset=UTF-8\r\naccess-control-allow-origin: https://cdn-fc.com\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-headers: Cache-Control,Content-Language,Content-Type,Expires,Last-Modified,Pragma,Access-Control-Allow-Credentials,Access-Control-Allow-Origin,X-Referrer,X-URL,x-stats-uid,x-guid\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 600\r\nx-robots-tag: googlebot:noindex, indexifembedded\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rXMW9XTtTbuleA%2BFLw1sYRt2XfXrmrdAgWN8krAEQywcE7j%2BzA1WfkQBxeywza4UjX3J%2BAu4vch3q40VXQBpMCweRTTr9QHW\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9bba37a50dc056c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4017,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"4e6d152e89a7a9e61cf2c828bbc7456e","sha1":"b282ecd264cfc42e0547d96c4cf11d17c8886206","sha256":"4a799a2a359908caa3c69582cb35a5cfa3d31b5cc82de6d58b814e83d44c2167","sha512":"9024a953fbc7006e9bfa54f59e0708f2b7a640724e39aad6824d3c7338d81d3e5d1b9e84c4ce0bce9445f71cdf0920c78ee8d65b3b34fb266e8517ead92232b7","ssdeep":"","tlshash":"9e8162f30b8e03771f8407d38c8bf95ca6a61c4544c0ee82fc22d99d013c8bba52e18a","first_seen":"2026-01-10T06:47:19.690557Z","last_seen":"2026-01-10T06:47:19.690557Z","times_seen":1,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":43,"dns":0,"connect":2,"send":0,"wait":53,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"fh-wgt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"fh-wgt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-fc.com/creatives/universal/native/arrow-right.svg","fqdn":"cdn-fc.com","domain":"cdn-fc.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=vgrVQ_vuRFRxeSWfjKPOnXitlaqqtsNempNBquKydHa58W6jrz4DRT3LrKFReABeBCRRzNgyS2-JbSql0ZKsCnQ5QkAcATjTV6uD-o8DY7mwtDU_gUIDRUi","date":"2026-01-10T06:46:27.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 05:59:35 GMT","end":"Sun, 01 Mar 2026 06:57:06 GMT"},"fingerprint":{"sha1":"1B:6D:8E:48:22:E7:FC:C2:4F:06:18:95:F0:8E:39:C2:A6:C8:47:2C","sha256":"DD:CF:71:A7:71:DB:68:1A:18:D5:6C:B8:43:76:78:71:E2:E1:0D:30:1E:09:92:A8:A5:4D:14:57:D3:66:8C:E5"}}},"request":{"raw":"GET /creatives/universal/native/arrow-right.svg HTTP/1.1\r\nHost: cdn-fc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=vgrVQ_vuRFRxeSWfjKPOnXitlaqqtsNempNBquKydHa58W6jrz4DRT3LrKFReABeBCRRzNgyS2-JbSql0ZKsCnQ5QkAcATjTV6uD-o8DY7mwtDU_gUIDRUi\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:27 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 15 Dec 2025 17:20:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=3600, must-revalidate\r\nage: 574\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VMa8zyp3q%2BsEeomrnpK%2BICwG8HgWnCAIRLxMS6en2xJqBIcM56HDTJ%2Fv6E2hMkqs0jDYA6njIED7jZOs4yhG9XP8BMPE2N9s\"}]}\r\netag: W/\"6940435b-106\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9bba37a4ef9b0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":262,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c61202e74caf93f3a4ce077e692ebb68","sha1":"9504e4e00f264128b69e99e9a8fb26e7d1675541","sha256":"1472a258b094cf98e60d3798a0bcb74ccd8b65e82ef977ed31346847652aaf66","sha512":"8f228e136b776f097c7cead8a5f9dce8fc2f41d6bd5abe91457d14d7a032a5710ba38ac06704a342696c06866cfa1899198e9ffceb9f993b26691a58e896f37c","ssdeep":"","tlshash":"2bd02bf654048890800102017128f869107b709762ce48fcc5c03cc3b41a5ca2952197","first_seen":"2025-12-18T11:49:00.941884Z","last_seen":"2026-02-16T17:00:56.125319Z","times_seen":91,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cdn-fc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2830fe954a.d88b2835c6.com/in/multy","fqdn":"2830fe954a.d88b2835c6.com","domain":"d88b2835c6.com","tld":"com"},"ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:27.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d88b2835c6.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 14:04:20 GMT","end":"Mon, 06 Apr 2026 14:04:19 GMT"},"fingerprint":{"sha1":"19:7E:14:5C:52:F5:58:1B:92:F8:BC:EE:8A:81:46:3B:40:CF:48:B7","sha256":"21:D0:B6:E8:BD:CA:35:15:D3:F6:42:8D:1F:1A:A9:4A:6C:4F:0E:49:FC:70:1C:E2:2B:58:63:F0:FA:AE:09:71"}}},"request":{"raw":"POST /in/multy HTTP/1.1\r\nHost: 2830fe954a.d88b2835c6.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 2013\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2013,"data":"{\"imp\":[{\"ext\":{\"utm1\":\"\",\"utm2\":\"\",\"utm4\":\"\",\"refdomain\":\"\",\"labels\":\"\",\"tcid\":0,\"site\":\"native-push\",\"screen_resolution\":\"1280x1024\",\"ve\":\"\",\"mo\":\"\",\"format\":\"default-view-b_r-body\",\"idzone\":0,\"testab\":0,\"timezone_olson\":\"UTC\",\"blocked_verticals\":\"34\",\"after_video\":0,\"tu\":1,\"mm\":0,\"skins\":null,\"st\":0.02,\"spot_id\":1433588,\"timezone\":0,\"subid\":\"485853577\",\"wl\":1,\"event_id\":\"89fb90e4-d000-4aec-a60c-2bfc2479c2ed\",\"sid\":3055912473,\"created_at\":\"2026-01-10\",\"ver\":\"8.244.2\",\"is_native\":1,\"device_theme\":\"light\",\"ad_tags\":\"HCLIPS-PORN%2CHD%2CXXX%2CCLIPS%2CVIDEO%2CTUBE!\",\"user_keywords\":\"\",\"v2_track\":0,\"default_keywords\":\"\",\"tag_ab\":\"b\",\"suggestive\":0,\"v2\":0,\"features\":\"\",\"yfriendly_always\":false,\"is_iframe\":false,\"approved_mainstream\":0,\"default\":1},\"pext\":{\"ab\":0},\"metrics\":{\"topics\":[],\"prev_step_diff\":1169}}],\"site\":{\"id\":\"1433588\",\"cat\":[\"IAB25-3\"],\"page\":\"https%3A//hclips-porn.cfd/\",\"is_publisher\":true,\"ct\":0,\"ctid\":1,\"script_type\":\"general\",\"auc_domain_type\":\"hash\"},\"ext\":{\"dt\":1768027586945},\"user\":{\"fp\":0,\"fp_str\":\"\",\"ua_data\":null,\"events\":[],\"interest_ids\":[],\"click_status\":\"unknown\",\"keywords_history\":{\"keywords\":[],\"pages_count\":0},\"is_webview\":false,\"is_inapp\":false,\"telegram\":{\"user_id\":0,\"username\":\"\",\"is_premium\":false,\"color_scheme\":\"\",\"wallet_address\":\"\",\"wallet_balance\":\"\"},\"social_network\":\"\",\"audiences_ids\":[]},\"device\":{\"w\":1280,\"h\":1024},\"fp_params\":{\"plugins\":[\"PDF Viewer\",\"Chrome PDF Viewer\",\"Chromium PDF Viewer\",\"Microsoft Edge PDF Viewer\",\"WebKit built-in PDF\"],\"languages\":[\"en-US\",\"en\"],\"fonts\":[\"Bitstream Vera Sans Mono\",\"Century\"],\"fontPreferences\":{\"default\":173.11666870117188,\"apple\":173.11666870117188,\"serif\":173.11666870117188,\"sans\":162.01666259765625,\"mono\":122.68333435058594,\"min\":10.800003051757812,\"system\":162.01666259765625},\"platform\":\"Win32\",\"colorDepth\":24,\"deviceMemory\":0,\"hardwareConcurrency\":48,\"indexedDB\":true,\"sessionStorage\":true,\"localStorage\":true,\"cookiesEnabled\":true,\"colorGamut\":\"srgb\"},\"cached_mislead_offer\":{\"track_click_url\":\"\"}}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Sat, 10 Jan 2026 06:46:27 GMT\r\ncontent-type: application/json\r\ncontent-length: 6659\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":64412,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1f8229d1d2ad00acf963dde5e3ae400a","sha1":"14874bfc41e2b2b35294d20ea7698ebfb43cb50e","sha256":"67c57567fd693f878ddb1ea88480267586b24963d3710f20b974e366fc7101fc","sha512":"97b82867494f3ebf0704619ea28c13237f2b24575a5d38ed805e50f15d69ff7ac1b84917bc4853c5e24aae66fe9d7c09a211897976ffb44e9c98dffba0c8bb9a","ssdeep":"768:HP1XVbhZXAlRi+lRiKhZXAlRiAhZXAlRiGhZXAlRiVhZXyrYhZXAlRiehZXAlRiW:HdhfMfYf+fNfyrYfGfneEMWWaSjtHN","tlshash":"b4538e6748af9d02cdd764932226fc3071c47e076dda44e45af089bacc9539b22af9cc","first_seen":"2026-01-10T06:47:19.69141Z","last_seen":"2026-01-10T06:47:19.69141Z","times_seen":1,"resource_available":false,"data":null}},"time_used":542,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":541,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"2830fe954a.d88b2835c6.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/023_requests-credentials.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/023_requests-credentials.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:23 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 28699\r\nlast-modified: Fri, 29 Aug 2025 06:40:56 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b78-701b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BiPGU%2FfjqQj%2BDgm9I22DvkSv%2BGmEjUVL9YFKnNWjNKWVUiIS1vZtQMTuz7fqJBLBJ%2B6ZnNIvRwtUljNhBYMI930GaV4f7Z4SFsBLdN7YNQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba378fca34783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28699,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"c86400cebec55069fb9e55147593990d","sha1":"fc357dcb4a79c639ace687ccbc3f30923a0de3f3","sha256":"c5d45fd9ec1299c6dc2ab62bac76b630f843f3e94efe60f0a438579860cfcb26","sha512":"b33120d85cd4857ce9651b3fab4d4c0674d4985dc9fe22b0a9347f42fc593660896ae73ae7102d2de542a7644aacf1f1d96547dc04c7b6968fbe4a21a130bbf4","ssdeep":"768:yoowUZDNkJxEhhl1S/yqlo1rYFwK3SSkrFVUU8X80A:yopU9w+hIjyrHgSv7UPbA","tlshash":"2bd2f1cdc821d996c2e6d57b484981ce0b8a18f52381ef47da2c46e1bdc5ec3da7cd86","first_seen":"2025-10-31T12:17:26.972525Z","last_seen":"2026-01-10T09:02:32.747414Z","times_seen":10,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/081_in-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/081_in-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21895\r\nlast-modified: Fri, 29 Aug 2025 06:42:16 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bc8-5587\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SafchrAuaGUtu96jm7gDpF6oj%2FmUMrkJdi3BjicI2nUCaVsDdMQukB0Ptbuv06xY8q96QlYb7aykMttpvSMQnu1k0%2FMYbTvDUBlVYsbbPQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37901a6c783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21895,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x300, components 3","md5":"72bc37b45bf52109de6e1cfdd32879cf","sha1":"96586b125fc7f5108d5d694ada170809c7389822","sha256":"c98b8596f9f1e3e640e943922c5a47a4f5484d4ad60f3d826fca5013ca6d5a31","sha512":"fc1d90330a7b5eb3baaea5ce183b8f6568545f4b923939ec529e9bc05c10c5cf7b680d217ce8e8c68f152a1c884919b65f89cd4f787c0a85ab47e290e069ab24","ssdeep":"384:tT95u5YFx3aOtK1whMaNnhLXiNalprg7MZSVWN2bIfam8zB6+o:tT95rFxKOtKCGoSYffadu","tlshash":"c3a2d01750db6615c3bb6a381f25e354fa8d81736d1b6a8d0ac093e1324a75e1e8cdf2","first_seen":"2025-10-19T02:15:13.56709Z","last_seen":"2026-04-12T14:36:08.22Z","times_seen":29,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/101_sad-alfresco-creampie.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/101_sad-alfresco-creampie.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 29223\r\nlast-modified: Fri, 29 Aug 2025 06:42:51 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14beb-7227\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DP1hmCRPQm60h2n%2FkEYC6%2Fm8sGNBEuw3fiVdivVbYts5gjqkut%2BNeW2N%2FkpfGXAkdZqT7VRBlda%2BRdxDhQ7Juv5SstfyivPwrknQlyhoCw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37902a7d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29223,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"0d064caa8eb20c60cddcb7191a081f9a","sha1":"e6d9acda1bf370a7af89d3cf93869815fce274aa","sha256":"827e5aaafcd9200e4e6bc65143b7ab2031759c341790e4004513a532b6a183a3","sha512":"e0f03c0a34cc6c204526ea0583b7e5c37f0e41d133d5854cfb76e1beb950b0275ae43ba18020b8a33ecd1cd8301c7715daa14b5c57cc2a0cd2f293ef34316d07","ssdeep":"768:50wITGYemWkBLhf5MjjrdmeXTOn+D7mGuVk/4fW7:5VITGxmLBVBMxBT2Um3SUW7","tlshash":"f6d2f16e75cd89024c1c4439575b8a69b952ffec3b1a022120fc66c95965bf80e1b3cb","first_seen":"2025-10-19T02:15:16.084184Z","last_seen":"2026-04-11T10:18:31.490894Z","times_seen":25,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/116_ehfdhdjjdsjfooewpiewiriweieiesdh76-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/116_ehfdhdjjdsjfooewpiewiriweieiesdh76-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 29103\r\nlast-modified: Fri, 29 Aug 2025 06:43:05 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bf9-71af\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NQXt5%2BD7oVWoB6qlMAWdmngmV65KE37Cm7ZI5P2F1jYu%2F25%2FaQQHdxj6Z0vT%2Bh19ebC8qKde9LuS5OG%2BJ%2BultxEplSH0koX7JYqC6hIwWA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37902a83783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29103,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"4472c011720b868b26258356a312ef46","sha1":"d94c2a2a9fbd343735794b56f9ec57875be2cefd","sha256":"219feb3e92ef104198ef700a9645e6645c8cd47ea8d21031f396869f53914b78","sha512":"16e48b9cd9aade66365a725024db74c8c7bae30c0e8de55814cb2e01a79e33a79451a22ccaaf6d57cc0833f05a1cc092a41d894ebf94e74d8e60bdfd63e57b2c","ssdeep":"768:G07TafBwI7fyOkbrdz4tqPeaeW4Ki8/kCbkx:G07kBnf/QCtkraSSx","tlshash":"dcd2e1f158260a0addf1ebf189f18a60e4b56c22c354cc4e11b111f80aea5dba1df75e","first_seen":"2025-10-05T06:05:59.951432Z","last_seen":"2026-04-12T14:36:08.198039Z","times_seen":32,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/038_reachable.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/038_reachable.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:23 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24362\r\nlast-modified: Fri, 29 Aug 2025 06:41:10 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b86-5f2a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1zCWDiH4beJeNHTJt07dgETFpfxipEVX1UTCieFxfUwcfWgVKrrkSnH4yCvLMRMzYAyhn%2Fpx2fHaYS%2FCEhFktLIJkFMMHAk1J9zMOqHIwg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba378fca35783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24362,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"748dd952d960577ed452073690e56ef3","sha1":"88d8ef06b653f9b1b4e6691fa79e419012a9792e","sha256":"0af7741dbadec04b350555d1268694a723b2fc8019c4ded98af68a5876cbed50","sha512":"246a9ed67758fca8afe65ab7b84c22fee58ee9665b5f924dc3320bc4e171094b00b0457a85199307bfb0cae7767f941c4305b794f78a56a2340e04a9511134c7","ssdeep":"384:r8TIQgKhzJ3S3p05pbV5OkuAvBvEiZT6EbklyARGwNv:4TnRhl3SZspRjfvTZDbk4Ac2","tlshash":"4db2e08de36e611c8c5b1250cf26908c7b8a97bbdac6fef44152e3d0d4d9e80d451bb2","first_seen":"2025-10-31T12:17:27.092291Z","last_seen":"2026-04-12T14:48:43.572081Z","times_seen":31,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/images/native/backup/stripchat/katty_lovex_3.jpeg","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.70","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:26.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Nov 2025 07:32:01 GMT","end":"Sat, 28 Feb 2026 07:32:00 GMT"},"fingerprint":{"sha1":"30:27:D8:5A:59:AD:E2:2E:0E:9D:6A:5B:1B:BF:60:BE:D2:80:8B:DF","sha256":"A9:DE:14:B5:E6:07:9A:21:0C:4B:AC:5D:B3:F1:DB:EB:1F:27:9B:A9:C9:AD:51:72:F0:5B:0D:91:81:C1:D3:6D"}}},"request":{"raw":"GET /images/native/backup/stripchat/katty_lovex_3.jpeg HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: cookie_user_id=a3478f5e-53f5-5f37-994f-8bde9a7ba683; bfq=APeIECNCx5YaOWbIkGEDRxcWIsYU3BLjoYgyE2PcaBgjxowcOGp06aMg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:26 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 28273\r\nserver: nginx\r\nlast-modified: Tue, 30 Dec 2025 14:19:28 GMT\r\netag: \"6953df70-6e71\"\r\nx-robots-tag: noindex, nofollow\r\ncache-control: max-age=172800\r\nexpires: Mon, 12 Jan 2026 06:46:26 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: DS9225,DS9201\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28273,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 300x300, components 3","md5":"c2a6596f40e5efa9ac1d12d574e6c5b0","sha1":"07918bee7b810be082c64288e366b36ebb199163","sha256":"905086743ddface03a4c442cb4edfea63195cbb303e88e5ab5b27ae1fe27a8a8","sha512":"b4fa0ad81c362133a1b657d4a6549c78f9c0333931fbfbf964d5addcdff73a81cc37ae6105f8c5ecf9e0129f9b18edc9a62ae08cc86bb9ccdab56f2da1cc7e63","ssdeep":"768:GfB4cxJLYGvvsJ2V8ahJy+4A7QNdoVmBisl9IBjr:GfB4cx3vvsEJQfiu9IBjr","tlshash":"59c2e0090c2bcb9dd3d85f72dcbba9243950ae361c22f4367a213d3ea778551653f648","first_seen":"2025-02-19T15:11:09.987141Z","last_seen":"2026-04-14T15:35:14.353958Z","times_seen":8,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=vgrVQ_vuRFRxeSWfjKPOnXitlaqqtsNempNBquKydHa58W6jrz4DRT3LrKFReABeBCRRzNgyS2-JbSql0ZKsCnQ5QkAcATjTV6uD-o8DY7mwtDU_gUIDRUi","fqdn":"cdn-fc.com","domain":"cdn-fc.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:26.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 05:59:35 GMT","end":"Sun, 01 Mar 2026 06:57:06 GMT"},"fingerprint":{"sha1":"1B:6D:8E:48:22:E7:FC:C2:4F:06:18:95:F0:8E:39:C2:A6:C8:47:2C","sha256":"DD:CF:71:A7:71:DB:68:1A:18:D5:6C:B8:43:76:78:71:E2:E1:0D:30:1E:09:92:A8:A5:4D:14:57:D3:66:8C:E5"}}},"request":{"raw":"GET /creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=vgrVQ_vuRFRxeSWfjKPOnXitlaqqtsNempNBquKydHa58W6jrz4DRT3LrKFReABeBCRRzNgyS2-JbSql0ZKsCnQ5QkAcATjTV6uD-o8DY7mwtDU_gUIDRUi HTTP/1.1\r\nHost: cdn-fc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:26 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 29 Dec 2025 08:48:19 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WiNm85PT71EzWPQRxQy4mbyhO2Cxek5KdqPECHG8%2FyNhDOpJcHX%2BxfeqiXiANdU2kWbwtF7bWAGmAHzHyADcoV%2FtyqCRMjF4%2BrU%3D\"}]}\r\ncache-control: public, max-age=3600, must-revalidate\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9bba37a14f4432fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15963,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15954), with no line terminators","md5":"8dba46f7106efb256dacc51321c7f523","sha1":"cb04109aa2635b8686cdc01fb946e242a0fd0d85","sha256":"f21f5e3e9a5cc465abbadd7628771752738ef1d6094f3029a1449a4cb1310bb9","sha512":"834dbab1c45a517675a025020a1b0050706c7923850fb2111e86a8b6610aa585f7f94f8f27fe04d1b4208468d6a749ee365324720586434290991e311254ef01","ssdeep":"384:5h+Mlu0ywxYbpoJTk1lA8NKICgfpuJubLQ9j2UVE0ZI2I9ez46ZF/N9fTyZkoG9M:Hn80ywxYbGk1lA8g9gReubLQ9j22ZI22","tlshash":"a862a510eab4503da53be0d6bef22fcbbb7c9007d4324640f69ca5fa47d6c83a552a54","first_seen":"2025-12-29T22:00:57.494417Z","last_seen":"2026-01-12T09:18:23.068391Z","times_seen":68,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":123,"dns":23,"connect":4,"send":0,"wait":39,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cdn-fc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/053_--.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/053_--.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:23 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24948\r\nlast-modified: Fri, 29 Aug 2025 06:41:31 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b9b-6174\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1FE7IF%2FNoX6Zbpz4XwPtFrqyTpVRoPGB28aDz5b5QftmA%2BUvgSPgDGZJKFuqaCY2o8FCNbGWyVthX36jqTRI6b0KoIQUkw7d8fsajLfIIw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba378fea48783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24948,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"6d1f87ac17bfb574b42baa81cf8606b5","sha1":"4499361bb6c8c70f69a6fe4da0edcd564a8fcd9a","sha256":"783dd4b7470f24c062bd3ffc5301f3956e06065139483ca7d875cc439d070bca","sha512":"36b7ee8298fc25e07b2d0e6622d3d9efb55c06ddeb2095cd295850b6393d58bb68a23ba0b9b1115167ab57cd9c5b6fa951bb8ead79e69075a49e99b5009849b8","ssdeep":"384:YFQassTHqg7nQXQRWBV8Q+BjU2XR1JGggyhbA0duk67l1BRZ6t3Lgctz1GAsW7q+:gQjmHqgTfU3cth1mynukE6tc8P120","tlshash":"87b2f183fd544414336a59f84ef98228b6e1b53223f4486fbc7e06d3a4f124d9d85db8","first_seen":"2025-10-31T12:17:27.072304Z","last_seen":"2026-04-12T14:36:08.160454Z","times_seen":27,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/048_socking.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/048_socking.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 28976\r\nlast-modified: Fri, 29 Aug 2025 06:41:23 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b93-7130\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s0A55SxDNarjFQYQNlX5C8I%2B1BT004ncU%2FmzKai1TXWXDxgYjBIT0exyLsZaHXy%2Be6c6DBDh%2FXKDyuBxQxSE1wuXBM2BYaigE9olkJCeAg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37900a55783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28976,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"cc159ccc8b5a98fb65af9f3d8532c3ed","sha1":"9437aeb4dce818f57145d88ddb4cb570e898d7f8","sha256":"571fccfe38e82d67b1a221b76e049edb67596d892c23c004b017f937d506e3ff","sha512":"d5d6fab2f4b7fb8ee6c1133fee18548c9ed018d72c931bb39475f6abf90d6de181acaba1eba9f58dee6e6a331dcbaa6d783f455b7b0463b2e885909b38c5ea4c","ssdeep":"768:ILEOXqKtMOiBY297t0egtpQmQ2bzbjcJnyHaNwM2Xx/Oas9HUNn:ILPXq0Yf97t0VbA2zjUcdM4x/kHUt","tlshash":"8bd2f1e256c76775ed31063861b33bedbb3a82e058e1d84f74e84ed8d9807c45362c98","first_seen":"2025-10-31T12:17:26.981208Z","last_seen":"2026-04-12T14:36:08.282209Z","times_seen":23,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/097_mikamis.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/097_mikamis.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25193\r\nlast-modified: Fri, 29 Aug 2025 06:42:45 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14be5-6269\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MpetH8WbhDNcegFhrpUHsBUfS5qS0cy5szNshxUSxV%2BC%2BnwtR3Pmje3o2t9Q9W6xnwHSBGt6uiCclUrG4om%2FbDbpDzwQ%2FoXYIKp5zesW9Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37902a7b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25193,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"00a117e9ede2ee23bd4384d42c1abd3d","sha1":"05ba702e163c874949fc0b5c0ea50bedb5e6f92c","sha256":"a1b4e7c343f94765601d8d691e2884c66c0600984f06dbad330430ba5c7c8988","sha512":"13bb65ccae66614fc4409a264a8f00c5e9ccffc9db729da3af5012f947a28c012f484a87ec5c9cb72b3f6b5bc62ded6f4fed8666e9c1711a57f09f4cf482a347","ssdeep":"768:f0jDN8nOVVSeCtGNITSQ6U82o/YyLPSRx:SR6aQ6U82o/rLSn","tlshash":"77b2d143c72982e5ce72db4bb920311297d39676c869e534d805b4bf7a5b42d2e34f13","first_seen":"2025-10-05T06:06:00.125367Z","last_seen":"2026-04-12T14:36:08.221975Z","times_seen":32,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":125,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/134_creampie-chiefly-emiri.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/134_creampie-chiefly-emiri.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21911\r\nlast-modified: Fri, 29 Aug 2025 06:43:28 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14c10-5597\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236696\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YK4lM1UpaoEiDV6m6rjAB3C%2F%2Br8Xl3MqlOF8TWzcTJdpo%2FHCt297hm2mv%2BMPZvb7TZ3YbN0luEGYo2gUOE6%2FJei2x4ObUju3%2BNz0NZSLZQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37905a9d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21911,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"f1fb266652687eaccffb565102673193","sha1":"4b09278295f700976e2ac18792603614ba282ebe","sha256":"46630ed8d215b37ded52a361371a0591b1246b1e9425bc5c602b124a5d13c460","sha512":"bfa762b31993b1e53f32be6f06a884c3f97c49ef99c5e15fb1a1774fad0c60be36c9a3229b578bcfc9b8c18a85b41d57e48f942e19682e062733f8838196bc90","ssdeep":"384:zATyfEjXM0r91ozvRehxhqCSXKzC7bXU24tgNewlY7ocZCvqUr3R5Pt+Of:cCEjl1c5eh7JS2IbXv4f7ocZCvnR+Of","tlshash":"3aa2e15a433c8b72f91a02ab2c7f4ca8a28d66867b076534c42e18f0879725f34946a7","first_seen":"2025-10-05T06:06:00.121645Z","last_seen":"2026-04-12T14:36:08.203753Z","times_seen":32,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/091_mei.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/091_mei.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25300\r\nlast-modified: Fri, 29 Aug 2025 06:42:34 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bda-62d4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HXxOaYAV7VWKqovqkAUvI6ESI1%2FXkTi9G9j9yT4GRgjNl8slnCXbWZab692nf50PL3QbZvhmpU67gK6NQEmYQgc7VI%2Fv4P8Oy8at7e1jwQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37900a57783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25300,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"2969f4675950432211d3efd1093e2e03","sha1":"f5b39358d873f941f9d392aba894eb5ec87ff2af","sha256":"6bc89bd87173d460b7dd99ec592cf1b4746a055613b96cb0d4bc40a7e16db922","sha512":"35ca6ce813d5d8b3cef5df47512013a9df72406bab856b061a05f7ae072e15f30a3905d3295cc270dd0276563789b5bd7169e52c99c698f376a36c674ef0c905","ssdeep":"768:PBRixq+5WyPzH867/FgTRGkO1s6e+B6T6494dh9ybqS:ZQjP78s/FSGkos6eq6O4qBybz","tlshash":"edb2d1612a96e599e828f1ed43795478f0a7cb7ed132334175c0a7c004e854a5be33f9","first_seen":"2025-10-19T02:15:18.046471Z","last_seen":"2026-04-12T14:36:08.241954Z","times_seen":30,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":138,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/236/469_-hand-hot.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/236/469_-hand-hot.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21053\r\nlast-modified: Fri, 29 Aug 2025 06:01:30 GMT\r\npriority: u=4,i=?0\r\netag: \"68b1423a-523d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pmdztWQZENcC8R5FjZR1MdnLwxzsJe7si6IRfxuO9Hr89tW7R3Jc%2BLDZbFOAgE8tE6wwWnZ6uBfd96JjrpyPol%2BQONnmcZTR%2BILMCdbzOw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37906aa1783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21053,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"071714baa9ebf2146bfefa7310e3a6c1","sha1":"1e1df129838cdb3ab0232c1cb87d3394df06d3c8","sha256":"697d6d59c6aab2ea7029a8e797a1f4241a44d73412385203a2176c0c5498c577","sha512":"f867bf83f895dec5bda34df563437342a39dfbbe9d9b8bd6778d117ec9ecf22bf900afb679db2d1ba5ef0d8d83db610976b49e86f6a39d99a7c641100c953291","ssdeep":"384:kkHyl7EoDMdt3U6weKvECEgDmBwkfTbXkry2dt8XhOT8wCfokWeuJSSW2pMd9fsk:kkHyioDlefMDm6w0rCxKpCQUgSStp6dx","tlshash":"c492d083f51118a4759e31d34c806f7ea7d7e7c1aa968b9cc45a90ca66db050d2323ca","first_seen":"2025-12-31T19:23:10.849141Z","last_seen":"2026-01-10T06:47:19.703112Z","times_seen":3,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA01Q7W7DIAx8lb1AkG3MV3/vdydt2gMQGrZIa1I1U9RJfvgZpnXjBIbjzocgID8ADggPgAf2B3KS0CQwTAYdy/HpWRjldtvn07RuphRBSoFZLEBKLEwcIwu6EEL04iCKj8BWK0L0BEggDGIFFOSsWnVnAFACyOvLY5+oINGlBUqzNIoi3BCoOYKrsaSUcxhT8GPINWKqCDDxRDk1Och7+Zgv23BZr4sp9dQje5iNrgfAHUPTW2RL+iAdIJ3O29dSRO4yxz+lv59ag+aTf43+gPQbpxpDesRObOac37brbsp6Vqq5DYZmQG2LrL+z5+ucP+d16ffNJHa0E04lE2PNp8nXSljJO4/Vp1rjN7CEWw67AQAA\u0026cb=e2e_6961f5c1b2e9f4.97849033","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.245","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:26.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA01Q7W7DIAx8lb1AkG3MV3/vdydt2gMQGrZIa1I1U9RJfvgZpnXjBIbjzocgID8ADggPgAf2B3KS0CQwTAYdy/HpWRjldtvn07RuphRBSoFZLEBKLEwcIwu6EEL04iCKj8BWK0L0BEggDGIFFOSsWnVnAFACyOvLY5+oINGlBUqzNIoi3BCoOYKrsaSUcxhT8GPINWKqCDDxRDk1Och7+Zgv23BZr4sp9dQje5iNrgfAHUPTW2RL+iAdIJ3O29dSRO4yxz+lv59ag+aTf43+gPQbpxpDesRObOac37brbsp6Vqq5DYZmQG2LrL+z5+ucP+d16ffNJHa0E04lE2PNp8nXSljJO4/Vp1rjN7CEWw67AQAA\u0026cb=e2e_6961f5c1b2e9f4.97849033 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: __uvt=s%3A32%3A%220405a8a3eef143a6018d8c336564261b%22%3B\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 10 Jan 2026 06:46:26 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://hclips-porn.cfd\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tsyndicate.com/do2/bd16f693d3144ae0b0b2ce10c53c7d0a/dynamic?xu=00cffe1d2ade5a87\u0026count=5\u0026w=1280\u0026h=1024\u0026keywords=%7B%20hardcore%20%7D%2CHCLIPS-PORN%20%3A%20HD%20XXX%20CLIPS%20VIDEO%20TUBE!\u0026adtype=image\u0026tz=0","fqdn":"tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"136.243.90.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:25.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tsyndicate.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 21:10:04 GMT","end":"Tue, 10 Feb 2026 21:10:03 GMT"},"fingerprint":{"sha1":"BB:2C:CE:C9:92:0E:A9:18:50:BD:8C:7E:7D:B2:E6:CC:72:54:29:18","sha256":"3B:E3:8E:A4:C5:EC:08:3B:96:2B:B0:16:ED:56:3F:0A:CD:55:81:4A:8F:FC:97:83:57:FC:6E:F9:FD:F4:43:83"}}},"request":{"raw":"GET /do2/bd16f693d3144ae0b0b2ce10c53c7d0a/dynamic?xu=00cffe1d2ade5a87\u0026count=5\u0026w=1280\u0026h=1024\u0026keywords=%7B%20hardcore%20%7D%2CHCLIPS-PORN%20%3A%20HD%20XXX%20CLIPS%20VIDEO%20TUBE!