{"report_id":"584abbb0-c588-4e2b-b20c-5abac0797a48","version":6,"status":"done","tags":[],"date":"2025-12-31T23:51:14Z","url":{"schema":"http","addr":"www.xxmygirl.com/sexlist/brima-tiffany.htm","fqdn":"www.xxmygirl.com","domain":"xxmygirl.com","tld":"com"},"ip":{"addr":"104.21.16.169","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.xxmygirl.com/sexlist/brima-tiffany.htm","fqdn":"www.xxmygirl.com","domain":"xxmygirl.com","tld":"com"},"title":"Brima Tiffany | My XXX Hot Girl","dom":{"size":100265,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"ca88194df89a532d64ebf1981877c150","sha1":"6e8276c9266cc853546bef8a53f810f2c6fb95e6","sha256":"2a0e5fee38fad411b3e69bfd1404ae4e3c0ac6992b01d9a2b089021417beadd6","sha512":"37772f0369fcb36ddec9c328d260f5b7dbffced83df8cbbcfc70f33e38a5b8dbe6385c9b795567a483bd88c6cf7175e496aacdeb106df6bf4815b08818746caa","ssdeep":"768:pfuCuE3tg9uruJuVupKyZAMCLkV3aV7D9F0KMVwi:/g7KyZAMCLkV3aV75KKSd","tlshash":"1aa3aebe24a505581b63871c83de5fa9563dd56304269deeb282088f8fcbfbc57da103","dom_hash":"domhash354304df44e8d90d8d9ede1a27b74cfa","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.xxmygirl.com/sexlist/brima-tiffany.htm","fqdn":"www.xxmygirl.com","domain":"xxmygirl.com","tld":"com"},"ip":{"addr":"104.21.16.169","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-04T23:51:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":26}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-12-31T23:50:54Z","timestamp":1767225054,"ip_dst":{"addr":"162.159.207.0","port":3478,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.14","port":58133,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-12-31T23:50:54.602903+0000\",\"flow_id\":305469732041495,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.14\",\"src_port\":58133,\"dest_ip\":\"162.159.207.0\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-12-31T23:50:54.602903+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-12-31T23:50:54Z","timestamp":1767225054,"ip_dst":{"addr":"172.18.0.14","port":58133,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"162.159.207.0","port":3478,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)","source":"{\"timestamp\":\"2025-12-31T23:50:54.605366+0000\",\"flow_id\":305469732041495,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"162.159.207.0\",\"src_port\":3478,\"dest_ip\":\"172.18.0.14\",\"dest_port\":58133,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016150,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":62,\"bytes_toclient\":74,\"start\":\"2025-12-31T23:50:54.602903+0000\"}}"}],"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.xxmygirl.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"marchshotgun.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"marchshotgun.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"marchshotgun.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"cdn.creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"cdn.creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"cdn.creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"intelligenceadx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.intelligenceadx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ts2.mm.bing.net","ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"1997-09-03","domain_rank":107082,"first_seen":"2012-06-27T19:39:32Z","last_seen":"2025-12-26T23:28:29.113869Z","alert_count":0,"request_count":12,"received_data":251703,"sent_data":5652,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]},{"fqdn":"ts3.mm.bing.net","ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"1997-09-03","domain_rank":108655,"first_seen":"2012-06-20T09:46:12Z","last_seen":"2025-12-26T21:47:45.405465Z","alert_count":0,"request_count":10,"received_data":191741,"sent_data":4710,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-28T22:14:05.525046Z","alert_count":0,"request_count":5,"received_data":185094,"sent_data":2757,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.creative-sb1.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-01","domain_rank":172509,"first_seen":"2025-07-08T14:55:30.476227Z","last_seen":"2025-12-28T19:00:13.618913Z","alert_count":12,"request_count":4,"received_data":88954,"sent_data":1900,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"protrafficinspector.com","ip":{"addr":"3.120.91.143","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2025-06-18","domain_rank":614186,"first_seen":"2025-07-25T22:45:21.95813Z","last_seen":"2025-12-30T21:57:49.11287Z","alert_count":0,"request_count":2,"received_data":850,"sent_data":896,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-12-28T22:17:10.032556Z","alert_count":0,"request_count":2,"received_data":34862,"sent_data":860,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"wayfarerorthodox.com","ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-03","domain_rank":0,"first_seen":"2025-08-08T11:06:50.216151Z","last_seen":"2025-12-30T10:54:18.159058Z","alert_count":6,"request_count":2,"received_data":59595,"sent_data":908,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"www.intelligenceadx.com","ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2020-04-18","domain_rank":673791,"first_seen":"2020-04-29T02:39:45Z","last_seen":"2025-12-30T11:33:46.573759Z","alert_count":1,"request_count":1,"received_data":42501,"sent_data":456,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"www.xxmygirl.com","ip":{"addr":"104.21.16.