{"report_id":"4b590f3a-618d-45af-bafa-1493ebda3626","version":6,"status":"done","tags":[],"date":"2025-09-21T14:31:37Z","url":{"schema":"http","addr":"mail.scandalshack.com","fqdn":"mail.scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"172.67.150.43","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"mail.scandalshack.com/","fqdn":"mail.scandalshack.com","domain":"scandalshack.com","tld":"com"},"title":"Scandal Shack – 👅🍑🍒 Star ⭐😈❤️ Scandals 🍆🍌💦"},"submit":{"url":{"schema":"http","addr":"mail.scandalshack.com","fqdn":"mail.scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"172.67.150.43","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-26T14:31:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"go.blcdog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"video.blcdog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.tsyndicate.com","ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":40822,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":16,"received_data":305739,"sent_data":8882,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"creative.xlivrdr.com","ip":{"addr":"172.67.213.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":91274,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":6,"received_data":776157,"sent_data":6489,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"scandalshack.disqus.com","ip":{"addr":"199.232.196.134","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":2198,"sent_data":457,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"static-cdn.strpst.com","ip":{"addr":"104.17.11.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":64029,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":6110,"sent_data":519,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"tsyndicate.com","ip":{"addr":"136.243.43.25","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":1289,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":4,"received_data":44084,"sent_data":3565,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"mail.scandalshack.com","ip":{"addr":"172.67.150.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":99491,"sent_data":1032,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"TrafficStars","description":"TrafficStars is a self-served ad network and ad exchange that operates mainly in adult-related verticals.","website":"https://trafficstars.com","common_platform_enumeration":"","icon":"TrafficStars.png","categories":["Advertising"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Genesis theme","description":"Genesis theme is a WordPress theme that has been developed using the Genesis Framework from Studiopress.","website":"https://www.studiopress.com/themes/genesis","common_platform_enumeration":"","icon":"Genesis theme.svg","categories":["WordPress themes"]},{"name":"AddToAny","description":"AddToAny is a universal sharing platform that can be integrated into a website by use of a web widget or plugin.","website":"https://www.addtoany.com","common_platform_enumeration":"","icon":"AddToAny.svg","categories":["Widgets"]},{"name":"Perfmatters","description":"Perfmatters is a performance optimisation plugin for WordPress websites.","website":"https://perfmatters.io","common_platform_enumeration":"","icon":"Perfmatters.svg","categories":["WordPress plugins","Performance"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"AddToAny Share Buttons:1.1","description":"AddToAny Share Buttons plugin for WordPress increases traffic and engagement by helping people share your posts and pages to any service.","website":"https://github.com/projectestac/wordpress-add-to-any","common_platform_enumeration":"","icon":"AddToAny.svg","categories":["WordPress plugins"]},{"name":"PHP:8.3.25","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}]},{"fqdn":"i.ibb.co","ip":{"addr":"45.43.142.6","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"domain_registered":"unknown","domain_rank":21643,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":85716,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"syndication.realsrv.com","ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":176973,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":218,"sent_data":538,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"i.redd.it","ip":{"addr":"151.101.65.140","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":17323,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":4,"received_data":1559531,"sent_data":1892,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"scandalshack.com","ip":{"addr":"172.67.150.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":5125105,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":27,"received_data":775073,"sent_data":14642,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"go.xlivrdr.com","ip":{"addr":"172.64.147.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":49821,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":10,"received_data":134431,"sent_data":9136,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"stripchat.com","ip":{"addr":"104.17.118.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":953,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":180030,"sent_data":1036,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"pxl-eu.tsyndicate.com","ip":{"addr":"188.40.143.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":61788,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":420,"sent_data":4272,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"img.doppiocdn.com","ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":38793,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":21,"received_data":295310,"sent_data":10393,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fapchatvip.com","ip":{"addr":"88.208.20.10","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":44916,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":457,"sent_data":469,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"a.realsrv.com","ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"unknown","domain_rank":271410,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":43646,"sent_data":457,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"m.media-amazon.com","ip":{"addr":"23.36.77.57","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"unknown","domain_rank":3022,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":191641,"sent_data":547,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"s.uuidksinc.net","ip":{"addr":"31.220.27.155","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":47808,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":576,"sent_data":515,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.23.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":313,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":13078,"sent_data":1014,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":44718,"sent_data":1135,"comment":"","tags":null,"fingerprints":null},{"fqdn":"images-na.ssl-images-amazon.com","ip":{"addr":"23.36.77.57","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"unknown","domain_rank":4929,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":56104,"sent_data":549,"comment":"","tags":null,"fingerprints":null},{"fqdn":"jcdn.tsyndicate.com","ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":65259,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":772,"sent_data":1079,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"video.blcdog.com","ip":{"addr":"172.64.147.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":4215,"sent_data":496,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"go.blcdog.com","ip":{"addr":"172.64.147.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":187088,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":2,"received_data":3587,"sent_data":1515,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"video.sacdnssedge.com","ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"unknown","domain_rank":155152,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":3,"received_data":1645575,"sent_data":1727,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"static.addtoany.com","ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":28267,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":4,"received_data":87714,"sent_data":2052,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"tsvideo.sacdnssedge.com","ip":{"addr":"212.102.62.46","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"unknown","domain_rank":173953,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":4,"received_data":3220828,"sent_data":2324,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"s2.pictoa.com","ip":{"addr":"104.26.10.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":1914315,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":125003,"sent_data":528,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/n.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bacb2baa63593a3b4ff341e7b44a642e","sha1":"e2b73db7577f9150f8ce64f5c33062224a5b6bd4","sha256":"3b567e29e2b1e3c84a9a0240316205f43e12d3250476dbf13fec61ca873283d1","sha512":"b7d79cb5425ad4ffd79bcdb53fb1198716d21b7fecde483144ac50bb09eb8554a941cd5155c01943121760baa58c0186b15171cf79ee1e79b5d532ab3d96f427","ssdeep":"1536:pXOzjrKnfl/p3Ec2IUO5M5h5G5BkBw5cLc:8UpEcXUjBI","tlshash":"96335bd97595743122ab01a691af170b733e3917ec0d4c00a0b7ead53978dcad23bfa9","size":54621,"data":"","first_seen":"2025-09-19T20:02:01.065155Z","last_seen":"2025-09-24T06:57:11.737977Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/interstitial.ts.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9dccb0d02f8b94fd401f028d0829f89e","sha1":"c884a88b36387f3a848a13f7c3165f8230b41e56","sha256":"a439575e0efdac1e25905aeac3e93f6cd452abe0730c351f2d6ed3de22b04ae6","sha512":"d9fbe8a12ddb895e1c5c55712b5a275d213eeab78be504c70860cee692a0492a3c2f18848a70d21d6a33da6d09f4a9cc1af8b0f8ab7946181ce53f6a04c85931","ssdeep":"384:phi19PPXP9dvN3U4kZmZM7+K3XxCWRfxnoTEa2:pQXzNklZOSBXMWRZoTN2","tlshash":"f3922ae875e3297040a2916c605f9335737919606e980c01e07b9cd62bfad8be27ff6d","size":20886,"data":"","first_seen":"2025-06-26T16:39:31.358715Z","last_seen":"2025-09-22T23:35:58.120676Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scandalshack.com/wp-content/plugins/perfmatters/js/lazyload.min.js?ver=2.4.6","fqdn":"scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"172.67.150.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4edcd1be13b85ed07b019a0158233f5","sha1":"410d4f063b36cbd908c7733272cc3b9ef615e9e0","sha256":"58c8e6e0ae274de20ed5f0c47f704de948659e6b8595df77e3e0c2875718d9ef","sha512":"b6168e4bd2f04983206689fa8e2d6caa4b1667c5ce23cf65ce19944618be76cb6ee1b8ebad915dedea85da78d115243b1405ee2ac6312a3be13e1ebc6065984a","ssdeep":"192:ptQLu5/2vVuQkIs99uxZVDRTbS8tMUoWUM1nKWcmiXyMvjp3tsO:p+Lw/mfbnZbJtMUoMYYO","tlshash":"ed122e497057b13ebda3b0f1901f12067039b556a9ebe484e6a1e5e4197c8be1723f3c","size":9355,"data":"","first_seen":"2023-03-13T12:16:08Z","last_seen":"2026-04-20T13:52:19.558917Z","times_seen":5941,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jcdn.tsyndicate.com/de2ce61dfdf64c76b063ad24264fac26.js","fqdn":"jcdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-20T14:00:37.578398Z","times_seen":587663,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.scandalshack.com/","fqdn":"mail.scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"172.67.150.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"67033c0d2cbbc4e46974e6b6e2ab817e","sha1":"3c5004291c87a177ec40efb136029d13e4fbadcb","sha256":"5dfc8ffa9eb41a69123208b7027f94ff8cc321ab7f1327040bf6ccc5b6a163b3","sha512":"34ccf6f112f54cb3f8981091cdcb82d457f1b209c8dfbcebbc86a30c3da91f45c0c5087827c77180909a1a869ae524268f78aa87278723f469b4c81b622b32d6","ssdeep":"","tlshash":"3490020658000aa54c425a8124d54b902532548090c1b0104054940681904498911ad0","size":46,"data":"","first_seen":"2024-04-12T23:06:59Z","last_seen":"2026-04-18T06:10:39.72562Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.scandalshack.com/","fqdn":"mail.scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"172.67.150.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"16d5712dddcb5e05915685f611e6b67c","sha1":"9ce10db4e84d0d8e712263615152f8d8310401ee","sha256":"df2734e3988b23f3948265da4a8e6b1d57f83107e2d63e285d837edbc92f6c12","sha512":"fab98c48e93d85ba6a0a45c48f69e43d31ded2d515a27e44e2012202e500dab6b8068060a7aabaa55e11927727810bcc5cc0da70d6e44fc3928d901c35d73da1","ssdeep":"","tlshash":"e131cb6a34157eb282f300d153527a19f3af506727e8e9e4b8858a4c3af8d97c45a982","size":1677,"data":"","first_seen":"2025-09-21T14:32:25.395697Z","last_seen":"2025-09-21T14:32:25.395697Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.scandalshack.com/","fqdn":"mail.scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"172.67.150.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"00e417ddc19b67ec162443686f3f0d93","sha1":"a233afff8b58d147381393396507b21b7f77af3e","sha256":"b463d7eff54326c53db601af33e2014707cf54443a81d0961541ccb53ab5767d","sha512":"388a7034e29daa29a4c9387d1fb49660c82925285f9996ca3913e33353d8783691d82f9bed410ee65865a7f64a6e91296ed97370b6c82aeca8b9c7e2d90f2882","ssdeep":"","tlshash":"2d2130e17710993e2ca7288f957eb789b5247f73ac02d0916928c86c46bcc0371713e9","size":1112,"data":"","first_seen":"2023-11-09T21:11:40Z","last_seen":"2026-04-18T05:14:19.169918Z","times_seen":1517,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scandalshack.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"172.67.150.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-20T14:00:50.305232Z","times_seen":729242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199","fqdn":"creative.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"172.67.213.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-04-20T14:02:53.109981Z","times_seen":134750,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.scandalshack.com/","fqdn":"mail.scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"172.67.150.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb80d8a769f1f449d3a99988fe4790cd","sha1":"150a270d5b5d48b213208abdabc055c434cd46d9","sha256":"1725cb0d719afe327239031ce263f8b8c32d8f469c8dc187e0ad7c8b30ea9e43","sha512":"ef6bccd1f515531d36f660d3fd055cc7388233db901522ea7138e33edef799062ec88789e939e05cf4d8f104d2cdd54c38f2a3d18e10fa119cc9146952f0864c","ssdeep":"","tlshash":"bbb0929601a75b245672828b021d80a10a2110264e84a9817e9c41640b8f08a98b2a6c","size":106,"data":"","first_seen":"2025-09-21T14:32:25.397877Z","last_seen":"2025-09-21T14:32:25.397877Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.realsrv.com/video-outstream.js","fqdn":"a.realsrv.com","domain":"realsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"03f33d7d8672ba4ec3d6ea94329ac02e","sha1":"c749958b30b91a42d89a8c4b10ade5b6ce930189","sha256":"32c5e141e887f28378094e72c0eacbe05d13e9e4161428ada41a229385df0738","sha512":"5322b70f4815f5c8e9f902db3f532cd064a089b69c6af4d0b07c2c5d422daa0312230e3db28da23c58ed95e668917b2f894ec6d8c8ca1aa27a9dca555cd7a121","ssdeep":"768:20KmeL4xFG7kKZcxOxw8hwMjNOKVhMfhcgAHZ1Z8r1Z1AdOpKdFHvC8nV206rHbi:YL4xFG7kKZcxOxw8hwMjNOKVhMfhcgAJ","tlshash":"95132c9a37d179304acb905e7bfba30937b5007e280a0068b91deed0572cfd65566fac","size":43132,"data":"","first_seen":"2025-02-17T08:46:22.953418Z","last_seen":"2025-11-14T01:13:16.134278Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/puengine.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"87781e1d7683222115078304d2414b35","sha1":"8bf54dd8a67d75a6f38ab240d47007c12c6e2fdc","sha256":"37cf30c764c95d5900378ec4e56d09a6088a8b90ed7540c0b7cd3abebba37459","sha512":"64b8288978b5e509878a3f527ea8c9fe86fb762f3b09c52e1521a3adfc1bf78f6a262e78cd9bea6eb574acc270ff52eb2647c0d05ea2ca0715a7e330a192b043","ssdeep":"1536:v9zsfUK2AHAuaEGDoXhLAknqLULh9/S1dHWyRj:v9zsfU5mGc9A2qLULh9/SHHWyl","tlshash":"1b93d65d7093604961d2f6fc007f368a686ac850f45e8caa6674d3c2ec7c4ad84e79fb","size":89562,"data":"","first_seen":"2025-01-15T18:31:30.651098Z","last_seen":"2025-12-13T16:30:20.429188Z","times_seen":1461,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.xlivrdr.com/static/4d7f3ebc/s/LPOmega/main.c45934d5e8daf538bc0b.js","fqdn":"creative.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"172.67.213.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4807e0ce6dc04b614d6ff568874bb8ef","sha1":"bb70bad012c2a2a19a98cbcedd653f203b37a26f","sha256":"f6a6c958262b6ed528ac0236f949d81a017724b1b89300ebb9c88f6a6ae3c022","sha512":"fd05bd79e945c7d0c0629b8e1fab30254fd56d033a0e109ff63e3d27e331daa599e02086fd10e18d0cc14258214f5f68a2054309a72a00d0d6de336c83702b82","ssdeep":"6144:lelha2k2rVOihzhoJl1qfsUYh0QsDv5Be8:aBDhzIuGh0","tlshash":"a1e429c83396f06646c79156503f4603f239a95a640ad01cf29aecec786dd8ee277f36","size":683647,"data":"","first_seen":"2025-09-21T14:32:25.384778Z","last_seen":"2025-09-21T14:32:25.384778Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scandalshack.com/wp-content/plugins/add-to-any/addtoany.min.js?ver=1.1","fqdn":"scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"172.67.150.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ef26b5e47e6951f43ecf2b1fc645222","sha1":"081afb52577f6f3bb044fdea6d34a632c3cce7e8","sha256":"50679e0e3933c945348a2db0cc128bb14b57a60a74fabf8cae13acc14efbb2e1","sha512":"a0876397327a5c6b4bca75605fa97ed7243ad78d9fd285f8a55ad2525e1070fdb197d1ae0687b3fb603946bf6dfb567eb3be3a636fb9fca6e36d03055ce7794c","ssdeep":"","tlshash":"6fb09b1d3474e95c48735551903bbf1d75133d33d7401995054c25a15f2866e5043d4d","size":129,"data":"","first_seen":"2023-03-07T01:03:19Z","last_seen":"2026-04-20T13:46:12.139064Z","times_seen":20705,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/page.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"57b268c32627d8d13671f43be7c47b84","sha1":"0eebe8bc9958922a2a354b4abdca2f4d326f49e9","sha256":"53d16f311b01e5f9b5e7dcb2ec11b11e5ed23e155ed05727a7a42472d608118f","sha512":"72f220c33c49e4cf58f9fdd8d1f56e835e6b7f33c50d0eb754b9e7868f788c9f8705d83f06419f1191b9a528397a5ce6637df84fc232daea844410ed7027ed4a","ssdeep":"","tlshash":"bd61b74b774ea8734a5736bac19fb60f2223331f9c6589048914e4d849bcec6501fa7e","size":3179,"data":"","first_seen":"2025-04-25T03:57:25.57786Z","last_seen":"2026-04-17T12:08:01.533113Z","times_seen":9236,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/outstream.video.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fc28ab79823fd328c0b902ae755bfe7","sha1":"ea293f0e2da10f48534fceff4ee0abbfe25b8f33","sha256":"78db17a0948650094f2ac559ca6bd7bb10e2b5fdfc178f2a0a36b3f3de029487","sha512":"97a535026df1fff61d26edc0b0650ac9eb78b65620c07ac022d9b1e549c9ce4b4c68720edf0fc7a64180101cc75b527bf8b758aca86c11e44201afac4e31026f","ssdeep":"384:pV2EaebLlje+FaamsgLdy/bkdCKRJSlFM+/FY0qQShRja:pMNebvwVnxy/bkjwFHNY0qQSbja","tlshash":"8d9209a879d1e874a553106ed1ef5726b3b83652580d0c00d06becd53ab8e5ac33beb9","size":20280,"data":"","first_seen":"2025-09-19T19:02:07.073152Z","last_seen":"2025-12-10T20:30:41.604317Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jcdn.tsyndicate.com/319c50330dfc43a28402af80648c4aca.js","fqdn":"jcdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-20T14:00:37.578398Z","times_seen":587663,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.scandalshack.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"mail.scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"172.67.150.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-20T13:57:39.97927Z","times_seen":99005,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.scandalshack.com/","fqdn":"mail.scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"172.67.150.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e1c91de58f23020a06da8a5bbaaa237","sha1":"831489693be989371b6065dd3961876e60dcc96b","sha256":"058fa32271aed7af316c2eedf6a2281944a8d93d523e3769c8eae112190877e4","sha512":"fb641ccfb3a581c8f34f9d9191f102aa4cb2ef3c1eaba32d466c008c8f6ddf666b626f2b9187b83a09a0ca933b66dee39d91f89184695a9cda034bc2c2480a4d","ssdeep":"","tlshash":"1ee068a2828e183670307dc3bb06f5c23e592b920d5a3039a8dd32323b4790d80f42d4","size":363,"data":"","first_seen":"2025-09-21T14:32:25.399089Z","last_seen":"2025-09-21T14:32:25.399089Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scandalshack.com/wp-content/plugins/mai-engine/assets/js/min/menus.min.js?ver=2.37.0.71420252325","fqdn":"scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"172.67.150.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0defbf656291ce0ad96cd9b2b602a78d","sha1":"801ceaab01eb83e2ecc17be33b5963884c6690db","sha256":"fc95aa1d518907d03bd5abc610363655e5556978ca7fc8b9eca0a33a7872e822","sha512":"4981181abe71811677db6a85612003c2e8adf1c5c185e72db6a59a01f083f8ba811a1a5b07682d76c33613182185d45bf544e064e875c19f8cd43b6c088ceba0","ssdeep":"","tlshash":"765165faa1543a7b0aeb14e6f36da6d17b78206cd70b4921447ecc4d2d7dc8112f1ab4","size":2912,"data":"","first_seen":"2023-05-11T05:04:01Z","last_seen":"2026-04-18T06:10:39.705124Z","times_seen":86,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/modules/core.pt5ow5lr.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e998bb147b26903e88f08f39c0e2cfc","sha1":"6c93ab9cb3371591d4031dc60b9c3ae571c3329e","sha256":"ef39bcc03d88448d0d38aba3dc609e9c9c444d037aebec926e6715e1cf956674","sha512":"ed4bb35effa05b85d02fffbd65abdb28b1d88cf573475dc02c2c5b744914f09d06df2dd3f0928ec921e5e7e52f57d4898e58feeae3c139e36c5fb61e7a982431","ssdeep":"1536:h8fE77gdDGstI0AjiVG1COcfs6SngvUy4JfU8xAaj1rxv6G6zMDfPMUEqdb:2fqgPdvUJ1xlj1rxvV6zPub","tlshash":"09636c9f37056937aa1b30e8a8efa508a036275eaf080954f5a5d4b511fdecd3067f2c","size":71871,"data":"","first_seen":"2025-04-25T03:57:25.562762Z","last_seen":"2026-04-17T12:08:01.541004Z","times_seen":9396,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/sm.25.html#type=core\u0026event=load","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"107e713ee1be819b72679a9b20d1b704","sha1":"1d4a8f1f9af8ae391110851b0c5df66d50a1d8dd","sha256":"8eb57361472f7fa5e3b2def7d28f9a03330413fd300a2223ee2ca3291782a41f","sha512":"503b1a4d5d8ff0a9b6caf23041156bf016983c5243d3c129aa6da4a26b947dc73b4ca76400f3d0bed5b7e67c721948a6f77d4720eec763e78268718e4524ac3e","ssdeep":"","tlshash":"a7f0204ff21e393c86730615309a3c86e43e93708c003230a64fa38306d8b9b574af51","size":552,"data":"","first_seen":"2025-03-02T13:21:48.338565Z","last_seen":"2026-04-20T13:08:06.51414Z","times_seen":34852,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/modules/overlays.pt5ow5lr.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"104183cd2b72a99a8dd0a3efcc065679","sha1":"3ba60cce574d6ba5e99688fb15ae40a67f2389c1","sha256":"fb6cb71f48528e1216fabe1c21e8f0eb9f3f670445f089c9034bf6b05a62aa64","sha512":"2a5dd054a1b857a2bf654616166c58d27723419e4716eb0de3142ae5ac6388d0d1bbf49ed0ed44c9de0ccd93bc178b9fbaee68ccedb84e0b61776685ef130b87","ssdeep":"192:Kxje5GYTa2gvBKysAz9Pjf3OMOyINhVRmQcahQ/qzm4dBWKltuLm6AcG2YPBycXH:ijaTa2gvBzsAz9Pjf3OfyINh6ahQ/qaI","tlshash":"4e02e9b12331357bab5f02fb41d8020971295956170a4428af58ec7f22e5ee617f3fa6","size":8362,"data":"","first_seen":"2025-06-24T20:07:33.51703Z","last_seen":"2025-10-19T18:35:09.042531Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/p.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2926f345fb4641fde74661235b655468","sha1":"3e836fd79a6cf73b85570e5845ebba198eb995fd","sha256":"b3cd4ea4dbe8bcb473b7056e3b9705d5605a61060ebe6fd855377a1c06e4db72","sha512":"3605af943a37409c2899801241c51b7e699d814ec87f76199c2c287ef2517970289bf99ecf81371062156bde7c60628efbda7fcc1c49307cb68f40add3f19dd4","ssdeep":"384:phuEaLKr2ld+l2jzM8EYyzjfku/pCgpLYPQc6vn4:psNLK8NnxyvrpCgp0Mv4","tlshash":"287219dcb1c7b0615367a4b6857f6117ba3a6a14284c8845e066f6c23d3cdc6d237e39","size":16094,"data":"","first_seen":"2025-06-22T14:24:34.344756Z","last_seen":"2025-12-13T16:30:20.392365Z","times_seen":831,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.scandalshack.com/","fqdn":"mail.scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"172.67.150.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"53cc3b6da7117dddd1af3df291d2e84d","sha1":"1a0155b8351d5d4fe8fff670d89a5cdfa8a0dc37","sha256":"47cc2cc099fc1978a7354f154183776211ddb2509bae43d09de47018edcfb6ca","sha512":"d5b2543d06fd50b36724a36b491c2d4c76b568bfdecba2af5e0af62a43c7b567f048e2d56c7931908c6222f23f7eda6c2edcda8a0fc66763d1c79cbc0abbdfe7","ssdeep":"","tlshash":"a6e07d088204483af802712e5c8f11924269940b4fd1b81c37ccc3546f0d01f13b765d","size":380,"data":"","first_seen":"2025-09-21T14:32:25.402025Z","last_seen":"2025-09-21T14:32:25.402025Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.scandalshack.com/","fqdn":"mail.scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"172.67.150.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"37eef9ad8b98a150a1b62420a119c542","sha1":"743b251a19cfd2467bef77714aee715d8054bf2a","sha256":"349c795b1e0be170be7c4423e70724275cdae4862c10f54dd790dd2c4a00549c","sha512":"9de26edc84d43275315b7af05820d02d68ef2a7f35fc0a74ca67941a0f9c85460267218367aee28c8fde82dc4d7435adcb01954c87cb5c1583c48a4c9420b073","ssdeep":"","tlshash":"0eb09b194642ff42949835e437518155d7e711484b544b1415add64d1d5e580c5c6914","size":123,"data":"","first_seen":"2023-05-11T05:04:01Z","last_seen":"2026-01-29T23:06:36.235394Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scandalshack.com/wp-content/plugins/mai-engine/assets/js/min/global.min.js?ver=2.37.0.71420252325","fqdn":"scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"172.67.150.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"269513237e5e8c8134f99042cffea7bb","sha1":"d052525cdeae6f6e7e55b07f8d3b84d3e649e6c1","sha256":"5171798b43f28844503baf788c228f08ba652a24dfeceb441190c5b8332350a5","sha512":"727720fdb3860ce1f00349ebe6a7add5f044fe2a60ffb8e0f5c901ad0e281bee244f80f4163824d385947bbe87887598fd98750c0f67683f4ecea1a4649c88b2","ssdeep":"","tlshash":"26210079e31836b701fe60f335def58979aa18de7c460a02801ac9c41d3cdda1275eb9","size":1151,"data":"","first_seen":"2025-03-26T01:29:54.713149Z","last_seen":"2026-04-18T06:10:39.677145Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/inpage.push.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1b2ed5ebce5fb32321a69d05d2d8589","sha1":"439f4ebd5ed0203876de0c271689670cfb8f33b8","sha256":"f38e5bcfdb0566c2b5d2a5bd0dfc44094f3f717b0b7e8f3776f9c1138bfdf052","sha512":"953645b4725c12d7800c775dec4cc980e94bf7049e7d83b0350befb3963fc9a52e80ffcf69ec7f92ae542c5edd11efcffa12e426ba1817e7c30ccfe063834370","ssdeep":"192:pb7XKyDwozsI6fX+nKpBUrt/2AbBf18CIzbzL4Tugwm67mNKbbNCGd+9BBugBRA+:pv6yupv+uYbkzXMTukOgq4GdouEas","tlshash":"ef72e9bd35c26034627a151b52bf9766f73c2a216d081c00b06fec9f7b68d8ac166f65","size":16570,"data":"","first_seen":"2025-06-17T01:44:21.320546Z","last_seen":"2026-01-19T08:00:37.178629Z","times_seen":1075,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.scandalshack.com/","fqdn":"mail.scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"172.67.150.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2795eec39019a8da1015fd704fd8a3b0","sha1":"e65c007dc060858f19201f303ce77fb113f52f7d","sha256":"e1c7ccd8c6c7246b49bcc0d61673e5c0d468f78a7b4236abe68ed7f50f561f9b","sha512":"d55f64bf4db4b56dbf8a56fbc319427cc2f12c70d46771491c514240063c5338be7d867be9b51254c4fa93a640f5aed873f6eb829c30f8923259bcbd507c9a93","ssdeep":"","tlshash":"b1c08c6999a7065a68a8420f1aa76080256564338d81fce83f8fdb610f4c40fa9b3a5c","size":173,"data":"","first_seen":"2025-09-21T14:32:25.404404Z","last_seen":"2025-09-21T14:32:25.404404Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scandalshack.disqus.com/count.js","fqdn":"scandalshack.disqus.com","domain":"disqus.com","tld":"com"},"ip":{"addr":"199.232.196.134","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"64932a1e2564351aa7642475acdf3fbf","sha1":"c3dd2b7d1d4604e3559c2732fd90d71059dd77d8","sha256":"3487ef2baf0c08ba660a8a143cdeb8ebeec961eea04bccd7c49096b4eb26b875","sha512":"ffe08187ef578d7afd64adb9f50d189a894819bbedbc116a6a5d3c18bdfba1a44ff5ce5a86fc365500e2ec03d4757edf03cdafb92fbe9ab7e5a3191829bc74a3","ssdeep":"","tlshash":"a2316754218409647acf24e9288e905b517e92304a64d9cebde4e55b563cfc11b0bb69","size":1517,"data":"","first_seen":"2023-03-07T01:02:18Z","last_seen":"2026-04-20T12:14:06.58989Z","times_seen":6331,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.scandalshack.com/","fqdn":"mail.scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"172.67.150.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ac8fda148f92eb6116af733deb8fc8e","sha1":"5bb94e53488ff38f8940ca6d26d2cf071f097148","sha256":"26be55fa2cd2fef21931323a6afd31ca229edbb28e5bceb2b8ce18e8a2867fd9","sha512":"c01d19ba1744a6e6a05d1a91510a3810aaf5ee963383981e69cb5710565bb1d2ca5cab3591f44649baefff537f6e9f9a0b099cc587e9bf954586569c2cad3d7a","ssdeep":"","tlshash":"6eb09292544899922ed2c40a31c7404814aa90337c9ab4103b1d26262b5a80e86a189c","size":110,"data":"","first_seen":"2025-09-21T14:32:25.405403Z","last_seen":"2025-09-21T14:32:25.405403Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scandalshack.com/wp-content/themes/genesis/lib/js/skip-links.min.js?ver=3.6.0","fqdn":"scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"172.67.150.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb15eaa075318b3b0f17cb7a42920492","sha1":"06fffb9183f11b49154dd145c3c02d577ac45a77","sha256":"c810f9eb5d42e701bd08ff11ddcde25b90410be300630683fe356eebf0884199","sha512":"b84452078fc060a9e83beb70804e421b8f283f735008c98f4e611493cde38881af724498a93070323b94ee03764747207eec46630441b7dd7a2297d14091eb19","ssdeep":"","tlshash":"8ae026e7298602b94d946763578fbb8d5db41a83ec408862940089f07d9cfe3433ae91","size":371,"data":"","first_seen":"2025-04-01T08:50:32.465448Z","last_seen":"2026-04-20T13:38:05.295603Z","times_seen":1905,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scandalshack.com/wp-content/plugins/ajax-search-lite/js/min/plugin/merged/asl.min.js?ver=4777","fqdn":"scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"172.67.150.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"368d00d84d9b4319c65fabfce29d659e","sha1":"1c8aa8d58bf35632c0d29176f4e1ec81bbb93bf1","sha256":"74704e4add8489b77a013b06e2546be0bc5290aace6601dbc16997f0f2dbd190","sha512":"3176a41a93e5c3683ef3ec6853f9b911ad1a4ad85b37e3f9fc3c5764972cd903967622224d2f87211f12bfc6a98daf4d637a88245116f609e71024584a3aafcf","ssdeep":"1536:EGMw7ld7tY4YmZDibici5ViYaTivniISMXne4I6f63wwlmbYCoaoxjL7Tdc7:b9SMXemf63wwlmbYCoaob8","tlshash":"7a73e98c7291387742bf60b6a07b6509733358ad640a40b8b26cccf36db5f4615a7fb9","size":76903,"data":"","first_seen":"2025-08-28T19:38:48.80591Z","last_seen":"2026-04-20T04:47:34.611272Z","times_seen":231,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","size":39,"data":"","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-04-20T14:01:15.292463Z","times_seen":804811,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"i.redd.it/i8anu929jh3f1.jpeg","fqdn":"i.redd.it","domain":"redd.it","tld":"it"},"ip":{"addr":"151.101.65.140","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:16.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.redd.it","organization":"REDDIT, INC."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Sat, 12 Jul 2025 00:00:00 GMT","end":"Wed, 07 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8B:29:12:DB:33:A6:1F:39:07:AF:CA:69:1F:70:D6:91:A8:FD:D9:CF","sha256":"FB:3A:CD:DA:83:D9:AB:68:DF:27:33:DE:4D:C7:FA:17:D2:67:C4:73:9A:75:FD:E5:97:56:87:DC:42:88:C2:3A"}}},"request":{"raw":"GET /i8anu929jh3f1.jpeg HTTP/1.1\r\nHost: i.redd.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 28 May 2025 08:41:24 GMT\r\netag: \"0c5e9b7ccf25c1231da744f9557fdb57\"\r\nx-amz-server-side-encryption: AES256\r\nexpires: Thu, 31 Dec 2037 23:59:59 GMT\r\nx-amz-version-id: YJ0hfnfhQ8MkmutcRgK7OFz_PyrCTdEe\r\ncontent-type: image/jpeg\r\nx-canonical-filename-image-generation: 1\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\nserver: snooserv\r\nreport-to: {\"group\": \"w3-reporting-nel\", \"max_age\": 14400, \"include_subdomains\": true,  \"endpoints\": [{ \"url\": \"https://w3-reporting-nel.reddit.com/reports\" }]}, {\"group\": \"w3-reporting\", \"max_age\": 14400, \"include_subdomains\": true, \"endpoints\": [{ \"url\": \"https://w3-reporting.reddit.com/reports\" }]}, {\"group\": \"w3-reporting-csp\", \"max_age\": 14400, \"include_subdomains\": true, \"endpoints\": [{ \"url\": \"https://w3-reporting-csp.reddit.com/reports\" }]}\r\nnel: {\"report_to\": \"w3-reporting-nel\", \"max_age\": 14400, \"include_subdomains\": false, \"success_fraction\": 1.0, \"failure_fraction\": 1.0}\r\ncontent-length: 1083433\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1083433,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1170x1777, components 3","md5":"fb8a3e9da41a1d8a6473a4bf4f26a32b","sha1":"f428c4cab4efa14069d8d2e8c6960f32a2df4f4a","sha256":"10fcc17b084c0d5857c07cb4170d0d2b1d43eac3b15a7ff366ca0b87eb306228","sha512":"be1ac3c553477e811b5cbef0b9bf10b3c51fa7d98c4f91bf704888b924f7ff9c93a4640bff46468c2dbe2635dbedde696535657178c487b78b2d5f571169a89d","ssdeep":"24576:ZcNtxl051VsG7uWwvOCUvyoaooCCpEbo1EH5vef6OdxDmW:C5lgVsG7uWZCU3xiQo1EH5veFxKW","tlshash":"4c2523dccda68e024b3d0231dd67b94e379017ec20e9ce4dc7a46d4baac62065edb91c","first_seen":"2025-09-21T14:32:25.262135Z","last_seen":"2025-09-21T14:32:25.262135Z","times_seen":1,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.blcdog.com/api/models/ts?targetDomain=stripchat.com\u0026userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026memberId=4kPCZC50-CpcfvtwP1CDdp14p6VhwMPJkRHV0PbLCr0zwyt5SIQMt39W8QdG0O4Bpg4wMVEYkcDWynVzHS76uYX6ni1Jg126W4mNA0CSMSnkTb8AQgJ4Dzw_gUIDRUi\u0026p1=4770844\u0026sourceId=547974\u0026p2=3401168\u0026tag=-girls%2Findian","fqdn":"go.blcdog.com","domain":"blcdog.com","tld":"com"},"ip":{"addr":"172.64.147.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:16.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.blcdog.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 19:42:34 GMT","end":"Fri, 12 Dec 2025 18:56:39 GMT"},"fingerprint":{"sha1":"E4:95:E8:60:FF:47:B9:44:2B:F0:98:C2:A8:A4:D1:EB:9C:A9:B0:B2","sha256":"C4:E8:53:4F:4B:BF:23:D8:CC:30:E7:86:4C:D5:BD:5D:89:BD:A6:C3:5A:6C:22:90:0B:B9:49:C3:C4:1E:46:6A"}}},"request":{"raw":"GET /api/models/ts?targetDomain=stripchat.com\u0026userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026memberId=4kPCZC50-CpcfvtwP1CDdp14p6VhwMPJkRHV0PbLCr0zwyt5SIQMt39W8QdG0O4Bpg4wMVEYkcDWynVzHS76uYX6ni1Jg126W4mNA0CSMSnkTb8AQgJ4Dzw_gUIDRUi\u0026p1=4770844\u0026sourceId=547974\u0026p2=3401168\u0026tag=-girls%2Findian HTTP/1.1\r\nHost: go.blcdog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mail.scandalshack.