\u0026adtype=image\u0026tz=0 HTTP/1.1\r\nHost: tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 06:46:25 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: https://hclips-porn.cfd\r\naccess-control-allow-methods: POST, GET, HEAD\r\naccess-control-allow-headers: Accept, X-Requested-With, X-Forwarded-For, X-Real-IP, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Legacy, Content-Type,Authorization, Nav-Ua-He-Mobile, Nav-Ua-He-Platform, Nav-Ua-He-Brands, Nav-Ua-He-Platformversion, Nav-Ua-He-Model, Nav-Ua-He-Architecture, Nav-Ua-He-Bitness, Nav-Ua-He-Fullversionlist, Nav-Ua-He-Uafullversion, Nav-Ua-He-Wow64\r\naccess-control-allow-credentials: true\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding, *\r\nset-cookie: cookie_user_id=241d79dc-3b7c-5df2-aaee-deda24b3c648; expires=Fri, 10 Jul 2026 06:46:25 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, no-transform\r\nx-robots-tag: none, noindex, nofollow\r\nreport-to: { \"url\": \"https://pxl.tsyndicate.com/api/v1/heavy-ad/report\", \"max_age\": 86401 }\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\npermissions-policy: ch-ua-model=(self \"https://tsyndicate.com\"), ch-ua-platform-version=(self)\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7397,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d4da0b8f77cb12e1f07f77f4027ec936","sha1":"1d0f0a1226a3679f1b7c27cf7b62179894f0106c","sha256":"a6782439c3201f73e2ac1cf49f76550e4214a9580b0e71015d171ee1abc8363e","sha512":"4d6a8f04908ef6346cc2a2cd7eb884e7a86b1bef8b9a7511de1597decaa37b07f5fb9f8a7f21b4df4b69b78ce5bda7b5deb61cd88e6f16a6014e71e4d770b0de","ssdeep":"192:ffvdQqf+M9L6Yf1/58vmSauuRwEdAs1toZChxWrG4UmnbnNb7NW:fflQk+MR6yFadauuZAsTvxUGybNb7s","tlshash":"29e18df60cedac680b10430e6ad738d9c42850544eebee99e0c85d53908fff970b8999","first_seen":"2026-01-10T06:47:19.704112Z","last_seen":"2026-01-10T06:47:19.704112Z","times_seen":1,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":91,"dns":19,"connect":26,"send":0,"wait":57,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/b.b.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.70","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:26.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Nov 2025 07:32:01 GMT","end":"Sat, 28 Feb 2026 07:32:00 GMT"},"fingerprint":{"sha1":"30:27:D8:5A:59:AD:E2:2E:0E:9D:6A:5B:1B:BF:60:BE:D2:80:8B:DF","sha256":"A9:DE:14:B5:E6:07:9A:21:0C:4B:AC:5D:B3:F1:DB:EB:1F:27:9B:A9:C9:AD:51:72:F0:5B:0D:91:81:C1:D3:6D"}}},"request":{"raw":"GET /sdk/v1/b.b.js HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: cookie_user_id=a3478f5e-53f5-5f37-994f-8bde9a7ba683; bfq=APeIECNCx5YaOWbIkGEDRxcWIsYU3BLjoYgyE2PcaBgjxowcOGp06aMg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 19 Dec 2025 13:51:37 GMT\r\netag: W/\"69455869-16d7\"\r\nx-robots-tag: noindex, nofollow\r\ncontent-encoding: gzip\r\ncache-control: max-age=172800\r\nexpires: Mon, 12 Jan 2026 06:46:26 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: DS9225,DS9201\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5847,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5783)","md5":"fa0d93d282f8683d19ac456c81debef0","sha1":"0d8b13271cdfd4e29a7c8763abf279297d2a84d1","sha256":"4a96c9570ebfa67dd93c6ea67b613e2bf108a4ad101342f33d4ab36a67198568","sha512":"94295f7da3b823de0d4961139a1c4e61ed232e4e087ffd29270d36fea950c82d870b0c359528375affb751f88ba642bda917a012c5080f6c2d409cb8ccf9fecf","ssdeep":"96:pJZEqoY9fBZeWGqHZvk++OIWtJxtomlGDWtVAQERhKBHYX1o4XT6:pJZmY9fBZeWGoZvkpOIWtloml0hq4L6","tlshash":"40c1d8bd6259f27580dd044b276bab64b7f60065bf238810e09e8c49357cf97c92acde","first_seen":"2025-12-19T14:41:02.491397Z","last_seen":"2026-04-16T19:36:05.830027Z","times_seen":776,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/125_--.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/125_--.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21722\r\nlast-modified: Fri, 29 Aug 2025 06:43:19 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14c07-54da\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1XIHGwoIAVSw76%2FXOwgK%2FpjC9KFmVEPI9pf8UW%2FKsry6rqhC12xvrwWYqzSYEKKwrsFXTishpBwj%2BCoC37toMER7tRjOEtjD%2BFiSMfJYZA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37904a93783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21722,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x300, components 3","md5":"a50e651f3aca920cb278fc021df7ec04","sha1":"f7066e863b0cd1a19ee320921e9088aeef32479c","sha256":"c8155db2c89a5e6483beaf472c91614862ffb2ebbe6da662b58c492ddfc02f35","sha512":"cc9a1308b9be53cab706da581b3bba85ed619d0e0d704983ba16bdddeb5f7fe76951231f56513fb7ee698b545b0f59aed968e058e36c452ccc2a6729305e5251","ssdeep":"384:eNyOsjnrMJB9m8mNzy0PHwYbQXXkNlrBtQFK9+zXgnLytkAmzEy3R8g58:eNuqBlwZPQYbQHUlDQFK961pmzB758","tlshash":"9da2e1c1eb6e1104804cd923c9118af06af4d59efaa75163a31257c2a22b2f45b9fbc7","first_seen":"2025-10-05T06:05:59.897151Z","last_seen":"2026-04-12T14:36:08.297503Z","times_seen":31,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-fc.com/creatives/native/native.min.js?v=5.1","fqdn":"cdn-fc.com","domain":"cdn-fc.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=vgrVQ_vuRFRxeSWfjKPOnXitlaqqtsNempNBquKydHa58W6jrz4DRT3LrKFReABeBCRRzNgyS2-JbSql0ZKsCnQ5QkAcATjTV6uD-o8DY7mwtDU_gUIDRUi","date":"2026-01-10T06:46:27.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 05:59:35 GMT","end":"Sun, 01 Mar 2026 06:57:06 GMT"},"fingerprint":{"sha1":"1B:6D:8E:48:22:E7:FC:C2:4F:06:18:95:F0:8E:39:C2:A6:C8:47:2C","sha256":"DD:CF:71:A7:71:DB:68:1A:18:D5:6C:B8:43:76:78:71:E2:E1:0D:30:1E:09:92:A8:A5:4D:14:57:D3:66:8C:E5"}}},"request":{"raw":"GET /creatives/native/native.min.js?v=5.1 HTTP/1.1\r\nHost: cdn-fc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=vgrVQ_vuRFRxeSWfjKPOnXitlaqqtsNempNBquKydHa58W6jrz4DRT3LrKFReABeBCRRzNgyS2-JbSql0ZKsCnQ5QkAcATjTV6uD-o8DY7mwtDU_gUIDRUi\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 17 Dec 2025 09:37:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=3600, must-revalidate\r\nage: 2899\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S6YSca6rVx1kPvaUADUZzNE%2B%2FNXYVbQ8Y5FNkcDzLshVut2o2P33p2BIIZOA%2Bm9ELOvW5gNrZuX6JrMvcirwpH9L7%2FXNxUb0\"}]}\r\netag: W/\"694279ec-cb0\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9bba37a41f590b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3248,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3248), with no line terminators","md5":"19c5c52051e21a28734a741b7a193778","sha1":"0e0bb3d82ad35cd8fe2e598af684e6ef9d7dc753","sha256":"a8455faca19605edac1444e10992f037087aa3909c3cccc0ea18ea44ba4c0ff4","sha512":"de77df06b77d1ab2aa9e3ffcb7807dea6623aa94dd2109ad9094aea6d4f2adb6a62465e2ea7a151ec9abd3629bc1bd48609f6d1671f74a8ded1b72cf77900d01","ssdeep":"","tlshash":"c961d7c5d2c49933073532cf4953a675f67c8f06beaa8c50a60b4b8a8e15e458b17fa4","first_seen":"2025-12-18T11:49:00.846008Z","last_seen":"2026-04-16T18:41:19.866585Z","times_seen":525,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cdn-fc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/021_utter.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/021_utter.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:23 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25715\r\nlast-modified: Fri, 29 Aug 2025 06:35:55 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14a4b-6473\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ezTgYMkGD7Yu%2FsrmZic5dzTyHOTYb02fZl5a%2BO%2BMA9Ma1u%2BqIimD4FxCLPhQNdTSMSIKe7Ym7n1ioOMEgY2xZMpPT%2FEqqhmBIT1WPuTWZg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba378fda3f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25715,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"86e7ad155f5bfb482a48a0a50f8616dd","sha1":"60527abb6751f47981052cc9e56e8a080ca8fd83","sha256":"9a5897bcb39690554efc2886126145576f5d16bfeee3e6ef30306a573e4e54c4","sha512":"0357d2a0562c17adf60013d6a799908627df7483e137ea75389b7a5d422a7b39a80e58f4059884901ecdfdef5cb43b5e5ba4c86d491c2dfd51eda8b7cdd309f0","ssdeep":"768:Yv/xEh+sCgD1e5GAa+c4p6o+OfCWXuj/RXypWZ8P:Yv/6LCWPOALWC6C/mWi","tlshash":"3ab2e1efef440a0c894d4e5068b0d57ca6a4a151cbae17ee471dcfc4a410b1b85cbfe9","first_seen":"2025-10-31T12:17:27.083059Z","last_seen":"2026-01-10T09:02:32.698915Z","times_seen":11,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":165,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/074_wide-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/074_wide-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27416\r\nlast-modified: Fri, 29 Aug 2025 06:42:06 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bbe-6b18\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U3sIZnRCtDykz0m8jG2MukWq7UJrUD2BTkCeFMuKsrQp4bvp9C8q057qVMMwQVyNVTBiV%2FLzfHW1eY9eeHr7J%2BMHkZVL6ws%2FLrMXRVZJeA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37900a58783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27416,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"f9158f71aea14ff64a2fe2299d7759e2","sha1":"19d16b63661e6d46af0827d4164b88e2dcb5ae33","sha256":"912f47fd8cbb394a47d2839bd60079349aa1ed7606f152db3d213423fab3f38b","sha512":"c03c60f52524b7dd13b766e99ac45986fddd429f509ff116707eb3b66ea56f42d7ec043f93e3a72941b39a157e8799bbc7fd927763cf61fbccb5aa8555361e5a","ssdeep":"768:ISyprtOGgtD22Xmy7ID2rL6QUxXBrzi/t4J1XsWEg:ISErMokp7sVBBrzi/tGSg","tlshash":"54c2e1877b0c588d7a268fb7c2d517bccaff6bdbe0c87249af5949d028e7105b661402","first_seen":"2025-10-19T02:15:20.030832Z","last_seen":"2026-04-11T10:18:31.55882Z","times_seen":23,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/044.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/044.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22199\r\nlast-modified: Fri, 29 Aug 2025 06:41:18 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b8e-56b7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rgAPrb5F94p5z7QYEQqYR6N7b7l4D98hHcDdDsYPAccFOW1GuBnOry5fQjAw%2FU95A9eNqKV36DP0XdiO2SgKHPpzCoS11KNX3nNjWj9f%2BQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37908aa5783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22199,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"ff2efff0b19e62f9f5665a8e3519c204","sha1":"747c0c1f703774748e74fa6ce4692c46d52036e2","sha256":"805f9451b749cd5f3d22879be031cbae0f1390639324eb30edc1d727c3e6fe99","sha512":"19b54eb9626be93e963158e111868157ae20f52ccdad35e6020ca4f0df9732e5986ba3deeb94f79c00383b09988d04d82ae8bffb49ae54cfedb25da531f4306d","ssdeep":"384:bAZsw8gtDRqTS+P608NexHbiGV2KBQVYLNVKkc/qvDlIVTwDSNw/syr:RSi8NqGGVHGMb8MDOTwZs0","tlshash":"0aa2e065829bf28fe4204a6f844b1b54d1ff48583879f1703b103ee0ab5ace2e71530e","first_seen":"2025-10-31T12:17:26.828289Z","last_seen":"2026-04-12T14:36:08.12165Z","times_seen":27,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA01QW2oDMQy8Si+wRpItS8p389tCSg7gONk20DzIQkhBh6/XTdN6wB7GI41sAsoD4IDwBLhIeUHshsEgJArIyV9eV57Qb7frfrs7TaFWR7Os6hHALHmipJocWUQ0O4O6RI0zRyRW46iewKNDA3FMqTMBX789+3K9cgwoiL8HuWOPdYLGGkjhhkBznfCo1awU2ZjkjZRR0UYE2KUdlTYONtNH/dyfp+F8uhxDHbc9riGAqvkcAA8Msz9iitTGagu8y2X6Olb3h+0+M/dX0NxgrvN/jf4gD4Z9n8KhvE+Xa6inQ5PuVfhz2YVOSs11i2PUjUQjySpjgdJ+JHNh5voNq94/zKoBAAA=\u0026cb=e2e_6961f5c1b31530.30113961","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.248","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:26.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA01QW2oDMQy8Si+wRpItS8p389tCSg7gONk20DzIQkhBh6/XTdN6wB7GI41sAsoD4IDwBLhIeUHshsEgJArIyV9eV57Qb7frfrs7TaFWR7Os6hHALHmipJocWUQ0O4O6RI0zRyRW46iewKNDA3FMqTMBX789+3K9cgwoiL8HuWOPdYLGGkjhhkBznfCo1awU2ZjkjZRR0UYE2KUdlTYONtNH/dyfp+F8uhxDHbc9riGAqvkcAA8Msz9iitTGagu8y2X6Olb3h+0+M/dX0NxgrvN/jf4gD4Z9n8KhvE+Xa6inQ5PuVfhz2YVOSs11i2PUjUQjySpjgdJ+JHNh5voNq94/zKoBAAA=\u0026cb=e2e_6961f5c1b31530.30113961 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: __uvt=s%3A32%3A%220405a8a3eef143a6018d8c336564261b%22%3B\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 10 Jan 2026 06:46:26 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://hclips-porn.cfd\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":48,"dns":1,"connect":22,"send":0,"wait":26,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=tpZT2Wvf2_df9BAhCONE6OAxGRnrPPtZ69jjd1ix8uT89g5RkUZ7ZXXevlAflAxJkC5VxHxjBV87vsOxVIGGaIQ83PSus_2fkT6MwmnTb1ZytaQ_gUIDRUi","fqdn":"cdn-fc.com","domain":"cdn-fc.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:26.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 05:59:35 GMT","end":"Sun, 01 Mar 2026 06:57:06 GMT"},"fingerprint":{"sha1":"1B:6D:8E:48:22:E7:FC:C2:4F:06:18:95:F0:8E:39:C2:A6:C8:47:2C","sha256":"DD:CF:71:A7:71:DB:68:1A:18:D5:6C:B8:43:76:78:71:E2:E1:0D:30:1E:09:92:A8:A5:4D:14:57:D3:66:8C:E5"}}},"request":{"raw":"GET /creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=tpZT2Wvf2_df9BAhCONE6OAxGRnrPPtZ69jjd1ix8uT89g5RkUZ7ZXXevlAflAxJkC5VxHxjBV87vsOxVIGGaIQ83PSus_2fkT6MwmnTb1ZytaQ_gUIDRUi HTTP/1.1\r\nHost: cdn-fc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:26 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 29 Dec 2025 08:48:19 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5UR7cVGyuNV1QWK0IB2Xx2Db51L6cGiCCwaJNyGTNomSXuZtYxQuedTq1YhpPnhEUzh%2FcwWQ8nODCz5mGRymRgEQjDDxa2bXMkc%3D\"}]}\r\ncache-control: public, max-age=3600, must-revalidate\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9bba37a13f3132fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15963,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15954), with no line terminators","md5":"8dba46f7106efb256dacc51321c7f523","sha1":"cb04109aa2635b8686cdc01fb946e242a0fd0d85","sha256":"f21f5e3e9a5cc465abbadd7628771752738ef1d6094f3029a1449a4cb1310bb9","sha512":"834dbab1c45a517675a025020a1b0050706c7923850fb2111e86a8b6610aa585f7f94f8f27fe04d1b4208468d6a749ee365324720586434290991e311254ef01","ssdeep":"384:5h+Mlu0ywxYbpoJTk1lA8NKICgfpuJubLQ9j2UVE0ZI2I9ez46ZF/N9fTyZkoG9M:Hn80ywxYbGk1lA8g9gReubLQ9j22ZI22","tlshash":"a862a510eab4503da53be0d6bef22fcbbb7c9007d4324640f69ca5fa47d6c83a552a54","first_seen":"2025-12-29T22:00:57.494417Z","last_seen":"2026-01-12T09:18:23.068391Z","times_seen":68,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":17,"connect":4,"send":0,"wait":38,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cdn-fc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/080_uriewqqhqhifdnddsnkjnjfjdfjhj138-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/080_uriewqqhqhifdnddsnkjnjfjdfjhj138-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 30063\r\nlast-modified: Fri, 29 Aug 2025 06:42:14 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bc6-756f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F3pN22uDeMQNr2aXhl6TyKQ2SJwQFrN0xeeAxpcbYHf0sLnDLL8VctVdXnuTiE2SFFurUvAeNjKTBHyN1A7eoCjGIh%2Blp0KH4NBQa%2Bpc9A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37901a66783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30063,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"0c5717e20528a401c75eb311e156be25","sha1":"d8105a519c20edc0aa72a7cc4e7223edf9102e94","sha256":"ce2ec9064336b0bda5f98f333b18b4eb8ba2b921b19865284eeccebf8b1dd220","sha512":"3f26d937a406a2da6249c258a7bed87a3cbf43a4cc52a24bfcef45d2fed45efd62727d2bb640590eed36a83f05c47ea795038632761de014fc488b070945e49f","ssdeep":"768:kZ1X0qewWjOR7hYHUmdh/WPBTqKlcK3KeBP:M1X02WiR7hY0mdhuPB+OcCKex","tlshash":"7ed2e12278b79abfa874756489da0359e37a4080cec700ad407878efa5d27e9c9c65f4","first_seen":"2025-10-19T02:15:14.787805Z","last_seen":"2026-04-12T14:36:08.211205Z","times_seen":30,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/121_gives-blowjob-id.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/121_gives-blowjob-id.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20319\r\nlast-modified: Fri, 29 Aug 2025 06:43:13 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14c01-4f5f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D5T5UNgaCkz2X56LuGb%2BT24NZYK0DNZ%2BOF%2BjCKtzpz%2FyUZBEa6ym5QQvQyYfD2EuB4juZ8wZTjqvrg2g5%2B32cQuvWK4j5loEdJNJGAajhw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37904a90783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20319,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"056539eceea4f737de08654f063fddb9","sha1":"24ad8c817478d6edd47d57f7f724c90884aa856d","sha256":"b84e1e4d36dff57c733390a2463c25f5e88610d7ad4d7a282ccef02e0567c4c2","sha512":"340f80c72f1c755417c02caaa38b511bd0630c109bf74468365509d8972de73561334972a7ba54e8905523d6b79ac0ec676366110389d1ae294e526f2baeccf6","ssdeep":"384:TkPREYQAKanlzKkk/vFnmIh6yHl0YaVlWa1HkkFtJ/DquzkX9+w+Fo:TkGYnHlzKkSvFh6CLaF9kk3Jbquzq9L","tlshash":"5592d0717b127c2e94f4357a7b47830622ab7ad960d19a09783cfdd41fe849f8b8c902","first_seen":"2025-10-05T06:06:00.147444Z","last_seen":"2026-04-12T14:36:08.209536Z","times_seen":32,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/126_to.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/126_to.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24503\r\nlast-modified: Fri, 29 Aug 2025 06:43:20 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14c08-5fb7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eoyXWgwD7DhzqyK8sb5eoKManl1bXn073%2BhH6eBE5V%2F3ns4qzz7g0n%2BniFljIwzUceIdndZz3ljm4MaLRP2PNGJL%2Bt3l8ecropQ1%2BwbJHw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37904a92783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24503,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"5a0823a297fc3b55ea2766391a6330b5","sha1":"400a20797209ebb4a965fa5a38e8522b064f50f8","sha256":"41fea39f4be52d78703b8123eff180ef17ba05145c4866b24f018a74c6fc5ad8","sha512":"2f9d471ee87593ec5d3dbcc9a735eb2eec451ace102d12448ed9b944d0521e226078fd868591e4ca1bfe0ac169a30e3500b8eb7c870e3da90f31dd8341eb2650","ssdeep":"384:2pVmaDbA/nvJJNB/8hsHTPSaUeCxVYJNsh7ZVkd0kw/cR/u7666OqdyZyN:s4JJNB/KMtCxVkZw/cR/u7666OO6c","tlshash":"f8b2d0559f14231a9d745e7306984e91e3537abf6b82c6fda540b2cd8368cd00fa9a2c","first_seen":"2025-10-05T06:06:00.112991Z","last_seen":"2026-04-12T14:36:08.217508Z","times_seen":32,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jcdn.tsyndicate.com/bd16f693d3144ae0b0b2ce10c53c7d0a.js","fqdn":"jcdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.70","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:25.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jcdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 05:32:00 GMT","end":"Sun, 29 Mar 2026 05:31:59 GMT"},"fingerprint":{"sha1":"E9:07:16:77:24:EA:24:DE:71:7C:DC:E2:52:F3:D2:7A:7E:B7:3D:BA","sha256":"90:46:61:01:9B:4B:FC:B1:12:BA:86:DA:55:87:42:C4:5E:B8:5D:56:43:F2:4D:00:DB:A2:EE:89:D5:58:52:32"}}},"request":{"raw":"GET /bd16f693d3144ae0b0b2ce10c53c7d0a.js HTTP/1.1\r\nHost: jcdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 2\r\nserver: nginx\r\nx-request-id: d811368d-ef4a-4ace-8bb0-9d23cf2c1395\r\nx-robots-tag: noindex, nofollow\r\ncache-control: max-age=300\r\nexpires: Sat, 10 Jan 2026 06:51:25 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: DS9225,DS5058\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-16T21:13:50.169784Z","times_seen":580403,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":90,"dns":53,"connect":19,"send":0,"wait":19,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ntvpforever.com/keywords","fqdn":"ntvpforever.com","domain":"ntvpforever.com","tld":"com"},"ip":{"addr":"168.119.25.102","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:26.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 02:02:57 GMT","end":"Wed, 25 Mar 2026 02:02:56 GMT"},"fingerprint":{"sha1":"C4:80:D6:E8:F3:2B:FD:8A:89:D9:CF:8B:78:3F:74:35:34:B3:68:8A","sha256":"DF:07:A2:74:C6:6C:63:AA:37:DD:AA:4F:E0:F5:C5:D7:9C:B8:28:C4:9C:45:3F:F7:BC:1B:0A:AE:7F:38:FF:B1"}}},"request":{"raw":"OPTIONS /keywords HTTP/1.1\r\nHost: ntvpforever.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://hclips-porn.cfd/\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.18.0\r\ndate: Sat, 10 Jan 2026 06:46:26 GMT\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":307,"timings":{"blocked":134,"dns":13,"connect":25,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=it7_v9mINZsY2FHHRd8f7idZL-DxISKYUEWDNYzup2TzCEm0_qr7AdVAPKWiR3qPIzth_TWtgQ1ya3AKUJlgD5NNIe-7ua_9YB6L9C6SgJXZhEA_gUIDRUi","fqdn":"cdn-fc.com","domain":"cdn-fc.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:26.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 05:59:35 GMT","end":"Sun, 01 Mar 2026 06:57:06 GMT"},"fingerprint":{"sha1":"1B:6D:8E:48:22:E7:FC:C2:4F:06:18:95:F0:8E:39:C2:A6:C8:47:2C","sha256":"DD:CF:71:A7:71:DB:68:1A:18:D5:6C:B8:43:76:78:71:E2:E1:0D:30:1E:09:92:A8:A5:4D:14:57:D3:66:8C:E5"}}},"request":{"raw":"GET /creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=it7_v9mINZsY2FHHRd8f7idZL-DxISKYUEWDNYzup2TzCEm0_qr7AdVAPKWiR3qPIzth_TWtgQ1ya3AKUJlgD5NNIe-7ua_9YB6L9C6SgJXZhEA_gUIDRUi HTTP/1.1\r\nHost: cdn-fc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:26 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 29 Dec 2025 08:48:19 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LA8SY0HgY2cv4eSDvWBaeEPDbJcL7TDJ1Jxjpmnx82DreFT%2FKwYVrBfz8FVxIlFVtg8FEd5B9nmweDa8Sz5LTrewUbhiPC%2FepAM%3D\"}]}\r\ncache-control: public, max-age=3600, must-revalidate\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9bba37a13f2632fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15963,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15954), with no line terminators","md5":"8dba46f7106efb256dacc51321c7f523","sha1":"cb04109aa2635b8686cdc01fb946e242a0fd0d85","sha256":"f21f5e3e9a5cc465abbadd7628771752738ef1d6094f3029a1449a4cb1310bb9","sha512":"834dbab1c45a517675a025020a1b0050706c7923850fb2111e86a8b6610aa585f7f94f8f27fe04d1b4208468d6a749ee365324720586434290991e311254ef01","ssdeep":"384:5h+Mlu0ywxYbpoJTk1lA8NKICgfpuJubLQ9j2UVE0ZI2I9ez46ZF/N9fTyZkoG9M:Hn80ywxYbGk1lA8g9gReubLQ9j22ZI22","tlshash":"a862a510eab4503da53be0d6bef22fcbbb7c9007d4324640f69ca5fa47d6c83a552a54","first_seen":"2025-12-29T22:00:57.494417Z","last_seen":"2026-01-12T09:18:23.068391Z","times_seen":68,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":2,"dns":7,"connect":4,"send":0,"wait":38,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cdn-fc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"afrdtech.com/v2/check","fqdn":"afrdtech.com","domain":"afrdtech.com","tld":"com"},"ip":{"addr":"31.220.27.154","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cdn.60ah.com/b/banner_dev.html?source=1567158389\u0026w=300\u0026h=250\u0026id=1433671","date":"2026-01-10T06:46:28.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afrdtech.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Oct 2025 10:13:45 GMT","end":"Sun, 18 Jan 2026 10:13:44 GMT"},"fingerprint":{"sha1":"36:C0:A3:65:FA:F3:BE:60:5E:FB:4A:07:B1:25:84:57:D1:80:FD:B1","sha256":"D0:4F:77:FD:EF:29:9C:9A:26:DF:FE:81:37:65:5C:99:B2:88:E0:FA:82:4A:14:02:45:70:2D:FD:5F:BC:22:40"}}},"request":{"raw":"POST /v2/check HTTP/1.1\r\nHost: afrdtech.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/json\r\nContent-Length: 2111\r\nOrigin: https://cdn.60ah.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2111,"data":"{\"version\":\"1.0.2\",\"v18\":true,\"v19\":false,\"v20\":false,\"v124\":false,\"v129\":\"00000000\",\"v130\":\"111000000000\",\"v131\":{\"101\":0,\"108\":0,\"112\":1,\"114\":1,\"122\":1,\"123\":0,\"135\":1,\"139\":1,\"141\":1,\"151\":1,\"154\":0,\"166\":1,\"167\":0,\"171\":0,\"179\":1,\"182\":1,\"189\":1,\"197\":0,\"199\":0,\"201\":1,\"209\":0,\"215\":1,\"217\":1,\"223\":1,\"231\":1,\"241\":1,\"269\":1,\"271\":1,\"272\":1,\"280\":1,\"285\":1,\"287\":1,\"293\":1,\"298\":0,\"299\":1,\"301\":1,\"302\":1,\"312\":0,\"314\":1,\"317\":1,\"318\":1,\"326\":1,\"329\":0,\"332\":1,\"336\":1,\"338\":1,\"343\":1,\"347\":1,\"349\":1,\"350\":1,\"359\":1,\"365\":0,\"385\":1,\"394\":1,\"406\":0,\"407\":1,\"412\":1,\"415\":0,\"419\":0,\"420\":1,\"421\":1,\"430\":1,\"431\":1,\"432\":1,\"434\":1,\"436\":1,\"438\":1,\"440\":1,\"466\":0,\"468\":0,\"469\":0,\"473\":1,\"477\":1,\"478\":1,\"488\":0,\"496\":1,\"499\":1,\"506\":1,\"510\":1,\"511\":1,\"512\":1,\"513\":1,\"525\":1,\"528\":1,\"529\":1,\"535\":1,\"541\":1,\"558\":1,\"561\":1,\"575\":1,\"589\":1,\"591\":1,\"594\":1,\"595\":0,\"597\":1,\"610\":1,\"618\":1,\"621\":1,\"622\":0,\"632\":1,\"642\":0,\"645\":1,\"650\":0,\"657\":1,\"669\":1,\"670\":0,\"675\":1,\"676\":1,\"677\":1,\"680\":1,\"682\":1,\"686\":1,\"690\":0,\"694\":1,\"701\":1,\"702\":0,\"711\":0,\"714\":1,\"715\":1,\"722\":0,\"730\":1,\"731\":1,\"736\":1,\"737\":1,\"748\":1,\"752\":1,\"755\":1,\"759\":0,\"767\":0,\"768\":1,\"783\":1,\"803\":1,\"805\":1,\"813\":1,\"816\":1,\"823\":1,\"824\":1,\"826\":0,\"830\":0,\"838\":1,\"861\":1,\"863\":0,\"866\":1,\"868\":1,\"871\":1,\"877\":1,\"882\":1,\"887\":1,\"889\":0,\"895\":1,\"896\":1,\"906\":0,\"910\":1,\"913\":1,\"915\":1,\"917\":0,\"932\":0,\"935\":1,\"937\":1,\"941\":1,\"945\":1,\"959\":1,\"964\":1,\"967\":0,\"974\":1,\"976\":1,\"992\":1,\"995\":1,\"998\":1,\"999\":1},\"v132\":[0],\"v128\":\"111\",\"v106\":false,\"v119\":0,\"v133\":\"c,m,s:13.3333px Sans;f:16px serif;sf,ca,em:146;ss,su:140\",\"v17\":100,\"v12\":1280,\"v11\":1024,\"v57\":300,\"v58\":250,\"v16\":\"landscape-primary\",\"v14\":0,\"v15\":0,\"v13\":false,\"v118\":false,\"v10\":48,\"v55\":true,\"v54\":\"llvmpipe\",\"v56\":\"Mesa\",\"v51\":\"llvmpipe\",\"v53\":\"WebGL 1.0\",\"v52\":\"WebGL GLSL ES 1.0\",\"v25\":null,\"v24\":false,\"v26\":\"https:\",\"v35\":1768027588421,\"v34\":0,\"v155\":\"UTC\",\"v43\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"v23\":\"en-US\",\"v28\":\"\",\"v115\":\"\",\"v150\":\"\",\"v156\":false,\"v44\":\"1433671\",\"v110\":\"\",\"v111\":-153151286878606,\"v134\":\"239040355\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 06:46:28 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccept-ch: Width, Viewport-Width, DPR, Device-Memory, Downlink, RTT, ECT, Save-Data, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version\r\naccess-control-allow-headers: X-Requested-With, Cache-Control, Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://cdn.60ah.com\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"db2a063e4f0b9b018cc72cfedd52688c","sha1":"ef96640a98112bbd3df5cebd3a0ffd6c797b795d","sha256":"7b03c998d4a235296b2ebceabe30065f4fd88c8a638ca35fa1a4d8fd91a7505a","sha512":"9806b481fd50c2d93a011913bffd44801709d1b2190441cf7a5c472f753f97a2fbfeac9b693f4fb1b5e8c6990ebe9e146d28acacea66ee93b93b30a80de84218","ssdeep":"","tlshash":"ae9004c3c31c33c1037c37d50444140d541d0f043c004c4ff150f51c005403d7741505","first_seen":"2025-06-12T07:19:56.722846Z","last_seen":"2026-04-14T21:21:34.513476Z","times_seen":433,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/025_not.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/025_not.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:23 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 32487\r\nlast-modified: Fri, 29 Aug 2025 06:40:58 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b7a-7ee7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YINmTW%2B6CpYEf2RRx4e1WintMk81pe2jytB%2FMLzJA5u6Ml1yg9K6VCK6rHNHVbO6SbtQ7X4Cr3tLwBakqWJ5RZobNEiXRoH7EYY3sbBIwg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba378fda39783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32487,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"66eddc797dbb2c533d09d7a6875ccccf","sha1":"7c07aa8adb7227dc440521f956d2100adbebc343","sha256":"e6fa5e49aebda96a0aec4684a3fef9558286185c48217120b25922fc9f4ef7a6","sha512":"adb1fb6dc04b672730a9d99c3967d1b97c19fa8dd82a3ee2c534135f17ad1c22ff82c32fc016d8e9ae52a97a0020c4123b86084432bf35148755601d2ef114df","ssdeep":"768:WR+j78XzPoB0owVUBW8XtNxJfpu1Ue5f2IAQ3E+VAjs32P:WAnUzPoB0oXnx61b5uIAQ1AjsGP","tlshash":"dfe2e12fa76e0372f35157b181328fe6b3e0c82a1e1d1c691ee805dc665064bf5daae4","first_seen":"2025-10-31T12:17:26.944929Z","last_seen":"2026-04-12T14:36:08.126484Z","times_seen":12,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":194,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/123.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/123.