{"report_id":"458f6056-434f-4e09-ab34-a4daef6b94b0","version":6,"status":"done","tags":[],"date":"2025-10-18T22:35:14Z","url":{"schema":"http","addr":"www.iyoteen.cc/","fqdn":"www.iyoteen.cc","domain":"iyoteen.cc","tld":"cc"},"ip":{"addr":"104.21.84.240","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"iyoteen.org/","fqdn":"iyoteen.org","domain":"iyoteen.org","tld":"org"},"title":"Iyoteen - Watch Free Content from 18+ Pinay Teen Creators"},"submit":{"url":{"schema":"http","addr":"www.iyoteen.cc/","fqdn":"www.iyoteen.cc","domain":"iyoteen.cc","tld":"cc"},"ip":{"addr":"104.21.84.240","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-22T22:35:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"playhubconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"crumpetprankerstench.com","ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-03-12","domain_rank":118194,"first_seen":"2025-04-22T06:37:42.658404Z","last_seen":"2025-10-15T06:56:19.694921Z","alert_count":0,"request_count":5,"received_data":319530,"sent_data":3815,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pinayok.com","ip":{"addr":"104.21.24.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":266175,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":4,"received_data":157775,"sent_data":2285,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}]},{"fqdn":"playhubconnect.com","ip":{"addr":"104.18.15.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-09-25","domain_rank":18094,"first_seen":"2024-10-01T12:19:44Z","last_seen":"2025-10-13T05:59:48.125373Z","alert_count":9,"request_count":9,"received_data":1847415,"sent_data":4635,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"www.guidepaparazzisurface.com","ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-03-12","domain_rank":0,"first_seen":"2025-10-17T18:20:34.583428Z","last_seen":"2025-10-17T18:20:34.583428Z","alert_count":0,"request_count":9,"received_data":2136438,"sent_data":4851,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.iyoteen.cc","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-30","domain_rank":0,"first_seen":"2025-10-18T22:35:17.509957Z","last_seen":"2025-10-18T22:35:17.509957Z","alert_count":0,"request_count":1,"received_data":235028,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"iyoteen.org","ip":{"addr":"104.21.45.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-12","domain_rank":0,"first_seen":"2025-10-18T22:35:17.509347Z","last_seen":"2025-10-18T22:35:17.509347Z","alert_count":0,"request_count":31,"received_data":8116629,"sent_data":19834,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Elementor:3.29.2","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"PHP:8.3.23","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]},{"fqdn":"guidepaparazzisurface.com","ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-03-12","domain_rank":51755,"first_seen":"2025-04-29T00:57:48.054581Z","last_seen":"2025-10-10T22:35:47.265689Z","alert_count":0,"request_count":21,"received_data":394341,"sent_data":17811,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"iyoteen.org/","fqdn":"iyoteen.org","domain":"iyoteen.org","tld":"org"},"ip":{"addr":"172.67.217.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"3127b5d41c2c6f5647c254388377c793","sha1":"4975414df54afdf733cb1f794386a1ab7f4e650c","sha256":"365e6b4b247bab7bc4ad9f20eae6fd55ddf875b533b031c493de52d00548dc4f","sha512":"fc18c083f265b9d64b1e42cdf202a1630f4dad2b35014edfef37451f146d4fe07168e3d9be923860d7c2bf22e611a8ddb33132f049dec301ad3ee01d8c839831","ssdeep":"","tlshash":"955000000000000000300000300c0003000c00f0300300000000000000f0f000030003","size":9,"data":"","first_seen":"2025-06-28T20:31:08.933141Z","last_seen":"2026-01-22T19:44:20.1748Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crumpetprankerstench.com/get/2076125?id=2076125\u0026jp=_cljlvopzfycnaufhvwpciy\u0026dr=49\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.614-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=NaE7Io-7bsPCYB1tniq6Br1s\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=Yw43kvvaHR0cHM6Ly9peW90ZWVuLm9yZy8\u0026afid=6026372061805056\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=0\u0026dto=2\u0026pload=794\u0026rlp=%5B0%2C116%2C112%2C65%2C40%2C525%2C141%2C444%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0","fqdn":"crumpetprankerstench.com","domain":"crumpetprankerstench.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd867ab801d59f3ee170e7ca448abe53","sha1":"d86d350f88717f956225c7ed99878e2467de2a2f","sha256":"dde4a40bfac999f1330891966592ab5e78450e327555f8ddc08f4779408fc8b1","sha512":"b90140a8a5f75d1ea404a99ab0ac3e191ad306f35513ac00d7998b9f148acfbc230168a888922846ab1075d30f3efa635da4858a49e37d047f0833b223995548","ssdeep":"","tlshash":"1361761d009ca4f790dd97ec1a6b7d1ef580362f9d238e1ceb98e75319722b10672942","size":3192,"data":"","first_seen":"2025-10-18T22:35:26.823034Z","last_seen":"2025-10-18T22:35:26.823034Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guidepaparazzisurface.com/get/2071060?id=2071060\u0026pid=__clb-spot_2071060_cmf_2\u0026jp=_clkaelnlmzhkcwqnmegffy\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.614-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=NaE7Io-7bsPCYB1tniq6Br1s\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=xAqniYuaHR0cHM6Ly9peW90ZWVuLm9yZy8\u0026afid=2648672341339136\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB\u0026vp=0\u0026dto=2\u0026pload=429\u0026rlp=%5B0%2C3%2C26%2C22%2C22%2C73%2C58%2C73%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=6\u0026uf=0\u0026freq=0","fqdn":"guidepaparazzisurface.com","domain":"guidepaparazzisurface.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7352045008ba78ebff645fd0fe324244","sha1":"57b8ffa8b6c208262571e8f9df0f4c52a7186644","sha256":"a59d5a48cad17253b152606dbd67f53317be56970dd76e3633df5a38381d1a6a","sha512":"9fa9cf07de9fdaf38859ed263d63cc331dd153adc8ab8b6f7a542ca78432196646dff1403ac8e9de67734549974662c636bdf1d2f529d2f76460c6a63534e035","ssdeep":"96:WoV7gkjPbvMV7gkjPb8V7gkjPbPmV7gkjPbmIpwQEpKW329NBgijo:SSJSpSTSbNEpKMSBzjo","tlshash":"06a1f92471c96154e983818c416d2d57319a50ae6cd2ab5413bfc6f703cccb91eb3d06","size":5054,"data":"","first_seen":"2025-10-18T22:35:26.742748Z","last_seen":"2025-10-18T22:35:26.742748Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guidepaparazzisurface.com/get/2071060?id=2071060\u0026pid=__clb-spot_2071060_eqi_3\u0026jp=_clkaelnlmzhkcwqnmegffy\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.614-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=NaE7Io-7bsPCYB1tniq6Br1s\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=xAqniYuaHR0cHM6Ly9peW90ZWVuLm9yZy8\u0026afid=2648672341339136\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB\u0026vp=0\u0026dto=2\u0026pload=429\u0026rlp=%5B0%2C3%2C26%2C22%2C22%2C73%2C58%2C73%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=6\u0026uf=0\u0026freq=0","fqdn":"guidepaparazzisurface.com","domain":"guidepaparazzisurface.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"570ec90276986510c13dae164aeb3674","sha1":"3ef2b7039b1a3a831c75ff60f2c32cb34752b961","sha256":"9119aa2d256f07217f4fe6361b49af10f61f9037f2952ac8fc20d4c69a1023ae","sha512":"132be88460f1ddb5479a5516451e810e4637bfa45dd586733326756c24924b8a5a576c5aa9b2c6daa8a67a590d6329dc48c66cacc461908070674aaa0ad4d2e8","ssdeep":"96:FPOFNzmeNhCFNzmeNhaFNzmeNh7HFNzmeNhbUmy/Yo:FGFFphCFFphaFFph7HFFphaYo","tlshash":"aba1d748d42d01c358ecda835f6aedb6d81c75c9e9ca170216dc8fba6e095d4e245b12","size":5054,"data":"","first_seen":"2025-10-18T22:35:26.777004Z","last_seen":"2025-10-18T22:35:26.777004Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iyoteen.org/","fqdn":"iyoteen.org","domain":"iyoteen.org","tld":"org"},"ip":{"addr":"172.67.217.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dc0923c33f2f758c84c52fbb61c834a3","sha1":"b058be2d1733bff3d424d94ace699f13151e3df7","sha256":"d37ef4938c8ae1d3621058c0b807b594bdff045977dab405590883e514289ac3","sha512":"428f2cdc01d9aa9d3dc8ed5a91cbbc7bc7f1e0e05118f0d8a5e817f78b4348022cc0f7219d8362cd7295faca28e22392b2766cbeabb3b65d2387366e142294eb","ssdeep":"","tlshash":"f4d0c77df0585e5020c2607fb471a016521791b9bd941130d75ebc49ff08be546afeeb","size":215,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-05T12:02:42.738088Z","times_seen":20149,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iyoteen.org/","fqdn":"iyoteen.org","domain":"iyoteen.org","tld":"org"},"ip":{"addr":"172.67.217.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d72b80690ba108f701c1b1a5e697720","sha1":"befbf4e1dec83cfd6b3a327a909be07a4f8ab490","sha256":"0d8bef99a34b9446ad386668c9742d804417dad6f930213a1dd1cbb8dacbd6e3","sha512":"7cc76f2ee11c4395caa4a50a63bbd1668733e4f8ba3d89189a8014364a7e93873434b7b7b7c7ab37f624d4558e064d913657c064dcc9b35f892a0f05e0991130","ssdeep":"192:q6e4j3qVXlu798fbuEO4C5/hsNs35PhSkzISM8Z:bel29YFts/Swau","tlshash":"62f153497542b57f393b7071d0af220b313970a3a84b4861e9b8f6d87c789792a23d7d","size":8109,"data":"","first_seen":"2025-07-25T05:28:04.240916Z","last_seen":"2026-04-05T11:30:23.14171Z","times_seen":16380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iyoteen.org/","fqdn":"iyoteen.org","domain":"iyoteen.org","tld":"org"},"ip":{"addr":"172.67.217.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad81beb0a28e87fe3ce3742823d264a8","sha1":"f0aa1a71cc5d0b2b40e1b009486fc627f7703878","sha256":"10531cb9ccd59383133c85843a19c55ba0a27d1a2eb912628e9bd7f68b479aa5","sha512":"ed7834311ae7828b03aa5a7411e9f4bbf5066879ee89fe01f83fa28d1a299733d0a81eea1cc4ab97477bf80c13c5ecf94e398d95c3bd3a2911d480b651c6fb78","ssdeep":"","tlshash":"9131ee7df5291636095661fde399e341a030f0dadc428424efb5cc5ea8cce9548abdf2","size":1717,"data":"","first_seen":"2025-07-25T05:28:04.194173Z","last_seen":"2026-04-05T11:30:23.142569Z","times_seen":11035,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guidepaparazzisurface.com/get/2071059?id=2071059\u0026pid=__clb-spot_2071059_jgm_1\u0026jp=_clkaelnlmzhkcwqnmegffy\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.614-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=NaE7Io-7bsPCYB1tniq6Br1s\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=xAqniYuaHR0cHM6Ly9peW90ZWVuLm9yZy8\u0026afid=2648672341339136\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB\u0026vp=0\u0026dto=2\u0026pload=429\u0026rlp=%5B0%2C3%2C26%2C22%2C22%2C73%2C58%2C73%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=6\u0026uf=0\u0026freq=0","fqdn":"guidepaparazzisurface.com","domain":"guidepaparazzisurface.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"48086b60648dc6ef3a3e9e8e953d77b0","sha1":"5dc166b8330ac5da0e36160180b1a67400f98fa9","sha256":"d69d721033f8f65870f8118fa2156c89a87c86278141c789c704047319890c01","sha512":"1b9d726d006d7f82dfac20088989cc9d3be0c6612afbe6a44945e319e09041f86ad20a84126482509a69555bbfc9f345dd6bfac2b2ef39813067c6447044b24e","ssdeep":"96:CfgVJdJZPISJZePVJdJZPISJZKPVJdJZPISJZXPVJdJZPISJZKnF4RLO1PtSo:CfaLPvJ+LPvJuLPvJnLPvJInF4RK1Pwo","tlshash":"3fa1e71ee5979ae82bbb1b54d9fd8ce6ea5e30580c1643938c04e71b149a72e75f4d00","size":5054,"data":"","first_seen":"2025-10-18T22:35:26.686756Z","last_seen":"2025-10-18T22:35:26.686756Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iyoteen.org/","fqdn":"iyoteen.org","domain":"iyoteen.org","tld":"org"},"ip":{"addr":"172.67.217.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d3fb31fc4a0b37980210c57f2698989d","sha1":"82a161b3a63cf0d5a5b37e9eacdfaf298bcbb55b","sha256":"45200934a32157fcedfec503f25c156ed7a19df9a9538269e7848ad8f1adc936","sha512":"69f23736f39a72a620c7ee834ab1745e31b0289d9724365899af60148af4a28c26c7f2bfd64649776390a2301775e2c5be863604d3c932f264eaf572f0c2b3e7","ssdeep":"","tlshash":"0fe0a330f14849201040c569f274c41110b2ca85dc2aed30f38db818f830989c1b7df7","size":408,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-05T12:20:04.694457Z","times_seen":14253,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iyoteen.org/","fqdn":"iyoteen.org","domain":"iyoteen.org","tld":"org"},"ip":{"addr":"172.67.217.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8743ae193e15773a0522733151a4f3f","sha1":"de272c199e7ee617fd15aaa605779c1047519981","sha256":"29d38faca0ca394376f5575af2afc96974754bfa05d43e4d8d1c74dd65f5eb2c","sha512":"c501588bce947141234d4403edb437d53d78e686ab3316d923d71261c160593457eded3487d3d375e2ebda975148f40df8ea61bed6fb78b2deb67fa790b6c030","ssdeep":"","tlshash":"c850003000cf0003000003000c00000003c000300030003000000000000c3000000003","size":10,"data":"","first_seen":"2025-10-18T22:35:26.839332Z","last_seen":"2025-10-18T22:35:26.839332Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iyoteen.org/","fqdn":"iyoteen.org","domain":"iyoteen.org","tld":"org"},"ip":{"addr":"172.67.217.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8743ae193e15773a0522733151a4f3f","sha1":"de272c199e7ee617fd15aaa605779c1047519981","sha256":"29d38faca0ca394376f5575af2afc96974754bfa05d43e4d8d1c74dd65f5eb2c","sha512":"c501588bce947141234d4403edb437d53d78e686ab3316d923d71261c160593457eded3487d3d375e2ebda975148f40df8ea61bed6fb78b2deb67fa790b6c030","ssdeep":"","tlshash":"c850003000cf0003000003000c00000003c000300030003000000000000c3000000003","size":10,"data":"","first_seen":"2025-10-18T22:35:26.839332Z","last_seen":"2025-10-18T22:35:26.839332Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guidepaparazzisurface.com/get/2071060?id=2071060\u0026pid=__clb-spot_2071060_sog_5\u0026jp=_clkaelnlmzhkcwqnmegffy\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.614-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=NaE7Io-7bsPCYB1tniq6Br1s\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=xAqniYuaHR0cHM6Ly9peW90ZWVuLm9yZy8\u0026afid=2648672341339136\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB\u0026vp=0\u0026dto=2\u0026pload=429\u0026rlp=%5B0%2C3%2C26%2C22%2C22%2C73%2C58%2C73%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=6\u0026uf=0\u0026freq=0","fqdn":"guidepaparazzisurface.com","domain":"guidepaparazzisurface.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"331ae3ed6db0b8d0832bec30a7f4c21f","sha1":"3bacd78a6099cb398abae494674cfd7384b75e0d","sha256":"f3e64ec68de3af27cc20acbc666f3e35c01f17043f6bc94849bc6dc8ae903919","sha512":"9cc93e6ed0e47478a2fe26bfa4d6eac738075007146797b0882bd79d3fe8f31bee6f0b7dc2f0f21228b6023db0f73ed64a41c4ab7316e05111d7f07d0c70364e","ssdeep":"48:KhFWRHaVQAojzc2ckYPNpRHaVQAojzc2ckYPNORHaVQAojzc2ckYPN7RHaVQAojW:j+Wf/EL+Wf/Ek+Wf/E9+Wf/EMOBzZjeo","tlshash":"6ea1ea4e345cc82daa21886f6d663ecf7352734904dc973346b69a18938f8b89273637","size":5054,"data":"","first_seen":"2025-10-18T22:35:26.772354Z","last_seen":"2025-10-18T22:35:26.772354Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crumpetprankerstench.com/get/2076125?id=2076125\u0026jp=_clldhbzxqnxhbvxnspjtnj\u0026dr=49\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.614-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=NaE7Io-7bsPCYB1tniq6Br1s\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=Uqh5dEVaHR0cHM6Ly9peW90ZWVuLm9yZy8\u0026afid=7152271968714752\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB\u0026vp=0\u0026dto=2\u0026pload=576\u0026rlp=%5B0%2C4%2C69%2C46%2C155%2C384%2C297%2C384%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0","fqdn":"crumpetprankerstench.com","domain":"crumpetprankerstench.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3aea95ea9068c13809c6336ebf3681ff","sha1":"784dcf03773925f1d0ad00e0d82f3743c7810b3a","sha256":"cdc0938becba84218d4ed234fcba2e04e072cfe8b13dc14cc4b37666fd9afabc","sha512":"48e35ead95afc6314fc27e9acf0035784fe21d4bdd59ea77dccb089d4e2ae113a3d011df5875e2abbe78164e8c5dffe068c149a85640b88acf8995bcebaa0d4b","ssdeep":"","tlshash":"6861a5dcfcedd6eed89b640cc9b7dcc19686c43c0e237aabad68c60448742a44b75423","size":3192,"data":"","first_seen":"2025-10-18T22:35:26.817482Z","last_seen":"2025-10-18T22:35:26.817482Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iyoteen.org/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"iyoteen.org","domain":"iyoteen.org","tld":"org"},"ip":{"addr":"172.67.217.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-05T11:47:06.822961Z","times_seen":292936,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guidepaparazzisurface.com/get/2071067?id=2071067\u0026pid=__clb-spot_2071067_ymn_7\u0026jp=_clkaelnlmzhkcwqnmegffy\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.614-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=NaE7Io-7bsPCYB1tniq6Br1s\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=xAqniYuaHR0cHM6Ly9peW90ZWVuLm9yZy8\u0026afid=2648672341339136\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB\u0026vp=0\u0026dto=2\u0026pload=429\u0026rlp=%5B0%2C3%2C26%2C22%2C22%2C73%2C58%2C73%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=6\u0026uf=0\u0026freq=0","fqdn":"guidepaparazzisurface.com","domain":"guidepaparazzisurface.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba9dc75a7bb27b43f894cba7f131b268","sha1":"8708c55bd3947067ef71568dc2ba4ff50e77f2db","sha256":"1a51f5b51a3e2b0575adca0ef27235a6c0cc6f9778f8279a10ac4e266548f223","sha512":"fe7b33b853883370deaad189dafffef2590e130ca432b2e4cd1e351f8bee2127d947088d613780f58a1931733786d2874678971307b89777487c8c27febe4ab6","ssdeep":"96:v4sWjxywnGIdCWjxywnGId3KWjxywnGIdnWjxywnGId1CcsjcsOncsZKISco:Qlyw79lyw731lyw7Wlyw7dsgsOcsZKIM","tlshash":"67a1973bca83f45ba51a260d8147df56ec49e3e5e5c18e78b384d702943b02ad5a7c17","size":5054,"data":"","first_seen":"2025-10-18T22:35:26.69911Z","last_seen":"2025-10-18T22:35:26.69911Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guidepaparazzisurface.com/check.html","fqdn":"guidepaparazzisurface.com","domain":"guidepaparazzisurface.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8f2e0cd22b41fa7c9212af0b11f449d3","sha1":"6c552632a2eeaa712496444594c3e8c68eadbbb0","sha256":"d7ca5af269e02e5109a61ef55df0196e2206204d6c742daba5a153defc097fda","sha512":"c90bb9984fc0b2a5374129cb10fc509e937ba565063e2530578430fb0329f8058c145c914de139fa166d8530cfff9799a8c78aa1ad2752d9ec72e24c0fed477c","ssdeep":"","tlshash":"d201685934f5684d5127b630255b22182d32a40325cbd94efb2cdb301f825a7eca8aef","size":762,"data":"","first_seen":"2025-03-07T08:34:13.499254Z","last_seen":"2026-03-04T07:06:03.173543Z","times_seen":7245,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crumpetprankerstench.com/on.js","fqdn":"crumpetprankerstench.com","domain":"crumpetprankerstench.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d20cd34c0ce632ba42f9c9715a6f0129","sha1":"e8485d12fcc7c413d320cca78794f30ebeaeee56","sha256":"acebab3a34dc13a8c7288193ae322b53c66719ccda8e7d7f128b36f098e87bdf","sha512":"51030d1ba9b3262c37a04e70672873a84a69827622d2ad083ab5c209f24708ffe1d4e617fcf0392e8103b085298220f7592de091224dcf7004fe2a6332c61179","ssdeep":"1536:803Om3Tw2hdvXpDLQa0SFMqFA4fKRHzd6bRa322M/ZScQPJViBYJ5+RDquMMl/6Q:803xLQheJyRHzduiol/6ep","tlshash":"d8e3999d6bb13c378142ac296c2f7609ab3d94e195cd4084d4aed1e42d74b3af331a7e","size":155590,"data":"","first_seen":"2025-10-17T15:07:50.796879Z","last_seen":"2025-10-20T06:45:45.745122Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guidepaparazzisurface.com/bn.js","fqdn":"guidepaparazzisurface.com","domain":"guidepaparazzisurface.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"40dda1b64626192f07d9d9f259e9e183","sha1":"c6be3ad994f5964b813df4d47a37c5f3026094f6","sha256":"06b73144a697cfc8a234b30bb27cb9f8f250a0f92e488829f5ef03099605cf21","sha512":"dfd536548c0c0952028e082f26166784098e7f658340cc5a5330f7eedbac1730c26e4de5b4168ceda4c30a6f2cec66ad990fe4abe78a10040587d3f2706a3963","ssdeep":"1536:Ew82uAh7HrQ8srzmckqAiUTIODX3PzdzF+7u3s2r+jZ6d9h2nakswNqQn+jKGMki:EG9E8GFUTIODI4d9kA0g6","tlshash":"7bf3847dfb4f643682d3901d4e3e651ed7f558dd9a4c0440e433d2ebab2888ab321ba5","size":168063,"data":"","first_seen":"2025-10-17T12:46:31.411375Z","last_seen":"2025-10-20T05:53:10.121081Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crumpetprankerstench.com/check.html","fqdn":"crumpetprankerstench.com","domain":"crumpetprankerstench.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8f2e0cd22b41fa7c9212af0b11f449d3","sha1":"6c552632a2eeaa712496444594c3e8c68eadbbb0","sha256":"d7ca5af269e02e5109a61ef55df0196e2206204d6c742daba5a153defc097fda","sha512":"c90bb9984fc0b2a5374129cb10fc509e937ba565063e2530578430fb0329f8058c145c914de139fa166d8530cfff9799a8c78aa1ad2752d9ec72e24c0fed477c","ssdeep":"","tlshash":"d201685934f5684d5127b630255b22182d32a40325cbd94efb2cdb301f825a7eca8aef","size":762,"data":"","first_seen":"2025-03-07T08:34:13.499254Z","last_seen":"2026-03-04T07:06:03.173543Z","times_seen":7245,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crumpetprankerstench.com/on.js","fqdn":"crumpetprankerstench.com","domain":"crumpetprankerstench.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d20cd34c0ce632ba42f9c9715a6f0129","sha1":"e8485d12fcc7c413d320cca78794f30ebeaeee56","sha256":"acebab3a34dc13a8c7288193ae322b53c66719ccda8e7d7f128b36f098e87bdf","sha512":"51030d1ba9b3262c37a04e70672873a84a69827622d2ad083ab5c209f24708ffe1d4e617fcf0392e8103b085298220f7592de091224dcf7004fe2a6332c61179","ssdeep":"1536:803Om3Tw2hdvXpDLQa0SFMqFA4fKRHzd6bRa322M/ZScQPJViBYJ5+RDquMMl/6Q:803xLQheJyRHzduiol/6ep","tlshash":"d8e3999d6bb13c378142ac296c2f7609ab3d94e195cd4084d4aed1e42d74b3af331a7e","size":155590,"data":"","first_seen":"2025-10-17T15:07:50.796879Z","last_seen":"2025-10-20T06:45:45.745122Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guidepaparazzisurface.com/get/2071059?id=2071059\u0026pid=__clb-spot_2071059_gzn_4\u0026jp=_clkaelnlmzhkcwqnmegffy\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.614-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=NaE7Io-7bsPCYB1tniq6Br1s\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=xAqniYuaHR0cHM6Ly9peW90ZWVuLm9yZy8\u0026afid=2648672341339136\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB\u0026vp=0\u0026dto=2\u0026pload=429\u0026rlp=%5B0%2C3%2C26%2C22%2C22%2C73%2C58%2C73%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=6\u0026uf=0\u0026freq=0","fqdn":"guidepaparazzisurface.com","domain":"guidepaparazzisurface.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"8eb6b9d85155114580513736e8a70b74","sha1":"44444f9ebcc6e248f17c746c072ecdfd3f891f85","sha256":"908c8b33d269288f05239eb953684990d75d85db634ecafe9312622f058b388d","sha512":"e0d738ea5976b6120df6d6044d43897a0c980031333e8c50786f12e13f44c3dbaed4a9e840b2d69b9d46776dc86c735b768ccdacf33cc92529f984641b7f459a","ssdeep":"96:YvuvzFv5idJ3qcLuvzFv5idJ32uvzFv5idJ3JuvzFv5idJ3qluCsNUZo:xzvm3izvm3pzvm3ezvm3qluHuZo","tlshash":"e9a1f9247e01dfb69480ad4073197c76ca0dfd8550a640ce3aa2cb84a31da337b1feda","size":5054,"data":"","first_seen":"2025-10-18T22:35:26.640767Z","last_seen":"2025-10-18T22:35:26.640767Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guidepaparazzisurface.com/get/2071060?id=2071060\u0026pid=__clb-spot_2071060_ies_6\u0026jp=_clkaelnlmzhkcwqnmegffy\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.614-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=NaE7Io-7bsPCYB1tniq6Br1s\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=xAqniYuaHR0cHM6Ly9peW90ZWVuLm9yZy8\u0026afid=2648672341339136\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB\u0026vp=0\u0026dto=2\u0026pload=429\u0026rlp=%5B0%2C3%2C26%2C22%2C22%2C73%2C58%2C73%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=6\u0026uf=0\u0026freq=0","fqdn":"guidepaparazzisurface.com","domain":"guidepaparazzisurface.