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-type: application/json\r\ncf-ray: 982a43e57beb120a-OSL\r\naccess-control-allow-origin: https://mail.scandalshack.com\r\naccess-control-allow-credentials: true\r\nvary: Origin, Accept-Encoding\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1292,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"00aad97376b6addf525c44082ca9933f","sha1":"2ef6869c13a2caf519d654358632f51bec39e350","sha256":"bbfb11daa805b2a4628c0c77f4cf6f4ffe64df78286cc955b7014e619b6d9793","sha512":"a08ac69a74f03267a0f79bb0eba97ea187753c51ff8aeceb8bfd489f9f391b74b08643f09f46ceea2bc4f925676a22ca1da690eb7dc9ee86fd76d7e40ef48701","ssdeep":"","tlshash":"bf2112e62644dc6e2d50a9855cdf4807f004207774c578ca97c8dc2adcfccac2529ec7","first_seen":"2025-09-21T14:32:25.263662Z","last_seen":"2025-09-21T14:32:25.263662Z","times_seen":1,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":6,"dns":4,"connect":1,"send":0,"wait":54,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"go.blcdog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/images/c/9/8507c58f3490acc70f59c864765bb8424d5560/main.webp","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:16.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 Aug 2025 08:32:03 GMT","end":"Fri, 31 Oct 2025 08:32:02 GMT"},"fingerprint":{"sha1":"E4:52:21:98:B0:CD:51:03:1A:59:A9:01:02:8A:D6:3B:66:E3:EE:3A","sha256":"F1:77:51:DD:B8:B7:37:39:6D:01:37:95:43:1C:C1:78:42:1E:A6:30:E3:96:F3:D8:25:E4:61:7E:80:03:FD:8A"}}},"request":{"raw":"GET /images/c/9/8507c58f3490acc70f59c864765bb8424d5560/main.webp HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nCookie: cookie_user_id=ee5c67dd-d280-5724-abee-fefde6fe0aa2; bfq=APeIECNCxxYZMXDUiJGjRhcWIsYU3BLjoYgyE2PcqKFwIY2NXfoo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3636\r\nserver: nginx\r\nlast-modified: Fri, 02 Oct 2020 00:32:28 GMT\r\netag: \"5f76751c-e34\"\r\nx-robots-tag: noindex, nofollow\r\ncache-control: max-age=172800\r\nexpires: Tue, 23 Sep 2025 14:31:16 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: ah1742,DS9225\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3636,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f2b65e0896ab421da9c67d4728936e40","sha1":"37b0c47c3c3296fbb6a5538e025dd5386a68dc16","sha256":"fcdcf1e3c7bad9550dfe464ed93a9bfecd57740691b00a9eafb0239af75c606a","sha512":"6eb7c81029140539ffa140f619642fe9bf3048b92674950fcbf4046dbb991095e1682b223b9e761b6236c2b916bc9019ec83832d41f559a781dbbc79d87998f5","ssdeep":"","tlshash":"cb716d069477ee87eea2c6bdfd7742be473c524273783cb6cf53408155604d46821183","first_seen":"2023-05-06T00:35:21Z","last_seen":"2026-04-15T20:56:07.075353Z","times_seen":1094,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scandalshack.com/wp-includes/css/dist/block-library/style.min.css?ver=6.8.2","fqdn":"scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"172.67.150.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:14.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scandalshack.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 23:54:49 GMT","end":"Tue, 28 Oct 2025 22:53:42 GMT"},"fingerprint":{"sha1":"BD:78:39:A6:81:9B:CE:CD:A7:D9:59:79:78:AC:AB:E2:36:4B:A0:D6","sha256":"AB:05:0C:75:B6:6C:8C:56:8B:28:A0:1D:62:11:3F:92:2C:0F:5F:DA:DA:0B:61:B8:E7:31:4D:C5:7F:E6:06:14"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=6.8.2 HTTP/1.1\r\nHost: scandalshack.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:14 GMT\r\ncontent-type: text/css\r\ncontent-length: 14360\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 19 Sep 2026 17:26:55 GMT\r\nlast-modified: Tue, 15 Jul 2025 23:24:11 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 22715\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1sVgndpXVD3zEJTQ3Cf6sdQcsT9%2FBkFMxaZ3VzO0wDnbh45C%2FyOf7WZy2E4ZeWvWeLKhTTR5EtkLG5OqiTe99W%2BrQ2e8am6mtQ2wCcsCaNM%3D\"}]}\r\ncf-ray: 982a43dcdecd76ef-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":116345,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55654)","md5":"a06b3af98203ddc303997e0e0caaff83","sha1":"04c3e7de74a890d18014588c4e1f077a52d79acc","sha256":"838ede31a58a3cdb411d6dd7f13cbe65d4a26193d9fa31882854e63938f12bac","sha512":"4ce1079b8dc07043b0201dc74f5888b50aa530a4e604eecd7673e225946de62c421b290a707014ddaf4366591f8c4767737b5689bc44d57eb0a11aef905cead9","ssdeep":"3072:seeJu1iQg5MG7x+qehvP0x2pck2qkA3Pu:b1iQg5MG7x+qehvP0x2pck2lA2","tlshash":"34b3615417b4dcf935ffa73a5e4ee248a503aa41c68a57ebe066d190618ca490cf3f0f","first_seen":"2025-07-15T17:03:07.843749Z","last_seen":"2026-04-20T14:00:44.228146Z","times_seen":166619,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":33,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.xlivrdr.com/abc.gif?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199\u0026thumbFit=cover\u0026language=en\u0026stripcashR=0\u0026thumbType=SChatBest\u0026messagesLimit=30\u0026agev=0\u0026modelsInWatchHistoryCount=-1\u0026modelsInFavoritesCount=-1\u0026userType=newuser\u0026modelsCount=20\u0026segment=hls-oldAPI\u0026landing=LPOmega\u0026referrer=https%3A%2F%2Fmail.scandalshack.com%2F\u0026i=0\u0026abTest=lpomega_rscore\u0026abTestVariant=lpomega_rscore_rs_40\u0026seenAbTest=0\u0026seenDomain=0\u0026seenLanding=0\u0026filtersMatch=1\u0026m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A848%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A551%2C%22duration%22%3A77%2C%22transferSize%22%3A181063%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A551%2C%22duration%22%3A52%2C%22transferSize%22%3A13951%7D%5D\u0026mh=1596555884","fqdn":"go.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"172.64.147.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199","date":"2025-09-21T14:31:17.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.xlivrdr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:02:48 GMT","end":"Sun, 07 Dec 2025 09:02:14 GMT"},"fingerprint":{"sha1":"18:51:33:CF:A8:88:6B:8C:BA:0C:FC:AD:26:65:64:F8:F9:5A:32:CA","sha256":"37:C7:74:68:D2:46:40:59:86:A9:99:8C:2C:5E:F6:86:48:C4:47:28:01:2B:8E:2C:93:DF:31:57:81:AD:07:A0"}}},"request":{"raw":"GET /abc.gif?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199\u0026thumbFit=cover\u0026language=en\u0026stripcashR=0\u0026thumbType=SChatBest\u0026messagesLimit=30\u0026agev=0\u0026modelsInWatchHistoryCount=-1\u0026modelsInFavoritesCount=-1\u0026userType=newuser\u0026modelsCount=20\u0026segment=hls-oldAPI\u0026landing=LPOmega\u0026referrer=https%3A%2F%2Fmail.scandalshack.com%2F\u0026i=0\u0026abTest=lpomega_rscore\u0026abTestVariant=lpomega_rscore_rs_40\u0026seenAbTest=0\u0026seenDomain=0\u0026seenLanding=0\u0026filtersMatch=1\u0026m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A848%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A551%2C%22duration%22%3A77%2C%22transferSize%22%3A181063%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A551%2C%22duration%22%3A52%2C%22transferSize%22%3A13951%7D%5D\u0026mh=1596555884 HTTP/1.1\r\nHost: go.xlivrdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.xlivrdr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:17 GMT\r\ncontent-type: image/gif\r\ncontent-length: 103\r\ncf-ray: 982a43eb7cc58deb-OSL\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stripchat.com/api/front/v2/models/username/Daddyslut2_0/chat","fqdn":"stripchat.com","domain":"stripchat.com","tld":"com"},"ip":{"addr":"104.17.118.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199","date":"2025-09-21T14:31:27.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stripchat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 00:57:17 GMT","end":"Tue, 16 Dec 2025 01:56:40 GMT"},"fingerprint":{"sha1":"25:09:79:06:BE:7A:1B:4F:5A:5B:26:89:9C:03:67:1F:82:52:A7:24","sha256":"26:9C:85:19:B0:19:BB:85:99:DC:A4:32:AD:09:96:A8:98:3A:9A:06:A4:29:65:E6:31:4A:01:2F:77:1D:9E:69"}}},"request":{"raw":"GET /api/front/v2/models/username/Daddyslut2_0/chat HTTP/1.1\r\nHost: stripchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.xlivrdr.com/\r\nOrigin: https://creative.xlivrdr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:27 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\nx-api-version: 11.3.62\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache\r\nx-backend: india-backend-chat-75989b799b-6jxzm\r\ncontent-encoding: gzip\r\nx-cache-status: STALE\r\naccess-control-allow-origin: https://creative.xlivrdr.com\r\nlast-modified: Sun, 21 Sep 2025 14:31:23 GMT\r\ncf-cache-status: HIT\r\nage: 4\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nset-cookie: __cf_bm=X2mzhH9EIljKJ1msva1tJl02UcGtkGSwg0NC13eOb20-1758465087-1.0.1.1-AF1cZAlo72q8VDtYe2uaG.ocwgnfHmXDmOfpcjE_U0KnhmbjBzjrTE65OVIwfyAEmBK20URT5kz.MMIA3w9okKYKJIoQ3Ri9RzK2FtbF1yrBGWp4Bc3I0MKJDgM_bUuX; path=/; expires=Sun, 21-Sep-25 15:01:27 GMT; domain=.stripchat.com; HttpOnly; Secure; SameSite=None\n_cfuvid=JK9QpSPv.W8DG.QKvJE9kZNyQPzVFL0U_T_2hk18VFI-1758465087154-0.0.1.1-604800000; path=/; domain=.stripchat.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 982a442a9dc6b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88965,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a3e171a3ed5812fb0c3cd47419ff497c","sha1":"3735fcc4878b6b96f871a2f16daecf51c44b9a81","sha256":"f79334531392ea02e2a5005f8d605dc1cb87e35549169412600c58ff03b3f2d2","sha512":"db11bbe6c05817cab52a93b7ba909c4cee37679e36b4c271ba420becbbe5e20c014e2fc84f7c126e157d102ed26ab35b3a8949e7cec0364d1608ef00a4555e40","ssdeep":"384:IaAaxa1av233auavmaBacaXaTaSaclmBSkS+nKFGFdYkSsOVbqR0hy9MRuOK:VdYKalpVOK","tlshash":"0b937a1c4d6d1bdd380b26c4eb49be4b43ac68727245b8a8e97d8b2178df5e47c39807","first_seen":"2025-09-21T14:32:25.266267Z","last_seen":"2025-09-21T14:32:25.266267Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scandalshack.com/wp-content/plugins/mai-engine/assets/css/footer.min.css?ver=2.37.0.71420252325","fqdn":"scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"172.67.150.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:14.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scandalshack.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 23:54:49 GMT","end":"Tue, 28 Oct 2025 22:53:42 GMT"},"fingerprint":{"sha1":"BD:78:39:A6:81:9B:CE:CD:A7:D9:59:79:78:AC:AB:E2:36:4B:A0:D6","sha256":"AB:05:0C:75:B6:6C:8C:56:8B:28:A0:1D:62:11:3F:92:2C:0F:5F:DA:DA:0B:61:B8:E7:31:4D:C5:7F:E6:06:14"}}},"request":{"raw":"GET /wp-content/plugins/mai-engine/assets/css/footer.min.css?ver=2.37.0.71420252325 HTTP/1.1\r\nHost: scandalshack.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:14 GMT\r\ncontent-type: text/css\r\ncontent-length: 1848\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 19 Sep 2026 17:26:55 GMT\r\nlast-modified: Mon, 14 Jul 2025 23:25:37 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 22715\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mswuYdwxXr5DquoJB2YSTKOTGhwfHSaPlbuR%2FOla%2FHn6BGOJOtVJ9Buf%2B9L%2FRSK7W3kHV8zmphzL%2F7iY1R8r3jncttEAHj8SuxThFZ7dXCc%3D\"}]}\r\ncf-ray: 982a43dcded676ef-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7938,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7938), with no line terminators","md5":"f44af4c2d3a8bec0ec2fd1dd147b7f9f","sha1":"87dc5cfc94a0b1694b3e0f49ed498100f54f9e91","sha256":"da228f8822466ab6a2701aba8bff214102c414436db62f0855b6d6ed9d4d9ecc","sha512":"b662b15bdd9c10968b6aeb0bdfca0058e7c5e6a7732669e8c4d7647385b2e77636e237f4b65bc425158d37a9582ea792693022e4215b5988fad751c52c66fb4c","ssdeep":"192:1sKXC1X9mpfVWeYao8CcvZwy+33a313d3Eaz8/NcKAER8canQB2q:1rXiXwpfAezGZ8Ft/lBEKcarq","tlshash":"4bf1fff16080de38af33f739477aa758d820aa41c942d4eed981e26145d3ff613a266d","first_seen":"2025-04-22T22:21:25.320353Z","last_seen":"2026-04-18T06:10:39.627217Z","times_seen":69,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/images/b/d/3b1ca531f7c6d2dec47b25e310fa294ca1bc07/main.webp","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:16.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 Aug 2025 08:32:03 GMT","end":"Fri, 31 Oct 2025 08:32:02 GMT"},"fingerprint":{"sha1":"E4:52:21:98:B0:CD:51:03:1A:59:A9:01:02:8A:D6:3B:66:E3:EE:3A","sha256":"F1:77:51:DD:B8:B7:37:39:6D:01:37:95:43:1C:C1:78:42:1E:A6:30:E3:96:F3:D8:25:E4:61:7E:80:03:FD:8A"}}},"request":{"raw":"GET /images/b/d/3b1ca531f7c6d2dec47b25e310fa294ca1bc07/main.webp HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nCookie: cookie_user_id=ee5c67dd-d280-5724-abee-fefde6fe0aa2; bfq=APeIECNCxxYZMXDUiJGjRhcWIsYU3BLjoYgyE2PcqKFwIY2NXfoo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5502\r\nserver: nginx\r\nlast-modified: Thu, 01 Oct 2020 21:54:31 GMT\r\netag: \"5f765017-157e\"\r\nx-robots-tag: noindex, nofollow\r\ncache-control: max-age=172800\r\nexpires: Tue, 23 Sep 2025 14:31:16 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: ah1742,DS9225\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5502,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a183f4e882ccce477e809bfc3133cc0e","sha1":"825a67fe3cb7dd5a8b5c93902df9065650feee0f","sha256":"50792870a56b4bbc6af9bc9fc38f1178245024bef64a68e01befbba5dd0bfd10","sha512":"528cec0661511f1f07374e11cf209a80380b9ad266a16cbe76bf7097f7bf696d68523f6ac3bddb590359576553d60abafcb0b3d7b91f7c8e26daac50d100646f","ssdeep":"96:HTtQLqmJymeRcDhEXRLTfADurl7spIC4tnGzqMTOre9Mwab10t:HJQum3eRcVEXRvADurlZViqMTBmwai","tlshash":"0fb18e19003997178d8b3a45ec3d6d3a1c393d8da6a7514c6882efb4f0b3b09a66f746","first_seen":"2023-04-07T09:03:30Z","last_seen":"2026-04-19T20:01:19.76315Z","times_seen":1018,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.xlivrdr.com/static/4d7f3ebc/s/LPExperience/lang/en.json","fqdn":"creative.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"172.67.213.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199","date":"2025-09-21T14:31:16.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xlivrdr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Sep 2025 13:25:58 GMT","end":"Mon, 01 Dec 2025 14:24:34 GMT"},"fingerprint":{"sha1":"60:3C:F5:70:25:F5:99:96:7B:4A:71:A1:41:E0:CF:36:44:05:40:F5","sha256":"D0:BD:F8:2A:2D:AF:D4:AF:F6:B7:84:94:B9:87:F0:78:B4:92:49:83:B0:95:E4:E0:EB:FE:58:84:BB:2A:4F:CA"}}},"request":{"raw":"GET /static/4d7f3ebc/s/LPExperience/lang/en.json HTTP/1.1\r\nHost: creative.xlivrdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-type: application/json\r\nvary: accept-encoding\r\ncontent-encoding: br\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"en.json\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tf9bp%2BJBs6krUm6q7a%2BhpyLfMCxU4bezV3BZ9pq%2BY6owjXOMdjDAbBj5v33%2F2dHJqjIjrLvhCN66jiacIgNtrfDZ9eXgA2ZuPr0aXempCoC8zw%3D%3D\"}]}\r\nlast-modified: Thu, 18 Sep 2025 11:36:28 GMT\r\nx-cache-status: MISS\r\ncache-control: public, max-age=3600, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 2555\r\ncf-cache-status: HIT\r\netag: W/\"97c013e9ccd4575c397ac683b1e10e19\"\r\ncf-ray: 982a43e92d1c0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3786,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"97c013e9ccd4575c397ac683b1e10e19","sha1":"e492591718ae7b1864a8edd8979fa1a0457a6658","sha256":"d2d5fca01232e0f201e3ed63481e08423ced62c325310652f4284da97f6589c2","sha512":"42862bd865c14ff55904b9571a42c55dfd340217038dad29b9fce6d6537696236663310e484b763a5d6a770b41088f027b194f571794ce1b070f5b239a1bdcf8","ssdeep":"","tlshash":"b5716237ae0410730ad28567b56a576bbc058c6f93843b351b9b44561f2f83b02bb3bd","first_seen":"2023-05-20T20:23:38Z","last_seen":"2026-04-20T00:44:50.089673Z","times_seen":214,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"video.sacdnssedge.com/video/2bb0ba5d4134d489d40c8a2631e22c83.mp4","fqdn":"video.sacdnssedge.com","domain":"sacdnssedge.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199","date":"2025-09-21T14:31:17.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1894120159.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 11:23:17 GMT","end":"Mon, 01 Dec 2025 11:23:16 GMT"},"fingerprint":{"sha1":"6C:F0:E6:7B:64:17:10:A8:FA:BF:27:07:10:15:AF:6E:E6:98:D4:B0","sha256":"96:D2:44:B3:D4:D6:DE:C6:FD:A7:7F:68:CE:B6:6A:C0:5A:AF:0C:DD:A8:39:FC:80:62:ED:93:CA:F6:D7:27:72"}}},"request":{"raw":"GET /video/2bb0ba5d4134d489d40c8a2631e22c83.mp4 HTTP/1.1\r\nHost: video.sacdnssedge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=2392064-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.xlivrdr.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Sun, 21 Sep 2025 14:31:17 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 37444\r\nvary: accept-encoding\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"2bb0ba5d4134d489d40c8a2631e22c83.mp4\"\r\netag: \"415ba260d3d6973f9b942d3515312c1a\"\r\nexpires: Sun, 21 Sep 2025 15:22:06 GMT\r\nlast-modified: Sun, 21 Sep 2025 14:21:37 GMT\r\ncache-control: max-age=7200\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncf-cache-status: HIT\r\nage: 0\r\ncf-ray: 982a367b9d601965-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-77-nzt: EwwBX63NDQH3FQIAAAwBuUwKDAH3EAAAAAwBWd59LgG3AgAAAA\r\nx-77-nzt-ray: 2a494a157f6023485a0cd06860c59517\r\nx-77-cache: HIT\r\nx-77-age: 533\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 2392064-2429507/2429508\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":37444,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"7e51118b5d09c4b87d80303e7a69556e","sha1":"a6b47409f3d8505b92d4cefaf6cd94ff6bdb02c3","sha256":"2613ffc6dc292e2dbaef9c0acb355b5eadfc3e3b4ba46a9dfb291b1511176de1","sha512":"d8f1a3ed068e8f482848d9e0d607d41dfed17fe7704119cd707cbb6b23c70c22eee3f5566d284492c6e59d2adca200c443128c1255cc113de14f8351ad42a865","ssdeep":"384:HLVvQmdakV7ozWlxvMjBP12AEofalsEnqtuEebCETI57jJ7:HLB5dhW/EofKsUpEaq5","tlshash":"1cf24da1f3211407da910b3694e103107730e9b13753874f9be1a73eada73ea9e074e6","first_seen":"2025-09-21T14:32:25.268719Z","last_seen":"2025-09-21T14:32:25.268719Z","times_seen":1,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":21,"dns":1,"connect":4,"send":0,"wait":9,"receive":3,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/n.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:15.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 Aug 2025 08:32:03 GMT","end":"Fri, 31 Oct 2025 08:32:02 GMT"},"fingerprint":{"sha1":"E4:52:21:98:B0:CD:51:03:1A:59:A9:01:02:8A:D6:3B:66:E3:EE:3A","sha256":"F1:77:51:DD:B8:B7:37:39:6D:01:37:95:43:1C:C1:78:42:1E:A6:30:E3:96:F3:D8:25:E4:61:7E:80:03:FD:8A"}}},"request":{"raw":"GET /sdk/v1/n.js HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:15 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 19 Sep 2025 08:17:08 GMT\r\netag: W/\"68cd1184-d55d\"\r\nx-robots-tag: noindex, nofollow\r\ncontent-encoding: gzip\r\ncache-control: max-age=172800\r\nexpires: Tue, 23 Sep 2025 14:31:15 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH1742,DS9225\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54621,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (54543)","md5":"bacb2baa63593a3b4ff341e7b44a642e","sha1":"e2b73db7577f9150f8ce64f5c33062224a5b6bd4","sha256":"3b567e29e2b1e3c84a9a0240316205f43e12d3250476dbf13fec61ca873283d1","sha512":"b7d79cb5425ad4ffd79bcdb53fb1198716d21b7fecde483144ac50bb09eb8554a941cd5155c01943121760baa58c0186b15171cf79ee1e79b5d532ab3d96f427","ssdeep":"1536:pXOzjrKnfl/p3Ec2IUO5M5h5G5BkBw5cLc:8UpEcXUjBI","tlshash":"96335bd97595743122ab01a691af170b733e3917ec0d4c00a0b7ead53978dcad23bfa9","first_seen":"2025-09-19T20:02:01.065155Z","last_seen":"2025-09-24T06:57:11.737977Z","times_seen":12,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scandalshack.com/wp-content/fonts/alegreya-sans/a7fa800c99e19a7c41a98d0e1dfc4acb","fqdn":"scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"172.67.150.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:15.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scandalshack.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 23:54:49 GMT","end":"Tue, 28 Oct 2025 22:53:42 GMT"},"fingerprint":{"sha1":"BD:78:39:A6:81:9B:CE:CD:A7:D9:59:79:78:AC:AB:E2:36:4B:A0:D6","sha256":"AB:05:0C:75:B6:6C:8C:56:8B:28:A0:1D:62:11:3F:92:2C:0F:5F:DA:DA:0B:61:B8:E7:31:4D:C5:7F:E6:06:14"}}},"request":{"raw":"GET /wp-content/fonts/alegreya-sans/a7fa800c99e19a7c41a98d0e1dfc4acb HTTP/1.1\r\nHost: scandalshack.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mail.scandalshack.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:15 GMT\r\ncontent-length: 23788\r\nlast-modified: Thu, 11 Sep 2025 00:23:41 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v7aaRcjDGSIilbSjFZ%2FTxC5fK%2B%2FGUEcE3CJS6Cpd2Z0I7%2BYGOoyX84uOPgQI5Ej7rFq9%2FxpldIQk8fIpyE%2FMgpGjA3vmTXNvJhI%2F0055r3Q%3D\"}]}\r\ncf-ray: 982a43df3f3476ef-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23788,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 23788, version 1.0","md5":"bd0ca9709b22761897b83e2c2cb06a6d","sha1":"89f76282aa8444a9a93a20a8e9b38fe3876126fd","sha256":"efc0ba5184e11b9496b0263a1051f778bb1a77c74705a604b9fbd9d58dcffcbb","sha512":"0aec4eb13a8311e99f60bded96d113caef2f5469712fe55a8020e415c22e38c691d557f358b904349efaa5fe4f66e5a26e4b4a75e91ae5819b9a211f0f0173d0","ssdeep":"384:49LDo09pm6Gzp3GzsOsnbl6yN75PUg5ry4qHCC1A97YwJvkKtOmCvk0f6tYof6qf:yn7cl1hnR6y7Pty4K1A97YwJsAOvxcuq","tlshash":"eab2f1f62455e2daa395b1bdc357216c5d091b440b7b2f51082f4c8fc69a2a2cf3c23c","first_seen":"2024-10-02T08:50:15Z","last_seen":"2026-04-20T14:10:21.143502Z","times_seen":2644,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pxl-eu.tsyndicate.com/api/v1/p/p.gif?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XkCBNm4w0xYlqYKWMmTAsaN8rcaJHDDI0ZLWSQGRNjTBgzY2bciJFDxMMwdcZkxDEGx42cMnC02BkGxkkbM2S0wFEjxsoYNoqKsYEjTBkyH31CJGOHIg4aOXA8hFNHzEIZNGIkzfETDpyFXG_McChiDpyJOlDegHGWxsMxbe7qqIEyxw3DY81QhAFZjBs3C2fQgBEDq1oRbdxgZBhVBoy1oUdblVH1YZ0YGdHQoQNnjo4XL868cSGGzRgyb864GPOmzYswcNK8aPPmIJs5L-jM-UEnjJwzZegQKR4mjZsec-jISQNnDJowdIYX51IHBgwZNurMQZiETI-vNMpoRmtaRhgaNNwUBg4xzNAQDDd0RIZcYdSUgw0yRBUDDjbAUAYNYuA0hn8NijHDDA3igINjW1nInnvwtVFGG2LQZx8Na0AxhBZD1ODUEOWZYQcdd0ARwxBEkAFHDDTAYYMVaNzRBBRKrCEFElbAAIUYTAwhBwx63JEHHTVMkUQUTdAxQw5X4BAFGUfA8AQNQsBxBg1KWlFEFmuMQcQVebhhhR5ITHFDfFlgYYMbacSgxBly2XAFDW04EQQMQ0zRxBRurEGFGDgEEcUZStBARJZfnFFFEkRIUUUaJ75nw5A9CEYYgKnCN8cbdcgxRhn19cDYDY7REOuqMvSgGWee_VrdGT20cEYacjxXggxGeEdGGmFghhpFD70BRxvYigActzqA1h0bLsxhkxtkhPHceWOsoR63h6G30BaddfFQhgvB4AJnD8lhh2I2ulZHGhmVUUYNY9hwAxlktEBGUk7VcANcLYTRYhkikXSQDSPBwJEMYpGXUQ4xuJCDvjTI4EJDNIglxxcih0uyySirzLJYdYSRURNv6JEGG2yE8UIN-4KAwhXSvnHHHCA4QQUIMegLww4gIO2GDTRQjQfWKYAQhF1slHFFGWIskQYdQ-vkwgw2GL0EElQ0wQQLILCRxhplgHBEGe2-0fUQaMhRXBkvFIjDvojDAMIUAo6X9g1r2yDWGEKF68QTYr3xMuUZXS6WbxkV4YRYB9nxhRxlsEGRxFXVcJZ7_Z6BmQ6sGfVQ6V-IIcdCn-HOHBlvEQgZGYJ3-4ZCga0lOB55LMTXy3As3_xit5dhOh16ZASDyyTFNlttty03brnnprtuRO4SZ5xYd2QUNVxioeE-xGLN4W9GgldHh-Yt1EEoHTE53MMyZ7-yMEQGJyOQVUZ0u8p5qwxfGKBFwGUV19HABja6AV_o0AaQMUSDZ8EggmqQA_j8hAynK4NfviCvD1pQhBp8iPVYGDY5SGdeBmKBZuwFETEA5oElqQMbJrIW0OngNCIYw2iQaJ55iUAsUHxIFJ8oxSpS8YpThGIX-qCAgAA%3D\u0026r=1\u0026s=a02132c78ca8ab440fd8b0ea7a6924000ce0a985315b50ec765b39d294ef99d01758465075\u0026w=t","fqdn":"pxl-eu.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"188.40.143.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:16.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tsyndicate.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 20:10:41 GMT","end":"Thu, 11 Dec 2025 20:10:40 GMT"},"fingerprint":{"sha1":"25:5B:D4:FE:8D:85:CA:1A:7D:3A:B0:58:EC:2D:7A:B0:62:90:21:1F","sha256":"DF:0A:26:3C:A9:CF:97:54:23:20:C6:11:EB:C6:8C:7F:02:14:58:C8:F6:3B:08:10:27:BF:78:67:09:32:DC:9C"}}},"request":{"raw":"GET /api/v1/p/p.gif?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XkCBNm4w0xYlqYKWMmTAsaN8rcaJHDDI0ZLWSQGRNjTBgzY2bciJFDxMMwdcZkxDEGx42cMnC02BkGxkkbM2S0wFEjxsoYNoqKsYEjTBkyH31CJGOHIg4aOXA8hFNHzEIZNGIkzfETDpyFXG_McChiDpyJOlDegHGWxsMxbe7qqIEyxw3DY81QhAFZjBs3C2fQgBEDq1oRbdxgZBhVBoy1oUdblVH1YZ0YGdHQoQNnjo4XL868cSGGzRgyb864GPOmzYswcNK8aPPmIJs5L-jM-UEnjJwzZegQKR4mjZsec-jISQNnDJowdIYX51IHBgwZNurMQZiETI-vNMpoRmtaRhgaNNwUBg4xzNAQDDd0RIZcYdSUgw0yRBUDDjbAUAYNYuA0hn8NijHDDA3igINjW1nInnvwtVFGG2LQZx8Na0AxhBZD1ODUEOWZYQcdd0ARwxBEkAFHDDTAYYMVaNzRBBRKrCEFElbAAIUYTAwhBwx63JEHHTVMkUQUTdAxQw5X4BAFGUfA8AQNQsBxBg1KWlFEFmuMQcQVebhhhR5ITHFDfFlgYYMbacSgxBly2XAFDW04EQQMQ0zRxBRurEGFGDgEEcUZStBARJZfnFFFEkRIUUUaJ75nw5A9CEYYgKnCN8cbdcgxRhn19cDYDY7REOuqMvSgGWee_VrdGT20cEYacjxXggxGeEdGGmFghhpFD70BRxvYigActzqA1h0bLsxhkxtkhPHceWOsoR63h6G30BaddfFQhgvB4AJnD8lhh2I2ulZHGhmVUUYNY9hwAxlktEBGUk7VcANcLYTRYhkikXSQDSPBwJEMYpGXUQ4xuJCDvjTI4EJDNIglxxcih0uyySirzLJYdYSRURNv6JEGG2yE8UIN-4KAwhXSvnHHHCA4QQUIMegLww4gIO2GDTRQjQfWKYAQhF1slHFFGWIskQYdQ-vkwgw2GL0EElQ0wQQLILCRxhplgHBEGe2-0fUQaMhRXBkvFIjDvojDAMIUAo6X9g1r2yDWGEKF68QTYr3xMuUZXS6WbxkV4YRYB9nxhRxlsEGRxFXVcJZ7_Z6BmQ6sGfVQ6V-IIcdCn-HOHBlvEQgZGYJ3-4ZCga0lOB55LMTXy3As3_xit5dhOh16ZASDyyTFNlttty03brnnprtuRO4SZ5xYd2QUNVxioeE-xGLN4W9GgldHh-Yt1EEoHTE53MMyZ7-yMEQGJyOQVUZ0u8p5qwxfGKBFwGUV19HABja6AV_o0AaQMUSDZ8EggmqQA_j8hAynK4NfviCvD1pQhBp8iPVYGDY5SGdeBmKBZuwFETEA5oElqQMbJrIW0OngNCIYw2iQaJ55iUAsUHxIFJ8oxSpS8YpThGIX-qCAgAA%3D\u0026r=1\u0026s=a02132c78ca8ab440fd8b0ea7a6924000ce0a985315b50ec765b39d294ef99d01758465075\u0026w=t HTTP/1.1\r\nHost: pxl-eu.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nCookie: cookie_user_id=ee5c67dd-d280-5724-abee-fefde6fe0aa2; bfq=APeIECNCxxYZMXDUiJGjRhcWIsYU3BLjoYgyE2PcqKFwIY2NXfoo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-robots-tag: noindex, nofollow\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ba036c43037cfe89320d1ef7b64cd43f","sha1":"88c72d3e26047eb1e45e5564a76427734f120efe","sha256":"42cb846e07917f6731406e500f24aeb2e88c42cda124eaa59e08c5331cad8bcb","sha512":"aa80ccd27c05eb729f730b9d830b011650bcf12cbb25d19edf29efcf962c7465bb5685a5ff5d084356c6710c08e829d16b59e7a59a41767eb14744f326b6c124","ssdeep":"","tlshash":"19900403f5400003d175d03107170340134cd110057c0307405d505cdc553510c01010","first_seen":"2023-05-10T09:10:20Z","last_seen":"2026-04-20T13:09:39.590273Z","times_seen":14820,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scandalshack.com/wp-content/plugins/mai-engine/assets/css/themes/display.min.css?ver=2.37.0.71420252325","fqdn":"scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"172.67.150.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:14.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scandalshack.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 23:54:49 GMT","end":"Tue, 28 Oct 2025 22:53:42 GMT"},"fingerprint":{"sha1":"BD:78:39:A6:81:9B:CE:CD:A7:D9:59:79:78:AC:AB:E2:36:4B:A0:D6","sha256":"AB:05:0C:75:B6:6C:8C:56:8B:28:A0:1D:62:11:3F:92:2C:0F:5F:DA:DA:0B:61:B8:E7:31:4D:C5:7F:E6:06:14"}}},"request":{"raw":"GET /wp-content/plugins/mai-engine/assets/css/themes/display.min.css?ver=2.37.0.71420252325 HTTP/1.1\r\nHost: scandalshack.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:14 GMT\r\ncontent-type: text/css\r\ncontent-length: 170\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 19 Sep 2026 17:26:55 GMT\r\nlast-modified: Mon, 14 Jul 2025 23:25:37 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 183859\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ByHlLa%2FVjo6XCvWIPsUXkn8Lnu8irUOd%2BPPk3zSMGNuZkyUgWqkWNpqbG8k0nhmoFT4F05qGmF1NR0QbTT8wWSunh23m%2BlZGIbo2KbYmp8%3D\"}]}\r\ncf-ray: 982a43dcded276ef-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":411,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (411), with no line terminators","md5":"cf1fd563e4862771f98136c206aea726","sha1":"ba4866c0d8970b723c794d2c6e86e678b2f68e1e","sha256":"f8bfca072d5fbd340df5c6af25348eeab60677a605cc120fe70ca47f94f23a9d","sha512":"598c4a06468c039f24c23ca1fcbab56cd3f040582283e73a4225add0484775a1a54a4dac725e9d1de89381ccb4c308fb3ea93909c2057d7e8173f5eb7629095e","ssdeep":"","tlshash":"ade027e37414f16c9b300f13770b657573800e857a8765ee61428445ecc1af622c530a","first_seen":"2024-08-20T04:46:57.284771Z","last_seen":"2025-09-21T14:32:25.271375Z","times_seen":2,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":78,"connect":10,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scandalshack.disqus.com/count.js","fqdn":"scandalshack.disqus.com","domain":"disqus.com","tld":"com"},"ip":{"addr":"199.232.196.134","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:15.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.disqus.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 28 Mar 2025 00:00:00 GMT","end":"Thu, 16 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B4:BB:AB:1D:A3:51:9D:47:97:B0:38:81:E8:A1:D6:6C:07:84:64:2A","sha256":"A4:F3:42:7E:32:1E:1C:91:44:2E:6E:DE:78:8A:36:98:40:62:F3:C4:F2:CC:EA:F3:F5:07:82:7C:56:96:5D:6A"}}},"request":{"raw":"GET /count.js HTTP/1.1\r\nHost: scandalshack.disqus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nConnection: keep-alive\r\nContent-Length: 870\r\nContent-Type: application/javascript; charset=utf-8\r\nServer: nginx\r\nLast-Modified: Thu, 18 Sep 2025 20:13:03 GMT\r\nETag: \"68cc67cf-366\"\r\nContent-Encoding: gzip\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nX-Amz-Cf-Pop: DFW56-P9\r\nX-Amz-Cf-Id: te7MywG7nXWIvQAfXOGAdYQPvKzThyaJLxtrdW-5Vf1TG_XEIb_gkQ==\r\nCache-Control: public, max-age=300\r\nDate: Sun, 21 Sep 2025 14:31:15 GMT\r\nAge: 242\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=300; includeSubdomains\r\nCross-Origin-Resource-Policy: cross-origin\r\nLink: \u003chttps://disqus.com\u003e; rel=preconnect, \u003chttps://c.disquscdn.com\u003e; rel=preconnect\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1517,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (528)","md5":"64932a1e2564351aa7642475acdf3fbf","sha1":"c3dd2b7d1d4604e3559c2732fd90d71059dd77d8","sha256":"3487ef2baf0c08ba660a8a143cdeb8ebeec961eea04bccd7c49096b4eb26b875","sha512":"ffe08187ef578d7afd64adb9f50d189a894819bbedbc116a6a5d3c18bdfba1a44ff5ce5a86fc365500e2ec03d4757edf03cdafb92fbe9ab7e5a3191829bc74a3","ssdeep":"","tlshash":"a2316754218409647acf24e9288e905b517e92304a64d9cebde4e55b563cfc11b0bb69","first_seen":"2023-03-07T01:02:18Z","last_seen":"2026-04-20T12:14:06.58989Z","times_seen":6331,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":102,"dns":60,"connect":26,"send":0,"wait":27,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scandalshack.com/wp-content/plugins/perfmatters/js/lazyload.min.js?ver=2.4.6","fqdn":"scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"172.67.150.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:15.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scandalshack.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 23:54:49 GMT","end":"Tue, 28 Oct 2025 22:53:42 GMT"},"fingerprint":{"sha1":"BD:78:39:A6:81:9B:CE:CD:A7:D9:59:79:78:AC:AB:E2:36:4B:A0:D6","sha256":"AB:05:0C:75:B6:6C:8C:56:8B:28:A0:1D:62:11:3F:92:2C:0F:5F:DA:DA:0B:61:B8:E7:31:4D:C5:7F:E6:06:14"}}},"request":{"raw":"GET /wp-content/plugins/perfmatters/js/lazyload.min.js?ver=2.4.6 HTTP/1.1\r\nHost: scandalshack.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:15 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3135\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 19 Sep 2026 17:26:55 GMT\r\nlast-modified: Sat, 12 Jul 2025 19:18:23 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 183859\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FOaU85HZcFZ330xhDM%2FAkrthBgQmrPcQNKizls6rxJisJbhjfY7NUyXU9QAGkkr9TF%2Bt%2BJJoFRJBx1%2FM98LuxIxlyB5RQyV%2Bw8Yx4KRV2Zo%3D\"}]}\r\ncf-ray: 982a43dedf2076ef-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9355,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9355), with no line terminators","md5":"b4edcd1be13b85ed07b019a0158233f5","sha1":"410d4f063b36cbd908c7733272cc3b9ef615e9e0","sha256":"58c8e6e0ae274de20ed5f0c47f704de948659e6b8595df77e3e0c2875718d9ef","sha512":"b6168e4bd2f04983206689fa8e2d6caa4b1667c5ce23cf65ce19944618be76cb6ee1b8ebad915dedea85da78d115243b1405ee2ac6312a3be13e1ebc6065984a","ssdeep":"192:ptQLu5/2vVuQkIs99uxZVDRTbS8tMUoWUM1nKWcmiXyMvjp3tsO:p+Lw/mfbnZbJtMUoMYYO","tlshash":"ed122e497057b13ebda3b0f1901f12067039b556a9ebe484e6a1e5e4197c8be1723f3c","first_seen":"2023-03-13T12:16:08Z","last_seen":"2026-04-20T13:52:19.558917Z","times_seen":5941,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/p.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:15.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 Aug 2025 08:32:03 GMT","end":"Fri, 31 Oct 2025 08:32:02 GMT"},"fingerprint":{"sha1":"E4:52:21:98:B0:CD:51:03:1A:59:A9:01:02:8A:D6:3B:66:E3:EE:3A","sha256":"F1:77:51:DD:B8:B7:37:39:6D:01:37:95:43:1C:C1:78:42:1E:A6:30:E3:96:F3:D8:25:E4:61:7E:80:03:FD:8A"}}},"request":{"raw":"GET /sdk/v1/p.js HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:15 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 20 Jun 2025 12:52:21 GMT\r\netag: W/\"68555985-3ede\"\r\nx-robots-tag: noindex, nofollow\r\ncontent-encoding: gzip\r\ncache-control: max-age=172800\r\nexpires: Tue, 23 Sep 2025 14:31:15 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: ah1742,DS9225\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16094,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (16018)","md5":"2926f345fb4641fde74661235b655468","sha1":"3e836fd79a6cf73b85570e5845ebba198eb995fd","sha256":"b3cd4ea4dbe8bcb473b7056e3b9705d5605a61060ebe6fd855377a1c06e4db72","sha512":"3605af943a37409c2899801241c51b7e699d814ec87f76199c2c287ef2517970289bf99ecf81371062156bde7c60628efbda7fcc1c49307cb68f40add3f19dd4","ssdeep":"384:phuEaLKr2ld+l2jzM8EYyzjfku/pCgpLYPQc6vn4:psNLK8NnxyvrpCgp0Mv4","tlshash":"287219dcb1c7b0615367a4b6857f6117ba3a6a14284c8845e066f6c23d3cdc6d237e39","first_seen":"2025-06-22T14:24:34.344756Z","last_seen":"2025-12-13T16:30:20.392365Z","times_seen":831,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.xlivrdr.com/static/4d7f3ebc/s/widgets/AgeVerification/lang/en.json","fqdn":"creative.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"172.67.213.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199","date":"2025-09-21T14:31:16.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xlivrdr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Sep 2025 13:25:58 GMT","end":"Mon, 01 Dec 2025 14:24:34 GMT"},"fingerprint":{"sha1":"60:3C:F5:70:25:F5:99:96:7B:4A:71:A1:41:E0:CF:36:44:05:40:F5","sha256":"D0:BD:F8:2A:2D:AF:D4:AF:F6:B7:84:94:B9:87:F0:78:B4:92:49:83:B0:95:E4:E0:EB:FE:58:84:BB:2A:4F:CA"}}},"request":{"raw":"GET /static/4d7f3ebc/s/widgets/AgeVerification/lang/en.json HTTP/1.1\r\nHost: creative.xlivrdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-type: application/json\r\nvary: accept-encoding\r\ncontent-encoding: br\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"en.json\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gDKPbWja%2Frjdd2Hp0u%2B7JJC4wdp1bvJKylwtl5JTO0poIlDTE8QDu3IlJJDqPYAYonqX4jjxEcQE%2Fi3Gkf%2FnPRx63oa%2BmVKmUBWGdXo9AG1acg%3D%3D\"}]}\r\nlast-modified: Thu, 18 Sep 2025 11:36:01 GMT\r\nx-cache-status: MISS\r\ncache-control: public, max-age=3600, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 2952\r\ncf-cache-status: HIT\r\netag: W/\"9ffcdd312529a9b28e65156dd0014fdb\"\r\ncf-ray: 982a43e92d1d0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3846,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9ffcdd312529a9b28e65156dd0014fdb","sha1":"4133e29495bac1f320ecec0a17f9b9bb8d4f09bb","sha256":"142fe2a082dfe43f2eab11533885dba53ecbad12813475b89aa518424bfc062f","sha512":"4b52fb9f662bb97f2d5ef6d99453b6f417b3ed5f7bafbe073b29be13287515e216589d778468b70f0ae09b853eee91a5ac3ba08ecf6922a19a7bbd1aece9f0ac","ssdeep":"","tlshash":"6e8163af9a4d170246f944803a0ad4e6f75403e0c3dab010565da47a3faeedd133dba9","first_seen":"2023-04-10T07:57:34Z","last_seen":"2026-04-20T11:40:01.615079Z","times_seen":744,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1758464700/216889919_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199","date":"2025-09-21T14:31:16.