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12284\r\nlast-modified: Fri, 29 Aug 2025 06:43:16 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14c04-2ffc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HYiljM5UkmRCQCdjOBfXuQMhDh6e%2BnxBYrmgrrHWcIBa9K6o%2By%2F8KQlgQhBE1wkGR17xCY3hs7Cfyb85Ch9ubgi2tEOA02qSMcN8UNx9rQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37904a8b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12284,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 640x639, segment length 16, baseline, precision 8, 400x300, components 3","md5":"3933879d7c7b64954c4d03504d38b55b","sha1":"d6d13f319b73d7b16d350ab4c1ca23f4cc186c47","sha256":"c76e20d7bfbb30814ce2133cac4384eaa4386949077bcee881e61131b6b426e0","sha512":"daf4f3161c6e1e754b18338c9e483511bd52ce3289597d73a9c0f9a009fbaaa1341d23c9fa75642f995f13c394e7bb1b162743d6c6abceac54fdadf39f3427bb","ssdeep":"192:0bLAp9EBTwirLIuwzoIvZJ4jEwMax21KO0L09697zzH8It7zn1gb3L1Hi43yI3:8+ninrwlT+x5O0LG6NzzHX5718b1Hi4D","tlshash":"1142cf554a8f1028d33047a21c6ee2dfa606b90538168dde297fdcdc55db2f94caa273","first_seen":"2025-10-05T06:06:00.039337Z","last_seen":"2026-04-12T14:36:08.278077Z","times_seen":32,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/098_--1.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/098_--1.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 31240\r\nlast-modified: Fri, 29 Aug 2025 06:42:47 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14be7-7a08\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y9DGAjcMRUFdz8eGjR1ppwg3nbxzS6pETHenJebopclPsHdMk7tqfwySW3bKKHDn%2FaZtFWjlek2muSUEBfw3HnLEkMOgr7mXhQelvAlxjw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37905a9a783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31240,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"3ee4877bdf1f641189e37046f19c9952","sha1":"4a582652dc0aa775442ec6fc249c635174f6bb93","sha256":"73b93415bdded53d89d6b16290383a5c2ad8c74fb88b1093be1cda0b9fb975ad","sha512":"bb63d8f11b7aca262e96cc86b8d7c0ff5d1678b305fd5f06e758718e2f1d6ec8992d2aacdba02ca0199a963fe9a7fa7774673c8945bd79173fc4d4662afcfe23","ssdeep":"768:85Z9HxdJDAbRDm51yetSke1XF3PWqH+2Dq2I7NNjiQJ:85/1ymqQWz+J5Nwk","tlshash":"5de2e17e4396e22aec1000563628ecce65b634734fbac35963e5279cb4cc9b93f50245","first_seen":"2025-10-19T02:15:16.987361Z","last_seen":"2026-04-12T14:36:08.296384Z","times_seen":30,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/063_asian-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/063_asian-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23673\r\nlast-modified: Fri, 29 Aug 2025 06:41:45 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14ba9-5c79\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236696\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GwjIYcoOngXuGsj2NLdpdtnCZ5QYDcpqIq6MUnjYxzeU4HXAwNT0CSkcgpHiIvSwUT8b4UqFRZihNXICOx%2FabLSh%2BUuKIAKryVMEMCyc0w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37908aa3783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23673,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"4b75ad43800aef3554517f3b271934a9","sha1":"8ea7e58ad10d86c1cdc52d3a0307efa2eb325c77","sha256":"0e4ac1b7169ee962d0650171a3e7d856b0ec8ed4431417407d7df4dfd0952526","sha512":"a4c30842d9fbd894832e777cf3038c6eff7eaf7dc7c2110aff391f91911d2a790cda6c99a395b9ee168ddf3205cd76756b01b3309dffc142dd20a3a6f8c088f4","ssdeep":"384:M509cwrqwrCTRd585IEtTzzuMZ6lDCzxIo7oI7zbOQNOZHt4A2k4xovro:MfYqwiT585IEJzzuMZ6loSG7xNMN4G4x","tlshash":"efb2e01b0098c56d892e4c7583fa33dfdf097816c8bdf4227c97f6ce25682a0b255d98","first_seen":"2025-10-31T12:17:27.096635Z","last_seen":"2026-04-12T14:36:08.124607Z","times_seen":27,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: application/javascript\r\netag: W/\"92eb331739d51c65226b5fdb07e\"\r\nexpires: Wed, 07 Jan 2026 17:40:28 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3Xw8AAAwBuUwKDAH3AQAAAAwBw7WvAgG3VAAAAA\r\nx-77-nzt-ray: 2a494a150440e8ebe5f56169debbc307\r\nx-77-cache: HIT\r\nx-77-age: 3935\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":185387,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39040)","md5":"6bd931315f9ec922d23220a34a506421","sha1":"92eb331739d51c65226b5fdb07ec2d74924f200f","sha256":"28f33740f0a341c823243413c7780d92e7ae39254641174a86a4f51ac805b576","sha512":"26bb36ab577ba2b6486f482177e31992c81c79322070edc9d55af10d7ab8f3e1b9dccc89f7c925a47a68e464f522736c0e64d3d7e4acaa016745e0104bddb167","ssdeep":"3072:cWYjf7+28VOk2DG2cUMaElwnRlqI1fsBHisiEolY4o/CXMXpo:U+28VOk262lElwnRjfs4sXhpo","tlshash":"96045c993792307441d3a11daaff53093371506ab80f4884bb4dd8a427adeea51a3ffd","first_seen":"2025-12-11T15:18:11.624048Z","last_seen":"2026-01-15T17:17:43.902034Z","times_seen":1441,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":18,"connect":3,"send":0,"wait":1,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/107_x3xa3989bdda2f42b9255-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/107_x3xa3989bdda2f42b9255-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15253\r\nlast-modified: Fri, 29 Aug 2025 06:42:55 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bef-3b95\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236696\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o1sxFctxXWlLkNifK0ys9N5hNVv7yDuTTFa8%2Bg6JsliGaf89gc03HB3J3nxdoSc%2FCS1b%2BoLyrai9EktqzGH8fpVLNJ0iLTlROGWFXuCNKA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37908aa4783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15253,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 640x639, segment length 16, baseline, precision 8, 400x300, components 3","md5":"ff127391758b6d5681a7676e87f53f60","sha1":"15f08983984ad97e3e74c342d219b2d6507cad2d","sha256":"181f7f4078b9147b1ab9a64495df7305245bbd1c4a6d03096cfe05be76a80183","sha512":"ede2838a20abc7211115afbea02f31acd071d537e781db820dc2e977f5615ed23779a03d7c96dc86d6f24cc2c98e40373abf0a5427c5a6b78348aa3093d13ad8","ssdeep":"384:syxuZXGICoGZXn4VdbHLWzchWcnHxWS+W3U2xhfw6:syeGIC16VdD6ohfHxWwUsf","tlshash":"3c62c0fd0d5f44039e6cdc34808bf54f8e6abdbc54a8255409058bc737cba9e9ba246d","first_seen":"2025-10-19T02:15:20.240005Z","last_seen":"2026-04-12T14:36:08.302396Z","times_seen":30,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/quicksand/v37/6xKtdSZaM9iE8KbpRA_hK1QN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:25.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/quicksand/v37/6xKtdSZaM9iE8KbpRA_hK1QN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28244\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 09 Jan 2026 19:09:22 GMT\r\nexpires: Sat, 09 Jan 2027 19:09:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 41823\r\nlast-modified: Wed, 27 Aug 2025 19:19:09 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28244,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28244, version 1.0","md5":"9d503278216c2225184a236c64e0924b","sha1":"0c24c621374506ce70403a7473b47acd86bbf919","sha256":"2add7d60b1cd2ab84c9967e23d5ec08eb3fc9635c46855b17d59404dec6b410e","sha512":"fa1aca723eb40b6026aa1d21b36ce2573e4164516c9a0b55ff830a434c3954833a06b1df76236b1d682107df1bd3d263ed19cba854c1a6795566a7091749696d","ssdeep":"768:/6zZ6KBVHUlHvwCa0z1sCvODsIBMTKmJ3GG5x4:yzdKvwtszvdNjz4","tlshash":"3cc2e083d14afb33d0afb77adc52d022e9756bccec7e587a97a900398895c1b0644285","first_seen":"2025-09-02T18:36:17.739185Z","last_seen":"2026-04-16T21:17:56.220235Z","times_seen":7996,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":170,"dns":1,"connect":20,"send":0,"wait":8,"receive":3,"ssl":148},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/n.v2.css","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.70","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:25.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Nov 2025 07:32:01 GMT","end":"Sat, 28 Feb 2026 07:32:00 GMT"},"fingerprint":{"sha1":"30:27:D8:5A:59:AD:E2:2E:0E:9D:6A:5B:1B:BF:60:BE:D2:80:8B:DF","sha256":"A9:DE:14:B5:E6:07:9A:21:0C:4B:AC:5D:B3:F1:DB:EB:1F:27:9B:A9:C9:AD:51:72:F0:5B:0D:91:81:C1:D3:6D"}}},"request":{"raw":"GET /sdk/v1/n.v2.css HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:25 GMT\r\ncontent-type: text/css\r\nserver: nginx\r\nlast-modified: Wed, 07 Jan 2026 14:53:29 GMT\r\netag: W/\"695e7369-5b0b\"\r\nx-robots-tag: noindex, nofollow\r\ncontent-encoding: gzip\r\ncache-control: max-age=172800\r\nexpires: Mon, 12 Jan 2026 06:46:25 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: DS9225,DS9201\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23307,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (23307), with no line terminators","md5":"33e0d0601ab76e81bd3ce7cb878df64f","sha1":"92ed650db6b49afc1c72705364305f5cc5ad7365","sha256":"c5e1ee4604c2d7741faece78fa60fa3f17b55c4090cbcd8a6da90e5294017e34","sha512":"1ea22c3fe70462d5192d778c03d253d8e5fb84ace4beae7502a41dd6b2b60ee6e776955a29f764133180203e8ca8af301b3b10c9425323ff4d249d8ce82703ac","ssdeep":"384:OtWRHAnK1CezhZBhJVhhkhfu3IhDaezh9jhb7fKaFXMSTsrFsNpwtcSTzKX:OQAnK1V9JfcfmyD99tb7XD","tlshash":"14a2a7b459c0402cf9abcbaee525795c6269c41ad3d2872ed71cbb30e1d11cdb3b85b8","first_seen":"2025-12-23T10:36:26.264109Z","last_seen":"2026-01-12T14:37:23.25976Z","times_seen":87,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-fc.com/creatives/universal/native/logo.svg","fqdn":"cdn-fc.com","domain":"cdn-fc.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=tpZT2Wvf2_df9BAhCONE6OAxGRnrPPtZ69jjd1ix8uT89g5RkUZ7ZXXevlAflAxJkC5VxHxjBV87vsOxVIGGaIQ83PSus_2fkT6MwmnTb1ZytaQ_gUIDRUi","date":"2026-01-10T06:46:27.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 05:59:35 GMT","end":"Sun, 01 Mar 2026 06:57:06 GMT"},"fingerprint":{"sha1":"1B:6D:8E:48:22:E7:FC:C2:4F:06:18:95:F0:8E:39:C2:A6:C8:47:2C","sha256":"DD:CF:71:A7:71:DB:68:1A:18:D5:6C:B8:43:76:78:71:E2:E1:0D:30:1E:09:92:A8:A5:4D:14:57:D3:66:8C:E5"}}},"request":{"raw":"GET /creatives/universal/native/logo.svg HTTP/1.1\r\nHost: cdn-fc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=tpZT2Wvf2_df9BAhCONE6OAxGRnrPPtZ69jjd1ix8uT89g5RkUZ7ZXXevlAflAxJkC5VxHxjBV87vsOxVIGGaIQ83PSus_2fkT6MwmnTb1ZytaQ_gUIDRUi\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:27 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 15 Dec 2025 17:20:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=3600, must-revalidate\r\nage: 117\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MsX2uDODpkShtaK%2FEA2lVPNCot%2F6uxgaSsiOeb64hFypztruwN5p71ekSwVD8u01lDuvt%2FwWfAVc4Re%2B03QfqeefS6LByn76\"}]}\r\netag: W/\"6940435b-2bed\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9bba37a4bf8d0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11245,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5cdfc68fa98e909b02a11337921001bd","sha1":"e27527d996d5a18fa59dc57a8256322e3bdd7aab","sha256":"e24329d29028e4b19b6d3cc62fa35a0cf895ed41436bf0beb35ced7a8b3175d0","sha512":"66153f76e7b48910afa84fedee99f1329e359fbbf31963c12829b10dc34014526aa5e4ca1b21808d3400198b5df3fbf6eed8a602d814cead3f877239587d8afa","ssdeep":"192:pN6Eg4NAU6qWvCurNj4Z775M/acCSu4PU1h7kuN6w6J7/:pSkWKAiZgCLP87/","tlshash":"7b32d9e02276d2e4a606ffddde3398216a2d1cfdbfc48196c2d09da950250c98c6dcf6","first_seen":"2025-12-18T11:49:01.074798Z","last_seen":"2026-02-16T17:00:56.144035Z","times_seen":91,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cdn-fc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"preroll.hostave3.net/notifications/zeropixel.png","fqdn":"preroll.hostave3.net","domain":"hostave3.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rtbrenab.net/get/?go=1\u0026data=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","date":"2026-01-10T06:46:27.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hostave3.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 17:15:23 GMT","end":"Mon, 16 Mar 2026 18:13:55 GMT"},"fingerprint":{"sha1":"41:3C:1E:E0:08:D1:6C:38:21:47:B8:14:0C:25:76:36:FD:34:24:1A","sha256":"0E:AA:90:56:57:3E:C1:BB:8F:02:C9:62:A7:53:D7:BC:00:93:1C:74:16:9B:35:37:E5:FB:00:A7:58:81:44:BE"}}},"request":{"raw":"GET /notifications/zeropixel.png HTTP/1.1\r\nHost: preroll.hostave3.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rtbrenab.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 42\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 11 Sep 2018 08:40:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o1rEAPCcoMxguJnttUHPkhrTgM8Jr1Vv1RyYSAhSP%2FXzfncgHCsfVrH1KREapZ6J6F%2FyGf2KJ71CtfcyCAoVlPBwAT7ls97hijlNeGzR1HB%2BxBVv\"}]}\r\netag: \"5b977f94-2a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 2087866\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nvary: accept-encoding\r\ncf-ray: 9bba37a7b88649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-16T21:13:44.870845Z","times_seen":800624,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":90,"dns":22,"connect":2,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/scripts/aqj.min.js","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /scripts/aqj.min.js HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 16 Jan 2023 16:57:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"63c58208-15d9c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ST2L4UMtznH5Q%2FGQFbRMZu63ERRd43tm6HX7BzGgS0fJgQ%2BN9v3UKu98otYWu2s5QCWzfsst7WOySaS4ClQwft8kL%2B4gZSuf%2FfsSgAtXXA%3D%3D\"}]}\r\ncf-ray: 9bba378fba25783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89500,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"7c14a783dfeb3d238ccd3edd840d82ee","sha1":"ad886e472b3557f3dc7dfa2bc43468ab8d1cef5b","sha256":"80f04717f32ea0320c5e8618fbacedd1fee3a8775ad8292140a6113551d4b5b0","sha512":"fa3e021ca60a9adbe570c6565c7370727904c4396c23a4c519daf258d05fae3e17bfb7607a0ab6dfe2b7150a4ec1b6a95e6d49675291be5f6a4e5679ad78d858","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vN:DIh8GgP3hujzwbhd3XvSiDQ47GK/","tlshash":"6f9309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:06:20Z","last_seen":"2026-04-16T19:49:01.953575Z","times_seen":17227,"resource_available":true,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/scripts/asf.js","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /scripts/asf.js HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 22 Feb 2023 16:38:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"63f64502-a92\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 236698\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hL34xmQOG%2Fa%2FhLMmS6haXoOtLE1bb3pp2sa4jV0zEPSYUZDtXHtW4ukrTJoRcfUZ0yU8qDz3IblXuApSgbo45EFykTeaErFNeHL58L3LHw%3D%3D\"}]}\r\ncf-ray: 9bba378fba26783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2706,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"b0191ea32bd357f18cdcdd82c739d754","sha1":"e9158d2a0035c4477cfc8ad1e462f6a1e3c7650e","sha256":"9a5d48b1ed565a6c36e5cbaa144ead8a89300a2cfb3c9777bab6fedae4425943","sha512":"75a7fe267bde393709fc822fdd5454f952d580ee8993c33bfb03ddb732b72b1217159d7c1337fcd9a195e794e051dc269e773a85bb0d4f1458f0269cde8440ce","ssdeep":"","tlshash":"7f517741f6ae7aa050bb212d8bf741443fad185f71099954fcec0cd91f213aea89270f","first_seen":"2023-10-16T17:48:40Z","last_seen":"2026-04-12T14:48:43.577565Z","times_seen":61,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/026_xxx.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/026_xxx.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:23 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21810\r\nlast-modified: Fri, 29 Aug 2025 06:40:59 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b7b-5532\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ovETNnnjrcAzfG%2FHSalfi7nuojv0pvlPyTRl%2F8e%2FS1PS8Ppw%2F6GGnTU7MIAdFOMwOu5ndPCf8N%2BLQrj28J5U%2BDJ3hyKATmmEj4Ps%2BGIaUA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba378fda3a783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21810,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"c1b40d7e901da528cded3bac2233052b","sha1":"fbe919d9c0dacb2f876dbbbc6e6e7baaf83dc6a3","sha256":"40cc42052c5395300266e75089f089ab0776393bd8449504df0f74e55a53e59b","sha512":"1f3e6741e4caa70dc641d7bd89e04e090c1a7d12881ab57c4c7d4ba8c5ab7ddb9f42f2da4d380831e5d5b7a30bad3d572f90ab48b0df33f5424b4ae0e249abe2","ssdeep":"384:+LU/CL2yM/Uu4mvefcn5acHY224uc5TsCwacwJRQ8Br8eHmJGXGm/BKA:sk/Uu4mvjax22s5wzahJi43mJGX//Bt","tlshash":"80a2e10dfd4d2d61c9e6223e0298df90934e0578bcea51acb1c5c6d894aed8fbb4465c","first_seen":"2025-10-31T12:17:27.081936Z","last_seen":"2026-04-12T14:36:08.316446Z","times_seen":10,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/067_teases-nearby.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/067_teases-nearby.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25282\r\nlast-modified: Fri, 29 Aug 2025 06:41:54 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bb2-62c2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fn2QvAU1cFwmszCQSZdH%2BcdhtI1OQuNhQU5w1xIuMW3hJ2CPuq0WnE5gprUwRO0Xv%2FJfBHWuIQuYSPESnLwWMul%2BvsL92nhnpwt0hwgh3w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37900a52783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25282,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"5f5e1bdfe175aeceb1822e59b410ae4a","sha1":"d9e4013f22fdf4198c660adf3da07d6393486366","sha256":"02c65a8c032d496cd3d84e8363853f6e9ec38eec17902b24e6ffc0241c023755","sha512":"b9060cf0e8551fdb595061e2fccf093bec83163f90b5d02265cb7a4f6a7ddebdb8ea5a767f2a7e21735c9b4e8de92e825e8a113f6171c42b1789f5cbf148f8fb","ssdeep":"768:PkmsNt90GsWpAx/Dc6gSR+/LOxJNBdL2h+p:PVyAsU/DMStJfdLR","tlshash":"45b2f15d024e4cf8598aa0e31f9230305d5fa6931178dbf2e8923cf7f1298b9abd9475","first_seen":"2025-10-31T12:17:27.184967Z","last_seen":"2026-04-12T14:36:08.300951Z","times_seen":27,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-fc.com/creatives/universal/native/fonts/Roboto-Regular.woff2","fqdn":"cdn-fc.com","domain":"cdn-fc.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=vgrVQ_vuRFRxeSWfjKPOnXitlaqqtsNempNBquKydHa58W6jrz4DRT3LrKFReABeBCRRzNgyS2-JbSql0ZKsCnQ5QkAcATjTV6uD-o8DY7mwtDU_gUIDRUi","date":"2026-01-10T06:46:27.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 05:59:35 GMT","end":"Sun, 01 Mar 2026 06:57:06 GMT"},"fingerprint":{"sha1":"1B:6D:8E:48:22:E7:FC:C2:4F:06:18:95:F0:8E:39:C2:A6:C8:47:2C","sha256":"DD:CF:71:A7:71:DB:68:1A:18:D5:6C:B8:43:76:78:71:E2:E1:0D:30:1E:09:92:A8:A5:4D:14:57:D3:66:8C:E5"}}},"request":{"raw":"GET /creatives/universal/native/fonts/Roboto-Regular.woff2 HTTP/1.1\r\nHost: cdn-fc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=vgrVQ_vuRFRxeSWfjKPOnXitlaqqtsNempNBquKydHa58W6jrz4DRT3LrKFReABeBCRRzNgyS2-JbSql0ZKsCnQ5QkAcATjTV6uD-o8DY7mwtDU_gUIDRUi\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:27 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 64184\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 15 Dec 2025 17:20:27 GMT\r\netag: \"6940435b-fab8\"\r\ncache-control: public, max-age=3600, must-revalidate\r\naccept-ranges: bytes\r\nage: 2317\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aGdz5qdm67KfzXm6idUScRlAB%2By8BDDwJ37X7LtrNmLa4Rg%2Bo0zdAsCbZ1GKHIQAQ%2BZzW0cvNyQ%2B4dGRQPGM1mDyrc6t9hVt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9bba37a47f750b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64184,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 64184, version 2.0","md5":"b2a6341ae7440130ec4b4b186aff8413","sha1":"a18bcf95ada923da31f176137b8add02b0ba60f3","sha256":"fdffd706005defc7e4f5e07cac7cc371c5bb0b0c895e5ec7c16c1ea0baa43f59","sha512":"244f8100af24f5a7f9e666494d0f6199ba91fb8942a433a58159f03932ccbd640ddd01f87af50e92817a78949c4242d0b8f342e7d5ecd35076e7f27b4ac8c48b","ssdeep":"1536:LUotCx25+W81Zq65IbUER7e5bLTAU+3zQh8dHT6L21:LU2Cx2UWYWbbiTAUozD8L21","tlshash":"5c5312d0530b4a2d712be238dcfe8965f20605620df60474ec9c7df9631b68992a6f77","first_seen":"2023-04-10T11:26:03Z","last_seen":"2026-04-16T18:41:19.900105Z","times_seen":1405,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cdn-fc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ic-nss.flixcdn.com/a/M2QzYjNlZWJkNWZkMGE4Nzk4ZTEyZGY3YzkzMjYyYjk/jpeg%2Cs%28w%3A480%2Ch%3A300%29/video/W9/W9zQWp/screen/6-Yv7.jpg","fqdn":"ic-nss.flixcdn.com","domain":"flixcdn.com","tld":"com"},"ip":{"addr":"185.76.9.5","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=tpZT2Wvf2_df9BAhCONE6OAxGRnrPPtZ69jjd1ix8uT89g5RkUZ7ZXXevlAflAxJkC5VxHxjBV87vsOxVIGGaIQ83PSus_2fkT6MwmnTb1ZytaQ_gUIDRUi","date":"2026-01-10T06:46:27.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1029385688.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Dec 2025 18:50:04 GMT","end":"Tue, 24 Mar 2026 18:50:03 GMT"},"fingerprint":{"sha1":"89:82:7B:71:7C:2C:D8:62:C2:8F:3E:F9:76:0C:8B:29:7D:68:59:20","sha256":"C0:00:52:93:BF:15:D7:B9:32:32:A5:60:99:A4:6E:A4:AC:B1:57:6F:3F:46:CD:1C:9E:CF:BF:7E:21:62:F9:76"}}},"request":{"raw":"GET /a/M2QzYjNlZWJkNWZkMGE4Nzk4ZTEyZGY3YzkzMjYyYjk/jpeg%2Cs%28w%3A480%2Ch%3A300%29/video/W9/W9zQWp/screen/6-Yv7.jpg HTTP/1.1\r\nHost: ic-nss.flixcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-fc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 65685\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: ic-0\r\ncache-control: public, max-age=1296000\r\nexpires: 1768907861\r\nx-rsic-cached: yes\r\nx-rsic-responder: ic-1\r\nstrict-transport-security: max-age=63072000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-77-nzt: EgwBuUwJAQH32FYGAAwBnJIhLgH3FgEAAA\r\nx-77-nzt-ray: 5637663579d1b59dc3f5616912cfe72b\r\nx-77-cache: HIT\r\nx-77-age: 415448\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65685,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 480x300, components 3","md5":"b51420e7ad93a8edd65d9a2953cb5e9b","sha1":"c51305e8b05bbd003f2e04492615c7ee42e759c0","sha256":"e3ae5741dbe21d5853288636468bb4ebef5096a3c974a3da60bb54a524bd3f82","sha512":"dccf43fee39af9c9956ecb11c158a2e5422d714d09ea1589df5bd185d4b0822b1b52d30ae951191c5ca96e2cefe099fc9682e9425bcda2c6472f4c9f6707a385","ssdeep":"1536:qQet23Wuja8TEXCglLUNnL0xd0aKaZ55/3:q3t23WujaBXx0nA/0aKaV","tlshash":"d05302645af25fc6f8b97075f8c01a11b68ebd0c5f8a605105cc337a9bdeec04c9d266","first_seen":"2026-01-10T06:47:19.645956Z","last_seen":"2026-01-11T14:33:37.157569Z","times_seen":7,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":45,"connect":10,"send":0,"wait":12,"receive":28,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tsyndicate.com/iframes2/fc768f97a2f74ef6a818a54f5de471ce.html?keywords=HCLIPS-PORN%20%3A%20HD%20XXX%20CLIPS%20VIDEO%20TUBE!\u0026extid=%7Bextid%7D\u0026adb=0\u0026clientjs=1\u0026w=1280\u0026h=1024\u0026tz=0","fqdn":"tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"136.243.90.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:25.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tsyndicate.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 21:10:04 GMT","end":"Tue, 10 Feb 2026 21:10:03 GMT"},"fingerprint":{"sha1":"BB:2C:CE:C9:92:0E:A9:18:50:BD:8C:7E:7D:B2:E6:CC:72:54:29:18","sha256":"3B:E3:8E:A4:C5:EC:08:3B:96:2B:B0:16:ED:56:3F:0A:CD:55:81:4A:8F:FC:97:83:57:FC:6E:F9:FD:F4:43:83"}}},"request":{"raw":"GET /iframes2/fc768f97a2f74ef6a818a54f5de471ce.html?keywords=HCLIPS-PORN%20%3A%20HD%20XXX%20CLIPS%20VIDEO%20TUBE!\u0026extid=%7Bextid%7D\u0026adb=0\u0026clientjs=1\u0026w=1280\u0026h=1024\u0026tz=0 HTTP/1.1\r\nHost: tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 06:46:25 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: https://hclips-porn.cfd\r\naccess-control-allow-methods: POST, GET, HEAD\r\naccess-control-allow-headers: Accept, X-Requested-With, X-Forwarded-For, X-Real-IP, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Legacy, Content-Type,Authorization, Nav-Ua-He-Mobile, Nav-Ua-He-Platform, Nav-Ua-He-Brands, Nav-Ua-He-Platformversion, Nav-Ua-He-Model, Nav-Ua-He-Architecture, Nav-Ua-He-Bitness, Nav-Ua-He-Fullversionlist, Nav-Ua-He-Uafullversion, Nav-Ua-He-Wow64\r\naccess-control-allow-credentials: true\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding, *\r\nset-cookie: cookie_user_id=a3478f5e-53f5-5f37-994f-8bde9a7ba683; expires=Fri, 10 Jul 2026 06:46:25 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None\nbfq=APeIECNCx5YaOWbIkGEDRxcWIsYU3BLjoYgyE2PcaBgjxowcOGp06aMg; expires=Sun, 11 Jan 2026 06:46:25 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, no-transform\r\nx-robots-tag: none, noindex, nofollow\r\nreport-to: { \"url\": \"https://pxl.tsyndicate.com/api/v1/heavy-ad/report\", \"max_age\": 86401 }\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\npermissions-policy: ch-ua-model=(self \"https://tsyndicate.com\"), ch-ua-platform-version=(self)\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"TrafficStars","description":"TrafficStars is a self-served ad network and ad exchange that operates mainly in adult-related verticals.","website":"https://trafficstars.com","common_platform_enumeration":"","icon":"TrafficStars.png","categories":["Advertising"]}],"data":{"size":11967,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (7152)","md5":"ad843eedda552e8d38ab12ad3a2577f8","sha1":"0ee36cdac495bf7a8b9afd106e031805cf5e9c8e","sha256":"4fd3eeb87af3ddee76e1aaa19789f395573b5feacee37f75d0a2fe39d85a4c78","sha512":"99cc9662001beabb2f87a01da39532fb90e17018f63c5e19b1814505c31c06cb64f2c04b958c3a568f4abf724cac86346da60acb8ffdcbe69dceed6d8e9a241b","ssdeep":"192:QRSKXILOKCtHf5/keTv0FP1CVUUoTdQpRRVUUoTlVUUoTsYVUUoTCqCU:kXbKCtHVLTsFP4KQHzisOCU","tlshash":"00324b2667834832604378e6dda9d398e19e86837901c16644cbbdb0e068bbdcb1bfc5","first_seen":"2026-01-10T06:47:19.719865Z","last_seen":"2026-01-10T06:47:19.719865Z","times_seen":1,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":82,"dns":1,"connect":28,"send":0,"wait":45,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"89ec4d544c.2f6dc696ee.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIxNTUxNDg1OTU4NzcxODExMTAwMCIsInRpbWV6b25lIjowLCJ2ZXIiOiIyLjQwLjIiLCJ0YWdfaWQiOjI4MTQzNywic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjoxLjA0LCJpc192MiI6MCwiaXNfdjJfZW1wdHkiOjB9","fqdn":"89ec4d544c.2f6dc696ee.com","domain":"2f6dc696ee.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:26.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89ec4d544c.2f6dc696ee.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 02:47:52 GMT","end":"Tue, 07 Apr 2026 02:47:51 GMT"},"fingerprint":{"sha1":"24:ED:A5:DE:7F:72:58:7E:AD:8F:78:1A:81:C2:52:19:CB:C3:2D:F9","sha256":"BE:07:AF:49:79:D5:9F:8E:FD:3B:B0:D9:4E:91:4F:20:06:DE:5C:C7:F6:DD:40:E6:D7:6B:EF:22:37:D9:AB:3F"}}},"request":{"raw":"GET /in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIxNTUxNDg1OTU4NzcxODExMTAwMCIsInRpbWV6b25lIjowLCJ2ZXIiOiIyLjQwLjIiLCJ0YWdfaWQiOjI4MTQzNywic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjoxLjA0LCJpc192MiI6MCwiaXNfdjJfZW1wdHkiOjB9 HTTP/1.1\r\nHost: 89ec4d544c.2f6dc696ee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:26 GMT\r\ncontent-length: 0\r\nserver: nginx/1.18.0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nx-cdn-host-id: AH1747\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":53,"connect":38,"send":0,"wait":34,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"89ec4d544c.2f6dc696ee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"173.194.221.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:27.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:57:32 GMT","end":"Wed, 25 Feb 2026 15:57:31 GMT"},"fingerprint":{"sha1":"F5:06:14:04:6B:D5:32:C9:BA:A9:B4:13:02:C3:F0:62:2A:24:BC:90","sha256":"D8:34:74:17:27:E1:E2:E3:A9:BB:5D:58:F5:DB:40:51:4E:6C:34:33:BF:88:83:62:03:97:DC:4B:FB:67:B5:45"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:gHuGkLpe4aK_G9IaYZu0GX5QAQx6oA:kNcuM2uY4YtYdhem; Expires=Mon, 10-Jan-2028 06:46:27 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 10 Jan 2026 06:46:27 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S-450980237:1768027587700448\u0026ifkv=AXbMIuADNxaFAcWtat8gzkidNI3USC_edBhslE1DBi5e90XGiSbPMj5PsUgcb3-kwwwhosV2kGCgng\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-SGxJa3iEI4yxb8WCKEDKHw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":95,"dns":0,"connect":16,"send":0,"wait":22,"receive":0,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ic-nss.flixcdn.com/a/Mzk0NDQ4NTIwZGVhMjY3ZTQ5ZjljNDQxYmJjODU4Y2E/jpeg%2Cs%28w%3A480%2Ch%3A300%29/video/lr/lrIu1T/screen/4-m5u.jpg","fqdn":"ic-nss.flixcdn.com","domain":"flixcdn.com","tld":"com"},"ip":{"addr":"185.76.9.5","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=tpZT2Wvf2_df9BAhCONE6OAxGRnrPPtZ69jjd1ix8uT89g5RkUZ7ZXXevlAflAxJkC5VxHxjBV87vsOxVIGGaIQ83PSus_2fkT6MwmnTb1ZytaQ_gUIDRUi","date":"2026-01-10T06:46:27.