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"315e3ab5a6ea9f42002c2bb2e7f94c05","sha1":"2da0ed349dca8f394bb30778610f04711caf1a71","sha256":"4ca67c945cf41888cbcd79edcebd2d852578e03dc1f550e17743d43bc892f861","sha512":"f8ec926ea39887ef66933d6d60b9e4c618378edf45ed20be463ce208c4c87d7dda3569c9a9132dfbafb578e70f81545a4ba6274e8658a79908f3433da00236b2","ssdeep":"96:Y4XLJ/70WZOAxo7kBDO0WZOAxo7kWQ0WZOAxo7kOP0WZOAxo7kpz+ZCsY7Q6I5o:Y4dYyOSowBzyOSowWFyOSowOsyOSowFn","tlshash":"3aa1e874ceabb6e4e6354a2a9af3fc6278d138e787154325a591d354a8000bfdb33d34","size":5054,"data":"","first_seen":"2025-10-18T22:35:26.733423Z","last_seen":"2025-10-18T22:35:26.733423Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iyoteen.org/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"iyoteen.org","domain":"iyoteen.org","tld":"org"},"ip":{"addr":"172.67.217.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-05T11:47:06.822961Z","times_seen":292936,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guidepaparazzisurface.com/bn.js","fqdn":"guidepaparazzisurface.com","domain":"guidepaparazzisurface.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"40dda1b64626192f07d9d9f259e9e183","sha1":"c6be3ad994f5964b813df4d47a37c5f3026094f6","sha256":"06b73144a697cfc8a234b30bb27cb9f8f250a0f92e488829f5ef03099605cf21","sha512":"dfd536548c0c0952028e082f26166784098e7f658340cc5a5330f7eedbac1730c26e4de5b4168ceda4c30a6f2cec66ad990fe4abe78a10040587d3f2706a3963","ssdeep":"1536:Ew82uAh7HrQ8srzmckqAiUTIODX3PzdzF+7u3s2r+jZ6d9h2nakswNqQn+jKGMki:EG9E8GFUTIODI4d9kA0g6","tlshash":"7bf3847dfb4f643682d3901d4e3e651ed7f558dd9a4c0440e433d2ebab2888ab321ba5","size":168063,"data":"","first_seen":"2025-10-17T12:46:31.411375Z","last_seen":"2025-10-20T05:53:10.121081Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guidepaparazzisurface.com/get/2071069?id=2071069\u0026pid=__clb-spot_2071069_itl_9\u0026jp=_clkaelnlmzhkcwqnmegffy\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.614-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=NaE7Io-7bsPCYB1tniq6Br1s\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=xAqniYuaHR0cHM6Ly9peW90ZWVuLm9yZy8\u0026afid=2648672341339136\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB\u0026vp=0\u0026dto=2\u0026pload=429\u0026rlp=%5B0%2C3%2C26%2C22%2C22%2C73%2C58%2C73%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=6\u0026uf=0\u0026freq=0","fqdn":"guidepaparazzisurface.com","domain":"guidepaparazzisurface.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc67fa1f6f2e583b9c1c9586868de30a","sha1":"285159bac9c6cb8887ca320be31f9dd961bedb34","sha256":"17694465eb2fe0f122468e768aa56efc3a8e08fd6397f71dc4b915641352c929","sha512":"6106489b81f12d11b6069f383626d12cc391064532c3bb802a15901996e2147529bf4756ef891cb986f19d9e59b6dcacfaf067e572c0744b2f200bfbeda59231","ssdeep":"96:BXz4kIBpx9s+1kIBpx9sM1kIBpx9shqkIBpx9sxjceVocrYo:Bj4lBpxK+1lBpxKM1lBpxKhqlBpxKDVn","tlshash":"0ba1f92d4ee893dc4279a2181611bf7990c05a6afb021622d7fc0645829d9fdccfeed2","size":5054,"data":"","first_seen":"2025-10-18T22:35:26.813978Z","last_seen":"2025-10-18T22:35:26.813978Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iyoteen.org/","fqdn":"iyoteen.org","domain":"iyoteen.org","tld":"org"},"ip":{"addr":"172.67.217.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"3127b5d41c2c6f5647c254388377c793","sha1":"4975414df54afdf733cb1f794386a1ab7f4e650c","sha256":"365e6b4b247bab7bc4ad9f20eae6fd55ddf875b533b031c493de52d00548dc4f","sha512":"fc18c083f265b9d64b1e42cdf202a1630f4dad2b35014edfef37451f146d4fe07168e3d9be923860d7c2bf22e611a8ddb33132f049dec301ad3ee01d8c839831","ssdeep":"","tlshash":"955000000000000000300000300c0003000c00f0300300000000000000f0f000030003","size":9,"data":"","first_seen":"2025-06-28T20:31:08.933141Z","last_seen":"2026-01-22T19:44:20.1748Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guidepaparazzisurface.com/get/2071069?id=2071069\u0026pid=__clb-spot_2071069_hoh_8\u0026jp=_clkaelnlmzhkcwqnmegffy\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.614-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=NaE7Io-7bsPCYB1tniq6Br1s\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=xAqniYuaHR0cHM6Ly9peW90ZWVuLm9yZy8\u0026afid=2648672341339136\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB\u0026vp=0\u0026dto=2\u0026pload=429\u0026rlp=%5B0%2C3%2C26%2C22%2C22%2C73%2C58%2C73%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=6\u0026uf=0\u0026freq=0","fqdn":"guidepaparazzisurface.com","domain":"guidepaparazzisurface.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"551e4e46777c285ebc93e86323a49257","sha1":"5a052ce3c44726ecffb6527b489137d28982c94f","sha256":"cdf2d8b8bf89fab6994c1946e466622702c924786ab2c02bf495c820fea7b0b9","sha512":"4150aefe928e5e95e8162f132f0920f012d07f22af5a99f0ecd914657fc74d700916b8e0f3875dc693393c10c15f443a01c307eaeb795c9833b13cc353efe677","ssdeep":"96:kVH+R8Nrs0mvH+R8Nrs0maH+R8Nrs0m1H+R8Nrs0mp+G8II1gAo:k128JXm/28JXmI28JXmV28JXmczo","tlshash":"06a1c5c21d9d6ccd34f84e9a4e72ed9024676f981f53601a9772d9a07a90222ffc700f","size":5054,"data":"","first_seen":"2025-10-18T22:35:26.724288Z","last_seen":"2025-10-18T22:35:26.724288Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"playhubconnect.com/bn/b81/14d/a76/b8114da769dd2c24105e11e57f48ab888ba111c9.mp4","fqdn":"playhubconnect.com","domain":"playhubconnect.com","tld":"com"},"ip":{"addr":"104.18.15.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playhubconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 01:53:00 GMT","end":"Sun, 14 Dec 2025 02:52:57 GMT"},"fingerprint":{"sha1":"6F:7E:45:FD:0D:E1:5B:9F:C6:D0:2A:9F:AA:8E:F1:FA:79:84:B9:99","sha256":"0A:22:22:40:F0:60:14:FC:D9:59:21:94:0E:1A:55:24:DC:9F:21:05:F9:C7:0D:42:25:19:56:47:78:53:0D:8B"}}},"request":{"raw":"GET /bn/b81/14d/a76/b8114da769dd2c24105e11e57f48ab888ba111c9.mp4 HTTP/1.1\r\nHost: playhubconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 236903\r\ncf-ray: 990b815d09fe8deb-OSL\r\nx-amz-id-2: tzM/enfA1UivV9QF4rFlMskmSZNI/zpekRqvmknzwdQjepyujTbt6JIcaD9Hgs4XTq+SsoBSYvU=\r\nx-amz-request-id: 7KFFCMPFYR88KSNT\r\nlast-modified: Fri, 11 Jul 2025 13:58:37 GMT\r\netag: \"86819e70bb2ae172c28434dcffcf0cd7\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nage: 2135883\r\ncontent-range: bytes 0-236902/236903\r\nexpires: Tue, 18 Nov 2025 22:34:49 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":236903,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"86819e70bb2ae172c28434dcffcf0cd7","sha1":"b8114da769dd2c24105e11e57f48ab888ba111c9","sha256":"15d621769406b8621b066ee97402ef2f2b908cf55df4b0fc6b254a0b32f63538","sha512":"0427748350811d7981a9c7c42137ab66f856a459a0dc0a87ce721900052514744ffce39ac8c77d7d9abe0f521401092987cbe8f6e9cf3daf68e6338c0c131160","ssdeep":"6144:utsKwc9sccryzD9O6L03uA6c6IkfcIZu0IxxNCsGJ+c:utsXrcqyDI6IoWzIZXWxYsc","tlshash":"e43413f318905824da786fb324b72b5312a54d4c97e2af02b5cec114ff75e852d4b8b6","first_seen":"2025-06-22T04:01:22.075641Z","last_seen":"2026-03-30T22:53:46.378863Z","times_seen":65,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":43,"dns":21,"connect":1,"send":0,"wait":8,"receive":12,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"playhubconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.guidepaparazzisurface.com/static/video/bn/b81/14d/a76/b8114da769dd2c24105e11e57f48ab888ba111c9.mp4","fqdn":"www.guidepaparazzisurface.com","domain":"guidepaparazzisurface.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:50.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guidepaparazzisurface.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:30:59 GMT","end":"Fri, 07 Nov 2025 14:30:58 GMT"},"fingerprint":{"sha1":"09:CA:DA:46:FA:20:93:EF:BF:A3:2F:C8:E4:F1:01:E8:7F:B5:6C:9E","sha256":"59:3C:83:04:25:43:A6:89:F4:CB:77:35:F4:A8:66:DF:9E:B9:7F:B2:D7:CE:A8:00:84:52:B9:C3:73:32:C8:51"}}},"request":{"raw":"GET /static/video/bn/b81/14d/a76/b8114da769dd2c24105e11e57f48ab888ba111c9.mp4 HTTP/1.1\r\nHost: www.guidepaparazzisurface.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 22:34:50 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 236903\r\nlast-modified: Wed, 15 Oct 2025 18:51:24 GMT\r\netag: \"68efed2c-39d67\"\r\nexpires: Wed, 17 Dec 2025 22:34:50 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-expose-headers: Last-Modified\r\ncontent-range: bytes 0-236902/236903\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":236903,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"86819e70bb2ae172c28434dcffcf0cd7","sha1":"b8114da769dd2c24105e11e57f48ab888ba111c9","sha256":"15d621769406b8621b066ee97402ef2f2b908cf55df4b0fc6b254a0b32f63538","sha512":"0427748350811d7981a9c7c42137ab66f856a459a0dc0a87ce721900052514744ffce39ac8c77d7d9abe0f521401092987cbe8f6e9cf3daf68e6338c0c131160","ssdeep":"6144:utsKwc9sccryzD9O6L03uA6c6IkfcIZu0IxxNCsGJ+c:utsXrcqyDI6IoWzIZXWxYsc","tlshash":"e43413f318905824da786fb324b72b5312a54d4c97e2af02b5cec114ff75e852d4b8b6","first_seen":"2025-06-22T04:01:22.075641Z","last_seen":"2026-03-30T22:53:46.378863Z","times_seen":65,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.iyoteen.cc/","fqdn":"www.iyoteen.cc","domain":"iyoteen.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-18T22:34:46.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iyoteen.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 11:12:43 GMT","end":"Wed, 26 Nov 2025 12:09:10 GMT"},"fingerprint":{"sha1":"E0:AA:99:57:91:E8:25:31:18:BB:A3:97:A4:95:10:84:C2:34:A3:A9","sha256":"66:A1:79:68:2B:34:91:55:6D:4D:A6:41:50:6C:08:28:9B:86:92:45:2D:5C:60:17:EE:E0:A7:66:F1:47:9B:B4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.iyoteen.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 18 Oct 2025 22:34:47 GMT\r\nlocation: https://iyoteen.org/\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dCHluPK%2B1kMbPLh%2F%2BsPfn0Y1IJevU%2F5WioHetY6Oq0Y4Argj9cxDbTuaze04z4OHGs1KI7qXoqaLi0Vk1BW2rJaN7L96LU1qtcO30h2N\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 990b814bea44b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":234496,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":44,"dns":14,"connect":1,"send":0,"wait":4,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iyoteen.org/wp-content/uploads/2025/10/koreanfil_4.png","fqdn":"iyoteen.org","domain":"iyoteen.org","tld":"org"},"ip":{"addr":"104.21.45.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iyoteen.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:31:59 GMT","end":"Thu, 08 Jan 2026 10:30:31 GMT"},"fingerprint":{"sha1":"4A:62:E3:55:B9:0F:A1:58:5F:BD:2B:F8:0D:A1:E6:77:EE:46:DC:2C","sha256":"BC:30:2F:73:E4:96:3B:AF:75:1B:31:F3:DF:31:50:4B:49:6F:08:62:50:21:0A:B5:74:33:90:E8:E8:3E:29:13"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/koreanfil_4.png HTTP/1.1\r\nHost: iyoteen.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D; __PPU_cl_tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB; _lscache_vary=330c6618c4a27101283a3afc1ea12d07\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 428503\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Oct 2025 23:41:41 GMT\r\netag: \"689d7-68ee0393-8f8efdf;;;\"\r\nlast-modified: Tue, 14 Oct 2025 08:02:27 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 341587\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ihCeUVAd8eNTdP6ItuOQkmAjyuM77wQo%2BzTQpxtLn431qfLwhyaXtt6soTK2j%2FpBTpHkPErRByAb4WvzfK9mclvDZ6EH6ySX5Fn\"}]}\r\ncf-ray: 990b8158bfeb3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":428503,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 403 x 698, 8-bit/color RGBA, non-interlaced","md5":"bb40ff92b56c268fbd0c7f839c14ae3a","sha1":"da7b2eb2a3fcc6e5de34d103182084f7eb25f94e","sha256":"96bd72411b54bf2e3b4730c016b0b4e5e48412102242963e08c7b6e51839d609","sha512":"34e1bd03cf6534d56e688f328c50742a74c14e45a3aa18c47049032a9f6aa28d44f327a73ae77bc5e2a62a5455b6189f4adb2f7284585aba9a1b27c92decbc69","ssdeep":"12288:/lE27e5DsvpzCHM1kF3v85eMNm6LrnB/2:/lEt+ZvkN05eMNl/d2","tlshash":"52942390fd920f74ea4dbeec5423c68f090e928886fb81695d365eb45526218122fff8","first_seen":"2025-10-18T22:35:26.633139Z","last_seen":"2025-10-18T22:35:26.633139Z","times_seen":1,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guidepaparazzisurface.com/get/2071059?id=2071059\u0026pid=__clb-spot_2071059_gzn_4\u0026jp=_clkaelnlmzhkcwqnmegffy\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.614-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=NaE7Io-7bsPCYB1tniq6Br1s\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=xAqniYuaHR0cHM6Ly9peW90ZWVuLm9yZy8\u0026afid=2648672341339136\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB\u0026vp=0\u0026dto=2\u0026pload=429\u0026rlp=%5B0%2C3%2C26%2C22%2C22%2C73%2C58%2C73%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=6\u0026uf=0\u0026freq=0","fqdn":"guidepaparazzisurface.com","domain":"guidepaparazzisurface.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guidepaparazzisurface.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:30:59 GMT","end":"Fri, 07 Nov 2025 14:30:58 GMT"},"fingerprint":{"sha1":"09:CA:DA:46:FA:20:93:EF:BF:A3:2F:C8:E4:F1:01:E8:7F:B5:6C:9E","sha256":"59:3C:83:04:25:43:A6:89:F4:CB:77:35:F4:A8:66:DF:9E:B9:7F:B2:D7:CE:A8:00:84:52:B9:C3:73:32:C8:51"}}},"request":{"raw":"GET /get/2071059?id=2071059\u0026pid=__clb-spot_2071059_gzn_4\u0026jp=_clkaelnlmzhkcwqnmegffy\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.614-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=NaE7Io-7bsPCYB1tniq6Br1s\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=xAqniYuaHR0cHM6Ly9peW90ZWVuLm9yZy8\u0026afid=2648672341339136\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB\u0026vp=0\u0026dto=2\u0026pload=429\u0026rlp=%5B0%2C3%2C26%2C22%2C22%2C73%2C58%2C73%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=6\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: guidepaparazzisurface.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: cart=1; cart_p=2; UID=251018173496f397c89d7a4c479ac66c5c75; CHCK=1; PTS=AYKhbNJo9BYIoWMBEIKhbNJo9BYIoWMB\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: PTS=AYKhbNJo9BYJoWMCEIKhbNJo9BYJoWMC; Path=/; Expires=Sat, 21 Nov 2026 22:34:49 GMT; Secure; SameSite=None\nCHCK=1; Path=/; Expires=Sat, 21 Nov 2026 22:34:49 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5054,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (5054), with no line terminators","md5":"8eb6b9d85155114580513736e8a70b74","sha1":"44444f9ebcc6e248f17c746c072ecdfd3f891f85","sha256":"908c8b33d269288f05239eb953684990d75d85db634ecafe9312622f058b388d","sha512":"e0d738ea5976b6120df6d6044d43897a0c980031333e8c50786f12e13f44c3dbaed4a9e840b2d69b9d46776dc86c735b768ccdacf33cc92529f984641b7f459a","ssdeep":"96:YvuvzFv5idJ3qcLuvzFv5idJ32uvzFv5idJ3JuvzFv5idJ3qluCsNUZo:xzvm3izvm3pzvm3ezvm3qluHuZo","tlshash":"e9a1f9247e01dfb69480ad4073197c76ca0dfd8550a640ce3aa2cb84a31da337b1feda","first_seen":"2025-10-18T22:35:26.640767Z","last_seen":"2025-10-18T22:35:26.640767Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iyoteen.org/wp-content/uploads/2025/10/rjv_170-728x728.png","fqdn":"iyoteen.org","domain":"iyoteen.org","tld":"org"},"ip":{"addr":"104.21.45.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iyoteen.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:31:59 GMT","end":"Thu, 08 Jan 2026 10:30:31 GMT"},"fingerprint":{"sha1":"4A:62:E3:55:B9:0F:A1:58:5F:BD:2B:F8:0D:A1:E6:77:EE:46:DC:2C","sha256":"BC:30:2F:73:E4:96:3B:AF:75:1B:31:F3:DF:31:50:4B:49:6F:08:62:50:21:0A:B5:74:33:90:E8:E8:3E:29:13"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/rjv_170-728x728.png HTTP/1.1\r\nHost: iyoteen.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%22CAIFRQ%22%3A%22ADRQ%252BQAAAAAAAAAJ%22%2C%22CAIFRT%22%3A%22ADRQ%252BQAAAABo9HBQ%22%7D; __PPU_cl_tl=AYKhbNJo9BYJoWMCEIKhbNJo9BYJoWMC; _lscache_vary=330c6618c4a27101283a3afc1ea12d07; bnState_2071059={\"impressions\":2,\"delayStarted\":0}; bnState_2071067={\"impressions\":1,\"delayStarted\":0}; bnState_2071069={\"impressions\":2,\"delayStarted\":0}; bnState_2071060={\"impressions\":4,\"delayStarted\":0}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 326992\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 24 Oct 2025 14:50:44 GMT\r\netag: \"4fd50-68f1f3cc-8f9118f;;;\"\r\nlast-modified: Fri, 17 Oct 2025 07:44:12 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 114245\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nDa9mWK2FwarAjFFYf1xiuBzHzOrdD0zdTwSqHwOTTexQvq1%2B5TwVwUYp3G7p0i7Tcc8adddmcEtCP7LB58adkIJOkYHfeuY8T0s\"}]}\r\ncf-ray: 990b815e09e13181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":326992,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 728 x 728, 8-bit colormap, non-interlaced","md5":"b2821c7412d155a6eb1d7bcf57be89c9","sha1":"cff76e811f280e766cca95439b3690ba00a45554","sha256":"39f3ea595bb23db6456d94712f658e2f15d3a4aecc4f8ea3661c4dca6ebb4ad8","sha512":"e13d89811d862e74e3ab82eae980ccb506e27762bfe1433ea904815f7a6a08a6c6896ea0e5dedceb3ddaf095915caabc422a10b15bf439bd0cd340838dc1d9cd","ssdeep":"6144:6mYYnW1kQqcnQ+uGgyAfLdYAWnmAJarlEUXP3SDDdxmwW/vtly9sl:6pYnabr4/dZXrJP3ombtkg","tlshash":"6b6423ffc1c368032b7e379a5d711f9687a323f4a3708826e355965c868e37a3a55b01","first_seen":"2025-10-18T22:35:26.644317Z","last_seen":"2025-10-18T22:35:26.644317Z","times_seen":1,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iyoteen.org/wp-content/uploads/2025/10/angel_campania_10.png","fqdn":"iyoteen.org","domain":"iyoteen.org","tld":"org"},"ip":{"addr":"104.21.45.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iyoteen.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:31:59 GMT","end":"Thu, 08 Jan 2026 10:30:31 GMT"},"fingerprint":{"sha1":"4A:62:E3:55:B9:0F:A1:58:5F:BD:2B:F8:0D:A1:E6:77:EE:46:DC:2C","sha256":"BC:30:2F:73:E4:96:3B:AF:75:1B:31:F3:DF:31:50:4B:49:6F:08:62:50:21:0A:B5:74:33:90:E8:E8:3E:29:13"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/angel_campania_10.png HTTP/1.1\r\nHost: iyoteen.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%22CAIFRQ%22%3A%22ADRQ%252BQAAAAAAAAAJ%22%2C%22CAIFRT%22%3A%22ADRQ%252BQAAAABo9HBQ%22%7D; __PPU_cl_tl=AYKhbNJo9BYJoWMCEIKhbNJo9BYJoWMC; _lscache_vary=330c6618c4a27101283a3afc1ea12d07; bnState_2071059={\"impressions\":2,\"delayStarted\":0}; bnState_2071067={\"impressions\":1,\"delayStarted\":0}; bnState_2071069={\"impressions\":2,\"delayStarted\":0}; bnState_2071060={\"impressions\":4,\"delayStarted\":0}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 543628\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 24 Oct 2025 14:50:55 GMT\r\netag: \"84b8c-68f1eeee-8f90a4e;;;\"\r\nlast-modified: Fri, 17 Oct 2025 07:23:26 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 114233\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0JLeUykITaN0DhO31Hz3nZ0Fep5sJUVPOG069w%2B%2FS5AAO4L1jxBapqwSAbx7QHwcjT97l1yzsgNJe1SZoV57alxS6DIfjgAzR0iR\"}]}\r\ncf-ray: 990b815e09f03181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":543628,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 516 x 747, 8-bit/color RGBA, non-interlaced","md5":"e84bd826f81a7a81a56a32c587b15568","sha1":"c51bd5e10017f9804a6b7d14ace6197b4dc49251","sha256":"e70f80cf36dc5459a6796d003aec79d24ba0de891d4a1fa3ee3ccd69f2b4b859","sha512":"aefc4058378b587b66d661d965507418a275f03cba712b0baceba05c7da52030cb0ef6a42cea0ddde944b4f7a0aa13a4e88f9561c0b04d11ae7a1452a9e7b010","ssdeep":"12288:sV0v1W9loJcux1gjlsjhyKWisyCX9OkNDy5TTX:SoWe+lsYK0t9OkNDy5TTX","tlshash":"c9c423d0c1e677ba818f63276d53177682b8da73a7155ba0b5f9e37c4089b8d0801f2d","first_seen":"2025-10-18T22:35:26.650947Z","last_seen":"2025-10-18T22:35:26.650947Z","times_seen":1,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.guidepaparazzisurface.com/static/video/bn/b81/14d/a76/b8114da769dd2c24105e11e57f48ab888ba111c9.mp4","fqdn":"www.guidepaparazzisurface.com","domain":"guidepaparazzisurface.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:50.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guidepaparazzisurface.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:30:59 GMT","end":"Fri, 07 Nov 2025 14:30:58 GMT"},"fingerprint":{"sha1":"09:CA:DA:46:FA:20:93:EF:BF:A3:2F:C8:E4:F1:01:E8:7F:B5:6C:9E","sha256":"59:3C:83:04:25:43:A6:89:F4:CB:77:35:F4:A8:66:DF:9E:B9:7F:B2:D7:CE:A8:00:84:52:B9:C3:73:32:C8:51"}}},"request":{"raw":"GET /static/video/bn/b81/14d/a76/b8114da769dd2c24105e11e57f48ab888ba111c9.mp4 HTTP/1.1\r\nHost: www.guidepaparazzisurface.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 22:34:50 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 236903\r\nlast-modified: Wed, 15 Oct 2025 18:51:24 GMT\r\netag: \"68efed2c-39d67\"\r\nexpires: Wed, 17 Dec 2025 22:34:50 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-expose-headers: Last-Modified\r\ncontent-range: bytes 0-236902/236903\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":236903,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"86819e70bb2ae172c28434dcffcf0cd7","sha1":"b8114da769dd2c24105e11e57f48ab888ba111c9","sha256":"15d621769406b8621b066ee97402ef2f2b908cf55df4b0fc6b254a0b32f63538","sha512":"0427748350811d7981a9c7c42137ab66f856a459a0dc0a87ce721900052514744ffce39ac8c77d7d9abe0f521401092987cbe8f6e9cf3daf68e6338c0c131160","ssdeep":"6144:utsKwc9sccryzD9O6L03uA6c6IkfcIZu0IxxNCsGJ+c:utsXrcqyDI6IoWzIZXWxYsc","tlshash":"e43413f318905824da786fb324b72b5312a54d4c97e2af02b5cec114ff75e852d4b8b6","first_seen":"2025-06-22T04:01:22.075641Z","last_seen":"2026-03-30T22:53:46.378863Z","times_seen":65,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iyoteen.org/wp-content/uploads/2025/10/dovey_1.png","fqdn":"iyoteen.org","domain":"iyoteen.org","tld":"org"},"ip":{"addr":"104.21.45.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iyoteen.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:31:59 GMT","end":"Thu, 08 Jan 2026 10:30:31 GMT"},"fingerprint":{"sha1":"4A:62:E3:55:B9:0F:A1:58:5F:BD:2B:F8:0D:A1:E6:77:EE:46:DC:2C","sha256":"BC:30:2F:73:E4:96:3B:AF:75:1B:31:F3:DF:31:50:4B:49:6F:08:62:50:21:0A:B5:74:33:90:E8:E8:3E:29:13"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/dovey_1.png HTTP/1.1\r\nHost: iyoteen.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D; __PPU_cl_tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB; _lscache_vary=330c6618c4a27101283a3afc1ea12d07\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 375415\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 23 Oct 2025 07:32:04 GMT\r\netag: \"5ba77-68ec865d-8f8befc;;;\"\r\nlast-modified: Mon, 13 Oct 2025 04:55:57 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 226964\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5ix1%2BsUh0g6V9aHklLCeRwOQ3UdZJ9RadGyrKVPfZ4HOsiBrAuFL4WHjPMHIQHGKp%2Bfyzx1alcbYUOsR0kEBGjvTHrbn3kuJAcGG\"}]}\r\ncf-ray: 990b8158f85c3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":375415,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 453 x 742, 8-bit/color RGBA, non-interlaced","md5":"4450d74eb4a170fc5e5eaa8661181301","sha1":"978aa5bbc96dcdfcf6ffa5c94ca4a4f74a8c663d","sha256":"25c9103af61769377bf6d2ab10a997d5490c1b6cb6f63c0264af0cda200708bf","sha512":"8f5fd39db6bf22db3908c6586a42aafe7b378f390004e3b9199d93efb0ad6e5a2d32a3986c45867abd07321a669951889a949faaf49485ff21c8d18ae699eecd","ssdeep":"6144:M0prMVNZjRuiSC/qKmHvCtYJpJgcnJcnzlMFQVE9K4mzgpwtrNJzq:phMpw73HvTpJgcunpMF5ozgpwtrN0","tlshash":"24842345ccda1ff5a0077ecf5f1b46a7b66506afd542cbd0a8dc45e88272924afc8e02","first_seen":"2025-10-18T22:35:26.654464Z","last_seen":"2025-10-18T22:35:26.654464Z","times_seen":1,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"playhubconnect.com/bn/b81/14d/a76/b8114da769dd2c24105e11e57f48ab888ba111c9.mp4","fqdn":"playhubconnect.com","domain":"playhubconnect.com","tld":"com"},"ip":{"addr":"104.18.15.