{"report_id":"5648f3d8-4b1c-4448-a150-bf9f393f4839","version":0,"status":"done","tags":[],"date":"2026-07-15T18:59:02Z","url":{"schema":"http","addr":"yokuinterior.pl/join/57717","fqdn":"yokuinterior.pl","domain":"yokuinterior.pl","tld":"pl"},"ip":{"addr":"104.21.66.93","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"xrbpmr6gj.bondfocusedadmirer.org/gaw21lf","fqdn":"xrbpmr6gj.bondfocusedadmirer.org","domain":"bondfocusedadmirer.org","tld":"org"},"title":"Are you looking for hot dates in Oslo?","dom":{"size":8599,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2069)","md5":"37019c9afcec53218fb11e1f2a442d34","sha1":"e7f5b5f54bf640281d5067a0f2c15e2e2101df2f","sha256":"39b6bf6c4d835fd96363477b883f8102a70c4c217bbadfdc05104e6b92111097","sha512":"ae1d670638b2d80a4f736be2ba961c79092d2df60b9af3d6b2335bbc6a3fc4548fd90830aee0d1fa515a4961fb5db76fe643524d4af0e3036e765504493c5178","ssdeep":"192:CTtt7KgYcQKPqevr0VBcEG5Cj0iGRom3p6MVCLkxpNAiNATNAsNAlNAxxUvJ:DK1CAV3p6MVCLUNTNiNlNsN1","tlshash":"cc025104ca0bc94e523312daa57fe34cd4bf9da4d203d85cb6fe06a64796f4d022acd1","dom_hash":"domhash1cb6ef3912fa864ca6d0f67b12870ae4","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"yokuinterior.pl/join/57717","fqdn":"yokuinterior.pl","domain":"yokuinterior.pl","tld":"pl"},"ip":{"addr":"104.21.66.93","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-19T18:59:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"xrbpmr6gj.bondfocusedadmirer.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"vtcremysete.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"bigdatajsext.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"yokuinterior.pl","ip":{"addr":"172.67.158.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-07","domain_rank":0,"first_seen":"2026-07-15T18:59:03.912262Z","last_seen":"2026-07-15T18:59:03.912262Z","alert_count":0,"request_count":2,"received_data":1290,"sent_data":991,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"vtcremysete.fr","ip":{"addr":"104.21.43.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-17","domain_rank":0,"first_seen":"2026-02-21T05:26:26.771045Z","last_seen":"2026-07-11T20:59:52.330167Z","alert_count":1,"request_count":1,"received_data":1111,"sent_data":530,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:5.6.40","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-12T22:22:25.184057Z","alert_count":0,"request_count":1,"received_data":20299,"sent_data":564,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bigdatajsext.com","ip":{"addr":"136.243.216.252","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2024-06-21","domain_rank":607875,"first_seen":"2024-07-01T12:08:48Z","last_seen":"2026-07-11T02:37:58.218696Z","alert_count":1,"request_count":1,"received_data":754,"sent_data":548,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"xrbpmr6gj.bondfocusedadmirer.org","ip":{"addr":"104.21.30.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-20","domain_rank":0,"first_seen":"2026-05-16T11:00:47.768844Z","last_seen":"2026-07-11T20:59:52.474022Z","alert_count":25,"request_count":25,"received_data":1461547,"sent_data":14599,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"xrbpmr6gj.bondfocusedadmirer.org/media/dating/flirtup/js/timer.js","fqdn":"xrbpmr6gj.bondfocusedadmirer.org","domain":"bondfocusedadmirer.org","tld":"org"},"ip":{"addr":"104.21.30.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"db12eacb17d6d147e21495e2f8787fff","sha1":"32c7f9200e989eeb54df98b8ee70331a3b22789b","sha256":"b18fa00e948ce4a17e7cfa703c82e27fc8e1bababa97327ead9562c2281aff0f","sha512":"dd098bf6f1fc64bcd7efec3b6120fa2b5dbba0c063e99d8618c77e638a7765b23b8bf1b1821e52546af7bec6cba3f70be97594be438372da9f006a19b456e0e4","ssdeep":"","tlshash":"52f0f44837177b491eb1086e1bbde508d62ee522700f580924ccd0e19c9ee3a838ee6d","size":639,"data":"","first_seen":"2024-07-01T19:44:30Z","last_seen":"2026-07-15T18:59:09.767341Z","times_seen":2662,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xrbpmr6gj.bondfocusedadmirer.org/media/exit-new/exit1.js","fqdn":"xrbpmr6gj.bondfocusedadmirer.org","domain":"bondfocusedadmirer.org","tld":"org"},"ip":{"addr":"104.21.30.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"625e5e2950612f771e246beb33c9ea61","sha1":"e4fc251c6c000496c285f8dc3fa097040b031681","sha256":"618f345a156a0eda55177a1bf0e8a414104f9b6c6ff5cdbe71966f081ccb8a46","sha512":"655f0b373c605d0a464bedca4df204fb3aa12442c5b0aa3b8bf13e0604fd1e89480356e9c6cc9a432f81305bf1151caf4ac4ad9d8eb24eb78cbd11318e5b9657","ssdeep":"","tlshash":"e36156e4720e31ad93db3764c27fb11a7876e4b2d416a0b5a44c5c907434a1d6376cfd","size":3473,"data":"","first_seen":"2023-03-07T01:03:18Z","last_seen":"2026-07-15T18:59:09.774853Z","times_seen":13118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yokuinterior.pl/redirect.html","fqdn":"yokuinterior.pl","domain":"yokuinterior.pl","tld":"pl"},"ip":{"addr":"172.67.158.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8b1db527592d9771e9a11c76b3e79167","sha1":"565bc2b6aa5914d3cfc684b9fe61c62e837ae9bb","sha256":"9d683d346d3abb60120ff67de858e1e974fdf37901a61905992a3cc41b617602","sha512":"a24e4008a2ebcd7978d868619bc350d34433cfad048b20a92e73c21c92235cbe2ebbd2c3e4a679e02bcedd95c60f5174cdacb014d5860e666666f505a0b5f8a1","ssdeep":"","tlshash":"a3e0ab29a8e706384cf63a441038ca3930f838a0aab3d027525cc82ccd39fc54c00aec","size":424,"data":"","first_seen":"2026-07-02T14:46:38.092099Z","last_seen":"2026-07-15T18:59:09.80175Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yokuinterior.pl/redirect.html","fqdn":"yokuinterior.pl","domain":"yokuinterior.pl","tld":"pl"},"ip":{"addr":"172.67.158.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d581be0ed9829981ea21106523319438","sha1":"116ab65e551e0fa39491881595524802abdc769c","sha256":"09204886f5cc0d828639c23952cdaee24e3c7d3c941fffe4cc9e8cb220d2716d","sha512":"db95be0330c10b88a7210e3134750edcd2dc4760e8722080909d4359dfc52ac555e0175caf3fcfe928d8e3b21477d3c3f7f8760b489ea27fc865fd15df763fac","ssdeep":"","tlshash":"49b012d30143902002d341570fc33c00387720becc8e5008fa2cce251b9470e81c26c9","size":96,"data":"","first_seen":"2026-06-07T04:22:48.946112Z","last_seen":"2026-07-15T18:59:09.803289Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xrbpmr6gj.bondfocusedadmirer.org/media/dating/flirtup/js/jquery.js","fqdn":"xrbpmr6gj.bondfocusedadmirer.org","domain":"bondfocusedadmirer.org","tld":"org"},"ip":{"addr":"104.21.30.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"261c2803d4c5f060a7bb9388a85533be","sha1":"90a234032123056ad72e3a35eabe88f9042923f2","sha256":"4d62766346c8fd39371d0c01f931efae320a5ecceb96f7c8e4716036741e19df","sha512":"6a505adaab6bc468e0aaa728089a44cb7563ba180287e511304b34df0334b32b1987984b9a11bbb95b0ce3edca52661a5754269276b2ae25355fd4fce618a487","ssdeep":"1536:c4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RAfDknv+p0WzH/Io9Z7qABZnu0sFy:cGsKXAI2p0WP9bDrstfa5","tlshash":"3a93f8ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","size":93068,"data":"","first_seen":"2023-04-01T11:04:52Z","last_seen":"2026-07-15T18:59:09.781186Z","times_seen":1214,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xrbpmr6gj.bondfocusedadmirer.org/media/dating/flirtup/js/trls_loveme_casual.js","fqdn":"xrbpmr6gj.bondfocusedadmirer.org","domain":"bondfocusedadmirer.org","tld":"org"},"ip":{"addr":"104.21.30.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe9bcd27c507ed339bb6e127e0ba5a9e","sha1":"d42529b16b5385bf270678bdb5afc4dd62a0333c","sha256":"438d3925fc872661a31e1f5b8ddd550e8c5b2113cfd23ed7e9a727bf4ff26969","sha512":"913673007b15c5a0d0401f91fe03d3a1f0b1199c7d84c84893f738e115ad2d1993aceefed3462346f0597dddac69b246d8d908b8d99b2026b91bb4da5b54311f","ssdeep":"384:SCOCsgtymBJ+Qx79dHbubiNP+ypBP2AcqYCOr3Cf0:rfsgtyM9bP+oRK","tlshash":"8d624e7bfb8f44f9fad023409672e902a41df1bfc399e069356e54aa1191c1482af58b","size":15968,"data":"","first_seen":"2024-07-01T19:44:30Z","last_seen":"2026-07-15T18:59:09.77411Z","times_seen":1893,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xrbpmr6gj.bondfocusedadmirer.org/media/bb.js","fqdn":"xrbpmr6gj.bondfocusedadmirer.org","domain":"bondfocusedadmirer.org","tld":"org"},"ip":{"addr":"104.21.30.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d553e4bac91c74bfee2dbabba61e99e","sha1":"5af71e2377c9c012a7826a695f2724901941b19b","sha256":"1be1304c675449b1bad38ea8c3da6c1da0763ed2fad339ee1aa461c7bf4e2a68","sha512":"105e5b23733e7bb443ba2080d606c2814b0acd2aaf228467d2ce532ff2f2ec0b292f8eb5189a24cd9f79b69a7e983b176dbd29e2d539dae7ca443821084f2894","ssdeep":"","tlshash":"c5f02d81bd1878f685cf3355871f2230903f08dd720ae982a8a46e622e2038dde1b7e0","size":639,"data":"","first_seen":"2023-03-07T01:03:18Z","last_seen":"2026-07-15T18:59:09.798959Z","times_seen":13279,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xrbpmr6gj.bondfocusedadmirer.org/media/dating/flirtup/js/vegas.js","fqdn":"xrbpmr6gj.bondfocusedadmirer.org","domain":"bondfocusedadmirer.org","tld":"org"},"ip":{"addr":"104.21.30.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea8391e9e4f905102fef9737e225aba3","sha1":"2111929b9d64a20ecdeea04e3cf2a6633e09f428","sha256":"586607fdd9a798760719c89e72801e7f9f4af96a830fbbcee2889cffd521c239","sha512":"99b74beba57f023eeac792b77f3e3e7109c8fa279f1290d94ea056cd1a6ae784514eb24b3d2d01d511ded74d13b1934724033ea750aa9bdeb471c189b6ded131","ssdeep":"192:hzdEiLcmBWE4spGE9OICxPh+6Qw05RbJ1u1vqGDG2hYSwHSOV9Mfjsf5s9nhaGIt:hpE2/bJ3GLdM9MfjsfohNZvKz","tlshash":"aea2bd897f66510989b7e37a9f6a810ceb7682276503922d3cbd41c45fb1438436affc","size":22473,"data":"","first_seen":"2024-07-01T19:44:30Z","last_seen":"2026-07-15T18:59:09.777121Z","times_seen":1953,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xrbpmr6gj.bondfocusedadmirer.org/util/utils.js","fqdn":"xrbpmr6gj.bondfocusedadmirer.org","domain":"bondfocusedadmirer.org","tld":"org"},"ip":{"addr":"104.21.30.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"67f83bb8309524daa942af9cec436419","sha1":"df63410e039476a6dde6eb4200b5c1666c52af21","sha256":"57d2fd3a46ef70b606d7dcd83f70b6a2107725cd910ca1399c70ef52b2c72b9d","sha512":"d48b08d4209f4313706376f312ccc8d08f9a34c22f4428a5bce059242442097a15a4581673259de0a2eb27bacb508104248703feed52a9d38a74d6e9470599ce","ssdeep":"192:nv6UDdoxY4iYiXKF3nwx16qI9S7q6uRIpauZy4hpjgRxtSY8xd:nv6wixY4iYi+3nwx16q97H3Zy47jgRxE","tlshash":"3df1b89e334f311e87c633b1087e9408ac7ef8352796e095b9ed949464b0e1d3762ee8","size":7514,"data":"","first_seen":"2025-01-16T10:08:27.907414Z","last_seen":"2026-07-15T18:59:09.779061Z","times_seen":1598,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"xrbpmr6gj.bondfocusedadmirer.org/gaw21lf","fqdn":"xrbpmr6gj.bondfocusedadmirer.org","domain":"bondfocusedadmirer.org","tld":"org"},"ip":{"addr":"104.21.30.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-15T18:58:34.186Z","timestamp":1784141914186,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bondfocusedadmirer.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:13:30 GMT","end":"Wed, 16 Sep 2026 16:13:29 GMT"},"fingerprint":{"sha1":"EF:1D:5F:A0:23:AE:C6:50:97:51:6A:C7:27:12:46:9C:8C:F9:DF:22","sha256":"7D:C1:CE:06:D7:27:A0:AD:AE:EE:ED:21:82:B1:E1:AF:38:8B:9C:C8:5C:6E:2A:09:31:3F:7A:79:DF:BC:69:16"}}},"request":{"raw":"GET /gaw21lf HTTP/1.1\r\nHost: xrbpmr6gj.bondfocusedadmirer.