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1029385688.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Dec 2025 18:50:04 GMT","end":"Tue, 24 Mar 2026 18:50:03 GMT"},"fingerprint":{"sha1":"89:82:7B:71:7C:2C:D8:62:C2:8F:3E:F9:76:0C:8B:29:7D:68:59:20","sha256":"C0:00:52:93:BF:15:D7:B9:32:32:A5:60:99:A4:6E:A4:AC:B1:57:6F:3F:46:CD:1C:9E:CF:BF:7E:21:62:F9:76"}}},"request":{"raw":"GET /a/Mzk0NDQ4NTIwZGVhMjY3ZTQ5ZjljNDQxYmJjODU4Y2E/jpeg%2Cs%28w%3A480%2Ch%3A300%29/video/lr/lrIu1T/screen/4-m5u.jpg HTTP/1.1\r\nHost: ic-nss.flixcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-fc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24380\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: ic-0\r\ncache-control: public, max-age=1296000\r\nexpires: 1768711912\r\nx-rsic-cached: mem\r\nx-rsic-responder: ic-0\r\nstrict-transport-security: max-age=63072000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-77-nzt: EgwBuUwJAQH3OJwIAAwBisclzQH38LgAAA\r\nx-77-nzt-ray: 5637663579d1b59dc3f56169c669e12a\r\nx-77-cache: HIT\r\nx-77-age: 564280\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24380,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 480x300, components 3","md5":"e1df323c86c4efe54c13b4cd5c582da4","sha1":"7c756b5818035a376fe3e462ac866f4aa6dbc180","sha256":"4df4c0dff4aaa571a15f24e7670c35da148c907e010757b296d61dc4e0ff34f8","sha512":"84dee66767456fac5cecba23f7c6f46a0ca67adeb72aebefdf6f6f265a6813f87e793abbdde1c298794dc7d64a5662008e33243b30e69c7296d4d406d9bfdf38","ssdeep":"384:pQzzjisLM/RUjmV418Pcex0KqXPNMpfX+GxCgdMqW6nyYk0ytyw8rxRhgWDzW:Wf+/ujm9Pce0xMpfRQgdMde7k0ytgxRU","tlshash":"07b2d052fb2931c3ec518db026733ee3a3cb9932e641ddd6d2f9abe15e02a45681054e","first_seen":"2026-01-10T00:50:12.360244Z","last_seen":"2026-01-12T00:09:39.975614Z","times_seen":14,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":94,"dns":0,"connect":0,"send":0,"wait":25,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/018_queen-aunt.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/018_queen-aunt.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:23 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 30166\r\nlast-modified: Fri, 29 Aug 2025 06:35:50 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14a46-75d6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2YKfHohePdLKF6emE7E51%2F0wxASidflUTVdNmkg0nwxMNHvM6xcMHgZbu5jWoCbUsm9Kiy4eAR6JqYlSsn6ZZ4eApHTedLqXtUbIP0Pm8w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba378fda38783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30166,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"44ebcf7d5bf6ab16a0a34595e77af4e2","sha1":"6d9c6f3dbef8df1e8fb779a76f050a49986b651a","sha256":"d0cfb5c3527ef51fb5cddf777d53786f683a9aa588e252d58c841e08efddcdf6","sha512":"f2bcaebd5da265fd4183592b1613ffeb5edade6192b7ac4cbdcfca68702023b737fecbed72f06d08073b7eff4aa6ae9f4e9fdff93016d217021a1e602e6ce41a","ssdeep":"768:SBlG0fTj2MCqHLzdkQlc+sZccwmxmgR3u8A0DRtDMe:SB3f2WrxkynsZKmpFZA0n4e","tlshash":"cfd2e1edb169678c530c2cb99ca2383f7b8c5f1124263925ab48f6e3736d115afd2709","first_seen":"2025-10-31T12:17:26.974406Z","last_seen":"2026-01-10T09:02:32.853621Z","times_seen":7,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/033_facesitting-tribadic-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/033_facesitting-tribadic-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22151\r\nlast-modified: Fri, 29 Aug 2025 06:41:05 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b81-5687\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=42bV%2Fj4PeTFVqGzB8MT%2B2QP%2FHNd7412GNSGJMYmqMZT2xllMJ54o1HKLwHlo335k1wunRDYMDrHZ73Ur9vQYc%2FL1Tr664HVOXc29EyKtMw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba378fba2a783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22151,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"e01e4f7a4df7fd75ee9a16335fecf731","sha1":"21f2e9476f205781cdec5aa2687f3de5bd8b4c21","sha256":"a2a2f3132089c50f172fc09534aedde0d58c44c88e79e40fcd671c6b53b169b6","sha512":"638a6d15ef9a682e0055dbce8d347bfd20f8875085ffd2ccf1ff300e979a320b0745b5017d1e9d8a66fe43afaff0a03278791fd23c98cea43a076e84ae4c5a8b","ssdeep":"384:OBK52UHIF5jBo2hqKPTKzxiWgGcS3kAniVJOiV1uQJGuyX1HNoKjETlA:0S2UoDjnqKLKcWNUuc0imQvyX1HOKjEe","tlshash":"83a2e191b0037c99bc8a21fe5d992522814ee75e2bb85d093854efa8ec057031f7ca9c","first_seen":"2025-10-31T12:17:27.181264Z","last_seen":"2026-04-12T14:36:08.164553Z","times_seen":27,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":115,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/066_ewedghyuweuyhfdhhuehuheuw193.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/066_ewedghyuweuyhfdhhuehuheuw193.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16971\r\nlast-modified: Fri, 29 Aug 2025 06:41:51 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14baf-424b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AefA%2BNj3e18oo35bDFImLMX2R9Kd7w8ax0I%2B4lcL%2B%2BAw7Qzmqzksi8tsNWoXop%2B2Ct6H%2BqcQHK9t7OuMrSCCugPzFm%2FoxrpiPbNtDdAvXg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba378ffa50783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16971,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"6643ed88ba386a93ad1b67f41a45728e","sha1":"cd077b4b562ce666b159145650c163548143c0db","sha256":"8b25d17830646e658aaa731ee21601ce76fef99304c6a6f92fd5bff72d100f87","sha512":"3f1e151f0d5031e01dd5a93f6cfaae9e19e19611410e468f77c7036d5d36297c1fd50437e53363d086a6c2c52b011114641ca3fef9189af17387732b95cdf2e9","ssdeep":"384:e3erAAfUg9vmJm96n9ODJcmk2Z/CCoP77fNkWQq2aHaxEXV:adAdA+6n+JZqbPORaH0EXV","tlshash":"7a72cf08f31c91b2c76a633459d24af2774e5dcf7cab1748a49924e7f841087898b3bb","first_seen":"2025-10-31T12:17:26.868323Z","last_seen":"2026-04-12T14:36:08.144319Z","times_seen":27,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=1567158389\u0026w=300\u0026h=250\u0026id=1433671","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://rtbrenab.net/get/?go=1\u0026data=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","date":"2026-01-10T06:46:28.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.60ah.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 02:32:17 GMT","end":"Tue, 10 Feb 2026 02:32:16 GMT"},"fingerprint":{"sha1":"8C:90:19:3E:3B:52:BA:5A:83:BB:53:5A:21:83:80:EF:19:C2:0B:E0","sha256":"F6:E2:47:9C:35:03:88:26:95:E2:E4:39:DA:2E:E5:71:3B:6F:DB:51:DC:BF:1C:5A:C4:0F:A7:7F:B6:9C:95:E4"}}},"request":{"raw":"GET /b/banner_dev.html?source=1567158389\u0026w=300\u0026h=250\u0026id=1433671 HTTP/1.1\r\nHost: cdn.60ah.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:28 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: nginx/1.20.1\r\nlast-modified: Mon, 23 Jun 2025 15:49:26 GMT\r\netag: W/\"a2e-6383f28086d80\"\r\nx-request-id: deab4c727495abe8a9622d817de18c15\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jan 2026 06:46:28 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: DS5058\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2606,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (425)","md5":"28d590ec50222650e11913780176ae6f","sha1":"e1ede82b9406894cf75e62e5611969dd0d4e8010","sha256":"45130bde21b34abbccf398d7b4f8b9beabcc679f0d0cf9079883dcc34d84246b","sha512":"e0b71f741fbdda624e1fef6420f26316714671e37cb3ec775abc1a3531adf2d4c9a3250c0496d1c91c8c130224f8adf555f2c10795721e585e5dade74fcbeabf","ssdeep":"","tlshash":"5f5172e2c59204300616809e19ffb1cc7926213baa41c401ffddf121af9c7ab48768dc","first_seen":"2025-06-25T19:13:05.814782Z","last_seen":"2026-04-16T07:34:00.628528Z","times_seen":714,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/065_masochist-husbxxx-cleans.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/065_masochist-husbxxx-cleans.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21042\r\nlast-modified: Fri, 29 Aug 2025 06:41:48 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bac-5232\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Of8saDqfp8L4gkJCzDzIsCv%2FX4h0pG3%2BAGF1gWyAsCP5JZyY8IiTQdUNtU77HEI3oAjJeydjJmfyv2eqhc5jIdL0BpINIYxoTK02DVCDw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37900a5f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21042,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"6fe6e7e9f081a79c7283a4a4cbdae532","sha1":"83b1b67a3488b883f5b2f071e900ba68af847bcc","sha256":"1f840198d4a6800159c0a54720e2df9174501b866b3e5ef1bc6b2a0927571fa0","sha512":"ea84870625983cc933209edd60f77bcd491c8fd7d267b604f3f3c826e1a7148d46222fa82533a5fbdb85a246522fd1e2cdb93b71e13d96accc03e28eff4707cb","ssdeep":"384:7viHJoOfBi/jrkl633bOA5L1H43lK3s5u5N5kL6GMYacJC0l3mI5:biHyg8kl2OA5L4lEsk5NuGGUDI","tlshash":"1392e1a2525e3cb06d60b8e0e1d8a3ee3b28ff207b7267869d1d04d0f1b5671e779450","first_seen":"2025-10-31T12:17:26.93418Z","last_seen":"2026-04-12T14:36:08.23054Z","times_seen":26,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"na.nawpush.com/tags/281215?version_name=b\u0026domain=hclips-porn.cfd","fqdn":"na.nawpush.com","domain":"nawpush.com","tld":"com"},"ip":{"addr":"45.133.44.25","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:25.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"na.nawpush.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 02:32:21 GMT","end":"Mon, 16 Feb 2026 02:32:20 GMT"},"fingerprint":{"sha1":"2B:B2:C7:E4:0C:35:8B:EA:A3:45:09:54:58:1F:96:D4:28:92:9E:24","sha256":"5D:DA:64:89:43:2F:60:A7:F1:43:BE:04:58:13:73:0E:73:99:6E:4B:50:A4:E4:06:23:B2:73:B0:E0:22:86:AF"}}},"request":{"raw":"GET /tags/281215?version_name=b\u0026domain=hclips-porn.cfd HTTP/1.1\r\nHost: na.nawpush.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:25 GMT\r\ncontent-type: application/json\r\nserver: nginx/1.24.0\r\ncache-control: max-age=300, public\r\nx-cdn-host-id: DS5058\r\nx-proxy-cache: EXPIRED\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1556,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ca8a52554d636421a8ca61d91b9b0e0e","sha1":"032f4c8c34453accc63549391a8c277d07a27c1b","sha256":"f02b04a9ed526ee0328dc8806f37fe837dbd8378dd42b97f6846a841b3dbe496","sha512":"c21cb11ca603906ef5439366489d973fbee607af38f64b2f59d08932d29ef30733d8e5a105bf7fc5f14dd6f455c80014f93c61de647e75426a0349f495f4e669","ssdeep":"","tlshash":"a531a7a0d934d4b6d1f0474bb046778a943c21ab61c4791ef4bd88b849eed3b1b6211b","first_seen":"2025-11-13T14:11:00.507681Z","last_seen":"2026-04-12T14:48:43.669851Z","times_seen":36,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"na.nawpush.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-fc.com/creatives/universal/native/fonts/Roboto-Regular.woff2","fqdn":"cdn-fc.com","domain":"cdn-fc.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=it7_v9mINZsY2FHHRd8f7idZL-DxISKYUEWDNYzup2TzCEm0_qr7AdVAPKWiR3qPIzth_TWtgQ1ya3AKUJlgD5NNIe-7ua_9YB6L9C6SgJXZhEA_gUIDRUi","date":"2026-01-10T06:46:27.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 05:59:35 GMT","end":"Sun, 01 Mar 2026 06:57:06 GMT"},"fingerprint":{"sha1":"1B:6D:8E:48:22:E7:FC:C2:4F:06:18:95:F0:8E:39:C2:A6:C8:47:2C","sha256":"DD:CF:71:A7:71:DB:68:1A:18:D5:6C:B8:43:76:78:71:E2:E1:0D:30:1E:09:92:A8:A5:4D:14:57:D3:66:8C:E5"}}},"request":{"raw":"GET /creatives/universal/native/fonts/Roboto-Regular.woff2 HTTP/1.1\r\nHost: cdn-fc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=it7_v9mINZsY2FHHRd8f7idZL-DxISKYUEWDNYzup2TzCEm0_qr7AdVAPKWiR3qPIzth_TWtgQ1ya3AKUJlgD5NNIe-7ua_9YB6L9C6SgJXZhEA_gUIDRUi\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:27 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 64184\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 15 Dec 2025 17:20:27 GMT\r\netag: \"6940435b-fab8\"\r\ncache-control: public, max-age=3600, must-revalidate\r\naccept-ranges: bytes\r\nage: 2317\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xaEEikhIA0hoGFfwXUkNPjZhtASFF9c46M4GzSsq%2BEACLmsaCUo%2Fylv89%2FD7lvjw0Wm95qJOn78SOnU81xpU3KiJRfw7V%2Fgz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9bba37a43f660b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64184,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 64184, version 2.0","md5":"b2a6341ae7440130ec4b4b186aff8413","sha1":"a18bcf95ada923da31f176137b8add02b0ba60f3","sha256":"fdffd706005defc7e4f5e07cac7cc371c5bb0b0c895e5ec7c16c1ea0baa43f59","sha512":"244f8100af24f5a7f9e666494d0f6199ba91fb8942a433a58159f03932ccbd640ddd01f87af50e92817a78949c4242d0b8f342e7d5ecd35076e7f27b4ac8c48b","ssdeep":"1536:LUotCx25+W81Zq65IbUER7e5bLTAU+3zQh8dHT6L21:LU2Cx2UWYWbbiTAUozD8L21","tlshash":"5c5312d0530b4a2d712be238dcfe8965f20605620df60474ec9c7df9631b68992a6f77","first_seen":"2023-04-10T11:26:03Z","last_seen":"2026-04-16T18:41:19.900105Z","times_seen":1405,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cdn-fc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/070_yoshino.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/070_yoshino.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 36622\r\nlast-modified: Fri, 29 Aug 2025 06:41:58 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bb6-8f0e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D6j4PAPs61iyN%2F8AjAtW2iEpgpmqN20o0ftofdLFVgVYNLcxDwuzQUQmOz2TzQRJZyjbK6cDnmBbgpNT7J9km3YkSc3%2B0tbaaPs2cM28vw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37901a64783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36622,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"60cd141ac57926c9c7e4fd69859cfaaf","sha1":"d0f8f84d2ae295e77a05c70796f4f02cdffb8e38","sha256":"0b9e20db4228f5085f8fc5127671c3750e2c546fdbb74a668109aa54b97cb6ef","sha512":"a8814e51aa33f047db991637632f407457fec083c7be21f71cd92922c7d31e989a1a8b5c09083e4b506eaa0dc5b2285baae2b36bdecd8594cfe73ee56c0adb3c","ssdeep":"768:8KpuKgziOaZvuFSv48wGOeXjiHtCUeSP4XaeGrRmopCPnPSwyCUm83B:80gz+vuFSwrBEjiHtwSBeKTCACUlx","tlshash":"e3f2f1c4b40c463abb7472aee30366b2d50474dc5068db66d2a8e3dfcf33b9548d5911","first_seen":"2025-10-19T03:23:59.311115Z","last_seen":"2026-04-12T14:36:08.124009Z","times_seen":29,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/089_leads.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/089_leads.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19977\r\nlast-modified: Fri, 29 Aug 2025 06:42:30 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bd6-4e09\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t4TW9elNrzyAn6Lm%2FGvwJdLqVgvtDsf2HzMEhzZjMuo4SZ3gieCDSlLymHLqSG03DGRd%2BBXtdMbCkuMlsJfRTSEh6yqi8JXkqZ5S1aYU%2Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37902a6e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19977,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"241f91f24dcfc88d49d8f5a2d0130278","sha1":"c1ee3322725fc466a697e11a7b46bad5890fd86f","sha256":"3b56e4f562639660bf4d4c8a8a47eafb6483aa18a96695e441f85203651f9d36","sha512":"099aab75d128bdae401855b6ecad98e30a284be356d8950d9c84ad862639257dd6c7ddb0db795c1274ecb983fd83e18012827b6f4224c579d350b9134b2c52a0","ssdeep":"384:WS62evvaRcV14Vi4xatXwF5h3O9bDo2DK2xyE5ambJ13Krt0noG4+:WSMlV1GiS8AFiREBSamdtKrt0j4+","tlshash":"a292c0c5c12e12f4ea5925f421e31782bb5af5966a739937bc4342cc0cc58365ee8c49","first_seen":"2025-10-19T02:15:18.077126Z","last_seen":"2026-04-12T14:36:08.143562Z","times_seen":30,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/090_hclips-arisa.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/090_hclips-arisa.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 36539\r\nlast-modified: Fri, 29 Aug 2025 06:42:32 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bd8-8ebb\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IYPJ%2Fkyq4RUaTXG%2FDscd9PudJHR3WsCGL0NDyeocxKDjI9%2Bo2g39wCD0gHEOdY9Z%2FuQImbAcmYZ3D2%2BDKisnJcUXfX%2FaabiBbstE9mCvcw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37902a74783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36539,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"cbc66c7d2997340a582188be7a92b1e1","sha1":"ebbfcbde4178c1f428c6155750473e750e3a71e3","sha256":"5579ca41d1e45d4203544ee428a922dde7cced1b5735866bbf057ac7884a2a0c","sha512":"7a3cd2199da34592d4bc25600f46d66638c85a41bdd27f556be2ef2ae5dc39bff4aab0ba933223434eb33bf437e02a4ad18f5caf4d26a6dc88ef49a3874399da","ssdeep":"768:2oFX7cNYt6+mdgDnZO32iCQ5zpZ5l4+zL9UYY99gK+iIf9YvOG:2o5G+JmdgDn3i75lZXdNHc9g7sZ","tlshash":"12f2f14e7258214c7c458b2c1efae9292322df38e1ca5e0d406ce5a85f14ab3afed517","first_seen":"2025-10-19T02:15:14.213383Z","last_seen":"2026-04-12T14:36:08.136067Z","times_seen":30,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/113_tuweuhuewuuhiwiuuiuieuwui-sdh78-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/113_tuweuhuewuuhiwiuuiuieuwui-sdh78-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 30451\r\nlast-modified: Fri, 29 Aug 2025 06:43:02 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bf6-76f3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mDdxSc46mPwqnPbGAaSdiGW7ZvjqnktSql6HB68eFl0mQTAq2G3nobg%2FBULe0DyZEWD5Oppx0HTSQSXR8Du9H%2FcjlLzSm6RPzpBAW8%2BX2Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37904a8c783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30451,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"80a4ea896669dc659f3ce695a4ec8143","sha1":"b509e4ec0fd978e40b100c030b2a8b95e6befddc","sha256":"afe34075ccbf404b6ddc3e7bf7fb483c9cd954f9d8496ec83fe0e335169bb116","sha512":"12b1f9331619811311521b0b40c886c305d79a75a82eebf831cf41116a771d34e2d98c53e2e921c93ceea0eba466590c421cfbf58c33c8d4cfa80da2a404299b","ssdeep":"768:WcP0jx23FqvikAicKa+ffHh4/b9n5qfWvXI5CNca0VTxazHUo6aA:Wo0s1+iga+fPh4/b9nJvm0cxVNUUo6aA","tlshash":"eed2f141e41e729aa95ac07393f99cf41fe31d824255598cd8e5e3c0d9a18fede80fe0","first_seen":"2025-10-05T06:06:00.185682Z","last_seen":"2026-04-12T14:36:08.186526Z","times_seen":32,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2830fe954a.d88b2835c6.com/in/show/?tag_ab=b\u0026site_id=311433588\u0026adblock=0\u0026testab=0\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=mq\u0026pr=\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=0\u0026conditions=dch_ip,tz_offset,all\u0026ssp=3964\u0026page=https%3A%2F%2Fhclips-porn.cfd%2F\u0026refdom=hclips-porn.cfd\u0026auction_time=1768027587\u0026subid=485853577\u0026sid=3055912473\u0026tcid=0\u0026ver=8.244.2\u0026ver_c=\u0026spot_id=1433588\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2026-01-10\u0026iabcat=IAB25-3\u0026user_fp=3062215412326782139\u0026score=85.55848099375856\u0026kubik_score=94.245\u0026kaminari_bot_ip=1\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D485853577%26spot_id%3D1433588%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fhclips-porn.cfd%252F%26idzone%3D0%26sid%3D1886\u0026is_cpm=0\u0026resp_type=\u0026crid=250983\u0026crtid=b07913698735f92176d64bb572dd6697\u0026url=https%3A%2F%2Fpointcontinentrtb.com%2Fv1%2Ftrack%2Fclick%3Fdata%3DeyJhbGciOiJIUzI1NiJ9.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.TMhs1TdCyiu_lfmVZCFt4tPN-iZnl1O254RFWkN2oi0%26sp%3D1.1000000000000001e-05%26skin_id%3D52\u0026icons=b3G_nebbiMgbngwFJ1dZmDbfaYCfaiO6wPdCOjh7Y6xVAjYmupSHAoZbx4g0vwhQK-XktTsBJ0hZ-0bAbTsWS6zRyY0mJVHo1EFPgDm0ZAmT8gA2Xijbbf6N5HLStncKZDdn6hG6BwLYjyfjFktpToMxZa1_FBHgGfRzo_NYCqBWvlFAe9WoP_KkixP7RVwcW-GowTXH3u9-WnmxXO3JUqQ8NQfRFrLD6Z9Kr6Vu0ENp0O9uDVrGTXoVlgxbSoh7YF6QrRwyBjeKFoKSwakZc14SN53of-fC_4Sc6eMOL5AUnQj4-rkwsykdkxYN94RRFiAyU5fwZvtEvDUa7mlIhjKo0EUmXTb_mGcRX-cVLVVIG-3SzddELDzrw9av-rQ6aqiKuuVIXCXB9VRjJHe-fMS1BQzuBaTIiGcu0WGrQNJaead18qABivtBRkta1ZX2mYBEcg81CsQYQXaz5zFsCXP31GJY9Fv3BkhbXSeCCdBrS2m_8WMwYazMYM1Pb28XxUNkVpjwPrySyM5UVrHd7vwXM0i9ekq2AC65qzr4riCjkdLG5AaTuCVhtf6TJEuPkkkpoTmbvHCsZ6XUyweebbQG58U5N3KENwckI8Sxmcux1NlpbGtL3eOBokvkZ30RnASlKXUv4_oacyb61lIwEN8DTX9sUG74IiUk_2H4RfJ58xqsvhHQRgNo6ZdtxfoYOUS090cyja1_O4WgRT4rKLmLHBS8gVfshE8j2_-UkCN_y5YjESgGE-NnlEEgTyklEjzv8l27svSsktr-hxawgXknWxmD0tZ7GhNeEZbZDnL2_HjokfWvR95r8sGY2YKxW_2JteCXwjobEX1I8g-YuO_CVMarFxClOlw-rnbkPu4vnyn4c6Jax77CgIWRwynudTrnWK3Y-NprRofGCYCsXdFpiUN2P6PrQ9X3CizvhF8uqlxyxqfJJONawWSydTMaw4mG49J5ye-ZxsJlLJKBVgU9HY_htrBtBR-jB8H7vEozeVkHGBa_EAW_9Ol5mpQVs2K497xkAV-GNiRsiVjhvxbza1ee7QUaI4U4QTQokQ9YTVU_vj9MQOykwK5_Mv9OmMS0hP1jMUEZGeVWau8uM14bq8IRroiBLVnlhVOMPjte-q6_ZkYtrthMgNrA8TffNeA0dpK_rozGtwPfwOuMu7ZdKpRanujRNBl4rYsRHe4xH6uCGxaMr4vji6BbdR30GVBPZsJFuJcI5PNDOap1duOs5MqtwLpSTP3VXM8uaxWT_8g2XCv8hN__LxXAFsq7eJAbMHZ4oFe0C0f1nbBtRfO1lacEB5_M8OKosiawqFMHgky7iChe7WaEuywcvk6rs8mlsyXljpdxOMXWbI7icB__UAzNNuIO7btqkzJH4CBnxRWIFO__Bk-fBed8svQTWXkBifgQPEUzTE-QT9VKxksI6mDCPDjHCiG6CkaWMF9LEtaW1lJBfxE1giFxmYDwlKQZVSCFUYPsDpk9gDxxYDIxy5RNfMq82ktnvjPzUIgm0cy72zNaDQrBTGU54IOneJpE_mytjXvdaxNkiTPJGqpkS_f3RLeV2jbvS3K7vTH1_THeNWfD2jhGYYHS2yWmrdI6T49r87ofbgk3ubrvL043nIHmIhDrsokADbyxuQfhVBwAMsdYr-Xi01k08FV4flw2uSzreKuC4mI5Hv2BTgsCqRnqSwfOAyr0R1hPZHf_U8B36RFbxBwntmki92lMWyfyJxSxitS9cUBIfY0ZUAUjOcwr7izwB_PZHZKLxB1_S5lGWF8r_jIf0OFJym2SKRZcsyUretEk676VPLw0vkvNA0TI6HjCWx6GZWcDUaUItKPjM3YR5Q\u0026ext_cid=93319\u0026px_id=311433588\u0026min_cpm=0.06211628826982938\u0026out_id=0\u0026campaign_type=mq\u0026aid=3296\u0026cid=17911\u0026uniq=e38eb155754d1729394e4d42a3653e0fdbb1973b3f3fd30bf04619b4d205c822\u0026mid=4922339818344730175\u0026skin_id=52\u0026vertical_id=19\u0026skin_test=0\u0026from_cache=0\u0026ecpm=0.0007675206218094079\u0026cpm=0.0008044446195673589\u0026verify_hash=634677eba0b34cc8504c60ab2b0ba9ed\u0026verify_hash_v2=fd76dfe0a607d50c916929773ab026808b69ce69abfd70b566bb03c7a68de6cc\u0026is_native=1\u0026real_bid=1.049510014057164e-05\u0026original_bid_usd=0.000011000000000000001\u0026original_bid=1.1000000000000001e-05\u0026show_type=0\u0026exp=180\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=19,98,70,4,101\u0026need_redirect_show=0\u0026applied_features=coef_095,main-skins-settings\u0026show_count=1\u0026expiration_timestamp=1768113987\u0026image_url=https%3A%2F%2Fassets.ahmybid.net%2F3e979976-f148-48ec-80a2-a5a91cf65b60.jpg\u0026site=native-push-adult\u0026price=0.000011000000000000001\u0026hostname=auc-inpage-hz-12-b\u0026auc_type=1\u0026pop_type=1\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=\u0026pop_cpc=0.000011000000000000001\u0026ext_campaign_id_str=93319\u0026is_webview=0\u0026client_price=0.000010495100140571639\u0026direct_client_price=0\u0026priority=0\u0026client_payment_model=cpc\u0026is_in_app=0\u0026auc_domain_type=hash\u0026script_type=general\u0026tma_wallet_balance=0\u0026processed_keywords=HD%2CAdult\u0026is_iframe=0\u0026traffic_category=adult\u0026iframe_click=0\u0026estimated_ctr=0.07313132905157807\u0026social_network=\u0026publisher_id=116783\u0026advanced_pub_id=31116783\u0026user_click_counter=1\u0026lv_id=0\u0026service_spot_id=0\u0026mediation_ecpm=0\u0026mediation_type=no_mediation\u0026entry_source=direct\u0026is_second_price=0\u0026payment_model=cpc\u0026final_source_id=0\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=iosNotification-view-m_m-body\u0026cpa=52a6efd0-ea87-4b97-9be3-b2ffa7a610ca\u0026prev_step_diff=1117\u0026st=0.04","fqdn":"2830fe954a.d88b2835c6.com","domain":"d88b2835c6.com","tld":"com"},"ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:28.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d88b2835c6.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 14:04:20 GMT","end":"Mon, 06 Apr 2026 14:04:19 GMT"},"fingerprint":{"sha1":"19:7E:14:5C:52:F5:58:1B:92:F8:BC:EE:8A:81:46:3B:40:CF:48:B7","sha256":"21:D0:B6:E8:BD:CA:35:15:D3:F6:42:8D:1F:1A:A9:4A:6C:4F:0E:49:FC:70:1C:E2:2B:58:63:F0:FA:AE:09:71"}}},"request":{"raw":"GET /in/show/?tag_ab=b\u0026site_id=311433588\u0026adblock=0\u0026testab=0\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=mq\u0026pr=\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=0\u0026conditions=dch_ip,tz_offset,all\u0026ssp=3964\u0026page=https%3A%2F%2Fhclips-porn.cfd%2F\u0026refdom=hclips-porn.cfd\u0026auction_time=1768027587\u0026subid=485853577\u0026sid=3055912473\u0026tcid=0\u0026ver=8.244.2\u0026ver_c=\u0026spot_id=1433588\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2026-01-10\u0026iabcat=IAB25-3\u0026user_fp=3062215412326782139\u0026score=85.55848099375856\u0026kubik_score=94.245\u0026kaminari_bot_ip=1\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D485853577%26spot_id%3D1433588%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fhclips-porn.cfd%252F%26idzone%3D0%26sid%3D1886\u0026is_cpm=0\u0026resp_type=\u0026crid=250983\u0026crtid=b07913698735f92176d64bb572dd6697\u0026url=https%3A%2F%2Fpointcontinentrtb.com%2Fv1%2Ftrack%2Fclick%3Fdata%3DeyJhbGciOiJIUzI1NiJ9.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.TMhs1TdCyiu_lfmVZCFt4tPN-iZnl1O254RFWkN2oi0%26sp%3D1.1000000000000001e-05%26skin_id%3D52\u0026icons=b3G_nebbiMgbngwFJ1dZmDbfaYCfaiO6wPdCOjh7Y6xVAjYmupSHAoZbx4g0vwhQK-XktTsBJ0hZ-0bAbTsWS6zRyY0mJVHo1EFPgDm0ZAmT8gA2Xijbbf6N5HLStncKZDdn6hG6BwLYjyfjFktpToMxZa1_FBHgGfRzo_NYCqBWvlFAe9WoP_KkixP7RVwcW-GowTXH3u9-WnmxXO3JUqQ8NQfRFrLD6Z9Kr6Vu0ENp0O9uDVrGTXoVlgxbSoh7YF6QrRwyBjeKFoKSwakZc14SN53of-fC_4Sc6eMOL5AUnQj4-rkwsykdkxYN94RRFiAyU5fwZvtEvDUa7mlIhjKo0EUmXTb_mGcRX-cVLVVIG-3SzddELDzrw9av-rQ6aqiKuuVIXCXB9VRjJHe-fMS1BQzuBaTIiGcu0WGrQNJaead18qABivtBRkta1ZX2mYBEcg81CsQYQXaz5zFsCXP31GJY9Fv3BkhbXSeCCdBrS2m_8WMwYazMYM1Pb28XxUNkVpjwPrySyM5UVrHd7vwXM0i9ekq2AC65qzr4riCjkdLG5AaTuCVhtf6TJEuPkkkpoTmbvHCsZ6XUyweebbQG58U5N3KENwckI8Sxmcux1NlpbGtL3eOBokvkZ30RnASlKXUv4_oacyb61lIwEN8DTX9sUG74IiUk_2H4RfJ58xqsvhHQRgNo6ZdtxfoYOUS090cyja1_O4WgRT4rKLmLHBS8gVfshE8j2_-UkCN_y5YjESgGE-NnlEEgTyklEjzv8l27svSsktr-hxawgXknWxmD0tZ7GhNeEZbZDnL2_HjokfWvR95r8sGY2YKxW_2JteCXwjobEX1I8g-YuO_CVMarFxClOlw-rnbkPu4vnyn4c6Jax77CgIWRwynudTrnWK3Y-NprRofGCYCsXdFpiUN2P6PrQ9X3CizvhF8uqlxyxqfJJONawWSydTMaw4mG49J5ye-ZxsJlLJKBVgU9HY_htrBtBR-jB8H7vEozeVkHGBa_EAW_9Ol5mpQVs2K497xkAV-GNiRsiVjhvxbza1ee7QUaI4U4QTQokQ9YTVU_vj9MQOykwK5_Mv9OmMS0hP1jMUEZGeVWau8uM14bq8IRroiBLVnlhVOMPjte-q6_ZkYtrthMgNrA8TffNeA0dpK_rozGtwPfwOuMu7ZdKpRanujRNBl4rYsRHe4xH6uCGxaMr4vji6BbdR30GVBPZsJFuJcI5PNDOap1duOs5MqtwLpSTP3VXM8uaxWT_8g2XCv8hN__LxXAFsq7eJAbMHZ4oFe0C0f1nbBtRfO1lacEB5_M8OKosiawqFMHgky7iChe7WaEuywcvk6rs8mlsyXljpdxOMXWbI7icB__UAzNNuIO7btqkzJH4CBnxRWIFO__Bk-fBed8svQTWXkBifgQPEUzTE-QT9VKxksI6mDCPDjHCiG6CkaWMF9LEtaW1lJBfxE1giFxmYDwlKQZVSCFUYPsDpk9gDxxYDIxy5RNfMq82ktnvjPzUIgm0cy72zNaDQrBTGU54IOneJpE_mytjXvdaxNkiTPJGqpkS_f3RLeV2jbvS3K7vTH1_THeNWfD2jhGYYHS2yWmrdI6T49r87ofbgk3ubrvL043nIHmIhDrsokADbyxuQfhVBwAMsdYr-Xi01k08FV4flw2uSzreKuC4mI5Hv2BTgsCqRnqSwfOAyr0R1hPZHf_U8B36RFbxBwntmki92lMWyfyJxSxitS9cUBIfY0ZUAUjOcwr7izwB_PZHZKLxB1_S5lGWF8r_jIf0OFJym2SKRZcsyUretEk676VPLw0vkvNA0TI6HjCWx6GZWcDUaUItKPjM3YR5Q\u0026ext_cid=93319\u0026px_id=311433588\u0026min_cpm=0.06211628826982938\u0026out_id=0\u0026campaign_type=mq\u0026aid=3296\u0026cid=17911\u0026uniq=e38eb155754d1729394e4d42a3653e0fdbb1973b3f3fd30bf04619b4d205c822\u0026mid=4922339818344730175\u0026skin_id=52\u0026vertical_id=19\u0026skin_test=0\u0026from_cache=0\u0026ecpm=0.0007675206218094079\u0026cpm=0.0008044446195673589\u0026verify_hash=634677eba0b34cc8504c60ab2b0ba9ed\u0026verify_hash_v2=fd76dfe0a607d50c916929773ab026808b69ce69abfd70b566bb03c7a68de6cc\u0026is_native=1\u0026real_bid=1.049510014057164e-05\u0026original_bid_usd=0.000011000000000000001\u0026original_bid=1.1000000000000001e-05\u0026show_type=0\u0026exp=180\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=19,98,70,4,101\u0026need_redirect_show=0\u0026applied_features=coef_095,main-skins-settings\u0026show_count=1\u0026expiration_timestamp=1768113987\u0026image_url=https%3A%2F%2Fassets.ahmybid.net%2F3e979976-f148-48ec-80a2-a5a91cf65b60.jpg\u0026site=native-push-adult\u0026price=0.000011000000000000001\u0026hostname=auc-inpage-hz-12-b\u0026auc_type=1\u0026pop_type=1\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=\u0026pop_cpc=0.000011000000000000001\u0026ext_campaign_id_str=93319\u0026is_webview=0\u0026client_price=0.000010495100140571639\u0026direct_client_price=0\u0026priority=0\u0026client_payment_model=cpc\u0026is_in_app=0\u0026auc_domain_type=hash\u0026script_type=general\u0026tma_wallet_balance=0\u0026processed_keywords=HD%2CAdult\u0026is_iframe=0\u0026traffic_category=adult\u0026iframe_click=0\u0026estimated_ctr=0.07313132905157807\u0026social_network=\u0026publisher_id=116783\u0026advanced_pub_id=31116783\u0026user_click_counter=1\u0026lv_id=0\u0026service_spot_id=0\u0026mediation_ecpm=0\u0026mediation_type=no_mediation\u0026entry_source=direct\u0026is_second_price=0\u0026payment_model=cpc\u0026final_source_id=0\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=iosNotification-view-m_m-body\u0026cpa=52a6efd0-ea87-4b97-9be3-b2ffa7a610ca\u0026prev_step_diff=1117\u0026st=0.04 HTTP/1.1\r\nHost: 2830fe954a.d88b2835c6.