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playhubconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 01:53:00 GMT","end":"Sun, 14 Dec 2025 02:52:57 GMT"},"fingerprint":{"sha1":"6F:7E:45:FD:0D:E1:5B:9F:C6:D0:2A:9F:AA:8E:F1:FA:79:84:B9:99","sha256":"0A:22:22:40:F0:60:14:FC:D9:59:21:94:0E:1A:55:24:DC:9F:21:05:F9:C7:0D:42:25:19:56:47:78:53:0D:8B"}}},"request":{"raw":"GET /bn/b81/14d/a76/b8114da769dd2c24105e11e57f48ab888ba111c9.mp4 HTTP/1.1\r\nHost: playhubconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 236903\r\ncf-ray: 990b815dfaa1b4f9-OSL\r\nx-amz-id-2: tzM/enfA1UivV9QF4rFlMskmSZNI/zpekRqvmknzwdQjepyujTbt6JIcaD9Hgs4XTq+SsoBSYvU=\r\nx-amz-request-id: 7KFFCMPFYR88KSNT\r\nlast-modified: Fri, 11 Jul 2025 13:58:37 GMT\r\netag: \"86819e70bb2ae172c28434dcffcf0cd7\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nage: 2135883\r\ncontent-range: bytes 0-236902/236903\r\nexpires: Tue, 18 Nov 2025 22:34:49 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":65508,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"c7c45f178f643b6d86465970d5c5e8c7","sha1":"8fbc4f5bd031ac03c5418a361c2f49a5c1eeb8aa","sha256":"82d4cc626a2687003012e749e5549a5414315beaf6a1bd11875ff6b2a71999a9","sha512":"a481772bacc6b82482073f5140bd9f2b67560b89471adf37df4930103c8e0bc2ec5f8d4ed66b37d27054d96bbe98f9a661139e8fe1e630cffb5a719d47f5a17a","ssdeep":"1536:1gjWAHlvkyyTfGEbc9CHcey1FwbeidxdcCKZPRc:uyYvkyyTOwc9scHmyuxdYt6","tlshash":"d653f1f335c01940e9e01e7544f6268a9ac2c9cc87c77e03358f8545efa9f566f06a9a","first_seen":"2025-10-18T22:35:26.658039Z","last_seen":"2025-10-18T22:35:26.658039Z","times_seen":1,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":196,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"playhubconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"guidepaparazzisurface.com/bn.js","fqdn":"guidepaparazzisurface.com","domain":"guidepaparazzisurface.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:47.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guidepaparazzisurface.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:30:59 GMT","end":"Fri, 07 Nov 2025 14:30:58 GMT"},"fingerprint":{"sha1":"09:CA:DA:46:FA:20:93:EF:BF:A3:2F:C8:E4:F1:01:E8:7F:B5:6C:9E","sha256":"59:3C:83:04:25:43:A6:89:F4:CB:77:35:F4:A8:66:DF:9E:B9:7F:B2:D7:CE:A8:00:84:52:B9:C3:73:32:C8:51"}}},"request":{"raw":"GET /bn.js HTTP/1.1\r\nHost: guidepaparazzisurface.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 22:34:47 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 17 Oct 2025 12:09:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f231ed-2907f\"\r\nexpires: Sat, 25 Oct 2025 22:34:47 GMT\r\ncache-control: max-age=604800\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":168063,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"40dda1b64626192f07d9d9f259e9e183","sha1":"c6be3ad994f5964b813df4d47a37c5f3026094f6","sha256":"06b73144a697cfc8a234b30bb27cb9f8f250a0f92e488829f5ef03099605cf21","sha512":"dfd536548c0c0952028e082f26166784098e7f658340cc5a5330f7eedbac1730c26e4de5b4168ceda4c30a6f2cec66ad990fe4abe78a10040587d3f2706a3963","ssdeep":"1536:Ew82uAh7HrQ8srzmckqAiUTIODX3PzdzF+7u3s2r+jZ6d9h2nakswNqQn+jKGMki:EG9E8GFUTIODI4d9kA0g6","tlshash":"7bf3847dfb4f643682d3901d4e3e651ed7f558dd9a4c0440e433d2ebab2888ab321ba5","first_seen":"2025-10-17T12:46:31.411375Z","last_seen":"2025-10-20T05:53:10.121081Z","times_seen":40,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":85,"dns":49,"connect":18,"send":0,"wait":34,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crumpetprankerstench.com/check.html","fqdn":"crumpetprankerstench.com","domain":"crumpetprankerstench.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:48.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crumpetprankerstench.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:34:10 GMT","end":"Fri, 07 Nov 2025 14:34:09 GMT"},"fingerprint":{"sha1":"7C:B3:43:C6:39:F8:CD:E2:D0:F1:5C:2E:B1:50:48:65:BF:8B:43:C8","sha256":"FA:DE:92:E8:E0:29:98:7F:3F:2A:62:FA:97:95:14:52:5D:BC:65:D9:E1:43:13:99:19:70:73:F0:BB:97:18:ED"}}},"request":{"raw":"GET /check.html HTTP/1.1\r\nHost: crumpetprankerstench.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: cart=1; cart_p=2; CHCK=1; PTS=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB; UID=25101817345cb69043bad446bd8558a5938b\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 22:34:48 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Mon, 22 Sep 2025 06:11:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68d0e8af-39e\"\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":926,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"088dba8e97eede53134c93219f7ebbae","sha1":"adb707654d1fe0af7d0d7a9f55660d22bd3625e4","sha256":"6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff","sha512":"23a1f87731e8aee4658993cd1ce35ec179fea80b89bf52aca7634488f1bdfcf88b9cabca4859481357a9fee06cbb49df64bbe0878b1dae0e5df4fa34003c6d80","ssdeep":"","tlshash":"6211d04934e1684c1127a6301597a2183c32a40315cbd949fb9cd7301f815a7dc596df","first_seen":"2024-11-22T16:59:41.974716Z","last_seen":"2026-03-04T10:11:28.020186Z","times_seen":13721,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iyoteen.org/wp-content/uploads/2025/05/Header-with-logo.png","fqdn":"iyoteen.org","domain":"iyoteen.org","tld":"org"},"ip":{"addr":"104.21.45.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iyoteen.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:31:59 GMT","end":"Thu, 08 Jan 2026 10:30:31 GMT"},"fingerprint":{"sha1":"4A:62:E3:55:B9:0F:A1:58:5F:BD:2B:F8:0D:A1:E6:77:EE:46:DC:2C","sha256":"BC:30:2F:73:E4:96:3B:AF:75:1B:31:F3:DF:31:50:4B:49:6F:08:62:50:21:0A:B5:74:33:90:E8:E8:3E:29:13"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/Header-with-logo.png HTTP/1.1\r\nHost: iyoteen.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D; __PPU_cl_tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB; _lscache_vary=330c6618c4a27101283a3afc1ea12d07\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 10274\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 09 Oct 2025 13:24:52 GMT\r\netag: \"2822-6836e7c9-8f6892a;;;\"\r\nlast-modified: Wed, 28 May 2025 10:39:05 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 189262\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L4c9OAOY4khzwemAzJs%2FwdJIx6oLyey6TVE38FZY4D%2BjjmqnE21lf2ngm5YiiENG6x6O%2Br7MwtjuwkLZA5yYKwsHf466hlOQEJBn\"}]}\r\ncf-ray: 990b81584f383181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10274,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 741 x 190, 8-bit colormap, non-interlaced","md5":"185296bde4b259fd448515d653fce133","sha1":"0aed5db0575f17083abb10cbb9a2af1c87564344","sha256":"97464d39fd0349007ea69e345d47dff9fc929dfa3e6d10ff62783be16a196828","sha512":"ee74918e68ad85b4bb7f045238a56262cb6404ac65db212d8bb01e8c46e6d17464171d9a3b918c67106bb2c0f3db255edc4efa8bdf31d6dbcc2154541d9bb0c8","ssdeep":"192:skqpJYlCGJ97pV+Jp8gyuA0hG0AIfrHiNk/saKNtCf0zqNrFz9:PqIlCuFEJh9hm2rCcsPUf0CP","tlshash":"7122c0d0ef2b5497824a6e2169f3099eb002180ce4cd1e4eebf399fafd046569115fe7","first_seen":"2025-10-18T22:35:26.667933Z","last_seen":"2026-01-22T19:44:20.119383Z","times_seen":4,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.guidepaparazzisurface.com/static/video/bn/b81/14d/a76/b8114da769dd2c24105e11e57f48ab888ba111c9.mp4","fqdn":"www.guidepaparazzisurface.com","domain":"guidepaparazzisurface.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:50.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guidepaparazzisurface.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:30:59 GMT","end":"Fri, 07 Nov 2025 14:30:58 GMT"},"fingerprint":{"sha1":"09:CA:DA:46:FA:20:93:EF:BF:A3:2F:C8:E4:F1:01:E8:7F:B5:6C:9E","sha256":"59:3C:83:04:25:43:A6:89:F4:CB:77:35:F4:A8:66:DF:9E:B9:7F:B2:D7:CE:A8:00:84:52:B9:C3:73:32:C8:51"}}},"request":{"raw":"GET /static/video/bn/b81/14d/a76/b8114da769dd2c24105e11e57f48ab888ba111c9.mp4 HTTP/1.1\r\nHost: www.guidepaparazzisurface.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 22:34:50 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 236903\r\nlast-modified: Wed, 15 Oct 2025 18:51:24 GMT\r\netag: \"68efed2c-39d67\"\r\nexpires: Wed, 17 Dec 2025 22:34:50 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-expose-headers: Last-Modified\r\ncontent-range: bytes 0-236902/236903\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":236903,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"86819e70bb2ae172c28434dcffcf0cd7","sha1":"b8114da769dd2c24105e11e57f48ab888ba111c9","sha256":"15d621769406b8621b066ee97402ef2f2b908cf55df4b0fc6b254a0b32f63538","sha512":"0427748350811d7981a9c7c42137ab66f856a459a0dc0a87ce721900052514744ffce39ac8c77d7d9abe0f521401092987cbe8f6e9cf3daf68e6338c0c131160","ssdeep":"6144:utsKwc9sccryzD9O6L03uA6c6IkfcIZu0IxxNCsGJ+c:utsXrcqyDI6IoWzIZXWxYsc","tlshash":"e43413f318905824da786fb324b72b5312a54d4c97e2af02b5cec114ff75e852d4b8b6","first_seen":"2025-06-22T04:01:22.075641Z","last_seen":"2026-03-30T22:53:46.378863Z","times_seen":65,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iyoteen.org/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"iyoteen.org","domain":"iyoteen.org","tld":"org"},"ip":{"addr":"172.67.217.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:47.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iyoteen.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:31:59 GMT","end":"Thu, 08 Jan 2026 10:30:31 GMT"},"fingerprint":{"sha1":"4A:62:E3:55:B9:0F:A1:58:5F:BD:2B:F8:0D:A1:E6:77:EE:46:DC:2C","sha256":"BC:30:2F:73:E4:96:3B:AF:75:1B:31:F3:DF:31:50:4B:49:6F:08:62:50:21:0A:B5:74:33:90:E8:E8:3E:29:13"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: iyoteen.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Sat, 18 Oct 2025 23:22:47 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NCVdWDZUNIhOLojiHHFGtPnWcJbio1IPf0%2BT0vwusTR%2Fw3BMfr8SEoWleU5q%2BCbZB%2Fce%2FeL9Y5VdLIMKOqdw21%2Bm0BG9BSPJmwBw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Sat, 18 Oct 2025 22:34:47 GMT\r\ncf-ray: 990b814df87b8deb-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-05T11:47:06.822961Z","times_seen":292936,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pinayok.com/wp-content/uploads/elementor/google-fonts/fonts/roboto-kfo7cnqeu92fr1me7ksn66agldtyluama3yuba.woff2","fqdn":"pinayok.com","domain":"pinayok.com","tld":"com"},"ip":{"addr":"104.21.24.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pinayok.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Sep 2025 21:34:24 GMT","end":"Fri, 19 Dec 2025 22:33:01 GMT"},"fingerprint":{"sha1":"16:C1:E5:CE:2C:C1:8B:4E:D6:E8:CD:C0:63:E4:85:08:BF:6B:5C:A8","sha256":"CE:80:91:26:EC:4E:CB:83:F8:A7:8E:00:94:9B:37:86:55:07:E4:10:02:C0:D6:0B:90:D1:4D:65:E0:7D:8F:6E"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/roboto-kfo7cnqeu92fr1me7ksn66agldtyluama3yuba.woff2 HTTP/1.1\r\nHost: pinayok.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://iyoteen.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 40128\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 10 Oct 2025 13:56:27 GMT\r\netag: \"9cc0-67eb6956-583a04;;;\"\r\nlast-modified: Tue, 01 Apr 2025 04:19:34 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 107800\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fQyCDcjs2WNUe%2BxTnYU%2FH88EOKh6KB%2Bp%2B6L4LiEhuE3i6e0IpMncN9E5FvWZo28QTACCfW3DRQxc%2BqtsQ8ny1vGw15Ue9b4Odw%3D%3D\"}]}\r\ncf-ray: 990b8159be0056a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-05T11:47:09.583507Z","times_seen":716548,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":91,"dns":27,"connect":45,"send":0,"wait":11,"receive":2,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iyoteen.org/wp-content/uploads/2025/10/rjv_129-576x1024.png","fqdn":"iyoteen.org","domain":"iyoteen.org","tld":"org"},"ip":{"addr":"104.21.45.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iyoteen.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:31:59 GMT","end":"Thu, 08 Jan 2026 10:30:31 GMT"},"fingerprint":{"sha1":"4A:62:E3:55:B9:0F:A1:58:5F:BD:2B:F8:0D:A1:E6:77:EE:46:DC:2C","sha256":"BC:30:2F:73:E4:96:3B:AF:75:1B:31:F3:DF:31:50:4B:49:6F:08:62:50:21:0A:B5:74:33:90:E8:E8:3E:29:13"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/rjv_129-576x1024.png HTTP/1.1\r\nHost: iyoteen.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%22CAIFRQ%22%3A%22ADRQ%252BQAAAAAAAAAJ%22%2C%22CAIFRT%22%3A%22ADRQ%252BQAAAABo9HBQ%22%7D; __PPU_cl_tl=AYKhbNJo9BYJoWMCEIKhbNJo9BYJoWMC; _lscache_vary=330c6618c4a27101283a3afc1ea12d07; bnState_2071059={\"impressions\":2,\"delayStarted\":0}; bnState_2071067={\"impressions\":1,\"delayStarted\":0}; bnState_2071069={\"impressions\":2,\"delayStarted\":0}; bnState_2071060={\"impressions\":4,\"delayStarted\":0}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 305749\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 25 Oct 2025 22:26:30 GMT\r\netag: \"4aa55-68f1f13c-8f90c43;;;\"\r\nlast-modified: Fri, 17 Oct 2025 07:33:16 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 499\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pQux%2B5BgkNap8%2FSH7Om5wHQoAo%2BPnbs7UqZr9%2BULOvATnd5BUg4n0xqG8LZlbtx8gZg36kFXYsaUo7Kbgr0U%2BhH1u4xRpxytfisc\"}]}\r\ncf-ray: 990b815df9de3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":305749,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 576 x 1024, 8-bit colormap, non-interlaced","md5":"1e3d4f22909f52c9344c243b520854c0","sha1":"f098609c1add66fb46a087804bfdb474d28c8104","sha256":"e52d07207f6fc4acb81b5e8f1eea0238dde4140e462360a6ba8ccee9442ab647","sha512":"dc30909bce881ce6cf6c765102f88de0e9de956a017073a0a73aa275cba32c0825c661fc57c9fcb2a6de73a84be8a01056054625cc8e793fea03b095177367f5","ssdeep":"6144:4F87xgUg0VTrv3FgUa07gybgSz9pTaxNcIvmMKU3wQJz+oBNTB8vYxpJ0l86QYLy:a87xgTyTrvVumgqa/mMzwQJ6QN9vxq8J","tlshash":"0b54230da49c86fba42ed7702a0adc3b1966014dd5d6184d97eab027fa0dbd772e4cc2","first_seen":"2025-10-18T22:35:26.676184Z","last_seen":"2025-10-18T22:35:26.676184Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.guidepaparazzisurface.com/static/video/bn/b81/14d/a76/b8114da769dd2c24105e11e57f48ab888ba111c9.mp4","fqdn":"www.guidepaparazzisurface.com","domain":"guidepaparazzisurface.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:50.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guidepaparazzisurface.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:30:59 GMT","end":"Fri, 07 Nov 2025 14:30:58 GMT"},"fingerprint":{"sha1":"09:CA:DA:46:FA:20:93:EF:BF:A3:2F:C8:E4:F1:01:E8:7F:B5:6C:9E","sha256":"59:3C:83:04:25:43:A6:89:F4:CB:77:35:F4:A8:66:DF:9E:B9:7F:B2:D7:CE:A8:00:84:52:B9:C3:73:32:C8:51"}}},"request":{"raw":"GET /static/video/bn/b81/14d/a76/b8114da769dd2c24105e11e57f48ab888ba111c9.mp4 HTTP/1.1\r\nHost: www.guidepaparazzisurface.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 22:34:50 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 236903\r\nlast-modified: Wed, 15 Oct 2025 18:51:24 GMT\r\netag: \"68efed2c-39d67\"\r\nexpires: Wed, 17 Dec 2025 22:34:50 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-expose-headers: Last-Modified\r\ncontent-range: bytes 0-236902/236903\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":236903,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"86819e70bb2ae172c28434dcffcf0cd7","sha1":"b8114da769dd2c24105e11e57f48ab888ba111c9","sha256":"15d621769406b8621b066ee97402ef2f2b908cf55df4b0fc6b254a0b32f63538","sha512":"0427748350811d7981a9c7c42137ab66f856a459a0dc0a87ce721900052514744ffce39ac8c77d7d9abe0f521401092987cbe8f6e9cf3daf68e6338c0c131160","ssdeep":"6144:utsKwc9sccryzD9O6L03uA6c6IkfcIZu0IxxNCsGJ+c:utsXrcqyDI6IoWzIZXWxYsc","tlshash":"e43413f318905824da786fb324b72b5312a54d4c97e2af02b5cec114ff75e852d4b8b6","first_seen":"2025-06-22T04:01:22.075641Z","last_seen":"2026-03-30T22:53:46.378863Z","times_seen":65,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":119,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iyoteen.org/wp-content/uploads/2025/09/jillian_angeli_1.png","fqdn":"iyoteen.org","domain":"iyoteen.org","tld":"org"},"ip":{"addr":"104.21.45.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iyoteen.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:31:59 GMT","end":"Thu, 08 Jan 2026 10:30:31 GMT"},"fingerprint":{"sha1":"4A:62:E3:55:B9:0F:A1:58:5F:BD:2B:F8:0D:A1:E6:77:EE:46:DC:2C","sha256":"BC:30:2F:73:E4:96:3B:AF:75:1B:31:F3:DF:31:50:4B:49:6F:08:62:50:21:0A:B5:74:33:90:E8:E8:3E:29:13"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/jillian_angeli_1.png HTTP/1.1\r\nHost: iyoteen.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D; __PPU_cl_tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB; _lscache_vary=330c6618c4a27101283a3afc1ea12d07\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 1575201\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Oct 2025 12:24:43 GMT\r\netag: \"180921-68c3fbd0-8f2961e;;;\"\r\nlast-modified: Fri, 12 Sep 2025 10:54:08 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 382205\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q6GraTwJuXt5XUK3e48vYkKvUbtGBybh0SlL%2BnVfgQea9W2wuA5W1lu1RYodsUPUDXjVDZwkAN6VgxTrZkhajRiC5s2j9VBz%2F%2BWl\"}]}\r\ncf-ray: 990b81587f933181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1575201,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"dab03feba20f24342078f8e5ede96306","sha1":"2c288138305305116f939490de7167cd81670f34","sha256":"a653185d7c6a3d4c98ff3aaa527488f3820fea185e8bfae6ea52b1707125f886","sha512":"f6ed3e4324bda084610908b01ce22dde44093375e8d894bf62ada20ba978ee7246514c030b0910558bebdbf75e102a2a616c69e83ad84267133cdd2568c20b49","ssdeep":"24576:ieAq1OIjiwJnFvhvsyMJK8MFRNDCsszAu4gmugdC+RNj7Nf4t:iNqsI1ftMJK8iRNCss0Z7TRNl4","tlshash":"db25235dc04363f9e0e3d6361950aa0797a28ee55f103baa43b2ac9f1d96b51371cf88","first_seen":"2025-10-18T22:35:26.679481Z","last_seen":"2025-10-18T22:35:26.679481Z","times_seen":1,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iyoteen.org/wp-content/uploads/2025/07/Iyoteen.com-Maiah-Kaye-Shiraishi-2.png.webp","fqdn":"iyoteen.org","domain":"iyoteen.org","tld":"org"},"ip":{"addr":"104.21.45.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iyoteen.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:31:59 GMT","end":"Thu, 08 Jan 2026 10:30:31 GMT"},"fingerprint":{"sha1":"4A:62:E3:55:B9:0F:A1:58:5F:BD:2B:F8:0D:A1:E6:77:EE:46:DC:2C","sha256":"BC:30:2F:73:E4:96:3B:AF:75:1B:31:F3:DF:31:50:4B:49:6F:08:62:50:21:0A:B5:74:33:90:E8:E8:3E:29:13"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/Iyoteen.com-Maiah-Kaye-Shiraishi-2.png.webp HTTP/1.1\r\nHost: iyoteen.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D; __PPU_cl_tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB; _lscache_vary=330c6618c4a27101283a3afc1ea12d07\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15888\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Oct 2025 07:02:23 GMT\r\netag: \"3e10-68889ed1-902bbaa;;;\"\r\nlast-modified: Tue, 29 Jul 2025 10:13:37 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 114252\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UK2tUAN0p6jQrZABeWbqy3Peneagj%2Flq%2Ft6tU0WKN3PKmss5B3fboqUegkoYJ7IyqcUHIxLx%2BmytlGL7VU8QGyTbsV8ps6Qmql8Q\"}]}\r\ncf-ray: 990b8158bfe73181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15888,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 704x405, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e1f2f967efeaaafeb3de6a3e4265b42b","sha1":"3cef2623f5e81607892537a44607cfb51208d45d","sha256":"8919899a5ed8bd7daa4979c2adfd8334f09823d0df0eda2e6d794dda29222906","sha512":"5d8fae6c2b8861ef29d1e2d038de62602c4fbc57f167a0837b506bb2e318f64ef5c0d2eca2a77840544a578aca55908b1310d65460df8b57440c9ec9cdd1347b","ssdeep":"384:dtSdRlZ3Bk/wwaV8wlIisM8tMeVxJbHcCN2pr5:dtGl9W/wLn+i/ovJTczF","tlshash":"4062d0901f724cadcd99c7da6549e206f1e38a1a1d4ba651a3bcdce49cca9584d2f103","first_seen":"2025-10-18T22:35:26.683092Z","last_seen":"2025-10-18T22:35:26.683092Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guidepaparazzisurface.com/get/2071059?id=2071059\u0026pid=__clb-spot_2071059_jgm_1\u0026jp=_clkaelnlmzhkcwqnmegffy\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.614-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=NaE7Io-7bsPCYB1tniq6Br1s\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=xAqniYuaHR0cHM6Ly9peW90ZWVuLm9yZy8\u0026afid=2648672341339136\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB\u0026vp=0\u0026dto=2\u0026pload=429\u0026rlp=%5B0%2C3%2C26%2C22%2C22%2C73%2C58%2C73%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=6\u0026uf=0\u0026freq=0","fqdn":"guidepaparazzisurface.com","domain":"guidepaparazzisurface.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guidepaparazzisurface.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:30:59 GMT","end":"Fri, 07 Nov 2025 14:30:58 GMT"},"fingerprint":{"sha1":"09:CA:DA:46:FA:20:93:EF:BF:A3:2F:C8:E4:F1:01:E8:7F:B5:6C:9E","sha256":"59:3C:83:04:25:43:A6:89:F4:CB:77:35:F4:A8:66:DF:9E:B9:7F:B2:D7:CE:A8:00:84:52:B9:C3:73:32:C8:51"}}},"request":{"raw":"GET /get/2071059?id=2071059\u0026pid=__clb-spot_2071059_jgm_1\u0026jp=_clkaelnlmzhkcwqnmegffy\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.614-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=NaE7Io-7bsPCYB1tniq6Br1s\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=xAqniYuaHR0cHM6Ly9peW90ZWVuLm9yZy8\u0026afid=2648672341339136\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB\u0026vp=0\u0026dto=2\u0026pload=429\u0026rlp=%5B0%2C3%2C26%2C22%2C22%2C73%2C58%2C73%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=6\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: guidepaparazzisurface.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: cart=1; cart_p=2; UID=251018173496f397c89d7a4c479ac66c5c75; CHCK=1; PTS=AYKhbNJo9BYIoWMBEIKhbNJo9BYIoWMB\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Sat, 21 Nov 2026 22:34:49 GMT; Secure; SameSite=None\nPTS=EIKhbNJo9BYJoWMCAYKhbNJo9BYJoWMC; Path=/; Expires=Sat, 21 Nov 2026 22:34:49 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5054,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (5054), with no line terminators","md5":"48086b60648dc6ef3a3e9e8e953d77b0","sha1":"5dc166b8330ac5da0e36160180b1a67400f98fa9","sha256":"d69d721033f8f65870f8118fa2156c89a87c86278141c789c704047319890c01","sha512":"1b9d726d006d7f82dfac20088989cc9d3be0c6612afbe6a44945e319e09041f86ad20a84126482509a69555bbfc9f345dd6bfac2b2ef39813067c6447044b24e","ssdeep":"96:CfgVJdJZPISJZePVJdJZPISJZKPVJdJZPISJZXPVJdJZPISJZKnF4RLO1PtSo:CfaLPvJ+LPvJuLPvJnLPvJInF4RK1Pwo","tlshash":"3fa1e71ee5979ae82bbb1b54d9fd8ce6ea5e30580c1643938c04e71b149a72e75f4d00","first_seen":"2025-10-18T22:35:26.686756Z","last_seen":"2025-10-18T22:35:26.686756Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guidepaparazzisurface.com/jserror?type=banner_static\u0026bavar=0\u0026build=1.0.614\u0026zoneid=\u0026e=Error\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Fiyoteen.org%2F","fqdn":"guidepaparazzisurface.com","domain":"guidepaparazzisurface.