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yokuinterior.pl/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 15 Jul 2026 18:58:34 GMT\r\ncontent-type: text/html\r\nserver-timing: cfExtPri\r\npriority: u=0,i\r\ncache-control: private, no-transform\r\nset-cookie: sid=t6~30ej2tpyr5hoigzcttuxxhda; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ca6CS8YYjU0mLtbffLkOGFYs07sAEc0gf0Zw%2B3KsfuIrqTf1fdYzBnSSBEFAC3jGFSQ3BotrQim9CIP5KdOTPMn6jrFUTZxoz2SjvYUVpTjAHEOxFcqnxKL92OVk648aXC5s4saAM%2FkXuzXxVFyXJRWQnA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1baffd44e455684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6726\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":6726,"size_decoded":7411,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (522), with CRLF line terminators","md5":"e2caabcce0c0f3c21aaabcaa35a42204","sha1":"ccae587529d849bbe67f5bc5c44dfcae4c627748","sha256":"dcb42dbbf2588957bbb453fcd5a5b9c3c35a2c8a8dd6f4c19620d49d2e8ebc05","sha512":"b0ade318b1aafe5337e34f0db2f209fff835f5d25c4320329f2f0e3c61b0647d74761ea966dec867b7c18d8cc90d3485b7923d5c03b609dc44c5427c66365626","ssdeep":"192:xTCzGMRoHc7x5CiaiGgX9tA2DON8H+BDdU2o:NU7CJ4tA2B","tlshash":"5fd10108ba0ed50e037213eb913ff618e4aaec74d327945df6f90a3757a1b0953198d6","first_seen":"2026-07-15T18:59:09.765525Z","last_seen":"2026-07-15T18:59:09.765525Z","times_seen":1,"resource_available":true,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":77,"connect":18,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"xrbpmr6gj.bondfocusedadmirer.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrbpmr6gj.bondfocusedadmirer.org/media/dating/flirtup/js/timer.js","fqdn":"xrbpmr6gj.bondfocusedadmirer.org","domain":"bondfocusedadmirer.org","tld":"org"},"ip":{"addr":"104.21.30.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xrbpmr6gj.bondfocusedadmirer.org/gaw21lf","date":"2026-07-15T18:58:34.952Z","timestamp":1784141914952,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bondfocusedadmirer.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:13:30 GMT","end":"Wed, 16 Sep 2026 16:13:29 GMT"},"fingerprint":{"sha1":"EF:1D:5F:A0:23:AE:C6:50:97:51:6A:C7:27:12:46:9C:8C:F9:DF:22","sha256":"7D:C1:CE:06:D7:27:A0:AD:AE:EE:ED:21:82:B1:E1:AF:38:8B:9C:C8:5C:6E:2A:09:31:3F:7A:79:DF:BC:69:16"}}},"request":{"raw":"GET /media/dating/flirtup/js/timer.js HTTP/1.1\r\nHost: xrbpmr6gj.bondfocusedadmirer.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xrbpmr6gj.bondfocusedadmirer.org/gaw21lf\r\nCookie: sid=t6~30ej2tpyr5hoigzcttuxxhda\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 15 Jul 2026 18:58:34 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\netag: \"db12eacb17d6d147e21495e2f8787fff\"\r\nlast-modified: Thu, 21 Nov 2024 08:27:37 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: 42aa5a63a589b4374a9c1295fb1c20dcda18b77f2cb8e112e03c5ecdf9b92360\r\nx-amz-request-id: 18C018A321A25E44\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 336\r\nx-ratelimit-remaining: 336\r\nx-xss-protection: 1; mode=block\r\nx-amz-meta-mc-attrs: atime:1732028649#469643174/gid:0/gname:root/mode:33188/mtime:1732177657#611891895/uid:0/uname:root\r\nx-amz-meta-mm-source-mtime: 2024-11-21T08:27:37.665Z\r\nexpires: Wed, 07 Jul 2027 19:29:01 GMT\r\ncache-control: max-age=31536000, no-transform\r\naccept-ranges: bytes\r\nage: 689373\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fERwuU6KD2b1bwLT7WYq3GQxIUZ7thqG3QYkH6RA5gjauam9bqOeDqW%2FnlG169nfUaJ4%2FZdilBDXu45wH3JoZydgwJpK0VWe%2Bu9%2BIAxUyWhPHTly5PaID41PwTynpE2NxNJSKprkE%2FUlTzVGsKrfSC2XCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1baffd87e8b5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 639\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":639,"size_decoded":1955,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"db12eacb17d6d147e21495e2f8787fff","sha1":"32c7f9200e989eeb54df98b8ee70331a3b22789b","sha256":"b18fa00e948ce4a17e7cfa703c82e27fc8e1bababa97327ead9562c2281aff0f","sha512":"dd098bf6f1fc64bcd7efec3b6120fa2b5dbba0c063e99d8618c77e638a7765b23b8bf1b1821e52546af7bec6cba3f70be97594be438372da9f006a19b456e0e4","ssdeep":"","tlshash":"52f0f44837177b491eb1086e1bbde508d62ee522700f580924ccd0e19c9ee3a838ee6d","first_seen":"2024-07-01T19:44:30Z","last_seen":"2026-07-15T18:59:09.767341Z","times_seen":2662,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"xrbpmr6gj.bondfocusedadmirer.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrbpmr6gj.bondfocusedadmirer.org/media/dating/flirtup/images/flirt_logo.svg","fqdn":"xrbpmr6gj.bondfocusedadmirer.org","domain":"bondfocusedadmirer.org","tld":"org"},"ip":{"addr":"104.21.30.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xrbpmr6gj.bondfocusedadmirer.org/gaw21lf","date":"2026-07-15T18:58:34.971Z","timestamp":1784141914971,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bondfocusedadmirer.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:13:30 GMT","end":"Wed, 16 Sep 2026 16:13:29 GMT"},"fingerprint":{"sha1":"EF:1D:5F:A0:23:AE:C6:50:97:51:6A:C7:27:12:46:9C:8C:F9:DF:22","sha256":"7D:C1:CE:06:D7:27:A0:AD:AE:EE:ED:21:82:B1:E1:AF:38:8B:9C:C8:5C:6E:2A:09:31:3F:7A:79:DF:BC:69:16"}}},"request":{"raw":"GET /media/dating/flirtup/images/flirt_logo.svg HTTP/1.1\r\nHost: xrbpmr6gj.bondfocusedadmirer.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xrbpmr6gj.bondfocusedadmirer.org/gaw21lf\r\nCookie: sid=t6~30ej2tpyr5hoigzcttuxxhda\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 15 Jul 2026 18:58:34 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\netag: \"037c209aa2e3d00d37633d832af76752\"\r\nlast-modified: Thu, 21 Nov 2024 08:27:49 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: af968cfc53e5d4d46c2a7314ea3774fe010d1d1a8defca6495a09901b4f201c0\r\nx-amz-request-id: 18C018A3202849C7\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 336\r\nx-ratelimit-remaining: 336\r\nx-xss-protection: 1; mode=block\r\nx-amz-meta-mc-attrs: atime:1732028637#8399019/gid:0/gname:root/mode:33188/mtime:1732177670#109008066/uid:0/uname:root\r\nx-amz-meta-mm-source-mtime: 2024-11-21T08:27:50.158Z\r\nexpires: Wed, 07 Jul 2027 19:29:01 GMT\r\ncache-control: max-age=31536000, no-transform\r\naccept-ranges: bytes\r\nage: 689373\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0uLdp2n1CMGRqy%2FniqRp0spOwss6JgLCNHgGM1D%2BqbKgZq%2F7KggNiUvhlrgJWE715%2B4s66btMwcrnY4NBQNqNw%2FMCNTxAaoX3saEoh6FPbrUqRlrnQdD33cCjRehCSnQaM06EYcwsKtAZSCLfdLX2JUljg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1baffd89e8f5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4939\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4939,"size_decoded":6249,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"037c209aa2e3d00d37633d832af76752","sha1":"4eab6ad305760586453c1c87ee34b23f03806b8d","sha256":"ea1161fca6b102661f5c1f2b1b10bdda1b7887f608ca13d900c9c596e4480d62","sha512":"88f60e11cd08e3ee5e6264654a124372ceb563fdeedb8812e5a0c644dcefa9217728b2ccaee6526e9441675241102d9c2db4ea16204bff1850ac61213fcb7c3a","ssdeep":"96:mZRnh2Noj8WjtgghNMcwfEb+VtUO3tTRL31Bnh0AF7UdUzKPXG8R:mRLjDZggIcpb+3Z3tFXuAxiUzj8R","tlshash":"d1a142980ba75be8a98473da88131271376fe4feaeb78254c245d732381245cdc408db","first_seen":"2024-11-21T16:29:51.957938Z","last_seen":"2026-07-15T18:59:09.76946Z","times_seen":1173,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"xrbpmr6gj.bondfocusedadmirer.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrbpmr6gj.bondfocusedadmirer.org/util/flag-icon/flags/4x3/no.svg","fqdn":"xrbpmr6gj.bondfocusedadmirer.org","domain":"bondfocusedadmirer.org","tld":"org"},"ip":{"addr":"104.21.30.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xrbpmr6gj.bondfocusedadmirer.org/gaw21lf","date":"2026-07-15T18:58:35.151Z","timestamp":1784141915151,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bondfocusedadmirer.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:13:30 GMT","end":"Wed, 16 Sep 2026 16:13:29 GMT"},"fingerprint":{"sha1":"EF:1D:5F:A0:23:AE:C6:50:97:51:6A:C7:27:12:46:9C:8C:F9:DF:22","sha256":"7D:C1:CE:06:D7:27:A0:AD:AE:EE:ED:21:82:B1:E1:AF:38:8B:9C:C8:5C:6E:2A:09:31:3F:7A:79:DF:BC:69:16"}}},"request":{"raw":"GET /util/flag-icon/flags/4x3/no.svg HTTP/1.1\r\nHost: xrbpmr6gj.bondfocusedadmirer.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xrbpmr6gj.bondfocusedadmirer.org/util/flag-icon/css/flag-icon.css\r\nCookie: sid=t6~30ej2tpyr5hoigzcttuxxhda\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 15 Jul 2026 18:58:35 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\netag: \"c7ecfe59439b5fd23924fd206cf2fded\"\r\nlast-modified: Wed, 20 Sep 2023 15:26:17 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 18C018A3479CBEE4\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 2060\r\nx-ratelimit-remaining: 2060\r\nx-xss-protection: 1; mode=block\r\nx-amz-meta-mc-attrs: atime:1693134513#304037147/gid:0/gname:root/mode:33188/mtime:1655386305#848080000/uid:0/uname:root\r\nx-amz-meta-mm-source-mtime: 2022-06-16T13:31:45.84808Z\r\nexpires: Wed, 07 Jul 2027 19:29:02 GMT\r\ncache-control: max-age=31536000, no-transform\r\naccept-ranges: bytes\r\nage: 689373\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f8PPrrecFjsuBouuFf%2BSRUGwCchl6abcFv7XNeB7iavSWCsCaH8mXBxlT3S79cJ72zNWxtlKLxKS8V0ksk%2BalelMCjPD4RMR7BYtyGYqqhY6IRl2Aeiz8qmL6RiPmEuWzFyomewEG0b5lwiOCaf4cttRUA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1baffd9be9e5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 331\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":331,"size_decoded":1640,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c7ecfe59439b5fd23924fd206cf2fded","sha1":"056fbd2b17c7f08bfb480d21973a96bf86fbd72a","sha256":"4027f3320608508754640a6de4cb1cdabdef4654b5a214e875c134802345683f","sha512":"b599bc79feb6f5f93d191b92beade2c05935b10788e4b31f01ab480695ecb131d007816185cb7f5559a6d94bb7bc7720106fb5e54f60970ce43d3994f7f7f7a1","ssdeep":"","tlshash":"68e0cded91bcfc148b3083102f2d7ae288a5f4c6a09506f7fc51311a615f596cdc3605","first_seen":"2023-04-07T05:59:23Z","last_seen":"2026-07-15T18:59:09.770137Z","times_seen":6440,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"xrbpmr6gj.bondfocusedadmirer.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrbpmr6gj.bondfocusedadmirer.org/media/dating/flirtup/images/canada1_casual_dark.jpg","fqdn":"xrbpmr6gj.bondfocusedadmirer.org","domain":"bondfocusedadmirer.org","tld":"org"},"ip":{"addr":"104.21.30.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xrbpmr6gj.bondfocusedadmirer.org/gaw21lf","date":"2026-07-15T18:58:35.168Z","timestamp":1784141915168,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bondfocusedadmirer.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:13:30 GMT","end":"Wed, 16 Sep 2026 16:13:29 GMT"},"fingerprint":{"sha1":"EF:1D:5F:A0:23:AE:C6:50:97:51:6A:C7:27:12:46:9C:8C:F9:DF:22","sha256":"7D:C1:CE:06:D7:27:A0:AD:AE:EE:ED:21:82:B1:E1:AF:38:8B:9C:C8:5C:6E:2A:09:31:3F:7A:79:DF:BC:69:16"}}},"request":{"raw":"GET /media/dating/flirtup/images/canada1_casual_dark.jpg HTTP/1.1\r\nHost: xrbpmr6gj.bondfocusedadmirer.