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Sat, 10 Jan 2026 06:46:28 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"2830fe954a.d88b2835c6.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/056_inspiriting-adjacent-to.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/056_inspiriting-adjacent-to.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22460\r\nlast-modified: Fri, 29 Aug 2025 06:41:33 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b9d-57bc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WuI2V%2F%2FLBArvNprBfkxeuU1AbaatI8m7M55xUINhZZrX6LB9h0Uhrco6TijldnTtqoLbBzj29m479Ku25Z4KhBhgLyTx4jWsRjllHsN%2FsQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37900a59783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22460,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"cafa7852d53a43315f66cc470a312480","sha1":"ac9a8c17fb0896f0a9d99e2d8e019258d4ad2e2c","sha256":"e96242449eb814240f60f868dc8bc0c6e110515f48a65d395d426ba402159a06","sha512":"414fc589d9c1c555e0f7fdfd7f93a9892e288b2b4ca2306cbd57b21e6b4cc9289a9cf74119430ebd1cc7cb1e03854d14958a9c6c95febb3d5505aaf91e91f5d1","ssdeep":"384:75KMdaSkUyQQMa0OoI0Q7I7ZyJWB5YotQzeoO/jL+Z8msdprfIP3V9:75xPkVxMTA05PtzoO7LSSw/V9","tlshash":"94a2e0e08335b381f87a3ab095c28588c79cba399d7744edfac119c49f68f4dd5a2834","first_seen":"2025-10-31T12:17:27.194609Z","last_seen":"2026-04-12T14:36:08.199369Z","times_seen":22,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":133,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/084.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/084.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 31865\r\nlast-modified: Fri, 29 Aug 2025 06:42:22 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bce-7c79\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1ierDH6NU4N%2FMf%2FLBu2b3nr8ccAg3EfDDrjyssKD705KcP9Urs1YoLd5BWR2HXWZybrXxAiPFAxpERj74qN3dJglTR6dTBGX%2BbrgQM7LeQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37902a73783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31865,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 640x639, segment length 16, baseline, precision 8, 400x300, components 3","md5":"fc165637c25dfe7fdf313df1c6dba84b","sha1":"3b368677eb7af98a36103e99a595788c9bbbdbb2","sha256":"788a8924790c2b90a71873f46c2dc9d750ddbea49d29d18eaddcf70b6d964598","sha512":"104ab3e2e838bdcb6ec00c51e1c85249dfe70c4f6a5c0da5493823a2e9ad5e985b2ec3761f38c45a6c70f2baf809e10446891ba6e8c8346795830f80ee69af08","ssdeep":"768:d3yTWacDAWtcLZtxoS/bTaeu38X8RHYerNs1IM2WAIM:ATWtVtcLZtxo6XaXu8RHYerNsIJ","tlshash":"e5e201b831fa38910578f159281a2e0fd38ebcae78bbc357b81811cdf021d3885e5567","first_seen":"2025-10-19T02:15:18.731501Z","last_seen":"2026-04-12T14:36:08.191274Z","times_seen":30,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/105_milf-dazzles-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/105_milf-dazzles-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21843\r\nlast-modified: Fri, 29 Aug 2025 06:42:54 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bee-5553\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qOSnyjnfeIQF7byLw80SG9dlw3ZWXJgG3dneedXh%2BE3qvKn3v%2BYfzuJ9Bk3DfKh3QFMWs1Qpnga7KJt6YWx7Afs5j%2Bb%2Bg7CGZ8ipQ8z4Cw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37902a7c783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21843,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"1882e95a71e5e97905a40682f21a9993","sha1":"b581daa6ec164cc5594cba71bc8f00ba2d9865a8","sha256":"29c84d293869ede26069a288cf8e508a3b2a99acfdde8eacfc485e10e9b58dc4","sha512":"95a8d01297a9300a865fefacf8c68bdb63f9ddc6c480c3af3c1787a5d10e5ebc085ce2deb9ffdc0790b6065d06bbb8469274859eb59dec03f81c21da6b038563","ssdeep":"384:BKKzs5/KHcS59LKEYbxVPqahVLRfD4gULLGnQJjaIzycxqDVZJ8hyR3cGz:BK1/Ind4xhB31D4pGQJj4c2LJ8hyR3cM","tlshash":"1fa2d0504354324afc68a2f38c7a7fe46489ba40874a37bce4d660c921cf7f7d579989","first_seen":"2025-10-05T21:57:54.505687Z","last_seen":"2026-04-12T14:36:08.291229Z","times_seen":31,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpadmngr.com/static/adManager.js","fqdn":"js.wpadmngr.com","domain":"wpadmngr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.wpadmngr.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 05:32:34 GMT","end":"Tue, 31 Mar 2026 05:32:33 GMT"},"fingerprint":{"sha1":"50:AC:07:EC:79:B5:32:ED:7F:C5:56:C7:D3:5B:2F:F0:0D:A1:DB:81","sha256":"04:83:11:68:E8:6D:EA:03:69:80:2F:F0:AF:3E:A6:1D:46:55:C1:87:6E:C7:D9:C1:48:93:67:CF:0E:20:0B:BA"}}},"request":{"raw":"GET /static/adManager.js HTTP/1.1\r\nHost: js.wpadmngr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Wed, 24 Dec 2025 08:35:28 GMT\r\netag: W/\"694ba5d0-24115\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 10 Jan 2026 06:51:24 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: DS8138\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":147733,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bf20c44981795047ce2c610a2100a35a","sha1":"24c225c700d3f4208417651f6779de9758cd90a1","sha256":"0ec0d01651f974e70dc3c7d4cc50599dbd3a818863b7011ef052c3a0641dc161","sha512":"97612ed9de3cfb245c7e6a70420ca817b99f7b6db0dae1395fbc16c1eef8e4cb4ff993954fbddc4917563840baeef269a9edea324b06e0131fc2e2e833266e7a","ssdeep":"1536:O18MdnC5OPz8QP9r2RcZSgtK8sBggHhO12FoX50FtQySd8uj6DzKEVKf7lbe0etc:mFSGSgtqZXqd8uODG0K5y0etsz","tlshash":"c8e34adcb2d2b07407e75099d83f1206b73a1a16b80c9058f6a6e9c17878ddb5237f7a","first_seen":"2025-12-24T08:41:20.196676Z","last_seen":"2026-01-15T08:09:34.935655Z","times_seen":438,"resource_available":true,"data":null}},"time_used":457,"timings":{"blocked":-1,"dns":24,"connect":104,"send":0,"wait":213,"receive":0,"ssl":112},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"js.wpadmngr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bookmsg.com/creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790.webp","fqdn":"static.bookmsg.com","domain":"bookmsg.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:28.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.bookmsg.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Nov 2025 02:32:10 GMT","end":"Tue, 24 Feb 2026 02:32:09 GMT"},"fingerprint":{"sha1":"29:5C:89:52:D7:80:3C:68:75:40:DE:B6:BD:B5:5F:35:72:C7:1D:EF","sha256":"D8:38:DC:B0:0F:D6:AA:DF:02:2B:D2:7C:72:6A:97:38:42:7A:02:CE:89:F1:AE:0B:95:0B:DF:F4:4D:18:1E:DE"}}},"request":{"raw":"GET /creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790.webp HTTP/1.1\r\nHost: static.bookmsg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1066\r\nserver: nginx/1.24.0\r\nlast-modified: Fri, 31 May 2024 10:56:43 GMT\r\netag: \"6659aceb-42a\"\r\nexpires: Sun, 10 Jan 2027 06:46:28 GMT\r\ncache-control: max-age=31536000\r\nx-cdn-host-id: DS5058\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1066,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x240, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2a11e13b2bd67bb9a6cb347d7c73df13","sha1":"b85460a33f9b229f42c08a6a94ae433a4d5c32ab","sha256":"1d0d6b5176d6a48b3042a107f929bbfcefd4a057273ac488bbb7f7affd909b56","sha512":"059dd018bbf13a669d73f07442288f165bc6b305afb0df955773a0efb7454b8204095196231179fab4cb625e189c7c735fe41dc5b67fb8666d584214277186e6","ssdeep":"","tlshash":"7511b56be46c4dfede41f0408dd80256f8324a5c8aaeaf39058bc7da4f584143a6f01a","first_seen":"2024-02-20T18:30:33Z","last_seen":"2026-04-16T21:16:41.133145Z","times_seen":10955,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":124,"dns":25,"connect":19,"send":0,"wait":37,"receive":0,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/046_wicked-close.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/046_wicked-close.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18685\r\nlast-modified: Fri, 29 Aug 2025 06:41:21 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b91-48fd\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WhBKHnfz2dSw%2BEWI8YlXqMLi%2F6uF3eJcn684kdNbr%2Bw0og39Brp6YWsoHz064OwSqD9CmLFdIEz59HNrCiIWS6Y%2FkkjRTEDqsbCUOkhspQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba378fca2d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18685,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"be495d6eeda10c414b03911119ac2adf","sha1":"c5555d5a071b1fbe4ab75eff166a17f77bb541d9","sha256":"364711d502f8381d2b64046a7de44283ecefce01427764648b88419dcf7af1b0","sha512":"45a6a3c821f8a3a175673ed6692b2401bb99c02e70e2cbd893d3367cb6656b208e1ece6eefddfff717479895778f72affa9161b5d2533f918dd8463d522cfeb2","ssdeep":"384:m1kwxzzGBHQ/1wsaKkpeqam/3TCi1cPluz58oRp8jpo0:m/xXy7YqL/DCi6PluzNpUpt","tlshash":"1982d1b0281ae3e74774e71303abca20964705ec956acbd4d5b73cf7d1498901c9a3fa","first_seen":"2025-10-31T12:17:27.079698Z","last_seen":"2026-04-12T14:36:08.163988Z","times_seen":26,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/094_restore-persuade.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/094_restore-persuade.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 34742\r\nlast-modified: Fri, 29 Aug 2025 06:42:40 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14be0-87b6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3AznMl0XrtTHT%2BLVpwYoW8WjZ8fr0qxeYK5Q2SsjbPHgnLW56iLnvi7Mqt8F%2FHo9uiRbOwtYjoWDNxL9noJhKJgJlySbhdv4QhH5ZOoN9w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37902a79783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34742,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"32698882c3aee36ebce40b5c2c9b42cd","sha1":"644f2b1fa1143332ae253aa45cf47031a0901431","sha256":"3890a9b2dcfaea0e02d2a9306305c8e3408a21b372b950ac6e1146857a05cc64","sha512":"c6d26800b3c8210d8d1728f1a8577baadf43078b3aa1dd80fd06a1465661ec2e657f2f5b255975c61ffc3b996e7afd6a37a5837300de3cd652c4c204dea1b715","ssdeep":"768:IUejOx0jvhluZ1phVeuyx0+Xi1D9EXBxHjm6bFaljE5bx4e:IUe80jv67vyVHjm6b4ljE5bx4e","tlshash":"b6f2f138f0679a88bfc9efb3eb19b60f93142890db485345631421d7e99a67b1831ddc","first_seen":"2025-10-19T02:15:18.438504Z","last_seen":"2026-04-12T14:36:08.309925Z","times_seen":29,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/131_--throat.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/131_--throat.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18799\r\nlast-modified: Fri, 29 Aug 2025 06:43:25 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14c0d-496f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7JGx%2BpfTeTrC2ZahoW5UaZxS17XHs85Z5ipv3aiAGeYyDCDOvJqsA1TeIUJvLqQwY67JVueqXMt5UbxUfUXH7w2RAY1qr4MMPzX%2Fg7pdSg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37905a99783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18799,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"a8abcafe24651f3f12c1081a878829e5","sha1":"e3186a7e0f746a7746d659ccc2f0cd7781e4b08a","sha256":"7941fc96cf8c89535dc0cd571f6e2ec9fcfa1d523c6d7adb9f7d8d0876220b32","sha512":"aaa90be20b77735493941a980abd9f32e4886ef3e725ea26c71be82a9381871ed6ec9e095fcd6a90ac8a1866888e33b36d56af7cd26392366cd167f9971be399","ssdeep":"384:JS/U8P7Nzh3EnxHvx/xj/M4fMu7d1jdKM9mQClAkuqBQYPxBtSMS9j:8X7N93ExH5BM4fMurjddLjkR5SMq","tlshash":"0282d06b2708931ac34d7a3b9db6c24140e8873bd5e54e1e4f35c2d22ee97df041d15a","first_seen":"2025-10-05T06:05:59.91322Z","last_seen":"2026-04-12T14:48:43.713312Z","times_seen":33,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/includes/ls/ls9.woff2","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:25.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /includes/ls/ls9.woff2 HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/hp.css\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:25 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 96752\r\nlast-modified: Mon, 16 Jan 2023 16:57:44 GMT\r\npriority: u=4,i=?0\r\netag: \"63c58208-179f0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0BH1u%2FoTaCgZsRjchob6rIIncqmGfnmKoJsQ8r21mjhOc6J7dhPZaT%2BLSsYi7SGjzBvcWn62ttesDh8u%2B7pdAP0N5bDMOrgIGxhPWB3TDw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37968b47783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96752,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 96752, version 1.0","md5":"36fc297902c9a2e857858baa6ac25f2c","sha1":"89d9531c0c70a8751dff83c1917baab1f16a2071","sha256":"10a68e01209d939afa9318ee71601b0a6e10f025d4cd6d98a492d340b73941fb","sha512":"c5711d5027762fbc8d352dfdf64094958348b873671c891e8c5cf701a569c3bad672a380db7fad76692bf79dc9235b37f76b6f42f73698c9f85d2c7a23aa62fd","ssdeep":"1536:H8wZeXMjWqtJeAAHBX6ANib7HTYJv+Nr1ScHQjn6t/k5LBNCMAG35y:H8hXMjWeeVHtA7evKr1Xwelk51N4Gw","tlshash":"1f930257f0921be097c688990e189035cd39fd71397fe9f4e603ae4cc361927e52a4b6","first_seen":"2023-04-05T18:32:05Z","last_seen":"2026-04-16T17:45:42.516005Z","times_seen":11244,"resource_available":false,"data":null}},"time_used":482,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":239,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tsyndicate.com/iframes2/fc768f97a2f74ef6a818a54f5de471ce.html?keywords=HCLIPS-PORN%20%3A%20HD%20XXX%20CLIPS%20VIDEO%20TUBE!\u0026extid=%7Bextid%7D\u0026adb=0\u0026clientjs=1\u0026w=1280\u0026h=1024\u0026tz=0","fqdn":"tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"136.243.90.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:25.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tsyndicate.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 21:10:04 GMT","end":"Tue, 10 Feb 2026 21:10:03 GMT"},"fingerprint":{"sha1":"BB:2C:CE:C9:92:0E:A9:18:50:BD:8C:7E:7D:B2:E6:CC:72:54:29:18","sha256":"3B:E3:8E:A4:C5:EC:08:3B:96:2B:B0:16:ED:56:3F:0A:CD:55:81:4A:8F:FC:97:83:57:FC:6E:F9:FD:F4:43:83"}}},"request":{"raw":"GET /iframes2/fc768f97a2f74ef6a818a54f5de471ce.html?keywords=HCLIPS-PORN%20%3A%20HD%20XXX%20CLIPS%20VIDEO%20TUBE!\u0026extid=%7Bextid%7D\u0026adb=0\u0026clientjs=1\u0026w=1280\u0026h=1024\u0026tz=0 HTTP/1.1\r\nHost: tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 06:46:25 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: https://hclips-porn.cfd\r\naccess-control-allow-methods: POST, GET, HEAD\r\naccess-control-allow-headers: Accept, X-Requested-With, X-Forwarded-For, X-Real-IP, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Legacy, Content-Type,Authorization, Nav-Ua-He-Mobile, Nav-Ua-He-Platform, Nav-Ua-He-Brands, Nav-Ua-He-Platformversion, Nav-Ua-He-Model, Nav-Ua-He-Architecture, Nav-Ua-He-Bitness, Nav-Ua-He-Fullversionlist, Nav-Ua-He-Uafullversion, Nav-Ua-He-Wow64\r\naccess-control-allow-credentials: true\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding, *\r\nset-cookie: cookie_user_id=a3478f5e-53f5-5f37-994f-8bde9a7ba683; expires=Fri, 10 Jul 2026 06:46:25 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None\nbfq=APeIECNCx5YaOWbIkGEDRxcWIsYU3BLjoYgyE2PcaBgjxowcOGp06aMg; expires=Sun, 11 Jan 2026 06:46:25 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, no-transform\r\nx-robots-tag: none, noindex, nofollow\r\nreport-to: { \"url\": \"https://pxl.tsyndicate.com/api/v1/heavy-ad/report\", \"max_age\": 86401 }\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\npermissions-policy: ch-ua-model=(self \"https://tsyndicate.com\"), ch-ua-platform-version=(self)\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"TrafficStars","description":"TrafficStars is a self-served ad network and ad exchange that operates mainly in adult-related verticals.","website":"https://trafficstars.com","common_platform_enumeration":"","icon":"TrafficStars.png","categories":["Advertising"]}],"data":{"size":11955,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (7148)","md5":"77af3904fcc7fd9805e9f6bd599825c3","sha1":"2cdfc14c633ae68e075eacfa031b8b2bcab243a3","sha256":"01b354fdef296d4c74613d4142d1d31ce9d80b781b473f02673c985cfdb04582","sha512":"b9b74d15efdb06fe6c45c3688689c6414ef94dbd8cf0cc88aa3076bc90c7ef0d4f850a576d73bd7383a5bcb041460b8e8d143ed06f763f95b1df36c2600b3cb6","ssdeep":"192:QRSKXILOKCtHf5/keTv0FP1yJUTlhin/wQphJUTlhin/1JUTlhin/TkJUTlhin/w:kXbKCtHVLTsFPU+jm4Qf+jmd+jmQ+jmI","tlshash":"03326d66a541ac20909394f7fdb7e78c772ec906cc45c02482f5a43a4e87f974b6b7d8","first_seen":"2026-01-10T06:47:19.735531Z","last_seen":"2026-01-10T06:47:19.735531Z","times_seen":1,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":69,"dns":1,"connect":27,"send":0,"wait":45,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/078_-brashness.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/078_-brashness.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23435\r\nlast-modified: Fri, 29 Aug 2025 06:42:12 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bc4-5b8b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x6QGVhDsQYoUYBctbmOT6mRTXpKAhIwbo0agPBjIMYaR0gmbAoIcIuB52bEU1bv0GRoGh8j0OM%2BDg0e6O2pZUmKX0Zt%2B3S9r5q10LtGfPA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37901a63783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23435,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"ce51b4e9f83383ff5c58b06f88e3570c","sha1":"466a37a289937aa2b41935154b32f15511c414da","sha256":"4a6046e5fb6e1b398d33814db50a1271bf0f987dab442e9786f2b58f29935095","sha512":"869eeaa25d13cfead9d4a690a43d3f82437fbeab1320841a4e3030cd21a3caa8c31c71a8f3613333580d1627d9307a89842b4103f34155da6a4ea8c7f4a204de","ssdeep":"384:nitLTLtK12P0i6L3P06/J26U65WgtPU2X+RbKnvH3h4MMa1s/gtIuV00VnMVDXmK:nitvLtHzcf06/JBUsW28bR+v3h49aaUC","tlshash":"0bb2d0c7f0aa1a2dcdac5e7002c886646357548db8b30d7d868f70cb0a977a171e19ab","first_seen":"2025-10-19T02:15:18.127289Z","last_seen":"2026-04-12T14:36:08.229831Z","times_seen":30,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/includes/ls/lr4.woff2","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:25.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /includes/ls/lr4.woff2 HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/hp.css\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:25 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 12900\r\nlast-modified: Mon, 16 Jan 2023 16:57:44 GMT\r\npriority: u=4,i=?0\r\netag: \"63c58208-3264\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hVDdHolzboUXwpxz752dsFRCyEPV11gO60ryOZci7rPICXs%2BsO0tHfh1zlTNtr9RrRvJR6CnQ%2BIIVVYpEqd%2BAYGHJbHaRi0QDfcRN%2FWN6A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37968b46783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12900,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12900, version 1.0","md5":"88d9d9416c58bde56378dc4439e3a144","sha1":"bebed8d7033a4df35bebba69f1fc261a78a4ee22","sha256":"51ca2c00a3e30945e52227147fed9e296dde03af3c4d7589e8e95ca5740037db","sha512":"906884d6b687dd0b583872578a107fc7264e4198b3218545c01dd2185a397015b7226e0c96ae3dea6294abf7599052d3d271b6bb8461e972c5e49149f28b95f6","ssdeep":"384:cQ/ZCDaw2Q49jW8QIkW5SepdRZS3KUWSQoppk6CMRYtPP:l/BwzojW8lB5SenCKUtDC3tPP","tlshash":"fe42e1629963cb089c9d5b38b0ee5d401792703dfd9d5bec022bfe52cd4e09e4b1a076","first_seen":"2023-04-05T18:32:05Z","last_seen":"2026-04-16T17:45:42.395206Z","times_seen":4484,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtbrenab.net/banner/in/show/?mid=5446556763236253116\u0026pid=0\u0026site=1433671\u0026sc=\u0026usage_type=DCH\u0026subid=1567158389\u0026sid=0\u0026cid=19905\u0026price=0\u0026is_cpm=0\u0026cpm=0.0001\u0026ecpm=0.0001\u0026crid=\u0026crtid=\u0026tcid=0\u0026out_id=0\u0026ver=6.90.12\u0026ver_c=\u0026refdom=hclips-porn.cfd\u0026hostname=auc-banner-hz-14\u0026site_id=0\u0026spot_id=1433671\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026expiration_timestamp=0\u0026created_at=0000-00-00\u0026is_native=0\u0026ip=\u0026testab=0\u0026px_id=1433671\u0026adblock=0\u0026auction_host=\u0026mm=0\u0026yc=0\u0026render_type=\u0026campaign_type=\u0026uniq=\u0026exp=0\u0026resp_type=default\u0026min_cpm=0\u0026placement_type_id=269\u0026verify_hash=9865c93090f79b878a8045d57868f09f73b084f5e66f7c93ccb66aec876bc9da\u0026score=1\u0026kubik_score=0\u0026kaminari_bot_ip=1\u0026tag_ab=b\u0026v2=0\u0026ttl=0\u0026space_id=1496\u0026banner_width=300\u0026banner_height=250\u0026accel=0\u0026gyr=0\u0026iabcat=IAB25\u0026user_fp=3320490513170107167\u0026icon=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D1433671%26source%3D1567158389%26idzone%3D0%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D1433671%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DHCLIPS-PORN%252CHD%252CXXX%252CCLIPS%252CVIDEO%252CTUBE%21%2C%26spot_id%3D1433671%26p%3Dhttps%253A%252F%252Fhclips-porn.cfd%252F%26katds_labels%3D%26btype%3D0%26score%3D1%26bf%3D0%26dr%3Dhclips-porn.cfd\u0026pr=\u0026bid_crid=\u0026bid_cid=\u0026is_iframe=1\u0026ad_tags=HCLIPS-PORN%2CHD%2CXXX%2CCLIPS%2CVIDEO%2CTUBE!,\u0026stratagem=\u0026ssp=3758\u0026refresh=1\u0026priority=0\u0026base_bidfloor=0.0001\u0026label_ids=\u0026site_id64=1433671\u0026original_bid_usd=0.0001\u0026comeback=\u0026topics=\u0026original_domain=\u0026ectr=0.00022692127381672395\u0026client_price=0\u0026direct_client_price=0\u0026client_payment_model=\u0026ext_campaign_id=\u0026auction_time=1768027587\u0026account_id=2060\u0026url=https://preroll.hostave3.net/notifications/zeropixel.png\u0026stime=1768027587\u0026double_click_filter=false\u0026w=300\u0026h=250\u0026skin_id=8\u0026placement_id=1\u0026service_spot_id=0\u0026processed_keywords=HD,Adult\u0026user_keywords=\u0026segment_id=1440234390\u0026traffic_category=adult\u0026viewability=0.13565347383005488\u0026container=Skin%20300x250%20Banner\u0026mediation_ecpm=0\u0026mediation_type=\u0026iframe_click=1\u0026is_webview=0\u0026social_network=\u0026publisher_id=116783\u0026advanced_pub_id=0\u0026lv_id=0\u0026entry_source=direct\u0026final_source_id=0\u0026payment_model=cpm\u0026is_second_price=0\u0026ip_mismatch=91.90.42.154\u0026ua_mismatch=Mozilla%252F5.0%2520%2528Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A134.0%2529%2520Gecko%252F20100101%2520Firefox%252F134.0\u0026geo_mismatch=NO\u0026isp_mismatch=LQ==\u0026mismatch_filters=ttl_mismatch","fqdn":"rtbrenab.net","domain":"rtbrenab.net","tld":"net"},"ip":{"addr":"157.90.85.57","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rtbrenab.net/get/?go=1\u0026data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImIiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6MTQ5NiwidHlwZSI6InBvcCIsImlkem9uZSI6bnVsbCwiYWRfdGFncyI6IkhDTElQUy1QT1JOJTJDSEQlMkNYWFglMkNDTElQUyUyQ1ZJREVPJTJDVFVCRSEsIiwibGFiZWxzIjoiIiwiYWxsb3dlZF9sYWJlbHMiOiIiLCJ0aXRsZSI6IiIsInN1YmlkIjoiMTU2NzE1ODM4OSIsInJlZnJlc2giOjEsInV0bTEiOiIiLCJ1dG0yIjoiIiwidXRtNCI6IiIsInNwb3RfaWQiOjE0MzM2NzEsIm11bHRpcGxlIjpmYWxzZSwiaXNfaWZyYW1lIjpmYWxzZSwicmVmZG9tYWluIjoiIiwicGwiOjAsInN0cmF0YWdlbSI6IiIsImd5ciI6MCwiYWNjZWwiOjAsInNzcCI6Mzc1OCwiYnR5cGUiOjAsInYyIjowLCJyY2hhbmdlIjpmYWxzZSwicG9zIjowLCJldmVudF9pZCI6IjIyNTQxZmE0LWU2OTktNDM3Yy04Y2NmLTM1M2ZmNjg1OWJiOCIsImFwcHJvdmVkX21haW5zdHJlYW0iOjAsIndsIjoxLCJ0ZXN0YWIiOjAsInZlciI6IjYuOTAuMTIifSwiYmFubmVyIjp7InciOjMwMCwiaCI6MjUwfSwibWV0cmljcyI6eyJ0b3BpY3MiOltdfX1dLCJzaXRlIjp7ImlkIjoiMTQzMzY3MSIsImNhdCI6WyJJQUIyNSJdLCJwYWdlIjoiaHR0cHM6Ly9oY2xpcHMtcG9ybi5jZmQvIiwiY3RpZCI6MX0sImRldmljZSI6eyJ3IjoxMjgwLCJoIjoxMDI0fSwiZnBfcGFyYW1zIjp7InBsdWdpbnMiOlsiUERGIFZpZXdlciIsIkNocm9tZSBQREYgVmlld2VyIiwiQ2hyb21pdW0gUERGIFZpZXdlciIsIk1pY3Jvc29mdCBFZGdlIFBERiBWaWV3ZXIiLCJXZWJLaXQgYnVpbHQtaW4gUERGIl0sImxhbmd1YWdlcyI6WyJlbi1VUyIsImVuIl0sImZvbnRzIjpbIkJpdHN0cmVhbSBWZXJhIFNhbnMgTW9ubyIsIkNlbnR1cnkiXSwiZm9udFByZWZlcmVuY2VzIjp7ImRlZmF1bHQiOjE3My4xMTY2Njg3MDExNzE4OCwiYXBwbGUiOjE3My4xMTY2Njg3MDExNzE4OCwic2VyaWYiOjE3My4xMTY2Njg3MDExNzE4OCwic2FucyI6MTYyLjAxNjY2MjU5NzY1NjI1LCJtb25vIjoxMjIuNjgzMzM0MzUwNTg1OTQsIm1pbiI6MTAuODAwMDAzMDUxNzU3ODEyLCJzeXN0ZW0iOjE2Mi4wMTY2NjI1OTc2NTYyNX0sInBsYXRmb3JtIjoiV2luMzIiLCJjb2xvckRlcHRoIjoyNCwiZGV2aWNlTWVtb3J5IjowLCJoYXJkd2FyZUNvbmN1cnJlbmN5Ijo0OCwiaW5kZXhlZERCIjp0cnVlLCJzZXNzaW9uU3RvcmFnZSI6dHJ1ZSwibG9jYWxTdG9yYWdlIjp0cnVlLCJjb29raWVzRW5hYmxlZCI6dHJ1ZSwiY29sb3JHYW11dCI6InNyZ2IifSwidXNlciI6eyJpZCI6IjU5YWY5NjI4ODdmMzM3ZDcyOTliMTQyZmE2MzM3Njg0IiwiZnAiOm51bGwsImZwX3N0ciI6IiIsInVhX2RhdGEiOm51bGwsImlzX3dlYnZpZXciOmZhbHNlLCJzb2NpYWxfbmV0d29yayI6IiJ9LCJleHQiOnsiZHQiOjE3NjgwMjc1ODcyMDd9fQ==","date":"2026-01-10T06:46:27.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"banner.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 01:51:50 GMT","end":"Mon, 09 Mar 2026 01:51:49 GMT"},"fingerprint":{"sha1":"15:BF:4B:65:46:08:22:8D:E9:38:46:3E:D4:56:B1:02:94:D7:17:A4","sha256":"84:24:50:A3:0F:03:EA:54:61:3B:C5:4D:33:7B:1D:61:84:80:E3:A6:B0:1F:90:D1:38:32:01:C5:35:7B:D2:F6"}}},"request":{"raw":"GET /banner/in/show/?mid=5446556763236253116\u0026pid=0\u0026site=1433671\u0026sc=\u0026usage_type=DCH\u0026subid=1567158389\u0026sid=0\u0026cid=19905\u0026price=0\u0026is_cpm=0\u0026cpm=0.0001\u0026ecpm=0.0001\u0026crid=\u0026crtid=\u0026tcid=0\u0026out_id=0\u0026ver=6.90.12\u0026ver_c=\u0026refdom=hclips-porn.cfd\u0026hostname=auc-banner-hz-14\u0026site_id=0\u0026spot_id=1433671\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026expiration_timestamp=0\u0026created_at=0000-00-00\u0026is_native=0\u0026ip=\u0026testab=0\u0026px_id=1433671\u0026adblock=0\u0026auction_host=\u0026mm=0\u0026yc=0\u0026render_type=\u0026campaign_type=\u0026uniq=\u0026exp=0\u0026resp_type=default\u0026min_cpm=0\u0026placement_type_id=269\u0026verify_hash=9865c93090f79b878a8045d57868f09f73b084f5e66f7c93ccb66aec876bc9da\u0026score=1\u0026kubik_score=0\u0026kaminari_bot_ip=1\u0026tag_ab=b\u0026v2=0\u0026ttl=0\u0026space_id=1496\u0026banner_width=300\u0026banner_height=250\u0026accel=0\u0026gyr=0\u0026iabcat=IAB25\u0026user_fp=3320490513170107167\u0026icon=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D1433671%26source%3D1567158389%26idzone%3D0%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D1433671%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DHCLIPS-PORN%252CHD%252CXXX%252CCLIPS%252CVIDEO%252CTUBE%21%2C%26spot_id%3D1433671%26p%3Dhttps%253A%252F%252Fhclips-porn.cfd%252F%26katds_labels%3D%26btype%3D0%26score%3D1%26bf%3D0%26dr%3Dhclips-porn.cfd\u0026pr=\u0026bid_crid=\u0026bid_cid=\u0026is_iframe=1\u0026ad_tags=HCLIPS-PORN%2CHD%2CXXX%2CCLIPS%2CVIDEO%2CTUBE!,\u0026stratagem=\u0026ssp=3758\u0026refresh=1\u0026priority=0\u0026base_bidfloor=0.0001\u0026label_ids=\u0026site_id64=1433671\u0026original_bid_usd=0.0001\u0026comeback=\u0026topics=\u0026original_domain=\u0026ectr=0.00022692127381672395\u0026client_price=0\u0026direct_client_price=0\u0026client_payment_model=\u0026ext_campaign_id=\u0026auction_time=1768027587\u0026account_id=2060\u0026url=https://preroll.hostave3.net/notifications/zeropixel.png\u0026stime=1768027587\u0026double_click_filter=false\u0026w=300\u0026h=250\u0026skin_id=8\u0026placement_id=1\u0026service_spot_id=0\u0026processed_keywords=HD,Adult\u0026user_keywords=\u0026segment_id=1440234390\u0026traffic_category=adult\u0026viewability=0.13565347383005488\u0026container=Skin%20300x250%20Banner\u0026mediation_ecpm=0\u0026mediation_type=\u0026iframe_click=1\u0026is_webview=0\u0026social_network=\u0026publisher_id=116783\u0026advanced_pub_id=0\u0026lv_id=0\u0026entry_source=direct\u0026final_source_id=0\u0026payment_model=cpm\u0026is_second_price=0\u0026ip_mismatch=91.90.42.154\u0026ua_mismatch=Mozilla%252F5.0%2520%2528Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A134.0%2529%2520Gecko%252F20100101%2520Firefox%252F134.0\u0026geo_mismatch=NO\u0026isp_mismatch=LQ==\u0026mismatch_filters=ttl_mismatch HTTP/1.1\r\nHost: rtbrenab.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rtbrenab.net/get/?go=1\u0026data=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\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.16.0\r\ndate: Sat, 10 Jan 2026 06:46:27 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nlocation: https://preroll.hostave3.net/notifications/zeropixel.png\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.16.