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:50.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guidepaparazzisurface.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:30:59 GMT","end":"Fri, 07 Nov 2025 14:30:58 GMT"},"fingerprint":{"sha1":"09:CA:DA:46:FA:20:93:EF:BF:A3:2F:C8:E4:F1:01:E8:7F:B5:6C:9E","sha256":"59:3C:83:04:25:43:A6:89:F4:CB:77:35:F4:A8:66:DF:9E:B9:7F:B2:D7:CE:A8:00:84:52:B9:C3:73:32:C8:51"}}},"request":{"raw":"GET /jserror?type=banner_static\u0026bavar=0\u0026build=1.0.614\u0026zoneid=\u0026e=Error\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Fiyoteen.org%2F HTTP/1.1\r\nHost: guidepaparazzisurface.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: cart=1; cart_p=2; UID=251018173496f397c89d7a4c479ac66c5c75; CHCK=1; PTS=AYKhbNJo9BYJoWMCEIKhbNJo9BYJoWMC\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 22:34:50 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"playhubconnect.com/bn/b81/14d/a76/b8114da769dd2c24105e11e57f48ab888ba111c9.mp4","fqdn":"playhubconnect.com","domain":"playhubconnect.com","tld":"com"},"ip":{"addr":"104.18.15.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playhubconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 01:53:00 GMT","end":"Sun, 14 Dec 2025 02:52:57 GMT"},"fingerprint":{"sha1":"6F:7E:45:FD:0D:E1:5B:9F:C6:D0:2A:9F:AA:8E:F1:FA:79:84:B9:99","sha256":"0A:22:22:40:F0:60:14:FC:D9:59:21:94:0E:1A:55:24:DC:9F:21:05:F9:C7:0D:42:25:19:56:47:78:53:0D:8B"}}},"request":{"raw":"GET /bn/b81/14d/a76/b8114da769dd2c24105e11e57f48ab888ba111c9.mp4 HTTP/1.1\r\nHost: playhubconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 236903\r\ncf-ray: 990b815dfa9fb4f9-OSL\r\nx-amz-id-2: tzM/enfA1UivV9QF4rFlMskmSZNI/zpekRqvmknzwdQjepyujTbt6JIcaD9Hgs4XTq+SsoBSYvU=\r\nx-amz-request-id: 7KFFCMPFYR88KSNT\r\nlast-modified: Fri, 11 Jul 2025 13:58:37 GMT\r\netag: \"86819e70bb2ae172c28434dcffcf0cd7\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nage: 2135883\r\ncontent-range: bytes 0-236902/236903\r\nexpires: Tue, 18 Nov 2025 22:34:49 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":232512,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"dac21c38b36e389806f879cae7385cad","sha1":"babac9e6de1395208ea20eb4e2d43fcb9b59a864","sha256":"a376e602e16bf429715a57dee1e13f2116fec08453af904a12bb7e9faa468e37","sha512":"86c79e15ea12f1a864ee63bb271f6962fb6435c28bafe42343386af5b59a756e42e1ee67a82623e8a8545d40d332f90af6e9a2bc74354d5a705daf8884fedde1","ssdeep":"6144:utsKwc9sccryzD9O6L03uA6c6IkfcIZu0IxxNCsGJA:utsXrcqyDI6IoWzIZXWxY2","tlshash":"a83413f318905824da742fb324b72b9702954d4c9ba2af02b5cec014bf79e856d4f8b6","first_seen":"2025-10-18T22:35:26.692116Z","last_seen":"2025-10-18T22:35:26.692116Z","times_seen":1,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":213,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"playhubconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"playhubconnect.com/bn/b81/14d/a76/b8114da769dd2c24105e11e57f48ab888ba111c9.mp4","fqdn":"playhubconnect.com","domain":"playhubconnect.com","tld":"com"},"ip":{"addr":"104.18.15.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playhubconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 01:53:00 GMT","end":"Sun, 14 Dec 2025 02:52:57 GMT"},"fingerprint":{"sha1":"6F:7E:45:FD:0D:E1:5B:9F:C6:D0:2A:9F:AA:8E:F1:FA:79:84:B9:99","sha256":"0A:22:22:40:F0:60:14:FC:D9:59:21:94:0E:1A:55:24:DC:9F:21:05:F9:C7:0D:42:25:19:56:47:78:53:0D:8B"}}},"request":{"raw":"GET /bn/b81/14d/a76/b8114da769dd2c24105e11e57f48ab888ba111c9.mp4 HTTP/1.1\r\nHost: playhubconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 236903\r\ncf-ray: 990b815dfaaeb4f9-OSL\r\nx-amz-id-2: tzM/enfA1UivV9QF4rFlMskmSZNI/zpekRqvmknzwdQjepyujTbt6JIcaD9Hgs4XTq+SsoBSYvU=\r\nx-amz-request-id: 7KFFCMPFYR88KSNT\r\nlast-modified: Fri, 11 Jul 2025 13:58:37 GMT\r\netag: \"86819e70bb2ae172c28434dcffcf0cd7\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nage: 2135883\r\ncontent-range: bytes 0-236902/236903\r\nexpires: Tue, 18 Nov 2025 22:34:49 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":236903,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"86819e70bb2ae172c28434dcffcf0cd7","sha1":"b8114da769dd2c24105e11e57f48ab888ba111c9","sha256":"15d621769406b8621b066ee97402ef2f2b908cf55df4b0fc6b254a0b32f63538","sha512":"0427748350811d7981a9c7c42137ab66f856a459a0dc0a87ce721900052514744ffce39ac8c77d7d9abe0f521401092987cbe8f6e9cf3daf68e6338c0c131160","ssdeep":"6144:utsKwc9sccryzD9O6L03uA6c6IkfcIZu0IxxNCsGJ+c:utsXrcqyDI6IoWzIZXWxYsc","tlshash":"e43413f318905824da786fb324b72b5312a54d4c97e2af02b5cec114ff75e852d4b8b6","first_seen":"2025-06-22T04:01:22.075641Z","last_seen":"2026-03-30T22:53:46.378863Z","times_seen":65,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"playhubconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iyoteen.org/wp-content/uploads/2025/07/Yumie3-34.png.webp","fqdn":"iyoteen.org","domain":"iyoteen.org","tld":"org"},"ip":{"addr":"104.21.45.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iyoteen.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:31:59 GMT","end":"Thu, 08 Jan 2026 10:30:31 GMT"},"fingerprint":{"sha1":"4A:62:E3:55:B9:0F:A1:58:5F:BD:2B:F8:0D:A1:E6:77:EE:46:DC:2C","sha256":"BC:30:2F:73:E4:96:3B:AF:75:1B:31:F3:DF:31:50:4B:49:6F:08:62:50:21:0A:B5:74:33:90:E8:E8:3E:29:13"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/Yumie3-34.png.webp HTTP/1.1\r\nHost: iyoteen.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D; __PPU_cl_tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB; _lscache_vary=330c6618c4a27101283a3afc1ea12d07\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10248\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 22 Oct 2025 19:02:27 GMT\r\netag: \"2808-686f70ea-91446f2;;;\"\r\nlast-modified: Thu, 10 Jul 2025 07:51:06 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 271941\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MHWuYop5ddGfGPDxXvzj7wr1yq2%2FH8OoME5EQXNcc2G53ZPxe0pq99DamOv%2BP5rU8LwR5g6Kj9KQYEeRbLM6QxEwL6QvipunoCdY\"}]}\r\ncf-ray: 990b8158f86b3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10248,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 517x672, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bca459948f395c1d42a6d2fa2cb23fb9","sha1":"dc50f76975f6bea2679d6e99fd95a26f9c89487d","sha256":"b571478a63d51039558823532d78e68ac420b734e080ed423187cd29e04d6b87","sha512":"82c05f921ec8530a2cdab05bc2515176368788857f689d5e54510eb200e54080f12ffd9a0451eb4e82ad576e9a4a2d1117a0bc3080e11c089306b7175a43826f","ssdeep":"192:YAr4elIozNJo5A7FAcRh6VS2/jBmR3tPUTDwNE0sfPMAlluSZ8WH56jtEXiP72:YA6ozNJaAtn6l/dgdVPFCuSZ8WZ66iPK","tlshash":"8622cf28a4f4a31b21c631f2c2628f76297f0ff9efb98d550e44e98f15842459115eac","first_seen":"2025-10-18T22:35:26.69554Z","last_seen":"2025-10-18T22:35:26.69554Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":24,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pinayok.com/wp-content/uploads/elementor/google-fonts/fonts/roboto-kfo7cnqeu92fr1me7ksn66agldtyluama3yuba.woff2","fqdn":"pinayok.com","domain":"pinayok.com","tld":"com"},"ip":{"addr":"104.21.24.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pinayok.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Sep 2025 21:34:24 GMT","end":"Fri, 19 Dec 2025 22:33:01 GMT"},"fingerprint":{"sha1":"16:C1:E5:CE:2C:C1:8B:4E:D6:E8:CD:C0:63:E4:85:08:BF:6B:5C:A8","sha256":"CE:80:91:26:EC:4E:CB:83:F8:A7:8E:00:94:9B:37:86:55:07:E4:10:02:C0:D6:0B:90:D1:4D:65:E0:7D:8F:6E"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/roboto-kfo7cnqeu92fr1me7ksn66agldtyluama3yuba.woff2 HTTP/1.1\r\nHost: pinayok.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://iyoteen.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 40128\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 10 Oct 2025 13:56:27 GMT\r\netag: \"9cc0-67eb6956-583a04;;;\"\r\nlast-modified: Tue, 01 Apr 2025 04:19:34 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 107800\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6M0ZymxCxTrvQgjVpQX3QZ%2BYg0dzR6sKGg6KFOBfXTPZ7LdE7kLAmNwUcYz%2BpdsP98E1YWQz6fHM0NLdgvP%2FI9aC4bg9haJeXw%3D%3D\"}]}\r\ncf-ray: 990b8159bdfc56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-05T11:47:09.583507Z","times_seen":716548,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":87,"dns":9,"connect":65,"send":0,"wait":8,"receive":3,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guidepaparazzisurface.com/get/2071067?id=2071067\u0026pid=__clb-spot_2071067_ymn_7\u0026jp=_clkaelnlmzhkcwqnmegffy\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.614-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=NaE7Io-7bsPCYB1tniq6Br1s\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=xAqniYuaHR0cHM6Ly9peW90ZWVuLm9yZy8\u0026afid=2648672341339136\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB\u0026vp=0\u0026dto=2\u0026pload=429\u0026rlp=%5B0%2C3%2C26%2C22%2C22%2C73%2C58%2C73%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=6\u0026uf=0\u0026freq=0","fqdn":"guidepaparazzisurface.com","domain":"guidepaparazzisurface.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guidepaparazzisurface.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:30:59 GMT","end":"Fri, 07 Nov 2025 14:30:58 GMT"},"fingerprint":{"sha1":"09:CA:DA:46:FA:20:93:EF:BF:A3:2F:C8:E4:F1:01:E8:7F:B5:6C:9E","sha256":"59:3C:83:04:25:43:A6:89:F4:CB:77:35:F4:A8:66:DF:9E:B9:7F:B2:D7:CE:A8:00:84:52:B9:C3:73:32:C8:51"}}},"request":{"raw":"GET /get/2071067?id=2071067\u0026pid=__clb-spot_2071067_ymn_7\u0026jp=_clkaelnlmzhkcwqnmegffy\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.614-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=NaE7Io-7bsPCYB1tniq6Br1s\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=xAqniYuaHR0cHM6Ly9peW90ZWVuLm9yZy8\u0026afid=2648672341339136\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB\u0026vp=0\u0026dto=2\u0026pload=429\u0026rlp=%5B0%2C3%2C26%2C22%2C22%2C73%2C58%2C73%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=6\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: guidepaparazzisurface.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: cart=1; cart_p=2; UID=251018173496f397c89d7a4c479ac66c5c75; CHCK=1; PTS=AYKhbNJo9BYIoWMBEIKhbNJo9BYIoWMB\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Sat, 21 Nov 2026 22:34:49 GMT; Secure; SameSite=None\nPTS=AYKhbNJo9BYJoWMCEIKhbNJo9BYJoWMC; Path=/; Expires=Sat, 21 Nov 2026 22:34:49 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5054,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (5054), with no line terminators","md5":"ba9dc75a7bb27b43f894cba7f131b268","sha1":"8708c55bd3947067ef71568dc2ba4ff50e77f2db","sha256":"1a51f5b51a3e2b0575adca0ef27235a6c0cc6f9778f8279a10ac4e266548f223","sha512":"fe7b33b853883370deaad189dafffef2590e130ca432b2e4cd1e351f8bee2127d947088d613780f58a1931733786d2874678971307b89777487c8c27febe4ab6","ssdeep":"96:v4sWjxywnGIdCWjxywnGId3KWjxywnGIdnWjxywnGId1CcsjcsOncsZKISco:Qlyw79lyw731lyw7Wlyw7dsgsOcsZKIM","tlshash":"67a1973bca83f45ba51a260d8147df56ec49e3e5e5c18e78b384d702943b02ad5a7c17","first_seen":"2025-10-18T22:35:26.69911Z","last_seen":"2025-10-18T22:35:26.69911Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iyoteen.org/wp-content/litespeed/css/08ead27b4e5ac1845abfaeed87bcf5f4.css?ver=8b8d9","fqdn":"iyoteen.org","domain":"iyoteen.org","tld":"org"},"ip":{"addr":"104.21.45.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:48.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iyoteen.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:31:59 GMT","end":"Thu, 08 Jan 2026 10:30:31 GMT"},"fingerprint":{"sha1":"4A:62:E3:55:B9:0F:A1:58:5F:BD:2B:F8:0D:A1:E6:77:EE:46:DC:2C","sha256":"BC:30:2F:73:E4:96:3B:AF:75:1B:31:F3:DF:31:50:4B:49:6F:08:62:50:21:0A:B5:74:33:90:E8:E8:3E:29:13"}}},"request":{"raw":"GET /wp-content/litespeed/css/08ead27b4e5ac1845abfaeed87bcf5f4.css?ver=8b8d9 HTTP/1.1\r\nHost: iyoteen.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D; __PPU_cl_tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB; _lscache_vary=330c6618c4a27101283a3afc1ea12d07\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 22:34:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 86236\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 25 Oct 2025 22:34:48 GMT\r\netag: \"b567c-68d549bd-8eea871;br\"\r\nlast-modified: Thu, 25 Sep 2025 13:55:09 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=92q6H0RN3eNVpT2cRoAZKZiQDtY4tS4EOn8HlZhcLS%2BY2F9N0A7w4PDO5DaVYDlyZyhOBeqzcf6ApuknRA5PYq7EPRiWWxH6HN2%2F\"}]}\r\ncf-ray: 990b81555aaa3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":743036,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (27458), with CRLF, LF line terminators","md5":"08ead27b4e5ac1845abfaeed87bcf5f4","sha1":"8c311ac5cdc360ea9d4ad6f20c9e974b90d8610d","sha256":"73dbcf476cfae690db8b87c5f3a702d0c85802d0e624b729cf8642629a21ad48","sha512":"ae0201a0ddd106c430c8ba6b51120d369c0d5e124b9394ae1fa0f6a5be0ffecc7279eed683cd0026b448a75f69949d1ad3225f23117ca3d8b54fcbdc4549959c","ssdeep":"12288:PZdwe1aAvkqDX3oyq5BrieD0OTuotFeBSL/dzriOyFTSyT:PZdwe1aAvkqDX3oyq5BrieD0OTuo5L/4","tlshash":"faf42a71b9231188a33bc617a7c6779c2228d582e2434ddaf40a5d09cbe7ed523b771b","first_seen":"2025-10-18T22:35:26.702456Z","last_seen":"2025-10-18T22:35:26.702456Z","times_seen":1,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":125,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.guidepaparazzisurface.com/static/video/bn/b81/14d/a76/b8114da769dd2c24105e11e57f48ab888ba111c9.mp4","fqdn":"www.guidepaparazzisurface.com","domain":"guidepaparazzisurface.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:50.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guidepaparazzisurface.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:30:59 GMT","end":"Fri, 07 Nov 2025 14:30:58 GMT"},"fingerprint":{"sha1":"09:CA:DA:46:FA:20:93:EF:BF:A3:2F:C8:E4:F1:01:E8:7F:B5:6C:9E","sha256":"59:3C:83:04:25:43:A6:89:F4:CB:77:35:F4:A8:66:DF:9E:B9:7F:B2:D7:CE:A8:00:84:52:B9:C3:73:32:C8:51"}}},"request":{"raw":"GET /static/video/bn/b81/14d/a76/b8114da769dd2c24105e11e57f48ab888ba111c9.mp4 HTTP/1.1\r\nHost: www.guidepaparazzisurface.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 22:34:50 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 236903\r\nlast-modified: Wed, 15 Oct 2025 18:51:24 GMT\r\netag: \"68efed2c-39d67\"\r\nexpires: Wed, 17 Dec 2025 22:34:50 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-expose-headers: Last-Modified\r\ncontent-range: bytes 0-236902/236903\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":236903,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"86819e70bb2ae172c28434dcffcf0cd7","sha1":"b8114da769dd2c24105e11e57f48ab888ba111c9","sha256":"15d621769406b8621b066ee97402ef2f2b908cf55df4b0fc6b254a0b32f63538","sha512":"0427748350811d7981a9c7c42137ab66f856a459a0dc0a87ce721900052514744ffce39ac8c77d7d9abe0f521401092987cbe8f6e9cf3daf68e6338c0c131160","ssdeep":"6144:utsKwc9sccryzD9O6L03uA6c6IkfcIZu0IxxNCsGJ+c:utsXrcqyDI6IoWzIZXWxYsc","tlshash":"e43413f318905824da786fb324b72b5312a54d4c97e2af02b5cec114ff75e852d4b8b6","first_seen":"2025-06-22T04:01:22.075641Z","last_seen":"2026-03-30T22:53:46.378863Z","times_seen":65,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iyoteen.org/","fqdn":"iyoteen.org","domain":"iyoteen.org","tld":"org"},"ip":{"addr":"172.67.217.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-18T22:34:47.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iyoteen.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:31:59 GMT","end":"Thu, 08 Jan 2026 10:30:31 GMT"},"fingerprint":{"sha1":"4A:62:E3:55:B9:0F:A1:58:5F:BD:2B:F8:0D:A1:E6:77:EE:46:DC:2C","sha256":"BC:30:2F:73:E4:96:3B:AF:75:1B:31:F3:DF:31:50:4B:49:6F:08:62:50:21:0A:B5:74:33:90:E8:E8:3E:29:13"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: iyoteen.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 22:34:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.3.23\r\nx-dns-prefetch-control: on\r\nx-frame-options: SAMEORIGIN\r\nlink: \u003chttps://iyoteen.org/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://iyoteen.org/wp-json/wp/v2/pages/589\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://iyoteen.org/\u003e; rel=shortlink\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-litespeed-cache: hit\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yQfZg0dxyPa3nqye89hyLv4rnuJyZMHzZfaGvSM5jWkV6S1DG1PCZNIV5uRPqErYmaBUOq5OL9JfG4PzJyUEY6So5RBdKy59JA%3D%3D\"}]}\r\nage: 114995\r\ncache-control: max-age=3600\r\ncf-cache-status: HIT\r\nlast-modified: Fri, 17 Oct 2025 14:38:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 990b814c5d2a569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Elementor:3.29.2","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.23","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":234496,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (41972)","md5":"7f9f0296686f5c539cc6d9119e592e53","sha1":"955c0d8aa9ed150db8f05321463e6b5d742af438","sha256":"0555e060f32dd3d53eed7ab9685c9e7bd1b1550df2c88b9f6260f3d85a65b453","sha512":"d753b9baa8eacd96481c2007f3e4f07cddd914abdd21e603aaa58bd7afb5fb1c2c4c113c4bc76ba921da99bc94d1b9b63451f00f37865b9c222e3e6e8740db15","ssdeep":"1536:r0tYXZKCX4iWv+2ZAvTqplSg7yc3rrteqocYyKLe2otrrW:okplTASg7rOq21","tlshash":"313464723906502a237f81cb905b360ca5c3f2cbe58998c1a7f8a268d7b4ef077d565d","first_seen":"2025-10-18T22:35:26.705823Z","last_seen":"2025-10-18T22:35:26.705823Z","times_seen":1,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":59,"dns":36,"connect":1,"send":0,"wait":18,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crumpetprankerstench.com/on.js","fqdn":"crumpetprankerstench.com","domain":"crumpetprankerstench.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:48.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crumpetprankerstench.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:34:10 GMT","end":"Fri, 07 Nov 2025 14:34:09 GMT"},"fingerprint":{"sha1":"7C:B3:43:C6:39:F8:CD:E2:D0:F1:5C:2E:B1:50:48:65:BF:8B:43:C8","sha256":"FA:DE:92:E8:E0:29:98:7F:3F:2A:62:FA:97:95:14:52:5D:BC:65:D9:E1:43:13:99:19:70:73:F0:BB:97:18:ED"}}},"request":{"raw":"GET /on.js HTTP/1.1\r\nHost: crumpetprankerstench.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: cart=1; cart_p=2; CHCK=1; PTS=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB; UID=25101817345cb69043bad446bd8558a5938b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 22:34:48 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 17 Oct 2025 12:09:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f231ed-25fc6\"\r\nexpires: Sat, 25 Oct 2025 22:34:48 GMT\r\ncache-control: max-age=604800\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":155590,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d20cd34c0ce632ba42f9c9715a6f0129","sha1":"e8485d12fcc7c413d320cca78794f30ebeaeee56","sha256":"acebab3a34dc13a8c7288193ae322b53c66719ccda8e7d7f128b36f098e87bdf","sha512":"51030d1ba9b3262c37a04e70672873a84a69827622d2ad083ab5c209f24708ffe1d4e617fcf0392e8103b085298220f7592de091224dcf7004fe2a6332c61179","ssdeep":"1536:803Om3Tw2hdvXpDLQa0SFMqFA4fKRHzd6bRa322M/ZScQPJViBYJ5+RDquMMl/6Q:803xLQheJyRHzduiol/6ep","tlshash":"d8e3999d6bb13c378142ac296c2f7609ab3d94e195cd4084d4aed1e42d74b3af331a7e","first_seen":"2025-10-17T15:07:50.796879Z","last_seen":"2025-10-20T06:45:45.745122Z","times_seen":64,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":31,"dns":1,"connect":17,"send":0,"wait":46,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guidepaparazzisurface.com/jserror?type=banner_static\u0026bavar=0\u0026build=1.0.614\u0026zoneid=\u0026e=Error\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Fiyoteen.org%2F","fqdn":"guidepaparazzisurface.com","domain":"guidepaparazzisurface.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:50.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guidepaparazzisurface.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:30:59 GMT","end":"Fri, 07 Nov 2025 14:30:58 GMT"},"fingerprint":{"sha1":"09:CA:DA:46:FA:20:93:EF:BF:A3:2F:C8:E4:F1:01:E8:7F:B5:6C:9E","sha256":"59:3C:83:04:25:43:A6:89:F4:CB:77:35:F4:A8:66:DF:9E:B9:7F:B2:D7:CE:A8:00:84:52:B9:C3:73:32:C8:51"}}},"request":{"raw":"GET /jserror?type=banner_static\u0026bavar=0\u0026build=1.0.614\u0026zoneid=\u0026e=Error\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Fiyoteen.org%2F HTTP/1.1\r\nHost: guidepaparazzisurface.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: cart=1; cart_p=2; UID=251018173496f397c89d7a4c479ac66c5c75; CHCK=1; PTS=AYKhbNJo9BYJoWMCEIKhbNJo9BYJoWMC\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 22:34:50 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iyoteen.org/wp-content/uploads/2025/10/nicole_ysabel_pineda_3.png","fqdn":"iyoteen.org","domain":"iyoteen.org","tld":"org"},"ip":{"addr":"104.21.45.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iyoteen.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:31:59 GMT","end":"Thu, 08 Jan 2026 10:30:31 GMT"},"fingerprint":{"sha1":"4A:62:E3:55:B9:0F:A1:58:5F:BD:2B:F8:0D:A1:E6:77:EE:46:DC:2C","sha256":"BC:30:2F:73:E4:96:3B:AF:75:1B:31:F3:DF:31:50:4B:49:6F:08:62:50:21:0A:B5:74:33:90:E8:E8:3E:29:13"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/nicole_ysabel_pineda_3.png HTTP/1.1\r\nHost: iyoteen.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%22CAIFRQ%22%3A%22ADRQ%252BQAAAAAAAAAJ%22%2C%22CAIFRT%22%3A%22ADRQ%252BQAAAABo9HBQ%22%7D; __PPU_cl_tl=AYKhbNJo9BYJoWMCEIKhbNJo9BYJoWMC; _lscache_vary=330c6618c4a27101283a3afc1ea12d07; bnState_2071059={\"impressions\":2,\"delayStarted\":0}; bnState_2071067={\"impressions\":1,\"delayStarted\":0}; bnState_2071069={\"impressions\":2,\"delayStarted\":0}; bnState_2071060={\"impressions\":4,\"delayStarted\":0}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 535593\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 24 Oct 2025 14:50:45 GMT\r\netag: \"82c29-68f1ef6a-8f90aa5;;;\"\r\nlast-modified: Fri, 17 Oct 2025 07:25:30 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 114244\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IXzrwyuVpEsze6Egynk4AJPOEB5FFsKKpvwZXpYZAaEyW3Rwms1FXJkQ2K144C5cuimFsv%2F%2F29E3UP8DYzXJcWKUhKGadXZajCej\"}]}\r\ncf-ray: 990b815e09ee3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":535593,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 528 x 842, 8-bit/color RGBA, non-interlaced","md5":"286180557d8f4f2ed26a067df5c9e9e9","sha1":"abd5d6bfbb28d48e24beb8937224fb6fe0a88a8d","sha256":"809d10247fa1baa1d47f3153a28b454051b31cca3887557c2ad1b3cc3f52b7be","sha512":"150a5a6c6c1e8b2bf6488ce4faf9d04b494a345d661fad65ed4c26995df43490db0be3d9a62bd15264058e324fe3a009cb2f7e18bd4c50f3005ed682c0573784","ssdeep":"12288:d2ZWAYBZd9alGZKTREjf6kDNfMqZc3LFh3BT7jinaMmZOWIF:hBglG6EjR6RT6neG","tlshash":"bab4232cd9e5057aa84e6046d8c2f79a52c189ea8cdef348c43bcefd66547083226f17","first_seen":"2025-10-18T22:35:26.711698Z","last_seen":"2025-10-18T22:35:26.711698Z","times_seen":1,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guidepaparazzisurface.com/jserror?type=banner_static\u0026bavar=0\u0026build=1.0.614\u0026zoneid=\u0026e=Error\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Fiyoteen.org%2F","fqdn":"guidepaparazzisurface.com","domain":"guidepaparazzisurface.