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 Aug 2025 09:19:42 GMT","end":"Sat, 01 Nov 2025 10:19:23 GMT"},"fingerprint":{"sha1":"44:F7:F2:B0:B9:E8:45:DC:8B:94:CD:26:E3:38:54:5D:E6:EB:A5:03","sha256":"3E:1B:F1:89:FB:27:09:F0:4C:55:6F:DC:12:3E:86:60:5C:2B:82:87:83:97:37:0B:5F:B3:17:E2:B7:9A:78:F8"}}},"request":{"raw":"GET /thumbs/1758464700/216889919_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.xlivrdr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10720\r\netag: \"40f30d08a8f15c08b23fd01db454f28e\"\r\nlast-modified: Sun, 21 Sep 2025 14:23:54 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 342\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 982a43eb08ae5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10720,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"40f30d08a8f15c08b23fd01db454f28e","sha1":"48a72a9ba6498a5d088dda5b1a91c8436801c4b7","sha256":"d09feef333eb38639e46bbdf054368f80c223092d39da2f2938275862d6b2a06","sha512":"0e76d689f59043d650c757b1830532a30001444114381638106f4e6e374d39e5909d19c3dabfe646c4100fbf6ce5c0d2d9656edcd57c6dd80bc048c5f952e91c","ssdeep":"192:I2lYLqOLxDWf0i4ftA05S58cS3ej7MTsn6TohaLUkJWtm/ucVbqOMKCmN:BlYLMfyftTNNCYT9U8s+/bLPCE","tlshash":"0422cf31c38a2f6fc19023134f5c3f2a6a8c6499f8c102ed3e8581efd52ab5d5d1a75a","first_seen":"2025-09-21T14:32:25.274742Z","last_seen":"2025-09-21T14:32:25.274742Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scandalshack.com/wp-content/plugins/mai-engine/assets/css/blocks.min.css?ver=2.37.0.71420252325","fqdn":"scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"172.67.150.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:14.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scandalshack.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 23:54:49 GMT","end":"Tue, 28 Oct 2025 22:53:42 GMT"},"fingerprint":{"sha1":"BD:78:39:A6:81:9B:CE:CD:A7:D9:59:79:78:AC:AB:E2:36:4B:A0:D6","sha256":"AB:05:0C:75:B6:6C:8C:56:8B:28:A0:1D:62:11:3F:92:2C:0F:5F:DA:DA:0B:61:B8:E7:31:4D:C5:7F:E6:06:14"}}},"request":{"raw":"GET /wp-content/plugins/mai-engine/assets/css/blocks.min.css?ver=2.37.0.71420252325 HTTP/1.1\r\nHost: scandalshack.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:14 GMT\r\ncontent-type: text/css\r\ncontent-length: 2193\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 19 Sep 2026 17:26:55 GMT\r\nlast-modified: Mon, 14 Jul 2025 23:25:37 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 22715\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UXyV1bpkc%2F703maTCqF7Pc4ApDF53bAGrYNX8i1oWaeYWpZ0EYq3KE1seGi%2Bgn6DcksQJBncgc70JcQuZGzO2aQbE%2BCIflVy7uBgrJHp5tk%3D\"}]}\r\ncf-ray: 982a43dcdecf76ef-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":11295,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11295), with no line terminators","md5":"7dc0edbc8a00cc01362f9aea2d56fe39","sha1":"776fc63a1082c7b8c9ba9e582b44adeee2356e2d","sha256":"f6da0c75217cfec8be731d494c6ee94fcd2ad5a2993345f9170ae01392f85f8d","sha512":"00ad2aacac1b6a88681d0831f3ea0c3bc391b051b3c1c776e69e714cd7075b632ece03243c110f3c4bf2771f9b14531d3f2938a047fe71bcf2fa7965110b0bcf","ssdeep":"192:RU010TUyJU0LU06tU0gx9vx7vWSRnTUrdGjnoiU0gU0lG:RDkBscrTBOHG","tlshash":"f332009533b0d8f96d7b77225f4da16ca008aa00cd825ad6f902e05165cfbf64ee1b1b","first_seen":"2025-03-26T01:29:54.701982Z","last_seen":"2026-04-01T20:23:47.939793Z","times_seen":55,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":79,"connect":10,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/puengine.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:16.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 Aug 2025 08:32:03 GMT","end":"Fri, 31 Oct 2025 08:32:02 GMT"},"fingerprint":{"sha1":"E4:52:21:98:B0:CD:51:03:1A:59:A9:01:02:8A:D6:3B:66:E3:EE:3A","sha256":"F1:77:51:DD:B8:B7:37:39:6D:01:37:95:43:1C:C1:78:42:1E:A6:30:E3:96:F3:D8:25:E4:61:7E:80:03:FD:8A"}}},"request":{"raw":"GET /sdk/v1/puengine.js HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nCookie: cookie_user_id=ee5c67dd-d280-5724-abee-fefde6fe0aa2; bfq=APeIECNCxxYZMXDUiJGjRhcWIsYU3BLjoYgyE2PcqKFwIY2NXfoo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 15 Jan 2025 14:08:26 GMT\r\netag: W/\"6787c15a-15dda\"\r\nx-robots-tag: noindex, nofollow\r\ncontent-encoding: gzip\r\ncache-control: max-age=172800\r\nexpires: Tue, 23 Sep 2025 14:31:16 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: ah1742,DS9225\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89562,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"87781e1d7683222115078304d2414b35","sha1":"8bf54dd8a67d75a6f38ab240d47007c12c6e2fdc","sha256":"37cf30c764c95d5900378ec4e56d09a6088a8b90ed7540c0b7cd3abebba37459","sha512":"64b8288978b5e509878a3f527ea8c9fe86fb762f3b09c52e1521a3adfc1bf78f6a262e78cd9bea6eb574acc270ff52eb2647c0d05ea2ca0715a7e330a192b043","ssdeep":"1536:v9zsfUK2AHAuaEGDoXhLAknqLULh9/S1dHWyRj:v9zsfU5mGc9A2qLULh9/SHHWyl","tlshash":"1b93d65d7093604961d2f6fc007f368a686ac850f45e8caa6674d3c2ec7c4ad84e79fb","first_seen":"2025-01-15T18:31:30.651098Z","last_seen":"2025-12-13T16:30:20.429188Z","times_seen":1461,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/outstream.video.v2.css","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:16.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 Aug 2025 08:32:03 GMT","end":"Fri, 31 Oct 2025 08:32:02 GMT"},"fingerprint":{"sha1":"E4:52:21:98:B0:CD:51:03:1A:59:A9:01:02:8A:D6:3B:66:E3:EE:3A","sha256":"F1:77:51:DD:B8:B7:37:39:6D:01:37:95:43:1C:C1:78:42:1E:A6:30:E3:96:F3:D8:25:E4:61:7E:80:03:FD:8A"}}},"request":{"raw":"GET /sdk/v1/outstream.video.v2.css HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nCookie: cookie_user_id=ee5c67dd-d280-5724-abee-fefde6fe0aa2; bfq=APeIECNCxxYZMXDUiJGjRhcWIsYU3BLjoYgyE2PcqKFwIY2NXfoo\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-type: text/css\r\nserver: nginx\r\nlast-modified: Mon, 15 Sep 2025 09:38:43 GMT\r\netag: W/\"68c7dea3-1a7e\"\r\nx-robots-tag: noindex, nofollow\r\ncontent-encoding: gzip\r\ncache-control: max-age=172800\r\nexpires: Tue, 23 Sep 2025 14:31:16 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH1742,DS9225\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6782,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6782), with no line terminators","md5":"b1b8fbff5f7f93deadea779d44f84abd","sha1":"09bff0df853be04e920e97d826cb0e62f3bce024","sha256":"0ca464750f6f13352afd56acb98e1b6af145803ee5c36d16aa21afcb75b85c7d","sha512":"7cb3758f7d1ecc3f3b2d00290cae53dabe595b31ee6ba9a5207d6e91dcdc689b2b240a83bc776da06e1f2703c91a8c9796e414dd37bf8b0c7717e0c2f48358a0","ssdeep":"96:FpLqOdSNi/cXkHUr3u4XzIrUKiEcCrriErluiEc87:Fx0Kx0ju4DIbYC/iEr4Ye","tlshash":"bce1ee10f6d1a91cf006826eaed81ba961d6c4e7f01a092ec0a3dd25c3956d7733eeb4","first_seen":"2024-04-30T04:10:36Z","last_seen":"2025-12-16T14:00:48.9174Z","times_seen":160,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-cdn.strpst.com/avatars/2/2/c/22cd148ebb5cb3177497925f86630c71-full","fqdn":"static-cdn.strpst.com","domain":"strpst.com","tld":"com"},"ip":{"addr":"104.17.11.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:16.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-cdn.strpst.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 Aug 2025 20:24:06 GMT","end":"Thu, 13 Nov 2025 21:23:58 GMT"},"fingerprint":{"sha1":"61:C1:A6:4D:C6:E0:DA:4E:22:9B:6D:69:5F:1D:9D:7A:7D:9A:B0:5E","sha256":"92:EF:CD:FE:4D:3C:49:5B:70:C4:ED:34:7A:EE:1A:CC:C2:22:74:35:1A:14:76:48:72:2A:81:A4:D3:69:23:A9"}}},"request":{"raw":"GET /avatars/2/2/c/22cd148ebb5cb3177497925f86630c71-full HTTP/1.1\r\nHost: static-cdn.strpst.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5466\r\ncf-ray: 982a43e8cba03181-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Disposition\r\ncache-control: public\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: qual=85, origFmt=jpeg, origSize=7924\r\ncontent-disposition: inline; filename=\"22cd148ebb5cb3177497925f86630c71-full\"\r\netag: \"54b9966d923a300ed6fa62d8cb78e51b\"\r\nlast-modified: Tue, 02 Jul 2024 11:15:18 GMT\r\nvary: Accept\r\nx-cache-status: MISS\r\ncf-cache-status: HIT\r\nage: 7002409\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5466,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"963b70e78b61de4632943268f20ed914","sha1":"627bfce2c1da459c97a2f0b60aca618fedf90e05","sha256":"3ba212ccd39c66e283b2c87d78c5fd46c8c409f2645415deee2c7a6d4a8edc8a","sha512":"4922991747db3f16405021aabdf96c848b38caca8505043e4887a2c32f643298cc7ab544f8f855eccabaa02c8cb9c52300b258a62ce91ac31620589d813f2040","ssdeep":"96:shtOhl8MSofMflQnZXcjBwdLMfmvXr2g3JgAGyaVxSJrdhK4UgYGfGs95K7:dhluqMflYZXcirvXr2g/ExYZsUYGfjS7","tlshash":"a2b17d9d68dcd427de18106dec12706838f179c1d8a0d382fe156905b63bb1dd110fe2","first_seen":"2025-06-18T19:59:46.765852Z","last_seen":"2025-12-06T16:54:06.428218Z","times_seen":11,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":21,"dns":6,"connect":1,"send":0,"wait":8,"receive":1,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/inpage.push.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:15.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 Aug 2025 08:32:03 GMT","end":"Fri, 31 Oct 2025 08:32:02 GMT"},"fingerprint":{"sha1":"E4:52:21:98:B0:CD:51:03:1A:59:A9:01:02:8A:D6:3B:66:E3:EE:3A","sha256":"F1:77:51:DD:B8:B7:37:39:6D:01:37:95:43:1C:C1:78:42:1E:A6:30:E3:96:F3:D8:25:E4:61:7E:80:03:FD:8A"}}},"request":{"raw":"GET /sdk/v1/inpage.push.js HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:15 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Thu, 29 May 2025 14:36:43 GMT\r\netag: W/\"683870fb-40ba\"\r\nx-robots-tag: noindex, nofollow\r\ncontent-encoding: gzip\r\ncache-control: max-age=172800\r\nexpires: Tue, 23 Sep 2025 14:31:15 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: ah1742,DS9225\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16570,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (16485)","md5":"f1b2ed5ebce5fb32321a69d05d2d8589","sha1":"439f4ebd5ed0203876de0c271689670cfb8f33b8","sha256":"f38e5bcfdb0566c2b5d2a5bd0dfc44094f3f717b0b7e8f3776f9c1138bfdf052","sha512":"953645b4725c12d7800c775dec4cc980e94bf7049e7d83b0350befb3963fc9a52e80ffcf69ec7f92ae542c5edd11efcffa12e426ba1817e7c30ccfe063834370","ssdeep":"192:pb7XKyDwozsI6fX+nKpBUrt/2AbBf18CIzbzL4Tugwm67mNKbbNCGd+9BBugBRA+:pv6yupv+uYbkzXMTukOgq4GdouEas","tlshash":"ef72e9bd35c26034627a151b52bf9766f73c2a216d081c00b06fec9f7b68d8ac166f65","first_seen":"2025-06-17T01:44:21.320546Z","last_seen":"2026-01-19T08:00:37.178629Z","times_seen":1075,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.xlivrdr.com/abc.gif?abTest=landingvast_rscore\u0026abTestVariant=landingvast_rscore_paidU_7\u0026action=sbSignupWithModelSoft\u0026campaignId=c5135a4f2a1f31dec37f81076f43ce3228115817d90d19693df2b5c1c9764766\u0026campaignType=smartpop\u0026creativeId=c9b7e049622029cfc0319cc5a63e6f98450c376d3776beafa8030c904a3fd6d5\u0026iterationId=1075268\u0026landing=landingVAST\u0026masterSmartpopId=2683\u0026memberId=d4XOYsXP5WhKzF_aXnPhaPEdvLICCY-7WD5eTJx-u0wOgtQ4hDLRbQPaXAmfo9cFk9lAuGlwAwPIvdqYUt8jWCurlnYYDU5pYli8lozSM8jcIbVV_gUIDRUi\u0026modelId=163031604\u0026onlineModels=Daddyslut2_0\u0026p1=4770843\u0026referrer=https%3A%2F%2Fmail.scandalshack.com%2F\u0026ruleId=29\u0026segment=hls-Daddyslut2_0-1\u0026smartpopId=13956\u0026sourceId=594678\u0026stripcashR=1\u0026tag=girls\u0026trafficType=preroll\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34734","fqdn":"go.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"172.64.147.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:16.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.xlivrdr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:02:48 GMT","end":"Sun, 07 Dec 2025 09:02:14 GMT"},"fingerprint":{"sha1":"18:51:33:CF:A8:88:6B:8C:BA:0C:FC:AD:26:65:64:F8:F9:5A:32:CA","sha256":"37:C7:74:68:D2:46:40:59:86:A9:99:8C:2C:5E:F6:86:48:C4:47:28:01:2B:8E:2C:93:DF:31:57:81:AD:07:A0"}}},"request":{"raw":"GET /abc.gif?abTest=landingvast_rscore\u0026abTestVariant=landingvast_rscore_paidU_7\u0026action=sbSignupWithModelSoft\u0026campaignId=c5135a4f2a1f31dec37f81076f43ce3228115817d90d19693df2b5c1c9764766\u0026campaignType=smartpop\u0026creativeId=c9b7e049622029cfc0319cc5a63e6f98450c376d3776beafa8030c904a3fd6d5\u0026iterationId=1075268\u0026landing=landingVAST\u0026masterSmartpopId=2683\u0026memberId=d4XOYsXP5WhKzF_aXnPhaPEdvLICCY-7WD5eTJx-u0wOgtQ4hDLRbQPaXAmfo9cFk9lAuGlwAwPIvdqYUt8jWCurlnYYDU5pYli8lozSM8jcIbVV_gUIDRUi\u0026modelId=163031604\u0026onlineModels=Daddyslut2_0\u0026p1=4770843\u0026referrer=https%3A%2F%2Fmail.scandalshack.com%2F\u0026ruleId=29\u0026segment=hls-Daddyslut2_0-1\u0026smartpopId=13956\u0026sourceId=594678\u0026stripcashR=1\u0026tag=girls\u0026trafficType=preroll\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34734 HTTP/1.1\r\nHost: go.xlivrdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-type: image/gif\r\ncontent-length: 103\r\ncf-ray: 982a43e89f388deb-OSL\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/page.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:15.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.addtoany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 08:53:15 GMT","end":"Mon, 24 Nov 2025 09:53:12 GMT"},"fingerprint":{"sha1":"F7:A4:6C:FF:03:AC:D3:2A:92:BA:EC:F2:67:5A:00:B2:0D:40:72:F2","sha256":"89:4B:61:9A:22:6F:77:70:77:50:57:C1:3F:29:21:86:C2:81:9A:36:F7:98:1A:DD:0B:01:71:03:F2:19:AA:EC"}}},"request":{"raw":"GET /menu/page.js HTTP/1.1\r\nHost: static.addtoany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:15 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400, stale-while-revalidate=30, public\r\netag: W/\"060b0026b51016bf08c9d4b4a73b7960\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=JX7RsZqxq%2Fs6d0udALGlBN3XMVofooG93MldNL00URU5YstTsdo6awL699lCwEstJ5ukVIpL3nCFkEXvpWM9wvO1lVAOGFxrXltymO7VmDK7sU4QO6uF9adZ1yxtlH0S1SFD%2Bf6OWmBEmQBHwNhL6tAU\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nage: 20333\r\ncf-ray: 982a43df2ce70daa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3179,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3179), with no line terminators","md5":"57b268c32627d8d13671f43be7c47b84","sha1":"0eebe8bc9958922a2a354b4abdca2f4d326f49e9","sha256":"53d16f311b01e5f9b5e7dcb2ec11b11e5ed23e155ed05727a7a42472d608118f","sha512":"72f220c33c49e4cf58f9fdd8d1f56e835e6b7f33c50d0eb754b9e7868f788c9f8705d83f06419f1191b9a528397a5ce6637df84fc232daea844410ed7027ed4a","ssdeep":"","tlshash":"bd61b74b774ea8734a5736bac19fb60f2223331f9c6589048914e4d849bcec6501fa7e","first_seen":"2025-04-25T03:57:25.57786Z","last_seen":"2026-04-17T12:08:01.533113Z","times_seen":9236,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":6,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.blcdog.com/api/models/ts?userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026sourceId=870534\u0026memberId=oFP0cohIuAvJgi4L06m8BMtwUhGNVkAooIDqn27DQbsNemfW_dEUPbhwBnkPro4DkXLRw28_PJPzRqf6WsqODWR9UwXgJEV4zeBCesDZpZ_vJigz6w_gUIDRUi\u0026p1=4770842\u0026tag=girls/young","fqdn":"go.blcdog.com","domain":"blcdog.com","tld":"com"},"ip":{"addr":"172.64.147.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:16.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.blcdog.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 19:42:34 GMT","end":"Fri, 12 Dec 2025 18:56:39 GMT"},"fingerprint":{"sha1":"E4:95:E8:60:FF:47:B9:44:2B:F0:98:C2:A8:A4:D1:EB:9C:A9:B0:B2","sha256":"C4:E8:53:4F:4B:BF:23:D8:CC:30:E7:86:4C:D5:BD:5D:89:BD:A6:C3:5A:6C:22:90:0B:B9:49:C3:C4:1E:46:6A"}}},"request":{"raw":"GET /api/models/ts?userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026sourceId=870534\u0026memberId=oFP0cohIuAvJgi4L06m8BMtwUhGNVkAooIDqn27DQbsNemfW_dEUPbhwBnkPro4DkXLRw28_PJPzRqf6WsqODWR9UwXgJEV4zeBCesDZpZ_vJigz6w_gUIDRUi\u0026p1=4770842\u0026tag=girls/young HTTP/1.1\r\nHost: go.blcdog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mail.scandalshack.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-type: application/json\r\ncf-ray: 982a43e66e02120a-OSL\r\naccess-control-allow-origin: https://mail.scandalshack.com\r\naccess-control-allow-credentials: true\r\nvary: Origin, Accept-Encoding\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c14765eec6973f237f4dc9e4c831e2fd","sha1":"e4e86a5148baf4e65aa0c21e57aed24ccff0c679","sha256":"b2aac5d16ff58d9af09371fd47a4feb2bc4c6cf673b1328aa33b3feece715bd2","sha512":"f92427606643347a09ad111eedc9f41116161db7daed11e1e0f8ddc62de28e7ce9d4a3b857b20055a65790fc03f744583108ed260d674b831c51af14326683a4","ssdeep":"","tlshash":"e321e0ea2698dc5f2c40ae895ccf4807f004203b64d0b9ce97c9d96ad8ecc6c251aec7","first_seen":"2025-09-21T14:32:25.279009Z","last_seen":"2025-09-21T14:32:25.279009Z","times_seen":1,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"go.blcdog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/images/3/d/649cd2113ab52389ae954a7be44cade29e1f7f/main.webp","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:16.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 Aug 2025 08:32:03 GMT","end":"Fri, 31 Oct 2025 08:32:02 GMT"},"fingerprint":{"sha1":"E4:52:21:98:B0:CD:51:03:1A:59:A9:01:02:8A:D6:3B:66:E3:EE:3A","sha256":"F1:77:51:DD:B8:B7:37:39:6D:01:37:95:43:1C:C1:78:42:1E:A6:30:E3:96:F3:D8:25:E4:61:7E:80:03:FD:8A"}}},"request":{"raw":"GET /images/3/d/649cd2113ab52389ae954a7be44cade29e1f7f/main.webp HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nCookie: cookie_user_id=ee5c67dd-d280-5724-abee-fefde6fe0aa2; bfq=APeIECNCxxYZMXDUiJGjRhcWIsYU3BLjoYgyE2PcqKFwIY2NXfoo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3156\r\nserver: nginx\r\nlast-modified: Sat, 03 Oct 2020 01:37:12 GMT\r\netag: \"5f77d5c8-c54\"\r\nx-robots-tag: noindex, nofollow\r\ncache-control: max-age=172800\r\nexpires: Tue, 23 Sep 2025 14:31:16 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: ah1742,DS9225\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3156,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"29f2895d405362109fb5b205b327e704","sha1":"c92c90467efba80e323df4db17d0b1ed4e40be90","sha256":"66d8ea4b11af10ddd18c8ffc31999a23ad2eac96dac0f6ba78145d7a4b2a320f","sha512":"26e286054958d861fd5d100e6b9f4e10f862c92fc11af7daf048c423fc523d6e5aecbaa335bee5c18380fee9888b893ca65e5660283dd4ce96cea5d0f8fd302e","ssdeep":"","tlshash":"70518d3f7fc5a581b32232985f85e7d980ab39dfa0659c832646afce89d20203d144ca","first_seen":"2023-06-18T09:42:11Z","last_seen":"2026-04-19T20:01:19.773532Z","times_seen":1076,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tsvideo.sacdnssedge.com/video/ol_2bb0ba5d4134d489d40c8a2631e22c83.mp4","fqdn":"tsvideo.sacdnssedge.com","domain":"sacdnssedge.com","tld":"com"},"ip":{"addr":"212.102.62.46","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:16.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1306075136.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 11:45:54 GMT","end":"Mon, 01 Dec 2025 11:45:53 GMT"},"fingerprint":{"sha1":"F5:AA:C7:6C:C7:93:C4:F6:5E:96:1F:53:A8:14:56:6C:BD:F6:9C:CA","sha256":"55:94:6F:AC:E4:1C:91:4F:EC:CF:8C:69:E0:FB:E6:96:40:F2:5D:2A:41:51:B7:40:59:71:1E:98:65:A9:C4:1B"}}},"request":{"raw":"GET /video/ol_2bb0ba5d4134d489d40c8a2631e22c83.mp4 HTTP/1.1\r\nHost: tsvideo.sacdnssedge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=2392064-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 35902\r\nvary: accept-encoding\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"ol_2bb0ba5d4134d489d40c8a2631e22c83.mp4\"\r\netag: \"5cf29f22596d16194370dec323e7194d\"\r\nexpires: Sun, 21 Sep 2025 15:22:06 GMT\r\nlast-modified: Sun, 21 Sep 2025 14:22:06 GMT\r\ncache-control: max-age=7200\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncf-cache-status: HIT\r\nage: 0\r\ncf-ray: 982a368079cad25a-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-77-nzt: EgwB1GY+LgG3JAIAAAwBT3/TDwG3AQAAAA\r\nx-77-nzt-ray: db5cda0983da2b7b340cd068c792ce33\r\nx-77-cache: HIT\r\nx-77-age: 548\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\ncontent-range: bytes 2392064-2427965/2427966\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":35902,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"fd0e030ec6a7a17a3a0972adffe1dd4f","sha1":"f0b582b1ba84dfe2a13b44b2adc148b1ba39e5e8","sha256":"c11134d8b75758b61b831155c794ca0f14e0002f162c302075cb8d32cd8e23ab","sha512":"1f6e47cb46687754330abb96c84b4258a7fa8cc83b875e918f3553f2e8eb84509961396693bfefd8145eb329a4808be4d5a527cd54b40dfa2ac5a919fe6d8a41","ssdeep":"384:8QmdrI78aJoVUK07JB8FvUhPG2+6MjBP12AEofalsEnqtuEebCETI5TiP+xTFMsl:8tIAai07aiXW/EofKsUpEaqTDXMI","tlshash":"41f24ea2f3211507da91173598e103207730e5753787874f8be1a73eadab3e99e035ea","first_seen":"2025-09-21T14:32:25.280352Z","last_seen":"2025-09-21T14:32:25.280352Z","times_seen":1,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":22,"dns":1,"connect":7,"send":0,"wait":31,"receive":4,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scandalshack.com/wp-content/plugins/mai-engine/assets/css/utilities.min.css?ver=2.37.0.71420252325","fqdn":"scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"172.67.150.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:14.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scandalshack.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 23:54:49 GMT","end":"Tue, 28 Oct 2025 22:53:42 GMT"},"fingerprint":{"sha1":"BD:78:39:A6:81:9B:CE:CD:A7:D9:59:79:78:AC:AB:E2:36:4B:A0:D6","sha256":"AB:05:0C:75:B6:6C:8C:56:8B:28:A0:1D:62:11:3F:92:2C:0F:5F:DA:DA:0B:61:B8:E7:31:4D:C5:7F:E6:06:14"}}},"request":{"raw":"GET /wp-content/plugins/mai-engine/assets/css/utilities.min.css?ver=2.37.0.71420252325 HTTP/1.1\r\nHost: scandalshack.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:14 GMT\r\ncontent-type: text/css\r\ncontent-length: 2637\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 19 Sep 2026 17:26:55 GMT\r\nlast-modified: Mon, 14 Jul 2025 23:25:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 183859\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E93VfX%2BjyKm5babH6Ysa8AX6VdKiwlAOXA%2FQb3g015aHMtbAFm1VOoAr1%2FbXfXjBBBHu%2B9bwOsxXOGXAvdWa3v%2BXJHCmhb18XPJ%2FYc5cf%2FU%3D\"}]}\r\ncf-ray: 982a43dcded176ef-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19308,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19308), with no line terminators","md5":"03e985a020b307d731810fb88e7f4c21","sha1":"3db3a4b2300b44e8265fe8250cd43e3a987e74f4","sha256":"1f639ba513da3a9d6926d9eb53b624ef8a0fc14376f00c1cd51c3e9ab3f07f00","sha512":"daa67721e55be6058dec41dff163da9f15d441347479f218fd23c40bb6e81b0150751de41b9d4a13124317ddce2859bd643c77d104670f6df055b9c2ad42c413","ssdeep":"384:VH+yyJ5JRa7E+IC2LQ4u6ypB5t74A6LdZruWr1hTva:VH+R+f4u6yD5t7n","tlshash":"e382c1d6bab0d57cc8bb6157c2a9b57ce90a3c15cb478ccb9c02b32296c9ff35252119","first_seen":"2025-04-01T08:50:32.430741Z","last_seen":"2026-04-01T20:23:47.909544Z","times_seen":51,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":78,"connect":10,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/modules/overlays.pt5ow5lr.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:16.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.addtoany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 08:53:15 GMT","end":"Mon, 24 Nov 2025 09:53:12 GMT"},"fingerprint":{"sha1":"F7:A4:6C:FF:03:AC:D3:2A:92:BA:EC:F2:67:5A:00:B2:0D:40:72:F2","sha256":"89:4B:61:9A:22:6F:77:70:77:50:57:C1:3F:29:21:86:C2:81:9A:36:F7:98:1A:DD:0B:01:71:03:F2:19:AA:EC"}}},"request":{"raw":"GET /menu/modules/overlays.pt5ow5lr.js HTTP/1.1\r\nHost: static.addtoany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mail.scandalshack.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.addtoany.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000, immutable\r\netag: W/\"879dd668e5fa16fdfdcc6f79be430a31\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Yvfk5tlXE9bnRPRDHk5%2BYNtLxOSJlNjwCy0pwQzxuzhrr%2BPsap2L5AKMkOuUhhsRqQKBr6MJJFPZ%2FBqoc1W0cBiMADrQKMcF7wsX7dcZgbX38Nr3T8gV0CxDQqH9m6xWab9nLTCD\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\ncf-ray: 982a43e4e9870daa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8362,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8362), with no line terminators","md5":"104183cd2b72a99a8dd0a3efcc065679","sha1":"3ba60cce574d6ba5e99688fb15ae40a67f2389c1","sha256":"fb6cb71f48528e1216fabe1c21e8f0eb9f3f670445f089c9034bf6b05a62aa64","sha512":"2a5dd054a1b857a2bf654616166c58d27723419e4716eb0de3142ae5ac6388d0d1bbf49ed0ed44c9de0ccd93bc178b9fbaee68ccedb84e0b61776685ef130b87","ssdeep":"192:Kxje5GYTa2gvBKysAz9Pjf3OMOyINhVRmQcahQ/qzm4dBWKltuLm6AcG2YPBycXH:ijaTa2gvBzsAz9Pjf3OfyINh6ahQ/qaI","tlshash":"4e02e9b12331357bab5f02fb41d8020971295956170a4428af58ec7f22e5ee617f3fa6","first_seen":"2025-06-24T20:07:33.51703Z","last_seen":"2025-10-19T18:35:09.042531Z","times_seen":13,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/images/a/6/f630ccafec38030fef1e1280955c53334fe500/main.webp","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:16.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 Aug 2025 08:32:03 GMT","end":"Fri, 31 Oct 2025 08:32:02 GMT"},"fingerprint":{"sha1":"E4:52:21:98:B0:CD:51:03:1A:59:A9:01:02:8A:D6:3B:66:E3:EE:3A","sha256":"F1:77:51:DD:B8:B7:37:39:6D:01:37:95:43:1C:C1:78:42:1E:A6:30:E3:96:F3:D8:25:E4:61:7E:80:03:FD:8A"}}},"request":{"raw":"GET /images/a/6/f630ccafec38030fef1e1280955c53334fe500/main.webp HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nCookie: cookie_user_id=ee5c67dd-d280-5724-abee-fefde6fe0aa2; bfq=APeIECNCxxYZMXDUiJGjRhcWIsYU3BLjoYgyE2PcqKFwIY2NXfoo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3476\r\nserver: nginx\r\nlast-modified: Fri, 02 Oct 2020 22:14:27 GMT\r\netag: \"5f77a643-d94\"\r\nx-robots-tag: noindex, nofollow\r\ncache-control: max-age=172800\r\nexpires: Tue, 23 Sep 2025 14:31:16 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: ah1742,DS9225\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3476,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"496c270eb77306334daf164ae8b3102d","sha1":"59724967ce508aa1ced2a7d8ca4c7c708be919dd","sha256":"76cd1fb6c03c7dd3863999e150caab552ad9c28b100971a0c6236c26f18e594e","sha512":"5fb51ec968383435cc9cf9583f851ee6f609322b645062f8c13fc591b64a74c86dd79d66518a8a310bdd307e8ddb1ad8cf4f0b4c614b3d5802447c42a5255c3b","ssdeep":"","tlshash":"19716d742d70e89bb35aed0251723389a4df86256b92feaa3838120c38b257f136441c","first_seen":"2024-03-07T18:53:47Z","last_seen":"2026-04-15T20:56:07.012392Z","times_seen":1079,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1758464400/117759266_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199","date":"2025-09-21T14:31:16.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 Aug 2025 09:19:42 GMT","end":"Sat, 01 Nov 2025 10:19:23 GMT"},"fingerprint":{"sha1":"44:F7:F2:B0:B9:E8:45:DC:8B:94:CD:26:E3:38:54:5D:E6:EB:A5:03","sha256":"3E:1B:F1:89:FB:27:09:F0:4C:55:6F:DC:12:3E:86:60:5C:2B:82:87:83:97:37:0B:5F:B3:17:E2:B7:9A:78:F8"}}},"request":{"raw":"GET /thumbs/1758464400/117759266_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.xlivrdr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10328\r\netag: \"457cfd93d7f09c93e94afe834a089141\"\r\nlast-modified: Sun, 21 Sep 2025 14:19:04 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 661\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 982a43eaf8915691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10328,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"457cfd93d7f09c93e94afe834a089141","sha1":"e33269e5bcd6f95a98d02307653219bcac28d680","sha256":"cc3f7e683d74cb612353b66b34599c322258e0b818ed7a4958abfbe3d5549bc7","sha512":"ffda4ef3816cf21e4081d367b97f237d7f7346bc7be6c546122cdaa63b9930fbf02eb629bc2a1201ae3cd6498784e769232ae803e80b3d88d533eb3a1d912736","ssdeep":"192:8tqGF4i9icR4net6PSBMss9b5dYgBPCP+PiCxSOU2TE:8tqGF4micwI1BxobsgPvZxzNE","tlshash":"da22ae352927fbf29d02e59854ae852edf2b32b50c33712e2f0a578007793a13fd5199","first_seen":"2025-09-21T14:32:25.282778Z","last_seen":"2025-09-21T14:32:25.282778Z","times_seen":1,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tsyndicate.com/do2/272634e0cfda420badafbcd2ce55ad61/vast?t=outstream\u0026extid=%7Bextid%7D\u0026keywords=%F0%9F%91%85%F0%9F%8D%91%F0%9F%8D%92%20Star%20%E2%AD%90%F0%9F%98%88%E2%9D%A4%EF%B8%8F%20Scandals%20%F0%9F%8D%86%F0%9F%8D%8C%F0%9F%92%A6%2CScandal%20Shack%20%E2%80%93%20%F0%9F%91%85%F0%9F%8D%91%F0%9F%8D%92%20Star%20%E2%AD%90%F0%9F%98%88%E2%9D%A4%EF%B8%8F%20Scandals%20%F0%9F%8D%86%F0%9F%8D%8C%F0%9F%92%A6\u0026w=1280\u0026h=1024\u0026tz=0","fqdn":"tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"136.243.43.25","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:15.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tsyndicate.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 20:10:41 GMT","end":"Thu, 11 Dec 2025 20:10:40 GMT"},"fingerprint":{"sha1":"25:5B:D4:FE:8D:85:CA:1A:7D:3A:B0:58:EC:2D:7A:B0:62:90:21:1F","sha256":"DF:0A:26:3C:A9:CF:97:54:23:20:C6:11:EB:C6:8C:7F:02:14:58:C8:F6:3B:08:10:27:BF:78:67:09:32:DC:9C"}}},"request":{"raw":"GET /do2/272634e0cfda420badafbcd2ce55ad61/vast?t=outstream\u0026extid=%7Bextid%7D\u0026keywords=%F0%9F%91%85%F0%9F%8D%91%F0%9F%8D%92%20Star%20%E2%AD%90%F0%9F%98%88%E2%9D%A4%EF%B8%8F%20Scandals%20%F0%9F%8D%86%F0%9F%8D%8C%F0%9F%92%A6%2CScandal%20Shack%20%E2%80%93%20%F0%9F%91%85%F0%9F%8D%91%F0%9F%8D%92%20Star%20%E2%AD%90%F0%9F%98%88%E2%9D%A4%EF%B8%8F%20Scandals%20%F0%9F%8D%86%F0%9F%8D%8C%F0%9F%92%A6\u0026w=1280\u0026h=1024\u0026tz=0 HTTP/1.1\r\nHost: tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mail.scandalshack.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 14:31:15 GMT\r\ncontent-type: application/xml; charset=utf-8\r\naccess-control-allow-origin: https://mail.scandalshack.com\r\naccess-control-allow-methods: POST, GET, HEAD\r\naccess-control-allow-headers: Accept, X-Requested-With, X-Forwarded-For, X-Real-IP, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Legacy, Content-Type,Authorization, Nav-Ua-He-Mobile, Nav-Ua-He-Platform, Nav-Ua-He-Brands, Nav-Ua-He-Platformversion, Nav-Ua-He-Model, Nav-Ua-He-Architecture, Nav-Ua-He-Bitness, Nav-Ua-He-Fullversionlist, Nav-Ua-He-Uafullversion, Nav-Ua-He-Wow64\r\naccess-control-allow-credentials: true\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding, *\r\nx-vast: 3.0\r\nset-cookie: cookie_user_id=ee5c67dd-d280-5724-abee-fefde6fe0aa2; expires=Sat, 21 Mar 2026 14:31:15 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None\nbfq=APeIECNCx5YZNXDAwIGDRhcWIsYU3BLjoYgyE2PcSFijRgwaG7v0URAQ; expires=Mon, 22 Sep 2025 14:31:15 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, no-transform\r\nx-robots-tag: none, noindex, nofollow\r\nreport-to: { \"url\": \"https://pxl.tsyndicate.com/api/v1/heavy-ad/report\", \"max_age\": 86401 }\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\npermissions-policy: ch-ua-model=(self \"https://tsyndicate.com\"), ch-ua-platform-version=(self)\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6008,"size_decoded":0,"mime_type":"application/xml; charset=utf-8","magic":"XML 1.0 document, ASCII text, with very long lines (5969)","md5":"707c14a222f4db05e01aa888155db966","sha1":"82af1b595e8787fd9293312c06f3f037521507ff","sha256":"9fa6ff555bc8d1406cea10408b0d3b245690fbd3eceaa23e49b32d885b71900f","sha512":"7e0b24a120039163e2b06f8f7f6791cf7ca07e907b01f1876a2147dbb0dfc44210e9ade63dd41315ed880c5843356c3da680dc10338bbd3ecfd1e23fb44e339e","ssdeep":"96:Ntn7cCzg9x691cLWD8vs5GhHUHsrgYPODFGt4rES3LxF2MGJ1ksrgYxiXFtPESDh:NV79gi3cgr5cHUMrgYGDFXrESbWMQ9r4","tlshash":"acc14dee97b0d9b70a5186179f88b6ad40dd3c0c14d39afed898445afd0f6c605500a5","first_seen":"2025-09-21T14:32:25.283813Z","last_seen":"2025-09-21T14:32:25.283813Z","times_seen":1,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":58,"dns":3,"connect":25,"send":0,"wait":220,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/interstitial.ts.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:15.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 Aug 2025 08:32:03 GMT","end":"Fri, 31 Oct 2025 08:32:02 GMT"},"fingerprint":{"sha1":"E4:52:21:98:B0:CD:51:03:1A:59:A9:01:02:8A:D6:3B:66:E3:EE:3A","sha256":"F1:77:51:DD:B8:B7:37:39:6D:01:37:95:43:1C:C1:78:42:1E:A6:30:E3:96:F3:D8:25:E4:61:7E:80:03:FD:8A"}}},"request":{"raw":"GET /sdk/v1/interstitial.ts.js HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:15 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Thu, 26 Jun 2025 13:39:36 GMT\r\netag: W/\"685d4d98-5196\"\r\nx-robots-tag: noindex, nofollow\r\ncontent-encoding: gzip\r\ncache-control: max-age=172800\r\nexpires: Tue, 23 Sep 2025 14:31:15 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: ah1742,DS9225\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20886,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (20797)","md5":"9dccb0d02f8b94fd401f028d0829f89e","sha1":"c884a88b36387f3a848a13f7c3165f8230b41e56","sha256":"a439575e0efdac1e25905aeac3e93f6cd452abe0730c351f2d6ed3de22b04ae6","sha512":"d9fbe8a12ddb895e1c5c55712b5a275d213eeab78be504c70860cee692a0492a3c2f18848a70d21d6a33da6d09f4a9cc1af8b0f8ab7946181ce53f6a04c85931","ssdeep":"384:phi19PPXP9dvN3U4kZmZM7+K3XxCWRfxnoTEa2:pQXzNklZOSBXMWRZoTN2","tlshash":"f3922ae875e3297040a2916c605f9335737919606e980c01e07b9cd62bfad8be27ff6d","first_seen":"2025-06-26T16:39:31.358715Z","last_seen":"2025-09-22T23:35:58.120676Z","times_seen":26,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.xlivrdr.com/config?url=https%3A%2F%2Fcreative.xlivrdr.com%2FLPOmega%3Faction%3DsbSignupWithModel%26campaignId%3Debdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d%26campaignType%3Dsmartpop%26creativeId%3Dd28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e%26iterationId%3D928343%26masterSmartpopId%3D1738%26memberId%3D5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi%26p1%3D4770845%26quality%3D240p%26ruleId%3D12%26smartpopId%3D1589%26sourceId%3D303567%26trafficType%3Dinterstitial%26usePreroll%3D1%26userId%3Dd100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca%26variationId%3D34199","fqdn":"go.