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/hp.css","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /hp.css HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 15 Jun 2025 16:45:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"684ef89e-77a8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lM27oCu4%2Bf30uU73fiNQVsYrxsBXL7CRqmwMdXIyJSVrreUY74CfZnBWxS7Ef99g6fu7WVEgduotVuSZoJPnh0iZZE1agljSsT9ilOFyXg%3D%3D\"}]}\r\ncf-ray: 9bba378fba24783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30632,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (358)","md5":"764878e1ae4fdaa048a7c3f27e58f7c6","sha1":"83efdcfb70c45539ac31c31f04f8bf8311b92eda","sha256":"ad28e6b5934a6d0d30eb628e19e02a70f271277b9519e726d07e831de64b199f","sha512":"84f8f00a8486e4c2144d9d854c1a99641725985c7925443c61f43ba7d4730bdf263fb3df6a532ccf51d6f65181a5b2debc7cd6eabb94534481598ea19c754882","ssdeep":"384:p1Zpzw/A2571GsvCpi11aejCHircwPoSKxd:rw/j571vF11nWE9PoSKj","tlshash":"edd2866366302648b83ba5d6bef75b5e13295123f20558b8b9d6380cc28cc7505f3fea","first_seen":"2025-10-05T06:06:00.170783Z","last_seen":"2026-04-12T14:36:08.166064Z","times_seen":31,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/020_porn-young-man.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/020_porn-young-man.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:23 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 30230\r\nlast-modified: Fri, 29 Aug 2025 06:35:54 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14a4a-7616\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236698\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cQXqkslXKw1Ex1xT3Tdw1UlhUHZny7Uft4mBYoTpYrKlwDvJmxJUl%2BFgbNfjqTn35bDgOQmsPmUkJuKT6okFM700JGj8x5rvwc4CEi5hYA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba378fca2f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30230,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"453a3543850e623c33b137a518e9b775","sha1":"3d75a836cd43c3cd9a87647e4f645273d892eceb","sha256":"4627a2e667351ede70f4ffee605a9bc797c201fc306209f1edf92092cde5371d","sha512":"2ea94d67c8f2c8c094f3887435094a9a2be035362433f9a1789a674ce0d71e5a6eeb5b205a8debf9b9df78bfe5da666a002a9ce58a07720c6143167d36da8f66","ssdeep":"768:V+gIs7k8fmSA1kbEZUmWuy61nyGLQ4ELdIKCEDRz:M5s3+SnbEZ5xywncVLdIKCm","tlshash":"05d2e1547789e928eed53172a23463961c1c9e10870d62746393d9f4a471f2e4ac3e8f","first_seen":"2025-10-31T12:17:27.088075Z","last_seen":"2026-01-10T09:02:32.728127Z","times_seen":11,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":168,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/095_round.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/095_round.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15026\r\nlast-modified: Fri, 29 Aug 2025 06:42:42 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14be2-3ab2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a2xhoGrKB3kqWbFBFui77F1L%2Bx5DWSa0EkL4d%2BTMKwbOCvJY4qHMHFXhcbvUo9jKIHzTpcGyVsfYn%2BDvQyYoDTWDnSoWC9wHqrC8MTl3jw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37902a78783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15026,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"2fdaa76dcafef068b1f25b3dc06d96a4","sha1":"94c73181f99992a35c1951efc963b9614c62ff86","sha256":"5c8ad1ea59bfab3869d9dfd1ff7efcba64b15d56dbceb3baca39e7c72c151e72","sha512":"2391b7da810383bafdfc8511036cf287062dee3919f8950b53087709de8b38d3af30db160d7a718b1e61ed4f059dbf1e0cdfbdec3eb221e269df75efaa017748","ssdeep":"384:QJxVOtGBFU1Wa6kUepBKUIsS9A1Xr8ECi1/OLn/dUhrvQYQ8i1r98VX:ExVp4VWepBKFK1boUKn1UJxQ58VX","tlshash":"7c62d041bf28345f7d930c72e9f247011659e0a4afb88f82976431cafdcbb256e85c60","first_seen":"2025-10-19T02:15:18.689021Z","last_seen":"2026-04-12T14:36:08.198629Z","times_seen":30,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/083_gets-painless.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/083_gets-painless.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22000\r\nlast-modified: Fri, 29 Aug 2025 06:42:20 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bcc-55f0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bdAIVmtuUR%2FdXwq5YbUcembfHbiUv6K80kxV%2FZwGuEo8TF4yJCGx7Vjr3i0JfHU9lrUH%2BEzS0g2yZXJWNXzu0HuWvznXtNjJAqxXj%2BVwWw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37901a6a783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22000,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"ad4578ea6d054ce7afdbbbe2ee5533b4","sha1":"1dd2685e6e6d0c461c2bec7d8c68ed25ab32d019","sha256":"3f07bda3dcb036fd3eea5e77434801cc9d2544f9ab0447774912f2303aad5b08","sha512":"366f8df2049481a8141814739c3a98ed6c56f8530b847fd44ddb043a8c94ddaa88629b77c98cdeed43a8041c10bf8958138021e75a9834ef73dc19cca932c32f","ssdeep":"384:eHcTkSq6pqLKUZovyY+gqIXG518HeFa8naQM7TcUROvzhVA:8QkjQq5Zoq0G18Heq7TcUROvM","tlshash":"82a2d1aee4da478cde585525cde98f35e2c1662494a8dc3fc206bcbac6b410d77d42c4","first_seen":"2025-10-05T21:57:54.366108Z","last_seen":"2026-04-12T14:36:08.213214Z","times_seen":28,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/n.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.70","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Nov 2025 07:32:01 GMT","end":"Sat, 28 Feb 2026 07:32:00 GMT"},"fingerprint":{"sha1":"30:27:D8:5A:59:AD:E2:2E:0E:9D:6A:5B:1B:BF:60:BE:D2:80:8B:DF","sha256":"A9:DE:14:B5:E6:07:9A:21:0C:4B:AC:5D:B3:F1:DB:EB:1F:27:9B:A9:C9:AD:51:72:F0:5B:0D:91:81:C1:D3:6D"}}},"request":{"raw":"GET /sdk/v1/n.js HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Thu, 08 Jan 2026 08:50:36 GMT\r\netag: W/\"695f6fdc-a837\"\r\nx-robots-tag: noindex, nofollow\r\ncontent-encoding: gzip\r\ncache-control: max-age=172800\r\nexpires: Mon, 12 Jan 2026 06:46:24 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: DS9225,DS9201\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43063,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (43017)","md5":"aa64621906a918100344c598750cbcfd","sha1":"178b3fa0f05c42c26e4f3cd8f3f021636bcf5f3b","sha256":"1f19d263a53dc13a027cfc3b486d593bf9880a64f21a0693778a7edbbe9cd83f","sha512":"f06455d557fb9507150292a021e574e8e7b48208a31895ef7a4d95023e800058ac4c05b4a0da0dd247ee95c2885e7ac5840f9dcd13838a7c648f403443b37d37","ssdeep":"768:pSNqIzQEzZFj+rvia6JSbHigWuN8sMySCcYLcY50XxGTsG:pYqA9+zN6s+gV8sMQcYr5rH","tlshash":"53130aed75927035216b00a681af130bb33e2617a90d4c00d477edd57abcdcad27bea9","first_seen":"2026-01-09T15:27:49.613088Z","last_seen":"2026-01-12T14:37:23.36234Z","times_seen":12,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":21,"connect":20,"send":0,"wait":42,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S-450980237:1768027587700448\u0026ifkv=AXbMIuADNxaFAcWtat8gzkidNI3USC_edBhslE1DBi5e90XGiSbPMj5PsUgcb3-kwwwhosV2kGCgng","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"173.194.221.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:28.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:57:32 GMT","end":"Wed, 25 Feb 2026 15:57:31 GMT"},"fingerprint":{"sha1":"F5:06:14:04:6B:D5:32:C9:BA:A9:B4:13:02:C3:F0:62:2A:24:BC:90","sha256":"D8:34:74:17:27:E1:E2:E3:A9:BB:5D:58:F5:DB:40:51:4E:6C:34:33:BF:88:83:62:03:97:DC:4B:FB:67:B5:45"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://m.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S-450980237:1768027587700448\u0026ifkv=AXbMIuADNxaFAcWtat8gzkidNI3USC_edBhslE1DBi5e90XGiSbPMj5PsUgcb3-kwwwhosV2kGCgng HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:yLJCQ2vYF41vrYBq0vtPQ7wiP8qiUQ:2_qXBi7hDxfk2RhP;Path=/;Expires=Mon, 10-Jan-2028 06:46:28 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 10 Jan 2026 06:46:28 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026dsh=S-450980237%3A1768027587700448\u0026hl=en\u0026ifkv=AXbMIuDG47-s1LFpYkvfsvogqVeAYHc0Y_56NGFAxqs44N4cnnhb20_qso3E0en6zV_qJYyzUDzK\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-TF0d3knHNN8XhZdItsc9ZQ' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 415\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/034_xxx.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/034_xxx.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:23 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 29223\r\nlast-modified: Fri, 29 Aug 2025 06:41:06 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b82-7227\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JKUG%2B1tCa9IdyZo479bOImXxPqbCL0TqH7IHVyM9EhUGDbfQp6NvPUNm%2FJ6lYa3vY19%2BcqwRB%2Fdmuh2ivgfmR0rE8RWgcMCUh2LFLuA8SQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba378fca2c783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29223,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"b77a655155d6b5762d54e65d5bc9425a","sha1":"e99bd004ef262be6ba5e11e61242236a3b5c7827","sha256":"4d19485c72bc469862aac3a812576a8c4972e69c1f57c84f5fea970a2ad2a859","sha512":"b98f1ea0695549b4a53d75d3bf2e7a6142ba1ebd18d8ff9446d035a72b99ef4ddc60924ecf42041556bb35ce731d64f77ff2d8006fc4a9e699249bc670267bb2","ssdeep":"768:aH/CCJmNZ2mQG1ECpqI2oIJnRGkqdGWVfT0/H4cn3TiM7RZ:aH5JmKfcE8q/hG1RT0/4cjiS","tlshash":"52d2e1318fd2f593d8263231557a9cfd20290dbf0fb51e8d4d6ebde6b1ac6860340526","first_seen":"2025-10-31T12:17:27.034846Z","last_seen":"2026-04-12T14:36:08.315532Z","times_seen":24,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/backup.v2.js?spot=bd16f693d3144ae0b0b2ce10c53c7d0a\u0026xu=00cffe1d2ade5a87\u0026count=3\u0026w=1280\u0026h=1024\u0026keywords=%7B%20hardcore%20%7D%2CHCLIPS-PORN%20%3A%20HD%20XXX%20CLIPS%20VIDEO%20TUBE!\u0026adtype=image\u0026tz=0\u0026callback=callback_vabaW","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.70","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:26.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Nov 2025 07:32:01 GMT","end":"Sat, 28 Feb 2026 07:32:00 GMT"},"fingerprint":{"sha1":"30:27:D8:5A:59:AD:E2:2E:0E:9D:6A:5B:1B:BF:60:BE:D2:80:8B:DF","sha256":"A9:DE:14:B5:E6:07:9A:21:0C:4B:AC:5D:B3:F1:DB:EB:1F:27:9B:A9:C9:AD:51:72:F0:5B:0D:91:81:C1:D3:6D"}}},"request":{"raw":"GET /sdk/v1/backup.v2.js?spot=bd16f693d3144ae0b0b2ce10c53c7d0a\u0026xu=00cffe1d2ade5a87\u0026count=3\u0026w=1280\u0026h=1024\u0026keywords=%7B%20hardcore%20%7D%2CHCLIPS-PORN%20%3A%20HD%20XXX%20CLIPS%20VIDEO%20TUBE!\u0026adtype=image\u0026tz=0\u0026callback=callback_vabaW HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: cookie_user_id=a3478f5e-53f5-5f37-994f-8bde9a7ba683; bfq=APeIECNCx5YaOWbIkGEDRxcWIsYU3BLjoYgyE2PcaBgjxowcOGp06aMg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 23 Dec 2025 08:34:11 GMT\r\netag: W/\"694a5403-2504\"\r\nx-robots-tag: noindex, nofollow\r\ncontent-encoding: gzip\r\ncache-control: max-age=172800\r\nexpires: Mon, 12 Jan 2026 06:46:26 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: DS9225,DS9201\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9476,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9425)","md5":"4073ae4429669edf2b941fae7f12a135","sha1":"1704aec3757f7240b7e7bce529585b191491514d","sha256":"22c6bc9447a3404373c08203c6f9af463f97e5ab439714a854033c501761adc4","sha512":"5c7c34e0d6847c036bddbad6d12be3f73c9424a4fdbf7d7a4265a0208dcb24831c863de4ac3aad386e4028d202f52ac4b210d8143e6021c4576a049fb07b6b85","ssdeep":"192:pJJV/1ej/9CHQ8en0ecZer6eHB8eHzeAheuQljnanE1Isy6qIZ:pZ/1ej/9CHJen0ecZer6eHWeHzeAheuy","tlshash":"b2129503ca2f241bbc1c35846b8a7a45a59011633cb5cdb6c2f3497bc9f9f9741e3a62","first_seen":"2026-01-10T06:47:19.743107Z","last_seen":"2026-01-21T11:16:46.909957Z","times_seen":10,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pxl-eu.tsyndicate.com/api/v1/p/p.js?p=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-bTFDDF1QJpkOMLgQXmFy2JEYeA_VUcemOkA0Aw03gFRDGSPNYEZMNZhhVQs55ECDSDiIcVBSN4gRRmdiPSRqRk65kEOtHbnQEA1jyfHFt8GGO64L5Z47Vh1hZNTEG3qkwQYbYbxQg60goHBFGm50esccIDhBBQhx2boDCAO7YQMND-Mx8cO5jkaDrSmAcEQZY6zxxguAxQVDXDGAYEQaxZnxBh4vhLUxDKsOFawTT4xlans2i4DzWGz0XIQTnHr5RXFsUFTDDcXO0Fl4D8kx30KrwfnQQXZ8IYYcC-HgmQhYc-gh1TjY0BoZcryx0AwPvaGQDjSwlTYeeWAW9RcWvly3DoWFTYceGdEcdRmzDjRbbbe9gAaoos5BqqmojmHUC2PdkVFcMqD7EBqXy7DUWHPkmlHakdJhagvNpUEHSv-SIYPOoZulQ582WLV0DmuB3fNBMr5uURsU3fC0DILhUNh6rzMk_FLE12A8kq0ZdLRycHxhXfDDF1-Y0dIhRMfbrlY0bKwQieEX2IQHxcZEbAW90GOGiQb_GJzrsIUIY-X_kP747-9__wDkX_660AcFBAQ%3D\u0026s=ed962c10baa2dc29f3a2621a00f64f3c47b64d29102e7fa0965d2864584697441768027585\u0026w=t\u0026r=1\u0026d=761\u0026priv=true","fqdn":"pxl-eu.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"148.251.4.157","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:27.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tsyndicate.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 21:10:04 GMT","end":"Tue, 10 Feb 2026 21:10:03 GMT"},"fingerprint":{"sha1":"BB:2C:CE:C9:92:0E:A9:18:50:BD:8C:7E:7D:B2:E6:CC:72:54:29:18","sha256":"3B:E3:8E:A4:C5:EC:08:3B:96:2B:B0:16:ED:56:3F:0A:CD:55:81:4A:8F:FC:97:83:57:FC:6E:F9:FD:F4:43:83"}}},"request":{"raw":"GET /api/v1/p/p.js?p=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-bTFDDF1QJpkOMLgQXmFy2JEYeA_VUcemOkA0Aw03gFRDGSPNYEZMNZhhVQs55ECDSDiIcVBSN4gRRmdiPSRqRk65kEOtHbnQEA1jyfHFt8GGO64L5Z47Vh1hZNTEG3qkwQYbYbxQg60goHBFGm50esccIDhBBQhx2boDCAO7YQMND-Mx8cO5jkaDrSmAcEQZY6zxxguAxQVDXDGAYEQaxZnxBh4vhLUxDKsOFawTT4xlans2i4DzWGz0XIQTnHr5RXFsUFTDDcXO0Fl4D8kx30KrwfnQQXZ8IYYcC-HgmQhYc-gh1TjY0BoZcryx0AwPvaGQDjSwlTYeeWAW9RcWvly3DoWFTYceGdEcdRmzDjRbbbe9gAaoos5BqqmojmHUC2PdkVFcMqD7EBqXy7DUWHPkmlHakdJhagvNpUEHSv-SIYPOoZulQ582WLV0DmuB3fNBMr5uURsU3fC0DILhUNh6rzMk_FLE12A8kq0ZdLRycHxhXfDDF1-Y0dIhRMfbrlY0bKwQieEX2IQHxcZEbAW90GOGiQb_GJzrsIUIY-X_kP747-9__wDkX_660AcFBAQ%3D\u0026s=ed962c10baa2dc29f3a2621a00f64f3c47b64d29102e7fa0965d2864584697441768027585\u0026w=t\u0026r=1\u0026d=761\u0026priv=true HTTP/1.1\r\nHost: pxl-eu.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: cookie_user_id=a3478f5e-53f5-5f37-994f-8bde9a7ba683; bfq=APeIECNCx5YaOWbIkGEDRxcWIsYU3BLjoYgyE2PcaBgjxowcOGp06aMg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 06:46:27 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 24\r\nx-robots-tag: noindex, nofollow\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"0959ba36d476b6dc1994ba3c678b07c4","sha1":"d30b94da72daa02766965206a85b7e0356375f5e","sha256":"897410b87e27e3dfba3a7d6caab315a5e69cc941bb96d91fc74878a9b051843a","sha512":"843f2144ba55d59ba3e62053dc018f4f6d51ae482c741cb4dc85f7af3375b77c75f66e2e73ff55ff7fe3b79314e7ba28a92fddec1ba17839ba33b34792bfce22","ssdeep":"","tlshash":"ea70008030b22e88e022000802a08000000288220a8032b0020800a80002202ca3c30a","first_seen":"2023-03-07T01:03:23Z","last_seen":"2026-04-16T20:52:26.472062Z","times_seen":6856,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":49,"dns":0,"connect":24,"send":0,"wait":27,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ic-nss.flixcdn.com/a/MzAzYmY2NmEyMzEyNzdjNDhmZmYwZmJjY2EzNzczZDE/jpeg%2Cs%28w%3A480%2Ch%3A300%29/video/rs/rsItYS/screen/1-MA7.jpg","fqdn":"ic-nss.flixcdn.com","domain":"flixcdn.com","tld":"com"},"ip":{"addr":"185.76.9.5","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=vgrVQ_vuRFRxeSWfjKPOnXitlaqqtsNempNBquKydHa58W6jrz4DRT3LrKFReABeBCRRzNgyS2-JbSql0ZKsCnQ5QkAcATjTV6uD-o8DY7mwtDU_gUIDRUi","date":"2026-01-10T06:46:27.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1029385688.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Dec 2025 18:50:04 GMT","end":"Tue, 24 Mar 2026 18:50:03 GMT"},"fingerprint":{"sha1":"89:82:7B:71:7C:2C:D8:62:C2:8F:3E:F9:76:0C:8B:29:7D:68:59:20","sha256":"C0:00:52:93:BF:15:D7:B9:32:32:A5:60:99:A4:6E:A4:AC:B1:57:6F:3F:46:CD:1C:9E:CF:BF:7E:21:62:F9:76"}}},"request":{"raw":"GET /a/MzAzYmY2NmEyMzEyNzdjNDhmZmYwZmJjY2EzNzczZDE/jpeg%2Cs%28w%3A480%2Ch%3A300%29/video/rs/rsItYS/screen/1-MA7.jpg HTTP/1.1\r\nHost: ic-nss.flixcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-fc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 64812\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: ic-1\r\ncache-control: public, max-age=1296000\r\nexpires: 1769084452\r\nx-rsic-cached: yes\r\nx-rsic-responder: ic-0\r\nstrict-transport-security: max-age=63072000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-77-nzt: EgwBuUwJAQH3H6YDAAwBT3/TaAGTksYTAA\r\nx-77-nzt-ray: 5637663579d1b59dc3f561691e50d72a\r\nx-77-cache: HIT\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nx-77-age: 239135\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":64812,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 480x300, components 3","md5":"df16aa0f132fbf7e7421087bcab1ab25","sha1":"ace3edc9442513f04c3124579e833e4fa983886e","sha256":"295f07355e2fdc12fca10d21e205cf4958a16512902fa8e9e1ed4b6ae2614e55","sha512":"cef4686885f5c19353ec22eb1165dfca3cea0733535bac51a21c733fc0f67a89caba3b0945404ace22c5950833b56654ca72aae06f52bc1aba1399d3fe5ed5be","ssdeep":"1536:qwQ8GO0HOO7G/z1e4k37J0TUAbuUl4GWPUsxLYBKHgU0P6p6JVeEqc/Lbil:qkwHO8G/z3k3ILyUOdNxVEI6JoyLb6","tlshash":"6a53022047a24707e2c2d5770aab2abb1ef7732ad5c031e8e2c4ac0c6e26c54352dbc5","first_seen":"2026-01-10T06:47:19.609005Z","last_seen":"2026-01-12T00:09:39.893596Z","times_seen":13,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":115,"dns":54,"connect":7,"send":0,"wait":12,"receive":16,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/036_womanlike-ohashi-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/036_womanlike-ohashi-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:23 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22101\r\nlast-modified: Fri, 29 Aug 2025 06:41:08 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b84-5655\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dIZOCLgYWvpcobj7qktNZq3KzJ0WmnSlOtHwBin1DA%2Bg0uRIJtmRTCnx8UjoMOjtkRR6FvEg50u69e9LyaO71ZpWqpUiqr3D0rgOCZeZmQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba378fda42783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22101,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"2f1317ccb60d29e775de6a4bf0f0d8b5","sha1":"0bcb5647693db52c8970ec51121d942f121a0009","sha256":"bd5ac6e3d9253798d33fa8a78a6bb1f11e228010aa17686125fc715f31fe07a0","sha512":"4737ff7d04bc42b55ff83c782f3df9a09d42dea88eeb724ebbe547f778c3b77fda6c6c728090ff447f873ff1f444218c65f99b860ca83e7043139e680fc21426","ssdeep":"384:b1bJvf7UhzIJHp5sq85lMoIh1wDqCAbVPZh15rd+tsCQDeOWGcM6H860U2iEiq:Bl7uzIJJ5sNfc1weCAb7h15es5eXGpUE","tlshash":"78a2e0128110e54b556c4db80c9b94364e49cd7f8cc92ef34d7a4bf239706fe4b06253","first_seen":"2025-10-31T12:17:27.109864Z","last_seen":"2026-04-12T14:36:08.279434Z","times_seen":23,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":141,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/071_japanese-despondent.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/071_japanese-despondent.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21555\r\nlast-modified: Fri, 29 Aug 2025 06:42:00 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bb8-5433\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=67mGgTp2U62Ks4zsNxlVwYAml3rK1tBpkrv6ySi7%2B60MStdVAgL75IouH%2Bzg5lKpcJp3cWQQKpReTyOOYXXBCEqJT0BZktwADnEf3UGasA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37901a65783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21555,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x300, components 3","md5":"e5e76488730648f1a87435e491a44e63","sha1":"520dee5b0833d364e9f84bf24c9bc5538faa4f78","sha256":"16d3efcd3c879b98150ca9b76d24952411a61c1002cf01a4fb42bc2c18bd8352","sha512":"516a3e450834e819cc7902131036d9de300e3515d5518381de74fdce22015059f9a688759917e2de739d046d9d508c469860b99dbadcb07a917b91abb470ba7e","ssdeep":"384:4D7LyQSO1/aQltLpLWc9ziBJkrGzav7xpXIgZG/bQi9qcu9/pllkVkfMhwkxI:FViLWOrmgVVA/eXJkFhwcI","tlshash":"53a2d0a1a6163efccfb7183b4a5253a197c8554c78901b5ae64942f49b372cf85c7383","first_seen":"2025-10-05T06:06:00.063969Z","last_seen":"2026-04-12T14:36:08.283038Z","times_seen":27,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA01Q7WrDMAx8lb1AjCTLttzf298NOvoAjpNshbUpDZQM9PCz3S6bD6xDvtOHCch3gB3CE+CO/Y6cRjQRDJNBx/r6tldGXdfbcRjnxeSsGKMXUQsQIysTi7CiCyGIVweiwYqtHJGcRMekDGoVCshZ5sYC6OH9WV8Oe0WDAfE3kCq2tkpQWAEJrAhUfcFNkmNMKfQx+D6kSTBOCDDySKmMg0X0mb+Ol6W7zNezydPQ2hUY8KK1PmzoqtwiWypTlQPa0mn5PmfVTfYY2bUlqBaoPv1X6A+yMWz3Yk7pY7neTJ5PJfVw4f2xJe5kGjNR2T8EN5YPzK73o400IeaUYfgB2FVaqqkBAAA=\u0026cb=e2e_6961f5c1b2fff1.25433484","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.245","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:26.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA01Q7WrDMAx8lb1AjCTLttzf298NOvoAjpNshbUpDZQM9PCz3S6bD6xDvtOHCch3gB3CE+CO/Y6cRjQRDJNBx/r6tldGXdfbcRjnxeSsGKMXUQsQIysTi7CiCyGIVweiwYqtHJGcRMekDGoVCshZ5sYC6OH9WV8Oe0WDAfE3kCq2tkpQWAEJrAhUfcFNkmNMKfQx+D6kSTBOCDDySKmMg0X0mb+Ol6W7zNezydPQ2hUY8KK1PmzoqtwiWypTlQPa0mn5PmfVTfYY2bUlqBaoPv1X6A+yMWz3Yk7pY7neTJ5PJfVw4f2xJe5kGjNR2T8EN5YPzK73o400IeaUYfgB2FVaqqkBAAA=\u0026cb=e2e_6961f5c1b2fff1.25433484 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: __uvt=s%3A32%3A%220405a8a3eef143a6018d8c336564261b%22%3B\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 10 Jan 2026 06:46:26 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://hclips-porn.cfd\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pxl-eu.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XAuDEGBo4bNcq0IJPDho0WNGKYmdFCjI0ZNFrcmGFjTA0xZmKUIYNjhoiHYeqMyUhmBowwNGjMEIMyTA6RNGTUiIkjh5kxLcbQECOjYBgYM2aMufETIhk7FMPegCHjIZw6YijGAHsDKBw4C2nkiFFXxBw4E3XI2FijxgyHIsa0wcsQhtIaOWAAJWOG4kMxbtwshDxDhgwbOB62cYORYefBbkeX5iu1oog6MTKioUMHzhwdL16MIeOmxVUXY9600S2nIJ00dsrMeVHHDXKEc8KweeEmzPHkL37MSaOnTA-jMPBIhcGlDgy2NurQafNlTJjFYdKccdMjvos2eLKUP_9ZPfvgbtBRRoA9zFHHGWcoJyAZX9yRBhkJ0rEfenAUZ0caZdzxRRtvHNQDGm8kJ8eEn80RQw9p0HHDF3bk0EYSTmgxRxYyGIEEElLwZMYND2rBRAtE4JHEFEtkUUURVxDhRBZ61AGHDFToMUQRbcDwRRxy3BAEGVYEAcUSV6QhxQxxQJGEHnSg8QUVV1wURQx5hDFDEEtUoQQbZxBRgxNOJCHSDXWE8UUOWQhhAxM5DGHDFGcogYUWaBQRxBdnVJEEEVJUkUZZZAgn2xhspGFbC3C8IYcbwJlBRlnuBbbFDDF0cVllOsDgwnmIyWEHY0Y9VEcdm-oAEUw34GBGSC0YdmyyK93QQg450GBGCziIcVAOYdwgRhig-fSQqBnt5UJkLkTlQkM0lCXHF-AKKy655qJbVqAZNfGGHmmwwUYYL9RwKwgohOlGp3fMAYITVIAw1607gCCwDTQ0jAfEDetqGg23pgDCEWWMscYbLww2FwxzxQCCEWkUZ8YbeLwQA0y3sjqUsE48UZap7c0sQs1lsaFzEU5wWoYdXxTHBkU13FAsTTic95Ac8y0k1UcPHUS0GHIshENoIli9YYdS42CDa2TI8cZCMzz0hkI60OCW2XjksdnTX1TIstw6IOY1HXpkBIO6ZdA6EG224fYCGqCKOgeppqI6hqovlHVHRnPJkO5DaFAuQ9NlzaFrRmbTYZ2pLTSXYgsku0CGDDd7jhZDn8WQw1o37FW1zgd9sXpZ61F0A2hsgYQDYuuxztDvTcsgfA025NCWWUUrB8cX1vkOvPI1DP_Q0NSzgRAdbL9aEUyyQiRGYF0HHhQbE7nl80KSJVZa_GNkrsMWIpSl_0P758____4LYP_014U-KCAg\u0026s=ce43d0076706cb001992fb7664692ad6814638d463cb945a6484968d4d640eb31768027585\u0026w=t\u0026r=1\u0026d=734\u0026priv=true","fqdn":"pxl-eu.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"148.251.4.157","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:27.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tsyndicate.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 21:10:04 GMT","end":"Tue, 10 Feb 2026 21:10:03 GMT"},"fingerprint":{"sha1":"BB:2C:CE:C9:92:0E:A9:18:50:BD:8C:7E:7D:B2:E6:CC:72:54:29:18","sha256":"3B:E3:8E:A4:C5:EC:08:3B:96:2B:B0:16:ED:56:3F:0A:CD:55:81:4A:8F:FC:97:83:57:FC:6E:F9:FD:F4:43:83"}}},"request":{"raw":"GET /api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XAuDEGBo4bNcq0IJPDho0WNGKYmdFCjI0ZNFrcmGFjTA0xZmKUIYNjhoiHYeqMyUhmBowwNGjMEIMyTA6RNGTUiIkjh5kxLcbQECOjYBgYM2aMufETIhk7FMPegCHjIZw6YijGAHsDKBw4C2nkiFFXxBw4E3XI2FijxgyHIsa0wcsQhtIaOWAAJWOG4kMxbtwshDxDhgwbOB62cYORYefBbkeX5iu1oog6MTKioUMHzhwdL16MIeOmxVUXY9600S2nIJ00dsrMeVHHDXKEc8KweeEmzPHkL37MSaOnTA-jMPBIhcGlDgy2NurQafNlTJjFYdKccdMjvos2eLKUP_9ZPfvgbtBRRoA9zFHHGWcoJyAZX9yRBhkJ0rEfenAUZ0caZdzxRRtvHNQDGm8kJ8eEn80RQw9p0HHDF3bk0EYSTmgxRxYyGIEEElLwZMYND2rBRAtE4JHEFEtkUUURVxDhRBZ61AGHDFToMUQRbcDwRRxy3BAEGVYEAcUSV6QhxQxxQJGEHnSg8QUVV1wURQx5hDFDEEtUoQQbZxBRgxNOJCHSDXWE8UUOWQhhAxM5DGHDFGcogYUWaBQRxBdnVJEEEVJUkUZZZAgn2xhspGFbC3C8IYcbwJlBRlnuBbbFDDF0cVllOsDgwnmIyWEHY0Y9VEcdm-oAEUw34GBGSC0YdmyyK93QQg450GBGCziIcVAOYdwgRhig-fSQqBnt5UJkLkTlQkM0lCXHF-AKKy655qJbVqAZNfGGHmmwwUYYL9RwKwgohOlGp3fMAYITVIAw1607gCCwDTQ0jAfEDetqGg23pgDCEWWMscYbLww2FwxzxQCCEWkUZ8YbeLwQA0y3sjqUsE48UZap7c0sQs1lsaFzEU5wWoYdXxTHBkU13FAsTTic95Ac8y0k1UcPHUS0GHIshENoIli9YYdS42CDa2TI8cZCMzz0hkI60OCW2XjksdnTX1TIstw6IOY1HXpkBIO6ZdA6EG224fYCGqCKOgeppqI6hqovlHVHRnPJkO5DaFAuQ9NlzaFrRmbTYZ2pLTSXYgsku0CGDDd7jhZDn8WQw1o37FW1zgd9sXpZ61F0A2hsgYQDYuuxztDvTcsgfA025NCWWUUrB8cX1vkOvPI1DP_Q0NSzgRAdbL9aEUyyQiRGYF0HHhQbE7nl80KSJVZa_GNkrsMWIpSl_0P758____4LYP_014U-KCAg\u0026s=ce43d0076706cb001992fb7664692ad6814638d463cb945a6484968d4d640eb31768027585\u0026w=t\u0026r=1\u0026d=734\u0026priv=true HTTP/1.1\r\nHost: pxl-eu.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: cookie_user_id=a3478f5e-53f5-5f37-994f-8bde9a7ba683; bfq=APeIECNCx5YaOWbIkGEDRxcWIsYU3BLjoYgyE2PcaBgjxowcOGp06aMg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 06:46:27 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 24\r\nx-robots-tag: noindex, nofollow\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"0959ba36d476b6dc1994ba3c678b07c4","sha1":"d30b94da72daa02766965206a85b7e0356375f5e","sha256":"897410b87e27e3dfba3a7d6caab315a5e69cc941bb96d91fc74878a9b051843a","sha512":"843f2144ba55d59ba3e62053dc018f4f6d51ae482c741cb4dc85f7af3375b77c75f66e2e73ff55ff7fe3b79314e7ba28a92fddec1ba17839ba33b34792bfce22","ssdeep":"","tlshash":"ea70008030b22e88e022000802a08000000288220a8032b0020800a80002202ca3c30a","first_seen":"2023-03-07T01:03:23Z","last_seen":"2026-04-16T20:52:26.472062Z","times_seen":6856,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":57,"dns":26,"connect":24,"send":0,"wait":24,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.cabnnr.com/banner-admanager/iframe-scripts.js","fqdn":"js.cabnnr.com","domain":"cabnnr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rtbrenab.net/get/?go=1\u0026data=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","date":"2026-01-10T06:46:27.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.cabnnr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 04:32:05 GMT","end":"Tue, 10 Mar 2026 04:32:04 GMT"},"fingerprint":{"sha1":"FB:8C:65:CE:0B:5E:7F:2E:C6:58:EB:3B:D2:6E:8E:7A:B7:B7:51:EF","sha256":"FB:93:6B:07:DC:2C:B3:38:60:36:C5:FC:E7:C7:DE:74:5A:F6:0E:4E:92:A5:72:F1:03:9F:FE:61:7A:ED:04:96"}}},"request":{"raw":"GET /banner-admanager/iframe-scripts.js HTTP/1.1\r\nHost: js.cabnnr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rtbrenab.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Tue, 23 Dec 2025 09:02:01 GMT\r\netag: W/\"694a5a89-178\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 10 Jan 2026 06:51:27 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: DS8137\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":376,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (376), with no line terminators","md5":"89433f6864b61ee5dc3398a327f35069","sha1":"14d840847e8154f6ec2931a9d90126ed5c91fdb9","sha256":"587fc8a495b9e66cfaa0092ac5c3ebe3aeff08fee83fab4be94dc4ae09c982cb","sha512":"96863711edb791ffefa6188b2077dc1db9e270a7e27874140740a0820481ade585e20765f42f6df33afb77e5b1d20db281bfa9541f2be87cf97481de257cbc6a","ssdeep":"","tlshash":"dfe0682821a067bc006f266ef29a5aacf93801a6704a040884b1488d7c3ed76a6f4f24","first_seen":"2025-07-25T01:42:49.250588Z","last_seen":"2026-04-16T13:49:02.504761Z","times_seen":1593,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/037_hclips-milf-skivvies.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/037_hclips-milf-skivvies.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:23 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19220\r\nlast-modified: Fri, 29 Aug 2025 06:41:09 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b85-4b14\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ATfsDpGo%2FmG9A8BZxbbsZkooRxfJUrAY21he6i2eGks6gqwW1BtQHL4QJC3R5tgRj0criMF385p9ChTiVSkM8Jrou4hC6%2BoJKqV5OqpRaw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba378fea47783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19220,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"44851af7495fc1a0c1db06f2671f3e16","sha1":"94ff40f8ff8a7e24165c43e7bc67178e0d596d5f","sha256":"44c00f66872392de9ebf43b31a7ac27fda7b0b203ed72285812e45c80ce7e61a","sha512":"944d45b09baafaba7247db3676d80c6190957e2edba5d168a9dc8d049555a1a5f7926e0162f8226f0782ad4593dff3d4990d7f837619d5200f8f722407a7ba5f","ssdeep":"384:Gx5GgY7Hg5rptD5u4355Z3XOX5dKK3da/UrBMAqDOHS2uw/uWkwz5ftX9zKW:GzGdHotD5ug7EX5a/7DeS2HGWFfd9zKW","tlshash":"dd82d0b91f7f86b046d80727de421974024ccaab47d5f550878b74f5ac3d8afbe185a0","first_seen":"2025-10-31T12:17:27.080636Z","last_seen":"2026-04-12T14:36:08.281337Z","times_seen":25,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/043_beyond.