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:50.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guidepaparazzisurface.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:30:59 GMT","end":"Fri, 07 Nov 2025 14:30:58 GMT"},"fingerprint":{"sha1":"09:CA:DA:46:FA:20:93:EF:BF:A3:2F:C8:E4:F1:01:E8:7F:B5:6C:9E","sha256":"59:3C:83:04:25:43:A6:89:F4:CB:77:35:F4:A8:66:DF:9E:B9:7F:B2:D7:CE:A8:00:84:52:B9:C3:73:32:C8:51"}}},"request":{"raw":"GET /jserror?type=banner_static\u0026bavar=0\u0026build=1.0.614\u0026zoneid=\u0026e=Error\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Fiyoteen.org%2F HTTP/1.1\r\nHost: guidepaparazzisurface.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: cart=1; cart_p=2; UID=251018173496f397c89d7a4c479ac66c5c75; CHCK=1; PTS=AYKhbNJo9BYJoWMCEIKhbNJo9BYJoWMC\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 22:34:50 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iyoteen.org/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"iyoteen.org","domain":"iyoteen.org","tld":"org"},"ip":{"addr":"104.21.45.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:48.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iyoteen.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:31:59 GMT","end":"Thu, 08 Jan 2026 10:30:31 GMT"},"fingerprint":{"sha1":"4A:62:E3:55:B9:0F:A1:58:5F:BD:2B:F8:0D:A1:E6:77:EE:46:DC:2C","sha256":"BC:30:2F:73:E4:96:3B:AF:75:1B:31:F3:DF:31:50:4B:49:6F:08:62:50:21:0A:B5:74:33:90:E8:E8:3E:29:13"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: iyoteen.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D; __PPU_cl_tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB; _lscache_vary=330c6618c4a27101283a3afc1ea12d07\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 22:34:48 GMT\r\ncontent-type: application/javascript\r\nexpires: Sat, 18 Oct 2025 23:22:48 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qf1zKSO4xOMf71ZcR7q46XSayvSLfzHBaEKFZ%2BB%2B8lj4FswMP%2FL2tUfoINBHKM9yJ7Y%2BxuYTEcg8hraZGFuBgVd6YkceDTZphAlq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 990b81555abc3181-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-05T11:47:06.822961Z","times_seen":292936,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iyoteen.org/wp-content/uploads/2025/09/ava_mendez_1.png","fqdn":"iyoteen.org","domain":"iyoteen.org","tld":"org"},"ip":{"addr":"104.21.45.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iyoteen.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:31:59 GMT","end":"Thu, 08 Jan 2026 10:30:31 GMT"},"fingerprint":{"sha1":"4A:62:E3:55:B9:0F:A1:58:5F:BD:2B:F8:0D:A1:E6:77:EE:46:DC:2C","sha256":"BC:30:2F:73:E4:96:3B:AF:75:1B:31:F3:DF:31:50:4B:49:6F:08:62:50:21:0A:B5:74:33:90:E8:E8:3E:29:13"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/ava_mendez_1.png HTTP/1.1\r\nHost: iyoteen.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D; __PPU_cl_tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB; _lscache_vary=330c6618c4a27101283a3afc1ea12d07\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 1010072\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 24 Oct 2025 14:50:37 GMT\r\netag: \"f6998-68d52f30-8f31b53;;;\"\r\nlast-modified: Thu, 25 Sep 2025 12:01:52 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 114252\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yTS4GoVcfBiKdk4Y1ccE4jp3jUxCCCNmnQCQeQHQJdWHbX43qhCWHyEs5wDTNlFBUKb5HIvID%2BFZVySEUBThhmDEoZwb2rjB9wOu\"}]}\r\ncf-ray: 990b8158e8493181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1010072,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 613 x 798, 8-bit/color RGBA, non-interlaced","md5":"0e547cb89e7f124778c40319230a080d","sha1":"1a418b3f1127178535c44b669cf7aae666d4077e","sha256":"51550ae66f38f3bc07d84410847ee747197a97e67c4c06482275e95119877d71","sha512":"287effad5c7a6c2b33df8161d79c1f7f654a02be34abec652b51ef7b6a8eb8fb50c7af55de4d4aa024d521ba106a602e0ea0436b3278d029007320f0b4f41248","ssdeep":"24576:zbkdY1UIv/Hp2dkaxQtXMDBXtcI8uwr+dRs:PxPvh2dkaxQtXM9tZYeRs","tlshash":"9025238ad39609b0e58225d70ce9a2535a870d731f26dbdb6231e04e9ab43c727c5f1f","first_seen":"2025-10-18T22:35:26.71607Z","last_seen":"2025-11-20T19:46:12.750707Z","times_seen":2,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":20,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iyoteen.org/wp-content/uploads/2025/05/cropped-Icon-32x32.png","fqdn":"iyoteen.org","domain":"iyoteen.org","tld":"org"},"ip":{"addr":"104.21.45.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iyoteen.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:31:59 GMT","end":"Thu, 08 Jan 2026 10:30:31 GMT"},"fingerprint":{"sha1":"4A:62:E3:55:B9:0F:A1:58:5F:BD:2B:F8:0D:A1:E6:77:EE:46:DC:2C","sha256":"BC:30:2F:73:E4:96:3B:AF:75:1B:31:F3:DF:31:50:4B:49:6F:08:62:50:21:0A:B5:74:33:90:E8:E8:3E:29:13"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/cropped-Icon-32x32.png HTTP/1.1\r\nHost: iyoteen.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D; __PPU_cl_tl=AYKhbNJo9BYJoWMCEIKhbNJo9BYJoWMC; _lscache_vary=330c6618c4a27101283a3afc1ea12d07\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 1014\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Oct 2025 00:53:18 GMT\r\netag: \"3f6-6836e4ed-8fc5d6a;;;\"\r\nlast-modified: Wed, 28 May 2025 10:26:53 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 116255\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z0rNQUKhxQipSR3laonkWv1VNYy9E2zADhquAtxUg3aGOrv60aHWAZfnDglR0si5F4%2B4Fy5myETEMcgDSj3mvc8sI8P9mWZ%2FWwSM\"}]}\r\ncf-ray: 990b815b6c8f3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1014,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"087265e735f4dc7c33009f836199c992","sha1":"3eb0a0b48685f9eb83300c324358069fb64c018d","sha256":"cd1fddc092b3e9c6384a8ea988b9e4e8cf0c785cec3b85c26905140849efd82e","sha512":"0589ec8cbd035d2f68a331082ad6524c6e2da2b1c61683292f6b0430021e129120293d097ac4c94b12a3aa1a69ea6d89e72b91cc648cf8ae728a8d0deab9d5d4","ssdeep":"","tlshash":"c111656b5a964419ca8ac6339a1215d8f5ff080c24252acc0b1aa00a68893b94bc39ac","first_seen":"2025-10-18T22:35:26.720688Z","last_seen":"2026-01-22T19:44:20.118202Z","times_seen":4,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crumpetprankerstench.com/on.js","fqdn":"crumpetprankerstench.com","domain":"crumpetprankerstench.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:47.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crumpetprankerstench.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:34:10 GMT","end":"Fri, 07 Nov 2025 14:34:09 GMT"},"fingerprint":{"sha1":"7C:B3:43:C6:39:F8:CD:E2:D0:F1:5C:2E:B1:50:48:65:BF:8B:43:C8","sha256":"FA:DE:92:E8:E0:29:98:7F:3F:2A:62:FA:97:95:14:52:5D:BC:65:D9:E1:43:13:99:19:70:73:F0:BB:97:18:ED"}}},"request":{"raw":"GET /on.js HTTP/1.1\r\nHost: crumpetprankerstench.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 22:34:47 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 17 Oct 2025 12:09:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f231ed-25fc6\"\r\nexpires: Sat, 25 Oct 2025 22:34:47 GMT\r\ncache-control: max-age=604800\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":155590,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d20cd34c0ce632ba42f9c9715a6f0129","sha1":"e8485d12fcc7c413d320cca78794f30ebeaeee56","sha256":"acebab3a34dc13a8c7288193ae322b53c66719ccda8e7d7f128b36f098e87bdf","sha512":"51030d1ba9b3262c37a04e70672873a84a69827622d2ad083ab5c209f24708ffe1d4e617fcf0392e8103b085298220f7592de091224dcf7004fe2a6332c61179","ssdeep":"1536:803Om3Tw2hdvXpDLQa0SFMqFA4fKRHzd6bRa322M/ZScQPJViBYJ5+RDquMMl/6Q:803xLQheJyRHzduiol/6ep","tlshash":"d8e3999d6bb13c378142ac296c2f7609ab3d94e195cd4084d4aed1e42d74b3af331a7e","first_seen":"2025-10-17T15:07:50.796879Z","last_seen":"2025-10-20T06:45:45.745122Z","times_seen":64,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":69,"dns":31,"connect":17,"send":0,"wait":34,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guidepaparazzisurface.com/get/2071069?id=2071069\u0026pid=__clb-spot_2071069_hoh_8\u0026jp=_clkaelnlmzhkcwqnmegffy\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.614-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=NaE7Io-7bsPCYB1tniq6Br1s\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=xAqniYuaHR0cHM6Ly9peW90ZWVuLm9yZy8\u0026afid=2648672341339136\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB\u0026vp=0\u0026dto=2\u0026pload=429\u0026rlp=%5B0%2C3%2C26%2C22%2C22%2C73%2C58%2C73%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=6\u0026uf=0\u0026freq=0","fqdn":"guidepaparazzisurface.com","domain":"guidepaparazzisurface.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guidepaparazzisurface.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:30:59 GMT","end":"Fri, 07 Nov 2025 14:30:58 GMT"},"fingerprint":{"sha1":"09:CA:DA:46:FA:20:93:EF:BF:A3:2F:C8:E4:F1:01:E8:7F:B5:6C:9E","sha256":"59:3C:83:04:25:43:A6:89:F4:CB:77:35:F4:A8:66:DF:9E:B9:7F:B2:D7:CE:A8:00:84:52:B9:C3:73:32:C8:51"}}},"request":{"raw":"GET /get/2071069?id=2071069\u0026pid=__clb-spot_2071069_hoh_8\u0026jp=_clkaelnlmzhkcwqnmegffy\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.614-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=NaE7Io-7bsPCYB1tniq6Br1s\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=xAqniYuaHR0cHM6Ly9peW90ZWVuLm9yZy8\u0026afid=2648672341339136\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB\u0026vp=0\u0026dto=2\u0026pload=429\u0026rlp=%5B0%2C3%2C26%2C22%2C22%2C73%2C58%2C73%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=6\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: guidepaparazzisurface.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: cart=1; cart_p=2; UID=251018173496f397c89d7a4c479ac66c5c75; CHCK=1; PTS=AYKhbNJo9BYIoWMBEIKhbNJo9BYIoWMB\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Sat, 21 Nov 2026 22:34:49 GMT; Secure; SameSite=None\nPTS=AYKhbNJo9BYJoWMCEIKhbNJo9BYJoWMC; Path=/; Expires=Sat, 21 Nov 2026 22:34:49 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5054,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (5054), with no line terminators","md5":"551e4e46777c285ebc93e86323a49257","sha1":"5a052ce3c44726ecffb6527b489137d28982c94f","sha256":"cdf2d8b8bf89fab6994c1946e466622702c924786ab2c02bf495c820fea7b0b9","sha512":"4150aefe928e5e95e8162f132f0920f012d07f22af5a99f0ecd914657fc74d700916b8e0f3875dc693393c10c15f443a01c307eaeb795c9833b13cc353efe677","ssdeep":"96:kVH+R8Nrs0mvH+R8Nrs0maH+R8Nrs0m1H+R8Nrs0mp+G8II1gAo:k128JXm/28JXmI28JXmV28JXmczo","tlshash":"06a1c5c21d9d6ccd34f84e9a4e72ed9024676f981f53601a9772d9a07a90222ffc700f","first_seen":"2025-10-18T22:35:26.724288Z","last_seen":"2025-10-18T22:35:26.724288Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iyoteen.org/wp-content/uploads/2025/10/chinits_2.png","fqdn":"iyoteen.org","domain":"iyoteen.org","tld":"org"},"ip":{"addr":"104.21.45.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iyoteen.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:31:59 GMT","end":"Thu, 08 Jan 2026 10:30:31 GMT"},"fingerprint":{"sha1":"4A:62:E3:55:B9:0F:A1:58:5F:BD:2B:F8:0D:A1:E6:77:EE:46:DC:2C","sha256":"BC:30:2F:73:E4:96:3B:AF:75:1B:31:F3:DF:31:50:4B:49:6F:08:62:50:21:0A:B5:74:33:90:E8:E8:3E:29:13"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/chinits_2.png HTTP/1.1\r\nHost: iyoteen.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D; __PPU_cl_tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB; _lscache_vary=330c6618c4a27101283a3afc1ea12d07\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 247725\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Oct 2025 13:28:38 GMT\r\netag: \"3c7ad-68eb8b66-8f8be48;;;\"\r\nlast-modified: Sun, 12 Oct 2025 11:05:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 551170\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6FV1U8xzdB7ROniUbdBjEridmf3gdxcj9DlpQ5%2FX0wbQTP2Bv%2FxYq9thFIf%2FrvdZ7h7dqFVTYhOhJ1l4Aoy8Dp2x7hP4IXSzC8nq\"}]}\r\ncf-ray: 990b8158e8523181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":247725,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 394 x 662, 8-bit/color RGBA, non-interlaced","md5":"8c71c577106b4af255b234d51f5797df","sha1":"504b447a8efe63ee4b198eed43dd7401ad9a480e","sha256":"00e7bc9a032d47776ac30d775f26acf94d6c0135e9ac9f4f9555305e97be050e","sha512":"49c8fa1335201f4324d91367c0fd2f6d9d837c5aed8a88f49556e37d1f40a5e652abd839675cbb5bd8540c88344e17fed991d8dd2b2b3979586a34c7555ab388","ssdeep":"6144:c3YAXmrlpfQWfLE4p7J1I6hgBYxjOU2dzncDE0808p9pHjeoGA:CXsl2Wzb78U2dzccFDpHCoD","tlshash":"d03423d884c22beb6720d52a74ba776e0747c44257a08f7bed7730f640f05acb269b64","first_seen":"2025-10-18T22:35:26.727411Z","last_seen":"2025-10-18T22:35:26.727411Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":24,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.guidepaparazzisurface.com/static/video/bn/b81/14d/a76/b8114da769dd2c24105e11e57f48ab888ba111c9.mp4","fqdn":"www.guidepaparazzisurface.com","domain":"guidepaparazzisurface.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:50.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guidepaparazzisurface.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:30:59 GMT","end":"Fri, 07 Nov 2025 14:30:58 GMT"},"fingerprint":{"sha1":"09:CA:DA:46:FA:20:93:EF:BF:A3:2F:C8:E4:F1:01:E8:7F:B5:6C:9E","sha256":"59:3C:83:04:25:43:A6:89:F4:CB:77:35:F4:A8:66:DF:9E:B9:7F:B2:D7:CE:A8:00:84:52:B9:C3:73:32:C8:51"}}},"request":{"raw":"GET /static/video/bn/b81/14d/a76/b8114da769dd2c24105e11e57f48ab888ba111c9.mp4 HTTP/1.1\r\nHost: www.guidepaparazzisurface.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 22:34:50 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 236903\r\nlast-modified: Wed, 15 Oct 2025 18:51:24 GMT\r\netag: \"68efed2c-39d67\"\r\nexpires: Wed, 17 Dec 2025 22:34:50 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-expose-headers: Last-Modified\r\ncontent-range: bytes 0-236902/236903\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":236903,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"86819e70bb2ae172c28434dcffcf0cd7","sha1":"b8114da769dd2c24105e11e57f48ab888ba111c9","sha256":"15d621769406b8621b066ee97402ef2f2b908cf55df4b0fc6b254a0b32f63538","sha512":"0427748350811d7981a9c7c42137ab66f856a459a0dc0a87ce721900052514744ffce39ac8c77d7d9abe0f521401092987cbe8f6e9cf3daf68e6338c0c131160","ssdeep":"6144:utsKwc9sccryzD9O6L03uA6c6IkfcIZu0IxxNCsGJ+c:utsXrcqyDI6IoWzIZXWxYsc","tlshash":"e43413f318905824da786fb324b72b5312a54d4c97e2af02b5cec114ff75e852d4b8b6","first_seen":"2025-06-22T04:01:22.075641Z","last_seen":"2026-03-30T22:53:46.378863Z","times_seen":65,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":119,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iyoteen.org/wp-content/uploads/2025/06/Iyoteen.com-Araceal-36-1024x1024.png.webp","fqdn":"iyoteen.org","domain":"iyoteen.org","tld":"org"},"ip":{"addr":"104.21.45.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iyoteen.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:31:59 GMT","end":"Thu, 08 Jan 2026 10:30:31 GMT"},"fingerprint":{"sha1":"4A:62:E3:55:B9:0F:A1:58:5F:BD:2B:F8:0D:A1:E6:77:EE:46:DC:2C","sha256":"BC:30:2F:73:E4:96:3B:AF:75:1B:31:F3:DF:31:50:4B:49:6F:08:62:50:21:0A:B5:74:33:90:E8:E8:3E:29:13"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/Iyoteen.com-Araceal-36-1024x1024.png.webp HTTP/1.1\r\nHost: iyoteen.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D; __PPU_cl_tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB; _lscache_vary=330c6618c4a27101283a3afc1ea12d07\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16868\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 24 Oct 2025 14:50:42 GMT\r\netag: \"41e4-68518b68-9027046;;;\"\r\nlast-modified: Tue, 17 Jun 2025 15:36:08 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 114246\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Y%2FkMqJCgXk87qZuyw5O%2FXaHZzWXyovgdLNddl%2B2U1rAN5geKYuIWprPfMwwrfzuSS7qp1NQAwkVKSdSFlV3wra7QKryKk2sWW6E\"}]}\r\ncf-ray: 990b815908843181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16868,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f1a49c3f6721eb57e98c6077823673f2","sha1":"33ef9abbaadb178ab7e1fa42845bba77d2b20978","sha256":"a66a45e934fbc2567491b4bc75c0f407cf9019a5212f8baead911a8d71b2fac3","sha512":"f7b4cdca95e9e2e45dc7242d6a9fb50323185193dbf2f78741c2d2c047eb571323d1a7ab817b9572b6e4c6fe48bd40e061c8420550f4cd74e77f9d947078905c","ssdeep":"384:zd8LOJLO3+qsxQc/+Y9PwB3kmtlcZD2pWLpGbjTO:i3sUUIRkD2pWLpGbW","tlshash":"0872c0c78bece256f99277e9293338c09c229d0ef657429658cfc2042b94c3db792c90","first_seen":"2025-10-18T22:35:26.730435Z","last_seen":"2025-10-18T22:35:26.730435Z","times_seen":1,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":22,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guidepaparazzisurface.com/jserror?type=banner_static\u0026bavar=0\u0026build=1.0.614\u0026zoneid=\u0026e=Error\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Fiyoteen.org%2F","fqdn":"guidepaparazzisurface.com","domain":"guidepaparazzisurface.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:50.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guidepaparazzisurface.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:30:59 GMT","end":"Fri, 07 Nov 2025 14:30:58 GMT"},"fingerprint":{"sha1":"09:CA:DA:46:FA:20:93:EF:BF:A3:2F:C8:E4:F1:01:E8:7F:B5:6C:9E","sha256":"59:3C:83:04:25:43:A6:89:F4:CB:77:35:F4:A8:66:DF:9E:B9:7F:B2:D7:CE:A8:00:84:52:B9:C3:73:32:C8:51"}}},"request":{"raw":"GET /jserror?type=banner_static\u0026bavar=0\u0026build=1.0.614\u0026zoneid=\u0026e=Error\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Fiyoteen.org%2F HTTP/1.1\r\nHost: guidepaparazzisurface.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: cart=1; cart_p=2; UID=251018173496f397c89d7a4c479ac66c5c75; CHCK=1; PTS=AYKhbNJo9BYJoWMCEIKhbNJo9BYJoWMC\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 22:34:50 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guidepaparazzisurface.com/jserror?type=banner_static\u0026bavar=0\u0026build=1.0.614\u0026zoneid=\u0026e=Error\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Fiyoteen.org%2F","fqdn":"guidepaparazzisurface.com","domain":"guidepaparazzisurface.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:50.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guidepaparazzisurface.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:30:59 GMT","end":"Fri, 07 Nov 2025 14:30:58 GMT"},"fingerprint":{"sha1":"09:CA:DA:46:FA:20:93:EF:BF:A3:2F:C8:E4:F1:01:E8:7F:B5:6C:9E","sha256":"59:3C:83:04:25:43:A6:89:F4:CB:77:35:F4:A8:66:DF:9E:B9:7F:B2:D7:CE:A8:00:84:52:B9:C3:73:32:C8:51"}}},"request":{"raw":"GET /jserror?type=banner_static\u0026bavar=0\u0026build=1.0.614\u0026zoneid=\u0026e=Error\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Fiyoteen.org%2F HTTP/1.1\r\nHost: guidepaparazzisurface.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: cart=1; cart_p=2; UID=251018173496f397c89d7a4c479ac66c5c75; CHCK=1; PTS=AYKhbNJo9BYJoWMCEIKhbNJo9BYJoWMC\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 22:34:50 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guidepaparazzisurface.com/get/2071060?id=2071060\u0026pid=__clb-spot_2071060_ies_6\u0026jp=_clkaelnlmzhkcwqnmegffy\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.614-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=NaE7Io-7bsPCYB1tniq6Br1s\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=xAqniYuaHR0cHM6Ly9peW90ZWVuLm9yZy8\u0026afid=2648672341339136\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB\u0026vp=0\u0026dto=2\u0026pload=429\u0026rlp=%5B0%2C3%2C26%2C22%2C22%2C73%2C58%2C73%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=6\u0026uf=0\u0026freq=0","fqdn":"guidepaparazzisurface.com","domain":"guidepaparazzisurface.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guidepaparazzisurface.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:30:59 GMT","end":"Fri, 07 Nov 2025 14:30:58 GMT"},"fingerprint":{"sha1":"09:CA:DA:46:FA:20:93:EF:BF:A3:2F:C8:E4:F1:01:E8:7F:B5:6C:9E","sha256":"59:3C:83:04:25:43:A6:89:F4:CB:77:35:F4:A8:66:DF:9E:B9:7F:B2:D7:CE:A8:00:84:52:B9:C3:73:32:C8:51"}}},"request":{"raw":"GET /get/2071060?id=2071060\u0026pid=__clb-spot_2071060_ies_6\u0026jp=_clkaelnlmzhkcwqnmegffy\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.614-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=NaE7Io-7bsPCYB1tniq6Br1s\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=xAqniYuaHR0cHM6Ly9peW90ZWVuLm9yZy8\u0026afid=2648672341339136\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB\u0026vp=0\u0026dto=2\u0026pload=429\u0026rlp=%5B0%2C3%2C26%2C22%2C22%2C73%2C58%2C73%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=6\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: guidepaparazzisurface.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: cart=1; cart_p=2; UID=251018173496f397c89d7a4c479ac66c5c75; CHCK=1; PTS=AYKhbNJo9BYIoWMBEIKhbNJo9BYIoWMB\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Sat, 21 Nov 2026 22:34:49 GMT; Secure; SameSite=None\nPTS=AYKhbNJo9BYJoWMCEIKhbNJo9BYJoWMC; Path=/; Expires=Sat, 21 Nov 2026 22:34:49 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5054,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (5054), with no line terminators","md5":"315e3ab5a6ea9f42002c2bb2e7f94c05","sha1":"2da0ed349dca8f394bb30778610f04711caf1a71","sha256":"4ca67c945cf41888cbcd79edcebd2d852578e03dc1f550e17743d43bc892f861","sha512":"f8ec926ea39887ef66933d6d60b9e4c618378edf45ed20be463ce208c4c87d7dda3569c9a9132dfbafb578e70f81545a4ba6274e8658a79908f3433da00236b2","ssdeep":"96:Y4XLJ/70WZOAxo7kBDO0WZOAxo7kWQ0WZOAxo7kOP0WZOAxo7kpz+ZCsY7Q6I5o:Y4dYyOSowBzyOSowWFyOSowOsyOSowFn","tlshash":"3aa1e874ceabb6e4e6354a2a9af3fc6278d138e787154325a591d354a8000bfdb33d34","first_seen":"2025-10-18T22:35:26.733423Z","last_seen":"2025-10-18T22:35:26.733423Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iyoteen.org/wp-content/themes/bimber/css/9.2.5/bimber/fonts/bimber.woff","fqdn":"iyoteen.org","domain":"iyoteen.org","tld":"org"},"ip":{"addr":"104.21.45.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iyoteen.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:31:59 GMT","end":"Thu, 08 Jan 2026 10:30:31 GMT"},"fingerprint":{"sha1":"4A:62:E3:55:B9:0F:A1:58:5F:BD:2B:F8:0D:A1:E6:77:EE:46:DC:2C","sha256":"BC:30:2F:73:E4:96:3B:AF:75:1B:31:F3:DF:31:50:4B:49:6F:08:62:50:21:0A:B5:74:33:90:E8:E8:3E:29:13"}}},"request":{"raw":"GET /wp-content/themes/bimber/css/9.2.5/bimber/fonts/bimber.woff HTTP/1.1\r\nHost: iyoteen.