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xrbpmr6gj.bondfocusedadmirer.org/gaw21lf\r\nCookie: sid=t6~30ej2tpyr5hoigzcttuxxhda\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 15 Jul 2026 18:58:35 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\netag: \"8969fe5e10b1dc97a105aceea7e38ab9\"\r\nlast-modified: Thu, 21 Nov 2024 08:27:44 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: 31f7dd36b65146a775b93356924fa83cf99019d4a4dfda4a9a6512d5179fdf9c\r\nx-amz-request-id: 18C1A1F36E88C1C9\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 364\r\nx-ratelimit-remaining: 364\r\nx-xss-protection: 1; mode=block\r\nx-amz-meta-mc-attrs: atime:1732028631#579857025/gid:0/gname:root/mode:33188/mtime:1732177665#4552116/uid:0/uname:root\r\nx-amz-meta-mm-source-mtime: 2024-11-21T08:27:45.052Z\r\nexpires: Mon, 12 Jul 2027 19:36:34 GMT\r\ncache-control: max-age=31536000, no-transform\r\naccept-ranges: bytes\r\nage: 256920\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DEMm0NVD4MonKcDXR1y0fBeai0j8Fq6FiHvKLxSI2x3fqt9xo7uclulo1XSrVxaisUh3MlEcl8P7EkPLFgLCd%2FxxYPpHiVFa7JNs16zRSWscrmr5FfifA8si8axrdoKm%2FKCSrXVEViNviqpk%2F6LTSeJdlQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1baffd9ce9f5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 237765\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":237765,"size_decoded":239070,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1920x1080, components 3","md5":"8969fe5e10b1dc97a105aceea7e38ab9","sha1":"b3f6da5f5f5266b94664adf025a229e8f6fa383e","sha256":"051dee816ab7eed3d4db9758ab2bc61de1ccb4af3f1db0a5d1ea962aa560950a","sha512":"084496f443caa359c2c3ec6739e53f67dbeeebb272360899ed70baf2d12992a6f1b141b9d36684e9673aca668630f1f54e26593001e538485a9a32042a430739","ssdeep":"6144:7NUdr7EwC6ejQQzd2Ocx9HQE4ezkE7OJ5ru5FWrbOfo:7NMlCtRYOQ9B4wkFTukbOQ","tlshash":"b534135869f3fa9985ec6959c06fa50b26cc8576e4f8f0b58f8173fd1b3b443008aa19","first_seen":"2025-01-15T21:46:09.046649Z","last_seen":"2026-07-15T18:59:09.770749Z","times_seen":139,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"xrbpmr6gj.bondfocusedadmirer.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yokuinterior.pl/join/57717","fqdn":"yokuinterior.pl","domain":"yokuinterior.pl","tld":"pl"},"ip":{"addr":"172.67.158.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-15T18:58:33.483Z","timestamp":1784141913483,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /join/57717 HTTP/1.1\r\nHost: yokuinterior.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Wed, 15 Jul 2026 18:58:33 GMT\r\nserver: cloudflare\r\nx-frame-options: DENY\r\ncf-cache-status: DYNAMIC\r\npriority: u=0,i\r\nlocation: /redirect.html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2ozsvzZ%2Ba2kZAmds0yADqhN%2BUIduFwgql%2BEDUdm4JwIi8n2mUF5UIBH9EhCclXytaOuMZF7iep0rsZMyfvTmSOFFJ%2FPFkC3%2BO7y0HjNmE%2BvUQVU83lZU%2BPdPUt1wt3WsmYs%3D\"}]}\r\ncf-ray: a1baffcf7b841a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T21:18:41.448424Z","times_seen":17272252,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yokuinterior.pl/redirect.html","fqdn":"yokuinterior.pl","domain":"yokuinterior.pl","tld":"pl"},"ip":{"addr":"172.67.158.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-15T18:58:33.587Z","timestamp":1784141913587,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /redirect.html HTTP/1.1\r\nHost: yokuinterior.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 15 Jul 2026 18:58:33 GMT\r\nserver: cloudflare\r\nx-frame-options: DENY\r\ncf-cache-status: DYNAMIC\r\npriority: u=0,i\r\nlast-modified: Fri, 20 Feb 2026 09:17:42 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bDoFYhie%2BHCEkkw1HQipu0rvyeKeUFtbHygr8V%2BJry5LGLjzwc%2F2sryuKoW1MbHId%2FIHXT%2BfppYEWNNJvp32Q%2FQBRARizSuQYwExWxfxhvUkhgP7syhxJAU3BKUtzh798Xg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-type: text/html\r\ncontent-encoding: zstd\r\ncf-ray: a1baffcfeba21a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T21:18:41.448424Z","times_seen":17272252,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xrbpmr6gj.bondfocusedadmirer.org/media/dating/flirtup/fonts/5c92d5d3e39a260d5dd06ced7eca070d.woff2","fqdn":"xrbpmr6gj.bondfocusedadmirer.org","domain":"bondfocusedadmirer.org","tld":"org"},"ip":{"addr":"104.21.30.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xrbpmr6gj.bondfocusedadmirer.org/gaw21lf","date":"2026-07-15T18:58:35.142Z","timestamp":1784141915142,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bondfocusedadmirer.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:13:30 GMT","end":"Wed, 16 Sep 2026 16:13:29 GMT"},"fingerprint":{"sha1":"EF:1D:5F:A0:23:AE:C6:50:97:51:6A:C7:27:12:46:9C:8C:F9:DF:22","sha256":"7D:C1:CE:06:D7:27:A0:AD:AE:EE:ED:21:82:B1:E1:AF:38:8B:9C:C8:5C:6E:2A:09:31:3F:7A:79:DF:BC:69:16"}}},"request":{"raw":"GET /media/dating/flirtup/fonts/5c92d5d3e39a260d5dd06ced7eca070d.woff2 HTTP/1.1\r\nHost: xrbpmr6gj.bondfocusedadmirer.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xrbpmr6gj.bondfocusedadmirer.org/media/dating/flirtup/css/style.css\r\nCookie: sid=t6~30ej2tpyr5hoigzcttuxxhda\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 15 Jul 2026 18:58:35 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\netag: \"5c92d5d3e39a260d5dd06ced7eca070d\"\r\nlast-modified: Thu, 21 Nov 2024 08:28:10 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 18C10655A1E0BD51\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 2060\r\nx-ratelimit-remaining: 2059\r\nx-xss-protection: 1; mode=block\r\nx-amz-meta-mc-attrs: atime:1732028624#863186422/gid:0/gname:root/mode:33188/mtime:1732177691#353425218/uid:0/uname:root\r\nx-amz-meta-mm-source-mtime: 2024-11-21T08:28:11.4Z\r\nexpires: Sat, 10 Jul 2027 20:04:52 GMT\r\ncache-control: max-age=31536000, no-transform\r\naccept-ranges: bytes\r\nage: 428022\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MDCnRcnCwtj47QqsY55z5mG%2FS0EkwMRVBUNPt%2FXSIi%2F2GmUaBq4elv4kdT1vFdD55IsfPFdI%2FQliJGnMKAM%2BVfKPwEcoROJF6vXG4pWcAuJxnXCt8MqgfHqDJWhIl6l8sUWSmzBYoerJ4pUmmadBuc5q5g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1baffd9ae9a5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 22284\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":22284,"size_decoded":23597,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22284, version 3.786","md5":"5c92d5d3e39a260d5dd06ced7eca070d","sha1":"64df09fd462e6bb76890b7782578777b901f2003","sha256":"2a99c11dd137ef8b515b3a95d2bdb38ec99bf745b2865196aa910628bcb144b9","sha512":"973d8236ff36779be71c75694a1ee5e6ccb6ce656260071e6ff6309a391a7de1357fc00437986a8b42ab3c409e821a58c810701116867b3833df0873dc05b7dd","ssdeep":"384:EWQxHPyVmkdQDmRCsP5V0BKWbOCamb323fyFeP7mplzfHar43CF5Gjru3JFU:EW+HOdeGCsP1/CG3dPqrz/ar005KWJy","tlshash":"3ca2e11c4e18f813b7203a5c99adb965f21e1617da99cc5d0f677ae4b2c0c4e4a51f43","first_seen":"2023-04-07T05:59:23Z","last_seen":"2026-07-15T18:59:09.773426Z","times_seen":4487,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"xrbpmr6gj.bondfocusedadmirer.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrbpmr6gj.bondfocusedadmirer.org/media/dating/flirtup/js/trls_loveme_casual.js","fqdn":"xrbpmr6gj.bondfocusedadmirer.org","domain":"bondfocusedadmirer.org","tld":"org"},"ip":{"addr":"104.21.30.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xrbpmr6gj.bondfocusedadmirer.org/gaw21lf","date":"2026-07-15T18:58:34.954Z","timestamp":1784141914954,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bondfocusedadmirer.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:13:30 GMT","end":"Wed, 16 Sep 2026 16:13:29 GMT"},"fingerprint":{"sha1":"EF:1D:5F:A0:23:AE:C6:50:97:51:6A:C7:27:12:46:9C:8C:F9:DF:22","sha256":"7D:C1:CE:06:D7:27:A0:AD:AE:EE:ED:21:82:B1:E1:AF:38:8B:9C:C8:5C:6E:2A:09:31:3F:7A:79:DF:BC:69:16"}}},"request":{"raw":"GET /media/dating/flirtup/js/trls_loveme_casual.js HTTP/1.1\r\nHost: xrbpmr6gj.bondfocusedadmirer.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xrbpmr6gj.bondfocusedadmirer.org/gaw21lf\r\nCookie: sid=t6~30ej2tpyr5hoigzcttuxxhda\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 15 Jul 2026 18:58:34 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\netag: \"fe9bcd27c507ed339bb6e127e0ba5a9e\"\r\nlast-modified: Thu, 21 Nov 2024 08:27:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: 5bbf9b091ca9dd795595b773b0f1d036407937e2098457815217f1ddbc67c996\r\nx-amz-request-id: 18C018A330D6B669\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 343\r\nx-ratelimit-remaining: 343\r\nx-xss-protection: 1; mode=block\r\nx-amz-meta-mc-attrs: atime:1732028651#241820112/gid:0/gname:root/mode:33188/mtime:1732177659#332045504/uid:0/uname:root\r\nx-amz-meta-mm-source-mtime: 2024-11-21T08:27:39.381Z\r\nexpires: Wed, 07 Jul 2027 19:29:01 GMT\r\ncache-control: max-age=31536000, no-transform\r\naccept-ranges: bytes\r\nage: 689373\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fLemThQtqbMywrEtTDAkXSyneREOkUxkKnKAcrxU69HYSedykzb9y2h%2BmtDJcMccXI%2FU3Bv1eo1n%2BPJa8IwUaT%2F25M%2Far8TEEkSyybaDBq3fuO%2BuwisY%2FXITBbtouYOVx6%2Bm0SjX6qbZZ6WCiZZO0%2FvTLA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1baffd87e8c5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15968\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15968,"size_decoded":17294,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"fe9bcd27c507ed339bb6e127e0ba5a9e","sha1":"d42529b16b5385bf270678bdb5afc4dd62a0333c","sha256":"438d3925fc872661a31e1f5b8ddd550e8c5b2113cfd23ed7e9a727bf4ff26969","sha512":"913673007b15c5a0d0401f91fe03d3a1f0b1199c7d84c84893f738e115ad2d1993aceefed3462346f0597dddac69b246d8d908b8d99b2026b91bb4da5b54311f","ssdeep":"384:SCOCsgtymBJ+Qx79dHbubiNP+ypBP2AcqYCOr3Cf0:rfsgtyM9bP+oRK","tlshash":"8d624e7bfb8f44f9fad023409672e902a41df1bfc399e069356e54aa1191c1482af58b","first_seen":"2024-07-01T19:44:30Z","last_seen":"2026-07-15T18:59:09.77411Z","times_seen":1893,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"xrbpmr6gj.bondfocusedadmirer.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrbpmr6gj.bondfocusedadmirer.org/media/exit-new/exit1.js","fqdn":"xrbpmr6gj.bondfocusedadmirer.org","domain":"bondfocusedadmirer.org","tld":"org"},"ip":{"addr":"104.21.30.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xrbpmr6gj.bondfocusedadmirer.org/gaw21lf","date":"2026-07-15T18:58:34.958Z","timestamp":1784141914958,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bondfocusedadmirer.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:13:30 GMT","end":"Wed, 16 Sep 2026 16:13:29 GMT"},"fingerprint":{"sha1":"EF:1D:5F:A0:23:AE:C6:50:97:51:6A:C7:27:12:46:9C:8C:F9:DF:22","sha256":"7D:C1:CE:06:D7:27:A0:AD:AE:EE:ED:21:82:B1:E1:AF:38:8B:9C:C8:5C:6E:2A:09:31:3F:7A:79:DF:BC:69:16"}}},"request":{"raw":"GET /media/exit-new/exit1.js HTTP/1.1\r\nHost: xrbpmr6gj.bondfocusedadmirer.