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"172.64.147.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199","date":"2025-09-21T14:31:16.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.xlivrdr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:02:48 GMT","end":"Sun, 07 Dec 2025 09:02:14 GMT"},"fingerprint":{"sha1":"18:51:33:CF:A8:88:6B:8C:BA:0C:FC:AD:26:65:64:F8:F9:5A:32:CA","sha256":"37:C7:74:68:D2:46:40:59:86:A9:99:8C:2C:5E:F6:86:48:C4:47:28:01:2B:8E:2C:93:DF:31:57:81:AD:07:A0"}}},"request":{"raw":"GET /config?url=https%3A%2F%2Fcreative.xlivrdr.com%2FLPOmega%3Faction%3DsbSignupWithModel%26campaignId%3Debdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d%26campaignType%3Dsmartpop%26creativeId%3Dd28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e%26iterationId%3D928343%26masterSmartpopId%3D1738%26memberId%3D5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi%26p1%3D4770845%26quality%3D240p%26ruleId%3D12%26smartpopId%3D1589%26sourceId%3D303567%26trafficType%3Dinterstitial%26usePreroll%3D1%26userId%3Dd100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca%26variationId%3D34199 HTTP/1.1\r\nHost: go.xlivrdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.xlivrdr.com/\r\nOrigin: https://creative.xlivrdr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-type: application/json\r\ncf-ray: 982a43e92bae56c1-OSL\r\naccess-control-allow-origin: https://creative.xlivrdr.com\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7446,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"07ca67290893c12dfe2ce5fdad799758","sha1":"be6d07fa837b03b9fe16246ea0b3f7451a0d0e22","sha256":"4cf2e3be7d1a5b49a93bcb865ef2b3da0c08decd83f42bdcec783aa83d21a747","sha512":"1346090b0f708ac0e13dc3acc040ffb2cd10155333f05c4e89166043cebf230b71371150837010e4168de2fd7db20493b7f482ea0c274d4ebbfcedf2fec829a5","ssdeep":"192:46Do5RpZGl+8mkUrfIULnZj4Hh8nyayqh13/7VlloqJIwQ13Y6yQ13/7VlloqJIA:yRUnmkIIULZ+lgDeN","tlshash":"a4e131fb860e24b706c44d5eff2db8d86a5c40b74e9208efec485835416c2b226b779d","first_seen":"2025-09-21T14:32:25.285405Z","last_seen":"2025-09-21T14:32:25.285405Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1758464760/199246772_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199","date":"2025-09-21T14:31:16.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 Aug 2025 09:19:42 GMT","end":"Sat, 01 Nov 2025 10:19:23 GMT"},"fingerprint":{"sha1":"44:F7:F2:B0:B9:E8:45:DC:8B:94:CD:26:E3:38:54:5D:E6:EB:A5:03","sha256":"3E:1B:F1:89:FB:27:09:F0:4C:55:6F:DC:12:3E:86:60:5C:2B:82:87:83:97:37:0B:5F:B3:17:E2:B7:9A:78:F8"}}},"request":{"raw":"GET /thumbs/1758464760/199246772_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.xlivrdr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11400\r\netag: \"5c9e6dc1716261358d29b2dbf793991b\"\r\nlast-modified: Sun, 21 Sep 2025 14:25:40 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 140\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 982a43eb28cb5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11400,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5c9e6dc1716261358d29b2dbf793991b","sha1":"b8d3d3c4c65b9fde19551534341880b41120f330","sha256":"4c99238a58ef4e674ca23f19b2edbd359208d160aa93ea5aca381e6f58ab380e","sha512":"035f707459bd382a95b634b61318d71a5e25cf2deff30f640816d8f48370c168e86ad7cc46e85a71c60ecceac129ece280e688342f5c00ff5499161de97769c5","ssdeep":"192:nfze1WcWac3LT/bp0++tV8hrnOozGi8dow/4XyMQHDaCJVaQXuraMOLG6kJBKB:SI5T/10+cV8N1zGapchE/rrO4vI","tlshash":"3d32b038654fab7335a5a1b68b00ee1b7ac8f0fb4bf6888746266670171901cb8805a3","first_seen":"2025-09-21T14:32:25.286498Z","last_seen":"2025-09-21T14:32:25.286498Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1758464610/219409889_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199","date":"2025-09-21T14:31:17.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 Aug 2025 09:19:42 GMT","end":"Sat, 01 Nov 2025 10:19:23 GMT"},"fingerprint":{"sha1":"44:F7:F2:B0:B9:E8:45:DC:8B:94:CD:26:E3:38:54:5D:E6:EB:A5:03","sha256":"3E:1B:F1:89:FB:27:09:F0:4C:55:6F:DC:12:3E:86:60:5C:2B:82:87:83:97:37:0B:5F:B3:17:E2:B7:9A:78:F8"}}},"request":{"raw":"GET /thumbs/1758464610/219409889_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.xlivrdr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12238\r\netag: \"9473777998089575c2113afa13ebd391\"\r\nlast-modified: Sun, 21 Sep 2025 14:22:44 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 429\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 982a43eb28d05691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12238,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9473777998089575c2113afa13ebd391","sha1":"2ee5a7d3af4e4a0f615398d86d3526aea29fcdbf","sha256":"24fd2443c52c03f6088b17395f67debe4d74e7823740cd5c10ae01731b464d80","sha512":"c8fb9887eec246e8848639620b5f816b5d0fa991e6254866605bef9be9c02491ae28730ca97e2a73e05cc79da5d9e41a3c02e1d8069e6c47133bd145aedd7a17","ssdeep":"192:KjaEOjamx8NNGL4nDxW94ItYLZwbZ0N27Tqpf9WlwHZAOGOBA7JZ98AbDz:Oanja68DBk9RmlNdclqA2AP98s","tlshash":"3942bfcb957c94140448c0648be75ea7ff39b76279f839026c5e3610c7ea94afdc29d8","first_seen":"2025-09-21T14:32:25.287447Z","last_seen":"2025-09-21T14:32:25.287447Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tsyndicate.com/do2/b2e336d950574e9eb59e60882be7e3ff/interstitial?extid=%7Bextid%7D\u0026w=1280\u0026h=1024\u0026domain=mail.scandalshack.com\u0026rnd=0.9983947051506716\u0026keywords=%F0%9F%91%85%F0%9F%8D%91%F0%9F%8D%92%20Star%20%E2%AD%90%F0%9F%98%88%E2%9D%A4%EF%B8%8F%20Scandals%20%F0%9F%8D%86%F0%9F%8D%8C%F0%9F%92%A6%2CScandal%20Shack%20%E2%80%93%20%F0%9F%91%85%F0%9F%8D%91%F0%9F%8D%92%20Star%20%E2%AD%90%F0%9F%98%88%E2%9D%A4%EF%B8%8F%20Scandals%20%F0%9F%8D%86%F0%9F%8D%8C%F0%9F%92%A6\u0026tz=0","fqdn":"tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"136.243.43.25","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:15.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tsyndicate.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 20:10:41 GMT","end":"Thu, 11 Dec 2025 20:10:40 GMT"},"fingerprint":{"sha1":"25:5B:D4:FE:8D:85:CA:1A:7D:3A:B0:58:EC:2D:7A:B0:62:90:21:1F","sha256":"DF:0A:26:3C:A9:CF:97:54:23:20:C6:11:EB:C6:8C:7F:02:14:58:C8:F6:3B:08:10:27:BF:78:67:09:32:DC:9C"}}},"request":{"raw":"GET /do2/b2e336d950574e9eb59e60882be7e3ff/interstitial?extid=%7Bextid%7D\u0026w=1280\u0026h=1024\u0026domain=mail.scandalshack.com\u0026rnd=0.9983947051506716\u0026keywords=%F0%9F%91%85%F0%9F%8D%91%F0%9F%8D%92%20Star%20%E2%AD%90%F0%9F%98%88%E2%9D%A4%EF%B8%8F%20Scandals%20%F0%9F%8D%86%F0%9F%8D%8C%F0%9F%92%A6%2CScandal%20Shack%20%E2%80%93%20%F0%9F%91%85%F0%9F%8D%91%F0%9F%8D%92%20Star%20%E2%AD%90%F0%9F%98%88%E2%9D%A4%EF%B8%8F%20Scandals%20%F0%9F%8D%86%F0%9F%8D%8C%F0%9F%92%A6\u0026tz=0 HTTP/1.1\r\nHost: tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mail.scandalshack.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 14:31:15 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: https://mail.scandalshack.com\r\naccess-control-allow-methods: POST, GET, HEAD\r\naccess-control-allow-headers: Accept, X-Requested-With, X-Forwarded-For, X-Real-IP, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Legacy, Content-Type,Authorization, Nav-Ua-He-Mobile, Nav-Ua-He-Platform, Nav-Ua-He-Brands, Nav-Ua-He-Platformversion, Nav-Ua-He-Model, Nav-Ua-He-Architecture, Nav-Ua-He-Bitness, Nav-Ua-He-Fullversionlist, Nav-Ua-He-Uafullversion, Nav-Ua-He-Wow64\r\naccess-control-allow-credentials: true\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding, *\r\nset-cookie: cookie_user_id=ee5c67dd-d280-5724-abee-fefde6fe0aa2; expires=Sat, 21 Mar 2026 14:31:15 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None\nbfq=APeIECNCxxYZMXDUiJGjRhcWIsYU3BLjoYgyE2PcqKFwIY2NXfoo; expires=Mon, 22 Sep 2025 14:31:15 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, no-transform\r\nx-robots-tag: none, noindex, nofollow\r\nreport-to: { \"url\": \"https://pxl.tsyndicate.com/api/v1/heavy-ad/report\", \"max_age\": 86401 }\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\npermissions-policy: ch-ua-model=(self \"https://tsyndicate.com\"), ch-ua-platform-version=(self)\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3615,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5eb7bf852a969b3a9941f0afc24c47e6","sha1":"02e591399e5344f62763a6f2dd6d459ff66b0a3c","sha256":"c2e0822ba4de1b0b9f532f9e9a3e3ed97efa2b825d2da7ffec005296bd2f45f0","sha512":"4c5e759b25bbb4783a34b9a6ebdf1d611c57a00811286557918d6dcc26e50d16211e866013ba0be6b414dafebce6b4e4f17df7fcea85ea678c37c33d443fa7d0","ssdeep":"","tlshash":"f5713cb1c24eae157d1086ae8d092b47647a1816dbe9794cd94183bfcd3eaf165181b0","first_seen":"2025-09-21T14:32:25.288512Z","last_seen":"2025-09-21T14:32:25.288512Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.xlivrdr.com/smartpop/c5135a4f2a1f31dec37f81076f43ce3228115817d90d19693df2b5c1c9764766?userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026sourceId=594678\u0026memberId=d4XOYsXP5WhKzF_aXnPhaPEdvLICCY-7WD5eTJx-u0wOgtQ4hDLRbQPaXAmfo9cFk9lAuGlwAwPIvdqYUt8jWCurlnYYDU5pYli8lozSM8jcIbVV_gUIDRUi\u0026p1=4770843\u0026ax=0\u0026showCompanion=1","fqdn":"go.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"172.64.147.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:16.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.xlivrdr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:02:48 GMT","end":"Sun, 07 Dec 2025 09:02:14 GMT"},"fingerprint":{"sha1":"18:51:33:CF:A8:88:6B:8C:BA:0C:FC:AD:26:65:64:F8:F9:5A:32:CA","sha256":"37:C7:74:68:D2:46:40:59:86:A9:99:8C:2C:5E:F6:86:48:C4:47:28:01:2B:8E:2C:93:DF:31:57:81:AD:07:A0"}}},"request":{"raw":"GET /smartpop/c5135a4f2a1f31dec37f81076f43ce3228115817d90d19693df2b5c1c9764766?userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026sourceId=594678\u0026memberId=d4XOYsXP5WhKzF_aXnPhaPEdvLICCY-7WD5eTJx-u0wOgtQ4hDLRbQPaXAmfo9cFk9lAuGlwAwPIvdqYUt8jWCurlnYYDU5pYli8lozSM8jcIbVV_gUIDRUi\u0026p1=4770843\u0026ax=0\u0026showCompanion=1 HTTP/1.1\r\nHost: go.xlivrdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mail.scandalshack.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-length: 0\r\nlocation: https://go.xlivrdr.com/api/models/vast?action=sbSignupWithModelSoft\u0026ax=0\u0026campaignId=c5135a4f2a1f31dec37f81076f43ce3228115817d90d19693df2b5c1c9764766\u0026campaignType=smartpop\u0026creativeId=c9b7e049622029cfc0319cc5a63e6f98450c376d3776beafa8030c904a3fd6d5\u0026duration=00%3A00%3A30\u0026iterationId=1075268\u0026masterSmartpopId=2683\u0026memberId=d4XOYsXP5WhKzF_aXnPhaPEdvLICCY-7WD5eTJx-u0wOgtQ4hDLRbQPaXAmfo9cFk9lAuGlwAwPIvdqYUt8jWCurlnYYDU5pYli8lozSM8jcIbVV_gUIDRUi\u0026p1=4770843\u0026ruleId=29\u0026showCompanion=1\u0026skipOffset=00%3A00%3A05\u0026smartpopId=13956\u0026sourceId=594678\u0026tag=girls\u0026trafficType=preroll\u0026usePreroll=true\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34734\u0026videoType=ol\r\ncf-ray: 982a43e5cc99120a-OSL\r\naccess-control-allow-origin: https://mail.scandalshack.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3778,"size_decoded":0,"mime_type":"text/xml; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":27,"dns":3,"connect":1,"send":0,"wait":31,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1758464670/208569547_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199","date":"2025-09-21T14:31:16.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 Aug 2025 09:19:42 GMT","end":"Sat, 01 Nov 2025 10:19:23 GMT"},"fingerprint":{"sha1":"44:F7:F2:B0:B9:E8:45:DC:8B:94:CD:26:E3:38:54:5D:E6:EB:A5:03","sha256":"3E:1B:F1:89:FB:27:09:F0:4C:55:6F:DC:12:3E:86:60:5C:2B:82:87:83:97:37:0B:5F:B3:17:E2:B7:9A:78:F8"}}},"request":{"raw":"GET /thumbs/1758464670/208569547_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.xlivrdr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17646\r\netag: \"e6608fb64d0996c8727d90e6dacf1146\"\r\nlast-modified: Sun, 21 Sep 2025 14:23:48 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 319\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 982a43eae8835691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17646,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e6608fb64d0996c8727d90e6dacf1146","sha1":"884035466172619b6ef7b665ec6e42a731f5dff1","sha256":"fad82fdd783a84229815b4b359e669684d25ae3c94e1c0d7db361a9184427a44","sha512":"84bfc9d590150c4d41781ff4c4ae56a4f1bf3e6befb409ccee1a4fb762ac1ade73bfadb9c341097a6ac38ab12a2682df2eca28a5cc1277c315d9abf27ea7a1e6","ssdeep":"384:HfT7vaEPNOG6nZ7JwKr0Kws2V8lu1XGsX+kj4nqbm8P9sJp:HfKEX6Z7mKrhC12SZ8V8PqJp","tlshash":"7282c0f60610cc42dea70e77798e7140c87809bf9e7f4a2e46216de7918515caf4bc47","first_seen":"2025-09-21T14:32:25.2896Z","last_seen":"2025-09-21T14:32:25.2896Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1758464670/161673124_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199","date":"2025-09-21T14:31:17.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 Aug 2025 09:19:42 GMT","end":"Sat, 01 Nov 2025 10:19:23 GMT"},"fingerprint":{"sha1":"44:F7:F2:B0:B9:E8:45:DC:8B:94:CD:26:E3:38:54:5D:E6:EB:A5:03","sha256":"3E:1B:F1:89:FB:27:09:F0:4C:55:6F:DC:12:3E:86:60:5C:2B:82:87:83:97:37:0B:5F:B3:17:E2:B7:9A:78:F8"}}},"request":{"raw":"GET /thumbs/1758464670/161673124_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.xlivrdr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8602\r\netag: \"aa8858f16966e07f2b29f6e8617e8b59\"\r\nlast-modified: Sun, 21 Sep 2025 14:24:02 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 380\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 982a43eb38e45691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8602,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"aa8858f16966e07f2b29f6e8617e8b59","sha1":"1255bf54af1209ffc036c64f47a5c6c052dd2970","sha256":"dd888ccb13797b087a9f0f7ac87526239908db44e9a4527be9a6f7a59ad692ad","sha512":"a9b9a33ae7418daa07e03375a48cf16d3c911f428049bdbc0d63a396016e654dc9d57f5248e6b298b5fc55aed481a52757604b55b95ea9e307d3791693093eb5","ssdeep":"192:A6W4D0SyrfEEOu7S4v0Q74S7ZEznHhxw51KSQr4OhwEsh5iChHyuW:zY1fESS9mPZEzHo5bCMLPW","tlshash":"4b02bfc081bec095e6e961a08bf44b6f816293bd94be004bdce69154eab2ac077312d7","first_seen":"2025-09-21T14:32:25.291419Z","last_seen":"2025-09-21T14:32:25.291419Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scandalshack.com/wp-content/plugins/add-to-any/addtoany.min.css?ver=1.16","fqdn":"scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"172.67.150.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:14.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scandalshack.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 23:54:49 GMT","end":"Tue, 28 Oct 2025 22:53:42 GMT"},"fingerprint":{"sha1":"BD:78:39:A6:81:9B:CE:CD:A7:D9:59:79:78:AC:AB:E2:36:4B:A0:D6","sha256":"AB:05:0C:75:B6:6C:8C:56:8B:28:A0:1D:62:11:3F:92:2C:0F:5F:DA:DA:0B:61:B8:E7:31:4D:C5:7F:E6:06:14"}}},"request":{"raw":"GET /wp-content/plugins/add-to-any/addtoany.min.css?ver=1.16 HTTP/1.1\r\nHost: scandalshack.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:14 GMT\r\ncontent-type: text/css\r\ncontent-length: 446\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 19 Sep 2026 17:26:55 GMT\r\nlast-modified: Wed, 12 Jul 2023 07:07:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 183859\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0tOtSv2qxq%2Ffyc8%2BxEOfAMiXDPUAho6FuyJyNum99nCfODqx4CY0xw1UKQLum%2B90iVpLxtOH9DLGU%2FWD7QEpEddNTFrQ7UOO5Rz6IE8v0h4%3D\"}]}\r\ncf-ray: 982a43dcded576ef-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1604,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1604), with no line terminators","md5":"2a489d28e2fc2088b3fe0bcda8417525","sha1":"af48dd19c11ceac12d2473b2b8e216da9d9d432c","sha256":"c19e3e4151ea4933fa9ba9703c51fe20ad469237771214b1c5001d1b107ddef5","sha512":"46f79ce0ebf4897749487b9180fceec67020429a6c6928bea7f4a0814422ef840110ed9e35b1e3d5b3ff040cde013b71df298d389afbbf361de70393bf90f19d","ssdeep":"","tlshash":"9c31698b939c86e4b463e17b1da912fc2c10f75a970315a5eb70f70c80cbd8c2679647","first_seen":"2023-07-14T14:43:13Z","last_seen":"2026-04-20T13:20:45.979975Z","times_seen":17328,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scandalshack.com/wp-content/plugins/mai-icons/icons/svgs/regular/arrow-right.svg","fqdn":"scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"172.67.150.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:14.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scandalshack.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 23:54:49 GMT","end":"Tue, 28 Oct 2025 22:53:42 GMT"},"fingerprint":{"sha1":"BD:78:39:A6:81:9B:CE:CD:A7:D9:59:79:78:AC:AB:E2:36:4B:A0:D6","sha256":"AB:05:0C:75:B6:6C:8C:56:8B:28:A0:1D:62:11:3F:92:2C:0F:5F:DA:DA:0B:61:B8:E7:31:4D:C5:7F:E6:06:14"}}},"request":{"raw":"GET /wp-content/plugins/mai-icons/icons/svgs/regular/arrow-right.svg HTTP/1.1\r\nHost: scandalshack.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://scandalshack.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scandalshack.com/wp-content/plugins/mai-engine/assets/css/footer.min.css?ver=2.37.0.71420252325\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:14 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 280\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 19 Sep 2026 17:26:55 GMT\r\nlast-modified: Fri, 06 Dec 2024 23:23:09 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 22715\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pA6qzYxbgyAHeDoYWmLedVCq0%2FRKqQFcnlwmKHG2FgDCY8%2Bv%2BtqpQGRzamfV%2BZwvJy%2Bi%2BVowPQ217dNuXqpKIYVNufaon3FkVF1dF0xS64U%3D\"}]}\r\ncf-ray: 982a43de8f1076ef-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":551,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"95b4390aed718fb748203c570c288440","sha1":"f5d3d29067b0b7a0b02895a3ea5ba628022ec9fe","sha256":"fb37c0910f2b02a5dc78d6ac61e7a9698c7edebc431ab6e1e335513320dcf417","sha512":"999d15cb5c63da5e04a49b67c9ab058ef9baf1975dcf58a9014dbb8777260b56e7970ca85c37a325503ddc692f86c141e0b646dd338e956465646de07abe54b3","ssdeep":"","tlshash":"a8f08b7b013194ab3aa51311f53a8a2fb40ab477206c06ecc265215a19f9dd3bd91bac","first_seen":"2025-04-24T14:16:10.751211Z","last_seen":"2026-04-01T20:23:47.853787Z","times_seen":49,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scandalshack.com/wp-content/plugins/mai-engine/assets/js/min/menus.min.js?ver=2.37.0.71420252325","fqdn":"scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"172.67.150.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:15.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scandalshack.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 23:54:49 GMT","end":"Tue, 28 Oct 2025 22:53:42 GMT"},"fingerprint":{"sha1":"BD:78:39:A6:81:9B:CE:CD:A7:D9:59:79:78:AC:AB:E2:36:4B:A0:D6","sha256":"AB:05:0C:75:B6:6C:8C:56:8B:28:A0:1D:62:11:3F:92:2C:0F:5F:DA:DA:0B:61:B8:E7:31:4D:C5:7F:E6:06:14"}}},"request":{"raw":"GET /wp-content/plugins/mai-engine/assets/js/min/menus.min.js?ver=2.37.0.71420252325 HTTP/1.1\r\nHost: scandalshack.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:15 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 880\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 19 Sep 2026 17:26:55 GMT\r\nlast-modified: Mon, 14 Jul 2025 23:25:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 22715\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hbZ%2B1RwyoAq7dljMQ6Nke8wTO2rB4cTpVPsAMwhr40Fv5LgG9IXDYxjwT2ewDymjm%2B0ZyPu1yRRJziQuNiPGolMKS44hsdLM0NpinnjqbVI%3D\"}]}\r\ncf-ray: 982a43dedf1776ef-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2912,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2912), with no line terminators","md5":"0defbf656291ce0ad96cd9b2b602a78d","sha1":"801ceaab01eb83e2ecc17be33b5963884c6690db","sha256":"fc95aa1d518907d03bd5abc610363655e5556978ca7fc8b9eca0a33a7872e822","sha512":"4981181abe71811677db6a85612003c2e8adf1c5c185e72db6a59a01f083f8ba811a1a5b07682d76c33613182185d45bf544e064e875c19f8cd43b6c088ceba0","ssdeep":"","tlshash":"765165faa1543a7b0aeb14e6f36da6d17b78206cd70b4921447ecc4d2d7dc8112f1ab4","first_seen":"2023-05-11T05:04:01Z","last_seen":"2026-04-18T06:10:39.705124Z","times_seen":86,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1758464760/212094101_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199","date":"2025-09-21T14:31:17.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 Aug 2025 09:19:42 GMT","end":"Sat, 01 Nov 2025 10:19:23 GMT"},"fingerprint":{"sha1":"44:F7:F2:B0:B9:E8:45:DC:8B:94:CD:26:E3:38:54:5D:E6:EB:A5:03","sha256":"3E:1B:F1:89:FB:27:09:F0:4C:55:6F:DC:12:3E:86:60:5C:2B:82:87:83:97:37:0B:5F:B3:17:E2:B7:9A:78:F8"}}},"request":{"raw":"GET /thumbs/1758464760/212094101_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.xlivrdr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10258\r\netag: \"5a9463e10eb5262996d7dce8a0de76d8\"\r\nlast-modified: Sun, 21 Sep 2025 14:25:35 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 297\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 982a43eb38e65691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10258,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5a9463e10eb5262996d7dce8a0de76d8","sha1":"394c460e89f0e90d8fe3bdefc19ca45ebb13fd00","sha256":"9156b021dde94bc6e9452a728d046ea514b6ee00c3379269990adaad75a14ca4","sha512":"9f68abe5dedaf469d6a17861330607314f595f087e0dd97d6dd111e0fceb0601fdd38258f9e63722b95bfc201ec22775fba2f1617af9293c2eb4d2eb36d83686","ssdeep":"192:yFsiLX5HfzON9IrTN6iKzL00HHRaPyPRVasR08YsaCCL1/+fJvi+pohnB+b:yTBfIgoL0BPovHR0waCEqh18gb","tlshash":"b022aff53f240dab1011f60cc30c8ab623a61d0de78a3769ab5e8b30d584217aedf954","first_seen":"2025-09-21T14:32:25.296966Z","last_seen":"2025-09-21T14:32:25.296966Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.redd.it/8ehjxshcmi871.jpg","fqdn":"i.redd.it","domain":"redd.it","tld":"it"},"ip":{"addr":"151.101.65.140","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:14.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.redd.it","organization":"REDDIT, INC."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Sat, 12 Jul 2025 00:00:00 GMT","end":"Wed, 07 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8B:29:12:DB:33:A6:1F:39:07:AF:CA:69:1F:70:D6:91:A8:FD:D9:CF","sha256":"FB:3A:CD:DA:83:D9:AB:68:DF:27:33:DE:4D:C7:FA:17:D2:67:C4:73:9A:75:FD:E5:97:56:87:DC:42:88:C2:3A"}}},"request":{"raw":"GET /8ehjxshcmi871.jpg HTTP/1.1\r\nHost: i.redd.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 01 Jul 2021 02:50:08 GMT\r\netag: \"9b76155508ab01d7b833c5ea60c1ce7c\"\r\nexpires: Thu, 31 Dec 2037 23:59:59 GMT\r\nx-amz-version-id: null\r\ncontent-type: image/jpeg\r\nx-canonical-filename-image-generation: 1\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 21 Sep 2025 14:31:14 GMT\r\nserver: snooserv\r\nreport-to: {\"group\": \"w3-reporting-nel\", \"max_age\": 14400, \"include_subdomains\": true,  \"endpoints\": [{ \"url\": \"https://w3-reporting-nel.reddit.com/reports\" }]}, {\"group\": \"w3-reporting\", \"max_age\": 14400, \"include_subdomains\": true, \"endpoints\": [{ \"url\": \"https://w3-reporting.reddit.com/reports\" }]}, {\"group\": \"w3-reporting-csp\", \"max_age\": 14400, \"include_subdomains\": true, \"endpoints\": [{ \"url\": \"https://w3-reporting-csp.reddit.com/reports\" }]}\r\nnel: {\"report_to\": \"w3-reporting-nel\", \"max_age\": 14400, \"include_subdomains\": false, \"success_fraction\": 1.0, \"failure_fraction\": 1.0}\r\ncontent-length: 191657\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":191657,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1242x1862, components 3","md5":"9b76155508ab01d7b833c5ea60c1ce7c","sha1":"15187a6f2b652cbab95c22dbec3300c8d8f614ee","sha256":"fb3b89c52339975c398ca7f6862a45553dc39152afb27306d4751792cdfaa08b","sha512":"4890f12a85cbd813a79c4f3bebf7a12f42fcf2efd433a258544bfb9c18497660b0e3a2c7a20cafb53a7e62eb7777e3aee9e33a7030430eea80edeaa76630784b","ssdeep":"3072:qdWUf2vs43/Jn2QAx58XG9U/p+oJesCaEAkzemnQtRXF5HES+fk8FdTmUnT30UfG:KWUIs43dAx58XEoJefIcemnQtRXT+MYe","tlshash":"fa1413629d2ffe75f405c9f22ccb1b7640c8beb525eae2177e524e6a73059e03623049","first_seen":"2025-09-21T14:32:25.298166Z","last_seen":"2025-09-21T14:32:25.298166Z","times_seen":1,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":200,"dns":0,"connect":26,"send":0,"wait":29,"receive":66,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scandalshack.com/wp-content/plugins/ajax-search-lite/js/min/plugin/merged/asl.min.js?ver=4777","fqdn":"scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"172.67.150.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:15.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scandalshack.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 23:54:49 GMT","end":"Tue, 28 Oct 2025 22:53:42 GMT"},"fingerprint":{"sha1":"BD:78:39:A6:81:9B:CE:CD:A7:D9:59:79:78:AC:AB:E2:36:4B:A0:D6","sha256":"AB:05:0C:75:B6:6C:8C:56:8B:28:A0:1D:62:11:3F:92:2C:0F:5F:DA:DA:0B:61:B8:E7:31:4D:C5:7F:E6:06:14"}}},"request":{"raw":"GET /wp-content/plugins/ajax-search-lite/js/min/plugin/merged/asl.min.js?ver=4777 HTTP/1.1\r\nHost: scandalshack.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:15 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 20999\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 19 Sep 2026 20:06:03 GMT\r\nlast-modified: Mon, 25 Aug 2025 23:27:51 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 22715\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s3PlVXxAQKycjDKfuKspCKOKrEGSPXSMMOSgrFjiXsZlRhORxfODQc8bIjvHacFgUbb1yRfraNpJjQVR5s5QERfpMrIzZge28Xzfp2fyH4I%3D\"}]}\r\ncf-ray: 982a43deef2376ef-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":76903,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (60495)","md5":"368d00d84d9b4319c65fabfce29d659e","sha1":"1c8aa8d58bf35632c0d29176f4e1ec81bbb93bf1","sha256":"74704e4add8489b77a013b06e2546be0bc5290aace6601dbc16997f0f2dbd190","sha512":"3176a41a93e5c3683ef3ec6853f9b911ad1a4ad85b37e3f9fc3c5764972cd903967622224d2f87211f12bfc6a98daf4d637a88245116f609e71024584a3aafcf","ssdeep":"1536:EGMw7ld7tY4YmZDibici5ViYaTivniISMXne4I6f63wwlmbYCoaoxjL7Tdc7:b9SMXemf63wwlmbYCoaob8","tlshash":"7a73e98c7291387742bf60b6a07b6509733358ad640a40b8b26cccf36db5f4615a7fb9","first_seen":"2025-08-28T19:38:48.80591Z","last_seen":"2026-04-20T04:47:34.611272Z","times_seen":231,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/sm.25.html#type=core\u0026event=load","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:15.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.addtoany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 08:53:15 GMT","end":"Mon, 24 Nov 2025 09:53:12 GMT"},"fingerprint":{"sha1":"F7:A4:6C:FF:03:AC:D3:2A:92:BA:EC:F2:67:5A:00:B2:0D:40:72:F2","sha256":"89:4B:61:9A:22:6F:77:70:77:50:57:C1:3F:29:21:86:C2:81:9A:36:F7:98:1A:DD:0B:01:71:03:F2:19:AA:EC"}}},"request":{"raw":"GET /menu/sm.25.html HTTP/1.1\r\nHost: static.addtoany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:15 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000, immutable\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xY5jy6W5VcWwdQ3eTSqqMdwqohmiJkboypDQ%2FngznuyEX2oSNY9%2F%2FMakoYnsyRxQpLSG6u1Dkrg53jpEjU2GRUw%2FzA9shBZpnIuNjZ6faUYt%2B12IA0W%2FBiIIGgzQYh3yR5bErJo1VjtGVPYNW8l5nrij\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 13283\r\nlast-modified: Sun, 21 Sep 2025 10:49:52 GMT\r\ncf-ray: 982a43e40f9d0daa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":716,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (624)","md5":"41b7ed0cbe240173eea85148fcba633e","sha1":"39acd5fe099974486a1c9ba11ba0fe7be6bc97ca","sha256":"274d4116239b63097bb7c16e56e27cbb5a77be20392fb8e2317c0a0235185cad","sha512":"1ee1d21b138a9f55f823b93d809b3bc58453ddfc3b3ee4d00a1010bbd4ec296546277c6777819cfb744c393ba93fe7578b60ccf0259fd17901f4542714d6c06f","ssdeep":"","tlshash":"c701448bf415382d9673172434e93d89d87e93609c402730b28f62e746c47e75b07b95","first_seen":"2024-01-05T10:14:09Z","last_seen":"2026-04-20T13:08:06.480824Z","times_seen":39022,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1758464880/44985172_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199","date":"2025-09-21T14:31:16.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 Aug 2025 09:19:42 GMT","end":"Sat, 01 Nov 2025 10:19:23 GMT"},"fingerprint":{"sha1":"44:F7:F2:B0:B9:E8:45:DC:8B:94:CD:26:E3:38:54:5D:E6:EB:A5:03","sha256":"3E:1B:F1:89:FB:27:09:F0:4C:55:6F:DC:12:3E:86:60:5C:2B:82:87:83:97:37:0B:5F:B3:17:E2:B7:9A:78:F8"}}},"request":{"raw":"GET /thumbs/1758464880/44985172_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.xlivrdr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13806\r\netag: \"c74af9ee688d0411109f45fd764c6eab\"\r\nlast-modified: Sun, 21 Sep 2025 14:27:29 GMT\r\nx-proxy-cache-orig: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nage: 160\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 982a43eb08b25691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13806,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c74af9ee688d0411109f45fd764c6eab","sha1":"275796181ee761403e705cec927fc3ddd4368b68","sha256":"17bb739ac31ad1ea4f6abdcd253c599d27d43f3b5e41295e10979218d7e6795a","sha512":"42c1ade078bb00546eadb9710d2a25d4796855d0696aca4159c54703900d2f4870a8bb9fa69a65bfff0a05da2cb6a521150ba4f650aa6f90b2d970d2e99a68e2","ssdeep":"384:gfuMizPePbqPP8WBjv10Vbc5EKiJ6inQf:gfuHqPbA8Wdv10VY5EtJQ","tlshash":"0f52d1c536631d9ba583399f9568f21fd11e17c448e087e6d2d6f26004c63b1e9c698f","first_seen":"2025-09-21T14:32:25.301572Z","last_seen":"2025-09-21T14:32:25.301572Z","times_seen":1,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scandalshack.com/wp-content/plugins/mai-engine/assets/css/desktop.min.css?ver=2.37.0.71420252325","fqdn":"scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"172.67.150.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:14.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scandalshack.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 23:54:49 GMT","end":"Tue, 28 Oct 2025 22:53:42 GMT"},"fingerprint":{"sha1":"BD:78:39:A6:81:9B:CE:CD:A7:D9:59:79:78:AC:AB:E2:36:4B:A0:D6","sha256":"AB:05:0C:75:B6:6C:8C:56:8B:28:A0:1D:62:11:3F:92:2C:0F:5F:DA:DA:0B:61:B8:E7:31:4D:C5:7F:E6:06:14"}}},"request":{"raw":"GET /wp-content/plugins/mai-engine/assets/css/desktop.min.css?ver=2.37.0.71420252325 HTTP/1.1\r\nHost: scandalshack.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:14 GMT\r\ncontent-type: text/css\r\ncontent-length: 199\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 19 Sep 2026 17:26:55 GMT\r\nlast-modified: Mon, 14 Jul 2025 23:25:37 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 183859\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wa3pgwRPPXUz%2BDwoV1yxj6p0H8jiaapyi%2BI6qsinM9Ywqhei0G5%2B8oOf8THAq2NKLuUjxea3jfr6FOTDKKQ1jTLxADDR5DjfE7h2q%2B13TVU%3D\"}]}\r\ncf-ray: 982a43dcded476ef-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":627,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (627), with no line terminators","md5":"8fdb07bdc0e41c712e88b7aab393e020","sha1":"13d5dea987b1f56d0ded0598f3ee54f094672ad7","sha256":"6c00e3fb1e0e1e76460d147ce8c9ab6ef1d0ba783078232f9a4af3ad95a4ef64","sha512":"10b1e5380c798ba8a7ecca630d11e123c928345bf5316b0989b79ba05808850b85ea7a724001a23397b891f816f9526ec561d421c0d952c28ea756b8e9811825","ssdeep":"","tlshash":"70f09988b64478188e358134f3bd6d16e8a4be40cdd692d9b8f5741f1bcf1a0c0c5b2a","first_seen":"2023-05-11T05:04:01Z","last_seen":"2026-04-18T06:10:39.643581Z","times_seen":107,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.scandalshack.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"mail.scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"172.67.150.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:14.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scandalshack.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 23:54:49 GMT","end":"Tue, 28 Oct 2025 22:53:42 GMT"},"fingerprint":{"sha1":"BD:78:39:A6:81:9B:CE:CD:A7:D9:59:79:78:AC:AB:E2:36:4B:A0:D6","sha256":"AB:05:0C:75:B6:6C:8C:56:8B:28:A0:1D:62:11:3F:92:2C:0F:5F:DA:DA:0B:61:B8:E7:31:4D:C5:7F:E6:06:14"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: mail.scandalshack.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Sun, 21 Sep 2025 15:19:14 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p0Pn85fPYt1FpNCwafSGj%2Ft0W4ylwLxWB%2FX%2BIHgk%2BDPc5qICf8ow9zHiYiT7tR3vDSSY03x8hwkDreUOASJD%2Bt28Q0lAzoNNXhhyXodIw%2BP7CL5S%2BQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Sun, 21 Sep 2025 14:31:14 GMT\r\ncf-ray: 982a43dcaec876ef-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-20T13:57:39.97927Z","times_seen":99005,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scandalshack.com/wp-content/fonts/merriweather/920604aefa08ab48e149551010ed53bc","fqdn":"scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"172.67.150.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:15.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scandalshack.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 23:54:49 GMT","end":"Tue, 28 Oct 2025 22:53:42 GMT"},"fingerprint":{"sha1":"BD:78:39:A6:81:9B:CE:CD:A7:D9:59:79:78:AC:AB:E2:36:4B:A0:D6","sha256":"AB:05:0C:75:B6:6C:8C:56:8B:28:A0:1D:62:11:3F:92:2C:0F:5F:DA:DA:0B:61:B8:E7:31:4D:C5:7F:E6:06:14"}}},"request":{"raw":"GET /wp-content/fonts/merriweather/920604aefa08ab48e149551010ed53bc HTTP/1.1\r\nHost: scandalshack.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mail.scandalshack.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:15 GMT\r\ncontent-length: 97548\r\nlast-modified: Thu, 04 Sep 2025 00:23:37 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YG29395h3kXLYpylZ%2Fd%2FkYeD%2F%2FB1UUV3QyRp2j3BksSqUM0oKw9aLWAJQEcTvcbljrQeyWYBDvfKF7Hnem04eadO3vHqD%2BT2rFNfnp%2BmcR0%3D\"}]}\r\ncf-ray: 982a43df3f3076ef-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":97548,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 97548, version 1.0","md5":"5c271de154f212a7ba7b558561c7c51e","sha1":"eb42e1728464a0222057e7262480eec91b1fff24","sha256":"4fbe8dd9c23b1fd62a988bb8a69b8e692d810f773d9ef6ebca2ba2760c7b11ee","sha512":"78e577b7b65425239af239c347478ec27f9297bd2a5984e9b310807891fdbfa0d5b0da222e5254bbf845fe1e18d333091366feca0b3bd805ccd0c962d160d7b9","ssdeep":"1536:GSbxeq2JydX5fB9SLWORqAiH4qZwj+MXZh21b+yBs5WKnpqzkSNZUgoT7o2XAh:GWCydxTvORqAwb+4gIs0EKkSNG7o2XAh","tlshash":"539312aecbb842f761f2d4b0854e48dc88c2c07322b7bc969e7445d552a88f0759af6d","first_seen":"2025-03-14T19:55:13.16745Z","last_seen":"2026-04-20T07:46:03.624888Z","times_seen":1584,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stripchat.com/api/front/v2/models/username/Daddyslut2_0/chat","fqdn":"stripchat.com","domain":"stripchat.com","tld":"com"},"ip":{"addr":"104.17.118.