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/wp-content/litespeed/css/08ead27b4e5ac1845abfaeed87bcf5f4.css?ver=8b8d9\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D; __PPU_cl_tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB; _lscache_vary=330c6618c4a27101283a3afc1ea12d07\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: application/font-woff\r\ncontent-length: 11696\r\netag: \"2db0-67e66827-8e676ef;;;\"\r\nlast-modified: Fri, 28 Mar 2025 09:13:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kdedY0WhSkyfOTF5kg7dntxlGTjqOZjozTvBdTkqqEnfTcBaJ4wIdglZSz6tDvb2EGlZ8LeBWdI%2FAyurXnttT04VFk0lcEIqm%2Fex\"}]}\r\ncf-ray: 990b815948e23181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11696,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 11696, version 1.0","md5":"c268415894d13138a0d0e2f9a841ca8d","sha1":"b1486baf298b4540d42c57e566d094050fc38ba8","sha256":"693e2dd1818182a4c4d6af23d18118646a0aa250a9001c2e468555dcf653b982","sha512":"df422a6ca9fd429db0558b9c4afd85e7760e5f1a2d3e9260d442eb1d6078cb5a1cac2533bebda784d9a81daae700c1b2250b43851b926ce1ee428813b6df834e","ssdeep":"192:y1zT8ZGutI6ZABIxjIaAQBzAcwOntOhRZuQpP+JVdxqCqUjLHG2EP2DneKcpE5eA:yJUlImABIxK4zA7gYhRkQ5o3kdaLgzpU","tlshash":"0a32c07c8feb66f9c627d6f57069b48cb7030504381896c019fcdcc03adea8e59a1a76","first_seen":"2023-04-13T12:27:46Z","last_seen":"2026-04-04T16:24:29.264423Z","times_seen":662,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pinayok.com/wp-content/uploads/elementor/google-fonts/fonts/robotoslab-bngmuxzytxpivibgjjsb6ufn5qu.woff2","fqdn":"pinayok.com","domain":"pinayok.com","tld":"com"},"ip":{"addr":"104.21.24.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pinayok.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Sep 2025 21:34:24 GMT","end":"Fri, 19 Dec 2025 22:33:01 GMT"},"fingerprint":{"sha1":"16:C1:E5:CE:2C:C1:8B:4E:D6:E8:CD:C0:63:E4:85:08:BF:6B:5C:A8","sha256":"CE:80:91:26:EC:4E:CB:83:F8:A7:8E:00:94:9B:37:86:55:07:E4:10:02:C0:D6:0B:90:D1:4D:65:E0:7D:8F:6E"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/robotoslab-bngmuxzytxpivibgjjsb6ufn5qu.woff2 HTTP/1.1\r\nHost: pinayok.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://iyoteen.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 34328\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Oct 2025 23:31:32 GMT\r\netag: \"8618-67eb6959-583a0c;;;\"\r\nlast-modified: Tue, 01 Apr 2025 04:19:37 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 58585\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2r3K7EFcsyIN4UxBDpibiGF1Bq6GRQ4MPbOozFfJIJ8ti4Lj0QhmZ93MR50OHyJoxqq0aQzZnc83Pg%2FFVMGrtJGB8Xgb%2BeqOfw%3D%3D\"}]}\r\ncf-ray: 990b8159be0356a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":34328,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34328, version 1.0","md5":"6581ab53c220b5828e37162349375431","sha1":"1922912ca5ab6eb5a55db138b183b38d066e85c8","sha256":"a8e429611131e3fdc2018ec943a36100dbabb4aaa788c8dead6bdcf927917293","sha512":"b8fe079bd4aacd01fa41799999452b27051a4ccb4dbb91d9e1f2662c5d6112032b1633dfb2e31db71f57fb4511a48b55646d034bd6f81caf017ed0dace0603f2","ssdeep":"768:uqpAcq0VxJf84TA7p22MZ1m6wm17Uvm87BfmrrfpoQHzB:HqixJk7YlHmXm1gvm3hoQHzB","tlshash":"51f2f1d9061c9ba02cd5620c720f66e6fa5a3bed9381a7e5305e6e104783ba6dd77302","first_seen":"2023-10-25T20:14:52Z","last_seen":"2026-04-05T11:19:54.42521Z","times_seen":7552,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":89,"dns":27,"connect":45,"send":0,"wait":12,"receive":4,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guidepaparazzisurface.com/get/2071060?id=2071060\u0026pid=__clb-spot_2071060_cmf_2\u0026jp=_clkaelnlmzhkcwqnmegffy\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.614-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=NaE7Io-7bsPCYB1tniq6Br1s\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=xAqniYuaHR0cHM6Ly9peW90ZWVuLm9yZy8\u0026afid=2648672341339136\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB\u0026vp=0\u0026dto=2\u0026pload=429\u0026rlp=%5B0%2C3%2C26%2C22%2C22%2C73%2C58%2C73%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=6\u0026uf=0\u0026freq=0","fqdn":"guidepaparazzisurface.com","domain":"guidepaparazzisurface.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guidepaparazzisurface.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:30:59 GMT","end":"Fri, 07 Nov 2025 14:30:58 GMT"},"fingerprint":{"sha1":"09:CA:DA:46:FA:20:93:EF:BF:A3:2F:C8:E4:F1:01:E8:7F:B5:6C:9E","sha256":"59:3C:83:04:25:43:A6:89:F4:CB:77:35:F4:A8:66:DF:9E:B9:7F:B2:D7:CE:A8:00:84:52:B9:C3:73:32:C8:51"}}},"request":{"raw":"GET /get/2071060?id=2071060\u0026pid=__clb-spot_2071060_cmf_2\u0026jp=_clkaelnlmzhkcwqnmegffy\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.614-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=NaE7Io-7bsPCYB1tniq6Br1s\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=xAqniYuaHR0cHM6Ly9peW90ZWVuLm9yZy8\u0026afid=2648672341339136\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB\u0026vp=0\u0026dto=2\u0026pload=429\u0026rlp=%5B0%2C3%2C26%2C22%2C22%2C73%2C58%2C73%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=6\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: guidepaparazzisurface.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: cart=1; cart_p=2; UID=251018173496f397c89d7a4c479ac66c5c75; CHCK=1; PTS=AYKhbNJo9BYIoWMBEIKhbNJo9BYIoWMB\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Sat, 21 Nov 2026 22:34:49 GMT; Secure; SameSite=None\nPTS=AYKhbNJo9BYJoWMCEIKhbNJo9BYJoWMC; Path=/; Expires=Sat, 21 Nov 2026 22:34:49 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5054,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (5054), with no line terminators","md5":"7352045008ba78ebff645fd0fe324244","sha1":"57b8ffa8b6c208262571e8f9df0f4c52a7186644","sha256":"a59d5a48cad17253b152606dbd67f53317be56970dd76e3633df5a38381d1a6a","sha512":"9fa9cf07de9fdaf38859ed263d63cc331dd153adc8ab8b6f7a542ca78432196646dff1403ac8e9de67734549974662c636bdf1d2f529d2f76460c6a63534e035","ssdeep":"96:WoV7gkjPbvMV7gkjPb8V7gkjPbPmV7gkjPbmIpwQEpKW329NBgijo:SSJSpSTSbNEpKMSBzjo","tlshash":"06a1f92471c96154e983818c416d2d57319a50ae6cd2ab5413bfc6f703cccb91eb3d06","first_seen":"2025-10-18T22:35:26.742748Z","last_seen":"2025-10-18T22:35:26.742748Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"playhubconnect.com/bn/b81/14d/a76/b8114da769dd2c24105e11e57f48ab888ba111c9.mp4","fqdn":"playhubconnect.com","domain":"playhubconnect.com","tld":"com"},"ip":{"addr":"104.18.15.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playhubconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 01:53:00 GMT","end":"Sun, 14 Dec 2025 02:52:57 GMT"},"fingerprint":{"sha1":"6F:7E:45:FD:0D:E1:5B:9F:C6:D0:2A:9F:AA:8E:F1:FA:79:84:B9:99","sha256":"0A:22:22:40:F0:60:14:FC:D9:59:21:94:0E:1A:55:24:DC:9F:21:05:F9:C7:0D:42:25:19:56:47:78:53:0D:8B"}}},"request":{"raw":"GET /bn/b81/14d/a76/b8114da769dd2c24105e11e57f48ab888ba111c9.mp4 HTTP/1.1\r\nHost: playhubconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 236903\r\ncf-ray: 990b815dfaacb4f9-OSL\r\nx-amz-id-2: tzM/enfA1UivV9QF4rFlMskmSZNI/zpekRqvmknzwdQjepyujTbt6JIcaD9Hgs4XTq+SsoBSYvU=\r\nx-amz-request-id: 7KFFCMPFYR88KSNT\r\nlast-modified: Fri, 11 Jul 2025 13:58:37 GMT\r\netag: \"86819e70bb2ae172c28434dcffcf0cd7\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nage: 2135883\r\ncontent-range: bytes 0-236902/236903\r\nexpires: Tue, 18 Nov 2025 22:34:49 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":236903,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"86819e70bb2ae172c28434dcffcf0cd7","sha1":"b8114da769dd2c24105e11e57f48ab888ba111c9","sha256":"15d621769406b8621b066ee97402ef2f2b908cf55df4b0fc6b254a0b32f63538","sha512":"0427748350811d7981a9c7c42137ab66f856a459a0dc0a87ce721900052514744ffce39ac8c77d7d9abe0f521401092987cbe8f6e9cf3daf68e6338c0c131160","ssdeep":"6144:utsKwc9sccryzD9O6L03uA6c6IkfcIZu0IxxNCsGJ+c:utsXrcqyDI6IoWzIZXWxYsc","tlshash":"e43413f318905824da786fb324b72b5312a54d4c97e2af02b5cec114ff75e852d4b8b6","first_seen":"2025-06-22T04:01:22.075641Z","last_seen":"2026-03-30T22:53:46.378863Z","times_seen":65,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"playhubconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.guidepaparazzisurface.com/static/video/bn/b81/14d/a76/b8114da769dd2c24105e11e57f48ab888ba111c9.mp4","fqdn":"www.guidepaparazzisurface.com","domain":"guidepaparazzisurface.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:50.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guidepaparazzisurface.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:30:59 GMT","end":"Fri, 07 Nov 2025 14:30:58 GMT"},"fingerprint":{"sha1":"09:CA:DA:46:FA:20:93:EF:BF:A3:2F:C8:E4:F1:01:E8:7F:B5:6C:9E","sha256":"59:3C:83:04:25:43:A6:89:F4:CB:77:35:F4:A8:66:DF:9E:B9:7F:B2:D7:CE:A8:00:84:52:B9:C3:73:32:C8:51"}}},"request":{"raw":"GET /static/video/bn/b81/14d/a76/b8114da769dd2c24105e11e57f48ab888ba111c9.mp4 HTTP/1.1\r\nHost: www.guidepaparazzisurface.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 22:34:50 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 236903\r\nlast-modified: Wed, 15 Oct 2025 18:51:24 GMT\r\netag: \"68efed2c-39d67\"\r\nexpires: Wed, 17 Dec 2025 22:34:50 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-expose-headers: Last-Modified\r\ncontent-range: bytes 0-236902/236903\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":236903,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"86819e70bb2ae172c28434dcffcf0cd7","sha1":"b8114da769dd2c24105e11e57f48ab888ba111c9","sha256":"15d621769406b8621b066ee97402ef2f2b908cf55df4b0fc6b254a0b32f63538","sha512":"0427748350811d7981a9c7c42137ab66f856a459a0dc0a87ce721900052514744ffce39ac8c77d7d9abe0f521401092987cbe8f6e9cf3daf68e6338c0c131160","ssdeep":"6144:utsKwc9sccryzD9O6L03uA6c6IkfcIZu0IxxNCsGJ+c:utsXrcqyDI6IoWzIZXWxYsc","tlshash":"e43413f318905824da786fb324b72b5312a54d4c97e2af02b5cec114ff75e852d4b8b6","first_seen":"2025-06-22T04:01:22.075641Z","last_seen":"2026-03-30T22:53:46.378863Z","times_seen":65,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"playhubconnect.com/bn/b81/14d/a76/b8114da769dd2c24105e11e57f48ab888ba111c9.mp4","fqdn":"playhubconnect.com","domain":"playhubconnect.com","tld":"com"},"ip":{"addr":"104.18.15.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playhubconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 01:53:00 GMT","end":"Sun, 14 Dec 2025 02:52:57 GMT"},"fingerprint":{"sha1":"6F:7E:45:FD:0D:E1:5B:9F:C6:D0:2A:9F:AA:8E:F1:FA:79:84:B9:99","sha256":"0A:22:22:40:F0:60:14:FC:D9:59:21:94:0E:1A:55:24:DC:9F:21:05:F9:C7:0D:42:25:19:56:47:78:53:0D:8B"}}},"request":{"raw":"GET /bn/b81/14d/a76/b8114da769dd2c24105e11e57f48ab888ba111c9.mp4 HTTP/1.1\r\nHost: playhubconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 236903\r\ncf-ray: 990b815dea9eb4f9-OSL\r\nx-amz-id-2: tzM/enfA1UivV9QF4rFlMskmSZNI/zpekRqvmknzwdQjepyujTbt6JIcaD9Hgs4XTq+SsoBSYvU=\r\nx-amz-request-id: 7KFFCMPFYR88KSNT\r\nlast-modified: Fri, 11 Jul 2025 13:58:37 GMT\r\netag: \"86819e70bb2ae172c28434dcffcf0cd7\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nage: 2135883\r\ncontent-range: bytes 0-236902/236903\r\nexpires: Tue, 18 Nov 2025 22:34:49 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":236903,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"86819e70bb2ae172c28434dcffcf0cd7","sha1":"b8114da769dd2c24105e11e57f48ab888ba111c9","sha256":"15d621769406b8621b066ee97402ef2f2b908cf55df4b0fc6b254a0b32f63538","sha512":"0427748350811d7981a9c7c42137ab66f856a459a0dc0a87ce721900052514744ffce39ac8c77d7d9abe0f521401092987cbe8f6e9cf3daf68e6338c0c131160","ssdeep":"6144:utsKwc9sccryzD9O6L03uA6c6IkfcIZu0IxxNCsGJ+c:utsXrcqyDI6IoWzIZXWxYsc","tlshash":"e43413f318905824da786fb324b72b5312a54d4c97e2af02b5cec114ff75e852d4b8b6","first_seen":"2025-06-22T04:01:22.075641Z","last_seen":"2026-03-30T22:53:46.378863Z","times_seen":65,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":142,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"playhubconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iyoteen.org/","fqdn":"iyoteen.org","domain":"iyoteen.org","tld":"org"},"ip":{"addr":"104.21.45.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-18T22:34:48.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iyoteen.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:31:59 GMT","end":"Thu, 08 Jan 2026 10:30:31 GMT"},"fingerprint":{"sha1":"4A:62:E3:55:B9:0F:A1:58:5F:BD:2B:F8:0D:A1:E6:77:EE:46:DC:2C","sha256":"BC:30:2F:73:E4:96:3B:AF:75:1B:31:F3:DF:31:50:4B:49:6F:08:62:50:21:0A:B5:74:33:90:E8:E8:3E:29:13"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: iyoteen.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D; __PPU_cl_tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB; _lscache_vary=330c6618c4a27101283a3afc1ea12d07\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 22:34:48 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.3.23\r\nx-dns-prefetch-control: on\r\nx-frame-options: SAMEORIGIN\r\nlink: \u003chttps://iyoteen.org/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://iyoteen.org/wp-json/wp/v2/pages/589\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://iyoteen.org/\u003e; rel=shortlink\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-litespeed-cache: hit\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=blvXizbUB2BWj0ut8XOjkhwNDewQ4%2FZGn%2F3GDxcy9%2F%2BtdhvClWRlfl6NOgDWp8sEvxfgIuzhRzDltjN%2B7%2BsOBzjn0B8nhe5qx26f\"}]}\r\nage: 114996\r\ncache-control: max-age=3600\r\ncf-cache-status: HIT\r\nlast-modified: Fri, 17 Oct 2025 14:38:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 990b8154d9ee3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.3.23","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Elementor:3.29.2","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":234496,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (41972)","md5":"0155392dcb58062123c50040f136a80c","sha1":"10211c3173f514c9141a4522a3c75c4e18ed5c50","sha256":"2f1cf6f92f3a56cfc0e7083f89381278d3094ab70692fe52d8cb04b7ea629d6e","sha512":"0188acd06e9597234dc3f997377daf1dc25eeeadcbaa0e2a82d03c9962a72f55336b7d4025fe57773c00ea622a606fa81074f1f049d5eb2807164d4f93b38a11","ssdeep":"1536:r0tYXZKCX4iWv+2ZAvTqplSg7yc3rYteqocYyKLe2otrrW:okplTASg7rxq21","tlshash":"e93464723906502a237f81cb905b360ca5c3f2cbe58998c1a7f8a268d7b4ef077d565d","first_seen":"2025-10-18T22:35:26.746693Z","last_seen":"2025-10-18T22:35:26.746693Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":8,"dns":3,"connect":1,"send":0,"wait":9,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iyoteen.org/wp-content/uploads/2025/10/pinayok.com2_-1.png","fqdn":"iyoteen.org","domain":"iyoteen.org","tld":"org"},"ip":{"addr":"104.21.45.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iyoteen.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:31:59 GMT","end":"Thu, 08 Jan 2026 10:30:31 GMT"},"fingerprint":{"sha1":"4A:62:E3:55:B9:0F:A1:58:5F:BD:2B:F8:0D:A1:E6:77:EE:46:DC:2C","sha256":"BC:30:2F:73:E4:96:3B:AF:75:1B:31:F3:DF:31:50:4B:49:6F:08:62:50:21:0A:B5:74:33:90:E8:E8:3E:29:13"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/pinayok.com2_-1.png HTTP/1.1\r\nHost: iyoteen.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D; __PPU_cl_tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB; _lscache_vary=330c6618c4a27101283a3afc1ea12d07\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 197879\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 14 Oct 2025 16:09:44 GMT\r\netag: \"304f7-68e5220b-8f89db3;;;\"\r\nlast-modified: Tue, 07 Oct 2025 14:22:03 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 341516\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=46EXHpg1Au3dkuFrPMt9pFE%2BJGw9RUEh1b%2FFjbx57P%2BnrOUCZhNGy1ED0wj65xm52nk%2B6DOoYBxOARkDscx81g7YYI9iLrlwN1gQ\"}]}\r\ncf-ray: 990b81587f9c3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":197879,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 953 x 720, 8-bit/color RGB, non-interlaced","md5":"8a7432a20b64fca260d355fa3dda6e7d","sha1":"688b7b139dac83a73625ce3dadc4070981199eb0","sha256":"5601108269d77479a5f6f043ff3bccf321d96a9bdfba099e47458801de83ed7c","sha512":"ca5403cecbc1de340091a409804a0eda5874fc9345634bb4cbd84d59c97b91d4e3119d154c981d7199f747bb711d81381a09e274f4ce16144c399bc18c39ae52","ssdeep":"6144:VzjVdJr9OV2cq9wQNFUdu2roYeSxg1+5mjpkxIrZ:ZZ5ON3QN61+SxMmxQ","tlshash":"ce140297acf4986ab227df67ca67b51012b560f14bc1f58fe26ce3081805fba07744b6","first_seen":"2025-10-18T22:35:26.749903Z","last_seen":"2025-10-18T22:35:26.749903Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iyoteen.org/wp-content/uploads/2025/05/cropped-Icon-192x192.png","fqdn":"iyoteen.org","domain":"iyoteen.org","tld":"org"},"ip":{"addr":"104.21.45.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iyoteen.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:31:59 GMT","end":"Thu, 08 Jan 2026 10:30:31 GMT"},"fingerprint":{"sha1":"4A:62:E3:55:B9:0F:A1:58:5F:BD:2B:F8:0D:A1:E6:77:EE:46:DC:2C","sha256":"BC:30:2F:73:E4:96:3B:AF:75:1B:31:F3:DF:31:50:4B:49:6F:08:62:50:21:0A:B5:74:33:90:E8:E8:3E:29:13"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/cropped-Icon-192x192.png HTTP/1.1\r\nHost: iyoteen.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D; __PPU_cl_tl=AYKhbNJo9BYJoWMCEIKhbNJo9BYJoWMC; _lscache_vary=330c6618c4a27101283a3afc1ea12d07\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 3316\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 23 Oct 2025 05:45:11 GMT\r\netag: \"cf4-6836e543-8fc5d5d;;;\"\r\nlast-modified: Wed, 28 May 2025 10:28:19 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 233377\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3BgjjMvuDkrw8R4uE2YdqXgQf3rU2RTGqGiAmlQJv39%2F2bQXdKXOD41MnxUsR5xPO529B5BuJ4TlbCyL8EvwP9mb0%2BLfB0b9fyKq\"}]}\r\ncf-ray: 990b815b6c7f3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3316,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"42c2ade23de4d09095fc4fb203097c56","sha1":"3ff5cc15a34961ed8cc8886151fcc10f2f2dfd3e","sha256":"18b0bd2662aff5aad9b1456e3cf08d3da5daf700487b02a45e71a73b1e358a68","sha512":"8e97ccd8033538535f604c34bc411e2984f50fa443c063361ac89ded6f7335674b7f8b393fe6abee575679dd0bb31698f4c4ef51306e38cd5c95d8647a37ac2e","ssdeep":"","tlshash":"42616f4af9907d45ff4d44d1317e4d65a526a60c7e827724d303cd3d7e1390285b38b9","first_seen":"2025-10-18T22:35:26.753019Z","last_seen":"2026-01-22T19:44:20.150931Z","times_seen":4,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iyoteen.org/wp-content/uploads/2025/07/Iyoteen.com-Karyle-12-582x1024.png.webp","fqdn":"iyoteen.org","domain":"iyoteen.org","tld":"org"},"ip":{"addr":"104.21.45.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iyoteen.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:31:59 GMT","end":"Thu, 08 Jan 2026 10:30:31 GMT"},"fingerprint":{"sha1":"4A:62:E3:55:B9:0F:A1:58:5F:BD:2B:F8:0D:A1:E6:77:EE:46:DC:2C","sha256":"BC:30:2F:73:E4:96:3B:AF:75:1B:31:F3:DF:31:50:4B:49:6F:08:62:50:21:0A:B5:74:33:90:E8:E8:3E:29:13"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/Iyoteen.com-Karyle-12-582x1024.png.webp HTTP/1.1\r\nHost: iyoteen.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D; __PPU_cl_tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB; _lscache_vary=330c6618c4a27101283a3afc1ea12d07\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13964\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 20 Oct 2025 06:53:50 GMT\r\netag: \"368c-686f6a37-9102074;;;\"\r\nlast-modified: Thu, 10 Jul 2025 07:22:31 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 488458\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SqAXTj%2BYte9NwngzWPYVMedK%2B5hO7qRVwlAG53yR3bJUa3UelxuDJOCjIqEBIZDApsu%2B2acBfKq7HbWkxeOKDjHjDZxw9Rgdjkwo\"}]}\r\ncf-ray: 990b8158afe53181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13964,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 582x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d4812e1da88a38682aa073c9a5e1db03","sha1":"d62b1c1f2e7573632f05a3fac08d59306ecfe5e9","sha256":"5f9e09cb0a705733954652e8fe0f48e06adbd84540c0591efcfef560f67e045d","sha512":"5fefa2add9f2959110cdb43bee8c45ef020a828f3a19d1bf78bbae962204b65bb77873923a6fbb8b76daae7ece3ee0862d7d5660bc3f9e6f85c7eed2e9197c27","ssdeep":"384:Jt8/rNeSlseV7WiRGR6Btg6RYlZAkDekXxzb:H8/0SZViiRGRKaHgSf","tlshash":"e152c18f95ffe6485a23eb4c2028bb737f64ca77f6d494592b045292532e9d4330b431","first_seen":"2025-10-18T22:35:26.756798Z","last_seen":"2025-10-18T22:35:26.756798Z","times_seen":1,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iyoteen.org/wp-content/uploads/2025/10/lakidede_7.png","fqdn":"iyoteen.org","domain":"iyoteen.org","tld":"org"},"ip":{"addr":"104.21.45.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iyoteen.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:31:59 GMT","end":"Thu, 08 Jan 2026 10:30:31 GMT"},"fingerprint":{"sha1":"4A:62:E3:55:B9:0F:A1:58:5F:BD:2B:F8:0D:A1:E6:77:EE:46:DC:2C","sha256":"BC:30:2F:73:E4:96:3B:AF:75:1B:31:F3:DF:31:50:4B:49:6F:08:62:50:21:0A:B5:74:33:90:E8:E8:3E:29:13"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/lakidede_7.png HTTP/1.1\r\nHost: iyoteen.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D; __PPU_cl_tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB; _lscache_vary=330c6618c4a27101283a3afc1ea12d07\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 594054\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 22 Oct 2025 15:34:28 GMT\r\netag: \"91086-68efa7bf-8f8f89d;;;\"\r\nlast-modified: Wed, 15 Oct 2025 13:55:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 284420\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gwQPkUXNmoKrnQFFPDVAJDGkkTdXjTFuuxv852KGmJjia2oG9HbjxJeKDS05hqYFNRd1CRRovAad%2BU1UreoGJowue052H6i2irZl\"}]}\r\ncf-ray: 990b8158e84f3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":594054,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 447 x 669, 8-bit/color RGBA, non-interlaced","md5":"7991b9a5a0b76f776cca645c6c2cb83c","sha1":"cfa3201cdf214089737b2508e15180dd2efe78a7","sha256":"cba7895e7e515f78a6defcbd76938e42ddb2398acf54899bfcd4770f9c780806","sha512":"815372ec2649461a1741fffb6590b176985b02d718a3cf688840a61c5616d1df0d8a7653ae0897662e7d13f8ed401cb7cad13ada3b02be2106105deb8952aa45","ssdeep":"12288:f88qZCFeGvKg0yGsfc8X0GTFXzH/aUeaC:hqwFeGvK9mfc8XhTF7c","tlshash":"5fc42380f4e1dafac8dae9594e82817bdd2a57465719c6cf393cfd1ca2413e6c018b27","first_seen":"2025-10-18T22:35:26.764287Z","last_seen":"2025-10-18T22:35:26.764287Z","times_seen":1,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":19,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guidepaparazzisurface.com/get/2071060?id=2071060\u0026pid=__clb-spot_2071060_sog_5\u0026jp=_clkaelnlmzhkcwqnmegffy\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.614-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=NaE7Io-7bsPCYB1tniq6Br1s\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=xAqniYuaHR0cHM6Ly9peW90ZWVuLm9yZy8\u0026afid=2648672341339136\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB\u0026vp=0\u0026dto=2\u0026pload=429\u0026rlp=%5B0%2C3%2C26%2C22%2C22%2C73%2C58%2C73%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=6\u0026uf=0\u0026freq=0","fqdn":"guidepaparazzisurface.com","domain":"guidepaparazzisurface.