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xrbpmr6gj.bondfocusedadmirer.org/gaw21lf\r\nCookie: sid=t6~30ej2tpyr5hoigzcttuxxhda\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 15 Jul 2026 18:58:34 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\netag: \"625e5e2950612f771e246beb33c9ea61\"\r\nlast-modified: Wed, 20 Sep 2023 15:23:09 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 18BC69E08224D9F8\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 2060\r\nx-ratelimit-remaining: 2060\r\nx-xss-protection: 1; mode=block\r\nx-amz-meta-mc-attrs: atime:1693134511#160030446/gid:0/gname:root/mode:33279/mtime:1655385544#182688000/uid:0/uname:root\r\nx-amz-meta-mm-source-mtime: 2022-06-16T13:19:04.182688Z\r\nexpires: Fri, 25 Jun 2027 19:32:45 GMT\r\ncache-control: max-age=31536000, no-transform\r\naccept-ranges: bytes\r\nage: 1725949\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Fof17wKeCMZCdZbz5s3%2BhQqgf4WetcimLQHn%2BUudLB4A3nfuGSVVZV1Kp9lDjaf%2BFGa9Kja4JWEN1%2FetEV8Y1HsTLWxhp3GcZsRb3W146j0Ky42qfKG0XzGOCBsG6g92CfNGOmz2kyeWVY0l3GnDKbWpA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1baffd87e8e5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3473\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3473,"size_decoded":4801,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (641), with CRLF line terminators","md5":"625e5e2950612f771e246beb33c9ea61","sha1":"e4fc251c6c000496c285f8dc3fa097040b031681","sha256":"618f345a156a0eda55177a1bf0e8a414104f9b6c6ff5cdbe71966f081ccb8a46","sha512":"655f0b373c605d0a464bedca4df204fb3aa12442c5b0aa3b8bf13e0604fd1e89480356e9c6cc9a432f81305bf1151caf4ac4ad9d8eb24eb78cbd11318e5b9657","ssdeep":"","tlshash":"e36156e4720e31ad93db3764c27fb11a7876e4b2d416a0b5a44c5c907434a1d6376cfd","first_seen":"2023-03-07T01:03:18Z","last_seen":"2026-07-15T18:59:09.774853Z","times_seen":13118,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"xrbpmr6gj.bondfocusedadmirer.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrbpmr6gj.bondfocusedadmirer.org/media/dating/flirtup/fonts/2e5fca371696cab9fb5a9fe214c1319c.woff2","fqdn":"xrbpmr6gj.bondfocusedadmirer.org","domain":"bondfocusedadmirer.org","tld":"org"},"ip":{"addr":"104.21.30.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xrbpmr6gj.bondfocusedadmirer.org/gaw21lf","date":"2026-07-15T18:58:35.148Z","timestamp":1784141915148,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bondfocusedadmirer.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:13:30 GMT","end":"Wed, 16 Sep 2026 16:13:29 GMT"},"fingerprint":{"sha1":"EF:1D:5F:A0:23:AE:C6:50:97:51:6A:C7:27:12:46:9C:8C:F9:DF:22","sha256":"7D:C1:CE:06:D7:27:A0:AD:AE:EE:ED:21:82:B1:E1:AF:38:8B:9C:C8:5C:6E:2A:09:31:3F:7A:79:DF:BC:69:16"}}},"request":{"raw":"GET /media/dating/flirtup/fonts/2e5fca371696cab9fb5a9fe214c1319c.woff2 HTTP/1.1\r\nHost: xrbpmr6gj.bondfocusedadmirer.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xrbpmr6gj.bondfocusedadmirer.org/media/dating/flirtup/css/style.css\r\nCookie: sid=t6~30ej2tpyr5hoigzcttuxxhda\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 15 Jul 2026 18:58:35 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\netag: \"2e5fca371696cab9fb5a9fe214c1319c\"\r\nlast-modified: Thu, 21 Nov 2024 08:28:10 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: 5bbf9b091ca9dd795595b773b0f1d036407937e2098457815217f1ddbc67c996\r\nx-amz-request-id: 18C10655A45B01D4\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 343\r\nx-ratelimit-remaining: 343\r\nx-xss-protection: 1; mode=block\r\nx-amz-meta-mc-attrs: atime:1732028624#535153670/gid:0/gname:root/mode:33188/mtime:1732177691#1428951/uid:0/uname:root\r\nx-amz-meta-mm-source-mtime: 2024-11-21T08:28:11.045Z\r\nexpires: Sat, 10 Jul 2027 20:04:52 GMT\r\ncache-control: max-age=31536000, no-transform\r\naccept-ranges: bytes\r\nage: 428022\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AWjimt%2B4fjZt4v%2FNYSQkPaO8Ppuex6HMXi4GEgFegN88hBCOP%2B6Ew%2FMnJaAOJ0HiTDR9xllxvAxk4zgmeaVCp%2BNrvKzbidrprIs39rm%2BN3bixYB%2FShoogYptvVgMMvgg1PausTqmF4mDBgNybaBvV3bOMg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1baffd9ae9d5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21908\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21908,"size_decoded":23223,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21908, version 3.786","md5":"2e5fca371696cab9fb5a9fe214c1319c","sha1":"4bd3fe039b2f65d10d1b8c1b30c7962bdc313b7a","sha256":"f8b1a05998ba7e93e5c9f41b004496a3576b8d10d9fafc2f7014894ebc3e72e9","sha512":"5e0fc1c5b768d270b1b6fb5abb229d6c668ecc31269818d82b0e33125671aa876a805383d63f3d6b99b24baf8428525240fa05326309640a7c4f5d50c0db4ac5","ssdeep":"384:gBd7eI524xG1u/eBQLE2rPDR5VdqvlG+zFvpLdLAl3sQC15mwA:qZewBj/ZzbXVcvpLtALY5mwA","tlshash":"e0a2d04fef5e681bee938d758d9e908868862946af457760a3fc532374970ea07809d0","first_seen":"2023-04-07T05:59:23Z","last_seen":"2026-07-15T18:59:09.77563Z","times_seen":4035,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"xrbpmr6gj.bondfocusedadmirer.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrbpmr6gj.bondfocusedadmirer.org/media/dating/flirtup/js/vegas.js","fqdn":"xrbpmr6gj.bondfocusedadmirer.org","domain":"bondfocusedadmirer.org","tld":"org"},"ip":{"addr":"104.21.30.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xrbpmr6gj.bondfocusedadmirer.org/gaw21lf","date":"2026-07-15T18:58:34.946Z","timestamp":1784141914946,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bondfocusedadmirer.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:13:30 GMT","end":"Wed, 16 Sep 2026 16:13:29 GMT"},"fingerprint":{"sha1":"EF:1D:5F:A0:23:AE:C6:50:97:51:6A:C7:27:12:46:9C:8C:F9:DF:22","sha256":"7D:C1:CE:06:D7:27:A0:AD:AE:EE:ED:21:82:B1:E1:AF:38:8B:9C:C8:5C:6E:2A:09:31:3F:7A:79:DF:BC:69:16"}}},"request":{"raw":"GET /media/dating/flirtup/js/vegas.js HTTP/1.1\r\nHost: xrbpmr6gj.bondfocusedadmirer.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xrbpmr6gj.bondfocusedadmirer.org/gaw21lf\r\nCookie: sid=t6~30ej2tpyr5hoigzcttuxxhda\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 15 Jul 2026 18:58:34 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\netag: \"ea8391e9e4f905102fef9737e225aba3\"\r\nlast-modified: Thu, 21 Nov 2024 08:27:39 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 18C01768AB9FD51C\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 2060\r\nx-ratelimit-remaining: 2060\r\nx-xss-protection: 1; mode=block\r\nx-amz-meta-mc-attrs: atime:1732028651#909886812/gid:0/gname:root/mode:33188/mtime:1732177660#44109095/uid:0/uname:root\r\nx-amz-meta-mm-source-mtime: 2024-11-21T08:27:40.097Z\r\nexpires: Wed, 07 Jul 2027 19:29:01 GMT\r\ncache-control: max-age=31536000, no-transform\r\naccept-ranges: bytes\r\nage: 689373\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dmotMn00yQrnx2nIlLzBU5NIyAOgNQ7hztH0NDYaTAWfXdx2XsCWCPE%2FBDk7tw43ilm2ggpvvyjvmFrMtO5a2nDbzlflyMQiw0xg6MH4dGJG4aDS7XVt6tb965tBDuMhY75qLskwmVQDdW4Utwx6hbvcIA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1baffd86e895684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 22473\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":22473,"size_decoded":23784,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"ea8391e9e4f905102fef9737e225aba3","sha1":"2111929b9d64a20ecdeea04e3cf2a6633e09f428","sha256":"586607fdd9a798760719c89e72801e7f9f4af96a830fbbcee2889cffd521c239","sha512":"99b74beba57f023eeac792b77f3e3e7109c8fa279f1290d94ea056cd1a6ae784514eb24b3d2d01d511ded74d13b1934724033ea750aa9bdeb471c189b6ded131","ssdeep":"192:hzdEiLcmBWE4spGE9OICxPh+6Qw05RbJ1u1vqGDG2hYSwHSOV9Mfjsf5s9nhaGIt:hpE2/bJ3GLdM9MfjsfohNZvKz","tlshash":"aea2bd897f66510989b7e37a9f6a810ceb7682276503922d3cbd41c45fb1438436affc","first_seen":"2024-07-01T19:44:30Z","last_seen":"2026-07-15T18:59:09.777121Z","times_seen":1953,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"xrbpmr6gj.bondfocusedadmirer.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrbpmr6gj.bondfocusedadmirer.org/util/utils.js","fqdn":"xrbpmr6gj.bondfocusedadmirer.org","domain":"bondfocusedadmirer.org","tld":"org"},"ip":{"addr":"104.21.30.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xrbpmr6gj.bondfocusedadmirer.org/gaw21lf","date":"2026-07-15T18:58:34.949Z","timestamp":1784141914949,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bondfocusedadmirer.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:13:30 GMT","end":"Wed, 16 Sep 2026 16:13:29 GMT"},"fingerprint":{"sha1":"EF:1D:5F:A0:23:AE:C6:50:97:51:6A:C7:27:12:46:9C:8C:F9:DF:22","sha256":"7D:C1:CE:06:D7:27:A0:AD:AE:EE:ED:21:82:B1:E1:AF:38:8B:9C:C8:5C:6E:2A:09:31:3F:7A:79:DF:BC:69:16"}}},"request":{"raw":"GET /util/utils.js HTTP/1.1\r\nHost: xrbpmr6gj.bondfocusedadmirer.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xrbpmr6gj.bondfocusedadmirer.org/gaw21lf\r\nCookie: sid=t6~30ej2tpyr5hoigzcttuxxhda\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 15 Jul 2026 18:58:34 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\netag: \"67f83bb8309524daa942af9cec436419\"\r\nlast-modified: Thu, 16 Jan 2025 07:55:10 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: af968cfc53e5d4d46c2a7314ea3774fe010d1d1a8defca6495a09901b4f201c0\r\nx-amz-request-id: 18AD8620C8822F95\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 336\r\nx-ratelimit-remaining: 336\r\nx-xss-protection: 1; mode=block\r\nx-amz-meta-mc-attrs: atime:1737013493#205481014/gid:0/gname:root/mode:33188/mtime:1737014112#757470179/uid:0/uname:root\r\nx-amz-meta-mm-source-mtime: 2025-01-16T07:55:12.806Z\r\nexpires: Sat, 08 May 2027 07:28:04 GMT\r\ncache-control: max-age=31536000, no-transform\r\naccept-ranges: bytes\r\nage: 5916630\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eDIfoEuNhSDvgKr%2FZ%2FfGH%2F11laGSOZGKNfp3f5CGBg8etyeHrAmpYpzubSnV1RQDRpDdjUdwBwdmjiQCmAozJ1BKPVOg0pDSLErHtljf%2Bv6cueaDkd8IaomWxEq2zWa1hX8SZ%2BjTP3EwRZuJziiZ43iElg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1baffd86e8a5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7514\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":7514,"size_decoded":8832,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (641), with CRLF line terminators","md5":"67f83bb8309524daa942af9cec436419","sha1":"df63410e039476a6dde6eb4200b5c1666c52af21","sha256":"57d2fd3a46ef70b606d7dcd83f70b6a2107725cd910ca1399c70ef52b2c72b9d","sha512":"d48b08d4209f4313706376f312ccc8d08f9a34c22f4428a5bce059242442097a15a4581673259de0a2eb27bacb508104248703feed52a9d38a74d6e9470599ce","ssdeep":"192:nv6UDdoxY4iYiXKF3nwx16qI9S7q6uRIpauZy4hpjgRxtSY8xd:nv6wixY4iYi+3nwx16q97H3Zy47jgRxE","tlshash":"3df1b89e334f311e87c633b1087e9408ac7ef8352796e095b9ed949464b0e1d3762ee8","first_seen":"2025-01-16T10:08:27.907414Z","last_seen":"2026-07-15T18:59:09.779061Z","times_seen":1598,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"xrbpmr6gj.bondfocusedadmirer.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrbpmr6gj.bondfocusedadmirer.org/favicon.ico","fqdn":"xrbpmr6gj.bondfocusedadmirer.org","domain":"bondfocusedadmirer.org","tld":"org"},"ip":{"addr":"104.21.30.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xrbpmr6gj.bondfocusedadmirer.org/gaw21lf","date":"2026-07-15T18:58:35.284Z","timestamp":1784141915284,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bondfocusedadmirer.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:13:30 GMT","end":"Wed, 16 Sep 2026 16:13:29 GMT"},"fingerprint":{"sha1":"EF:1D:5F:A0:23:AE:C6:50:97:51:6A:C7:27:12:46:9C:8C:F9:DF:22","sha256":"7D:C1:CE:06:D7:27:A0:AD:AE:EE:ED:21:82:B1:E1:AF:38:8B:9C:C8:5C:6E:2A:09:31:3F:7A:79:DF:BC:69:16"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: xrbpmr6gj.bondfocusedadmirer.