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199","date":"2025-09-21T14:31:17.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stripchat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 00:57:17 GMT","end":"Tue, 16 Dec 2025 01:56:40 GMT"},"fingerprint":{"sha1":"25:09:79:06:BE:7A:1B:4F:5A:5B:26:89:9C:03:67:1F:82:52:A7:24","sha256":"26:9C:85:19:B0:19:BB:85:99:DC:A4:32:AD:09:96:A8:98:3A:9A:06:A4:29:65:E6:31:4A:01:2F:77:1D:9E:69"}}},"request":{"raw":"GET /api/front/v2/models/username/Daddyslut2_0/chat HTTP/1.1\r\nHost: stripchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.xlivrdr.com/\r\nOrigin: https://creative.xlivrdr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:17 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\nx-api-version: 11.3.62\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache\r\nx-backend: juliett-backend-chat-579bd87c46-s4rs5\r\ncontent-encoding: gzip\r\nx-cache-status: HIT\r\naccess-control-allow-origin: https://creative.xlivrdr.com\r\nlast-modified: Sun, 21 Sep 2025 14:31:17 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nset-cookie: __cf_bm=vVGqH0HQ4j87nNCEfFGHfpKx_ASY8z7dMELIkwxfiRQ-1758465077-1.0.1.1-gV8UMI_3Ng4IpHsnFVphN9xxuLXKXINATX43F0kiLXVKfXL4KuAnvQzeOes443KMu71EjUA8DUX9BEx_pIxTshOnIpjIO6HbzHRjXC4sT3mp4NYuqlZG_u4kAJZoaAYd; path=/; expires=Sun, 21-Sep-25 15:01:17 GMT; domain=.stripchat.com; HttpOnly; Secure; SameSite=None\n_cfuvid=BZb0._g6uYKi2m1inbznURDh9XOKMHQxmKCqqmEuOco-1758465077084-0.0.1.1-604800000; path=/; domain=.stripchat.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 982a43eb6a1cb518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88965,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a3e171a3ed5812fb0c3cd47419ff497c","sha1":"3735fcc4878b6b96f871a2f16daecf51c44b9a81","sha256":"f79334531392ea02e2a5005f8d605dc1cb87e35549169412600c58ff03b3f2d2","sha512":"db11bbe6c05817cab52a93b7ba909c4cee37679e36b4c271ba420becbbe5e20c014e2fc84f7c126e157d102ed26ab35b3a8949e7cec0364d1608ef00a4555e40","ssdeep":"384:IaAaxa1av233auavmaBacaXaTaSaclmBSkS+nKFGFdYkSsOVbqR0hy9MRuOK:VdYKalpVOK","tlshash":"0b937a1c4d6d1bdd380b26c4eb49be4b43ac68727245b8a8e97d8b2178df5e47c39807","first_seen":"2025-09-21T14:32:25.266267Z","last_seen":"2025-09-21T14:32:25.266267Z","times_seen":1,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":12,"dns":3,"connect":1,"send":0,"wait":65,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.media-amazon.com/images/M/MV5BODVjMjQzZDktOTgyMC00ZTk5LTkxZDQtNTFiYzYwYTg0ODJlXkEyXkFqcGc@._V1_.jpg","fqdn":"m.media-amazon.com","domain":"media-amazon.com","tld":"com"},"ip":{"addr":"23.36.77.57","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:16.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.media-amazon.com","organization":"Amazon.com Inc."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 12 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"52:9F:14:7C:1C:DE:2E:2B:10:AD:C2:84:42:99:77:E4:25:83:64:FA","sha256":"4E:45:D6:E2:16:98:72:62:8C:A1:C0:32:13:5A:21:2F:8B:34:89:64:D9:3E:D0:C9:B8:80:A0:20:36:49:D4:3A"}}},"request":{"raw":"GET /images/M/MV5BODVjMjQzZDktOTgyMC00ZTk5LTkxZDQtNTFiYzYwYTg0ODJlXkEyXkFqcGc@._V1_.jpg HTTP/1.1\r\nHost: m.media-amazon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 190836\r\nserver: Server\r\nx-amz-ir-id: 12867d03-2d78-4a5b-b556-04946065be19\r\nlast-modified: Mon, 16 Jan 2017 19:53:22 GMT\r\nsurrogate-key: x-cache-741 /images/M/MV5BODVjMjQzZDktOTgyMC00ZTk5LTkxZDQtNTFiYzYwYTg0ODJlXkEyXkFqcGc@\r\nx-nginx-cache-status: HIT\r\naccept-ranges: bytes\r\npeer-cache: Hit\r\ncache-control: public, max-age=630720000\r\nexpires: Sat, 16 Sep 2045 14:31:16 GMT\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nx-cache: Hit from akamai\r\nstrict-transport-security: max-age=86400\r\nakamai-grn: 0.354d2417.1758465076.27cb2b8c\r\nserver-timing: provider;desc=\"ak\"\r\ntiming-allow-origin: https://mail.scandalshack.com/\r\nakamai-cache-status: Miss from child, Hit from parent\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":190836,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 1000x1500, components 3","md5":"064075e145888b23f11387476d572206","sha1":"820ca22e29f92895f7e7537f429ce6ab5525eb82","sha256":"3250c61c7b91cd5a65d8a553d2e14349a9fd5b646940788954247fca23b9c329","sha512":"0ad6bf728f0745e13105f51dcfef8009bfb0bf387b9adc91fc03d6dc7ecdd985d95b367d3571967a13dcf865f350d79ccd7ffe3e5f27067b2d1ab4c32c02dd2e","ssdeep":"3072:H0yx1BxJKVNGIq1eVdF0nnRkLe901wDob+koSPYa8XLYp4wT+Tm4bR5gfawnrS1/:H/H0bGbof0nRf12+koSg1A4wWTbRMnrU","tlshash":"e5142259e6cc0856ee3e42f8e732b70490bb2e4e4bd06c0d9645836471cfb978129dbd","first_seen":"2025-09-21T14:32:25.304222Z","last_seen":"2025-09-21T14:32:25.304222Z","times_seen":1,"resource_available":false,"data":null}},"time_used":574,"timings":{"blocked":263,"dns":227,"connect":1,"send":0,"wait":18,"receive":7,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.xlivrdr.com/api/models?landing=LPOmega\u0026masterSmartpopId=1738\u0026quality=240p\u0026smartpopId=1589\u0026trafficType=interstitial\u0026sortBy=rankScore\u0026stripcashR=0\u0026forceClient=0\u0026usePreroll=1\u0026modelPromotion=0\u0026limit=20","fqdn":"go.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"172.64.147.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199","date":"2025-09-21T14:31:16.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.xlivrdr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:02:48 GMT","end":"Sun, 07 Dec 2025 09:02:14 GMT"},"fingerprint":{"sha1":"18:51:33:CF:A8:88:6B:8C:BA:0C:FC:AD:26:65:64:F8:F9:5A:32:CA","sha256":"37:C7:74:68:D2:46:40:59:86:A9:99:8C:2C:5E:F6:86:48:C4:47:28:01:2B:8E:2C:93:DF:31:57:81:AD:07:A0"}}},"request":{"raw":"GET /api/models?landing=LPOmega\u0026masterSmartpopId=1738\u0026quality=240p\u0026smartpopId=1589\u0026trafficType=interstitial\u0026sortBy=rankScore\u0026stripcashR=0\u0026forceClient=0\u0026usePreroll=1\u0026modelPromotion=0\u0026limit=20 HTTP/1.1\r\nHost: go.xlivrdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.xlivrdr.com/\r\nOrigin: https://creative.xlivrdr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-type: application/json\r\ncf-ray: 982a43ea4ab18deb-OSL\r\naccess-control-allow-origin: https://creative.xlivrdr.com\r\naccess-control-allow-credentials: true\r\nvary: Origin, Accept-Encoding\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 21 Sep 2025 14:31:16 GMT\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37798,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1c77cc8d97b3ebb966e33076c79564e0","sha1":"b5acb938a9cb34c260b4d470751ff04abbe4746f","sha256":"2836514ae6832f7a026d458877ba40d15b0f87e3766e21dcdb19abb6f112964f","sha512":"62b9948515bc802fe0d3721f3bf9b275094b926cf473cd391241cc00831d373f97521771b641e26381f6712b5cd43857406a38c6191b805351e2b7185303f910","ssdeep":"768:VMtSpEPBt6hk/GtEzMoKtzW9C+tZEF2rt5kn2HtMrVRPYFtO1xX/8t3qeQetxsLf:V6Sp6b6hOoEztUzWggZEo55k2NMrnPYQ","tlshash":"a80310f753cc5c6b0f0122cdca8d740de9aa1b37a5c4b39586c98e9b05b6dea111cf62","first_seen":"2025-09-21T14:32:25.305369Z","last_seen":"2025-09-21T14:32:25.305369Z","times_seen":1,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1758464640/163031604_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199","date":"2025-09-21T14:31:16.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 Aug 2025 09:19:42 GMT","end":"Sat, 01 Nov 2025 10:19:23 GMT"},"fingerprint":{"sha1":"44:F7:F2:B0:B9:E8:45:DC:8B:94:CD:26:E3:38:54:5D:E6:EB:A5:03","sha256":"3E:1B:F1:89:FB:27:09:F0:4C:55:6F:DC:12:3E:86:60:5C:2B:82:87:83:97:37:0B:5F:B3:17:E2:B7:9A:78:F8"}}},"request":{"raw":"GET /thumbs/1758464640/163031604_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.xlivrdr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9334\r\netag: \"f4e9cd2fde8d68b60c0b3624efe20d16\"\r\nlast-modified: Sun, 21 Sep 2025 14:23:29 GMT\r\nx-proxy-cache-orig: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nage: 415\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 982a43eae8745691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9334,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f4e9cd2fde8d68b60c0b3624efe20d16","sha1":"69857a0662ff6406c0c46b9326d5408023466556","sha256":"f81e4e92f298bf436ee2c8c8edc1a6b374022b92153490bcff4229c682bcd67b","sha512":"1a5ba15fd871422c847562ec0828ab6392b9f58311ab18d63dbb85cb70d8a2e794bba4dd1764675a7c656c7d11c763c7e0f99727932bada30bab31ecc7c10bd2","ssdeep":"192:UN7Fbij1/pzG+CqlQootzDt92SuJndbKfPF9ydc3Dw1N:Udsj15CqlQooJySAsTEc3Dw1N","tlshash":"0812ae729ea3a3e55781c6aa0af06e7d71064838bedb964c6c4175f73d1deb0154024d","first_seen":"2025-09-21T14:32:25.306452Z","last_seen":"2025-09-21T14:32:25.306452Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1758464310/96560983_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199","date":"2025-09-21T14:31:17.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 Aug 2025 09:19:42 GMT","end":"Sat, 01 Nov 2025 10:19:23 GMT"},"fingerprint":{"sha1":"44:F7:F2:B0:B9:E8:45:DC:8B:94:CD:26:E3:38:54:5D:E6:EB:A5:03","sha256":"3E:1B:F1:89:FB:27:09:F0:4C:55:6F:DC:12:3E:86:60:5C:2B:82:87:83:97:37:0B:5F:B3:17:E2:B7:9A:78:F8"}}},"request":{"raw":"GET /thumbs/1758464310/96560983_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.xlivrdr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19264\r\netag: \"c1f53b07d5806c4348e94498e3eb310c\"\r\nlast-modified: Sun, 21 Sep 2025 14:18:39 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 628\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 982a43eb28ce5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19264,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c1f53b07d5806c4348e94498e3eb310c","sha1":"1782fff1fce8e94d00cc0a66a904d87dd518c73f","sha256":"3e53dee08d7c0cc7ac107196d79d9547a6c6f5bf36abc2dd28900c7416a2d465","sha512":"e8529be94bbc66a4846dda2009a7facea5b04420d2bc9f77901b6db8b02ae978ba35f6ef36e89fd9d5f1eae0d691a0c15d3f26378a5eb7098cd21a6b11d3e560","ssdeep":"384:FakcbQMXDXgljbFeoBzyJbbjlAsV47zjNA+wMW66PlioJ:FqTzg93BuaA47zjNi62lz","tlshash":"1a82f0278931b7d091844ef205c3a5f12eba750d10985efbddeab5c574baec23b44e06","first_seen":"2025-09-21T14:32:25.309002Z","last_seen":"2025-09-21T14:32:25.309002Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/kV5jn5bm/z.webp","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.6","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:16.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:17:47 GMT","end":"Sun, 16 Nov 2025 07:17:46 GMT"},"fingerprint":{"sha1":"30:62:E2:16:F0:8D:8F:C4:30:EF:67:44:60:2F:45:29:D1:5B:AF:94","sha256":"EE:AB:93:C9:6B:44:94:94:F6:EE:CA:98:DE:CE:BF:A6:25:9F:C8:76:A5:43:59:77:38:DD:D2:23:F7:9C:B1:70"}}},"request":{"raw":"GET /kV5jn5bm/z.webp HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 85352\r\nlast-modified: Fri, 19 Sep 2025 22:55:28 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85352,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1080x1350, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"36962cfce88b49b2e60fe3a8e8b1f2f8","sha1":"2bce6f287b6e1e06f2f62231a4ac88a80de756dc","sha256":"8116806bdd4dd94326665accc6e7c090937d2d2e90600afdd1fb561b70521350","sha512":"3e15392af8f993592ac74eadd17a770779f46ba0a3ff8c09cd5b87a1b4585622738a7b6f5c816bd19304441a0b7696e4118e273ace74b04ae89921ff5be8cfb6","ssdeep":"1536:7KB2Qj2uQRG3bT8Xzt4dzDeZWwONl7z94JAhgw4OTn3wlFHbrS5y71L3:5y2uQoaBmf914AgnOT3C1bre83","tlshash":"4683124c01ff95b58ef6bf6e54dd1bc5a27cb4270f17ea152c4e3b1210611addd89220","first_seen":"2025-09-21T14:32:25.310557Z","last_seen":"2025-09-21T14:32:25.310557Z","times_seen":1,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":49,"dns":1,"connect":22,"send":0,"wait":24,"receive":83,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapchatvip.com/checkUrl","fqdn":"fapchatvip.com","domain":"fapchatvip.com","tld":"com"},"ip":{"addr":"88.208.20.10","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199","date":"2025-09-21T14:31:17.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapchatvip.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 14:45:10 GMT","end":"Mon, 24 Nov 2025 14:45:09 GMT"},"fingerprint":{"sha1":"0B:C6:65:C7:CA:31:38:2F:34:DD:CB:1F:43:13:27:0E:01:37:59:79","sha256":"E4:4F:62:8E:F6:87:39:9F:35:E0:6B:45:78:93:0E:B4:8B:F9:D4:0E:40:91:DB:AB:48:8D:B0:4C:C7:B5:A8:D8"}}},"request":{"raw":"GET /checkUrl HTTP/1.1\r\nHost: fapchatvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.xlivrdr.com/\r\nOrigin: https://creative.xlivrdr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\naccess-control-allow-origin: https://creative.xlivrdr.com\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: application/json\r\ndate: Sun, 21 Sep 2025 14:31:17 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-length: 15\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7fb97eb7c8636552ad068f6d56b5ea34","sha1":"b69679936779fb02503bc0fe1374a737cc762ecb","sha256":"e78008828abaa93c4462e326ef384dcda1443352a0f24bdeedada6a6fdbfd1d5","sha512":"b9a8b6626fe32bc433f46e6726523b51029398d691b76006c2ae7c0aea25e2296dd35587c6e45bb94363de8e30b66667015aa1542d75e0db4eaf3edfe3680d04","ssdeep":"","tlshash":"bc60003c00000003c0c033003f03030000000030cf0000c000c0000000c00000000003","first_seen":"2023-07-14T21:39:19Z","last_seen":"2026-04-20T12:05:35.190934Z","times_seen":7746,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":67,"dns":3,"connect":23,"send":0,"wait":18,"receive":1,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.xlivrdr.com/app/domain-checker/check-result","fqdn":"go.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"172.64.147.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199","date":"2025-09-21T14:31:17.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.xlivrdr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:02:48 GMT","end":"Sun, 07 Dec 2025 09:02:14 GMT"},"fingerprint":{"sha1":"18:51:33:CF:A8:88:6B:8C:BA:0C:FC:AD:26:65:64:F8:F9:5A:32:CA","sha256":"37:C7:74:68:D2:46:40:59:86:A9:99:8C:2C:5E:F6:86:48:C4:47:28:01:2B:8E:2C:93:DF:31:57:81:AD:07:A0"}}},"request":{"raw":"POST /app/domain-checker/check-result HTTP/1.1\r\nHost: go.xlivrdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.xlivrdr.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 239\r\nOrigin: https://creative.xlivrdr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Sun, 21 Sep 2025 14:31:17 GMT\r\ncf-ray: 982a43ec9e8156c1-OSL\r\naccess-control-allow-origin: https://creative.xlivrdr.com\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scandalshack.com/wp-content/themes/genesis/lib/js/skip-links.min.js?ver=3.6.0","fqdn":"scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"172.67.150.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:15.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scandalshack.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 23:54:49 GMT","end":"Tue, 28 Oct 2025 22:53:42 GMT"},"fingerprint":{"sha1":"BD:78:39:A6:81:9B:CE:CD:A7:D9:59:79:78:AC:AB:E2:36:4B:A0:D6","sha256":"AB:05:0C:75:B6:6C:8C:56:8B:28:A0:1D:62:11:3F:92:2C:0F:5F:DA:DA:0B:61:B8:E7:31:4D:C5:7F:E6:06:14"}}},"request":{"raw":"GET /wp-content/themes/genesis/lib/js/skip-links.min.js?ver=3.6.0 HTTP/1.1\r\nHost: scandalshack.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:15 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 175\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 19 Sep 2026 17:26:55 GMT\r\nlast-modified: Fri, 21 Mar 2025 11:10:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 22715\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QYusZYzfyCrkkdj1gRGw%2F%2BTec%2Bx%2FjiHA2iMwKj%2F%2BzflWQmDOzqtlZmTVvwBDIl2KiZO6iqccwgcS6jY9cX8ceVgqfqk2uhjXN1rh0gbdV2s%3D\"}]}\r\ncf-ray: 982a43deef2476ef-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":371,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (371), with no line terminators","md5":"fb15eaa075318b3b0f17cb7a42920492","sha1":"06fffb9183f11b49154dd145c3c02d577ac45a77","sha256":"c810f9eb5d42e701bd08ff11ddcde25b90410be300630683fe356eebf0884199","sha512":"b84452078fc060a9e83beb70804e421b8f283f735008c98f4e611493cde38881af724498a93070323b94ee03764747207eec46630441b7dd7a2297d14091eb19","ssdeep":"","tlshash":"8ae026e7298602b94d946763578fbb8d5db41a83ec408862940089f07d9cfe3433ae91","first_seen":"2025-04-01T08:50:32.465448Z","last_seen":"2026-04-20T13:38:05.295603Z","times_seen":1905,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scandalshack.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"172.67.150.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:15.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scandalshack.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 23:54:49 GMT","end":"Tue, 28 Oct 2025 22:53:42 GMT"},"fingerprint":{"sha1":"BD:78:39:A6:81:9B:CE:CD:A7:D9:59:79:78:AC:AB:E2:36:4B:A0:D6","sha256":"AB:05:0C:75:B6:6C:8C:56:8B:28:A0:1D:62:11:3F:92:2C:0F:5F:DA:DA:0B:61:B8:E7:31:4D:C5:7F:E6:06:14"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: scandalshack.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:15 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 29744\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 19 Sep 2026 20:06:03 GMT\r\nlast-modified: Tue, 29 Aug 2023 03:44:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 22715\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8Kbmm%2FxlI5Q8R0fOtYpQslkdAm7F39rl7px%2FsMRYo3TVacqApR6aiqNVeWCf8mnD51AQRqM%2BT39uF7bz8672Pg5UyuUyf8bi%2BLabxLEUcxI%3D\"}]}\r\ncf-ray: 982a43deff2976ef-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-20T14:00:50.305232Z","times_seen":729242,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.xlivrdr.com/app/domain-checker/get-check","fqdn":"go.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"172.64.147.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199","date":"2025-09-21T14:31:16.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.xlivrdr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:02:48 GMT","end":"Sun, 07 Dec 2025 09:02:14 GMT"},"fingerprint":{"sha1":"18:51:33:CF:A8:88:6B:8C:BA:0C:FC:AD:26:65:64:F8:F9:5A:32:CA","sha256":"37:C7:74:68:D2:46:40:59:86:A9:99:8C:2C:5E:F6:86:48:C4:47:28:01:2B:8E:2C:93:DF:31:57:81:AD:07:A0"}}},"request":{"raw":"POST /app/domain-checker/get-check HTTP/1.1\r\nHost: go.xlivrdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.xlivrdr.com/\r\nOrigin: https://creative.xlivrdr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-type: application/json\r\ncf-ray: 982a43eabd0a56c1-OSL\r\naccess-control-allow-origin: https://creative.xlivrdr.com\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":197,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b3e258a9085bc593d5368d4a53bcb870","sha1":"daf5d503fea5a2cf5548b4952bb60f350fd8a1ea","sha256":"375ac4dec0ac94205263fa3ccbe5350c4935a96b35b958d503c77326cf6e83b7","sha512":"615ac8d08c5db6606cf43ad24345824c597807faa4577fa020afe93969ca04034f872260bf3b41b89ca5f2349a3b66a08f8af6a6013f4bd8131ad89f66461067","ssdeep":"","tlshash":"89d02267410cf283c1c4c5c23e3f5a84580428a10d019cf0cfec30acc0ec2340c33a10","first_seen":"2025-09-21T14:32:25.31302Z","last_seen":"2025-09-21T14:32:25.31302Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1758464160/211888276_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199","date":"2025-09-21T14:31:17.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 Aug 2025 09:19:42 GMT","end":"Sat, 01 Nov 2025 10:19:23 GMT"},"fingerprint":{"sha1":"44:F7:F2:B0:B9:E8:45:DC:8B:94:CD:26:E3:38:54:5D:E6:EB:A5:03","sha256":"3E:1B:F1:89:FB:27:09:F0:4C:55:6F:DC:12:3E:86:60:5C:2B:82:87:83:97:37:0B:5F:B3:17:E2:B7:9A:78:F8"}}},"request":{"raw":"GET /thumbs/1758464160/211888276_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.xlivrdr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19872\r\netag: \"273d4598c53872eb4c11ab465fed0a2f\"\r\nlast-modified: Sun, 21 Sep 2025 14:14:50 GMT\r\nx-proxy-cache-orig: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nage: 208\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 982a43eb38ec5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19872,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"273d4598c53872eb4c11ab465fed0a2f","sha1":"a75d6c4c51335505c81621319480ca9f249af347","sha256":"3dbc6d7630bcec185e64f09712f82139dc2fb4c1da14996cea107a02c0e0dbcb","sha512":"5b840a5eb59e34fc6ff92f8fffb56ce12477645f2891b4957d4503d88bfb3879332e252db6bd853270bf667aa6eadc8e60932e9185edbca158e6c94af2ab77a9","ssdeep":"384:urFzrYfPQiXovsIcHzIMufUKrA7WQDq9WqRe78OZSYTqmv5DUh:uHYfPcvdcTPu3YDq9peQE5NUh","tlshash":"2f92e1571c486de2c48c06587e053a693c62d22bfee16754c68c19d9a34d69b8d88c2e","first_seen":"2025-09-21T14:32:25.313999Z","last_seen":"2025-09-21T14:32:25.313999Z","times_seen":1,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.scandalshack.com/","fqdn":"mail.scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"172.67.150.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-21T14:31:14.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scandalshack.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 23:54:49 GMT","end":"Tue, 28 Oct 2025 22:53:42 GMT"},"fingerprint":{"sha1":"BD:78:39:A6:81:9B:CE:CD:A7:D9:59:79:78:AC:AB:E2:36:4B:A0:D6","sha256":"AB:05:0C:75:B6:6C:8C:56:8B:28:A0:1D:62:11:3F:92:2C:0F:5F:DA:DA:0B:61:B8:E7:31:4D:C5:7F:E6:06:14"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mail.scandalshack.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:14 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.3.25\r\ncache-control: s-maxage=31536000, max-age=60\r\nx-wp-spc-disk-cache: DISABLED\r\nx-wp-cf-super-cache-active: 1\r\nx-wp-cf-super-cache-cache-control: s-maxage=31536000, max-age=60\r\nx-litespeed-cache: hit\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MeY%2BZmoHp458SQqJLb27UayGbatsUL9VK3FSG9hsUSbpda6UpUav2viG3bB9gXCRfWkZhUZJ988kHt0fT0CmoAwXHgf6%2FkTc32MoUxrfXPjUass%3D\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 982a43d9bbea56b5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"TrafficStars","description":"TrafficStars is a self-served ad network and ad exchange that operates mainly in adult-related verticals.","website":"https://trafficstars.com","common_platform_enumeration":"","icon":"TrafficStars.png","categories":["Advertising"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Genesis theme","description":"Genesis theme is a WordPress theme that has been developed using the Genesis Framework from Studiopress.","website":"https://www.studiopress.com/themes/genesis","common_platform_enumeration":"","icon":"Genesis theme.svg","categories":["WordPress themes"]},{"name":"AddToAny","description":"AddToAny is a universal sharing platform that can be integrated into a website by use of a web widget or plugin.","website":"https://www.addtoany.com","common_platform_enumeration":"","icon":"AddToAny.svg","categories":["Widgets"]},{"name":"Perfmatters","description":"Perfmatters is a performance optimisation plugin for WordPress websites.","website":"https://perfmatters.io","common_platform_enumeration":"","icon":"Perfmatters.svg","categories":["WordPress plugins","Performance"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"AddToAny Share Buttons:1.1","description":"AddToAny Share Buttons plugin for WordPress increases traffic and engagement by helping people share your posts and pages to any service.","website":"https://github.com/projectestac/wordpress-add-to-any","common_platform_enumeration":"","icon":"AddToAny.svg","categories":["WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.25","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":85590,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4749), with CRLF, LF line terminators","md5":"80825b3865584f51a62c1946f79b818d","sha1":"5096aeb8545cbb163f5a06283586d883fd11808b","sha256":"01873ee59dcc744735a692cba00b15badf33ffd78fb8a6cd536d400d1f94fbc8","sha512":"3181de58e838e1ad8ff087d6877cdc1a7ac201921fe76b7c08f2a97e08373afff9b4359462ac7271ac8b07548ac0d9d83c6fb94caea350ea1ba6eae68872776d","ssdeep":"1536:ajUfyXM41Oi7Mzq8zWu7hjEWIL15elZ5QHK6oRi7Mzq8zWu7hjEWIL15elZ5QHK7:ajUfyc41Oi7Mzq8zWu7hjEWIL15elZ5r","tlshash":"2183f9f3840902195b671ac5b39e7f18f9ce9026dc8acaa4e7fd125c6ec1d931271b0e","first_seen":"2025-09-21T14:32:25.315071Z","last_seen":"2025-09-21T14:32:25.315071Z","times_seen":1,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":22,"dns":1,"connect":1,"send":0,"wait":241,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scandalshack.com/wp-content/plugins/mai-engine/assets/js/min/global.min.js?ver=2.37.0.71420252325","fqdn":"scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"172.67.150.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:15.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scandalshack.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 23:54:49 GMT","end":"Tue, 28 Oct 2025 22:53:42 GMT"},"fingerprint":{"sha1":"BD:78:39:A6:81:9B:CE:CD:A7:D9:59:79:78:AC:AB:E2:36:4B:A0:D6","sha256":"AB:05:0C:75:B6:6C:8C:56:8B:28:A0:1D:62:11:3F:92:2C:0F:5F:DA:DA:0B:61:B8:E7:31:4D:C5:7F:E6:06:14"}}},"request":{"raw":"GET /wp-content/plugins/mai-engine/assets/js/min/global.min.js?ver=2.37.0.71420252325 HTTP/1.1\r\nHost: scandalshack.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:15 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 408\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 19 Sep 2026 17:26:55 GMT\r\nlast-modified: Mon, 14 Jul 2025 23:25:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 22715\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=00VgrUBTD3NVe6Pb74Vdmvzff0z9dURgisw7N99pGzlKphdP4%2FlvjvobD5bxZYnnFCWYY8Ane3h2MHiLHGqGF7f6oI4BFP8DljBjJ%2FF%2BKUI%3D\"}]}\r\ncf-ray: 982a43dedf1e76ef-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1151,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1151), with no line terminators","md5":"269513237e5e8c8134f99042cffea7bb","sha1":"d052525cdeae6f6e7e55b07f8d3b84d3e649e6c1","sha256":"5171798b43f28844503baf788c228f08ba652a24dfeceb441190c5b8332350a5","sha512":"727720fdb3860ce1f00349ebe6a7add5f044fe2a60ffb8e0f5c901ad0e281bee244f80f4163824d385947bbe87887598fd98750c0f67683f4ecea1a4649c88b2","ssdeep":"","tlshash":"26210079e31836b701fe60f335def58979aa18de7c460a02801ac9c41d3cdda1275eb9","first_seen":"2025-03-26T01:29:54.713149Z","last_seen":"2026-04-18T06:10:39.677145Z","times_seen":67,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1758464160/113289324_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199","date":"2025-09-21T14:31:17.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 Aug 2025 09:19:42 GMT","end":"Sat, 01 Nov 2025 10:19:23 GMT"},"fingerprint":{"sha1":"44:F7:F2:B0:B9:E8:45:DC:8B:94:CD:26:E3:38:54:5D:E6:EB:A5:03","sha256":"3E:1B:F1:89:FB:27:09:F0:4C:55:6F:DC:12:3E:86:60:5C:2B:82:87:83:97:37:0B:5F:B3:17:E2:B7:9A:78:F8"}}},"request":{"raw":"GET /thumbs/1758464160/113289324_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.xlivrdr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18600\r\netag: \"c87fd4c8f3c454a2f02bcb711d51a19c\"\r\nlast-modified: Sun, 21 Sep 2025 14:15:40 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 686\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 982a43eb28dc5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18600,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c87fd4c8f3c454a2f02bcb711d51a19c","sha1":"20c6f22aa4074b1b30872c6588a79509bb819e52","sha256":"db034b9e52cb17fd549d82dd7c82855405da1a0fd05166bbba43e556d65b6f7b","sha512":"a13d3b0448aedd4edb79a8e31b74cdcf0d01bc20a846b0ee6a808b52e0c1537ce7b16c91aef9a695e21ad04d2df8696d72823af0bc3e9555d49a0ed0d1f985fb","ssdeep":"384:qNSQcqRYn4gHGeiS3d+PwmXsjVKzsTRUXhuhPJP8m+BvanmwqktPWWd:qNSFHGeisdQX3gVIsPVQBgqktPz","tlshash":"5e82e182d47e9845ac813117553fde51ac38798e9f06e900812fa4e16d27beea33d8cf","first_seen":"2025-09-21T14:32:25.316864Z","last_seen":"2025-09-21T14:32:25.316864Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.redd.it/nbv529pxr4s71.jpg","fqdn":"i.redd.it","domain":"redd.it","tld":"it"},"ip":{"addr":"151.101.65.140","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:16.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.redd.it","organization":"REDDIT, INC."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Sat, 12 Jul 2025 00:00:00 GMT","end":"Wed, 07 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8B:29:12:DB:33:A6:1F:39:07:AF:CA:69:1F:70:D6:91:A8:FD:D9:CF","sha256":"FB:3A:CD:DA:83:D9:AB:68:DF:27:33:DE:4D:C7:FA:17:D2:67:C4:73:9A:75:FD:E5:97:56:87:DC:42:88:C2:3A"}}},"request":{"raw":"GET /nbv529pxr4s71.jpg HTTP/1.1\r\nHost: i.redd.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 08 Oct 2021 01:42:02 GMT\r\netag: \"0721483dfb0c7c34c43ea0cbda4a60a7\"\r\nexpires: Thu, 31 Dec 2037 23:59:59 GMT\r\nx-amz-version-id: null\r\ncontent-type: image/jpeg\r\nx-canonical-filename-image-generation: 1\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\nserver: snooserv\r\nreport-to: {\"group\": \"w3-reporting-nel\", \"max_age\": 14400, \"include_subdomains\": true,  \"endpoints\": [{ \"url\": \"https://w3-reporting-nel.reddit.com/reports\" }]}, {\"group\": \"w3-reporting\", \"max_age\": 14400, \"include_subdomains\": true, \"endpoints\": [{ \"url\": \"https://w3-reporting.reddit.com/reports\" }]}, {\"group\": \"w3-reporting-csp\", \"max_age\": 14400, \"include_subdomains\": true, \"endpoints\": [{ \"url\": \"https://w3-reporting-csp.reddit.com/reports\" }]}\r\nnel: {\"report_to\": \"w3-reporting-nel\", \"max_age\": 14400, \"include_subdomains\": false, \"success_fraction\": 1.0, \"failure_fraction\": 1.0}\r\ncontent-length: 128851\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":128851,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 758x1024, components 3","md5":"0721483dfb0c7c34c43ea0cbda4a60a7","sha1":"53ce8bc0b04eff84035de7d5290ac53c88388550","sha256":"f40790f73c3653ff635cf397cd3b4d2216ed2725e80d59f35d3edeb0d15976a4","sha512":"2f561264ceb97c9381298c3d431c0408d49203a760249b7a26e55740736703ff8ffdc433acce903d64072b2ecbd01caa8193ec62e75b34b17ef4b536bb66aa8d","ssdeep":"3072:YOpvobRTZ6uACWrEWxUC8Ld+M2XMybWG6P:BBobv6uAXrEWxUCQd4DyF","tlshash":"bcc31292c5e1679d150e06360bac3a5939f818c06a93b774609f2c072bef3ec95767cb","first_seen":"2025-09-21T14:32:25.317849Z","last_seen":"2025-09-21T14:32:25.317849Z","times_seen":1,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.xlivrdr.com/static/4d7f3ebc/s/LPOmega/images/logo.svg","fqdn":"creative.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"172.67.213.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199","date":"2025-09-21T14:31:16.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xlivrdr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Sep 2025 13:25:58 GMT","end":"Mon, 01 Dec 2025 14:24:34 GMT"},"fingerprint":{"sha1":"60:3C:F5:70:25:F5:99:96:7B:4A:71:A1:41:E0:CF:36:44:05:40:F5","sha256":"D0:BD:F8:2A:2D:AF:D4:AF:F6:B7:84:94:B9:87:F0:78:B4:92:49:83:B0:95:E4:E0:EB:FE:58:84:BB:2A:4F:CA"}}},"request":{"raw":"GET /static/4d7f3ebc/s/LPOmega/images/logo.svg HTTP/1.1\r\nHost: creative.xlivrdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncontent-encoding: br\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"logo.svg\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9tMJNbGYC9hMgKJsXehLS%2F5q4U9K4pMoh7NYgPQ7mODw8MDvl%2BASXwPt5MmZF0IwQqoJfhgRPhZU%2FsVjWNhhQ6zerKPt%2F7s5MqyQOfq9mvtQQA%3D%3D\"}]}\r\nlast-modified: Thu, 18 Sep 2025 11:36:29 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 2971\r\ncf-cache-status: HIT\r\netag: W/\"f256810f45872537d8f56066f2568dcd\"\r\ncf-ray: 982a43ea4d3c0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4655,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f256810f45872537d8f56066f2568dcd","sha1":"d28e722a54d7a4b06364f161c5b255301ec29e89","sha256":"54d39b4f66fbe6cce470e791c17c3e38f015b046a55e3ff22cb22cdb741879bb","sha512":"5c73ce4d2eee81268871994bd0a9b5d5424757661a40a0911772b4f7dc784cdaec92b0fc37f137c6a4776e19e6a787b55bf151306379b0b00dc366261cf07fbd","ssdeep":"96:zioEo1FkPeTp3PVlZU5Pe3LkaJRRiBwvnm7vXxEBcEeCYw92ZUslVk:mno1FkPe1zZC0LkoGwGXxucEeUViVk","tlshash":"1ca196d95720a2cc24ccc84fff769aac691becbb7ab585c0819e8f58549bdc4f504c00","first_seen":"2023-05-17T22:36:59Z","last_seen":"2026-04-20T00:44:50.090231Z","times_seen":724,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scandalshack.com/wp-content/fonts/alegreya-sans/5aUt9_-1phKLFgshYDvh6Vwt7V9dv21T.woff2","fqdn":"scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"104.21.30.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:14.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scandalshack.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 23:54:49 GMT","end":"Tue, 28 Oct 2025 22:53:42 GMT"},"fingerprint":{"sha1":"BD:78:39:A6:81:9B:CE:CD:A7:D9:59:79:78:AC:AB:E2:36:4B:A0:D6","sha256":"AB:05:0C:75:B6:6C:8C:56:8B:28:A0:1D:62:11:3F:92:2C:0F:5F:DA:DA:0B:61:B8:E7:31:4D:C5:7F:E6:06:14"}}},"request":{"raw":"GET /wp-content/fonts/alegreya-sans/5aUt9_-1phKLFgshYDvh6Vwt7V9dv21T.woff2 HTTP/1.1\r\nHost: scandalshack.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mail.scandalshack.com/\r\nOrigin: https://mail.scandalshack.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:14 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 24396\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 21 Sep 2026 19:53:41 GMT\r\nlast-modified: Thu, 03 Oct 2024 00:13:12 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kzx%2FPSxFx47Bp6pEThBDmZUJVqz5Fp%2BpcZMpL9t0jhQQ0OMlnt2yarevudr%2FWEXOkJfHTvXKi%2Fsz56hC69sdKwYT9YDC6d6yrVbhp8qwiSo%3D\"}]}\r\ncf-ray: 982a43dd5a534e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24396,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24396, version 1.0","md5":"09f6f0ce3da2947e20884d23d6f5e1aa","sha1":"1cb98625e194d33ee7b54f2e7988f1fc822ecda3","sha256":"ee5f1ca35c5f9455651bd4df4ceb02bf78a55f9694aa5549d955423ec36bec76","sha512":"df0405d17fcd8513e8509c2d5500460ab433f49bf7fbe79368b19e4284eb4c9cbec4937e503bc6d4f49e6b8f7f5a10b6cc94caf67e91be683cc94861bd299ab2","ssdeep":"384:1bzyZqFFXyLKKzaPFvVQiozootEF8bv8lg8LuHUvPh+6rsgvcXFwQY/kV3m0BM:0uXoG1VNozFEZlg4jhRrbukMm5","tlshash":"b1b2e1e23a6c0c8917b7d33dca6d0e5fa6363e40159474e80b526ca68f58cf65c58f71","first_seen":"2024-10-04T10:40:31.768496Z","last_seen":"2026-04-01T17:18:30.786068Z","times_seen":39,"resource_available":false,"data":null}},"time_used":449,"timings":{"blocked":115,"dns":81,"connect":1,"send":0,"wait":169,"receive":1,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scandalshack.com/wp-content/plugins/mai-engine/assets/css/header.min.css?ver=2.37.0.71420252325","fqdn":"scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"172.67.150.