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-08","domain_rank":0,"first_seen":"2025-11-12T13:55:47.913505Z","last_seen":"2025-12-25T23:27:02.343747Z","alert_count":11,"request_count":11,"received_data":247018,"sent_data":5558,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jQuery:1.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"imagesLoaded","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]}]},{"fqdn":"yy610eoghin9.l4.adsco.re","ip":{"addr":"185.200.118.62","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":463,"sent_data":444,"comment":"","tags":null,"fingerprints":null},{"fqdn":"marchshotgun.com","ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2023-08-14","domain_rank":169150,"first_seen":"2023-08-29T11:24:20Z","last_seen":"2025-12-27T19:03:18.003886Z","alert_count":18,"request_count":6,"received_data":197490,"sent_data":5703,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"yy610eoghin9.s4.adsco.re","ip":{"addr":"185.200.116.60","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":463,"sent_data":444,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.show-sb.com","ip":{"addr":"104.21.95.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-20","domain_rank":187612,"first_seen":"2024-08-31T03:46:04Z","last_seen":"2025-12-30T09:11:40.166977Z","alert_count":2,"request_count":2,"received_data":3558,"sent_data":996,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"yy610eoghin9.n4.adsco.re","ip":{"addr":"38.132.109.126","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":463,"sent_data":444,"comment":"","tags":null,"fingerprints":null},{"fqdn":"adsco.re","ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2017-02-14","domain_rank":3069,"first_seen":"2017-04-03T03:11:30Z","last_seen":"2025-12-31T07:41:43.098962Z","alert_count":0,"request_count":1,"received_data":1771,"sent_data":452,"comment":"","tags":null,"fingerprints":null},{"fqdn":"4.adsco.re","ip":{"addr":"162.252.214.5","port":2087,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2017-02-14","domain_rank":95532,"first_seen":"2021-01-04T16:47:52Z","last_seen":"2025-12-26T13:16:34.094069Z","alert_count":0,"request_count":2,"received_data":1058,"sent_data":865,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ts4.mm.bing.net","ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"1997-09-03","domain_rank":108474,"first_seen":"2012-05-23T19:16:05Z","last_seen":"2025-12-24T22:15:37.816582Z","alert_count":0,"request_count":5,"received_data":131409,"sent_data":2355,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]},{"fqdn":"weirdopt.com","ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":37519,"first_seen":"2025-07-08T12:55:47.272157Z","last_seen":"2025-12-24T19:21:20.505106Z","alert_count":3,"request_count":1,"received_data":377,"sent_data":419,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"skinnycrawlinglax.com","ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-01","domain_rank":38609,"first_seen":"2025-07-09T22:28:05.771371Z","last_seen":"2025-12-30T15:18:21.056517Z","alert_count":48,"request_count":12,"received_data":14209,"sent_data":10086,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-12-28T22:20:33.111263Z","alert_count":0,"request_count":1,"received_data":2315,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"6.adsco.re","ip":{"addr":"104.16.84.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":91627,"first_seen":"2018-01-15T04:15:29Z","last_seen":"2025-12-26T14:57:44.996495Z","alert_count":0,"request_count":2,"received_data":1189,"sent_data":865,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"intelligenceadx.com","ip":{"addr":"208.95.114.100","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2020-04-18","domain_rank":61654,"first_seen":"2020-04-19T20:09:16Z","last_seen":"2025-12-25T23:27:02.563681Z","alert_count":1,"request_count":1,"received_data":257,"sent_data":1727,"comment":"","tags":null,"fingerprints":null},{"fqdn":"creative-sb1.com","ip":{"addr":"172.67.210.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-01","domain_rank":22211,"first_seen":"2025-08-08T09:32:32.509707Z","last_seen":"2025-12-30T08:11:41.528618Z","alert_count":12,"request_count":4,"received_data":88905,"sent_data":1884,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ts1.mm.bing.net","ip":{"addr":"150.171.27.