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xrbpmr6gj.bondfocusedadmirer.org/gaw21lf\r\nCookie: sid=t6~30ej2tpyr5hoigzcttuxxhda\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Wed, 15 Jul 2026 18:58:35 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gktmYsvf2AN2XNc%2BHCDSvwdi3HhrdD8wvvW4qyyb2J5A02YeohMCrP3%2F9pow3H0j%2FsK1ZVyEGRJ0CGNjXPU7y5IPLxkyeNCH%2FFrwQ%2FWQc0Xb0TZSO6OYYLqzVjgs7h91MWxurpY%2B%2BjguIas5NG%2FX7u7eJQ%3D%3D\"}]}\r\ncache-control: max-age=14400, no-transform\r\nage: 232\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1baffda8ea65684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":612,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T21:18:41.448424Z","times_seen":17272252,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"xrbpmr6gj.bondfocusedadmirer.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrbpmr6gj.bondfocusedadmirer.org/media/dating/flirtup/images/canada3_casual_dark.jpg","fqdn":"xrbpmr6gj.bondfocusedadmirer.org","domain":"bondfocusedadmirer.org","tld":"org"},"ip":{"addr":"104.21.30.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xrbpmr6gj.bondfocusedadmirer.org/gaw21lf","date":"2026-07-15T18:58:51.019Z","timestamp":1784141931019,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bondfocusedadmirer.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:13:30 GMT","end":"Wed, 16 Sep 2026 16:13:29 GMT"},"fingerprint":{"sha1":"EF:1D:5F:A0:23:AE:C6:50:97:51:6A:C7:27:12:46:9C:8C:F9:DF:22","sha256":"7D:C1:CE:06:D7:27:A0:AD:AE:EE:ED:21:82:B1:E1:AF:38:8B:9C:C8:5C:6E:2A:09:31:3F:7A:79:DF:BC:69:16"}}},"request":{"raw":"GET /media/dating/flirtup/images/canada3_casual_dark.jpg HTTP/1.1\r\nHost: xrbpmr6gj.bondfocusedadmirer.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xrbpmr6gj.bondfocusedadmirer.org/gaw21lf\r\nCookie: sid=t6~30ej2tpyr5hoigzcttuxxhda\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 15 Jul 2026 18:58:51 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\netag: \"a2b34768d1d7f7258b5ddf97c5b0b610\"\r\nlast-modified: Thu, 21 Nov 2024 08:27:46 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: 42aa5a63a589b4374a9c1295fb1c20dcda18b77f2cb8e112e03c5ecdf9b92360\r\nx-amz-request-id: 18C1A5BF23E030A2\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 336\r\nx-ratelimit-remaining: 336\r\nx-xss-protection: 1; mode=block\r\nx-amz-meta-mc-attrs: atime:1732177666#920723268/gid:0/gname:root/mode:33188/mtime:1732177666#876719337/uid:0/uname:root\r\nx-amz-meta-mm-source-mtime: 2024-11-21T08:27:46.925Z\r\nexpires: Mon, 12 Jul 2027 20:46:07 GMT\r\ncache-control: max-age=31536000, no-transform\r\naccept-ranges: bytes\r\nage: 252763\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fCSte2s9g4eq1zjktRbb%2F0LPzCGGRv2rvx3tM2F8GZiu7dA840Z5ZtUlevQfB8aCfvnXVHa8fIUSZV5DyXAOOeJPqgeBnpX2bqZu5xKssIxwxWGSEvIfdgroI%2F466mIV5xWSsSiqKyE9ojMGShf2053pxQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1bb003cdbf05684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 166875\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":166875,"size_decoded":168180,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1920x1080, components 3","md5":"a2b34768d1d7f7258b5ddf97c5b0b610","sha1":"c28994597b412c04c4ad03f7ef37ef9cd4a1ad4d","sha256":"2662a550621261fe5fe0eb3b242259eb7fcb62851cb4355074bc6a00224d34a0","sha512":"768d41e30de877f4c284287f3d8cf00b79e955aa645a755002c0cd2c73d580c1332028ca493da23dcaa5b2b2353296b808eb01479379c284385b21be0452418e","ssdeep":"3072:yddpDzov7WsHCWWEaVbl+qse57RJOnWC1Va3OuRLd6XoH/o+v5Oln4QIpCA8pKIy:yddp47WACW/aHNFDoDuRIXofo+WBAEy","tlshash":"6bf3126b222069def46da8b87a07387402c1d538f34b347c07ba5fc479fda64a466d5c","first_seen":"2025-01-15T21:46:09.051625Z","last_seen":"2026-07-15T18:59:09.779681Z","times_seen":143,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"xrbpmr6gj.bondfocusedadmirer.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vtcremysete.fr/8zPmgJ","fqdn":"vtcremysete.fr","domain":"vtcremysete.fr","tld":"fr"},"ip":{"addr":"104.21.43.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-15T18:58:33.898Z","timestamp":1784141913898,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vtcremysete.fr","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Jun 2026 08:37:03 GMT","end":"Mon, 14 Sep 2026 08:37:02 GMT"},"fingerprint":{"sha1":"BA:AF:EC:98:94:31:1A:CD:5D:1C:29:AE:BE:91:A5:12:15:FB:3E:FA","sha256":"05:4D:BB:B3:95:9A:26:F8:56:B1:43:B6:47:FB:6B:AA:AF:50:3A:1A:06:4E:E2:EC:C3:D1:98:59:03:B5:59:57"}}},"request":{"raw":"GET /8zPmgJ HTTP/1.1\r\nHost: vtcremysete.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yokuinterior.pl/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Wed, 15 Jul 2026 18:58:34 GMT\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=0,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d5fnGEx5FxUwz9OhIBKx318MQ%2BvxfcL0jRCqvNhkz%2Bf%2BsiobDVTR%2Bn0fi8gqINKjmo8W%2Fy4Ypj4HTmayFjEGt%2FvPP%2BDpQVch6ycpg2%2FFopAyOMP0QKOyEoSFd2E9CbosFQ%3D%3D\"}]}\r\nx-powered-by: PHP/5.6.40\r\nexpires: Thu, 21 Jul 1977 07:30:00 GMT\r\nlast-modified: Wed, 15 Jul 2026 18:58:34 GMT\r\ncache-control: max-age=0\r\npragma: no-cache\r\nset-cookie: 847ba=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjkyXCI6MTc4NDE0MTkxNH0sXCJjYW1wYWlnbnNcIjp7XCIzNVwiOjE3ODQxNDE5MTR9LFwidGltZVwiOjE3ODQxNDE5MTR9In0.RhCn6VZtBIpxa9T--nd8zYLHjRWRYcMTVcYlc2Lg87w; expires=Sat, 15-Aug-2026 18:58:34 GMT; Max-Age=2678400; path=/; domain=.vtcremysete.fr\r\nlocation: https://xrbpmr6gj.bondfocusedadmirer.org/gaw21lf\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a1baffd20aa95696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:5.6.40","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T21:18:41.448424Z","times_seen":17272252,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":8,"connect":22,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"vtcremysete.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrbpmr6gj.bondfocusedadmirer.org/media/dating/flirtup/css/bootstrap.min.css","fqdn":"xrbpmr6gj.bondfocusedadmirer.org","domain":"bondfocusedadmirer.org","tld":"org"},"ip":{"addr":"104.21.30.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xrbpmr6gj.bondfocusedadmirer.org/gaw21lf","date":"2026-07-15T18:58:34.934Z","timestamp":1784141914934,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bondfocusedadmirer.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:13:30 GMT","end":"Wed, 16 Sep 2026 16:13:29 GMT"},"fingerprint":{"sha1":"EF:1D:5F:A0:23:AE:C6:50:97:51:6A:C7:27:12:46:9C:8C:F9:DF:22","sha256":"7D:C1:CE:06:D7:27:A0:AD:AE:EE:ED:21:82:B1:E1:AF:38:8B:9C:C8:5C:6E:2A:09:31:3F:7A:79:DF:BC:69:16"}}},"request":{"raw":"GET /media/dating/flirtup/css/bootstrap.min.css HTTP/1.1\r\nHost: xrbpmr6gj.bondfocusedadmirer.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xrbpmr6gj.bondfocusedadmirer.org/gaw21lf\r\nCookie: sid=t6~30ej2tpyr5hoigzcttuxxhda\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 15 Jul 2026 18:58:34 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\netag: \"03d06426a30f77095d7511e1ca74d225\"\r\nlast-modified: Thu, 21 Nov 2024 08:28:08 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 18C018A3207E5A7E\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 2060\r\nx-ratelimit-remaining: 2060\r\nx-xss-protection: 1; mode=block\r\nx-amz-meta-mc-attrs: atime:1732028622#90909633/gid:0/gname:root/mode:33188/mtime:1732177688#477455732/uid:0/uname:root\r\nx-amz-meta-mm-source-mtime: 2024-11-21T08:28:08.524Z\r\nexpires: Wed, 07 Jul 2027 19:29:01 GMT\r\ncache-control: max-age=31536000, no-transform\r\naccept-ranges: bytes\r\nage: 689373\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ECMTOpi%2FRqosJHSLcbGLJbQvL8Wu5zveRS4G7LoY2R846tE0%2BrxXu9psxoCX76wzdRk8cyq3LlAEJrAmbMgeX98cUTK%2FJgKE8QgmY%2BIsMfnynUS6cKTxdn8yJqfNWLfa8YoshsqX%2BGZwjZj3nRe8AQ4Emg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1baffd85e835684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 109540\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":109540,"size_decoded":110853,"mime_type":"text/css","magic":"ASCII text, with very long lines (65367), with CRLF line terminators","md5":"03d06426a30f77095d7511e1ca74d225","sha1":"d1a349294f6fe94ffb17a50097b37bd81e9ba56a","sha256":"3f7e6f3cb6ba8e2effbdd260131ce0d2f332fb00ba3feca1a5bc9c3ee7f9e2a6","sha512":"d726efc5415efba1b060bcd4a24175ae7126312731524e970037b8a8b2fb9be60ba9628106e32781050d34f5c8144bd2c9e7ebe1351ca3e37b9506c832533b7d","ssdeep":"768:PbGxwUkB1mlpztzuRdvGN6eABkdIUIbZbnbJN8gwaKNhL3tqNhkRQmNae:wwlwERdvGNIkabbRk3chs","tlshash":"b6b3d7a0f11031ea7223c55a71d0ed872619a053e66b4fb7f22f25d88f895ca1773f1a","first_seen":"2023-04-05T08:47:50Z","last_seen":"2026-07-15T18:59:09.780325Z","times_seen":4047,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"xrbpmr6gj.bondfocusedadmirer.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrbpmr6gj.bondfocusedadmirer.org/media/dating/flirtup/js/jquery.js","fqdn":"xrbpmr6gj.bondfocusedadmirer.org","domain":"bondfocusedadmirer.org","tld":"org"},"ip":{"addr":"104.21.30.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xrbpmr6gj.bondfocusedadmirer.org/gaw21lf","date":"2026-07-15T18:58:34.945Z","timestamp":1784141914945,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bondfocusedadmirer.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:13:30 GMT","end":"Wed, 16 Sep 2026 16:13:29 GMT"},"fingerprint":{"sha1":"EF:1D:5F:A0:23:AE:C6:50:97:51:6A:C7:27:12:46:9C:8C:F9:DF:22","sha256":"7D:C1:CE:06:D7:27:A0:AD:AE:EE:ED:21:82:B1:E1:AF:38:8B:9C:C8:5C:6E:2A:09:31:3F:7A:79:DF:BC:69:16"}}},"request":{"raw":"GET /media/dating/flirtup/js/jquery.js HTTP/1.1\r\nHost: xrbpmr6gj.bondfocusedadmirer.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xrbpmr6gj.bondfocusedadmirer.org/gaw21lf\r\nCookie: sid=t6~30ej2tpyr5hoigzcttuxxhda\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 15 Jul 2026 18:58:34 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\netag: \"261c2803d4c5f060a7bb9388a85533be\"\r\nlast-modified: Thu, 21 Nov 2024 08:27:36 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: 5bbf9b091ca9dd795595b773b0f1d036407937e2098457815217f1ddbc67c996\r\nx-amz-request-id: 18C018A31FADA565\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 343\r\nx-ratelimit-remaining: 343\r\nx-xss-protection: 1; mode=block\r\nx-amz-meta-mc-attrs: atime:1732028648#701566486/gid:0/gname:root/mode:33188/mtime:1732177656#859824738/uid:0/uname:root\r\nx-amz-meta-mm-source-mtime: 2024-11-21T08:27:36.907Z\r\nexpires: Wed, 07 Jul 2027 19:29:01 GMT\r\ncache-control: max-age=31536000, no-transform\r\naccept-ranges: bytes\r\nage: 689373\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tfRmEp3C7FUu0PU9mGfuxG9awb0jWhNbilDszfXcM7HJB2ZJukfIx%2Fs1ohjvq1sIXk9UBGLy8NmXH8V0mO9rMOFOO4AnYvfY4%2B%2FkK2K5iOokQ0%2FktuyDxdIPVM8Ec7AFsJKiNITeU1K082M15d8SwCoCSQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1baffd86e885684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 93068\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93068,"size_decoded":94384,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32072), with CRLF line terminators","md5":"261c2803d4c5f060a7bb9388a85533be","sha1":"90a234032123056ad72e3a35eabe88f9042923f2","sha256":"4d62766346c8fd39371d0c01f931efae320a5ecceb96f7c8e4716036741e19df","sha512":"6a505adaab6bc468e0aaa728089a44cb7563ba180287e511304b34df0334b32b1987984b9a11bbb95b0ce3edca52661a5754269276b2ae25355fd4fce618a487","ssdeep":"1536:c4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RAfDknv+p0WzH/Io9Z7qABZnu0sFy:cGsKXAI2p0WP9bDrstfa5","tlshash":"3a93f8ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","first_seen":"2023-04-01T11:04:52Z","last_seen":"2026-07-15T18:59:09.781186Z","times_seen":1214,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"xrbpmr6gj.bondfocusedadmirer.