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:14.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scandalshack.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 23:54:49 GMT","end":"Tue, 28 Oct 2025 22:53:42 GMT"},"fingerprint":{"sha1":"BD:78:39:A6:81:9B:CE:CD:A7:D9:59:79:78:AC:AB:E2:36:4B:A0:D6","sha256":"AB:05:0C:75:B6:6C:8C:56:8B:28:A0:1D:62:11:3F:92:2C:0F:5F:DA:DA:0B:61:B8:E7:31:4D:C5:7F:E6:06:14"}}},"request":{"raw":"GET /wp-content/plugins/mai-engine/assets/css/header.min.css?ver=2.37.0.71420252325 HTTP/1.1\r\nHost: scandalshack.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:14 GMT\r\ncontent-type: text/css\r\ncontent-length: 1625\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 19 Sep 2026 17:26:55 GMT\r\nlast-modified: Mon, 14 Jul 2025 23:25:37 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 22715\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FHUHlcB1%2BGLk9ZkxzDTsSzsscSpB0FsKvEt0oHz0w1fEWJzqFYZJucPyv63bLwTa%2BDNM6nWXY9s%2BEvzf8UIkIuRzqBZXHQZKVKdHKm3wNI0%3D\"}]}\r\ncf-ray: 982a43dcdece76ef-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7974,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7974), with no line terminators","md5":"dc320fc3bf262eed7091f1df19f933c1","sha1":"d00f7046004de2697b5ac8cb808c9fc6986356e2","sha256":"e36a0675be1940c2e45a19e065226685cad65f7a5e50f15db6cd48cd69d18a1c","sha512":"2a2207041b39b7cface8178a283ad63ce2e13513483d43f7b2d4bc29219ca24e530cd2ff4391219f9c049596f43a5e18749d9f2fd94e8ef9eef45ada3de92450","ssdeep":"192:G9KLJ5JDJtZGIBz0UNx8ER5CCEw9fTTEKv1Was2eBW:/J5JDJt5TE1W","tlshash":"f2f1ac98f144f4754e337b35e3cd9d08a565b640ced656cafa94c20b02c7bfac192a19","first_seen":"2025-03-26T01:29:54.701182Z","last_seen":"2026-04-01T20:23:48.160248Z","times_seen":55,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.uuidksinc.net/match/1924/?remote_uid=a4dea769f6b79738","fqdn":"s.uuidksinc.net","domain":"uuidksinc.net","tld":"net"},"ip":{"addr":"31.220.27.155","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:16.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uuidksinc.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 23:22:10 GMT","end":"Fri, 28 Nov 2025 23:22:09 GMT"},"fingerprint":{"sha1":"DF:8A:AE:8B:ED:44:80:4D:3B:EB:26:59:E2:5F:93:03:BC:7D:31:F4","sha256":"D9:6C:DC:4A:1E:9E:64:3A:2B:71:51:9B:CD:A8:75:44:2E:9A:DC:B5:A7:C8:35:79:8A:0E:0C:05:6E:D6:AD:FB"}}},"request":{"raw":"GET /match/1924/?remote_uid=a4dea769f6b79738 HTTP/1.1\r\nHost: s.uuidksinc.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mail.scandalshack.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.23.2\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 74\r\naccess-control-allow-headers: X-Requested-With, Cache-Control, Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://mail.scandalshack.com\r\nset-cookie: jcsuuid=QNYQn11m2bLo85nkSQ4v; expires=Mon, 21 Sep 2026 14:31:16 GMT; domain=uuidksinc.net; path=/; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.23.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":74,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced","md5":"9e24e19b024c44b778301d880bd8e6f4","sha1":"d2b1b39cb4434d34c22c2cf52cbbe9967b1b688e","sha256":"01b58ddb2f86a768f91751b62f25395417f6cf526191a4aefc1ebe4f8beacdcb","sha512":"4957e24a00b7ff54b350c33392560937e69ee5accf2e439781e27b4ac506eeeddef3bebd5d911185add175d648f4636dc5116e311b9c6c6ed34b842153e0b124","ssdeep":"","tlshash":"1ba022e22380fcbccc220033002003b0ceb0802808208e0f0c2c8c3a0800a0880cc383","first_seen":"2023-04-06T20:02:01Z","last_seen":"2026-04-20T04:33:38.801872Z","times_seen":6556,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":56,"dns":6,"connect":17,"send":0,"wait":23,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1758464730/211762667_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199","date":"2025-09-21T14:31:17.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 Aug 2025 09:19:42 GMT","end":"Sat, 01 Nov 2025 10:19:23 GMT"},"fingerprint":{"sha1":"44:F7:F2:B0:B9:E8:45:DC:8B:94:CD:26:E3:38:54:5D:E6:EB:A5:03","sha256":"3E:1B:F1:89:FB:27:09:F0:4C:55:6F:DC:12:3E:86:60:5C:2B:82:87:83:97:37:0B:5F:B3:17:E2:B7:9A:78:F8"}}},"request":{"raw":"GET /thumbs/1758464730/211762667_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.xlivrdr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17198\r\netag: \"613788e546b1c24515072d9f30ae305d\"\r\nlast-modified: Sun, 21 Sep 2025 14:25:40 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 238\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 982a43eb28d65691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17198,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"613788e546b1c24515072d9f30ae305d","sha1":"62210240aa6021547497836794eda4568d65e587","sha256":"a99b8297d4423c60f6665921a8548fe69adeec311bb5a16fc8eddcc4171c9152","sha512":"a4512e1124d3e21b15f889bccdacdf3ab4d15e8a23339fba6dcc5fc5ed3f254944e845a9e1ed09664d40d8b181c87eb383c252eacd52b471b199042299ad5106","ssdeep":"384:QzVBqA38y1AgN2LHDaODq/u3tzYNHMHzDMqUAQFI741hNYa:qBqiq62nawNtMNHMHzDf74h","tlshash":"a972d187ffc3918e2562269c13a463ed20e588430a7e3eb006d996f32657a351feb905","first_seen":"2025-09-21T14:32:25.321018Z","last_seen":"2025-09-21T14:32:25.321018Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1758464850/207928830_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199","date":"2025-09-21T14:31:16.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 Aug 2025 09:19:42 GMT","end":"Sat, 01 Nov 2025 10:19:23 GMT"},"fingerprint":{"sha1":"44:F7:F2:B0:B9:E8:45:DC:8B:94:CD:26:E3:38:54:5D:E6:EB:A5:03","sha256":"3E:1B:F1:89:FB:27:09:F0:4C:55:6F:DC:12:3E:86:60:5C:2B:82:87:83:97:37:0B:5F:B3:17:E2:B7:9A:78:F8"}}},"request":{"raw":"GET /thumbs/1758464850/207928830_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.xlivrdr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15390\r\netag: \"55b99b61242a90adcd9dbba12bdc34d4\"\r\nlast-modified: Sun, 21 Sep 2025 14:27:03 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 199\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 982a43eaf8aa5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15390,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"55b99b61242a90adcd9dbba12bdc34d4","sha1":"961e07ad13f2811a222b44ca45f31346cb5c9b8f","sha256":"bb9aea09ee24cb24f6f750d711781055b6c2e01ca9552e53e75008b57f1e018c","sha512":"ab9c008ca80acde2ac38b8dc30d9cb8dff323996f023c5494a4b04b3a322e49c5f51bd7d5d87956983433a07782f68e04940495a6a0d6bc7dc77e89f131324a2","ssdeep":"384:H9oFULkZ761WnGU/GcP4od/dT9aCAP+Ut0+xH+kFlPeuB:dsUQh61fUeBod1TC2U1H+kPeuB","tlshash":"fa62d004079ffc11f9692b9291b6010735d1825b8d7e0d6c55bd8a67673a0636d8c0eb","first_seen":"2025-09-21T14:32:25.321973Z","last_seen":"2025-09-21T14:32:25.321973Z","times_seen":1,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scandalshack.com/wp-content/plugins/add-to-any/addtoany.min.js?ver=1.1","fqdn":"scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"172.67.150.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:15.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scandalshack.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 23:54:49 GMT","end":"Tue, 28 Oct 2025 22:53:42 GMT"},"fingerprint":{"sha1":"BD:78:39:A6:81:9B:CE:CD:A7:D9:59:79:78:AC:AB:E2:36:4B:A0:D6","sha256":"AB:05:0C:75:B6:6C:8C:56:8B:28:A0:1D:62:11:3F:92:2C:0F:5F:DA:DA:0B:61:B8:E7:31:4D:C5:7F:E6:06:14"}}},"request":{"raw":"GET /wp-content/plugins/add-to-any/addtoany.min.js?ver=1.1 HTTP/1.1\r\nHost: scandalshack.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:15 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 19 Sep 2026 17:26:55 GMT\r\nlast-modified: Thu, 13 Sep 2018 01:06:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: br\r\nage: 22715\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DnvalrzGYpG5paS1gG6%2Bi7iWEssb%2BnbZ%2BmxeoYSk4bNHJzHkXHuhLAJSKIgpbZdQzLnltzaVN%2Bu%2BbcLTqkePf7pyFp2r4e1CNJimW6nlf2U%3D\"}]}\r\ncf-ray: 982a43deff2876ef-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":129,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"5ef26b5e47e6951f43ecf2b1fc645222","sha1":"081afb52577f6f3bb044fdea6d34a632c3cce7e8","sha256":"50679e0e3933c945348a2db0cc128bb14b57a60a74fabf8cae13acc14efbb2e1","sha512":"a0876397327a5c6b4bca75605fa97ed7243ad78d9fd285f8a55ad2525e1070fdb197d1ae0687b3fb603946bf6dfb567eb3be3a636fb9fca6e36d03055ce7794c","ssdeep":"","tlshash":"6fb09b1d3474e95c48735551903bbf1d75133d33d7401995054c25a15f2866e5043d4d","first_seen":"2023-03-07T01:03:19Z","last_seen":"2026-04-20T13:46:12.139064Z","times_seen":20705,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tsyndicate.com/do2/319c50330dfc43a28402af80648c4aca/dynamic?xu=a4dea769f6b79738\u0026count=6\u0026w=1280\u0026h=1024\u0026keywords=%F0%9F%91%85%F0%9F%8D%91%F0%9F%8D%92%20Star%20%E2%AD%90%F0%9F%98%88%E2%9D%A4%EF%B8%8F%20Scandals%20%F0%9F%8D%86%F0%9F%8D%8C%F0%9F%92%A6%2CScandal%20Shack%20%E2%80%93%20%F0%9F%91%85%F0%9F%8D%91%F0%9F%8D%92%20Star%20%E2%AD%90%F0%9F%98%88%E2%9D%A4%EF%B8%8F%20Scandals%20%F0%9F%8D%86%F0%9F%8D%8C%F0%9F%92%A6\u0026adtype=label-under\u0026tz=0","fqdn":"tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"136.243.43.25","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:16.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tsyndicate.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 20:10:41 GMT","end":"Thu, 11 Dec 2025 20:10:40 GMT"},"fingerprint":{"sha1":"25:5B:D4:FE:8D:85:CA:1A:7D:3A:B0:58:EC:2D:7A:B0:62:90:21:1F","sha256":"DF:0A:26:3C:A9:CF:97:54:23:20:C6:11:EB:C6:8C:7F:02:14:58:C8:F6:3B:08:10:27:BF:78:67:09:32:DC:9C"}}},"request":{"raw":"GET /do2/319c50330dfc43a28402af80648c4aca/dynamic?xu=a4dea769f6b79738\u0026count=6\u0026w=1280\u0026h=1024\u0026keywords=%F0%9F%91%85%F0%9F%8D%91%F0%9F%8D%92%20Star%20%E2%AD%90%F0%9F%98%88%E2%9D%A4%EF%B8%8F%20Scandals%20%F0%9F%8D%86%F0%9F%8D%8C%F0%9F%92%A6%2CScandal%20Shack%20%E2%80%93%20%F0%9F%91%85%F0%9F%8D%91%F0%9F%8D%92%20Star%20%E2%AD%90%F0%9F%98%88%E2%9D%A4%EF%B8%8F%20Scandals%20%F0%9F%8D%86%F0%9F%8D%8C%F0%9F%92%A6\u0026adtype=label-under\u0026tz=0 HTTP/1.1\r\nHost: tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mail.scandalshack.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: https://mail.scandalshack.com\r\naccess-control-allow-methods: POST, GET, HEAD\r\naccess-control-allow-headers: Accept, X-Requested-With, X-Forwarded-For, X-Real-IP, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Legacy, Content-Type,Authorization, Nav-Ua-He-Mobile, Nav-Ua-He-Platform, Nav-Ua-He-Brands, Nav-Ua-He-Platformversion, Nav-Ua-He-Model, Nav-Ua-He-Architecture, Nav-Ua-He-Bitness, Nav-Ua-He-Fullversionlist, Nav-Ua-He-Uafullversion, Nav-Ua-He-Wow64\r\naccess-control-allow-credentials: true\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding, *\r\nset-cookie: cookie_user_id=90d350f9-5aef-5e67-a09f-b4a31684a2a7; expires=Sat, 21 Mar 2026 14:31:16 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, no-transform\r\nx-robots-tag: none, noindex, nofollow\r\nreport-to: { \"url\": \"https://pxl.tsyndicate.com/api/v1/heavy-ad/report\", \"max_age\": 86401 }\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\npermissions-policy: ch-ua-model=(self \"https://tsyndicate.com\"), ch-ua-platform-version=(self)\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24441,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"41455da657fb02385213404552fd7c5f","sha1":"fd3a72a7511d131f92978245dbd02e06b027cac4","sha256":"ce72dae88f1fae4ae043bd504768919a11654b558abd15ed30c97ef644060d94","sha512":"4c00ee4242027bfc1763dc36c1e0770fc47a5dec01f89dee6cd34b15bfd4aa5e8ae638cc6632751c38150fa0b857884a12fff1842cc2a507bc5b941956e31ac8","ssdeep":"384:ffg6zZMdIdezB555bzXgr1+W84t6UmDztcPf3g5O5m0z47Z0Q10bTzrA35Ar5Afk:HfBgzrTPQr1l8A6UmX+33a4mGQO60bTD","tlshash":"94b27eb7ce889c6a1f40615feac769cd944a243a8df6dedcd2d0da02b44cbf5116e184","first_seen":"2025-09-21T14:32:25.323621Z","last_seen":"2025-09-21T14:32:25.323621Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.xlivrdr.com/static/4d7f3ebc/s/LPOmega/main.a33bcad1a75e838f43ad.css","fqdn":"creative.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"172.67.213.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199","date":"2025-09-21T14:31:16.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xlivrdr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Sep 2025 13:25:58 GMT","end":"Mon, 01 Dec 2025 14:24:34 GMT"},"fingerprint":{"sha1":"60:3C:F5:70:25:F5:99:96:7B:4A:71:A1:41:E0:CF:36:44:05:40:F5","sha256":"D0:BD:F8:2A:2D:AF:D4:AF:F6:B7:84:94:B9:87:F0:78:B4:92:49:83:B0:95:E4:E0:EB:FE:58:84:BB:2A:4F:CA"}}},"request":{"raw":"GET /static/4d7f3ebc/s/LPOmega/main.a33bcad1a75e838f43ad.css HTTP/1.1\r\nHost: creative.xlivrdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\ncontent-encoding: br\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"main.a33bcad1a75e838f43ad.css\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4fR2XVDfb4dWPb2%2BCbmX3nG6QWfTFP4PDq5lDlvFLwhZEp7kNTzt%2Fg9eqHfmW5Iz5vUCX22YrpJHlGgqCWeJ26QpdXna9s%2B%2Fwi%2FhbVt36HFusQ%3D%3D\"}]}\r\nlast-modified: Thu, 18 Sep 2025 11:36:29 GMT\r\nx-cache-status: MISS\r\ncache-control: public, max-age=3600, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 2996\r\ncf-cache-status: HIT\r\netag: W/\"c6acd9c0bb81ef23375d408cb9f6f5c7\"\r\ncf-ray: 982a43e7ed140afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74009,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c6acd9c0bb81ef23375d408cb9f6f5c7","sha1":"af12e6dcc27da7e30415133a0c0593bee7619422","sha256":"ed1dbfc953623c1369702de878b735455f6d0d4968dda06f7365fbbabc3018f4","sha512":"da8ec72211511ff754ffa3f51418614aa4da6753b771412c0c1f3e44c42a3827fc2f9d2cee62930cb5f1cda4fccd6e0890ea1099b1a5a897e30d3b65ad0d6add","ssdeep":"1536:gPKu+hmcfYSkeSrJnHgwQP0+52sCY0h7dJkPnPFnAhhJNm80Ydv3/6tP455RlyEV:4Ku+hmcfYSkeSrJnHgwQP0+52sCY0h7t","tlshash":"d773849a3540311a7c1bca62f1945d67857a8467f6760fbf207a6aeac7c36cc3333942","first_seen":"2025-09-21T14:32:25.324708Z","last_seen":"2025-09-21T14:32:25.324708Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":8,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1758464370/98260898_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199","date":"2025-09-21T14:31:16.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 Aug 2025 09:19:42 GMT","end":"Sat, 01 Nov 2025 10:19:23 GMT"},"fingerprint":{"sha1":"44:F7:F2:B0:B9:E8:45:DC:8B:94:CD:26:E3:38:54:5D:E6:EB:A5:03","sha256":"3E:1B:F1:89:FB:27:09:F0:4C:55:6F:DC:12:3E:86:60:5C:2B:82:87:83:97:37:0B:5F:B3:17:E2:B7:9A:78:F8"}}},"request":{"raw":"GET /thumbs/1758464370/98260898_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.xlivrdr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7974\r\netag: \"3d4ec18175f25e96a322f54ec5f564c6\"\r\nlast-modified: Sun, 21 Sep 2025 14:19:06 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 643\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 982a43eb08b75691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7974,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3d4ec18175f25e96a322f54ec5f564c6","sha1":"7e1f7260643fbca6fe36a408054884a541cb1784","sha256":"16b1ecd873ed4776a486a3710dfe813a36b1eb8316f9698ba836813f56f5c457","sha512":"e44f6780a0b16c428c6ef92f24c9d55e6de4ae576a7878e096b9e5d422efa5e3d420ad88a92e4800ce2725d0fd65b63ee10d2579d14b468ff4ebfe1b1b1608b5","ssdeep":"192:4Yadt8ZBTTQU6Aha4QmSY7ZR7HO4TEETOm:KwB4U6uatAZRy4TbTT","tlshash":"3ff19e076cc8f5db2a51aeecec22119cb39a8194fed4c31d111906b02d6e6a4f93e30f","first_seen":"2025-09-21T14:32:25.330415Z","last_seen":"2025-09-21T14:32:25.330415Z","times_seen":1,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1758464640/178568067_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199","date":"2025-09-21T14:31:16.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 Aug 2025 09:19:42 GMT","end":"Sat, 01 Nov 2025 10:19:23 GMT"},"fingerprint":{"sha1":"44:F7:F2:B0:B9:E8:45:DC:8B:94:CD:26:E3:38:54:5D:E6:EB:A5:03","sha256":"3E:1B:F1:89:FB:27:09:F0:4C:55:6F:DC:12:3E:86:60:5C:2B:82:87:83:97:37:0B:5F:B3:17:E2:B7:9A:78:F8"}}},"request":{"raw":"GET /thumbs/1758464640/178568067_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.xlivrdr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18924\r\netag: \"7703ec4ca5e9f1d09e5fa53255d8a475\"\r\nlast-modified: Sun, 21 Sep 2025 14:23:39 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 375\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 982a43eb18c85691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18924,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7703ec4ca5e9f1d09e5fa53255d8a475","sha1":"96c1c0c65ffef4aa91a94870a184f1a0b91ca23c","sha256":"edd737040be27c15b93d628d771661fa7d242e1310a76fffdcbc231bd56bd94e","sha512":"31e31894ba864e3c3a3a20201960638fb51b0e7b6aef28111e99b3b2dfff0658e9570005b3e16cc06d5a64465d089277aef26660a753916f00321a19cd000404","ssdeep":"384:s6VsriGgMafFOZMeZgJDFEPycxRTpXgILIQUOjpweyi0TRr:1VsLgfsZwDCacn5gIL/UO+Ss","tlshash":"e182d0d42e6ecfc0bd63786cb450fa44fe3014806ad425cb2199aaf69c7bba519138cc","first_seen":"2025-09-21T14:32:25.331989Z","last_seen":"2025-09-21T14:32:25.331989Z","times_seen":1,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1758465000/117759266_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:16.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 Aug 2025 09:19:42 GMT","end":"Sat, 01 Nov 2025 10:19:23 GMT"},"fingerprint":{"sha1":"44:F7:F2:B0:B9:E8:45:DC:8B:94:CD:26:E3:38:54:5D:E6:EB:A5:03","sha256":"3E:1B:F1:89:FB:27:09:F0:4C:55:6F:DC:12:3E:86:60:5C:2B:82:87:83:97:37:0B:5F:B3:17:E2:B7:9A:78:F8"}}},"request":{"raw":"GET /thumbs/1758465000/117759266_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9124\r\netag: \"202e8ad1005248ad85d1d2f8e5306b31\"\r\nlast-modified: Sun, 21 Sep 2025 14:29:04 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 62\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 982a43e7f9880731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9124,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"202e8ad1005248ad85d1d2f8e5306b31","sha1":"72aacc037eefd7ef1f126d2a300f00f67a06f3dc","sha256":"76101ef1da8eee0564b913ac97960fe67202b264574772b5d792eb147ec051a1","sha512":"ba39c53b43715105426289ea4937a97c061143589e767f7fc6560cc2353f5870d31f6b695a2db9bf84701519553551b52e192cfb23ed06e70f52f5e761628895","ssdeep":"192:uOxDEa9W/478vq8ubvJvNA135oS2vBnmXpclPYVMD4qpX1:hr7nvJvNA135oS8acRR1","tlshash":"fe129eef33a89d57a65c140db9f71af946e78972049ca723740a3286b1612024837f16","first_seen":"2025-09-21T14:32:25.333419Z","last_seen":"2025-09-21T14:32:25.333419Z","times_seen":1,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":26,"dns":3,"connect":1,"send":0,"wait":9,"receive":1,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.xlivrdr.com/api/models?landing=LPOmega\u0026masterSmartpopId=1738\u0026quality=240p\u0026smartpopId=1589\u0026trafficType=interstitial\u0026sortBy=rankScore\u0026stripcashR=0\u0026forceClient=0\u0026usePreroll=1\u0026modelPromotion=0\u0026limit=40","fqdn":"go.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"172.64.147.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199","date":"2025-09-21T14:31:17.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.xlivrdr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:02:48 GMT","end":"Sun, 07 Dec 2025 09:02:14 GMT"},"fingerprint":{"sha1":"18:51:33:CF:A8:88:6B:8C:BA:0C:FC:AD:26:65:64:F8:F9:5A:32:CA","sha256":"37:C7:74:68:D2:46:40:59:86:A9:99:8C:2C:5E:F6:86:48:C4:47:28:01:2B:8E:2C:93:DF:31:57:81:AD:07:A0"}}},"request":{"raw":"GET /api/models?landing=LPOmega\u0026masterSmartpopId=1738\u0026quality=240p\u0026smartpopId=1589\u0026trafficType=interstitial\u0026sortBy=rankScore\u0026stripcashR=0\u0026forceClient=0\u0026usePreroll=1\u0026modelPromotion=0\u0026limit=40 HTTP/1.1\r\nHost: go.xlivrdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.xlivrdr.com/\r\nOrigin: https://creative.xlivrdr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:17 GMT\r\ncontent-type: application/json\r\ncf-ray: 982a43ee1a068deb-OSL\r\naccess-control-allow-origin: https://creative.xlivrdr.com\r\naccess-control-allow-credentials: true\r\nvary: Origin, Accept-Encoding\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 21 Sep 2025 14:31:17 GMT\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73734,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b51c779f35114094082e4aab8a7b05a1","sha1":"8817b779370df0181edf310b13319a1972073399","sha256":"17d4fadfc52f725482b02781b829f82f5b2e17197b9a74f46fe8cebe3d7281b0","sha512":"f9d30555d83502170e3dae7738013831c8a1bf64c3a731e96656f8379eab44d0be4c9a894875369d46ab93951f882dc503fe728102c8bf7392435f0a2263b784","ssdeep":"1536:86SpZoEz1b6hIq3q0gZEYNMrvUzWnPY3O1HEFxsE55kM/yJOSvSNmJUi+Q/t5yJY:71","tlshash":"2b7310f753cc4c6b0f0226ccc98e750ce9962a27a5c9b395c6c98e5b41f6eda111cf62","first_seen":"2025-09-21T14:32:25.339799Z","last_seen":"2025-09-21T14:32:25.339799Z","times_seen":1,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/outstream.video.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:15.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 Aug 2025 08:32:03 GMT","end":"Fri, 31 Oct 2025 08:32:02 GMT"},"fingerprint":{"sha1":"E4:52:21:98:B0:CD:51:03:1A:59:A9:01:02:8A:D6:3B:66:E3:EE:3A","sha256":"F1:77:51:DD:B8:B7:37:39:6D:01:37:95:43:1C:C1:78:42:1E:A6:30:E3:96:F3:D8:25:E4:61:7E:80:03:FD:8A"}}},"request":{"raw":"GET /sdk/v1/outstream.video.js HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:15 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Thu, 18 Sep 2025 07:05:40 GMT\r\netag: W/\"68cbaf44-4f38\"\r\nx-robots-tag: noindex, nofollow\r\ncontent-encoding: gzip\r\ncache-control: max-age=172800\r\nexpires: Tue, 23 Sep 2025 14:31:15 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH1742,DS9225\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20280,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (20191)","md5":"7fc28ab79823fd328c0b902ae755bfe7","sha1":"ea293f0e2da10f48534fceff4ee0abbfe25b8f33","sha256":"78db17a0948650094f2ac559ca6bd7bb10e2b5fdfc178f2a0a36b3f3de029487","sha512":"97a535026df1fff61d26edc0b0650ac9eb78b65620c07ac022d9b1e549c9ce4b4c68720edf0fc7a64180101cc75b527bf8b758aca86c11e44201afac4e31026f","ssdeep":"384:pV2EaebLlje+FaamsgLdy/bkdCKRJSlFM+/FY0qQShRja:pMNebvwVnxy/bkjwFHNY0qQSbja","tlshash":"8d9209a879d1e874a553106ed1ef5726b3b83652580d0c00d06becd53ab8e5ac33beb9","first_seen":"2025-09-19T19:02:07.073152Z","last_seen":"2025-12-10T20:30:41.604317Z","times_seen":49,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pxl-eu.tsyndicate.com/api/v1/p/p.gif?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWXjjIR04C0XYCTNnosUzGWXQiBEjzAyTLcTEyCGmBQ0zZMy0CEOjho0WMmrcwCEjBowYOGjkgCHiYZg6YzLqhEEDxwwyY1qUEUMmhksxOcqkjFHmRgumZsrYuFGmRpkcZMgUhUjGzsIYNG4AfQinjpiFImPIwJHDKByMOmzguDHDoYg5cCbqiHsDRtAZD8e0AVwjB42xOIzGXGgDsggxbtwsLIzDcdCHbdyAZDhDhgwYdFOvjnEjZ4yHdWJkREPn4hwdL16ceeMCD5s0duSQkeNizJs2L-a0CSPn4hs4L8bUiFGYphkZYWKYmRHj4JgZN8zg8HnDhhkaM8aUab2XZI31N8gMrZrDRo6n34lRwxgxjJFDe3HZYMMPdcyBUBJk9FAVDDCYkZ8ZMYgxAw41yHCDdjl8F8ZP8tlwHxlimCEGDmL4559QBMpA4GU5xGDDSzQ4ZmN-NIQ3Rhhc1EGhDDbM8UYdcsgHYQ-VXbZTkEPa0EYZbYjxYIRk0IDFE1nMgQUUNVyBxhJ6GPFFGFi4AQUaYUBRRFtMJDHEEFm0cMMVRJhFhRJ4tCDkHU-cQUcUNKBBBBNSiBEFFGgG0YYZb-QwhhFr5MBGEHUcwcYdQdwBRRJ2kBFHFlXQgYMaVwyBJBtuZJEFEVXUAEcWx-HAxht6TNHEqWMkIYYVVnxxRhVJECFFFWlACQORcMTQA2OOwacskWHg0QMM0xaJxht3DPEcHGG4kcYbbvSg20NkPJfRdGmw4cIcP7pBRhhszMHmGGs0p25kYSi2BUld0JXkQjS4EK1WMBiW4kIwGHybCGPA0cYXcAysQ8PLMiXDQ3LYQRlsIpQRcRsMG2xYHXWkkVEZZY0xVlotkLEXDC3oJNJMVmoVFkxihQVDGGHIsFYagIlQowtDuUCDDC40RMNacnxBdEZHJ7100zU8jVsYGTWBa7tshPFCDQaDgMIVacjL7RwgOEEFCD4ZvAMIaLtx49x43JgCCEH8xUYZV0y1RBp0jI2eCzPYYPYSSFDRBBMsgHDcGmWAcITIa7yx9xBoyPFcGS9wh4PBpMMAwhRhmEFdGobfgLgNa42RlA4iOPHEWm9ELXtGtq_FxuwiFOHEWgfZ8YUcZbDxlk7b3ZcjyHKcIZoOOQ2GbhnGiyHHQpmJUPwXbbyhFvXr0YCu52899IZCiwn8Bh55LGRY1BW_H78OhpGRx_R0yFFHGdczHh30kBGicKwMZthNb-Dwm-Cwy13wCte86nWvfDkHOmu5Q0Z8IpK1oGGDM1vLHDqWEc_RoV-585O46ICTGLhAZrgboVt04BSnKKg2FfEe8A7yBRhahGQMuYHzTAQDIf5QaEEcYg2KWJkOaeZ4ZUDMmRRDGyUy8SHYO9PfqsO-LZCHBbQJGETEoBjvIfAobPCICODwO4ZFZjUgG8MHdbAFEazljg_Box3zyMc9-lGPd-xCHxQQEA%3D%3D\u0026s=e6317c70f5b55f955f5dfdffd34c23ba0ae924eefabbbf36d51bf85e0548f6971758465075","fqdn":"pxl-eu.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"188.40.143.124","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:16.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tsyndicate.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 20:10:41 GMT","end":"Thu, 11 Dec 2025 20:10:40 GMT"},"fingerprint":{"sha1":"25:5B:D4:FE:8D:85:CA:1A:7D:3A:B0:58:EC:2D:7A:B0:62:90:21:1F","sha256":"DF:0A:26:3C:A9:CF:97:54:23:20:C6:11:EB:C6:8C:7F:02:14:58:C8:F6:3B:08:10:27:BF:78:67:09:32:DC:9C"}}},"request":{"raw":"GET /api/v1/p/p.gif?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWXjjIR04C0XYCTNnosUzGWXQiBEjzAyTLcTEyCGmBQ0zZMy0CEOjho0WMmrcwCEjBowYOGjkgCHiYZg6YzLqhEEDxwwyY1qUEUMmhksxOcqkjFHmRgumZsrYuFGmRpkcZMgUhUjGzsIYNG4AfQinjpiFImPIwJHDKByMOmzguDHDoYg5cCbqiHsDRtAZD8e0AVwjB42xOIzGXGgDsggxbtwsLIzDcdCHbdyAZDhDhgwYdFOvjnEjZ4yHdWJkREPn4hwdL16ceeMCD5s0duSQkeNizJs2L-a0CSPn4hs4L8bUiFGYphkZYWKYmRHj4JgZN8zg8HnDhhkaM8aUab2XZI31N8gMrZrDRo6n34lRwxgxjJFDe3HZYMMPdcyBUBJk9FAVDDCYkZ8ZMYgxAw41yHCDdjl8F8ZP8tlwHxlimCEGDmL4559QBMpA4GU5xGDDSzQ4ZmN-NIQ3Rhhc1EGhDDbM8UYdcsgHYQ-VXbZTkEPa0EYZbYjxYIRk0IDFE1nMgQUUNVyBxhJ6GPFFGFi4AQUaYUBRRFtMJDHEEFm0cMMVRJhFhRJ4tCDkHU-cQUcUNKBBBBNSiBEFFGgG0YYZb-QwhhFr5MBGEHUcwcYdQdwBRRJ2kBFHFlXQgYMaVwyBJBtuZJEFEVXUAEcWx-HAxht6TNHEqWMkIYYVVnxxRhVJECFFFWlACQORcMTQA2OOwacskWHg0QMM0xaJxht3DPEcHGG4kcYbbvSg20NkPJfRdGmw4cIcP7pBRhhszMHmGGs0p25kYSi2BUld0JXkQjS4EK1WMBiW4kIwGHybCGPA0cYXcAysQ8PLMiXDQ3LYQRlsIpQRcRsMG2xYHXWkkVEZZY0xVlotkLEXDC3oJNJMVmoVFkxihQVDGGHIsFYagIlQowtDuUCDDC40RMNacnxBdEZHJ7100zU8jVsYGTWBa7tshPFCDQaDgMIVacjL7RwgOEEFCD4ZvAMIaLtx49x43JgCCEH8xUYZV0y1RBp0jI2eCzPYYPYSSFDRBBMsgHDcGmWAcITIa7yx9xBoyPFcGS9wh4PBpMMAwhRhmEFdGobfgLgNa42RlA4iOPHEWm9ELXtGtq_FxuwiFOHEWgfZ8YUcZbDxlk7b3ZcjyHKcIZoOOQ2GbhnGiyHHQpmJUPwXbbyhFvXr0YCu52899IZCiwn8Bh55LGRY1BW_H78OhpGRx_R0yFFHGdczHh30kBGicKwMZthNb-Dwm-Cwy13wCte86nWvfDkHOmu5Q0Z8IpK1oGGDM1vLHDqWEc_RoV-585O46ICTGLhAZrgboVt04BSnKKg2FfEe8A7yBRhahGQMuYHzTAQDIf5QaEEcYg2KWJkOaeZ4ZUDMmRRDGyUy8SHYO9PfqsO-LZCHBbQJGETEoBjvIfAobPCICODwO4ZFZjUgG8MHdbAFEazljg_Box3zyMc9-lGPd-xCHxQQEA%3D%3D\u0026s=e6317c70f5b55f955f5dfdffd34c23ba0ae924eefabbbf36d51bf85e0548f6971758465075 HTTP/1.1\r\nHost: pxl-eu.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nCookie: cookie_user_id=ee5c67dd-d280-5724-abee-fefde6fe0aa2; bfq=APeIECNCxxYZMXDUiJGjRhcWIsYU3BLjoYgyE2PcqKFwIY2NXfoo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-robots-tag: noindex, nofollow\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ba036c43037cfe89320d1ef7b64cd43f","sha1":"88c72d3e26047eb1e45e5564a76427734f120efe","sha256":"42cb846e07917f6731406e500f24aeb2e88c42cda124eaa59e08c5331cad8bcb","sha512":"aa80ccd27c05eb729f730b9d830b011650bcf12cbb25d19edf29efcf962c7465bb5685a5ff5d084356c6710c08e829d16b59e7a59a41767eb14744f326b6c124","ssdeep":"","tlshash":"19900403f5400003d175d03107170340134cd110057c0307405d505cdc553510c01010","first_seen":"2023-05-10T09:10:20Z","last_seen":"2026-04-20T13:09:39.590273Z","times_seen":14820,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":82,"dns":44,"connect":25,"send":0,"wait":27,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Arimo:ital,wght@0,400..700;1,400..700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199","date":"2025-09-21T14:31:16.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:49 GMT","end":"Mon, 01 Dec 2025 08:36:48 GMT"},"fingerprint":{"sha1":"9E:38:51:02:B6:22:9C:08:6B:24:B8:A0:EB:DB:60:D9:27:B2:68:90","sha256":"67:AF:7E:56:AB:8D:96:FB:D0:75:CA:28:6D:16:B6:67:FD:7F:58:6F:CC:AA:78:B5:01:13:76:2C:AB:BE:80:4E"}}},"request":{"raw":"GET /css2?family=Arimo:ital,wght@0,400..700;1,400..700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.xlivrdr.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 21 Sep 2025 14:31:16 GMT\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncache-control: private, max-age=86400, stale-while-revalidate=604800\r\nlast-modified: Sun, 21 Sep 2025 14:29:22 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5379,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"56351891ce8fb221bb3590d9841cf0c0","sha1":"29b8c5a1216c54bb8832edcceed2beca6090b98e","sha256":"3515c7b2de099d47b9488f1d37b842c001ec454a998dd51861065b34868cfe8f","sha512":"6953ed577894d470eaa0f379f887b0a02951a8e258c3a929453eccae8ef4e2987028bd664a555fc986a446ec1940db809217f1f018ddad8cc1525398fd55c637","ssdeep":"96:CYgFasyYgFarFZfYgFatYgFafLYgFao3YgFalYgFaZJc+uDYgFaXNTOFaYyOFaWh:XHsnHEHKHf0HoIHCHZVHzYIW62OBSdvz","tlshash":"90b199a1001bd480db870cc277cfbd3aae4e61597445d0baaffe48dcac96c629394b1d","first_seen":"2025-09-09T07:58:30.235801Z","last_seen":"2026-04-20T12:05:35.192709Z","times_seen":3633,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1758464940/152719347_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199","date":"2025-09-21T14:31:16.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 Aug 2025 09:19:42 GMT","end":"Sat, 01 Nov 2025 10:19:23 GMT"},"fingerprint":{"sha1":"44:F7:F2:B0:B9:E8:45:DC:8B:94:CD:26:E3:38:54:5D:E6:EB:A5:03","sha256":"3E:1B:F1:89:FB:27:09:F0:4C:55:6F:DC:12:3E:86:60:5C:2B:82:87:83:97:37:0B:5F:B3:17:E2:B7:9A:78:F8"}}},"request":{"raw":"GET /thumbs/1758464940/152719347_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.xlivrdr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10772\r\netag: \"a7835d5bda0c31983e3109331e544e0d\"\r\nlast-modified: Sun, 21 Sep 2025 14:28:39 GMT\r\nx-proxy-cache-orig: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nage: 102\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 982a43eb18c25691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10772,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a7835d5bda0c31983e3109331e544e0d","sha1":"9fea7d9c0155b8bff71171aab1fdb76cc71dce9a","sha256":"f313fd6ff120828c114f4e79ba21e70f4866a75a81ce6f4b3e11010500be5d79","sha512":"e872931a69515dc300a501c84597a518bc71d2dff0b23846e061ed2c6a1c672b8bf471ff2d5874557fe5d64a67949f8cffccc71e8cb3ec5c220cf41faf64eb38","ssdeep":"192:qeHd39bXL0C5GpcqYIhVkZG/ik3kHTpOyXQux3IL2epc7Zt7wOzNLY7:JHN9rQC5GW/pRXLx3jep+t7Fk7","tlshash":"f222d0b21b9b097ad5a9c9f94ad0cd43b2ec33426ceec712436e5ea4b36d07b1112203","first_seen":"2025-09-21T14:32:25.343959Z","last_seen":"2025-09-21T14:32:25.343959Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199","date":"2025-09-21T14:31:16.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://creative.xlivrdr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20472\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Sep 2025 20:16:53 GMT\r\nexpires: Fri, 18 Sep 2026 20:16:53 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:07:14 GMT\r\ncontent-type: font/woff2\r\nage: 238463\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20472,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20472, version 1.0","md5":"ff7c31ab8498bb2f3201ff222390a037","sha1":"6bb23ed30c097b0a73569f9b79241911f7db6b54","sha256":"cceb75629f2a32e4698d087f1bb0c6c4cdc1eb9b19cd416a54cfd7323356db7e","sha512":"2ecc363dfabe45651e438ecdbfd2d9b5a3d698adce305dd8332851721eeec6c9e83c18ec7740c7a2f12fcfe4b91b53b3b9e85a1bdf28d3a59621aed3cd2c5180","ssdeep":"384:fL2B0ekvyfyLlOkxB+a5dAvB+VkzjDYDsescc2AAx9JYrYs4j:fL2B0ekvyfyLck6a5OMmzjDYtsckaC0","tlshash":"8d92d11e32b7918bf3c4eb7f6cd36964d914a0f38fac05127844d2a8169880553b9cfe","first_seen":"2025-06-04T02:20:52.221924Z","last_seen":"2026-04-20T12:34:47.9877Z","times_seen":6810,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":89,"dns":1,"connect":20,"send":0,"wait":22,"receive":6,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tsvideo.sacdnssedge.com/video/ol_2bb0ba5d4134d489d40c8a2631e22c83.mp4","fqdn":"tsvideo.sacdnssedge.com","domain":"sacdnssedge.com","tld":"com"},"ip":{"addr":"212.102.62.46","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:16.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1306075136.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 11:45:54 GMT","end":"Mon, 01 Dec 2025 11:45:53 GMT"},"fingerprint":{"sha1":"F5:AA:C7:6C:C7:93:C4:F6:5E:96:1F:53:A8:14:56:6C:BD:F6:9C:CA","sha256":"55:94:6F:AC:E4:1C:91:4F:EC:CF:8C:69:E0:FB:E6:96:40:F2:5D:2A:41:51:B7:40:59:71:1E:98:65:A9:C4:1B"}}},"request":{"raw":"GET /video/ol_2bb0ba5d4134d489d40c8a2631e22c83.mp4 HTTP/1.1\r\nHost: tsvideo.sacdnssedge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=2392064-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 35902\r\nvary: accept-encoding\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"ol_2bb0ba5d4134d489d40c8a2631e22c83.mp4\"\r\netag: \"5cf29f22596d16194370dec323e7194d\"\r\nexpires: Sun, 21 Sep 2025 15:22:06 GMT\r\nlast-modified: Sun, 21 Sep 2025 14:22:06 GMT\r\ncache-control: max-age=7200\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncf-cache-status: HIT\r\nage: 0\r\ncf-ray: 982a368079cad25a-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-77-nzt: EgwB1GY+LgG3JAIAAAwBT3/TDwG3AQAAAA\r\nx-77-nzt-ray: db5cda0983da2b7b340cd0689e96d233\r\nx-77-cache: HIT\r\nx-77-age: 548\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\ncontent-range: bytes 2392064-2427965/2427966\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35902,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"fd0e030ec6a7a17a3a0972adffe1dd4f","sha1":"f0b582b1ba84dfe2a13b44b2adc148b1ba39e5e8","sha256":"c11134d8b75758b61b831155c794ca0f14e0002f162c302075cb8d32cd8e23ab","sha512":"1f6e47cb46687754330abb96c84b4258a7fa8cc83b875e918f3553f2e8eb84509961396693bfefd8145eb329a4808be4d5a527cd54b40dfa2ac5a919fe6d8a41","ssdeep":"384:8QmdrI78aJoVUK07JB8FvUhPG2+6MjBP12AEofalsEnqtuEebCETI5TiP+xTFMsl:8tIAai07aiXW/EofKsUpEaqTDXMI","tlshash":"41f24ea2f3211507da91173598e103207730e5753787874f8be1a73eadab3e99e035ea","first_seen":"2025-09-21T14:32:25.280352Z","last_seen":"2025-09-21T14:32:25.280352Z","times_seen":1,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":40,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"video.sacdnssedge.com/video/2bb0ba5d4134d489d40c8a2631e22c83.mp4","fqdn":"video.sacdnssedge.com","domain":"sacdnssedge.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199","date":"2025-09-21T14:31:17.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1894120159.