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/043_beyond.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23819\r\nlast-modified: Fri, 29 Aug 2025 06:41:17 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b8d-5d0b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=We1gEPVONZR6NJlTblF%2FA1qB8aocr3Fsinq001rm82wbmz6i2I3kDorziDed3byh%2FW4DPy1i9RvHzEWheETznFWpR5KsJDtMXkwBJ7lb%2BA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37900a53783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23819,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"10320e7a8b872eba734ebf2ac5cadb17","sha1":"9489ad94986f93a73d4543419ad9d60f098546a0","sha256":"578b144393627f47d8bcc80be982ff8025ecdaed9f3d25aee1cfdc686feb2fa6","sha512":"7c3d7771c9465193d4088f55472513f15d1ce11d3c8f40323779a62a3de5d0c66ba5a9b1e7c6f3e144ee23c9344e2bda51f69020e91516023fd4d0a7d1c538fe","ssdeep":"384:EjnRmpT8VUMo2vF+J/KN4Y5i3dw1I5xuLQX6XqBvEUowkOVIs2PEZEH2fkcpMwSF:6R6VHSN4Y52G2DAQX6XSvEp5OKB6pMwC","tlshash":"4fb2f069df8dcc81f027832226fc1fc0f48e17aab37129a4649838f1a04f7e0b796545","first_seen":"2025-10-31T12:17:27.200601Z","last_seen":"2026-04-12T14:36:08.276203Z","times_seen":27,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/016_avalon.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/016_avalon.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:23 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 26709\r\nlast-modified: Fri, 29 Aug 2025 06:35:46 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14a42-6855\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cKeq4sRQ8OfKIH0rl%2FZiHL04aW7x%2FbTIeMzcMf8NouUhpeu9DE16mO3hs36st5djxpSLAPr7FaoNUUp6KPShuJlZjJrRqUMfVLbX%2BP0xpA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba378fca2e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26709,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"b7c18f7a833177a4b1ad03f2ef6dc1fd","sha1":"6fb936ecb4e3397d0aa53b2bbf6bc689b25ffa05","sha256":"bf16d8314e9136d8b9b3e970c2a7d76febc01e688b99d20a948f66607dc24448","sha512":"f1994d5334362a9e075477ffe53502bf630145b89edf1ea0ce7ce083cac31792dc0dc67d584e78b5ef991361b2c100748803fd87a2cd9a192eaa42c5255bc6b1","ssdeep":"768:yYnKZZ5AVj4hJBOAcrTCflJOUuJyXXI2urwfMv:yd4Va6KflUURXXvBMv","tlshash":"4fc2f1783400966defce51bbc837e28dd279ccd9c14b24ad04a264d326fb705eaf2684","first_seen":"2025-10-05T06:05:59.921017Z","last_seen":"2026-01-10T09:02:32.786311Z","times_seen":6,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/110_hclips-to-a.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/110_hclips-to-a.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23707\r\nlast-modified: Fri, 29 Aug 2025 06:42:59 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bf3-5c9b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SPY2rRawV1wP5cN7l1Fvw7B82ijuaYCvUYTtkWx2su6muSaVx8%2FsI6qQpSf2nkYnN9E1nNSLCpc0DrkOb0lnidBIrYUhUKYImIF6MDlR9Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37902a81783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23707,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"636d2df428acb3eabcce54707bc1e07c","sha1":"9d0f6c1680daea6ce23eb54fdbf4feb3bfc96de2","sha256":"f4557b244027e06feca3d2760f01461d79afd270ff3f14ee7598a11402477a90","sha512":"c662b757d1e55813b75418713730449a46852e290438c3403a089e6102e81deb7d5011e9c54057e0b45c0125391064a78cd8241557f087beb7a7a5d0963f0578","ssdeep":"384:ikO1kkIeB15FJx314gleLAl+0xtr66gv6dvz1bk7nAfx2aHQ/6sMxH2cTJCOW5os:iB1zI015n74gk4JH2vaz1bk7Afx2aH03","tlshash":"cdb2d15a215fe7f5e0c4edaae03933e9235d3df2b86e26418030e7ddaa078925274c74","first_seen":"2025-10-19T02:15:16.938324Z","last_seen":"2026-04-12T14:36:08.23834Z","times_seen":30,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/images/0/5/feb973bc10a9e2886d1b66a7a756b710b4e3d6/main.webp","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.70","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:26.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Nov 2025 07:32:01 GMT","end":"Sat, 28 Feb 2026 07:32:00 GMT"},"fingerprint":{"sha1":"30:27:D8:5A:59:AD:E2:2E:0E:9D:6A:5B:1B:BF:60:BE:D2:80:8B:DF","sha256":"A9:DE:14:B5:E6:07:9A:21:0C:4B:AC:5D:B3:F1:DB:EB:1F:27:9B:A9:C9:AD:51:72:F0:5B:0D:91:81:C1:D3:6D"}}},"request":{"raw":"GET /images/0/5/feb973bc10a9e2886d1b66a7a756b710b4e3d6/main.webp HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: cookie_user_id=a3478f5e-53f5-5f37-994f-8bde9a7ba683; bfq=APeIECNCx5YaOWbIkGEDRxcWIsYU3BLjoYgyE2PcaBgjxowcOGp06aMg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3762\r\nserver: nginx\r\nlast-modified: Mon, 20 Mar 2023 14:35:18 GMT\r\netag: \"64186f26-eb2\"\r\nx-robots-tag: noindex, nofollow\r\ncache-control: max-age=172800\r\nexpires: Mon, 12 Jan 2026 06:46:26 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: ds8138,DS9201\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3762,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 260x163, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"93e1a816acfa60a0020ece772ee7e008","sha1":"3d5afe50f284a7086a1a3456cf7351ecf90943ed","sha256":"5958ec892f2fe5c4c3a1b9489aeca2c5f2137d6369506f1b906e511c1a7993e3","sha512":"2a971ee8c36f0c4ed9e6cdea4033de2f13d77576728c24943104012fdd9877b540d0bbd8c7fd09b24f781f1185e4049f38cb5816e3804c09b7be124723dd006f","ssdeep":"","tlshash":"cb715c1d7dfc599a55f8f3117381afa3210e026b8ace0868026f541c59d12ff5b2d7c4","first_seen":"2023-04-07T05:09:52Z","last_seen":"2026-04-15T20:56:06.995645Z","times_seen":965,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/b.b.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.70","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:26.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Nov 2025 07:32:01 GMT","end":"Sat, 28 Feb 2026 07:32:00 GMT"},"fingerprint":{"sha1":"30:27:D8:5A:59:AD:E2:2E:0E:9D:6A:5B:1B:BF:60:BE:D2:80:8B:DF","sha256":"A9:DE:14:B5:E6:07:9A:21:0C:4B:AC:5D:B3:F1:DB:EB:1F:27:9B:A9:C9:AD:51:72:F0:5B:0D:91:81:C1:D3:6D"}}},"request":{"raw":"GET /sdk/v1/b.b.js HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: cookie_user_id=a3478f5e-53f5-5f37-994f-8bde9a7ba683; bfq=APeIECNCx5YaOWbIkGEDRxcWIsYU3BLjoYgyE2PcaBgjxowcOGp06aMg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 19 Dec 2025 13:51:37 GMT\r\netag: W/\"69455869-16d7\"\r\nx-robots-tag: noindex, nofollow\r\ncontent-encoding: gzip\r\ncache-control: max-age=172800\r\nexpires: Mon, 12 Jan 2026 06:46:26 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: DS9225,DS9201\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5847,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5783)","md5":"fa0d93d282f8683d19ac456c81debef0","sha1":"0d8b13271cdfd4e29a7c8763abf279297d2a84d1","sha256":"4a96c9570ebfa67dd93c6ea67b613e2bf108a4ad101342f33d4ab36a67198568","sha512":"94295f7da3b823de0d4961139a1c4e61ed232e4e087ffd29270d36fea950c82d870b0c359528375affb751f88ba642bda917a012c5080f6c2d409cb8ccf9fecf","ssdeep":"96:pJZEqoY9fBZeWGqHZvk++OIWtJxtomlGDWtVAQERhKBHYX1o4XT6:pJZmY9fBZeWGoZvkpOIWtloml0hq4L6","tlshash":"40c1d8bd6259f27580dd044b276bab64b7f60065bf238810e09e8c49357cf97c92acde","first_seen":"2025-12-19T14:41:02.491397Z","last_seen":"2026-04-16T19:36:05.830027Z","times_seen":776,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/032_air-eva.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/032_air-eva.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25475\r\nlast-modified: Fri, 29 Aug 2025 06:41:04 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b80-6383\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8NQc2A3GbCKRi2MOFqGNKdgFmhpQDIubT32bGhuc452Xwc1IjMvoqMAxXM9Vw%2B%2FcGS%2Bzfp4hZar8w%2B22%2F9AqUZf5x0KPXa%2BrzNiMD7i3wg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba378fda3c783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25475,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"c7bb9a7748d261f5e0af82ff358066b6","sha1":"3803fa9bfd6f400958bccd5e5f5b7f38d1f7ac9f","sha256":"d0c4c0a09d81df85d7184cd7b54f61da3f848b238d5efdc1c859d892746f9815","sha512":"95a50fb1e927f63a616f028458f2d17904967049270da06c58f7d135e4bcf17afae79b857053ed9ac38fd381149acd497db39470d3b85bf14e1aeedc554afad7","ssdeep":"768:yhdKI82JCnZYAKA09RGXg2YxPPuxqrCzzVG:yhcp2STKn9RMYxPPuZ4","tlshash":"cbb2e1f32a2a6329b86e3003a125ee9b678dc4c87b3ae110145fe0c5df5b6c6c59614f","first_seen":"2025-10-31T12:17:26.873735Z","last_seen":"2026-04-12T14:36:08.262369Z","times_seen":23,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":115,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/bi.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.70","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:25.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Nov 2025 07:32:01 GMT","end":"Sat, 28 Feb 2026 07:32:00 GMT"},"fingerprint":{"sha1":"30:27:D8:5A:59:AD:E2:2E:0E:9D:6A:5B:1B:BF:60:BE:D2:80:8B:DF","sha256":"A9:DE:14:B5:E6:07:9A:21:0C:4B:AC:5D:B3:F1:DB:EB:1F:27:9B:A9:C9:AD:51:72:F0:5B:0D:91:81:C1:D3:6D"}}},"request":{"raw":"GET /sdk/v1/bi.js HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 11 Nov 2025 11:07:54 GMT\r\netag: W/\"6913190a-1e16\"\r\nx-robots-tag: noindex, nofollow\r\ncontent-encoding: gzip\r\ncache-control: max-age=172800\r\nexpires: Mon, 12 Jan 2026 06:46:25 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: DS9225,DS9201\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7702,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7623)","md5":"0f2df2696dec627783d1eb7170feea2d","sha1":"37e2e42f854e007185c942897b2a55e5d06a52eb","sha256":"45d1b15de00ad4e8b8551c7144dde989af93e1c9f3f91c514e3dc99545ef0ebd","sha512":"98e561b81de15c6d0f7269a0608f3c8a42ada04b6941bbe54933d75875b0fad3a708025a085f950a45bbb18ee8859d9918144b56f58f30969e36d93b0b786183","ssdeep":"192:p3osvtOztEOzGSC6npKyxtuyMYeUYK7r62Fii4zTd4/iiL/u:p3VOt/1pKEheUFrCDzTd4/iaW","tlshash":"45f1f9fa758231a4996794a1c5afe61fb6387a15360f8c50c07af5823c78dcb9037e6c","first_seen":"2025-11-12T10:23:36.745664Z","last_seen":"2026-02-09T11:49:45.468172Z","times_seen":349,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/v1/api.php","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.245","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:25.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"POST /v1/api.php HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 669\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":669,"data":"{\"user\":{\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en-US\",\"referer\":\"https://hclips-porn.cfd/\",\"consumer\":\"ad-provider\",\"gdpr\":{\"gdpr\":0},\"screen_resolution\":\"1280x1024\",\"window_orientation\":\"landscape\",\"cookies\":[],\"scr_info\":\"YXN5bmN8fDM%3D\"},\"zones\":[{\"custom_targeting\":{},\"id\":1577786,\"extra_params\":{\"first_request\":true,\"zone_type\":2}},{\"custom_targeting\":{},\"id\":1577786,\"extra_params\":{\"first_request\":true,\"zone_type\":2}},{\"custom_targeting\":{},\"id\":1577786,\"extra_params\":{\"first_request\":true,\"zone_type\":2}},{\"custom_targeting\":{},\"id\":1577786,\"extra_params\":{\"first_request\":true,\"zone_type\":2}}]}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 10 Jan 2026 06:46:25 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://hclips-porn.cfd\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Authorization, Content-Type\r\nAccess-Control-Request-Method: POST\r\nSet-Cookie: __uvt=s%3A32%3A%220405a8a3eef143a6018d8c336564261b%22%3B; expires=Mon, 10 Jan 2028 06:46:25 GMT; Max-Age=63072000; path=/; domain=magsrv.com; secure; SameSite=None\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26104,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"34d7dea85bc9dc7355882ca5f9055a12","sha1":"d3920f6130ff72d777e73f39ea6b083b999d728d","sha256":"b24c6117e65d5dacd23b44a3b09b277667825fbcb6fb1ca3175f8fe633f91ec0","sha512":"5909df4d0b44f3d47e5eac74e741f4ce22987908285a7320a3bcb507012aa57665934f265dfa1e86026b3e510c4478a5e35d4c9e7ff454a1f1ce9119d9e28266","ssdeep":"384:6r0Liy9lor31SqgebljBdor31SgbAj63or0Li8Ib71KLQ+H:6wLnHo710ezdo71Zr3owLisQ+H","tlshash":"ffc2d93bfa8814e863a65f509ce73ffdd87c2006d3414eb16b84ba2593c86e14667339","first_seen":"2026-01-10T06:47:19.751433Z","last_seen":"2026-01-10T06:47:19.751433Z","times_seen":1,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":78,"dns":0,"connect":27,"send":0,"wait":85,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=281215","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:27.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 11:47:47 GMT","end":"Sun, 08 Feb 2026 11:47:46 GMT"},"fingerprint":{"sha1":"05:1E:63:2F:40:1F:87:C3:0D:F0:42:C7:EA:E8:B1:D8:6F:76:7C:FC","sha256":"1C:13:0E:F6:58:8A:8C:D7:DE:1F:9F:20:D5:17:50:15:02:D5:C8:8E:39:40:68:3F:01:24:F2:73:14:BA:25:0F"}}},"request":{"raw":"POST /fp?tag_id=281215 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 1971\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1971,"data":"{\"timezoneOlson\":\"UTC\",\"incognito\":true,\"fonts\":{\"value\":[\"Bitstream Vera Sans Mono\",\"Century\"],\"duration\":198},\"fontPreferences\":{\"value\":{\"default\":173.11666870117188,\"apple\":173.11666870117188,\"serif\":173.11666870117188,\"sans\":162.01666259765625,\"mono\":122.68333435058594,\"min\":10.800003051757812,\"system\":162.01666259765625},\"duration\":331},\"languages\":{\"value\":[[\"en-US\"],[\"en-US\",\"en\"]],\"duration\":0},\"colorDepth\":{\"value\":24,\"duration\":0},\"deviceMemory\":{\"duration\":0},\"screenResolution\":{\"value\":[1280,1024],\"duration\":0},\"hardwareConcurrency\":{\"value\":48,\"duration\":0},\"timezone\":{\"value\":\"UTC\",\"duration\":1},\"sessionStorage\":{\"value\":true,\"duration\":0},\"localStorage\":{\"value\":true,\"duration\":0},\"indexedDB\":{\"value\":true,\"duration\":0},\"platform\":{\"value\":\"Win32\",\"duration\":0},\"plugins\":{\"value\":[{\"name\":\"PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Chrome PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Chromium PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Microsoft Edge PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"WebKit built-in PDF\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]}],\"duration\":0},\"vendor\":{\"value\":\"\",\"duration\":0},\"cookiesEnabled\":{\"value\":true,\"duration\":1},\"colorGamut\":{\"value\":\"srgb\",\"duration\":0},\"rendererUnmasked\":{\"value\":\"\",\"duration\":79},\"brand\":\"\",\"device\":\"\",\"os_type\":\"desktop\",\"os_family\":\"Windows\",\"front_browser_family\":\"Firefox\",\"front_browser_name\":\"Firefox 134\",\"pixel_ratio\":1}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Sat, 10 Jan 2026 06:46:26 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nContent-Length: 58\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://hclips-porn.cfd\r\nSet-Cookie: id=6874119815748287373; Expires=Sun, 10 Jan 2027 06:46:26 GMT; Secure; SameSite=None\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c4efc1d6d16235d9433cd2565d887460","sha1":"22d069a5f536640e46122475c79db933e82d7f2e","sha256":"f0a6b8c736b7d8c5d3304a9ccd10d2114a0f25f2ba946cce62204df3384a131f","sha512":"af1cfe529f3173efdc7f4aff67355529095e775d8edb38d8a7c9565e09807aff470a465ffdf89ef6555f06cc88efa675823becc942896c63fa64a3140858f539","ssdeep":"","tlshash":"5ba00294c5c00e3c80200c3a73cf901628e4d304120217880ca66b5108822abe333c91","first_seen":"2025-07-26T17:44:43.174102Z","last_seen":"2026-04-16T21:16:41.124953Z","times_seen":6260,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flepquix.com/in/dip?event_id=22541fa4-e699-437c-8ccf-353ff6859bb8","fqdn":"flepquix.com","domain":"flepquix.com","tld":"com"},"ip":{"addr":"159.69.163.100","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:27.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"banner.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 01:51:50 GMT","end":"Mon, 09 Mar 2026 01:51:49 GMT"},"fingerprint":{"sha1":"15:BF:4B:65:46:08:22:8D:E9:38:46:3E:D4:56:B1:02:94:D7:17:A4","sha256":"84:24:50:A3:0F:03:EA:54:61:3B:C5:4D:33:7B:1D:61:84:80:E3:A6:B0:1F:90:D1:38:32:01:C5:35:7B:D2:F6"}}},"request":{"raw":"GET /in/dip?event_id=22541fa4-e699-437c-8ccf-353ff6859bb8 HTTP/1.1\r\nHost: flepquix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sat, 10 Jan 2026 06:46:27 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":105,"dns":26,"connect":29,"send":0,"wait":28,"receive":4,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.rdy.to/ytb/index.html","fqdn":"ads.rdy.to","domain":"rdy.to","tld":"to"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://rtbrenab.net/get/?go=1\u0026data=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","date":"2026-01-10T06:46:28.706Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ytb/index.html HTTP/1.1\r\nHost: ads.rdy.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.60ah.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/057_flannel-ruru-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/057_flannel-ruru-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21034\r\nlast-modified: Fri, 29 Aug 2025 06:41:35 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b9f-522a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r5Y%2FIjICt8GYiRjg1SfqyvuO84dIM4UQEliEYHhSmEaClfJ%2F3Ghj0cs%2BkRg8I3jRM6%2FdWtsuWIXYfTEc6zGNyHOvU97gVMf%2B4glgZ9Uaew%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba378ffa4d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21034,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"34d3c60cffea353df4a8919127b6f3df","sha1":"e5159a9cb5a833bab222b1387eb604ed55d5c75f","sha256":"650801f2f5eca088b72b3bc9f357418f8872c9eac684f61fa27ddd82b58173ee","sha512":"29c64ef751ce5a4d15ad868d211e4a357cc793a463a1f56ab462f51512e29d51ea84fa83040c84f70bd2330d7051f0e67a774e51604f04720fcce10802223430","ssdeep":"384:fFFbIHly+T3GlYjJ9AxbdFMPGyajHGrHu/ZUlLP1Wok6V57wBj4vez:f3T09gb8PKHGrOg9WZ4ajz","tlshash":"ec92e148742a395a82088538b9d2eaf527ef3da6f0c44e88a46975d2109eb1c82ad7d5","first_seen":"2025-10-31T12:17:27.062584Z","last_seen":"2026-04-12T14:36:08.231063Z","times_seen":27,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/072_hclips-couple-finalize.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/072_hclips-couple-finalize.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19666\r\nlast-modified: Fri, 29 Aug 2025 06:42:03 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bbb-4cd2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1NWBTHhiUGCGLetAamgQJaLteJiOP7LMXGe1nIuc3hjUA9yplTxwB%2Fv0YElUCqjfYBEGYyKekNsxv6Kr%2F2cHskJAlsKvSGHHPPvvg5q83Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37901a67783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19666,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"01a75b025d7a65fc1f2a5c298e23b368","sha1":"8c0a315f19905cf1c88337687f2ffafc49472020","sha256":"908b4dc1eb2e5a27e58ee9fc30e287ee5ec6904f301c64d9fe43e5f71cb882f8","sha512":"dd99024e069bcebb58a5044afe4a6368d30eee1e3546b8d70a4a9d833b6dad7b6804eabeac9a93b0816b4d5062214d0be31c092fcec1a5af94b9cbfe0fb3d3fd","ssdeep":"384:w7U44GcoAcNzghMzn4MVstKLmsomcvV7UC/Jt1rgDs+jSRGVl/B6:uco9jTba8mssvRbb2DHO8Vl/B6","tlshash":"f192e09d72ec91f0cbbde1b9a6393328539d303946df5193c20229d5450ace68ade64c","first_seen":"2025-10-19T03:23:59.117959Z","last_seen":"2026-04-12T14:36:08.269239Z","times_seen":29,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/076_x1x839ded11226993ddcd-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/076_x1x839ded11226993ddcd-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 26098\r\nlast-modified: Fri, 29 Aug 2025 06:42:09 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bc1-65f2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nw53ve6RT7NRzGHKyWV8vEWOXvuFFdkxCsM8BgZ746S6ZBy6x94i8Qf%2FAsJ5LH4RYR6Shz5YChb8FxLuALosFfOuQmCbHRJeLsaPv953Zw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37905a9b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26098,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 640x639, segment length 16, baseline, precision 8, 400x300, components 3","md5":"471a0082550b1ac18530393cda46474f","sha1":"69efd02d487dd14126441ab2a382eb0c2aa420d1","sha256":"77bfd6967be7ed04e9107fcc08a3ee70a98837458aee073de46225485944800e","sha512":"d903927112a21d5064d18dce54ab19633548c72e27d72a40384aea3b14301702345525edff16eb828c515e1122ccfde3c6756a1c11c9dc426ceacd7304915e01","ssdeep":"384:3kLqKnKrZCTrEOuMxiIp3bQ+v8kCNc/H4NamuS6ORAWYF08famtX2m42hV:3kQNOu7I5bafpQ26OzsamEmtV","tlshash":"eec2d00e4a8d0c16c9a6f8361869a7f17d1d3ef0520a1269b5397cf59c762eb0c4fe89","first_seen":"2025-10-19T02:15:17.185838Z","last_seen":"2026-04-12T14:36:08.207488Z","times_seen":30,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/favicon.ico","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:25.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:26 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ss6ZKEGDlM2jFrAGCVSkS4AZ5jPAkRUYxp5L4fqN3HOCg8QnMGZwCuTx3j4R5npLbawRg5X4r1ZKeThGY%2F90%2BGEexu%2FhzXLMeY%2Fni1VDVQ%3D%3D\"}]}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bba379c3bdd783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-04-16T21:11:50.45712Z","times_seen":489418,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/027_put.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/027_put.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 29966\r\nlast-modified: Fri, 29 Aug 2025 06:40:59 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b7b-750e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6y1PmA7iFeJlR%2BwcxP2PyIQbZZvWodgE8IDcjJwGNoWT17URYD8tW9eepv7iDwVYaat9PlqKyoGe7Ub0tsJjY7UjeKtVzAyuxrk878hdiw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba378fda3e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29966,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"8990800af4d5e999267db5d7e8a5eb0f","sha1":"4210c6adb0ad51b57dff0ecee3693a670fe6db33","sha256":"67d144103bba425e3a9ff1a87a38391265795ee7a76bb07b5583002767692e30","sha512":"8bd171b4a915f9cee6a5381e9e7f9ece75a287beb4db097dc9f0e27670a4136ab15f9104d4b427e28ec600ffe5012b5734434023d7875d05052c3d350ce9bbf4","ssdeep":"768:YeHJFu1w2g4WAIAgFp9ESRuZomnnDWEhsoA7b:YepFu1jgdAIAgFrfRuZom16b","tlshash":"70d2f1eeb026ef1f504a04b9f0cb3679d87859c5e332e7e9854009f29167fa10d8e19d","first_seen":"2025-10-31T12:17:27.058144Z","last_seen":"2026-04-12T14:36:08.201637Z","times_seen":13,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.uuidksinc.net/match/1924/?remote_uid=00cffe1d2ade5a87","fqdn":"s.uuidksinc.net","domain":"uuidksinc.net","tld":"net"},"ip":{"addr":"31.220.27.135","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:26.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uuidksinc.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 23:22:16 GMT","end":"Sat, 28 Mar 2026 23:22:15 GMT"},"fingerprint":{"sha1":"A3:04:43:DF:E7:27:A9:50:C2:BB:1F:85:9F:88:08:C5:EC:23:CE:9C","sha256":"0A:4A:19:47:D5:5B:1B:87:C8:B1:25:95:05:A5:F0:D5:1F:A1:A0:DE:36:53:90:85:15:21:1A:64:2B:18:4B:F0"}}},"request":{"raw":"GET /match/1924/?remote_uid=00cffe1d2ade5a87 HTTP/1.1\r\nHost: s.uuidksinc.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.23.2\r\ndate: Sat, 10 Jan 2026 06:46:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 74\r\naccess-control-allow-headers: X-Requested-With, Cache-Control, Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://hclips-porn.cfd\r\nset-cookie: jcsuuid=clNOboVkJ0LT86n8ywAv; expires=Sun, 10 Jan 2027 06:46:26 GMT; domain=uuidksinc.net; path=/; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.23.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":74,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced","md5":"9e24e19b024c44b778301d880bd8e6f4","sha1":"d2b1b39cb4434d34c22c2cf52cbbe9967b1b688e","sha256":"01b58ddb2f86a768f91751b62f25395417f6cf526191a4aefc1ebe4f8beacdcb","sha512":"4957e24a00b7ff54b350c33392560937e69ee5accf2e439781e27b4ac506eeeddef3bebd5d911185add175d648f4636dc5116e311b9c6c6ed34b842153e0b124","ssdeep":"","tlshash":"1ba022e22380fcbccc220033002003b0ceb0802808208e0f0c2c8c3a0800a0880cc383","first_seen":"2023-04-06T20:02:01Z","last_seen":"2026-04-16T19:52:42.10397Z","times_seen":6494,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":33,"dns":19,"connect":18,"send":0,"wait":19,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-fc.com/creatives/native/native.min.js?v=5.1","fqdn":"cdn-fc.com","domain":"cdn-fc.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=it7_v9mINZsY2FHHRd8f7idZL-DxISKYUEWDNYzup2TzCEm0_qr7AdVAPKWiR3qPIzth_TWtgQ1ya3AKUJlgD5NNIe-7ua_9YB6L9C6SgJXZhEA_gUIDRUi","date":"2026-01-10T06:46:27.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 05:59:35 GMT","end":"Sun, 01 Mar 2026 06:57:06 GMT"},"fingerprint":{"sha1":"1B:6D:8E:48:22:E7:FC:C2:4F:06:18:95:F0:8E:39:C2:A6:C8:47:2C","sha256":"DD:CF:71:A7:71:DB:68:1A:18:D5:6C:B8:43:76:78:71:E2:E1:0D:30:1E:09:92:A8:A5:4D:14:57:D3:66:8C:E5"}}},"request":{"raw":"GET /creatives/native/native.min.js?v=5.1 HTTP/1.1\r\nHost: cdn-fc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=it7_v9mINZsY2FHHRd8f7idZL-DxISKYUEWDNYzup2TzCEm0_qr7AdVAPKWiR3qPIzth_TWtgQ1ya3AKUJlgD5NNIe-7ua_9YB6L9C6SgJXZhEA_gUIDRUi\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 17 Dec 2025 09:37:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=3600, must-revalidate\r\nage: 2899\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qHScGhDbfg0JdEkO8b5isUhnh3v7XWxIzU3HjueSkWGVkJRd1CU5eHD6DIZnQzIXIYGEjGh%2FoXU3DAVON66uM3jDz2rm%2FEgk\"}]}\r\netag: W/\"694279ec-cb0\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9bba37a40f510b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3248,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3248), with no line terminators","md5":"19c5c52051e21a28734a741b7a193778","sha1":"0e0bb3d82ad35cd8fe2e598af684e6ef9d7dc753","sha256":"a8455faca19605edac1444e10992f037087aa3909c3cccc0ea18ea44ba4c0ff4","sha512":"de77df06b77d1ab2aa9e3ffcb7807dea6623aa94dd2109ad9094aea6d4f2adb6a62465e2ea7a151ec9abd3629bc1bd48609f6d1671f74a8ded1b72cf77900d01","ssdeep":"","tlshash":"c961d7c5d2c49933073532cf4953a675f67c8f06beaa8c50a60b4b8a8e15e458b17fa4","first_seen":"2025-12-18T11:49:00.846008Z","last_seen":"2026-04-16T18:41:19.866585Z","times_seen":525,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cdn-fc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/117_milf-hclips-runa.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/117_milf-hclips-runa.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22038\r\nlast-modified: Fri, 29 Aug 2025 06:43:07 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bfb-5616\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PPJ6k05FPx%2FugmhsUba7Ma4zISa%2B5eUHu68TlpSQwlKJaGsBEL9KlsxgQzyhtrx%2B2Im6NF%2BrkhA7aSGQvIYbYWVjLYreYUW4hvXgF%2F%2FRpg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37903a86783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22038,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"b7b085eca73e79f3f97d81468dff012a","sha1":"15b8f6a578b9c3c488408cb5e04e36c0054a0406","sha256":"8e55141ac89b756e5947555441b46e1899460ba9ad1c3037c867e4c7e1c664a5","sha512":"589592157d12ba4342aff352435139100ddc43dc44685213c811c63248a11dc70869557b3e9e0ad937512c5596ae2c4283db803c286f53a64b64305df6e40a0c","ssdeep":"384:4UN7SsitNlxoW46LazFMc+/Rvghjb8r1sn3BKpoFl:p5SsSNe6LWFM1/RuoV6Fl","tlshash":"67a2e02f390c8656ef62b1358091f9bedf594845b3e08f6d41dd20fb887dc682be2844","first_seen":"2025-10-05T06:05:59.959384Z","last_seen":"2026-04-12T09:57:49.983315Z","times_seen":28,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":119,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/111_x3x50c3d41c81af780d76-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/111_x3x50c3d41c81af780d76-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 29184\r\nlast-modified: Fri, 29 Aug 2025 06:43:00 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bf4-7200\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=68Y6ezV3IEnGPOoNuiuOTyONap09PcWigP%2Bg3sq%2BXHpp5oy1YbcIGdUWj%2FzdN3D2okXgR3gmIWcNhlsVJoxQ1dUqgy0laqic%2FC0HNJWB%2Fg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37904a8a783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29184,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 640x639, segment length 16, baseline, precision 8, 400x300, components 3","md5":"1b9041552a43e2d086cec185f60d5f67","sha1":"1b02a69c0665a302ffb3f3fac62179f5d37f591c","sha256":"ca2bd46f515c5200b2b7a46c247a3ce7335852c5d6b88b930db9ad09eb110f24","sha512":"aa74ed9dec9c5b4394aab738954e50a948be76e5bf1254108779006cff6e8438b92685d0fd80b26114d95637ec89ae9662791467e2db7a988a06297749a354c0","ssdeep":"768:XZfixdInv/dBOYXTPCuRRTRSULjIACvRTdfIj:JfiBQaYRTRPeZRAj","tlshash":"e1d2e138c5c3b34a479a171caa50eeadc25298f624949f66702d3ef77ab501096e702f","first_seen":"2025-10-05T06:06:00.187156Z","last_seen":"2026-04-12T14:36:08.193989Z","times_seen":32,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.cabnnr.com/banner-admanager/build.m.js","fqdn":"js.cabnnr.com","domain":"cabnnr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:26.