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrbpmr6gj.bondfocusedadmirer.org/media/dating/flirtup/images/canada4_casual_dark.jpg","fqdn":"xrbpmr6gj.bondfocusedadmirer.org","domain":"bondfocusedadmirer.org","tld":"org"},"ip":{"addr":"104.21.30.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xrbpmr6gj.bondfocusedadmirer.org/gaw21lf","date":"2026-07-15T18:58:40.296Z","timestamp":1784141920296,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bondfocusedadmirer.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:13:30 GMT","end":"Wed, 16 Sep 2026 16:13:29 GMT"},"fingerprint":{"sha1":"EF:1D:5F:A0:23:AE:C6:50:97:51:6A:C7:27:12:46:9C:8C:F9:DF:22","sha256":"7D:C1:CE:06:D7:27:A0:AD:AE:EE:ED:21:82:B1:E1:AF:38:8B:9C:C8:5C:6E:2A:09:31:3F:7A:79:DF:BC:69:16"}}},"request":{"raw":"GET /media/dating/flirtup/images/canada4_casual_dark.jpg HTTP/1.1\r\nHost: xrbpmr6gj.bondfocusedadmirer.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xrbpmr6gj.bondfocusedadmirer.org/gaw21lf\r\nCookie: sid=t6~30ej2tpyr5hoigzcttuxxhda\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 15 Jul 2026 18:58:40 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\netag: \"724136c8b64c161c83aa8fbddb47d2aa\"\r\nlast-modified: Thu, 21 Nov 2024 08:27:47 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 18C28B9FB85F98D2\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 2060\r\nx-ratelimit-remaining: 2060\r\nx-xss-protection: 1; mode=block\r\nx-amz-meta-mc-attrs: atime:1732177667#884809383/gid:0/gname:root/mode:33188/mtime:1732177667#840805452/uid:0/uname:root\r\nx-amz-meta-mm-source-mtime: 2024-11-21T08:27:47.888Z\r\nexpires: Thu, 15 Jul 2027 18:58:40 GMT\r\ncache-control: max-age=31536000, no-transform\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Udd7Wg2N6G1CALrPotNeeBJQodqNXoVpyOpwH2y6JLtvgACTFo0racSEfbNmpr6Todnarx7T%2Ftzomn7i5TC1m%2F9U%2BDH%2FplostCoCkuYUb8cDw49vMPGztzquTyNcgOUruCURhXM7OHVFLInCbLp56k4Jkw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1bafff9d80f5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 225599\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":225599,"size_decoded":226898,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1920x1077, components 3","md5":"724136c8b64c161c83aa8fbddb47d2aa","sha1":"a51077ca892b5654ca512d4772e7c980595a8d0e","sha256":"87b254a1b474978338cf29b45b6b8f5f3129303abe680b2cc456164c3578cfa6","sha512":"21720fce7f57bfa44befd36e17e39dfcf8fd0268851de2f3ef8d1fb94b1c4c3c28e9d00a9898df0f6d5301e5c4363284d23f399ac24a039b42f150b96c8fdc8d","ssdeep":"6144:FEX7kt6OTipSwwFOoGwLl78J93Eor6Igf4GF03sOA:oIiNsGwqJ93/r6AGmpA","tlshash":"0724223ef227b1d4ed3cc77354c9d6fbb4623395a8cc89a19bd2e66004e8705e66864c","first_seen":"2025-01-16T07:25:41.754933Z","last_seen":"2026-07-15T18:59:09.781758Z","times_seen":143,"resource_available":false,"data":null}},"time_used":484,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":266,"receive":218,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"xrbpmr6gj.bondfocusedadmirer.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrbpmr6gj.bondfocusedadmirer.org/media/dating/flirtup/images/canada2_casual_dark.jpg","fqdn":"xrbpmr6gj.bondfocusedadmirer.org","domain":"bondfocusedadmirer.org","tld":"org"},"ip":{"addr":"104.21.30.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xrbpmr6gj.bondfocusedadmirer.org/gaw21lf","date":"2026-07-15T18:58:45.895Z","timestamp":1784141925895,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bondfocusedadmirer.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:13:30 GMT","end":"Wed, 16 Sep 2026 16:13:29 GMT"},"fingerprint":{"sha1":"EF:1D:5F:A0:23:AE:C6:50:97:51:6A:C7:27:12:46:9C:8C:F9:DF:22","sha256":"7D:C1:CE:06:D7:27:A0:AD:AE:EE:ED:21:82:B1:E1:AF:38:8B:9C:C8:5C:6E:2A:09:31:3F:7A:79:DF:BC:69:16"}}},"request":{"raw":"GET /media/dating/flirtup/images/canada2_casual_dark.jpg HTTP/1.1\r\nHost: xrbpmr6gj.bondfocusedadmirer.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xrbpmr6gj.bondfocusedadmirer.org/gaw21lf\r\nCookie: sid=t6~30ej2tpyr5hoigzcttuxxhda\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 15 Jul 2026 18:58:45 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\netag: \"c762ce0e5225193a32b97263c7480765\"\r\nlast-modified: Thu, 21 Nov 2024 08:27:45 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 18C1A458611D6B41\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 2060\r\nx-ratelimit-remaining: 2060\r\nx-xss-protection: 1; mode=block\r\nx-amz-meta-mc-attrs: atime:1732028632#639962866/gid:0/gname:root/mode:33188/mtime:1732177665#944636082/uid:0/uname:root\r\nx-amz-meta-mm-source-mtime: 2024-11-21T08:27:45.992Z\r\nexpires: Mon, 12 Jul 2027 20:46:13 GMT\r\ncache-control: max-age=31536000, no-transform\r\naccept-ranges: bytes\r\nage: 252752\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N8ZwWxalAA2b8gFYoT87v4ucs04muK%2Bj4FKWsEZ2K%2FYlVVf9EJj2J0eHm%2FFpmQS3yENqjQj7pU0eL3YVkIwspPG%2Bk8Mug1UJQqjZcGT3G0bMJX6Lu%2Bj2bY2LrjmXI7wgaId9f7dVHWXZSP%2F5MyZhrUPLIA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1bb001cda345684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 160240\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":160240,"size_decoded":161555,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1920x1080, components 3","md5":"c762ce0e5225193a32b97263c7480765","sha1":"be7bd42d63df0f2ab1829259ec183a4a7d3b3a68","sha256":"a242af0ebf5a81d7dfbfff0f923a7c3a611a23ee5e66f6c0eaa7846a49b2c098","sha512":"320af3efdcb303a93a7375b1480dd3285fa66d92a0cad2180789f6058cd3051b5dedf256bfe092204bc755441e594b23a915c643a652ade60fd0a6a5db3d8eff","ssdeep":"3072:C2BYV03WRK+3OALoOjCn1+jLz3FgDD32SvvXDWJsNo0IDqU21N85:C2o04z3tdci/ODD32wCJsNo0MqS","tlshash":"edf3125fad567a23693dc5ff50adb6c0be02075fa893239835375b18192c0104bafed2","first_seen":"2025-01-15T21:46:09.047847Z","last_seen":"2026-07-15T18:59:09.784431Z","times_seen":150,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"xrbpmr6gj.bondfocusedadmirer.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:400,300,700|Raleway:400,700\u0026subset=latin,cyrillic","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xrbpmr6gj.bondfocusedadmirer.org/gaw21lf","date":"2026-07-15T18:58:34.931Z","timestamp":1784141914931,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css?family=Roboto:400,300,700|Raleway:400,700\u0026subset=latin,cyrillic HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xrbpmr6gj.bondfocusedadmirer.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 15 Jul 2026 18:58:35 GMT\r\ndate: Wed, 15 Jul 2026 18:58:35 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19615,"size_decoded":2474,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"c341c56ecb5105a9d412806be03b75d8","sha1":"9f715a985f479a48036875f50a15de6d06415286","sha256":"00884f9f38db045d7c69f3fc2d0ba97755add3dcc883b7c0291e488ff187ff7e","sha512":"a30134e8fb07d16a2a44384e2d0eb5681799b5dbc568878fb01298909032caaf760b107563b1077c599608ac8512de8ec81e2ce3936d573d02287f294f1f1707","ssdeep":"384:PYrw3E19fn9+9h9d9yS9/qY4o9m9G939fa9D9w9k9yf9/qY459L9r9m9f79C9F9o:YFsbbYSRv4wFMl22YfRiJhwhQHHYORj4","tlshash":"63922ea10817440097835ce223cebf31fe5f52007146d0b5abfd9b6baddbca652a935d","first_seen":"2026-05-09T11:12:49.938278Z","last_seen":"2026-07-15T18:59:09.785675Z","times_seen":37,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":2,"connect":18,"send":0,"wait":33,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xrbpmr6gj.bondfocusedadmirer.org/media/dating/flirtup/css/vegas.css","fqdn":"xrbpmr6gj.bondfocusedadmirer.org","domain":"bondfocusedadmirer.org","tld":"org"},"ip":{"addr":"104.21.30.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xrbpmr6gj.bondfocusedadmirer.org/gaw21lf","date":"2026-07-15T18:58:34.940Z","timestamp":1784141914940,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bondfocusedadmirer.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:13:30 GMT","end":"Wed, 16 Sep 2026 16:13:29 GMT"},"fingerprint":{"sha1":"EF:1D:5F:A0:23:AE:C6:50:97:51:6A:C7:27:12:46:9C:8C:F9:DF:22","sha256":"7D:C1:CE:06:D7:27:A0:AD:AE:EE:ED:21:82:B1:E1:AF:38:8B:9C:C8:5C:6E:2A:09:31:3F:7A:79:DF:BC:69:16"}}},"request":{"raw":"GET /media/dating/flirtup/css/vegas.css HTTP/1.1\r\nHost: xrbpmr6gj.bondfocusedadmirer.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xrbpmr6gj.bondfocusedadmirer.org/gaw21lf\r\nCookie: sid=t6~30ej2tpyr5hoigzcttuxxhda\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 15 Jul 2026 18:58:34 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\netag: \"357c7befa8bdef911f02f48f49e10628\"\r\nlast-modified: Thu, 21 Nov 2024 08:28:09 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 18C018A32221B0C8\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 2060\r\nx-ratelimit-remaining: 2060\r\nx-xss-protection: 1; mode=block\r\nx-amz-meta-mc-attrs: atime:1732028623#735073788/gid:0/gname:root/mode:33188/mtime:1732177690#137438117/uid:0/uname:root\r\nx-amz-meta-mm-source-mtime: 2024-11-21T08:28:10.182Z\r\nexpires: Wed, 07 Jul 2027 19:29:01 GMT\r\ncache-control: max-age=31536000, no-transform\r\naccept-ranges: bytes\r\nage: 689373\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0R0dtEIzX3S%2FvkFbJ25Ns0eVEfh7%2Fi8OQY8uiLCDxzTAnI4me%2BrPm%2BI9Qdcfnyp9im%2BqictJ%2FCOyxVHwknGNo2SM2qphnZ6vveiuWP1sVFPUQtI1Fc1b7CxaUtF9zJhXQSw9wfgUlJQ8%2BxGHTbkqbjcIHw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1baffd85e865684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19822\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":19822,"size_decoded":21139,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"357c7befa8bdef911f02f48f49e10628","sha1":"47972e3c4591058dce82dd3b08bed8e0b8ae5c8f","sha256":"47f3bef4746b798892c7beff212618616b0950f33f416f03db243578f89135e3","sha512":"a7aac81c704949b79a988e76867fe18765cb7de65cb1f807b5b65bc9140bb76ddbcb32627917698e2e742defadaeac2cab718d8eb46f42aaebd28797040f354a","ssdeep":"192:Xz+OWMF/4yeKWfHVdBHlsQ0seq1jcBhveq1MtQqUFoo+oUaFEqaFEtRFEoRFEWyP:jzAyKew6ewm","tlshash":"d292af99f80759c492375a58e3da4a24d96ea49329127eecf3cd25cf0f7279c01c8ec6","first_seen":"2023-04-05T08:47:50Z","last_seen":"2026-07-15T18:59:09.788759Z","times_seen":4025,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"xrbpmr6gj.bondfocusedadmirer.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrbpmr6gj.bondfocusedadmirer.org/util/flag-icon/css/flag-icon.css","fqdn":"xrbpmr6gj.bondfocusedadmirer.org","domain":"bondfocusedadmirer.org","tld":"org"},"ip":{"addr":"104.21.30.