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 11:23:17 GMT","end":"Mon, 01 Dec 2025 11:23:16 GMT"},"fingerprint":{"sha1":"6C:F0:E6:7B:64:17:10:A8:FA:BF:27:07:10:15:AF:6E:E6:98:D4:B0","sha256":"96:D2:44:B3:D4:D6:DE:C6:FD:A7:7F:68:CE:B6:6A:C0:5A:AF:0C:DD:A8:39:FC:80:62:ED:93:CA:F6:D7:27:72"}}},"request":{"raw":"GET /video/2bb0ba5d4134d489d40c8a2631e22c83.mp4 HTTP/1.1\r\nHost: video.sacdnssedge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.xlivrdr.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Sun, 21 Sep 2025 14:31:17 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 2429508\r\nvary: accept-encoding\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"2bb0ba5d4134d489d40c8a2631e22c83.mp4\"\r\netag: \"415ba260d3d6973f9b942d3515312c1a\"\r\nexpires: Sun, 21 Sep 2025 15:22:06 GMT\r\nlast-modified: Sun, 21 Sep 2025 14:21:37 GMT\r\ncache-control: max-age=7200\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncf-cache-status: HIT\r\nage: 0\r\ncf-ray: 982a367b9d601965-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-77-nzt: EwwBX63NDQH3FQIAAAwBuUwKDAH3EAAAAAwBWd59LgG3AgAAAA\r\nx-77-nzt-ray: 2a494a15a94d20475a0cd0687fb6ad13\r\nx-77-cache: HIT\r\nx-77-age: 533\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 0-2429507/2429508\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":1572864,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"e249eb724693cd7ede6a445268246812","sha1":"44e6e0b4776dd2cfa674772acdfb9aa1c016f412","sha256":"ecd84b3c950cadbd67a4990c9a85544ba1a464637ef1b1f15dbd940d2c892198","sha512":"c5a510e079aa0b2ecb4c6498e03d108aaaa637c3e42f021579aaab976a95b1bd6906c26c45fb41b8e5e303e9637e98432740e12f52b5fd58b2930335cc8eb96d","ssdeep":"24576:2lbRfT2nRD+HlNA3cWBelhiWvmkShgIc+HY1Tb3CowjhdQ:2ffaQO3cDbhDD04RyowQ","tlshash":"032533052e7670059cbd8438bae26358a9c37fcd5499a5c3c5dd1a4373422a8bfeb6cc","first_seen":"2025-09-21T14:32:25.345459Z","last_seen":"2025-09-21T14:32:25.345459Z","times_seen":1,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":84,"dns":70,"connect":1,"send":0,"wait":2,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scandalshack.com/wp-content/plugins/ajax-search-lite/css/style-curvy-black.css?ver=4.13.2","fqdn":"scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"172.67.150.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:14.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scandalshack.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 23:54:49 GMT","end":"Tue, 28 Oct 2025 22:53:42 GMT"},"fingerprint":{"sha1":"BD:78:39:A6:81:9B:CE:CD:A7:D9:59:79:78:AC:AB:E2:36:4B:A0:D6","sha256":"AB:05:0C:75:B6:6C:8C:56:8B:28:A0:1D:62:11:3F:92:2C:0F:5F:DA:DA:0B:61:B8:E7:31:4D:C5:7F:E6:06:14"}}},"request":{"raw":"GET /wp-content/plugins/ajax-search-lite/css/style-curvy-black.css?ver=4.13.2 HTTP/1.1\r\nHost: scandalshack.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:14 GMT\r\ncontent-type: text/css\r\ncontent-length: 1072\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 19 Sep 2026 17:26:55 GMT\r\nlast-modified: Mon, 25 Aug 2025 23:27:51 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 22715\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ne7JKZi%2BpUcC05tT0uZitE%2BeeAI1ATTzMN4qB%2Fc2QZbwaJr46OA%2BF5%2F92R0ouxDluAueMWvpkp7D69aER4%2FFkmJu79MNXxg3q8nGIBl%2BPc8%3D\"}]}\r\ncf-ray: 982a43dcded776ef-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6457,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6457), with no line terminators","md5":"9bee48d81ed347d677bea9aee0eae02a","sha1":"28f893b0f0e58ecb0295b370ca5f99bb2d94a52b","sha256":"779e15942143532577fc8a6ac98f187275d30c53b369633c752ea1d0d887dda7","sha512":"70316b6c4b9f815038a0f5689dfe34a026c1ab24b35d0423b553f09c9091c64b2269f1433352465456287f564824c375c1a18fbe42085ee04ad25b6e328cb3ea","ssdeep":"192:iMKjgjbjGjegmTmFmZmi6F/RmPmdmBmiFF4gooBkES4fhqcE+FUW:6oBTOBU","tlshash":"44d1be34e562201eb2268867344bab5f30b98666e5034a3dce6b29f4ef474dad277341","first_seen":"2023-05-08T20:29:10Z","last_seen":"2026-04-20T12:54:48.97606Z","times_seen":552,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/interstitial.ts.css","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:14.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 Aug 2025 08:32:03 GMT","end":"Fri, 31 Oct 2025 08:32:02 GMT"},"fingerprint":{"sha1":"E4:52:21:98:B0:CD:51:03:1A:59:A9:01:02:8A:D6:3B:66:E3:EE:3A","sha256":"F1:77:51:DD:B8:B7:37:39:6D:01:37:95:43:1C:C1:78:42:1E:A6:30:E3:96:F3:D8:25:E4:61:7E:80:03:FD:8A"}}},"request":{"raw":"GET /sdk/v1/interstitial.ts.css HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:14 GMT\r\ncontent-type: text/css\r\nserver: nginx\r\nlast-modified: Thu, 26 Jun 2025 13:39:27 GMT\r\netag: W/\"685d4d8f-2a3d\"\r\nx-robots-tag: noindex, nofollow\r\ncontent-encoding: gzip\r\ncache-control: max-age=172800\r\nexpires: Tue, 23 Sep 2025 14:31:14 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: ah1742,DS9225\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10813,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10813), with no line terminators","md5":"d9b11d094e2e9be4cdfa5313ca71c464","sha1":"3fbcb5206cf236b5cf7af8b0b368f0b972c4e770","sha256":"a8ca69ec3a4abe454bb1a91c4b08937d7179010cefb73681c32da5fb30916a58","sha512":"ca896af1cc6c65c9ada4981f5e1eec0139597df6807fe204c9140a79c653c90ada66426267492d2267b4d93b97d6e409147c5b36e7d952775014e2f9f3a886aa","ssdeep":"96:uoozJ7To0PZ1rr91rJZnvATJrBRp6heRaq1T1gDSnWLr3fGHQYO2wnjGXnAiAJAG:qPnOXa5Sn6PGS2aOnZseUhnfh","tlshash":"e622303145e22e17ed33d159a1856af812b4c8068ff256afb97f7d1482cb28fb25db04","first_seen":"2025-06-26T16:39:31.274152Z","last_seen":"2025-12-05T16:24:44.312138Z","times_seen":54,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":155,"connect":19,"send":0,"wait":20,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndication.realsrv.com/splash.php?idzone=4258810\u0026cookieconsent=true\u0026tags=null","fqdn":"syndication.realsrv.com","domain":"realsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:15.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"realsrv.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 10:28:32 GMT","end":"Sun, 09 Nov 2025 10:28:31 GMT"},"fingerprint":{"sha1":"49:F9:A3:64:80:4E:E7:1E:08:38:FE:16:31:4F:0C:5D:A2:56:E9:39","sha256":"60:92:1C:94:D6:08:A7:43:1E:69:C7:33:E1:1B:03:49:60:49:78:E2:72:D2:98:57:09:3A:90:E6:50:34:AF:48"}}},"request":{"raw":"GET /splash.php?idzone=4258810\u0026cookieconsent=true\u0026tags=null HTTP/1.1\r\nHost: syndication.realsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mail.scandalshack.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 21 Sep 2025 14:31:15 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":48,"dns":2,"connect":28,"send":0,"wait":30,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/dsp-pixels","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:16.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 Aug 2025 08:32:03 GMT","end":"Fri, 31 Oct 2025 08:32:02 GMT"},"fingerprint":{"sha1":"E4:52:21:98:B0:CD:51:03:1A:59:A9:01:02:8A:D6:3B:66:E3:EE:3A","sha256":"F1:77:51:DD:B8:B7:37:39:6D:01:37:95:43:1C:C1:78:42:1E:A6:30:E3:96:F3:D8:25:E4:61:7E:80:03:FD:8A"}}},"request":{"raw":"GET /dsp-pixels HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mail.scandalshack.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-type: application/json\r\ncontent-length: 70\r\nserver: nginx\r\ncache-control: max-age=172800\r\nx-request-id: ac65f9c6-8889-466e-b4a2-04f3dcef16e2\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Accept\r\nexpires: Tue, 23 Sep 2025 14:31:16 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: ah1742,DS9225\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d65d54baa73d8c5cf1b4145ed2f566ce","sha1":"1924c807418dc7cdf8135bbf2be4e89402e21bfd","sha256":"282322db040ca32cc2f1657864a542d7b60f5d47f4f0f0f7708704acb3c54a88","sha512":"4d9b73b80c65606c0e31a0666a398ee5660fba63277c5abba2938038ba02c1de315fc3e9be8db67e252b8789699f93644347c5805b5a6cdc1b1063cfc9eb4b37","ssdeep":"","tlshash":"5ba022bb00a8b0ceaf20e0c83008a0000ccf80b820a88088ccf22cc0820b3a23030288","first_seen":"2025-06-26T11:56:09.222052Z","last_seen":"2026-04-19T20:01:19.748897Z","times_seen":3043,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scandalshack.com/wp-content/plugins/ajax-search-lite/css/style.basic.css?ver=4.13.2","fqdn":"scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"172.67.150.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:14.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scandalshack.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 23:54:49 GMT","end":"Tue, 28 Oct 2025 22:53:42 GMT"},"fingerprint":{"sha1":"BD:78:39:A6:81:9B:CE:CD:A7:D9:59:79:78:AC:AB:E2:36:4B:A0:D6","sha256":"AB:05:0C:75:B6:6C:8C:56:8B:28:A0:1D:62:11:3F:92:2C:0F:5F:DA:DA:0B:61:B8:E7:31:4D:C5:7F:E6:06:14"}}},"request":{"raw":"GET /wp-content/plugins/ajax-search-lite/css/style.basic.css?ver=4.13.2 HTTP/1.1\r\nHost: scandalshack.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:14 GMT\r\ncontent-type: text/css\r\ncontent-length: 4001\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 19 Sep 2026 17:26:55 GMT\r\nlast-modified: Mon, 25 Aug 2025 23:27:51 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 183859\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1K1D84pvEo4zufPbqwwdt7CKCQhWJJIYPpnkN%2BoHelj6cCHIUDfuSEeTmbp9qTNPkWGbN0I3%2FlsZLZ3ou0yTrz2Kn%2B2fOyH4bfpEh%2FOjip4%3D\"}]}\r\ncf-ray: 982a43dcded876ef-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22327,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (507)","md5":"0c80eea46a2695f4a89f7e8df5b4b94c","sha1":"186fae13d593c7b05ccd02493f9002e14726e603","sha256":"d4c2e003dd18f45a579e58d9ff10f90402d8ada8dc46d9e8148ad6e92b8e3241","sha512":"44edf797ec12772c3f5112c7411062b859063a735ce35424415bc7e2169d3b33d76f7bd9035ae4f91874b20d8d8f31f2ca0d95ad177ae4ea1e2c36a955611744","ssdeep":"192:j9osbVoslRslS/MslS/njZxyDV51jFUHkNX8MvprbSnD8s/Z7cs/Z722/wlXl819:b3FDNdy/wlXl8o1wiCbj4dt0N1BCQ","tlshash":"eea22d6eaea304446917c56a1bfb5b29376c40032906cc3dff9d3fa48f4ab8991f1749","first_seen":"2025-06-26T01:52:31.552199Z","last_seen":"2026-04-20T12:54:48.934882Z","times_seen":1801,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":33,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1758464460/117762271_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199","date":"2025-09-21T14:31:16.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 Aug 2025 09:19:42 GMT","end":"Sat, 01 Nov 2025 10:19:23 GMT"},"fingerprint":{"sha1":"44:F7:F2:B0:B9:E8:45:DC:8B:94:CD:26:E3:38:54:5D:E6:EB:A5:03","sha256":"3E:1B:F1:89:FB:27:09:F0:4C:55:6F:DC:12:3E:86:60:5C:2B:82:87:83:97:37:0B:5F:B3:17:E2:B7:9A:78:F8"}}},"request":{"raw":"GET /thumbs/1758464460/117762271_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.xlivrdr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18228\r\netag: \"093af2b4fb26790a89783c5778e5baee\"\r\nlast-modified: Sun, 21 Sep 2025 14:20:34 GMT\r\nx-proxy-cache-orig: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nage: 548\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 982a43eaf8ac5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18228,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"093af2b4fb26790a89783c5778e5baee","sha1":"09f2a1849ac6bf54e65e285b169a9a0694586a16","sha256":"c1df781d65851982e2671b9eb2eee9d122f18dce10eb2c8694efad363121b234","sha512":"75847dcdb789da72b9b07572f248033f44ddb1f285b03c6c6efdbe615a20ae1bd11a0c5950a72de21efdf33ba3c82f591afbec4e601382afdacc1715196e2068","ssdeep":"384:8A/R0qPaeInAIvBRON0dStsS5awNDmX2K+f/ND56e+MddiNt:8AyIIekStFzDmXkXdzvdMv","tlshash":"2182d1f4cbfbfacd8514661c8c7c4eeac5985049fe261f03d3e35057c524e1429e869a","first_seen":"2025-09-21T14:32:25.348564Z","last_seen":"2025-09-21T14:32:25.348564Z","times_seen":1,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1758464220/154139466_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199","date":"2025-09-21T14:31:17.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 Aug 2025 09:19:42 GMT","end":"Sat, 01 Nov 2025 10:19:23 GMT"},"fingerprint":{"sha1":"44:F7:F2:B0:B9:E8:45:DC:8B:94:CD:26:E3:38:54:5D:E6:EB:A5:03","sha256":"3E:1B:F1:89:FB:27:09:F0:4C:55:6F:DC:12:3E:86:60:5C:2B:82:87:83:97:37:0B:5F:B3:17:E2:B7:9A:78:F8"}}},"request":{"raw":"GET /thumbs/1758464220/154139466_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.xlivrdr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14816\r\netag: \"933b6011338e45f8d485418d650fefb9\"\r\nlast-modified: Sun, 21 Sep 2025 14:16:09 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 690\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 982a43eb28d25691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14816,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"933b6011338e45f8d485418d650fefb9","sha1":"1a57449b20f1155c585e5d316aa86e8039c36344","sha256":"25526ea7ac477c07ec121595bc614b3cb5f30b639c02ca2b44915b4036ac9b1f","sha512":"7d21627e122e3251afbceadfdce2dd9690c625205cd5e2d70cf7d12b331f613924c8c2c942640fbd62d04910ff01b7e5ffb5facd852d6c06579747357d3bae15","ssdeep":"384:7r4wIh7gUUcKkT/E1k5o970L+TvUPQiwCE:70OUBT/mkC++TQRE","tlshash":"0762bf0488a052c679bbb4bcabacbbcd35d594d99cf498cb8709939af11d21f7e0049d","first_seen":"2025-09-21T14:32:25.349593Z","last_seen":"2025-09-21T14:32:25.349593Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:14.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:49 GMT","end":"Mon, 01 Dec 2025 08:36:48 GMT"},"fingerprint":{"sha1":"9E:38:51:02:B6:22:9C:08:6B:24:B8:A0:EB:DB:60:D9:27:B2:68:90","sha256":"67:AF:7E:56:AB:8D:96:FB:D0:75:CA:28:6D:16:B6:67:FD:7F:58:6F:CC:AA:78:B5:01:13:76:2C:AB:BE:80:4E"}}},"request":{"raw":"GET /css?family=Open+Sans\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 21 Sep 2025 14:31:14 GMT\r\ndate: Sun, 21 Sep 2025 14:31:14 GMT\r\ncache-control: private, max-age=86400, stale-while-revalidate=604800\r\nlast-modified: Sun, 21 Sep 2025 13:39:00 GMT\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6193,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"7e0a00a3f6ab7ec04a66dfa361b7e9cc","sha1":"99de190ea3c393de80111d132e58abc20f988664","sha256":"64c18f81af81ab6b2ebc8598ed900f7023e0e8788bedd348ab41a92d76f80655","sha512":"6ed19e94e0438c18bf2c2ced27f712d94ecc74391b5239d12e2f300bee21cd9879377577e3cb86f385fafb469e93351e671af17d8bfd3e2231c0202909406a90","ssdeep":"96:ZOEba9JOEbaWDFZ8OEbajkOEbaFYOEbahOEbaNy+aZjzBrWOEbazubqGIFuV4UOM:a9KkjzFXCNqJCbqGIwV4jRlYx","tlshash":"9bd11f9000175050ab471ce627cebf34ee1fa2616040d07aabfd478aeddbda5637931d","first_seen":"2025-09-17T04:21:06.438819Z","last_seen":"2026-04-20T12:54:48.995372Z","times_seen":8694,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":39,"connect":43,"send":0,"wait":45,"receive":0,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tsyndicate.com/do2/a7d539e439d442b081846438965a09d3/push?w=1280\u0026h=1024\u0026keywords=%F0%9F%91%85%F0%9F%8D%91%F0%9F%8D%92%20Star%20%E2%AD%90%F0%9F%98%88%E2%9D%A4%EF%B8%8F%20Scandals%20%F0%9F%8D%86%F0%9F%8D%8C%F0%9F%92%A6%2CScandal%20Shack%20%E2%80%93%20%F0%9F%91%85%F0%9F%8D%91%F0%9F%8D%92%20Star%20%E2%AD%90%F0%9F%98%88%E2%9D%A4%EF%B8%8F%20Scandals%20%F0%9F%8D%86%F0%9F%8D%8C%F0%9F%92%A6\u0026tz=0\u0026t=in_page_push","fqdn":"tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"136.243.43.25","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:15.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tsyndicate.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 20:10:41 GMT","end":"Thu, 11 Dec 2025 20:10:40 GMT"},"fingerprint":{"sha1":"25:5B:D4:FE:8D:85:CA:1A:7D:3A:B0:58:EC:2D:7A:B0:62:90:21:1F","sha256":"DF:0A:26:3C:A9:CF:97:54:23:20:C6:11:EB:C6:8C:7F:02:14:58:C8:F6:3B:08:10:27:BF:78:67:09:32:DC:9C"}}},"request":{"raw":"GET /do2/a7d539e439d442b081846438965a09d3/push?w=1280\u0026h=1024\u0026keywords=%F0%9F%91%85%F0%9F%8D%91%F0%9F%8D%92%20Star%20%E2%AD%90%F0%9F%98%88%E2%9D%A4%EF%B8%8F%20Scandals%20%F0%9F%8D%86%F0%9F%8D%8C%F0%9F%92%A6%2CScandal%20Shack%20%E2%80%93%20%F0%9F%91%85%F0%9F%8D%91%F0%9F%8D%92%20Star%20%E2%AD%90%F0%9F%98%88%E2%9D%A4%EF%B8%8F%20Scandals%20%F0%9F%8D%86%F0%9F%8D%8C%F0%9F%92%A6\u0026tz=0\u0026t=in_page_push HTTP/1.1\r\nHost: tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mail.scandalshack.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 14:31:15 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: https://mail.scandalshack.com\r\naccess-control-allow-methods: POST, GET, HEAD\r\naccess-control-allow-headers: Accept, X-Requested-With, X-Forwarded-For, X-Real-IP, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Legacy, Content-Type,Authorization, Nav-Ua-He-Mobile, Nav-Ua-He-Platform, Nav-Ua-He-Brands, Nav-Ua-He-Platformversion, Nav-Ua-He-Model, Nav-Ua-He-Architecture, Nav-Ua-He-Bitness, Nav-Ua-He-Fullversionlist, Nav-Ua-He-Uafullversion, Nav-Ua-He-Wow64\r\naccess-control-allow-credentials: true\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding, *\r\nset-cookie: cookie_user_id=ee5c67dd-d280-5724-abee-fefde6fe0aa2; expires=Sat, 21 Mar 2026 14:31:15 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None\nbfq=APeIECNCx5YZNGDEiGEDRxcWIsYU3BLjoYgyE2PcqIGjRo0YNDZ26aMg; expires=Mon, 22 Sep 2025 14:31:15 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, no-transform\r\nx-robots-tag: none, noindex, nofollow\r\nreport-to: { \"url\": \"https://pxl.tsyndicate.com/api/v1/heavy-ad/report\", \"max_age\": 86401 }\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\npermissions-policy: ch-ua-model=(self \"https://tsyndicate.com\"), ch-ua-platform-version=(self)\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3677,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5ee5f53d56e590f348bc52308e0604e3","sha1":"0f58e17f40044d34c7fafd2742b04c38c0876283","sha256":"158dbb9a33ac00c76f5bd2621b2923788d238778f1bb4e6c27f0fda65f936a5b","sha512":"041da0e9d066611cb96fe76204471f85fce51091aef2503586b07e03700e756096ae9fb33a2ba1a94769aa411191785a828baefb06c385d22467d5dbcd5d5c12","ssdeep":"","tlshash":"3f715d61c5944c55cf0440c5a1605d853c877aef0ee344dc6ca6e107ac395ccbc3baa7","first_seen":"2025-09-21T14:32:25.351039Z","last_seen":"2025-09-21T14:32:25.351039Z","times_seen":1,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images-na.ssl-images-amazon.com/images/S/compressed.photo.goodreads.com/books/1739656012i/227780642.jpg","fqdn":"images-na.ssl-images-amazon.com","domain":"ssl-images-amazon.com","tld":"com"},"ip":{"addr":"23.36.77.57","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:16.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.media-amazon.com","organization":"Amazon.com Inc."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 12 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"52:9F:14:7C:1C:DE:2E:2B:10:AD:C2:84:42:99:77:E4:25:83:64:FA","sha256":"4E:45:D6:E2:16:98:72:62:8C:A1:C0:32:13:5A:21:2F:8B:34:89:64:D9:3E:D0:C9:B8:80:A0:20:36:49:D4:3A"}}},"request":{"raw":"GET /images/S/compressed.photo.goodreads.com/books/1739656012i/227780642.jpg HTTP/1.1\r\nHost: images-na.ssl-images-amazon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 55430\r\nserver: Server\r\nx-amz-ir-id: 48caa848-5973-42d7-ae67-66bec4ce376e\r\nlast-modified: Tue, 18 Feb 2025 21:38:54 GMT\r\nsurrogate-key: x-cache-442 /images/S/compressed.photo.goodreads.com/books/1739656012i/227780642\r\nx-nginx-cache-status: HIT\r\naccept-ranges: bytes\r\npeer-cache: Hit\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nx-cache: Hit from akamai\r\nakamai-grn: 0.354d2417.1758465076.27cb2b82\r\nserver-timing: provider;desc=\"ak\"\r\ntiming-allow-origin: https://mail.scandalshack.com/\r\nakamai-cache-status: Miss from child, Hit from parent\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":55430,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x1419, components 3","md5":"29b6774d2c3245a9dfaacbab31ffb9f8","sha1":"f1e19f7309009baca060c3da7cfc0e1929ee77ae","sha256":"d64e2ec74192499d4d88913156df6d9289c5e834c77f615dc081ddbbd3c6f816","sha512":"bad574b9e5696430384ffdd2e46799649975ccd69d77a4a1b03e2d5231300a1745778fc372b4a756c5288f15839c38fdebf68fe5b39b696e6abbe272ff91a916","ssdeep":"768:EWbzm11a3ZBubF4gowvcqOBC/wYOgDe6JyPe624ys3yMYUM4WWAi1JBNtW+xnZyl:ExapBuxNvZh4Y+e6csnWx21tW+LJY","tlshash":"3f43592e0bb6026ad91c36382990ab714517cd9498f78fb3c6e27f18741d9fec9b3844","first_seen":"2025-09-21T14:32:25.353414Z","last_seen":"2025-09-21T14:32:25.353414Z","times_seen":1,"resource_available":false,"data":null}},"time_used":550,"timings":{"blocked":254,"dns":224,"connect":3,"send":0,"wait":19,"receive":2,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.xlivrdr.com/api/models/vast?action=sbSignupWithModelSoft\u0026ax=0\u0026campaignId=c5135a4f2a1f31dec37f81076f43ce3228115817d90d19693df2b5c1c9764766\u0026campaignType=smartpop\u0026creativeId=c9b7e049622029cfc0319cc5a63e6f98450c376d3776beafa8030c904a3fd6d5\u0026duration=00%3A00%3A30\u0026iterationId=1075268\u0026masterSmartpopId=2683\u0026memberId=d4XOYsXP5WhKzF_aXnPhaPEdvLICCY-7WD5eTJx-u0wOgtQ4hDLRbQPaXAmfo9cFk9lAuGlwAwPIvdqYUt8jWCurlnYYDU5pYli8lozSM8jcIbVV_gUIDRUi\u0026p1=4770843\u0026ruleId=29\u0026showCompanion=1\u0026skipOffset=00%3A00%3A05\u0026smartpopId=13956\u0026sourceId=594678\u0026tag=girls\u0026trafficType=preroll\u0026usePreroll=true\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34734\u0026videoType=ol","fqdn":"go.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"172.64.147.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:16.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.xlivrdr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:02:48 GMT","end":"Sun, 07 Dec 2025 09:02:14 GMT"},"fingerprint":{"sha1":"18:51:33:CF:A8:88:6B:8C:BA:0C:FC:AD:26:65:64:F8:F9:5A:32:CA","sha256":"37:C7:74:68:D2:46:40:59:86:A9:99:8C:2C:5E:F6:86:48:C4:47:28:01:2B:8E:2C:93:DF:31:57:81:AD:07:A0"}}},"request":{"raw":"GET /api/models/vast?action=sbSignupWithModelSoft\u0026ax=0\u0026campaignId=c5135a4f2a1f31dec37f81076f43ce3228115817d90d19693df2b5c1c9764766\u0026campaignType=smartpop\u0026creativeId=c9b7e049622029cfc0319cc5a63e6f98450c376d3776beafa8030c904a3fd6d5\u0026duration=00%3A00%3A30\u0026iterationId=1075268\u0026masterSmartpopId=2683\u0026memberId=d4XOYsXP5WhKzF_aXnPhaPEdvLICCY-7WD5eTJx-u0wOgtQ4hDLRbQPaXAmfo9cFk9lAuGlwAwPIvdqYUt8jWCurlnYYDU5pYli8lozSM8jcIbVV_gUIDRUi\u0026p1=4770843\u0026ruleId=29\u0026showCompanion=1\u0026skipOffset=00%3A00%3A05\u0026smartpopId=13956\u0026sourceId=594678\u0026tag=girls\u0026trafficType=preroll\u0026usePreroll=true\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34734\u0026videoType=ol HTTP/1.1\r\nHost: go.xlivrdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mail.scandalshack.com\r\nReferer: https://mail.scandalshack.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-type: text/xml; charset=utf-8\r\ncf-ray: 982a43e7a82a120a-OSL\r\naccess-control-allow-origin: https://mail.scandalshack.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3778,"size_decoded":0,"mime_type":"text/xml; charset=utf-8","magic":"XML 1.0 document, ASCII text, with very long lines (3778), with no line terminators","md5":"12a9a8bd29a70564297f589d47c08e00","sha1":"6bb0d07fc9a450910ac82dc61a0a2b172341bff3","sha256":"f1c719461e3c6f75547646260f9f5ac535ab0d8c1aecd47033cdfa76aa0bd503","sha512":"e68ee42eb6aebe0523965900c66ed95259a7b71ec0952291f743c1655847a4556ed5460b0b1478dbf659f040c8d584d4a10373cce27e48adae93f080a91ddc4f","ssdeep":"","tlshash":"9b71e9b251228da7a4c7523feb186488063f05326cc2c8f0f8592da7485a99b76f5375","first_seen":"2025-09-21T14:32:25.354386Z","last_seen":"2025-09-21T14:32:25.354386Z","times_seen":1,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/n.v2.css","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:16.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 Aug 2025 08:32:03 GMT","end":"Fri, 31 Oct 2025 08:32:02 GMT"},"fingerprint":{"sha1":"E4:52:21:98:B0:CD:51:03:1A:59:A9:01:02:8A:D6:3B:66:E3:EE:3A","sha256":"F1:77:51:DD:B8:B7:37:39:6D:01:37:95:43:1C:C1:78:42:1E:A6:30:E3:96:F3:D8:25:E4:61:7E:80:03:FD:8A"}}},"request":{"raw":"GET /sdk/v1/n.v2.css HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nCookie: cookie_user_id=ee5c67dd-d280-5724-abee-fefde6fe0aa2; bfq=APeIECNCxxYZMXDUiJGjRhcWIsYU3BLjoYgyE2PcqKFwIY2NXfoo\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-type: text/css\r\nserver: nginx\r\nlast-modified: Fri, 19 Sep 2025 07:45:55 GMT\r\netag: W/\"68cd0a33-5818\"\r\nx-robots-tag: noindex, nofollow\r\ncontent-encoding: gzip\r\ncache-control: max-age=172800\r\nexpires: Tue, 23 Sep 2025 14:31:16 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH1742,DS9225\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22552,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (22552), with no line terminators","md5":"679f7d5c0aa71715ee15227814dbee56","sha1":"8c706184f7e82a501ce4a9ed62c48fea26a458bf","sha256":"d92ec0fa4339c7a571ba87c5cefc78895ce6c5e6367529a6e26575ba329e53eb","sha512":"fbae1a3dfe7a671c5606f852a65b04e9f18cddf79712388ba6845107cf4fd4fa3324c662f05408a45d47957c73d26362d38921b19a348095b7be1adbebcd9656","ssdeep":"384:ORsyvHAlK1CezhZBhJVhhkhfu3IhDaezh9jhWqfKaFXMSTsrFsNpwtcSTzKX:ORswAlK1V9JfcfmyD99tWEXD","tlshash":"a2a2b8b549c0403cb9a6cbeee511795c6269c419d3d2836fd71cbb30e1d51c9b3b89b8","first_seen":"2025-07-14T17:27:18.227124Z","last_seen":"2025-09-25T04:28:02.680778Z","times_seen":428,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1758464400/156206858_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199","date":"2025-09-21T14:31:16.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 Aug 2025 09:19:42 GMT","end":"Sat, 01 Nov 2025 10:19:23 GMT"},"fingerprint":{"sha1":"44:F7:F2:B0:B9:E8:45:DC:8B:94:CD:26:E3:38:54:5D:E6:EB:A5:03","sha256":"3E:1B:F1:89:FB:27:09:F0:4C:55:6F:DC:12:3E:86:60:5C:2B:82:87:83:97:37:0B:5F:B3:17:E2:B7:9A:78:F8"}}},"request":{"raw":"GET /thumbs/1758464400/156206858_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.xlivrdr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9570\r\netag: \"8e3b431a7c3802a24f8777f377ec3d97\"\r\nlast-modified: Sun, 21 Sep 2025 14:19:32 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 609\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 982a43eb18be5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9570,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8e3b431a7c3802a24f8777f377ec3d97","sha1":"d3bf05b9cf4898f5545a598e5e80a46ac85f96a1","sha256":"9c5c793f222c71a894cff113ef572fc4d6b44df9c6f8d339e7f38a99b41ff978","sha512":"1362f08c4497d97ba188851ede39cbdbd7d1138e2ef555f020df561ace104d3492ee4f3aab37d2bc6839b92120384d74fb3138d9511ab4dfb4667da735d5e4e7","ssdeep":"192:74TpwmDKAv1n3KDZmC2YAcvpkpm4QaQXEkQDZBifYol/Tr7XTJU2cY:74Tpwm2ANn3mkYphkpm4QaQXj5fP/H7P","tlshash":"cc12bf54d03aa2126fc828d4e81561c16514a77f596b352d31278f6a0a40d3bdade3f6","first_seen":"2025-09-21T14:32:25.358117Z","last_seen":"2025-09-21T14:32:25.358117Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"video.sacdnssedge.com/video/2bb0ba5d4134d489d40c8a2631e22c83.mp4","fqdn":"video.sacdnssedge.com","domain":"sacdnssedge.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199","date":"2025-09-21T14:31:17.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1894120159.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 11:23:17 GMT","end":"Mon, 01 Dec 2025 11:23:16 GMT"},"fingerprint":{"sha1":"6C:F0:E6:7B:64:17:10:A8:FA:BF:27:07:10:15:AF:6E:E6:98:D4:B0","sha256":"96:D2:44:B3:D4:D6:DE:C6:FD:A7:7F:68:CE:B6:6A:C0:5A:AF:0C:DD:A8:39:FC:80:62:ED:93:CA:F6:D7:27:72"}}},"request":{"raw":"GET /video/2bb0ba5d4134d489d40c8a2631e22c83.mp4 HTTP/1.1\r\nHost: video.sacdnssedge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=786432-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.xlivrdr.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Sun, 21 Sep 2025 14:31:17 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 1643076\r\nvary: accept-encoding\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"2bb0ba5d4134d489d40c8a2631e22c83.mp4\"\r\netag: \"415ba260d3d6973f9b942d3515312c1a\"\r\nexpires: Sun, 21 Sep 2025 15:22:06 GMT\r\nlast-modified: Sun, 21 Sep 2025 14:21:37 GMT\r\ncache-control: max-age=7200\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncf-cache-status: HIT\r\nage: 0\r\ncf-ray: 982a367b9d601965-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-77-nzt: EwwBX63NDQH3FQIAAAwBuUwKDAH3EAAAAAwBWd59LgG3AgAAAA\r\nx-77-nzt-ray: 2a494a157f6023485a0cd068c7dfe61a\r\nx-77-cache: HIT\r\nx-77-age: 533\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 786432-2429507/2429508\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32768,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"abb1a9fc67a6201c4fcaf1e01535557c","sha1":"0242cad125387f42362950c1eaddbd6e084c7752","sha256":"22a06a77586e47b58091bfb64af0c042129a981e9fe65a67bf1603981a4eb6fc","sha512":"d02a49f5f033cb306dddfa8da4718e1c8ba420399d1f9ced2b0c49373efd6c76e695f47f25d03246a0d4c84e517f2c887ca311dcea5763599aca4d7fe9cdc04c","ssdeep":"768:7S09m/xxe96v2dNB0rS/1Rze23GUNzm8NOw8sreiciH693rihW0:78D2d7QS/4UNzm8NOTsy3k697ihW0","tlshash":"7de2f1f18e0f2c480b4d43b5f1362ff9f4589b8e4b5a57520dfc18a6912b0aa9e44fa0","first_seen":"2025-09-21T14:32:25.359151Z","last_seen":"2025-09-21T14:32:25.359151Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scandalshack.com/wp-content/fonts/alegreya-sans/5aUz9_-1phKLFgshYDvh6Vwt7VptvQ.woff2","fqdn":"scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"104.21.30.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:14.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scandalshack.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 23:54:49 GMT","end":"Tue, 28 Oct 2025 22:53:42 GMT"},"fingerprint":{"sha1":"BD:78:39:A6:81:9B:CE:CD:A7:D9:59:79:78:AC:AB:E2:36:4B:A0:D6","sha256":"AB:05:0C:75:B6:6C:8C:56:8B:28:A0:1D:62:11:3F:92:2C:0F:5F:DA:DA:0B:61:B8:E7:31:4D:C5:7F:E6:06:14"}}},"request":{"raw":"GET /wp-content/fonts/alegreya-sans/5aUz9_-1phKLFgshYDvh6Vwt7VptvQ.woff2 HTTP/1.1\r\nHost: scandalshack.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mail.scandalshack.com/\r\nOrigin: https://mail.scandalshack.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:14 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 23788\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 21 Sep 2026 19:53:41 GMT\r\nlast-modified: Thu, 03 Oct 2024 00:13:15 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bQ9Y8G54ZGV9hJJ8DPCf07IzSDmWcTh3YroNHy14uavdkU%2BMrtw4wlt1nJ2PLBMaalKu0lfREHOvd8rUgXcC27Js6ETZQO%2FMsv9wdrSIVjo%3D\"}]}\r\ncf-ray: 982a43dd6a604e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23788,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23788, version 1.0","md5":"bd0ca9709b22761897b83e2c2cb06a6d","sha1":"89f76282aa8444a9a93a20a8e9b38fe3876126fd","sha256":"efc0ba5184e11b9496b0263a1051f778bb1a77c74705a604b9fbd9d58dcffcbb","sha512":"0aec4eb13a8311e99f60bded96d113caef2f5469712fe55a8020e415c22e38c691d557f358b904349efaa5fe4f66e5a26e4b4a75e91ae5819b9a211f0f0173d0","ssdeep":"384:49LDo09pm6Gzp3GzsOsnbl6yN75PUg5ry4qHCC1A97YwJvkKtOmCvk0f6tYof6qf:yn7cl1hnR6y7Pty4K1A97YwJsAOvxcuq","tlshash":"eab2f1f62455e2daa395b1bdc357216c5d091b440b7b2f51082f4c8fc69a2a2cf3c23c","first_seen":"2024-10-02T08:50:15Z","last_seen":"2026-04-20T14:10:21.143502Z","times_seen":2644,"resource_available":false,"data":null}},"time_used":462,"timings":{"blocked":118,"dns":82,"connect":1,"send":0,"wait":173,"receive":1,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scandalshack.com/wp-content/fonts/merriweather/u-4e0qyriQwlOrhSvowK_l5UcA6zuSYEqOzpPe3HOZJ5eX1WtLaQwmYiSeqqJ-k.woff2","fqdn":"scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"104.21.30.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:14.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scandalshack.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 23:54:49 GMT","end":"Tue, 28 Oct 2025 22:53:42 GMT"},"fingerprint":{"sha1":"BD:78:39:A6:81:9B:CE:CD:A7:D9:59:79:78:AC:AB:E2:36:4B:A0:D6","sha256":"AB:05:0C:75:B6:6C:8C:56:8B:28:A0:1D:62:11:3F:92:2C:0F:5F:DA:DA:0B:61:B8:E7:31:4D:C5:7F:E6:06:14"}}},"request":{"raw":"GET /wp-content/fonts/merriweather/u-4e0qyriQwlOrhSvowK_l5UcA6zuSYEqOzpPe3HOZJ5eX1WtLaQwmYiSeqqJ-k.woff2 HTTP/1.1\r\nHost: scandalshack.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mail.scandalshack.com/\r\nOrigin: https://mail.scandalshack.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:14 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 97548\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 21 Sep 2026 19:53:41 GMT\r\nlast-modified: Thu, 06 Mar 2025 00:18:13 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UOMzjvRLytP1xcv0h4hKsg%2FPLVvYoC6Fbb6IHGShieZ0rTF0GFmNJIJcefPq95XEEF%2FQL0E3oe2RX3yRXqPn1fAdJJ2YtMf%2FOlbOK5bS6KE%3D\"}]}\r\ncf-ray: 982a43dd5a504e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97548,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 97548, version 1.0","md5":"5c271de154f212a7ba7b558561c7c51e","sha1":"eb42e1728464a0222057e7262480eec91b1fff24","sha256":"4fbe8dd9c23b1fd62a988bb8a69b8e692d810f773d9ef6ebca2ba2760c7b11ee","sha512":"78e577b7b65425239af239c347478ec27f9297bd2a5984e9b310807891fdbfa0d5b0da222e5254bbf845fe1e18d333091366feca0b3bd805ccd0c962d160d7b9","ssdeep":"1536:GSbxeq2JydX5fB9SLWORqAiH4qZwj+MXZh21b+yBs5WKnpqzkSNZUgoT7o2XAh:GWCydxTvORqAwb+4gIs0EKkSNG7o2XAh","tlshash":"539312aecbb842f761f2d4b0854e48dc88c2c07322b7bc969e7445d552a88f0759af6d","first_seen":"2025-03-14T19:55:13.16745Z","last_seen":"2026-04-20T07:46:03.624888Z","times_seen":1584,"resource_available":false,"data":null}},"time_used":440,"timings":{"blocked":110,"dns":81,"connect":1,"send":0,"wait":163,"receive":5,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.realsrv.com/video-outstream.js","fqdn":"a.realsrv.com","domain":"realsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:15.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"realsrv.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 10:28:32 GMT","end":"Sun, 09 Nov 2025 10:28:31 GMT"},"fingerprint":{"sha1":"49:F9:A3:64:80:4E:E7:1E:08:38:FE:16:31:4F:0C:5D:A2:56:E9:39","sha256":"60:92:1C:94:D6:08:A7:43:1E:69:C7:33:E1:1B:03:49:60:49:78:E2:72:D2:98:57:09:3A:90:E6:50:34:AF:48"}}},"request":{"raw":"GET /video-outstream.js HTTP/1.1\r\nHost: a.realsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:15 GMT\r\ncontent-type: application/javascript\r\netag: W/\"c749958b30b91a42d89a8c4b10a\"\r\nexpires: Wed, 17 Sep 2025 11:40:23 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3uScAAAwBuUwKEwH3mgIAAAwBWd59LgG3LQAAAA\r\nx-77-nzt-ray: 2a494a15a22fff24580cd06808aca507\r\nx-77-cache: HIT\r\nx-77-age: 10169\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":43132,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (43132), with no line terminators","md5":"03f33d7d8672ba4ec3d6ea94329ac02e","sha1":"c749958b30b91a42d89a8c4b10ade5b6ce930189","sha256":"32c5e141e887f28378094e72c0eacbe05d13e9e4161428ada41a229385df0738","sha512":"5322b70f4815f5c8e9f902db3f532cd064a089b69c6af4d0b07c2c5d422daa0312230e3db28da23c58ed95e668917b2f894ec6d8c8ca1aa27a9dca555cd7a121","ssdeep":"768:20KmeL4xFG7kKZcxOxw8hwMjNOKVhMfhcgAHZ1Z8r1Z1AdOpKdFHvC8nV206rHbi:YL4xFG7kKZcxOxw8hwMjNOKVhMfhcgAJ","tlshash":"95132c9a37d179304acb905e7bfba30937b5007e280a0068b91deed0572cfd65566fac","first_seen":"2025-02-17T08:46:22.953418Z","last_seen":"2025-11-14T01:13:16.134278Z","times_seen":15,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":70,"dns":77,"connect":1,"send":0,"wait":1,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jcdn.tsyndicate.com/319c50330dfc43a28402af80648c4aca.js","fqdn":"jcdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:15.