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.cabnnr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 04:32:05 GMT","end":"Tue, 10 Mar 2026 04:32:04 GMT"},"fingerprint":{"sha1":"FB:8C:65:CE:0B:5E:7F:2E:C6:58:EB:3B:D2:6E:8E:7A:B7:B7:51:EF","sha256":"FB:93:6B:07:DC:2C:B3:38:60:36:C5:FC:E7:C7:DE:74:5A:F6:0E:4E:92:A5:72:F1:03:9F:FE:61:7A:ED:04:96"}}},"request":{"raw":"GET /banner-admanager/build.m.js HTTP/1.1\r\nHost: js.cabnnr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Thu, 18 Dec 2025 08:18:57 GMT\r\netag: W/\"6943b8f1-14bfe\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 10 Jan 2026 06:51:26 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: DS8137\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":84990,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"01903853e3410c57e30e0a7abc3c1f60","sha1":"094aa098801352ae39ce557b293e4eb0fc3eb6d1","sha256":"cf7169f391156797acf11a9da11225701c3ee3c16afebc35eeefa3fb25e8daf3","sha512":"146bd24d76c9a9050a3a68b7a6d85264812fd8b1e41e93c674fd7d80ec01ee246a1302fbb0e37945ec1c53fd67dc86603dea509f5d9464c25e20ece1d3e2ee03","ssdeep":"1536:7aNtpnDTPupIDxZJBpqgiZMZLUyzOBR6mXIEFWDDIYA:709DTP9PpqSL3bmLIE","tlshash":"4b836b843290b4b541e640afa43f430af3392d06b80b9458f16dede67b79e896176f39","first_seen":"2025-12-18T08:41:29.003596Z","last_seen":"2026-01-19T12:53:12.730062Z","times_seen":453,"resource_available":true,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":12,"connect":110,"send":0,"wait":107,"receive":0,"ssl":116},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/082_bikini.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/082_bikini.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23233\r\nlast-modified: Fri, 29 Aug 2025 06:42:18 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bca-5ac1\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lIELr5DRspxKOW54n0MNRlOZA1jNe%2FBjxWP8rJa6WjcGvcshcy6OTBqpJINNXy21uq%2FawNHZmqJTebbmO3vEk23PJGUFTnZBNKUaux5iig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba3790baac783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23233,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"b2b5bfe3e317b08510770106627a1154","sha1":"c1ef67ce995dba15b9be7d3bcf6f02e9cd24c346","sha256":"dd6624ecc04ac4da201eabd11ac412a2217f66e1c9f4e13036a48eb0792f65b3","sha512":"55ca5faf5b561a99b437c2de3d3130a3918c2aa97706981018a4bf7fc56150f07ffa7f24b767b723f477ac6df0b39bd37f7052687515e061e1ad86a57c260f2a","ssdeep":"384:ihDLJobMiJxh5SdoBktpOqhBbjiFfJRUXYXBg02sc+RZdUKoGqyXyg0:kDUMi7hOFb5NOROQNFrfdrlX4","tlshash":"f8a2e14a79f0ba93f0e4d1eaeb75d521470c16a306d23f8b149c939ce669381dec374a","first_seen":"2025-10-05T21:57:54.201211Z","last_seen":"2026-04-12T14:36:08.215335Z","times_seen":31,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.capndr.com/advertising.js","fqdn":"js.capndr.com","domain":"capndr.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:25.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.capndr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Dec 2025 02:32:13 GMT","end":"Thu, 12 Mar 2026 02:32:12 GMT"},"fingerprint":{"sha1":"5D:9C:D7:15:7D:69:8C:F7:40:12:0E:10:F1:FF:68:59:A6:F6:E2:38","sha256":"7D:0B:09:36:73:70:FE:A2:CB:1A:80:52:3B:1A:C0:0D:64:38:DA:DC:AB:9E:7A:95:F4:55:F2:6A:A4:F0:A8:FE"}}},"request":{"raw":"GET /advertising.js HTTP/1.1\r\nHost: js.capndr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 0\r\nserver: nginx/1.18.0\r\nlast-modified: Fri, 14 Jul 2023 08:23:25 GMT\r\netag: \"64b105fd-0\"\r\nexpires: Sat, 10 Jan 2026 06:51:25 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1747\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"js.capndr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btds.zog.link/in/912/?sid=1433671\u0026source=1567158389\u0026idzone=0\u0026w=300\u0026h=250\u0026mo=\u0026ve=\u0026site_id=1433671\u0026utm1=\u0026utm2=\u0026utm3=\u0026utm4=\u0026ad_tags=HCLIPS-PORN%2CHD%2CXXX%2CCLIPS%2CVIDEO%2CTUBE!,\u0026spot_id=1433671\u0026p=https%3A%2F%2Fhclips-porn.cfd%2F\u0026katds_labels=\u0026btype=0\u0026score=1\u0026bf=0\u0026dr=hclips-porn.cfd","fqdn":"btds.zog.link","domain":"zog.link","tld":"link"},"ip":{"addr":"109.206.176.75","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://rtbrenab.net/get/?go=1\u0026data=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","date":"2026-01-10T06:46:27.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"btds.zog.link","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 03:04:31 GMT","end":"Mon, 02 Mar 2026 03:04:30 GMT"},"fingerprint":{"sha1":"E3:CA:E2:3A:C3:2A:3C:9E:BB:1F:E2:48:81:39:7D:B0:83:96:BC:BF","sha256":"C4:5D:E7:FC:89:A6:79:AA:4A:42:91:82:0A:FD:5F:05:4C:02:FB:54:DF:E6:CE:B2:52:42:B7:A1:3F:FC:4D:72"}}},"request":{"raw":"GET /in/912/?sid=1433671\u0026source=1567158389\u0026idzone=0\u0026w=300\u0026h=250\u0026mo=\u0026ve=\u0026site_id=1433671\u0026utm1=\u0026utm2=\u0026utm3=\u0026utm4=\u0026ad_tags=HCLIPS-PORN%2CHD%2CXXX%2CCLIPS%2CVIDEO%2CTUBE!,\u0026spot_id=1433671\u0026p=https%3A%2F%2Fhclips-porn.cfd%2F\u0026katds_labels=\u0026btype=0\u0026score=1\u0026bf=0\u0026dr=hclips-porn.cfd HTTP/1.1\r\nHost: btds.zog.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.20.1\r\ndate: Sat, 10 Jan 2026 06:46:27 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nlocation: https://cdn.60ah.com/b/banner_dev.html?source=1567158389\u0026w=300\u0026h=250\u0026id=1433671\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nvary: *\r\nset-cookie: 912.0=1; expires=Sun, 11 Jan 2026 06:46:27 GMT; path=/; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2606,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":14,"dns":21,"connect":38,"send":0,"wait":24,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afrdtech.com/v1/script.js?kmnrKey=239040355","fqdn":"afrdtech.com","domain":"afrdtech.com","tld":"com"},"ip":{"addr":"31.220.27.154","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.60ah.com/b/banner_dev.html?source=1567158389\u0026w=300\u0026h=250\u0026id=1433671","date":"2026-01-10T06:46:28.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afrdtech.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Oct 2025 10:13:45 GMT","end":"Sun, 18 Jan 2026 10:13:44 GMT"},"fingerprint":{"sha1":"36:C0:A3:65:FA:F3:BE:60:5E:FB:4A:07:B1:25:84:57:D1:80:FD:B1","sha256":"D0:4F:77:FD:EF:29:9C:9A:26:DF:FE:81:37:65:5C:99:B2:88:E0:FA:82:4A:14:02:45:70:2D:FD:5F:BC:22:40"}}},"request":{"raw":"GET /v1/script.js?kmnrKey=239040355 HTTP/1.1\r\nHost: afrdtech.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.60ah.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 06:46:28 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\naccept-ch: Width, Viewport-Width, DPR, Device-Memory, Downlink, RTT, ECT, Save-Data, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version\r\naccess-control-allow-headers: X-Requested-With, Cache-Control, Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50643,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32694), with CRLF line terminators","md5":"2f381d35003241d2f2b05d11d1b5b936","sha1":"be5ac6c2d2859e19c50ea385b3371872c343f948","sha256":"c4f6d32027a300e7d30527ec293f5abd893b6ad6c59893d948f04c08cfdb7dac","sha512":"3f1fc8fd9c1cf06e0ea4a10b8aff9ea76cd3f1e16cbebb35ee8b4ca0f4fa4ea863e5d98e64f76a38b2994ea4e497873b7e98b9b0e1fb42b13a885ce2e43c2a69","ssdeep":"768:6YLCnCAt9PEqlSUZOq2Q5qS54vzQsHNk6qeBT1svGraiRJRXHBZV/D:6FPp92QEtLceBRs+rhJR3BZVb","tlshash":"96332bae76a6a42490b7217a403f7605f13e1e6ad50484d0e566ccc03de9f8b6127ffd","first_seen":"2025-12-10T23:32:32.446523Z","last_seen":"2026-01-13T12:38:38.959583Z","times_seen":183,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":81,"dns":24,"connect":17,"send":0,"wait":43,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/017_completed.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/017_completed.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:23 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 40835\r\nlast-modified: Fri, 29 Aug 2025 06:35:48 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14a44-9f83\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9TalLDwWY%2FsqCZNA8bRNSKwTiYp8dUTwmHnJr348HcgXVzVw3GMF6nI1TO0X9w8gTgWUDFFWLx3Fo0wBLI9tGr%2BztQyGQ0m2a6eBMoNtoA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba378fca2b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40835,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"97499686e399ded00ca4f3e9805f6dce","sha1":"d32c5ebb69ace8cc68f2f0bcafeea331fd1347d6","sha256":"89028613924f3f8802ff9ff2115fc3732ca64b5e503600b75bb805a5add47ae7","sha512":"c375282eeac1fccf35d89c70a0fb1c8902376ede7f13543d7612ece5a5d11e65b137df9d37bb2f57674611c111c30800cbdcec6606018d51a64156c174879b3a","ssdeep":"768:CBhymfA3UEryGbsuRxOZQqRO3x4t2RGSf9G0bQlQiRm7KmrYAQBmDOEn:Crvo3UtuRxiRY3+gk+9UmiqDrY8/n","tlshash":"e903e1348e8c8e494a98487446484b5293ebd109743bfbcebd3c67cdc20a9f975e88e5","first_seen":"2025-10-05T06:06:00.145461Z","last_seen":"2026-01-10T09:02:32.772982Z","times_seen":7,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/060_x-tinker.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/060_x-tinker.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17712\r\nlast-modified: Fri, 29 Aug 2025 06:41:38 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14ba2-4530\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nCcZcKqlJaja6DMy%2B8DLehbLP%2BEAG1UODC025Td%2BPxADXG4BZFRmzLnd1FWtAbT0I%2BqZ2v%2BkCpH1VZGAUAw56vhDmQGpbxxL66tnvMCkIQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37901a61783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17712,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"5c179c78ce50491b440347b758b0cfde","sha1":"7ccdde388523d38a7f812203fd743838d543d912","sha256":"fb59f0ed4706e37f20e90dff6287da0e4f027e4713445422b51dc2c4ea47521f","sha512":"f0dbf5369b23c0e48e5bbc5d24fb058cf7d681209a5cdf299d032bbe762de0c59389716a050c712106d154ba1e9243f283e136d4154ec021e62633708423298b","ssdeep":"384:e/TbKF1/3mIvJ1eIi1WakfMBr0ZM8IahIYT7t4M1:kbKHWUeaakkV0ZMBad/t4W","tlshash":"d982c0ded559f63bcd343d23e1426d4070aa808114e81bad4556148af7bdede4ec68c9","first_seen":"2025-10-31T12:17:27.190936Z","last_seen":"2026-04-12T14:36:08.243684Z","times_seen":26,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=281437","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:27.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 11:47:47 GMT","end":"Sun, 08 Feb 2026 11:47:46 GMT"},"fingerprint":{"sha1":"05:1E:63:2F:40:1F:87:C3:0D:F0:42:C7:EA:E8:B1:D8:6F:76:7C:FC","sha256":"1C:13:0E:F6:58:8A:8C:D7:DE:1F:9F:20:D5:17:50:15:02:D5:C8:8E:39:40:68:3F:01:24:F2:73:14:BA:25:0F"}}},"request":{"raw":"POST /fp?tag_id=281437 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 1972\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1972,"data":"{\"timezoneOlson\":\"UTC\",\"incognito\":true,\"fonts\":{\"value\":[\"Bitstream Vera Sans Mono\",\"Century\"],\"duration\":472},\"fontPreferences\":{\"value\":{\"default\":173.11666870117188,\"apple\":173.11666870117188,\"serif\":173.11666870117188,\"sans\":162.01666259765625,\"mono\":122.68333435058594,\"min\":10.800003051757812,\"system\":162.01666259765625},\"duration\":212},\"languages\":{\"value\":[[\"en-US\"],[\"en-US\",\"en\"]],\"duration\":0},\"colorDepth\":{\"value\":24,\"duration\":0},\"deviceMemory\":{\"duration\":0},\"screenResolution\":{\"value\":[1280,1024],\"duration\":0},\"hardwareConcurrency\":{\"value\":48,\"duration\":1},\"timezone\":{\"value\":\"UTC\",\"duration\":23},\"sessionStorage\":{\"value\":true,\"duration\":0},\"localStorage\":{\"value\":true,\"duration\":0},\"indexedDB\":{\"value\":true,\"duration\":0},\"platform\":{\"value\":\"Win32\",\"duration\":0},\"plugins\":{\"value\":[{\"name\":\"PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Chrome PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Chromium PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Microsoft Edge PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"WebKit built-in PDF\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]}],\"duration\":0},\"vendor\":{\"value\":\"\",\"duration\":0},\"cookiesEnabled\":{\"value\":true,\"duration\":0},\"colorGamut\":{\"value\":\"srgb\",\"duration\":1},\"rendererUnmasked\":{\"value\":\"\",\"duration\":43},\"brand\":\"\",\"device\":\"\",\"os_type\":\"desktop\",\"os_family\":\"Windows\",\"front_browser_family\":\"Firefox\",\"front_browser_name\":\"Firefox 134\",\"pixel_ratio\":1}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Sat, 10 Jan 2026 06:46:26 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nContent-Length: 58\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://hclips-porn.cfd\r\nSet-Cookie: id=16577655401497947535; Expires=Sun, 10 Jan 2027 06:46:26 GMT; Secure; SameSite=None\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c4efc1d6d16235d9433cd2565d887460","sha1":"22d069a5f536640e46122475c79db933e82d7f2e","sha256":"f0a6b8c736b7d8c5d3304a9ccd10d2114a0f25f2ba946cce62204df3384a131f","sha512":"af1cfe529f3173efdc7f4aff67355529095e775d8edb38d8a7c9565e09807aff470a465ffdf89ef6555f06cc88efa675823becc942896c63fa64a3140858f539","ssdeep":"","tlshash":"5ba00294c5c00e3c80200c3a73cf901628e4d304120217880ca66b5108822abe333c91","first_seen":"2025-07-26T17:44:43.174102Z","last_seen":"2026-04-16T21:16:41.124953Z","times_seen":6260,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2830fe954a.d88b2835c6.com/in/multy","fqdn":"2830fe954a.d88b2835c6.com","domain":"d88b2835c6.com","tld":"com"},"ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:27.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d88b2835c6.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 14:04:20 GMT","end":"Mon, 06 Apr 2026 14:04:19 GMT"},"fingerprint":{"sha1":"19:7E:14:5C:52:F5:58:1B:92:F8:BC:EE:8A:81:46:3B:40:CF:48:B7","sha256":"21:D0:B6:E8:BD:CA:35:15:D3:F6:42:8D:1F:1A:A9:4A:6C:4F:0E:49:FC:70:1C:E2:2B:58:63:F0:FA:AE:09:71"}}},"request":{"raw":"OPTIONS /in/multy HTTP/1.1\r\nHost: 2830fe954a.d88b2835c6.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://hclips-porn.cfd/\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.24.0\r\ndate: Sat, 10 Jan 2026 06:46:27 GMT\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":115,"dns":30,"connect":25,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"2830fe954a.d88b2835c6.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/120_sexual-asian.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/120_sexual-asian.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24900\r\nlast-modified: Fri, 29 Aug 2025 06:43:12 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14c00-6144\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J3L3e3cc24yPFuIiw9EHD%2BYKyk5aN8%2BR3s%2BUFUUAjlXcABBuEudE1kUzY1CcZHyn%2FbpzLgPCJDkQx0ONSUcKA0EXAGeDO%2F0b3dJxA7aRZg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37904a89783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24900,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"eda5943d400fb8e8427867642534d288","sha1":"f838c488e3407379467d16d9f668b3fc78663429","sha256":"e09cc7dd0c614968a48cf77ec2695a73574966cf1c4ae1b8ef0c1161c23b1463","sha512":"23a9f73ae8ab34d1f0adfca4373ad2100b52a2f5b29c177ea5b09e4c503611a95e7ce6438ef5675e906ab8e433dc870b4eca651c3340d789fa4e128840ae85bc","ssdeep":"768:zLh36Tm18EUn+ZXL/on4jKQP6O1JYF+Kuwic:z92mGn+Z7/o4jKe6aQic","tlshash":"46b2e1ac50537e028cac4cb7e8696c7c46dc3f5eaee0142ad35f96ed834bae43128155","first_seen":"2025-10-05T06:06:00.065602Z","last_seen":"2026-04-12T14:36:08.229258Z","times_seen":31,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ntvpforever.com/keywords","fqdn":"ntvpforever.com","domain":"ntvpforever.com","tld":"com"},"ip":{"addr":"168.119.25.102","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:26.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 02:02:57 GMT","end":"Wed, 25 Mar 2026 02:02:56 GMT"},"fingerprint":{"sha1":"C4:80:D6:E8:F3:2B:FD:8A:89:D9:CF:8B:78:3F:74:35:34:B3:68:8A","sha256":"DF:07:A2:74:C6:6C:63:AA:37:DD:AA:4F:E0:F5:C5:D7:9C:B8:28:C4:9C:45:3F:F7:BC:1B:0A:AE:7F:38:FF:B1"}}},"request":{"raw":"POST /keywords HTTP/1.1\r\nHost: ntvpforever.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 96\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":96,"data":"{\"ad_tags\":\"HCLIPS-PORN%2CHD%2CXXX%2CCLIPS%2CVIDEO%2CTUBE!\",\"page\":\"https%3A//hclips-porn.cfd/\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sat, 10 Jan 2026 06:46:26 GMT\r\ncontent-type: application/json\r\ncontent-length: 27\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1341fc8c623c978d6890cef9af52fd7f","sha1":"d3e8f82270fce2fc541127bed30e155bd42ef731","sha256":"7147a5c81dc941513f607ae0f438b518ba07a8517efc9d5b8afe5f2d8312635c","sha512":"8acec287827731162abca523d86b49137d70ebea027be47f18f9e1924a2e28efc5b4191061a5498c512d1ca7dbacd0142b2ba7822cd5c91c4ce396285233ff2a","ssdeep":"","tlshash":"ff80000830ca0c038c88b00032008a202008a2c2a002bceca0a2280083002802208c0c","first_seen":"2025-08-20T10:26:40.019594Z","last_seen":"2026-04-12T14:36:08.221217Z","times_seen":145,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/109_agitate-subsidy-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/109_agitate-subsidy-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 30970\r\nlast-modified: Fri, 29 Aug 2025 06:42:57 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bf1-78fa\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ryDVjeQK0rpSxBvw1QtGDTycfXyjcQeL44xzf4iSv2KMVViwnIPe0evomPIc9GCFBMd99SCa7lCQsDiQJGal%2BdR4v3I9I8QCNhFP%2Bc1tUg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37902a7f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30970,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"320966c4abebb970bc7e73765833fc4a","sha1":"6195fa6220e8c30ace11f4101690ca4eec8f5c8f","sha256":"575b886464bfb13ee74dc0c9598db1cefee103439995aa5c0dbce4c80f6e4d09","sha512":"31fd348405f2d3b350d9a7f0e0634bab4de4667f4200ec9aed3628723d99c025e676351ddc56c190399cdc13eaac93e932c91bc73a33f7e4b68bbdf6d5b9c560","ssdeep":"768:aEfn/QtaWblK3aviYxKR/jIGiLdctlS13JhP:aEfn/QtpviYxKFtsAl43JhP","tlshash":"25d2f177587705b061ffdb9dc827f6041109a64b8f5a3b5e1a728ee0e01e8738ea450b","first_seen":"2025-10-19T02:15:20.107409Z","last_seen":"2026-04-12T14:36:08.200617Z","times_seen":28,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/122_cosplay-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/122_cosplay-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20844\r\nlast-modified: Fri, 29 Aug 2025 06:43:15 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14c03-516c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dwQdgVK7%2BGdUvjfiFGGYxvKsla0Msd8TGgYaS1%2BbNWDUCyzbLQM0V8wzhtThK0P%2BApnSy0xzo3NY1apu8z5xPRtpzWAoANaC84u0tqrLyQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37904a8d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20844,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"ad12fbe0ec75e9e9fd6a7acdbd7423cf","sha1":"1c2cb4706ab7638b782b723fb55b62a909de0620","sha256":"78a96cd9c703161fb42659830252618d609303d1354fea805ce85614d3fd4f78","sha512":"d9f7d01b99ee79ff00b64914c51a199471d204b859c739f7c4f493a382cc691beb9999cc99bd1475dcee6ad949bff06d496d61baee177900ff6a3065bfeac0e3","ssdeep":"384:WDVh2HwsiH+Nw5CUqlnTmBUmBgqIf1xV+KsfDgNGRgdcDUvTDlgpS22/NjnqBe:lHiG/9CBUMtI1j+FqHdplgXOJEe","tlshash":"7d92e0c134b08646ded4b1b4577356932e9a7d0c238ed7d0ae9258cf3025bb9b858836","first_seen":"2025-10-05T06:06:00.166282Z","last_seen":"2026-04-12T14:36:08.146322Z","times_seen":32,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-fc.com/creatives/universal/native/fonts/Roboto-Bold.woff2","fqdn":"cdn-fc.com","domain":"cdn-fc.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=tpZT2Wvf2_df9BAhCONE6OAxGRnrPPtZ69jjd1ix8uT89g5RkUZ7ZXXevlAflAxJkC5VxHxjBV87vsOxVIGGaIQ83PSus_2fkT6MwmnTb1ZytaQ_gUIDRUi","date":"2026-01-10T06:46:27.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 05:59:35 GMT","end":"Sun, 01 Mar 2026 06:57:06 GMT"},"fingerprint":{"sha1":"1B:6D:8E:48:22:E7:FC:C2:4F:06:18:95:F0:8E:39:C2:A6:C8:47:2C","sha256":"DD:CF:71:A7:71:DB:68:1A:18:D5:6C:B8:43:76:78:71:E2:E1:0D:30:1E:09:92:A8:A5:4D:14:57:D3:66:8C:E5"}}},"request":{"raw":"GET /creatives/universal/native/fonts/Roboto-Bold.woff2 HTTP/1.1\r\nHost: cdn-fc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=tpZT2Wvf2_df9BAhCONE6OAxGRnrPPtZ69jjd1ix8uT89g5RkUZ7ZXXevlAflAxJkC5VxHxjBV87vsOxVIGGaIQ83PSus_2fkT6MwmnTb1ZytaQ_gUIDRUi\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 06:46:27 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 63596\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 15 Dec 2025 17:20:27 GMT\r\netag: \"6940435b-f86c\"\r\ncache-control: public, max-age=3600, must-revalidate\r\naccept-ranges: bytes\r\nage: 2340\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l%2BJ9cEqQXwSZmMD6IjmZtEruRz3uGE2iuxgm899I1ltlaMbVSmLmkIKy2ah0gG%2BJb%2Bv24HraTC4FETUNZAFevWy6o94psVs%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9bba37a4bf8f0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63596,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63596, version 2.0","md5":"ab96cca26751239828b8e9c524cca5bb","sha1":"9074123ec9d4d6a7e21c2bee3f0110ca9a73733d","sha256":"6a57148ab4e668ab23194912a9d40f0b254a7dc4dd6391c6f039f079b22a3ed4","sha512":"afc4d398140df59387d75a6a6f13379c28c29774e32a16918f0b9d448943f8abbb01242741d41306c67340a6893737a1443ff15ef88094ac1994b895809db815","ssdeep":"1536:DqphAXbGzIwR7bhG9CdZTTfCeckI9VhEXrAEtanio:Dcyi7U0GjTPEXrArX","tlshash":"2153019793e47120bc53bb416e97a704710edfe2039268a86807f4c32bdee535d5aa87","first_seen":"2023-04-10T11:26:03Z","last_seen":"2026-04-16T08:42:10.980997Z","times_seen":612,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"cdn-fc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/086_descendant.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/086_descendant.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22548\r\nlast-modified: Fri, 29 Aug 2025 06:42:25 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bd1-5814\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wDDhY6mpziLMh4MVJ95cANcy%2BYKhPIMk%2BbfDXpQnQEXp6R6%2FgL8grKROYXSOnz0JmvbxLB0Gfl58HE0OuuRnlUv%2BaHTfTqQ9PnNnd3sINQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37902a6f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22548,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"693ccb4edab1e32345010d6d9672e004","sha1":"acb5e5ccd6ed5a7e98bf4481e6c02b94e94d5418","sha256":"9dac39ec7642831beeca2d16758a4e1ccfa00903cba903001fd9694879746cb1","sha512":"18c2dd6709dc9bea92931e73092fe333216a0522ef1754e17b4c49c086f0077e1f91106b1e742ae2211203d25cd197a498b55e5446042f66b54311bb88694c39","ssdeep":"384:m4zi2SZ4rsHccHhaVrair/UD+4NePrOqCQNV2cntDYSeXwyE:mYSZ4YHhH4rr/UD+4IqqCcVLntDYSefE","tlshash":"fba2e1772787f2d5b79f0c9118414d26cd809a49bca9efa86d30b3ed3c20962936a5b4","first_seen":"2025-10-19T02:15:19.932851Z","last_seen":"2026-04-12T09:57:50.08955Z","times_seen":28,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/085_to.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/085_to.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19364\r\nlast-modified: Fri, 29 Aug 2025 06:42:23 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bcf-4ba4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 236697\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S18Cdtf5g2qluFj%2BftP%2FIWSU6Ub8oCseqB%2Bp48w7TEwvjuUxx8lFAOCbJ1%2FCxErldqtcHRftGdzRP%2BLyyGLiHkqZliGQR8Tv6bPH7gjH9Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba37902a72783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19364,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"2ce65ae99f4bd99fb815dd987c6535d3","sha1":"95aa1bcf3db7f9ad5800651e9a91a0d3d7cb2d40","sha256":"f2bd985495def91c994d039ef43f418a6a3ec55f1f3f50e55058fb64744d9338","sha512":"91120aa47e8b98a582c68a0d4f6c921c758b2d6bfd5eb82b3fa611874bf325c0370e6ea9ecfe4a0b42dd5a93e49663d50febfe734415c6b872dbd8f68ee85779","ssdeep":"384:vjzfMPId/aJ23aJf/wMObI/dwAnxhkrlxeRIjEnylJV:vPGsp3aJnmIuURIjEnyvV","tlshash":"c592d010c1fe6d4637a506958c26c420af0dcfefba01d2a8237c62d3b4a56be47571ad","first_seen":"2025-10-19T02:15:20.576707Z","last_seen":"2026-04-12T14:36:08.14058Z","times_seen":27,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/015.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:24.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 02:32:03 GMT","end":"Wed, 18 Mar 2026 03:29:38 GMT"},"fingerprint":{"sha1":"46:9D:B4:4A:EF:43:A8:65:E5:43:22:BF:97:1D:22:95:48:B5:64:10","sha256":"6A:BE:B3:3B:25:C2:59:2C:D6:2A:B0:61:E7:94:F5:FE:2B:5E:10:9A:6C:47:10:71:52:92:A0:BC:7B:F1:49:83"}}},"request":{"raw":"GET /jpegs/237/015.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1768027583; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 10 Jan 2026 06:46:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17238\r\nlast-modified: Fri, 29 Aug 2025 06:35:44 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14a40-4356\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5B70YGNLiz%2By0q79AtwNOVsCLY8Jq62H3tFAtKN9F831sSL%2B%2FHt9dJ4NOaizbCTitLeFlcZMHX3%2BINnA2psd9wwW4kmaK2QZYNolgUj8iA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bba3790dab0783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17238,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"db009a70e50f16389294d6795a09cd67","sha1":"adb2a896f39e7da12470947c3aed6bd199b9c844","sha256":"744d30c840e7a71a60654f60ee0531b20e541fa5a4ca3477d1e541ac6d29252b","sha512":"eb1178dc6e5a84eee3081845de2ac5770656dac2116d1a0de78c0b405b21e8faa0967519d44457b31a0eee8b0cf681650c096b0ace3d1e5ed68733b4ab688e9a","ssdeep":"384:s0G1wOj5fYzWCzAR/O9Q9JKGRqUbXFynUS2Ak7Bv6DC:s0GzYzFAR4yqUb1yn523B9","tlshash":"8872cf129f4a6fc16fc528b66c121a9ba828f329351545a4cfaa36ef5bad8073078c54","first_seen":"2025-10-31T12:17:27.206372Z","last_seen":"2026-01-10T09:02:32.846568Z","times_seen":4,"resource_available":false,"data":null}},"time_used":354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.adspector.io/sync?ssp=44","fqdn":"a.adspector.io","domain":"adspector.io","tld":"io"},"ip":{"addr":"104.21.15.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://hclips-porn.cfd/","date":"2026-01-10T06:46:27.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"adspector.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 03:16:35 GMT","end":"Wed, 11 Feb 2026 04:14:56 GMT"},"fingerprint":{"sha1":"70:93:AE:0A:86:B3:EC:6A:26:43:0C:59:15:5C:6D:1C:C5:C6:F8:11","sha256":"16:49:F6:10:DA:6C:F1:EC:DB:5E:3C:6B:52:FE:1B:B8:2A:EC:A0:D1:73:71:15:1E:94:F3:29:C7:95:AB:81:A3"}}},"request":{"raw":"GET /sync?ssp=44 HTTP/1.1\r\nHost: a.adspector.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sat, 10 Jan 2026 06:46:27 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JKdYMZu2G2dM%2BX6uaML34hnyQ8eDSUmxwwdVlNmEdTaq5BiohrlR2JH3%2Ff%2Bji8a309gBBvkk0zOS1BUpwqoR%2BkKUt6S%2F7FXAzwsy9Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9bba37a49e14569b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":44,"dns":20,"connect":5,"send":0,"wait":16,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}