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xrbpmr6gj.bondfocusedadmirer.org/gaw21lf","date":"2026-07-15T18:58:34.943Z","timestamp":1784141914943,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bondfocusedadmirer.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:13:30 GMT","end":"Wed, 16 Sep 2026 16:13:29 GMT"},"fingerprint":{"sha1":"EF:1D:5F:A0:23:AE:C6:50:97:51:6A:C7:27:12:46:9C:8C:F9:DF:22","sha256":"7D:C1:CE:06:D7:27:A0:AD:AE:EE:ED:21:82:B1:E1:AF:38:8B:9C:C8:5C:6E:2A:09:31:3F:7A:79:DF:BC:69:16"}}},"request":{"raw":"GET /util/flag-icon/css/flag-icon.css HTTP/1.1\r\nHost: xrbpmr6gj.bondfocusedadmirer.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xrbpmr6gj.bondfocusedadmirer.org/gaw21lf\r\nCookie: sid=t6~30ej2tpyr5hoigzcttuxxhda\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 15 Jul 2026 18:58:34 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\netag: \"0a47b937981e7389e3ebe63e4a503066\"\r\nlast-modified: Thu, 01 Aug 2024 07:23:32 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: 42aa5a63a589b4374a9c1295fb1c20dcda18b77f2cb8e112e03c5ecdf9b92360\r\nx-amz-request-id: 18B88F9626C0F8C3\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 336\r\nx-ratelimit-remaining: 336\r\nx-xss-protection: 1; mode=block\r\nx-amz-meta-mc-attrs: atime:1720010319#679699848/gid:0/gname:root/mode:33188/mtime:1655386274#684017000/uid:0/uname:root\r\nx-amz-meta-mm-source-mtime: 2022-06-16T13:31:14.684017Z\r\nexpires: Sun, 13 Jun 2027 06:18:47 GMT\r\ncache-control: max-age=31536000, no-transform\r\naccept-ranges: bytes\r\nage: 2810387\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P8HSOHn1dcd20dlZbMD%2B42OFu1FBio6ox8rtoz%2BWPhLkjJBI8ABZXyOXoCvY5sbqWqe8raIUXz6vO6Yh2%2FPNcOPMHcGU7AJD7Q0bwvZgkSXRFpMjze%2FstdTxypyeGa9Rh1zdrWd9GewaiKbxPcJTz3dsWw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1baffd86e875684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 40627\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":40627,"size_decoded":41940,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"0a47b937981e7389e3ebe63e4a503066","sha1":"01b395ad016a1d9d15016d765f7d2c51a6e2809b","sha256":"d6afd8d9abc2967f29ad396854cd05b1a12dcf9b7084f944c136ca6f540c5a39","sha512":"bca846a7ebd76adb4ccf01805cda0bfc53673570b58289057b2f595ac5700e83a80b574ee5e005c9ffbb003aa7872e45a9d35fb728bd35701b040435b2425e24","ssdeep":"384:94fWpOSJ/TqlgSxMUj6/GlQ1EzvxqFbyqVD:94+pvJTqlgSxMUj6/GlQY4yqR","tlshash":"9103096b9643e14fb713cf352b16a1086b9d2492dec18f2b297935ba99f7040b436f70","first_seen":"2023-04-05T08:47:50Z","last_seen":"2026-07-15T18:59:09.790878Z","times_seen":6804,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"xrbpmr6gj.bondfocusedadmirer.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigdatajsext.com/ExtService.svc/getextparams","fqdn":"bigdatajsext.com","domain":"bigdatajsext.com","tld":"com"},"ip":{"addr":"136.243.216.252","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xrbpmr6gj.bondfocusedadmirer.org/gaw21lf","date":"2026-07-15T18:58:35.088Z","timestamp":1784141915088,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bigdatajsext.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 21:39:39 GMT","end":"Tue, 15 Sep 2026 21:39:38 GMT"},"fingerprint":{"sha1":"33:98:34:55:51:26:CF:6A:E7:E1:0E:4C:31:FA:83:CD:FB:B9:5F:E7","sha256":"64:5C:DB:22:B9:5C:07:FE:B4:4B:3A:F8:18:23:C1:38:44:7E:49:84:C0:1A:43:CD:8C:70:26:F2:C2:C9:3F:29"}}},"request":{"raw":"GET /ExtService.svc/getextparams HTTP/1.1\r\nHost: bigdatajsext.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://xrbpmr6gj.bondfocusedadmirer.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xrbpmr6gj.bondfocusedadmirer.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 15 Jul 2026 18:58:35 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":541,"size_decoded":578,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"543a9dd95f1530d356f91e12cf9a6050","sha1":"bf78463c3bbbfee124d99604bbdbc64d0cefa26e","sha256":"47af0e480d40660fd332b8b4d4aef3286a9a29e991ac6c0d0192f0bea014a3cb","sha512":"805d1c315361e95165a0df72af50a62d2a80a915dbba8ee9bfab40dbb6414f5d6673dcaf895bf359389ed4d59dff0abbe5b625d9cd3099f1ec099fe025784209","ssdeep":"","tlshash":"f6f08b94582e2d1a9e2ec3de400fe92751e624dc9049e6828147dc15c1c066d704ccf6","first_seen":"2025-12-20T01:30:50.156512Z","last_seen":"2026-07-15T18:59:09.792746Z","times_seen":45,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":5,"connect":32,"send":0,"wait":33,"receive":0,"ssl":106},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"bigdatajsext.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrbpmr6gj.bondfocusedadmirer.org/media/dating/flirtup/fonts/bcf3bb1b7f7a3436181788e748bae013.woff2","fqdn":"xrbpmr6gj.bondfocusedadmirer.org","domain":"bondfocusedadmirer.org","tld":"org"},"ip":{"addr":"104.21.30.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xrbpmr6gj.bondfocusedadmirer.org/gaw21lf","date":"2026-07-15T18:58:35.143Z","timestamp":1784141915143,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bondfocusedadmirer.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:13:30 GMT","end":"Wed, 16 Sep 2026 16:13:29 GMT"},"fingerprint":{"sha1":"EF:1D:5F:A0:23:AE:C6:50:97:51:6A:C7:27:12:46:9C:8C:F9:DF:22","sha256":"7D:C1:CE:06:D7:27:A0:AD:AE:EE:ED:21:82:B1:E1:AF:38:8B:9C:C8:5C:6E:2A:09:31:3F:7A:79:DF:BC:69:16"}}},"request":{"raw":"GET /media/dating/flirtup/fonts/bcf3bb1b7f7a3436181788e748bae013.woff2 HTTP/1.1\r\nHost: xrbpmr6gj.bondfocusedadmirer.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xrbpmr6gj.bondfocusedadmirer.org/media/dating/flirtup/css/style.css\r\nCookie: sid=t6~30ej2tpyr5hoigzcttuxxhda\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 15 Jul 2026 18:58:35 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\netag: \"bcf3bb1b7f7a3436181788e748bae013\"\r\nlast-modified: Thu, 21 Nov 2024 08:28:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 18C10655A1E0C47D\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 2060\r\nx-ratelimit-remaining: 2060\r\nx-xss-protection: 1; mode=block\r\nx-amz-meta-mc-attrs: atime:1732028625#499249925/gid:0/gname:root/mode:33188/mtime:1732177692#53417792/uid:0/uname:root\r\nx-amz-meta-mm-source-mtime: 2024-11-21T08:28:12.1Z\r\nexpires: Sat, 10 Jul 2027 20:04:52 GMT\r\ncache-control: max-age=31536000, no-transform\r\naccept-ranges: bytes\r\nage: 428022\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8L4zdQ%2FPh2VfCjtOzKDG8U03sPkynlIVdp6kEn3OhRdvJDRMA6gn0z7U9nh8EeR%2Bfld%2FefXbaAvTzv4%2FtegilzhVU6nt7hvY%2B2ksf4w35rh8rdY1ltsxDIEZCh3sSoaWeZ1RUy3viLDLfBC8HlDWLNS5JQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1baffd9ae9b5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14772\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14772,"size_decoded":16084,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14772, version 3.327","md5":"bcf3bb1b7f7a3436181788e748bae013","sha1":"8ee24d38f618f070a43619f1d471d90f17d666f1","sha256":"42e50c76c1bf569cb8b597ffc8cdd18a6f4a311832f46fdc1489145027550781","sha512":"3dfc74ace5f336c2c3b2518bc0c991dd4f370b6678d9a96ef9448d056aa1abd7d0884310c23299348f72011610f7d6a0e6772e3fd803e75bf9525dccbebd7860","ssdeep":"384:VI1b2Gbko0p2ZFD/aV74+1NahzVZkHCK967ssUyer:VkbhYo0pqFGVM+1Iny9679Uy+","tlshash":"ef62df91fe949fbbc27cc0bd8a7de9043991d54b03522228066f9f8b38b21378cc1e59","first_seen":"2023-04-07T05:59:23Z","last_seen":"2026-07-15T18:59:09.794922Z","times_seen":4499,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"xrbpmr6gj.bondfocusedadmirer.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrbpmr6gj.bondfocusedadmirer.org/media/dating/flirtup/css/style.css","fqdn":"xrbpmr6gj.bondfocusedadmirer.org","domain":"bondfocusedadmirer.org","tld":"org"},"ip":{"addr":"104.21.30.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xrbpmr6gj.bondfocusedadmirer.org/gaw21lf","date":"2026-07-15T18:58:34.936Z","timestamp":1784141914936,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bondfocusedadmirer.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:13:30 GMT","end":"Wed, 16 Sep 2026 16:13:29 GMT"},"fingerprint":{"sha1":"EF:1D:5F:A0:23:AE:C6:50:97:51:6A:C7:27:12:46:9C:8C:F9:DF:22","sha256":"7D:C1:CE:06:D7:27:A0:AD:AE:EE:ED:21:82:B1:E1:AF:38:8B:9C:C8:5C:6E:2A:09:31:3F:7A:79:DF:BC:69:16"}}},"request":{"raw":"GET /media/dating/flirtup/css/style.css HTTP/1.1\r\nHost: xrbpmr6gj.bondfocusedadmirer.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xrbpmr6gj.bondfocusedadmirer.org/gaw21lf\r\nCookie: sid=t6~30ej2tpyr5hoigzcttuxxhda\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 15 Jul 2026 18:58:34 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\netag: \"f26dd61c20737e37f81af1feded8542d\"\r\nlast-modified: Thu, 21 Nov 2024 08:28:08 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 18C018A3206C7946\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 2060\r\nx-ratelimit-remaining: 2060\r\nx-xss-protection: 1; mode=block\r\nx-amz-meta-mc-attrs: atime:1732028622#746975134/gid:0/gname:root/mode:33188/mtime:1732177689#141448685/uid:0/uname:root\r\nx-amz-meta-mm-source-mtime: 2024-11-21T08:28:09.186Z\r\nexpires: Wed, 07 Jul 2027 19:29:01 GMT\r\ncache-control: max-age=31536000, no-transform\r\naccept-ranges: bytes\r\nage: 689373\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WrAaEK5wfyrEc7iwmwpM52ip%2Fgdh0sDtSGFNTweJsc2aIQ%2FfwKAC%2Fm9iiv88mGD%2Fsi2oaSEq%2BfqBEgI%2FZmJj0U9l2tb9U3d6ZFM3SDNDBbYj%2F4HeQXZtnJrWJTVDVTM92BJbG0SaJnEK9zZIQXdHGe9YMg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1baffd85e845684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20163\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20163,"size_decoded":21480,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"f26dd61c20737e37f81af1feded8542d","sha1":"039903e8f39b3e667cd36a76126afd1c7a499b58","sha256":"426e3c652a8f228664241c41424a7e1cbbaeaf8b8a2d2248625706f954dec9a1","sha512":"77a1fbb2b02cc691567c5d3a7b5651782e77b27f069c13cedc1fb8417175e1a0a2f87ae8f0b29b8f49872f6e0164d67bc7abae09ec1b5a362d6415d514a9445b","ssdeep":"384:EojKhwQ9V2u7lmNTQdr6ZOPOK1vd7Br6q:EojKL9Yu7YAr6ZOPOK1vd7Beq","tlshash":"739254a9f54b240af31faad8b7b15a506ec540649b1a56dcf8ff20edd3d436c1334286","first_seen":"2024-11-21T16:29:51.944166Z","last_seen":"2026-07-15T18:59:09.796112Z","times_seen":1191,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"xrbpmr6gj.bondfocusedadmirer.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrbpmr6gj.bondfocusedadmirer.org/media/dating/flirtup/css/animate.css","fqdn":"xrbpmr6gj.bondfocusedadmirer.org","domain":"bondfocusedadmirer.org","tld":"org"},"ip":{"addr":"104.21.30.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xrbpmr6gj.bondfocusedadmirer.org/gaw21lf","date":"2026-07-15T18:58:34.938Z","timestamp":1784141914938,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bondfocusedadmirer.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:13:30 GMT","end":"Wed, 16 Sep 2026 16:13:29 GMT"},"fingerprint":{"sha1":"EF:1D:5F:A0:23:AE:C6:50:97:51:6A:C7:27:12:46:9C:8C:F9:DF:22","sha256":"7D:C1:CE:06:D7:27:A0:AD:AE:EE:ED:21:82:B1:E1:AF:38:8B:9C:C8:5C:6E:2A:09:31:3F:7A:79:DF:BC:69:16"}}},"request":{"raw":"GET /media/dating/flirtup/css/animate.css HTTP/1.1\r\nHost: xrbpmr6gj.bondfocusedadmirer.