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jcdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 Aug 2025 05:32:09 GMT","end":"Sat, 29 Nov 2025 05:32:08 GMT"},"fingerprint":{"sha1":"2A:BD:A3:1C:2B:E5:69:B4:AF:63:83:0C:52:66:96:70:0C:AF:BE:F1","sha256":"C3:CF:80:41:C0:4A:BB:F6:18:E0:72:BB:1A:16:DA:FC:BB:E2:B0:FB:69:E4:FC:BA:00:85:6F:4D:72:55:25:EC"}}},"request":{"raw":"GET /319c50330dfc43a28402af80648c4aca.js HTTP/1.1\r\nHost: jcdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:15 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 2\r\nserver: nginx\r\nx-request-id: 176a38ae-744b-480e-8543-726a4197527b\r\nx-robots-tag: noindex, nofollow\r\nexpires: Sun, 21 Sep 2025 14:36:15 GMT\r\ncache-control: max-age=300\r\nvary: Accept-Encoding\r\nx-cdn-host-id: DS9893\r\nx-proxy-cache: EXPIRED\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-20T14:00:37.578398Z","times_seen":587663,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":81,"dns":30,"connect":19,"send":0,"wait":71,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"video.blcdog.com/push/ts/1758465075/117759266.jpeg","fqdn":"video.blcdog.com","domain":"blcdog.com","tld":"com"},"ip":{"addr":"172.64.147.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:16.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"video.blcdog.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 00:36:37 GMT","end":"Sat, 13 Dec 2025 01:16:09 GMT"},"fingerprint":{"sha1":"79:24:BF:42:BF:3F:C7:48:CE:C1:CC:10:DF:9D:86:8B:EE:04:E6:F9","sha256":"7C:25:1A:4C:E2:0A:2B:48:17:38:79:88:31:E9:C9:ED:0D:EB:35:74:8A:16:86:38:FE:FC:E2:87:27:F2:E1:A0"}}},"request":{"raw":"GET /push/ts/1758465075/117759266.jpeg HTTP/1.1\r\nHost: video.blcdog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3686\r\ncf-ray: 982a43e81b21b4ee-OSL\r\netag: W/\"212e3a0fd9c6188db24866457ae2b4e5\"\r\nlast-modified: Sun, 21 Sep 2025 14:30:04 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=14400\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nexpires: Sun, 21 Sep 2025 18:31:16 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3686,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 192x192, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"578dc50e4bc83cb420ca49da1acb3fac","sha1":"d728b1d46141da02926414012933e15c135dcb82","sha256":"eef2e8f61442668de98cca852a7ecfeed424bb7d18b42e23b53eb5f49c779b68","sha512":"13b11ad32682693f48283aaab97ba6dd826b866656444ce7476258eceec1e2e4c9c14cf54737c5b8794ff246c81d827fbc1f1944d301c39270e06f8669d8aefe","ssdeep":"","tlshash":"b3716de9f89feb29efec1782574a482af58373d4134d2206014b47e6ab0e8515dd40e9","first_seen":"2025-09-21T14:32:25.36155Z","last_seen":"2025-09-21T14:32:25.36155Z","times_seen":1,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":35,"dns":10,"connect":2,"send":0,"wait":48,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"video.blcdog.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tsvideo.sacdnssedge.com/video/ol_2bb0ba5d4134d489d40c8a2631e22c83.mp4","fqdn":"tsvideo.sacdnssedge.com","domain":"sacdnssedge.com","tld":"com"},"ip":{"addr":"212.102.62.46","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:16.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1306075136.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 11:45:54 GMT","end":"Mon, 01 Dec 2025 11:45:53 GMT"},"fingerprint":{"sha1":"F5:AA:C7:6C:C7:93:C4:F6:5E:96:1F:53:A8:14:56:6C:BD:F6:9C:CA","sha256":"55:94:6F:AC:E4:1C:91:4F:EC:CF:8C:69:E0:FB:E6:96:40:F2:5D:2A:41:51:B7:40:59:71:1E:98:65:A9:C4:1B"}}},"request":{"raw":"GET /video/ol_2bb0ba5d4134d489d40c8a2631e22c83.mp4 HTTP/1.1\r\nHost: tsvideo.sacdnssedge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 2427966\r\nvary: accept-encoding\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"ol_2bb0ba5d4134d489d40c8a2631e22c83.mp4\"\r\netag: \"5cf29f22596d16194370dec323e7194d\"\r\nexpires: Sun, 21 Sep 2025 15:22:06 GMT\r\nlast-modified: Sun, 21 Sep 2025 14:22:06 GMT\r\ncache-control: max-age=7200\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncf-cache-status: HIT\r\nage: 0\r\ncf-ray: 982a368079cad25a-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-77-nzt: EgwB1GY+LgG3JAIAAAwBT3/TDwG3AQAAAA\r\nx-77-nzt-ray: db5cda0970d93f7a340cd0683d4dcf28\r\nx-77-cache: HIT\r\nx-77-age: 548\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\ncontent-range: bytes 0-2427965/2427966\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":1572864,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"ae953380c8b11c457a697ee7a0613ead","sha1":"bb1537cbf735cbf12274d8ac788a6aa34be900d4","sha256":"9f682965787b0e2b6d87218530532cf3a7b336dc4a0be819a25c15c9ffe9aae4","sha512":"d2b65ad3c17556ffe4cb2e453cf3287e6d4d00ba39ea18d2cdb63fbdc595a84dfda943557bf42e3744e8c4eee3865c206f4ce39a3c7946012ff4efc3dcead1c7","ssdeep":"24576:2JGL4fBBSgLbcOPJ+DzYZx94AjjNVhM74wossa4IjkBI00K2pn:2ELHKlJ+A7CAD04w7PABI00Kcn","tlshash":"6f25330fd83429d18bee606eca8d79d0e5a30b45f94c7dd3a225198137c037796ea6f8","first_seen":"2025-09-21T14:32:25.362727Z","last_seen":"2025-09-21T14:32:25.362727Z","times_seen":1,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":98,"dns":66,"connect":10,"send":0,"wait":22,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scandalshack.com/wp-content/themes/mai-display-master/style.css?ver=2.1.1.5420241933","fqdn":"scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"172.67.150.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:14.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scandalshack.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 23:54:49 GMT","end":"Tue, 28 Oct 2025 22:53:42 GMT"},"fingerprint":{"sha1":"BD:78:39:A6:81:9B:CE:CD:A7:D9:59:79:78:AC:AB:E2:36:4B:A0:D6","sha256":"AB:05:0C:75:B6:6C:8C:56:8B:28:A0:1D:62:11:3F:92:2C:0F:5F:DA:DA:0B:61:B8:E7:31:4D:C5:7F:E6:06:14"}}},"request":{"raw":"GET /wp-content/themes/mai-display-master/style.css?ver=2.1.1.5420241933 HTTP/1.1\r\nHost: scandalshack.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:14 GMT\r\ncontent-type: text/css\r\ncontent-length: 216\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 19 Sep 2026 17:26:55 GMT\r\nlast-modified: Sat, 04 May 2024 19:33:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 22715\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E5wvpiRrq2ikPAY7V8QdFmCc%2BLei2pwfsjQxFwDI8Maz%2FZIlpgbohxVa%2FACJOfMqDY7MlrdwbdVuV6mrwzQB3eSEu42HejRsxf5jfgjptXc%3D\"}]}\r\ncf-ray: 982a43dcded376ef-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":461,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"5f711e9652429298029f4561fc5dd261","sha1":"d06b1c781000a7818ce24b7c76dc9a352c3c265d","sha256":"58ab5ea986605b14d940ef03cce29079549eb9d7273e87b9f6398cd311d119d6","sha512":"b3b92b3e561145e7ed5b13ec662f5ca9085828db93bfee37501c47e1c84c4f4d4f83ff88c978dd7cc548bd61da5a795ca7eb4db78b980c90bd2ec4b142aacd0b","ssdeep":"","tlshash":"40f0ab541802f32302728b86293bf74b8b712760b2e2a1f0f84e13444f263138098fdc","first_seen":"2025-09-21T14:32:25.372768Z","last_seen":"2025-09-21T14:32:25.372768Z","times_seen":1,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scandalshack.com/wp-content/fonts/merriweather/920604aefa08ab48e149551010ed53bc","fqdn":"scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"172.67.150.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:15.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scandalshack.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 23:54:49 GMT","end":"Tue, 28 Oct 2025 22:53:42 GMT"},"fingerprint":{"sha1":"BD:78:39:A6:81:9B:CE:CD:A7:D9:59:79:78:AC:AB:E2:36:4B:A0:D6","sha256":"AB:05:0C:75:B6:6C:8C:56:8B:28:A0:1D:62:11:3F:92:2C:0F:5F:DA:DA:0B:61:B8:E7:31:4D:C5:7F:E6:06:14"}}},"request":{"raw":"GET /wp-content/fonts/merriweather/920604aefa08ab48e149551010ed53bc HTTP/1.1\r\nHost: scandalshack.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mail.scandalshack.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:15 GMT\r\ncontent-length: 97548\r\nlast-modified: Thu, 04 Sep 2025 00:23:37 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wVdHRokWO%2FYLigk%2BUeUAceYCw0OU5F7rqpBN7BJoSluNmrvkTLAAa14QGGLYFyuE3tuWq8scBPb15oNb8bZ2UzcN4cIT44Yc6mjzFW4BuL8%3D\"}]}\r\ncf-ray: 982a43df4f3576ef-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16384,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 97548, version 1.0","md5":"a006d99136ec41e06f2590847c7754b1","sha1":"53e1f5865ee952132d0a2752154343231b46e81c","sha256":"c92ba639cab1364d955d4d07f2c06d3ed1a8ae3d6b309312b92cf1554b40976a","sha512":"839399926c643152d3a060b50e9c5e7d803bba166866640e4488d7d739f8e90778de94927bd8353cf82ff1c4b02e1dcdae475cb25abbc3e6fdbfc60633e8747a","ssdeep":"384:imaPsF405BwZE9yWnZD6VXwHfczl46fzQZIQ3xxH:GS5BwK9yWnd6VgkzldwrF","tlshash":"fb72d00c9fd14a79f53884700e0f4440d9ea58122f69e4d494687d314fea7749f98eec","first_seen":"2025-09-21T14:32:25.376535Z","last_seen":"2026-01-04T07:33:26.056533Z","times_seen":2,"resource_available":false,"data":null}},"time_used":506,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":487,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scandalshack.com/wp-content/uploads/2022/02/cropped-ico512-192x192.png","fqdn":"scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"172.67.150.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:15.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scandalshack.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 23:54:49 GMT","end":"Tue, 28 Oct 2025 22:53:42 GMT"},"fingerprint":{"sha1":"BD:78:39:A6:81:9B:CE:CD:A7:D9:59:79:78:AC:AB:E2:36:4B:A0:D6","sha256":"AB:05:0C:75:B6:6C:8C:56:8B:28:A0:1D:62:11:3F:92:2C:0F:5F:DA:DA:0B:61:B8:E7:31:4D:C5:7F:E6:06:14"}}},"request":{"raw":"GET /wp-content/uploads/2022/02/cropped-ico512-192x192.png HTTP/1.1\r\nHost: scandalshack.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 44110\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 19 Sep 2026 17:26:56 GMT\r\nlast-modified: Sat, 04 May 2024 19:33:03 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 183859\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e9NRTe43oUEGrtC8cW%2BhcwwMHT6IYDTJuMeBFhNguUfVOAWBs8sgtUSKkf9YtU26c6gFfoo7m7YNblYz0bcNOBTWZtZ%2BML2w%2BVlxuT7zXNE%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 982a43e15f6076ef-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":44110,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"2fe6885c63c0d0dcd01ffbeb819e5cf6","sha1":"8a44a3ca477950670329823da18cb24c7786a6ad","sha256":"7972c6bb63b6a811c8f509aa9d8bce21dfa44f131b0a78c0b95274293c23497c","sha512":"6f8de4a6ac737fb87a8d69e0ea62056214d4991bcf361d604ea302dd963ee22b3dfc7a7ed930d1abaccb8d504572040e7c528272dc777107a7f865b9366da496","ssdeep":"768:2v8B46gQEAGcXxsutehhWsIk9yOLBHIWpf7a0qzvrHJAAIP:20/EAhaXW2f9oeozzJAAG","tlshash":"ea13f1d45e5d3407770303029be7057d59dba79c81697a79ee36e4c00cea235b1ba31a","first_seen":"2025-09-21T14:32:25.378055Z","last_seen":"2025-09-21T14:32:25.378055Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.pictoa.com/media/galleries/262/947/2629476024f38043424/39109206024f38296d50.jpg","fqdn":"s2.pictoa.com","domain":"pictoa.com","tld":"com"},"ip":{"addr":"104.26.10.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:16.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pictoa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 15:06:53 GMT","end":"Fri, 28 Nov 2025 16:06:20 GMT"},"fingerprint":{"sha1":"EE:D0:09:78:CE:61:E7:9C:D7:71:A7:72:DB:E9:CB:1E:27:B8:1C:C9","sha256":"EE:07:2E:D2:E7:AD:21:64:4E:BE:88:39:0A:BB:6E:45:11:53:38:AF:F2:3A:73:43:D1:60:AD:3B:BB:8D:00:3A"}}},"request":{"raw":"GET /media/galleries/262/947/2629476024f38043424/39109206024f38296d50.jpg HTTP/1.1\r\nHost: s2.pictoa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 124195\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oLqSILCUyBI8IyrfNRloQkx97ynmrSSywEfe9OxEX3u%2B3U2fEq2caPKi2sK2MnCrw%2FHsGplNAC99HVa%2B2HFaEm72neO0eF91aN8%3D\"}]}\r\ncache-control: public, max-age=315360000\r\ncf-bgj: imgq:100,h2pri,csam-hash\r\naccept-ranges: bytes\r\ncf-polished: status=not_needed\r\netag: \"6024f382-1e523\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 11 Feb 2021 09:06:10 GMT\r\npragma: public\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 22480\r\ncf-ray: 982a43e50e50712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":124195,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 680x1000, components 3","md5":"560c86ec12ec7eca808e19b568cdf369","sha1":"c81c55b7e4641c12541798266f803a6e7aae0880","sha256":"82cc1a5936acbba00e2edaebe4e4f59377094c7bdbeb01ca1b53feab04eeb0c4","sha512":"f4ca1c6bbbd64e6004c3e703c7a8c665b5bca20e218b76ae408abafe82df23ee8224ac8aaab31dda3c2dc23e614ac1265a70bd8536a61493da790a3254231773","ssdeep":"3072:s7xsabYW+wMQfYlMD0LQuJ6rYuEGYIVbUd2/0KuAkX1DKZCg1S:sUWJEuDcQCMEiGfKMDKZCeS","tlshash":"7dc3122eed4ba8cc2fa25eab261d5d02341ecb8b9cfc5c5d073ab52fdb3a0556534049","first_seen":"2025-09-21T14:32:25.379078Z","last_seen":"2025-09-21T14:32:25.379078Z","times_seen":1,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":5,"dns":4,"connect":1,"send":0,"wait":24,"receive":4,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.xlivrdr.com/smartpop/ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d?userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026sourceId=303567\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845","fqdn":"go.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"172.64.147.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:15.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.xlivrdr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:02:48 GMT","end":"Sun, 07 Dec 2025 09:02:14 GMT"},"fingerprint":{"sha1":"18:51:33:CF:A8:88:6B:8C:BA:0C:FC:AD:26:65:64:F8:F9:5A:32:CA","sha256":"37:C7:74:68:D2:46:40:59:86:A9:99:8C:2C:5E:F6:86:48:C4:47:28:01:2B:8E:2C:93:DF:31:57:81:AD:07:A0"}}},"request":{"raw":"GET /smartpop/ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d?userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026sourceId=303567\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845 HTTP/1.1\r\nHost: go.xlivrdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-length: 0\r\nlocation: https://creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199\r\ncf-ray: 982a43e50bef0b49-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1254,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":97,"dns":7,"connect":1,"send":0,"wait":38,"receive":0,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199","fqdn":"creative.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"172.67.213.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:16.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xlivrdr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Sep 2025 13:25:58 GMT","end":"Mon, 01 Dec 2025 14:24:34 GMT"},"fingerprint":{"sha1":"60:3C:F5:70:25:F5:99:96:7B:4A:71:A1:41:E0:CF:36:44:05:40:F5","sha256":"D0:BD:F8:2A:2D:AF:D4:AF:F6:B7:84:94:B9:87:F0:78:B4:92:49:83:B0:95:E4:E0:EB:FE:58:84:BB:2A:4F:CA"}}},"request":{"raw":"GET /LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199 HTTP/1.1\r\nHost: creative.xlivrdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mail.scandalshack.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 18 Sep 2025 10:14:15 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h0R%2B%2BCkuILuptvLybCK7%2BvWmha00VT0JoAmm9y2X5Yw%2FWccvI5BEO4AWtanp7J0QK64Mh3rzNr9GEX6JEqt2eNMN6U6i0w0f5Bqw4cqzj6MjPw%3D%3D\"}]}\r\nexpires: Sun, 21 Sep 2025 14:31:25 GMT\r\ncache-control: max-age=10\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\nvary: accept-encoding\r\nage: 0\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 982a43e6696656c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1254,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1254), with no line terminators","md5":"60576ca0eaa6667906f13015eda5b225","sha1":"6eed19bfa9084bf8e21ddb1a01c490ced0418855","sha256":"863bb89f0d92d15f49951f8a6c66bcec21d2a39a9fd141b14593856355804e3b","sha512":"de50505cdfebfc3c64371c0d490492f8e5a71f23678d9a4540f06883adea2efd2bd14213c3e4b565fb019c34b0caa572e4b67aeb53ab7764978f516cd37e70f7","ssdeep":"","tlshash":"b8218825d000c04c7170d337fa903629d84b391eaa71fae9ac615ddbdcb8f8591aa903","first_seen":"2025-09-21T14:32:25.382422Z","last_seen":"2025-09-21T14:32:25.382422Z","times_seen":1,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":8,"dns":5,"connect":1,"send":0,"wait":17,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/images/f/0/ceeb150c0ac3b5e2b9dc67ad91cbef3715e697/main.webp","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:16.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 Aug 2025 08:32:03 GMT","end":"Fri, 31 Oct 2025 08:32:02 GMT"},"fingerprint":{"sha1":"E4:52:21:98:B0:CD:51:03:1A:59:A9:01:02:8A:D6:3B:66:E3:EE:3A","sha256":"F1:77:51:DD:B8:B7:37:39:6D:01:37:95:43:1C:C1:78:42:1E:A6:30:E3:96:F3:D8:25:E4:61:7E:80:03:FD:8A"}}},"request":{"raw":"GET /images/f/0/ceeb150c0ac3b5e2b9dc67ad91cbef3715e697/main.webp HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nCookie: cookie_user_id=ee5c67dd-d280-5724-abee-fefde6fe0aa2; bfq=APeIECNCxxYZMXDUiJGjRhcWIsYU3BLjoYgyE2PcqKFwIY2NXfoo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3438\r\nserver: nginx\r\nlast-modified: Wed, 30 Sep 2020 23:27:34 GMT\r\netag: \"5f751466-d6e\"\r\nx-robots-tag: noindex, nofollow\r\ncache-control: max-age=172800\r\nexpires: Tue, 23 Sep 2025 14:31:16 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: ah1742,DS9225\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3438,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c58c8a6e797fcad9ededbe1602f2df9b","sha1":"ed34e4db2fe7b63463af6416d6d461d5fe4bc587","sha256":"8bb3980bc152f80c2f7c15ad756aef2cb7c8e61fb96c92d140313e1911ae6f61","sha512":"3cbe1f07cac23bd5d304824dba79baf2531045adf6ebe26d121696792a0dba788ba2d452db5759ef322464e490429f70f6a562ba9fcf4d8045e9b2dee69bc734","ssdeep":"","tlshash":"fa615dd001143a4752d7842de80546f5a5af419dae3f3952a3c2fda86e21dbe1f832f5","first_seen":"2023-04-08T13:32:23Z","last_seen":"2026-04-19T20:01:19.774218Z","times_seen":1075,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/inpage.push.v2.css","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:16.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 Aug 2025 08:32:03 GMT","end":"Fri, 31 Oct 2025 08:32:02 GMT"},"fingerprint":{"sha1":"E4:52:21:98:B0:CD:51:03:1A:59:A9:01:02:8A:D6:3B:66:E3:EE:3A","sha256":"F1:77:51:DD:B8:B7:37:39:6D:01:37:95:43:1C:C1:78:42:1E:A6:30:E3:96:F3:D8:25:E4:61:7E:80:03:FD:8A"}}},"request":{"raw":"GET /sdk/v1/inpage.push.v2.css HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nCookie: cookie_user_id=ee5c67dd-d280-5724-abee-fefde6fe0aa2; bfq=APeIECNCxxYZMXDUiJGjRhcWIsYU3BLjoYgyE2PcqKFwIY2NXfoo\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-type: text/css\r\nserver: nginx\r\nlast-modified: Thu, 29 May 2025 14:36:43 GMT\r\netag: W/\"683870fb-54f0\"\r\nx-robots-tag: noindex, nofollow\r\ncontent-encoding: gzip\r\ncache-control: max-age=172800\r\nexpires: Tue, 23 Sep 2025 14:31:16 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: ah1742,DS9225\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21744,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (21744), with no line terminators","md5":"b4ac1d9cb97e96cbe37dcc8baf27f734","sha1":"0b6a51d6587380b8296a5fc8f7827040813e5f31","sha256":"59e92e521ef354de958402f21a9f5a437965e047b554382274bc3af767974a49","sha512":"963aad6aa9c98a8caa28959aa877d19251ca976aa2c457a3eb3918002c625a8b0f5d6a395808e670132c67f602a46dfdef521cc88fe1783635abd22e88c8950e","ssdeep":"384:SQmpY8YwYbYXYsYUYeY97OrDrNk7rM9kK71QKJvIG1U7Q7f1duTVBP:j3LsInv11kPc4KU1QKJvIn+a","tlshash":"7ea288702f15002fff368b67f1807cdae368e7166ab2294fe7757910868d46f4359a28","first_seen":"2024-03-04T05:48:16Z","last_seen":"2026-04-19T07:46:54.964469Z","times_seen":1657,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.xlivrdr.com/static/4d7f3ebc/s/LPOmega/main.c45934d5e8daf538bc0b.js","fqdn":"creative.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"172.67.213.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199","date":"2025-09-21T14:31:16.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xlivrdr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Sep 2025 13:25:58 GMT","end":"Mon, 01 Dec 2025 14:24:34 GMT"},"fingerprint":{"sha1":"60:3C:F5:70:25:F5:99:96:7B:4A:71:A1:41:E0:CF:36:44:05:40:F5","sha256":"D0:BD:F8:2A:2D:AF:D4:AF:F6:B7:84:94:B9:87:F0:78:B4:92:49:83:B0:95:E4:E0:EB:FE:58:84:BB:2A:4F:CA"}}},"request":{"raw":"GET /static/4d7f3ebc/s/LPOmega/main.c45934d5e8daf538bc0b.js HTTP/1.1\r\nHost: creative.xlivrdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\ncontent-encoding: br\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"main.c45934d5e8daf538bc0b.js\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8aG5WBTNuQmJ9sSpGTupgeDobN6ftOIg69a%2BInoJWlrGKmycz4QFDGhS6xSMJQfkTCw6DMNzMIXsZK2F0oqcs2WOcH4ctm2WI8eYiyaGaIgMxg%3D%3D\"}]}\r\nlast-modified: Thu, 18 Sep 2025 11:36:29 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 2996\r\ncf-cache-status: HIT\r\netag: W/\"4807e0ce6dc04b614d6ff568874bb8ef\"\r\ncf-ray: 982a43e7ed150afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":683647,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4807e0ce6dc04b614d6ff568874bb8ef","sha1":"bb70bad012c2a2a19a98cbcedd653f203b37a26f","sha256":"f6a6c958262b6ed528ac0236f949d81a017724b1b89300ebb9c88f6a6ae3c022","sha512":"fd05bd79e945c7d0c0629b8e1fab30254fd56d033a0e109ff63e3d27e331daa599e02086fd10e18d0cc14258214f5f68a2054309a72a00d0d6de336c83702b82","ssdeep":"6144:lelha2k2rVOihzhoJl1qfsUYh0QsDv5Be8:aBDhzIuGh0","tlshash":"a1e429c83396f06646c79156503f4603f239a95a640ad01cf29aecec786dd8ee277f36","first_seen":"2025-09-21T14:32:25.384778Z","last_seen":"2025-09-21T14:32:25.384778Z","times_seen":1,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scandalshack.com/wp-content/plugins/mai-engine/assets/css/main.min.css?ver=2.37.0.71420252325","fqdn":"scandalshack.com","domain":"scandalshack.com","tld":"com"},"ip":{"addr":"172.67.150.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:14.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scandalshack.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 23:54:49 GMT","end":"Tue, 28 Oct 2025 22:53:42 GMT"},"fingerprint":{"sha1":"BD:78:39:A6:81:9B:CE:CD:A7:D9:59:79:78:AC:AB:E2:36:4B:A0:D6","sha256":"AB:05:0C:75:B6:6C:8C:56:8B:28:A0:1D:62:11:3F:92:2C:0F:5F:DA:DA:0B:61:B8:E7:31:4D:C5:7F:E6:06:14"}}},"request":{"raw":"GET /wp-content/plugins/mai-engine/assets/css/main.min.css?ver=2.37.0.71420252325 HTTP/1.1\r\nHost: scandalshack.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:14 GMT\r\ncontent-type: text/css\r\ncontent-length: 9624\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 19 Sep 2026 17:26:55 GMT\r\nlast-modified: Mon, 14 Jul 2025 23:25:37 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 22715\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ROwcpGClWQheRmgIYxvfDadN2ZkYY1gdB4B2zjIslLMRdIaonmvoVyhRAyJ9gxe5vuuDJIO2LBoPJmGamEGRWRPXty34wewn4c0ioPdmbdM%3D\"}]}\r\ncf-ray: 982a43dcded076ef-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":50953,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (50953), with no line terminators","md5":"01ea3e67149883ed0bd5939efa3f8c3f","sha1":"261d386eca31a37e809ac3e6863054c2cf455e23","sha256":"5454f524715e409c55d66d7d8e8aee820c2f0ba56909b36f352904daec5051f9","sha512":"3a8126ef33f5e7d9c19ead495114dc7e9383ed139512072531960c01a70f090321871355db1accab544af8af78bbcde299a149fb586ccd8fc4cfcd99d92b8cfe","ssdeep":"768:R6kpRG2A6BigghzDzY7zA1lrtvguPnr+vd04ouBGIgUoKAl+GaOXeHidVNRIdVNk:ckpfA6BigghzDzdlrt4uPnr+z+t","tlshash":"4f3362f67690e23c9e737b15a3cee52cb614bc02df4296deb911d39085c7bf605a2209","first_seen":"2025-06-05T18:15:11.406685Z","last_seen":"2026-02-11T04:31:06.873283Z","times_seen":49,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/modules/core.pt5ow5lr.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:15.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.addtoany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 08:53:15 GMT","end":"Mon, 24 Nov 2025 09:53:12 GMT"},"fingerprint":{"sha1":"F7:A4:6C:FF:03:AC:D3:2A:92:BA:EC:F2:67:5A:00:B2:0D:40:72:F2","sha256":"89:4B:61:9A:22:6F:77:70:77:50:57:C1:3F:29:21:86:C2:81:9A:36:F7:98:1A:DD:0B:01:71:03:F2:19:AA:EC"}}},"request":{"raw":"GET /menu/modules/core.pt5ow5lr.js HTTP/1.1\r\nHost: static.addtoany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mail.scandalshack.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:15 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000, immutable\r\netag: W/\"6e938442141e4680b5bd4187b8d6c216\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=2v9WMoVobyrNuPXMktjigxXNLrN6hmRbt8coSxQkFYob2hY9oY5vmTwkN5aDD19uxOrkkDf2KruG8%2FOEebvHOXxjZDdmazh6j3qf1tmE9RCPQA68Kx0Lu56In4qp7Upn9nf159aw\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\ncf-ray: 982a43e40fa00daa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71871,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7e998bb147b26903e88f08f39c0e2cfc","sha1":"6c93ab9cb3371591d4031dc60b9c3ae571c3329e","sha256":"ef39bcc03d88448d0d38aba3dc609e9c9c444d037aebec926e6715e1cf956674","sha512":"ed4bb35effa05b85d02fffbd65abdb28b1d88cf573475dc02c2c5b744914f09d06df2dd3f0928ec921e5e7e52f57d4898e58feeae3c139e36c5fb61e7a982431","ssdeep":"1536:h8fE77gdDGstI0AjiVG1COcfs6SngvUy4JfU8xAaj1rxv6G6zMDfPMUEqdb:2fqgPdvUJ1xlj1rxvV6zPub","tlshash":"09636c9f37056937aa1b30e8a8efa508a036275eaf080954f5a5d4b511fdecd3067f2c","first_seen":"2025-04-25T03:57:25.562762Z","last_seen":"2026-04-17T12:08:01.541004Z","times_seen":9396,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jcdn.tsyndicate.com/de2ce61dfdf64c76b063ad24264fac26.js","fqdn":"jcdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:15.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jcdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 Aug 2025 05:32:09 GMT","end":"Sat, 29 Nov 2025 05:32:08 GMT"},"fingerprint":{"sha1":"2A:BD:A3:1C:2B:E5:69:B4:AF:63:83:0C:52:66:96:70:0C:AF:BE:F1","sha256":"C3:CF:80:41:C0:4A:BB:F6:18:E0:72:BB:1A:16:DA:FC:BB:E2:B0:FB:69:E4:FC:BA:00:85:6F:4D:72:55:25:EC"}}},"request":{"raw":"GET /de2ce61dfdf64c76b063ad24264fac26.js HTTP/1.1\r\nHost: jcdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nCookie: cookie_user_id=ee5c67dd-d280-5724-abee-fefde6fe0aa2; bfq=APeIECNCxxYZMXDUiJGjRhcWIsYU3BLjoYgyE2PcqKFwIY2NXfoo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 14:31:15 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 2\r\nserver: nginx\r\nx-request-id: 5ed78289-8818-4d90-ba14-8d6e4b4bb8e8\r\nx-robots-tag: noindex, nofollow\r\nexpires: Sun, 21 Sep 2025 14:36:15 GMT\r\ncache-control: max-age=300\r\nvary: Accept-Encoding\r\nx-cdn-host-id: DS9893\r\nx-proxy-cache: EXPIRED\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-20T14:00:37.578398Z","times_seen":587663,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.redd.it/16eu1pdhcszz.jpg","fqdn":"i.redd.it","domain":"redd.it","tld":"it"},"ip":{"addr":"151.101.65.140","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:16.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.redd.it","organization":"REDDIT, INC."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Sat, 12 Jul 2025 00:00:00 GMT","end":"Wed, 07 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8B:29:12:DB:33:A6:1F:39:07:AF:CA:69:1F:70:D6:91:A8:FD:D9:CF","sha256":"FB:3A:CD:DA:83:D9:AB:68:DF:27:33:DE:4D:C7:FA:17:D2:67:C4:73:9A:75:FD:E5:97:56:87:DC:42:88:C2:3A"}}},"request":{"raw":"GET /16eu1pdhcszz.jpg HTTP/1.1\r\nHost: i.redd.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 23 Nov 2017 20:33:47 GMT\r\netag: \"81237ec3c955999ab74d2aee2c74693f\"\r\nexpires: Thu, 31 Dec 2037 23:59:59 GMT\r\nx-amz-version-id: null\r\ncontent-type: image/jpeg\r\nx-canonical-filename-image-generation: 1\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\nserver: snooserv\r\nreport-to: {\"group\": \"w3-reporting-nel\", \"max_age\": 14400, \"include_subdomains\": true,  \"endpoints\": [{ \"url\": \"https://w3-reporting-nel.reddit.com/reports\" }]}, {\"group\": \"w3-reporting\", \"max_age\": 14400, \"include_subdomains\": true, \"endpoints\": [{ \"url\": \"https://w3-reporting.reddit.com/reports\" }]}, {\"group\": \"w3-reporting-csp\", \"max_age\": 14400, \"include_subdomains\": true, \"endpoints\": [{ \"url\": \"https://w3-reporting-csp.reddit.com/reports\" }]}\r\nnel: {\"report_to\": \"w3-reporting-nel\", \"max_age\": 14400, \"include_subdomains\": false, \"success_fraction\": 1.0, \"failure_fraction\": 1.0}\r\ncontent-length: 151603\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":151603,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1121x1600, components 3","md5":"81237ec3c955999ab74d2aee2c74693f","sha1":"92d251c68d32e25c768d28aa60cbaca705b74418","sha256":"e73fdb1587fb94852a9158ecb8e913ee9af7d4eac717c8b250451d3c2b18a571","sha512":"72c96f2b04779a6ab563b6c9d470fb367860cc4818820ada47b223c75addaf44d16e235cf42638797c08914441d2a2fbc30352bb866f10eac2a2adb9367ad8c9","ssdeep":"3072:x2/yViorzjJj+Dyb7R8GEeNkMQRL+BbsRSUai6TBZWCX38BXxkv:WYRrzjYybV80NkMgYsoXisWCHEo","tlshash":"fbe31219bb5e590fc90e2b2575cd131a82846fbbc89ac2b5d055646cf2facf1ec87113","first_seen":"2025-09-21T14:32:25.392111Z","last_seen":"2025-09-21T14:32:25.392111Z","times_seen":1,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tsvideo.sacdnssedge.com/video/ol_2bb0ba5d4134d489d40c8a2631e22c83.mp4","fqdn":"tsvideo.sacdnssedge.com","domain":"sacdnssedge.com","tld":"com"},"ip":{"addr":"212.102.62.46","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://mail.scandalshack.com/","date":"2025-09-21T14:31:16.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1306075136.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 11:45:54 GMT","end":"Mon, 01 Dec 2025 11:45:53 GMT"},"fingerprint":{"sha1":"F5:AA:C7:6C:C7:93:C4:F6:5E:96:1F:53:A8:14:56:6C:BD:F6:9C:CA","sha256":"55:94:6F:AC:E4:1C:91:4F:EC:CF:8C:69:E0:FB:E6:96:40:F2:5D:2A:41:51:B7:40:59:71:1E:98:65:A9:C4:1B"}}},"request":{"raw":"GET /video/ol_2bb0ba5d4134d489d40c8a2631e22c83.mp4 HTTP/1.1\r\nHost: tsvideo.sacdnssedge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.scandalshack.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Sun, 21 Sep 2025 14:31:16 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 2427966\r\nvary: accept-encoding\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"ol_2bb0ba5d4134d489d40c8a2631e22c83.mp4\"\r\netag: \"5cf29f22596d16194370dec323e7194d\"\r\nexpires: Sun, 21 Sep 2025 15:22:06 GMT\r\nlast-modified: Sun, 21 Sep 2025 14:22:06 GMT\r\ncache-control: max-age=7200\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncf-cache-status: HIT\r\nage: 0\r\ncf-ray: 982a368079cad25a-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-77-nzt: EgwB1GY+LgG3JAIAAAwBT3/TDwG3AQAAAA\r\nx-77-nzt-ray: db5cda0970d93f7a340cd068a798ad28\r\nx-77-cache: HIT\r\nx-77-age: 548\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\ncontent-range: bytes 0-2427965/2427966\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":1572864,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"ae953380c8b11c457a697ee7a0613ead","sha1":"bb1537cbf735cbf12274d8ac788a6aa34be900d4","sha256":"9f682965787b0e2b6d87218530532cf3a7b336dc4a0be819a25c15c9ffe9aae4","sha512":"d2b65ad3c17556ffe4cb2e453cf3287e6d4d00ba39ea18d2cdb63fbdc595a84dfda943557bf42e3744e8c4eee3865c206f4ce39a3c7946012ff4efc3dcead1c7","ssdeep":"24576:2JGL4fBBSgLbcOPJ+DzYZx94AjjNVhM74wossa4IjkBI00K2pn:2ELHKlJ+A7CAD04w7PABI00Kcn","tlshash":"6f25330fd83429d18bee606eca8d79d0e5a30b45f94c7dd3a225198137c037796ea6f8","first_seen":"2025-09-21T14:32:25.362727Z","last_seen":"2025-09-21T14:32:25.362727Z","times_seen":1,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":96,"dns":69,"connect":8,"send":0,"wait":15,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/arimo/v35/P5sCzZCDf9_T_10c9CNkiA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://creative.xlivrdr.com/LPOmega?action=sbSignupWithModel\u0026campaignId=ebdeebdc30a47320c5da76185725a949a334260cbc7d5b2c00952aded809893d\u0026campaignType=smartpop\u0026creativeId=d28c038cfde2b00c89003dd71dc779056e78e496da57a84a71bbf29d28cf1d9e\u0026iterationId=928343\u0026masterSmartpopId=1738\u0026memberId=5s9UtZu-PGS2dt1KEDsICxcRUgtHLPQ16LgTyOlVTnk4PrJvkftK0y0OoKFVQIY0hM9yKTA1AnnP67cb-XTDar427DPocf9QSNgu9ZS1ZkGzkoTw_gUIDRUi\u0026p1=4770845\u0026quality=240p\u0026ruleId=12\u0026smartpopId=1589\u0026sourceId=303567\u0026trafficType=interstitial\u0026usePreroll=1\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34199","date":"2025-09-21T14:31:17.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/arimo/v35/P5sCzZCDf9_T_10c9CNkiA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://creative.xlivrdr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22576\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 19 Sep 2025 15:35:09 GMT\r\nexpires: Sat, 19 Sep 2026 15:35:09 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:04:44 GMT\r\ncontent-type: font/woff2\r\nage: 168968\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22576,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22576, version 1.0","md5":"42730d8f0fb8954ae5b89eb3f46d2cd3","sha1":"9c7262eb7a3eceb6668b8bda5e04b295d073270b","sha256":"67de270f7acd4088c49dec4cddc39bbf1bb858772cb74bbae529d4c18b7ae459","sha512":"4cd2bed85c6ffff3d7bcb17d1cf74549807b909bb7559d350c7c97f3e00137d5c0b0be1153af39abc328f65848b535fee6aac04a493a183617ae588389239b83","ssdeep":"384:Fwts93+vR2KxOsqhXmj8MqAg51AZgG7k4+nTp2N1shwKha/KS4mv5o1xJ:Us93oRpxOhXjMms7An1u1uwKha74mI","tlshash":"29a2e108dceefcc17b92273af5db6a504d469f2296e240f56e7269158eb170d388870b","first_seen":"2025-06-07T11:00:53.491637Z","last_seen":"2026-04-20T07:00:45.68758Z","times_seen":757,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":21,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}