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guidepaparazzisurface.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:30:59 GMT","end":"Fri, 07 Nov 2025 14:30:58 GMT"},"fingerprint":{"sha1":"09:CA:DA:46:FA:20:93:EF:BF:A3:2F:C8:E4:F1:01:E8:7F:B5:6C:9E","sha256":"59:3C:83:04:25:43:A6:89:F4:CB:77:35:F4:A8:66:DF:9E:B9:7F:B2:D7:CE:A8:00:84:52:B9:C3:73:32:C8:51"}}},"request":{"raw":"GET /get/2071060?id=2071060\u0026pid=__clb-spot_2071060_sog_5\u0026jp=_clkaelnlmzhkcwqnmegffy\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.614-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=NaE7Io-7bsPCYB1tniq6Br1s\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=xAqniYuaHR0cHM6Ly9peW90ZWVuLm9yZy8\u0026afid=2648672341339136\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB\u0026vp=0\u0026dto=2\u0026pload=429\u0026rlp=%5B0%2C3%2C26%2C22%2C22%2C73%2C58%2C73%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=6\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: guidepaparazzisurface.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: cart=1; cart_p=2; UID=251018173496f397c89d7a4c479ac66c5c75; CHCK=1; PTS=AYKhbNJo9BYIoWMBEIKhbNJo9BYIoWMB\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Sat, 21 Nov 2026 22:34:49 GMT; Secure; SameSite=None\nPTS=AYKhbNJo9BYJoWMCEIKhbNJo9BYJoWMC; Path=/; Expires=Sat, 21 Nov 2026 22:34:49 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5054,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (5054), with no line terminators","md5":"331ae3ed6db0b8d0832bec30a7f4c21f","sha1":"3bacd78a6099cb398abae494674cfd7384b75e0d","sha256":"f3e64ec68de3af27cc20acbc666f3e35c01f17043f6bc94849bc6dc8ae903919","sha512":"9cc93e6ed0e47478a2fe26bfa4d6eac738075007146797b0882bd79d3fe8f31bee6f0b7dc2f0f21228b6023db0f73ed64a41c4ab7316e05111d7f07d0c70364e","ssdeep":"48:KhFWRHaVQAojzc2ckYPNpRHaVQAojzc2ckYPNORHaVQAojzc2ckYPN7RHaVQAojW:j+Wf/EL+Wf/Ek+Wf/E9+Wf/EMOBzZjeo","tlshash":"6ea1ea4e345cc82daa21886f6d663ecf7352734904dc973346b69a18938f8b89273637","first_seen":"2025-10-18T22:35:26.772354Z","last_seen":"2025-10-18T22:35:26.772354Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.guidepaparazzisurface.com/static/video/bn/b81/14d/a76/b8114da769dd2c24105e11e57f48ab888ba111c9.mp4","fqdn":"www.guidepaparazzisurface.com","domain":"guidepaparazzisurface.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:50.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guidepaparazzisurface.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:30:59 GMT","end":"Fri, 07 Nov 2025 14:30:58 GMT"},"fingerprint":{"sha1":"09:CA:DA:46:FA:20:93:EF:BF:A3:2F:C8:E4:F1:01:E8:7F:B5:6C:9E","sha256":"59:3C:83:04:25:43:A6:89:F4:CB:77:35:F4:A8:66:DF:9E:B9:7F:B2:D7:CE:A8:00:84:52:B9:C3:73:32:C8:51"}}},"request":{"raw":"GET /static/video/bn/b81/14d/a76/b8114da769dd2c24105e11e57f48ab888ba111c9.mp4 HTTP/1.1\r\nHost: www.guidepaparazzisurface.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 22:34:50 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 236903\r\nlast-modified: Wed, 15 Oct 2025 18:51:24 GMT\r\netag: \"68efed2c-39d67\"\r\nexpires: Wed, 17 Dec 2025 22:34:50 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-expose-headers: Last-Modified\r\ncontent-range: bytes 0-236902/236903\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":236903,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"86819e70bb2ae172c28434dcffcf0cd7","sha1":"b8114da769dd2c24105e11e57f48ab888ba111c9","sha256":"15d621769406b8621b066ee97402ef2f2b908cf55df4b0fc6b254a0b32f63538","sha512":"0427748350811d7981a9c7c42137ab66f856a459a0dc0a87ce721900052514744ffce39ac8c77d7d9abe0f521401092987cbe8f6e9cf3daf68e6338c0c131160","ssdeep":"6144:utsKwc9sccryzD9O6L03uA6c6IkfcIZu0IxxNCsGJ+c:utsXrcqyDI6IoWzIZXWxYsc","tlshash":"e43413f318905824da786fb324b72b5312a54d4c97e2af02b5cec114ff75e852d4b8b6","first_seen":"2025-06-22T04:01:22.075641Z","last_seen":"2026-03-30T22:53:46.378863Z","times_seen":65,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"playhubconnect.com/bn/b81/14d/a76/b8114da769dd2c24105e11e57f48ab888ba111c9.mp4","fqdn":"playhubconnect.com","domain":"playhubconnect.com","tld":"com"},"ip":{"addr":"104.18.15.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playhubconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 01:53:00 GMT","end":"Sun, 14 Dec 2025 02:52:57 GMT"},"fingerprint":{"sha1":"6F:7E:45:FD:0D:E1:5B:9F:C6:D0:2A:9F:AA:8E:F1:FA:79:84:B9:99","sha256":"0A:22:22:40:F0:60:14:FC:D9:59:21:94:0E:1A:55:24:DC:9F:21:05:F9:C7:0D:42:25:19:56:47:78:53:0D:8B"}}},"request":{"raw":"GET /bn/b81/14d/a76/b8114da769dd2c24105e11e57f48ab888ba111c9.mp4 HTTP/1.1\r\nHost: playhubconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 236903\r\ncf-ray: 990b815dfaa5b4f9-OSL\r\nx-amz-id-2: tzM/enfA1UivV9QF4rFlMskmSZNI/zpekRqvmknzwdQjepyujTbt6JIcaD9Hgs4XTq+SsoBSYvU=\r\nx-amz-request-id: 7KFFCMPFYR88KSNT\r\nlast-modified: Fri, 11 Jul 2025 13:58:37 GMT\r\netag: \"86819e70bb2ae172c28434dcffcf0cd7\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nage: 2135883\r\ncontent-range: bytes 0-236902/236903\r\nexpires: Tue, 18 Nov 2025 22:34:49 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":236903,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"86819e70bb2ae172c28434dcffcf0cd7","sha1":"b8114da769dd2c24105e11e57f48ab888ba111c9","sha256":"15d621769406b8621b066ee97402ef2f2b908cf55df4b0fc6b254a0b32f63538","sha512":"0427748350811d7981a9c7c42137ab66f856a459a0dc0a87ce721900052514744ffce39ac8c77d7d9abe0f521401092987cbe8f6e9cf3daf68e6338c0c131160","ssdeep":"6144:utsKwc9sccryzD9O6L03uA6c6IkfcIZu0IxxNCsGJ+c:utsXrcqyDI6IoWzIZXWxYsc","tlshash":"e43413f318905824da786fb324b72b5312a54d4c97e2af02b5cec114ff75e852d4b8b6","first_seen":"2025-06-22T04:01:22.075641Z","last_seen":"2026-03-30T22:53:46.378863Z","times_seen":65,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"playhubconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iyoteen.org/wp-content/uploads/2025/05/Header-with-logo.png","fqdn":"iyoteen.org","domain":"iyoteen.org","tld":"org"},"ip":{"addr":"172.67.217.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:47.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iyoteen.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:31:59 GMT","end":"Thu, 08 Jan 2026 10:30:31 GMT"},"fingerprint":{"sha1":"4A:62:E3:55:B9:0F:A1:58:5F:BD:2B:F8:0D:A1:E6:77:EE:46:DC:2C","sha256":"BC:30:2F:73:E4:96:3B:AF:75:1B:31:F3:DF:31:50:4B:49:6F:08:62:50:21:0A:B5:74:33:90:E8:E8:3E:29:13"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/Header-with-logo.png HTTP/1.1\r\nHost: iyoteen.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 09 Oct 2025 13:24:52 GMT\r\netag: \"2822-6836e7c9-8f6892a;;;\"\r\nlast-modified: Wed, 28 May 2025 10:39:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 10274\r\naccept-ranges: bytes\r\ndate: Sat, 18 Oct 2025 22:34:47 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 189260\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QRreOft3Oxr6lpKQM0Ak%2FhkO2hxQoU2BAyAlp7tvrpezenBxsh6hoVq8HU5qKwXS3YGEV8b2QtMsQC47a3PY0LT%2By1leYfUcguDB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 990b814df87a8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":10274,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 741 x 190, 8-bit colormap, non-interlaced","md5":"185296bde4b259fd448515d653fce133","sha1":"0aed5db0575f17083abb10cbb9a2af1c87564344","sha256":"97464d39fd0349007ea69e345d47dff9fc929dfa3e6d10ff62783be16a196828","sha512":"ee74918e68ad85b4bb7f045238a56262cb6404ac65db212d8bb01e8c46e6d17464171d9a3b918c67106bb2c0f3db255edc4efa8bdf31d6dbcc2154541d9bb0c8","ssdeep":"192:skqpJYlCGJ97pV+Jp8gyuA0hG0AIfrHiNk/saKNtCf0zqNrFz9:PqIlCuFEJh9hm2rCcsPUf0CP","tlshash":"7122c0d0ef2b5497824a6e2169f3099eb002180ce4cd1e4eebf399fafd046569115fe7","first_seen":"2025-10-18T22:35:26.667933Z","last_seen":"2026-01-22T19:44:20.119383Z","times_seen":4,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guidepaparazzisurface.com/get/2071060?id=2071060\u0026pid=__clb-spot_2071060_eqi_3\u0026jp=_clkaelnlmzhkcwqnmegffy\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.614-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=NaE7Io-7bsPCYB1tniq6Br1s\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=xAqniYuaHR0cHM6Ly9peW90ZWVuLm9yZy8\u0026afid=2648672341339136\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB\u0026vp=0\u0026dto=2\u0026pload=429\u0026rlp=%5B0%2C3%2C26%2C22%2C22%2C73%2C58%2C73%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=6\u0026uf=0\u0026freq=0","fqdn":"guidepaparazzisurface.com","domain":"guidepaparazzisurface.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guidepaparazzisurface.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:30:59 GMT","end":"Fri, 07 Nov 2025 14:30:58 GMT"},"fingerprint":{"sha1":"09:CA:DA:46:FA:20:93:EF:BF:A3:2F:C8:E4:F1:01:E8:7F:B5:6C:9E","sha256":"59:3C:83:04:25:43:A6:89:F4:CB:77:35:F4:A8:66:DF:9E:B9:7F:B2:D7:CE:A8:00:84:52:B9:C3:73:32:C8:51"}}},"request":{"raw":"GET /get/2071060?id=2071060\u0026pid=__clb-spot_2071060_eqi_3\u0026jp=_clkaelnlmzhkcwqnmegffy\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.614-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=NaE7Io-7bsPCYB1tniq6Br1s\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=xAqniYuaHR0cHM6Ly9peW90ZWVuLm9yZy8\u0026afid=2648672341339136\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB\u0026vp=0\u0026dto=2\u0026pload=429\u0026rlp=%5B0%2C3%2C26%2C22%2C22%2C73%2C58%2C73%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=6\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: guidepaparazzisurface.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: cart=1; cart_p=2; UID=251018173496f397c89d7a4c479ac66c5c75; CHCK=1; PTS=AYKhbNJo9BYIoWMBEIKhbNJo9BYIoWMB\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Sat, 21 Nov 2026 22:34:49 GMT; Secure; SameSite=None\nPTS=AYKhbNJo9BYJoWMCEIKhbNJo9BYJoWMC; Path=/; Expires=Sat, 21 Nov 2026 22:34:49 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5054,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (5054), with no line terminators","md5":"570ec90276986510c13dae164aeb3674","sha1":"3ef2b7039b1a3a831c75ff60f2c32cb34752b961","sha256":"9119aa2d256f07217f4fe6361b49af10f61f9037f2952ac8fc20d4c69a1023ae","sha512":"132be88460f1ddb5479a5516451e810e4637bfa45dd586733326756c24924b8a5a576c5aa9b2c6daa8a67a590d6329dc48c66cacc461908070674aaa0ad4d2e8","ssdeep":"96:FPOFNzmeNhCFNzmeNhaFNzmeNh7HFNzmeNhbUmy/Yo:FGFFphCFFphaFFph7HFFphaYo","tlshash":"aba1d748d42d01c358ecda835f6aedb6d81c75c9e9ca170216dc8fba6e095d4e245b12","first_seen":"2025-10-18T22:35:26.777004Z","last_seen":"2025-10-18T22:35:26.777004Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crumpetprankerstench.com/solid.gif?z=2076125\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.614-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=NaE7Io-7bsPCYB1tniq6Br1s\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=Uqh5dEVaHR0cHM6Ly9peW90ZWVuLm9yZy8\u0026afid=7152271968714752\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB\u0026vp=0\u0026dto=2\u0026pload=576\u0026rlp=%5B0%2C4%2C69%2C46%2C155%2C384%2C297%2C384%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5","fqdn":"crumpetprankerstench.com","domain":"crumpetprankerstench.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crumpetprankerstench.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:34:10 GMT","end":"Fri, 07 Nov 2025 14:34:09 GMT"},"fingerprint":{"sha1":"7C:B3:43:C6:39:F8:CD:E2:D0:F1:5C:2E:B1:50:48:65:BF:8B:43:C8","sha256":"FA:DE:92:E8:E0:29:98:7F:3F:2A:62:FA:97:95:14:52:5D:BC:65:D9:E1:43:13:99:19:70:73:F0:BB:97:18:ED"}}},"request":{"raw":"POST /solid.gif?z=2076125\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.614-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=NaE7Io-7bsPCYB1tniq6Br1s\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=Uqh5dEVaHR0cHM6Ly9peW90ZWVuLm9yZy8\u0026afid=7152271968714752\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB\u0026vp=0\u0026dto=2\u0026pload=576\u0026rlp=%5B0%2C4%2C69%2C46%2C155%2C384%2C297%2C384%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5 HTTP/1.1\r\nHost: crumpetprankerstench.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://iyoteen.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: cart=1; cart_p=2; CHCK=1; PTS=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB; UID=25101817345cb69043bad446bd8558a5938b\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-route-id: stats.tag.loaded\r\nset-cookie: CHCK=1; Path=/; Expires=Sat, 21 Nov 2026 22:34:49 GMT; Secure; SameSite=None\nPTS=AYKhbNJo9BYJoWMCEIKhbNJo9BYJoWMC; Path=/; Expires=Sat, 21 Nov 2026 22:34:49 GMT; Secure; SameSite=None\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"28e463819a210071de3b45ebe7633613","sha1":"6dccd571828ec0912629119cf7eabfea9f33ddbc","sha256":"44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84","sha512":"8a82ac5a7883cd9b74bdb561cf825ce86474e259ad8c445e538d697b0003e3f2b1d6edcd3dc6512f4ad16e9074da204a79938257c457ecf68f4329eac0182e67","ssdeep":"","tlshash":"04900003e280e082c3a0c0300e0ccb802b88a2308a28030fb0fc2baefc3a3a20c23000","first_seen":"2023-04-05T09:26:54Z","last_seen":"2026-04-05T11:28:19.18957Z","times_seen":20482,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iyoteen.org/wp-content/uploads/2025/06/Iyoteen.com-22-3-768x1024.png.webp","fqdn":"iyoteen.org","domain":"iyoteen.org","tld":"org"},"ip":{"addr":"104.21.45.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iyoteen.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:31:59 GMT","end":"Thu, 08 Jan 2026 10:30:31 GMT"},"fingerprint":{"sha1":"4A:62:E3:55:B9:0F:A1:58:5F:BD:2B:F8:0D:A1:E6:77:EE:46:DC:2C","sha256":"BC:30:2F:73:E4:96:3B:AF:75:1B:31:F3:DF:31:50:4B:49:6F:08:62:50:21:0A:B5:74:33:90:E8:E8:3E:29:13"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/Iyoteen.com-22-3-768x1024.png.webp HTTP/1.1\r\nHost: iyoteen.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D; __PPU_cl_tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB; _lscache_vary=330c6618c4a27101283a3afc1ea12d07\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: image/webp\r\ncontent-length: 41486\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 24 Oct 2025 14:50:36 GMT\r\netag: \"a20e-683c98de-8fe8dcb;;;\"\r\nlast-modified: Sun, 01 Jun 2025 18:15:58 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 114252\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BFz7lxPW4amCQqzNUo0U85HXqs%2B%2BRQqTEPqa98V9AJxxaDtJAsWIF6EgVxHgGfJCuvxcjsvaEDR76YZucGjG9LTnBuVb3WsGOOhE\"}]}\r\ncf-ray: 990b8158e8483181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":41486,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 768x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"69206fef2a3d97c811e66df4bac44768","sha1":"8f474beb9a353577cb6735ff1276d1a03e762c05","sha256":"c7fca71a9d57df14414e2f2e1fdceef00bb67386149c597f76389a9af4bc2500","sha512":"8914429cca5a80c287a5ed590930cb5439f1373ceeaec8f44dc40432b00297b9b81c993750ffea3f3300ff247fe8afe4c7eb7409a93d5eafa3914f6fba234859","ssdeep":"768:uAnlKSv9+VqnrBdnNr97XItDIXSmMJ6LCQ1RuuEtz0hIaiWUnRZmNS9H3Y77hZ6s:xKW+Y9Hr1XaIbMJO1Iz0hsWUn7po7h0s","tlshash":"8513f1daaf216f09307104127f4bc42c1dfc2b06057eaca6a65f979627199338621ffb","first_seen":"2025-10-18T22:35:26.783019Z","last_seen":"2025-10-18T22:35:26.783019Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iyoteen.org/wp-content/uploads/2025/07/Iyoteen.com-Rachelle-Salvador-8-819x1024.png.webp","fqdn":"iyoteen.org","domain":"iyoteen.org","tld":"org"},"ip":{"addr":"104.21.45.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iyoteen.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:31:59 GMT","end":"Thu, 08 Jan 2026 10:30:31 GMT"},"fingerprint":{"sha1":"4A:62:E3:55:B9:0F:A1:58:5F:BD:2B:F8:0D:A1:E6:77:EE:46:DC:2C","sha256":"BC:30:2F:73:E4:96:3B:AF:75:1B:31:F3:DF:31:50:4B:49:6F:08:62:50:21:0A:B5:74:33:90:E8:E8:3E:29:13"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/Iyoteen.com-Rachelle-Salvador-8-819x1024.png.webp HTTP/1.1\r\nHost: iyoteen.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D; __PPU_cl_tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB; _lscache_vary=330c6618c4a27101283a3afc1ea12d07\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: image/webp\r\ncontent-length: 125796\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 24 Oct 2025 14:50:40 GMT\r\netag: \"1eb64-68745ece-912200b;;;\"\r\nlast-modified: Mon, 14 Jul 2025 01:35:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 114248\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=obbsnaDp5vApIC4zVGN%2FX1f8wKzqJtbhrZICFhkJf1zVjiGq%2F2lwfndMEwDbJ59hkJbLi3Wok60VivCMWeiLWrlwtkWyMeqQSE8o\"}]}\r\ncf-ray: 990b8158f85a3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":125796,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 819x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"11439fb61f65727c0927e21096ef2f3a","sha1":"b71f76fed19ab46c5e8543207963e14395bdd5c0","sha256":"fabed917dcf2538037b8301f2900fcc177c2d0c1c26b4882da52ee4170817013","sha512":"f9d67974458d52ba4b8b8af28b70d997d8a511d4008ec55275b4fa2a8972b93a912ab5aab313041b5409d981f117d90537c50f533bdc2d7630fd980a8e90fb5e","ssdeep":"3072:6kqH037mnQ3/UoWDOCLnw1WQKycIRMjYCVriXzGr:2cmnQPUoQL68VIRMj3h+Cr","tlshash":"f3c312c9b98346b00fe21d3f548a686149bca7d05cfa52ec1daca16862d36ed19fdcc4","first_seen":"2025-10-18T22:35:26.787178Z","last_seen":"2025-10-18T22:35:26.787178Z","times_seen":1,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":24,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"playhubconnect.com/bn/b81/14d/a76/b8114da769dd2c24105e11e57f48ab888ba111c9.mp4","fqdn":"playhubconnect.com","domain":"playhubconnect.com","tld":"com"},"ip":{"addr":"104.18.15.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playhubconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 01:53:00 GMT","end":"Sun, 14 Dec 2025 02:52:57 GMT"},"fingerprint":{"sha1":"6F:7E:45:FD:0D:E1:5B:9F:C6:D0:2A:9F:AA:8E:F1:FA:79:84:B9:99","sha256":"0A:22:22:40:F0:60:14:FC:D9:59:21:94:0E:1A:55:24:DC:9F:21:05:F9:C7:0D:42:25:19:56:47:78:53:0D:8B"}}},"request":{"raw":"GET /bn/b81/14d/a76/b8114da769dd2c24105e11e57f48ab888ba111c9.mp4 HTTP/1.1\r\nHost: playhubconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 236903\r\ncf-ray: 990b815dfaabb4f9-OSL\r\nx-amz-id-2: tzM/enfA1UivV9QF4rFlMskmSZNI/zpekRqvmknzwdQjepyujTbt6JIcaD9Hgs4XTq+SsoBSYvU=\r\nx-amz-request-id: 7KFFCMPFYR88KSNT\r\nlast-modified: Fri, 11 Jul 2025 13:58:37 GMT\r\netag: \"86819e70bb2ae172c28434dcffcf0cd7\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nage: 2135883\r\ncontent-range: bytes 0-236902/236903\r\nexpires: Tue, 18 Nov 2025 22:34:49 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232531,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"c83d470e35b8f4de615ea85d96d3de1e","sha1":"de919d1bba2951ead9270cca3c79ae38c6f296a4","sha256":"bee475dab1f2a7f488e3f2593bf0ee0dea962d108a8528f6cc7ad409292b3b59","sha512":"752dec74d5fbe906fee4044c68ce0f159d3bc9ec47f50609c10040fa07577a61294164f3b94efa17e0460c1df59be9983ae7ba3de11a3a581ff113cb0c4c47a7","ssdeep":"6144:utsKwc9sccryzD9O6L03uA6c6IkfcIZu0IxxNCsGJz:utsXrcqyDI6IoWzIZXWxY5","tlshash":"fc3413f318905824da742fb324b72b9702954d4c9ba2af02b5cec114bf79e856d4f8b7","first_seen":"2025-10-18T22:35:26.791121Z","last_seen":"2025-10-18T22:35:26.791121Z","times_seen":1,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"playhubconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"guidepaparazzisurface.com/jserror?type=banner_static\u0026bavar=0\u0026build=1.0.614\u0026zoneid=\u0026e=Error\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Fiyoteen.org%2F","fqdn":"guidepaparazzisurface.com","domain":"guidepaparazzisurface.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:50.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guidepaparazzisurface.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:30:59 GMT","end":"Fri, 07 Nov 2025 14:30:58 GMT"},"fingerprint":{"sha1":"09:CA:DA:46:FA:20:93:EF:BF:A3:2F:C8:E4:F1:01:E8:7F:B5:6C:9E","sha256":"59:3C:83:04:25:43:A6:89:F4:CB:77:35:F4:A8:66:DF:9E:B9:7F:B2:D7:CE:A8:00:84:52:B9:C3:73:32:C8:51"}}},"request":{"raw":"GET /jserror?type=banner_static\u0026bavar=0\u0026build=1.0.614\u0026zoneid=\u0026e=Error\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Fiyoteen.org%2F HTTP/1.1\r\nHost: guidepaparazzisurface.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: cart=1; cart_p=2; UID=251018173496f397c89d7a4c479ac66c5c75; CHCK=1; PTS=AYKhbNJo9BYJoWMCEIKhbNJo9BYJoWMC\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 22:34:50 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iyoteen.org/wp-content/plugins/litespeed-cache/guest.vary.php","fqdn":"iyoteen.org","domain":"iyoteen.org","tld":"org"},"ip":{"addr":"104.21.45.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iyoteen.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:31:59 GMT","end":"Thu, 08 Jan 2026 10:30:31 GMT"},"fingerprint":{"sha1":"4A:62:E3:55:B9:0F:A1:58:5F:BD:2B:F8:0D:A1:E6:77:EE:46:DC:2C","sha256":"BC:30:2F:73:E4:96:3B:AF:75:1B:31:F3:DF:31:50:4B:49:6F:08:62:50:21:0A:B5:74:33:90:E8:E8:3E:29:13"}}},"request":{"raw":"POST /wp-content/plugins/litespeed-cache/guest.vary.php HTTP/1.1\r\nHost: iyoteen.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://iyoteen.org/\r\nOrigin: https://iyoteen.org\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D; __PPU_cl_tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB; _lscache_vary=330c6618c4a27101283a3afc1ea12d07\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.3.23\r\nx-robots-tag: noindex\r\nx-litespeed-cache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i0mUl5uPg0wqFW0KE%2FWoeFkj2Cu6HirYnFYb7SUVO0F%2B5LPEnjD%2BlyGnvElTM6qgWe95iLPG8VIm3gSyVdwvgMyEiZDp0fJe0%2Fnp\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 990b81584f3a3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.23","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-04-05T11:49:17.227162Z","times_seen":227421,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"playhubconnect.com/bn/b81/14d/a76/b8114da769dd2c24105e11e57f48ab888ba111c9.mp4","fqdn":"playhubconnect.com","domain":"playhubconnect.com","tld":"com"},"ip":{"addr":"104.18.15.