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xrbpmr6gj.bondfocusedadmirer.org/gaw21lf\r\nCookie: sid=t6~30ej2tpyr5hoigzcttuxxhda\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 15 Jul 2026 18:58:34 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\netag: \"1cbfbb2c4ef85880799a74ab2f290f2a\"\r\nlast-modified: Thu, 21 Nov 2024 08:28:07 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: 354f9eb41c4f44111da43ee93430d467ccc8f740dac6a89f93d2690a13b4c5b4\r\nx-amz-request-id: 18C018A320A2CC01\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 365\r\nx-ratelimit-remaining: 365\r\nx-xss-protection: 1; mode=block\r\nx-amz-meta-mc-attrs: atime:1732028621#650865699/gid:0/gname:root/mode:33188/mtime:1732177688#65460104/uid:0/uname:root\r\nx-amz-meta-mm-source-mtime: 2024-11-21T08:28:08.111Z\r\nexpires: Wed, 07 Jul 2027 19:29:01 GMT\r\ncache-control: max-age=31536000, no-transform\r\naccept-ranges: bytes\r\nage: 689373\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7RaAUNA88vt5BpoPxVQHA4aXbMoMBnU9sYdJ2CjBLJil4iq3kjKeGjzVy4Y9QQIJ4sNG3nSjHPrkBYDBARltptZkCC69xfKTrG%2FeCVSXKkMvBZQv5cQOghKyXTf5N4IqUw07m5HlGXvk%2FezRNCeUqs5xnA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1baffd85e855684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 61188\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61188,"size_decoded":62492,"mime_type":"text/css","magic":"ASCII text, with very long lines (460), with CRLF line terminators","md5":"1cbfbb2c4ef85880799a74ab2f290f2a","sha1":"9b6366d6c7ad05010f7070db70fba10754be6e9c","sha256":"bfdad6766b12a3826bf32024f0fc13fffbcee84f102034b9270da7e538451031","sha512":"58c8d90d0f16205527b110fa50a03b83f001af28841579522c6f9fa1c57bdeba92d6a5b0b4caff4ef84fcc11866e9183ee109c5c891639e1cd1dd8655decec0c","ssdeep":"192:CDvQHnvHQvFpjIBz+a+pjRfBV7lucqBJm7YfPZBWgQc95YKm/0kLyJgprWXhOX8N:CbWz71","tlshash":"1853e86a2c91114457720b25d7de4f6cea3ca17318226efab3c2548b8f61bac13cde57","first_seen":"2023-04-05T08:47:50Z","last_seen":"2026-07-15T21:02:06.276533Z","times_seen":5201,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"xrbpmr6gj.bondfocusedadmirer.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrbpmr6gj.bondfocusedadmirer.org/media/bb.js","fqdn":"xrbpmr6gj.bondfocusedadmirer.org","domain":"bondfocusedadmirer.org","tld":"org"},"ip":{"addr":"104.21.30.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xrbpmr6gj.bondfocusedadmirer.org/gaw21lf","date":"2026-07-15T18:58:34.956Z","timestamp":1784141914956,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bondfocusedadmirer.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:13:30 GMT","end":"Wed, 16 Sep 2026 16:13:29 GMT"},"fingerprint":{"sha1":"EF:1D:5F:A0:23:AE:C6:50:97:51:6A:C7:27:12:46:9C:8C:F9:DF:22","sha256":"7D:C1:CE:06:D7:27:A0:AD:AE:EE:ED:21:82:B1:E1:AF:38:8B:9C:C8:5C:6E:2A:09:31:3F:7A:79:DF:BC:69:16"}}},"request":{"raw":"GET /media/bb.js HTTP/1.1\r\nHost: xrbpmr6gj.bondfocusedadmirer.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xrbpmr6gj.bondfocusedadmirer.org/gaw21lf\r\nCookie: sid=t6~30ej2tpyr5hoigzcttuxxhda\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 15 Jul 2026 18:58:34 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\netag: \"0d553e4bac91c74bfee2dbabba61e99e\"\r\nlast-modified: Wed, 20 Sep 2023 15:21:05 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 18B8362D2331E0A3\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 2060\r\nx-ratelimit-remaining: 2060\r\nx-xss-protection: 1; mode=block\r\nx-amz-meta-mc-attrs: atime:1693134512#756035434/gid:0/gname:root/mode:33188/mtime:1659030913#852764000/uid:0/uname:root\r\nx-amz-meta-mm-source-mtime: 2022-07-28T17:55:13.852764Z\r\nexpires: Sat, 12 Jun 2027 03:10:09 GMT\r\ncache-control: max-age=31536000, no-transform\r\naccept-ranges: bytes\r\nage: 2908105\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dCiEiT3EtWxuoafPz7mPrOTyHAuBoqJtgXARNcLzcIMBD%2FzQ%2BbZR4oUa4xLvyhiVHfvFpF%2BKwuWx1G%2FdvTb1CvISqkqe9dZxiDSme49C0uRQGlSFzQifWrzPq5PYY0jRAT4fMTmMia8OQMbuzHmEa5OAyQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1baffd87e8d5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 639\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":639,"size_decoded":1966,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (639), with no line terminators","md5":"0d553e4bac91c74bfee2dbabba61e99e","sha1":"5af71e2377c9c012a7826a695f2724901941b19b","sha256":"1be1304c675449b1bad38ea8c3da6c1da0763ed2fad339ee1aa461c7bf4e2a68","sha512":"105e5b23733e7bb443ba2080d606c2814b0acd2aaf228467d2ce532ff2f2ec0b292f8eb5189a24cd9f79b69a7e983b176dbd29e2d539dae7ca443821084f2894","ssdeep":"","tlshash":"c5f02d81bd1878f685cf3355871f2230903f08dd720ae982a8a46e622e2038dde1b7e0","first_seen":"2023-03-07T01:03:18Z","last_seen":"2026-07-15T18:59:09.798959Z","times_seen":13279,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"xrbpmr6gj.bondfocusedadmirer.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrbpmr6gj.bondfocusedadmirer.org/media/dating/flirtup/images/canada5_casual_dark.jpg","fqdn":"xrbpmr6gj.bondfocusedadmirer.org","domain":"bondfocusedadmirer.org","tld":"org"},"ip":{"addr":"104.21.30.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xrbpmr6gj.bondfocusedadmirer.org/gaw21lf","date":"2026-07-15T18:58:56.146Z","timestamp":1784141936146,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bondfocusedadmirer.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:13:30 GMT","end":"Wed, 16 Sep 2026 16:13:29 GMT"},"fingerprint":{"sha1":"EF:1D:5F:A0:23:AE:C6:50:97:51:6A:C7:27:12:46:9C:8C:F9:DF:22","sha256":"7D:C1:CE:06:D7:27:A0:AD:AE:EE:ED:21:82:B1:E1:AF:38:8B:9C:C8:5C:6E:2A:09:31:3F:7A:79:DF:BC:69:16"}}},"request":{"raw":"GET /media/dating/flirtup/images/canada5_casual_dark.jpg HTTP/1.1\r\nHost: xrbpmr6gj.bondfocusedadmirer.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xrbpmr6gj.bondfocusedadmirer.org/gaw21lf\r\nCookie: sid=t6~30ej2tpyr5hoigzcttuxxhda\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 15 Jul 2026 18:58:56 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\netag: \"ccef9cd347eed5dc321ab472a9efac48\"\r\nlast-modified: Thu, 21 Nov 2024 08:27:48 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: 42aa5a63a589b4374a9c1295fb1c20dcda18b77f2cb8e112e03c5ecdf9b92360\r\nx-amz-request-id: 18C28BA368016B6C\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 336\r\nx-ratelimit-remaining: 336\r\nx-xss-protection: 1; mode=block\r\nx-amz-meta-mc-attrs: atime:1732028635#848283191/gid:0/gname:root/mode:33188/mtime:1732177668#832894071/uid:0/uname:root\r\nx-amz-meta-mm-source-mtime: 2024-11-21T08:27:48.881Z\r\nexpires: Thu, 15 Jul 2027 18:58:56 GMT\r\ncache-control: max-age=31536000, no-transform\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8S3G1N7KDCCGVBZH0AANH4%2FSS6h3vawToiReVpXKNaV9rNURxLmlJJt4wgXfU9dJfKIWk6VYSYas0MwyBPer8VFBJU864Dv0VhxpCkWCXh3rARRfOkAWtEbAy9Q71GpPt6ycktnW%2FUqv2wWbkiu%2BXeowbA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1bb005cee275684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 151704\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":151704,"size_decoded":152999,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1920x1080, components 3","md5":"ccef9cd347eed5dc321ab472a9efac48","sha1":"e4648d95a094ab700fc2bb894d4c6e1c660eb718","sha256":"08c7efe58153e1faceccef9cb9fe8bb57f11ef18cbc423e8baece04d45153ddc","sha512":"4709c27d1ecaa5b15a63dfec4509fe1b48819403486dfdb4fad83693af4efb01ab2cd7ab53a2edd9daa368e047b30946cc9b16ac6023375377995d8ddab4bdb4","ssdeep":"3072:OBK3MdW272X4kExc7wxSiQman45v8Xi9O3X1j7rviX3HaFJqeM2Pf:6KgB2fExCwQc5v8Xi9O3X5rvyXoJq7sf","tlshash":"4be312631d81b2cb70a187b2f88216dd6a859fd5f3c23aff81542be74564a29cc4e53c","first_seen":"2025-01-15T21:46:09.050207Z","last_seen":"2026-07-15T18:59:09.799608Z","times_seen":146,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":243,"receive":165,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"xrbpmr6gj.bondfocusedadmirer.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrbpmr6gj.bondfocusedadmirer.org/media/dating/flirtup/fonts/b796339b324ec08006ca04dca90284cf.woff2","fqdn":"xrbpmr6gj.bondfocusedadmirer.org","domain":"bondfocusedadmirer.org","tld":"org"},"ip":{"addr":"104.21.30.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xrbpmr6gj.bondfocusedadmirer.org/gaw21lf","date":"2026-07-15T18:58:35.146Z","timestamp":1784141915146,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bondfocusedadmirer.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 16:13:30 GMT","end":"Wed, 16 Sep 2026 16:13:29 GMT"},"fingerprint":{"sha1":"EF:1D:5F:A0:23:AE:C6:50:97:51:6A:C7:27:12:46:9C:8C:F9:DF:22","sha256":"7D:C1:CE:06:D7:27:A0:AD:AE:EE:ED:21:82:B1:E1:AF:38:8B:9C:C8:5C:6E:2A:09:31:3F:7A:79:DF:BC:69:16"}}},"request":{"raw":"GET /media/dating/flirtup/fonts/b796339b324ec08006ca04dca90284cf.woff2 HTTP/1.1\r\nHost: xrbpmr6gj.bondfocusedadmirer.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xrbpmr6gj.bondfocusedadmirer.org/media/dating/flirtup/css/style.css\r\nCookie: sid=t6~30ej2tpyr5hoigzcttuxxhda\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 15 Jul 2026 18:58:35 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\netag: \"b796339b324ec08006ca04dca90284cf\"\r\nlast-modified: Thu, 21 Nov 2024 08:28:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: 354f9eb41c4f44111da43ee93430d467ccc8f740dac6a89f93d2690a13b4c5b4\r\nx-amz-request-id: 18C10655A094E906\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 365\r\nx-ratelimit-remaining: 365\r\nx-xss-protection: 1; mode=block\r\nx-amz-meta-mc-attrs: atime:1732028625#187218772/gid:0/gname:root/mode:33188/mtime:1732177691#705421484/uid:0/uname:root\r\nx-amz-meta-mm-source-mtime: 2024-11-21T08:28:11.753Z\r\nexpires: Sat, 10 Jul 2027 20:04:52 GMT\r\ncache-control: max-age=31536000, no-transform\r\naccept-ranges: bytes\r\nage: 428022\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a1fqsaKd28Ab%2FzocC2mtWewzF%2B4klu5JohcOcCEpRjqJxZV9CbEUT7DxS7a14Qt7C3pjRiyZP42NjqhA7zOWC%2F4J%2FY9aOH4WM5F5vl7rnogS2UcAj2C4U5AUI5VdsUK0tBOQLbA%2BO3lJ4tvKrywvJbnIKw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1baffd9ae9c5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21796\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":21796,"size_decoded":23109,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21796, version 3.786","md5":"b796339b324ec08006ca04dca90284cf","sha1":"4283d779705f09e68939572df76c52cb41a3ec68","sha256":"d65bbca022f8953936d6e60b9a59fc27f9bfd74ba96257ffe14df83b3d8eb0e3","sha512":"912eba7649b612ea851ceff16addef13222fbc90656d1f6af737a55f34a24ea6154012afbbe8846d3e6fe1ebaf241de3c331ed97a212060bb979ac449823935f","ssdeep":"384:XuEqeSLLtQo1wtvqD67EE1LagdLGHkTU3brpWPGJyuHabAZOZ7EPmH:sHt5wtvtEEha5HkIJ0GJrFZOZEeH","tlshash":"29a2d12a6c85818c8291d435b3f6222e3572f970e6f1d3db753af478226b44ca35ecd1","first_seen":"2023-04-07T05:59:23Z","last_seen":"2026-07-15T18:59:09.800242Z","times_seen":4489,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"xrbpmr6gj.bondfocusedadmirer.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}