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playhubconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 01:53:00 GMT","end":"Sun, 14 Dec 2025 02:52:57 GMT"},"fingerprint":{"sha1":"6F:7E:45:FD:0D:E1:5B:9F:C6:D0:2A:9F:AA:8E:F1:FA:79:84:B9:99","sha256":"0A:22:22:40:F0:60:14:FC:D9:59:21:94:0E:1A:55:24:DC:9F:21:05:F9:C7:0D:42:25:19:56:47:78:53:0D:8B"}}},"request":{"raw":"GET /bn/b81/14d/a76/b8114da769dd2c24105e11e57f48ab888ba111c9.mp4 HTTP/1.1\r\nHost: playhubconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 236903\r\ncf-ray: 990b815dfaa7b4f9-OSL\r\nx-amz-id-2: tzM/enfA1UivV9QF4rFlMskmSZNI/zpekRqvmknzwdQjepyujTbt6JIcaD9Hgs4XTq+SsoBSYvU=\r\nx-amz-request-id: 7KFFCMPFYR88KSNT\r\nlast-modified: Fri, 11 Jul 2025 13:58:37 GMT\r\netag: \"86819e70bb2ae172c28434dcffcf0cd7\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nage: 2135883\r\ncontent-range: bytes 0-236902/236903\r\nexpires: Tue, 18 Nov 2025 22:34:49 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":125858,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"88dbc58ffb6c3ea30b63d3662d2f51bc","sha1":"407a43bc019f783177db9a5bf7e22855fb842795","sha256":"830f94dcf68faeac63cce90e5ede2e6d92a19e01dd53e3d6ab609fd4b138ac28","sha512":"0b8a3b1426b4b1344f9d12d0f310cfe7eac44cdde014c8409b71d85fc6013cb0f9a25543ec5852b44676e7d92233196c26b77314b4548aaac6bce54ad7efa4da","ssdeep":"3072:uyYvkyyTOwc9scHmyuxdYtlNDIj4O6L03uA5+pz:utsKwc9sccryzD9O6L03uAc","tlshash":"f3c302f231c09849efa41e7618f70e4612578ddc868baf01794dc054bfb9e891e4b9aa","first_seen":"2025-10-18T22:35:26.796898Z","last_seen":"2025-10-18T22:35:26.796898Z","times_seen":1,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"playhubconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.guidepaparazzisurface.com/static/video/bn/b81/14d/a76/b8114da769dd2c24105e11e57f48ab888ba111c9.mp4","fqdn":"www.guidepaparazzisurface.com","domain":"guidepaparazzisurface.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:50.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guidepaparazzisurface.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:30:59 GMT","end":"Fri, 07 Nov 2025 14:30:58 GMT"},"fingerprint":{"sha1":"09:CA:DA:46:FA:20:93:EF:BF:A3:2F:C8:E4:F1:01:E8:7F:B5:6C:9E","sha256":"59:3C:83:04:25:43:A6:89:F4:CB:77:35:F4:A8:66:DF:9E:B9:7F:B2:D7:CE:A8:00:84:52:B9:C3:73:32:C8:51"}}},"request":{"raw":"GET /static/video/bn/b81/14d/a76/b8114da769dd2c24105e11e57f48ab888ba111c9.mp4 HTTP/1.1\r\nHost: www.guidepaparazzisurface.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 22:34:50 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 236903\r\nlast-modified: Wed, 15 Oct 2025 18:51:24 GMT\r\netag: \"68efed2c-39d67\"\r\nexpires: Wed, 17 Dec 2025 22:34:50 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-expose-headers: Last-Modified\r\ncontent-range: bytes 0-236902/236903\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":236903,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"86819e70bb2ae172c28434dcffcf0cd7","sha1":"b8114da769dd2c24105e11e57f48ab888ba111c9","sha256":"15d621769406b8621b066ee97402ef2f2b908cf55df4b0fc6b254a0b32f63538","sha512":"0427748350811d7981a9c7c42137ab66f856a459a0dc0a87ce721900052514744ffce39ac8c77d7d9abe0f521401092987cbe8f6e9cf3daf68e6338c0c131160","ssdeep":"6144:utsKwc9sccryzD9O6L03uA6c6IkfcIZu0IxxNCsGJ+c:utsXrcqyDI6IoWzIZXWxYsc","tlshash":"e43413f318905824da786fb324b72b5312a54d4c97e2af02b5cec114ff75e852d4b8b6","first_seen":"2025-06-22T04:01:22.075641Z","last_seen":"2026-03-30T22:53:46.378863Z","times_seen":65,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pinayok.com/wp-content/uploads/elementor/google-fonts/fonts/roboto-kfo7cnqeu92fr1me7ksn66agldtyluama3yuba.woff2","fqdn":"pinayok.com","domain":"pinayok.com","tld":"com"},"ip":{"addr":"104.21.24.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pinayok.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Sep 2025 21:34:24 GMT","end":"Fri, 19 Dec 2025 22:33:01 GMT"},"fingerprint":{"sha1":"16:C1:E5:CE:2C:C1:8B:4E:D6:E8:CD:C0:63:E4:85:08:BF:6B:5C:A8","sha256":"CE:80:91:26:EC:4E:CB:83:F8:A7:8E:00:94:9B:37:86:55:07:E4:10:02:C0:D6:0B:90:D1:4D:65:E0:7D:8F:6E"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/roboto-kfo7cnqeu92fr1me7ksn66agldtyluama3yuba.woff2 HTTP/1.1\r\nHost: pinayok.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://iyoteen.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 40128\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 10 Oct 2025 13:56:27 GMT\r\netag: \"9cc0-67eb6956-583a04;;;\"\r\nlast-modified: Tue, 01 Apr 2025 04:19:34 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 107800\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A%2BvZF6BxxH6bRjq19pvzgN8ApyP83OMyG8yV1HfYceXWVxt%2BVmmQXhTHOnBFCQ%2Bvr%2BOAsiJ4atlYFNjhSs11u14CsJhdRYcrHA%3D%3D\"}]}\r\ncf-ray: 990b8159adf656a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-05T11:47:09.583507Z","times_seen":716548,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":99,"dns":7,"connect":21,"send":0,"wait":13,"receive":3,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guidepaparazzisurface.com/jserror?type=banner_static\u0026bavar=0\u0026build=1.0.614\u0026zoneid=\u0026e=Error\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Fiyoteen.org%2F","fqdn":"guidepaparazzisurface.com","domain":"guidepaparazzisurface.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:50.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guidepaparazzisurface.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:30:59 GMT","end":"Fri, 07 Nov 2025 14:30:58 GMT"},"fingerprint":{"sha1":"09:CA:DA:46:FA:20:93:EF:BF:A3:2F:C8:E4:F1:01:E8:7F:B5:6C:9E","sha256":"59:3C:83:04:25:43:A6:89:F4:CB:77:35:F4:A8:66:DF:9E:B9:7F:B2:D7:CE:A8:00:84:52:B9:C3:73:32:C8:51"}}},"request":{"raw":"GET /jserror?type=banner_static\u0026bavar=0\u0026build=1.0.614\u0026zoneid=\u0026e=Error\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Fiyoteen.org%2F HTTP/1.1\r\nHost: guidepaparazzisurface.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: cart=1; cart_p=2; UID=251018173496f397c89d7a4c479ac66c5c75; CHCK=1; PTS=AYKhbNJo9BYJoWMCEIKhbNJo9BYJoWMC\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 22:34:50 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iyoteen.org/wp-content/uploads/2025/10/kimberly_ann_leigh_4-728x686.png","fqdn":"iyoteen.org","domain":"iyoteen.org","tld":"org"},"ip":{"addr":"104.21.45.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iyoteen.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:31:59 GMT","end":"Thu, 08 Jan 2026 10:30:31 GMT"},"fingerprint":{"sha1":"4A:62:E3:55:B9:0F:A1:58:5F:BD:2B:F8:0D:A1:E6:77:EE:46:DC:2C","sha256":"BC:30:2F:73:E4:96:3B:AF:75:1B:31:F3:DF:31:50:4B:49:6F:08:62:50:21:0A:B5:74:33:90:E8:E8:3E:29:13"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/kimberly_ann_leigh_4-728x686.png HTTP/1.1\r\nHost: iyoteen.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%22CAIFRQ%22%3A%22ADRQ%252BQAAAAAAAAAJ%22%2C%22CAIFRT%22%3A%22ADRQ%252BQAAAABo9HBQ%22%7D; __PPU_cl_tl=AYKhbNJo9BYJoWMCEIKhbNJo9BYJoWMC; _lscache_vary=330c6618c4a27101283a3afc1ea12d07; bnState_2071059={\"impressions\":2,\"delayStarted\":0}; bnState_2071067={\"impressions\":1,\"delayStarted\":0}; bnState_2071069={\"impressions\":2,\"delayStarted\":0}; bnState_2071060={\"impressions\":4,\"delayStarted\":0}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 318545\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 24 Oct 2025 14:50:44 GMT\r\netag: \"4dc51-68f1f016-8f90add;;;\"\r\nlast-modified: Fri, 17 Oct 2025 07:28:22 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 114245\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BHN4x6HeVrbdF%2F5ur4uTMC84x13NlHjEXO8b5AtXVd40KOpMOdyFJraljNJOWtLhPmcf0gt8V1%2BwLMW4%2FTvaeZ54RuyXVVC26q7v\"}]}\r\ncf-ray: 990b815e09e53181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":318545,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 728 x 686, 8-bit/color RGBA, non-interlaced","md5":"860159223b3a80116c87e7f5828b1531","sha1":"e3aef34409cd8ff7529de5cd83c51566d900eb52","sha256":"bf765f55ea7ce5d8413498d05175e417ca6a3f577a1dc7d2ceae2610ef9dadfc","sha512":"d9d498c67da6e3b3c9cce8c6525d3c0ce697a238e810d28d716214519897bcce29e88985ae371498c4d5252bf59ec0b438de131f4983f0b11ab7b4fdb964d798","ssdeep":"6144:qJwy+Fi3RVevF1qswsJ5Zis1KAIvfykiha6yzo4kCDranY:qJaFi3LevF1qs13a3m4kCH8Y","tlshash":"bf6423083042d6f51787f0aa2e72647d47f32063c66767a66b0fbe69a9c1743690e1fc","first_seen":"2025-10-18T22:35:26.80242Z","last_seen":"2025-10-18T22:35:26.80242Z","times_seen":1,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guidepaparazzisurface.com/check.html","fqdn":"guidepaparazzisurface.com","domain":"guidepaparazzisurface.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:48.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guidepaparazzisurface.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:30:59 GMT","end":"Fri, 07 Nov 2025 14:30:58 GMT"},"fingerprint":{"sha1":"09:CA:DA:46:FA:20:93:EF:BF:A3:2F:C8:E4:F1:01:E8:7F:B5:6C:9E","sha256":"59:3C:83:04:25:43:A6:89:F4:CB:77:35:F4:A8:66:DF:9E:B9:7F:B2:D7:CE:A8:00:84:52:B9:C3:73:32:C8:51"}}},"request":{"raw":"GET /check.html HTTP/1.1\r\nHost: guidepaparazzisurface.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: cart=1; cart_p=2; UID=251018173496f397c89d7a4c479ac66c5c75; CHCK=1; PTS=AYKhbNJo9BYIoWMBEIKhbNJo9BYIoWMB\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 22:34:48 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Mon, 22 Sep 2025 06:11:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68d0e8af-39e\"\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":926,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"088dba8e97eede53134c93219f7ebbae","sha1":"adb707654d1fe0af7d0d7a9f55660d22bd3625e4","sha256":"6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff","sha512":"23a1f87731e8aee4658993cd1ce35ec179fea80b89bf52aca7634488f1bdfcf88b9cabca4859481357a9fee06cbb49df64bbe0878b1dae0e5df4fa34003c6d80","ssdeep":"","tlshash":"6211d04934e1684c1127a6301597a2183c32a40315cbd949fb9cd7301f815a7dc596df","first_seen":"2024-11-22T16:59:41.974716Z","last_seen":"2026-03-04T10:11:28.020186Z","times_seen":13721,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guidepaparazzisurface.com/jserror?type=banner_static\u0026bavar=0\u0026build=1.0.614\u0026zoneid=\u0026e=Error\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Fiyoteen.org%2F","fqdn":"guidepaparazzisurface.com","domain":"guidepaparazzisurface.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:50.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guidepaparazzisurface.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:30:59 GMT","end":"Fri, 07 Nov 2025 14:30:58 GMT"},"fingerprint":{"sha1":"09:CA:DA:46:FA:20:93:EF:BF:A3:2F:C8:E4:F1:01:E8:7F:B5:6C:9E","sha256":"59:3C:83:04:25:43:A6:89:F4:CB:77:35:F4:A8:66:DF:9E:B9:7F:B2:D7:CE:A8:00:84:52:B9:C3:73:32:C8:51"}}},"request":{"raw":"GET /jserror?type=banner_static\u0026bavar=0\u0026build=1.0.614\u0026zoneid=\u0026e=Error\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Fiyoteen.org%2F HTTP/1.1\r\nHost: guidepaparazzisurface.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: cart=1; cart_p=2; UID=251018173496f397c89d7a4c479ac66c5c75; CHCK=1; PTS=AYKhbNJo9BYJoWMCEIKhbNJo9BYJoWMC\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 22:34:50 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iyoteen.org/wp-content/uploads/2025/07/Iyoteen.com-Brea-Jarada-5-822x1024.png.webp","fqdn":"iyoteen.org","domain":"iyoteen.org","tld":"org"},"ip":{"addr":"104.21.45.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iyoteen.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:31:59 GMT","end":"Thu, 08 Jan 2026 10:30:31 GMT"},"fingerprint":{"sha1":"4A:62:E3:55:B9:0F:A1:58:5F:BD:2B:F8:0D:A1:E6:77:EE:46:DC:2C","sha256":"BC:30:2F:73:E4:96:3B:AF:75:1B:31:F3:DF:31:50:4B:49:6F:08:62:50:21:0A:B5:74:33:90:E8:E8:3E:29:13"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/Iyoteen.com-Brea-Jarada-5-822x1024.png.webp HTTP/1.1\r\nHost: iyoteen.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D; __PPU_cl_tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB; _lscache_vary=330c6618c4a27101283a3afc1ea12d07\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: image/webp\r\ncontent-length: 124734\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 24 Oct 2025 14:50:36 GMT\r\netag: \"1e73e-6865108e-90c38bf;;;\"\r\nlast-modified: Wed, 02 Jul 2025 10:57:18 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 114252\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VU4%2FfYixm3%2BEG5VR8EusAEtCpcg2vmsyGW9QXAwWc7Fk8ypiyjm58CFqpBUucOCFaFl12OKdeksY7VsuCgNBEPkAVLfRREhegGvT\"}]}\r\ncf-ray: 990b8158bfec3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":124734,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 822x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0775426af6055a53baa3105ef1af1882","sha1":"c5d1e54b511e1b2da5a79d00cf16cc278346bfaf","sha256":"937fe267e9849972e1d1a41d8100aa5fc27390f64319ce5842303600e86eb036","sha512":"9e99f3144a21e38228bacf1cc8dc1db19b4bc413b435c842a41eae6acc4a303fd63b8926fa760fe8aec9a528e72e3a6c71e739c6c6d876a6f958e0e832326910","ssdeep":"3072:Pf8HgekcWRRboRpJssdrmoAOm8OFTaWyEd:Pf8HgekcWRREWMTAYlU","tlshash":"62c312abbee5f6be5a0a25194c1711ce6dd0f474daf22277c4a02a532903b73c05892f","first_seen":"2025-10-18T22:35:26.806665Z","last_seen":"2025-10-18T22:35:26.806665Z","times_seen":1,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iyoteen.org/wp-content/uploads/2025/07/Iyoteen.com-Angel-Supat-1-803x1024.png.webp","fqdn":"iyoteen.org","domain":"iyoteen.org","tld":"org"},"ip":{"addr":"104.21.45.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iyoteen.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 09:31:59 GMT","end":"Thu, 08 Jan 2026 10:30:31 GMT"},"fingerprint":{"sha1":"4A:62:E3:55:B9:0F:A1:58:5F:BD:2B:F8:0D:A1:E6:77:EE:46:DC:2C","sha256":"BC:30:2F:73:E4:96:3B:AF:75:1B:31:F3:DF:31:50:4B:49:6F:08:62:50:21:0A:B5:74:33:90:E8:E8:3E:29:13"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/Iyoteen.com-Angel-Supat-1-803x1024.png.webp HTTP/1.1\r\nHost: iyoteen.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D; __PPU_cl_tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB; _lscache_vary=330c6618c4a27101283a3afc1ea12d07\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: image/webp\r\ncontent-length: 33626\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 18 Oct 2025 12:13:53 GMT\r\netag: \"835a-687b58bc-90c0f2f;;;\"\r\nlast-modified: Sat, 19 Jul 2025 08:35:08 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 36468\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qCBFgmsPthN3LT6jz7G90ArN1MIMLNaXKPQj%2FmIJnONRSVlZ4S2omTXOGyhBBbetHyR1viVoBEfEQISonVFlPubJCLdYMxQNz5gd\"}]}\r\ncf-ray: 990b8158e84b3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":33626,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 803x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6d1860663932e8a2812e871dc8a48053","sha1":"851dd9ee37d6f5abcb45d8181b4670e336b640ff","sha256":"9d0cb7197bf3063b2f95377c93cf27d55cde0c85969664f4f31de417e0411ad0","sha512":"98c4d98336efeb0c0d9a1f9943d1981e3fe3d99cdea0266223841906698970014295ba791d8fdd08543764eb9882f9b6c045088e4820fb776610f4e04297e90a","ssdeep":"768:OE3CtBj7aVJXq5u7cmw9l3MbEXuajt/xjhUZUkGnTuKXoA:OE3Ctt7aVxYmC3XuajqZUPT5","tlshash":"24e2f1a9d1b013e8623caa5ba6dbeb41235315e0f7d4972709b66f471c18b43da2a7c0","first_seen":"2025-10-18T22:35:26.810194Z","last_seen":"2025-10-18T22:35:26.810194Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guidepaparazzisurface.com/get/2071069?id=2071069\u0026pid=__clb-spot_2071069_itl_9\u0026jp=_clkaelnlmzhkcwqnmegffy\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.614-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=NaE7Io-7bsPCYB1tniq6Br1s\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=xAqniYuaHR0cHM6Ly9peW90ZWVuLm9yZy8\u0026afid=2648672341339136\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB\u0026vp=0\u0026dto=2\u0026pload=429\u0026rlp=%5B0%2C3%2C26%2C22%2C22%2C73%2C58%2C73%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=6\u0026uf=0\u0026freq=0","fqdn":"guidepaparazzisurface.com","domain":"guidepaparazzisurface.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guidepaparazzisurface.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:30:59 GMT","end":"Fri, 07 Nov 2025 14:30:58 GMT"},"fingerprint":{"sha1":"09:CA:DA:46:FA:20:93:EF:BF:A3:2F:C8:E4:F1:01:E8:7F:B5:6C:9E","sha256":"59:3C:83:04:25:43:A6:89:F4:CB:77:35:F4:A8:66:DF:9E:B9:7F:B2:D7:CE:A8:00:84:52:B9:C3:73:32:C8:51"}}},"request":{"raw":"GET /get/2071069?id=2071069\u0026pid=__clb-spot_2071069_itl_9\u0026jp=_clkaelnlmzhkcwqnmegffy\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.614-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=NaE7Io-7bsPCYB1tniq6Br1s\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=xAqniYuaHR0cHM6Ly9peW90ZWVuLm9yZy8\u0026afid=2648672341339136\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB\u0026vp=0\u0026dto=2\u0026pload=429\u0026rlp=%5B0%2C3%2C26%2C22%2C22%2C73%2C58%2C73%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=6\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: guidepaparazzisurface.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: cart=1; cart_p=2; UID=251018173496f397c89d7a4c479ac66c5c75; CHCK=1; PTS=AYKhbNJo9BYIoWMBEIKhbNJo9BYIoWMB\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Sat, 21 Nov 2026 22:34:49 GMT; Secure; SameSite=None\nPTS=AYKhbNJo9BYJoWMCEIKhbNJo9BYJoWMC; Path=/; Expires=Sat, 21 Nov 2026 22:34:49 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5054,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (5054), with no line terminators","md5":"fc67fa1f6f2e583b9c1c9586868de30a","sha1":"285159bac9c6cb8887ca320be31f9dd961bedb34","sha256":"17694465eb2fe0f122468e768aa56efc3a8e08fd6397f71dc4b915641352c929","sha512":"6106489b81f12d11b6069f383626d12cc391064532c3bb802a15901996e2147529bf4756ef891cb986f19d9e59b6dcacfaf067e572c0744b2f200bfbeda59231","ssdeep":"96:BXz4kIBpx9s+1kIBpx9sM1kIBpx9shqkIBpx9sxjceVocrYo:Bj4lBpxK+1lBpxKM1lBpxKhqlBpxKDVn","tlshash":"0ba1f92d4ee893dc4279a2181611bf7990c05a6afb021622d7fc0645829d9fdccfeed2","first_seen":"2025-10-18T22:35:26.813978Z","last_seen":"2025-10-18T22:35:26.813978Z","times_seen":1,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guidepaparazzisurface.com/jserror?type=banner_static\u0026bavar=0\u0026build=1.0.614\u0026zoneid=\u0026e=Error\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Fiyoteen.org%2F","fqdn":"guidepaparazzisurface.com","domain":"guidepaparazzisurface.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:50.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guidepaparazzisurface.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:30:59 GMT","end":"Fri, 07 Nov 2025 14:30:58 GMT"},"fingerprint":{"sha1":"09:CA:DA:46:FA:20:93:EF:BF:A3:2F:C8:E4:F1:01:E8:7F:B5:6C:9E","sha256":"59:3C:83:04:25:43:A6:89:F4:CB:77:35:F4:A8:66:DF:9E:B9:7F:B2:D7:CE:A8:00:84:52:B9:C3:73:32:C8:51"}}},"request":{"raw":"GET /jserror?type=banner_static\u0026bavar=0\u0026build=1.0.614\u0026zoneid=\u0026e=Error\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Fiyoteen.org%2F HTTP/1.1\r\nHost: guidepaparazzisurface.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: cart=1; cart_p=2; UID=251018173496f397c89d7a4c479ac66c5c75; CHCK=1; PTS=AYKhbNJo9BYJoWMCEIKhbNJo9BYJoWMC\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 22:34:50 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guidepaparazzisurface.com/bn.js","fqdn":"guidepaparazzisurface.com","domain":"guidepaparazzisurface.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:48.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guidepaparazzisurface.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:30:59 GMT","end":"Fri, 07 Nov 2025 14:30:58 GMT"},"fingerprint":{"sha1":"09:CA:DA:46:FA:20:93:EF:BF:A3:2F:C8:E4:F1:01:E8:7F:B5:6C:9E","sha256":"59:3C:83:04:25:43:A6:89:F4:CB:77:35:F4:A8:66:DF:9E:B9:7F:B2:D7:CE:A8:00:84:52:B9:C3:73:32:C8:51"}}},"request":{"raw":"GET /bn.js HTTP/1.1\r\nHost: guidepaparazzisurface.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 22:34:48 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 17 Oct 2025 12:09:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f231ed-2907f\"\r\nexpires: Sat, 25 Oct 2025 22:34:48 GMT\r\ncache-control: max-age=604800\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":168063,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"40dda1b64626192f07d9d9f259e9e183","sha1":"c6be3ad994f5964b813df4d47a37c5f3026094f6","sha256":"06b73144a697cfc8a234b30bb27cb9f8f250a0f92e488829f5ef03099605cf21","sha512":"dfd536548c0c0952028e082f26166784098e7f658340cc5a5330f7eedbac1730c26e4de5b4168ceda4c30a6f2cec66ad990fe4abe78a10040587d3f2706a3963","ssdeep":"1536:Ew82uAh7HrQ8srzmckqAiUTIODX3PzdzF+7u3s2r+jZ6d9h2nakswNqQn+jKGMki:EG9E8GFUTIODI4d9kA0g6","tlshash":"7bf3847dfb4f643682d3901d4e3e651ed7f558dd9a4c0440e433d2ebab2888ab321ba5","first_seen":"2025-10-17T12:46:31.411375Z","last_seen":"2025-10-20T05:53:10.121081Z","times_seen":40,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crumpetprankerstench.com/get/2076125?id=2076125\u0026jp=_clldhbzxqnxhbvxnspjtnj\u0026dr=49\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.614-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=NaE7Io-7bsPCYB1tniq6Br1s\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=Uqh5dEVaHR0cHM6Ly9peW90ZWVuLm9yZy8\u0026afid=7152271968714752\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB\u0026vp=0\u0026dto=2\u0026pload=576\u0026rlp=%5B0%2C4%2C69%2C46%2C155%2C384%2C297%2C384%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0","fqdn":"crumpetprankerstench.com","domain":"crumpetprankerstench.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iyoteen.org/","date":"2025-10-18T22:34:49.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crumpetprankerstench.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:34:10 GMT","end":"Fri, 07 Nov 2025 14:34:09 GMT"},"fingerprint":{"sha1":"7C:B3:43:C6:39:F8:CD:E2:D0:F1:5C:2E:B1:50:48:65:BF:8B:43:C8","sha256":"FA:DE:92:E8:E0:29:98:7F:3F:2A:62:FA:97:95:14:52:5D:BC:65:D9:E1:43:13:99:19:70:73:F0:BB:97:18:ED"}}},"request":{"raw":"GET /get/2076125?id=2076125\u0026jp=_clldhbzxqnxhbvxnspjtnj\u0026dr=49\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.614-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=NaE7Io-7bsPCYB1tniq6Br1s\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=Uqh5dEVaHR0cHM6Ly9peW90ZWVuLm9yZy8\u0026afid=7152271968714752\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026tl=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB\u0026vp=0\u0026dto=2\u0026pload=576\u0026rlp=%5B0%2C4%2C69%2C46%2C155%2C384%2C297%2C384%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0 HTTP/1.1\r\nHost: crumpetprankerstench.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://iyoteen.org/\r\nCookie: cart=1; cart_p=2; CHCK=1; PTS=AYKhbNJo9BYHoWMBEIKhbNJo9BYHoWMB; UID=25101817345cb69043bad446bd8558a5938b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 22:34:49 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Sat, 21 Nov 2026 22:34:49 GMT; Secure; SameSite=None\nPTS=AYKhbNJo9BYJoWMCEIKhbNJo9BYJoWMC; Path=/; Expires=Sat, 21 Nov 2026 22:34:49 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3192,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3192), with no line terminators","md5":"3aea95ea9068c13809c6336ebf3681ff","sha1":"784dcf03773925f1d0ad00e0d82f3743c7810b3a","sha256":"cdc0938becba84218d4ed234fcba2e04e072cfe8b13dc14cc4b37666fd9afabc","sha512":"48e35ead95afc6314fc27e9acf0035784fe21d4bdd59ea77dccb089d4e2ae113a3d011df5875e2abbe78164e8c5dffe068c149a85640b88acf8995bcebaa0d4b","ssdeep":"","tlshash":"6861a5dcfcedd6eed89b640cc9b7dcc19686c43c0e237aabad68c60448742a44b75423","first_seen":"2025-10-18T22:35:26.817482Z","last_seen":"2025-10-18T22:35:26.817482Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}