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"1997-09-03","domain_rank":108645,"first_seen":"2012-06-22T23:24:28Z","last_seen":"2025-12-26T21:47:45.262438Z","alert_count":0,"request_count":8,"received_data":154975,"sent_data":3768,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]},{"fqdn":"preferencenail.com","ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":20606,"first_seen":"2025-07-08T12:55:47.271261Z","last_seen":"2025-12-31T21:55:03.360474Z","alert_count":9,"request_count":3,"received_data":257868,"sent_data":1242,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.storageimagedisplay.com","ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-09-13","domain_rank":170153,"first_seen":"2024-09-13T12:56:32Z","last_seen":"2025-12-29T08:41:45.084205Z","alert_count":0,"request_count":1,"received_data":6707,"sent_data":473,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"fbbfa0f78228449a53ea439280f534fe","sha1":"ff25b8f1fefa7bc01182a1a8b2422b3cb6cb2a5a","sha256":"caebf1c80838114abc702118f5c7453681819e85f48665227a6396a19ab6700d","sha512":"f98974238b6477ab2e24e78de3648ccdbe2dcb6c83b01dd42b999cc6bf2b096a58c91f98785faa7633a201376f267722a76d532c46fb5ee192d782e1d2a23c45","ssdeep":"","tlshash":"4ff0d67a703c23b181fbd16096af66a67534424fc38361c5782ca2170da1f951bd19ba","size":619,"data":"","first_seen":"2024-08-20T02:41:39.715851Z","last_seen":"2026-01-24T00:09:28.775765Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xxmygirl.com/themes/javascript/jquery.imagesloaded.min.js","fqdn":"www.xxmygirl.com","domain":"xxmygirl.com","tld":"com"},"ip":{"addr":"104.21.16.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"71a6605a26dfa54d09a609e490d02027","sha1":"258bf5e342315e75ae1667f8c5b40721544c03f6","sha256":"dc008f649c463c6bd9e8f5b2aebea7c0d0b5d13aa1d837c0ccd1173706247b68","sha512":"c5bdf3df8df57fcd0033057dbf4233fd42534b3db9a97b12c762f22718a8f3182fe32fc1d6e1559569c7edbb8f26d381655c39f4553e65d044111c0632d6a7cc","ssdeep":"192:cwBiC7Gd4QY6Pm+OrOJ42uVOpDsu1mx3AJzE8f:cNC7Gd4QPm+Or0WOpou1mxQlEy","tlshash":"e5e143cd3796712113dab177a22f020ff237a599681d80687356e8f22c7a89d4633f79","size":6955,"data":"","first_seen":"2023-03-07T12:02:21Z","last_seen":"2026-04-03T21:13:30.763891Z","times_seen":1094,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"javascriptURL","is_inline":false,"md5":"68934a3e9455fa72420237eb05902327","sha1":"7cb6efb98ba5972a9b5090dc2e517fe14d12cb04","sha256":"fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa","sha512":"719fa67eef49c4b2a2b83f0c62bddd88c106aaadb7e21ae057c8802b700e36f81fe3f144812d8b05d66dc663d908b25645e153262cf6d457aa34e684af9e328d","ssdeep":"","tlshash":"aa3000000000000c000000000000000000000000000000000000000030000000000000","size":5,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-03T23:31:52.588166Z","times_seen":66058,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xxmygirl.com/sexlist/brima-tiffany.htm","fqdn":"www.xxmygirl.com","domain":"xxmygirl.com","tld":"com"},"ip":{"addr":"104.21.16.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b7d8a1a33a77fcd0328d3c709c5a9eb3","sha1":"e8ea90d66488aae87f231079141b02b04cc26f05","sha256":"3f06772f212125287a824492bf133d5fc6ef851b8478c081406f650716869cde","sha512":"b92d0879e95318270c892770db71380d6f66efbeb8e4c9a8155e82b09e66a0a90844a4d0e38ede9b6bd536d8926ab4359e3bcc5266594f04136fa66295bbc9c1","ssdeep":"","tlshash":"f37000082080000200200002020222003202203080c82002a2000a3020ea08b8020080","size":20,"data":"","first_seen":"2023-03-07T16:36:56Z","last_seen":"2026-03-06T11:55:01.489296Z","times_seen":4296,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xxmygirl.com/sexlist/brima-tiffany.htm","fqdn":"www.xxmygirl.com","domain":"xxmygirl.com","tld":"com"},"ip":{"addr":"104.21.16.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"683b30c55975e871766ec5d3fc2ca178","sha1":"52c7ab3c8aab3675543842e6c7e91e9adfb1df07","sha256":"8feb061638c04299f5f15dd414be67e6a0dd51d5c0323ff871e873fd53881dad","sha512":"c61023d6d2263585cd2a7377a624771e134fcd50d584d012105601727a82dd6227b8cd1ed43246f7edd195d98dd1632889f5fd2028da2cb59551e0c0b71d35c1","ssdeep":"","tlshash":"a301f49ce58a80a443c7146ef177809c32745021742b8064d0cedd5cacfeca751669a4","size":667,"data":"","first_seen":"2025-11-13T00:28:09.199236Z","last_seen":"2026-03-13T00:42:13.628006Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b5c42a2f3fd7c3f803d9bace5123019e","sha1":"47ee8693e96240c2653250ddbc1f41d01e58bd3f","sha256":"04402aa4405816ead4f238ea0afee50f3be6a00cbe7135c153ce0cf396886bdc","sha512":"dc4ade6615975e07f27706430691b690523076f404853ab42ac34ace4a6153738cdf8f76a5ec2f3c9a2b64b84740ab5ea4b377ae35da5ae5e9d235922ccccfb8","ssdeep":"","tlshash":"36f0287e502c863c4febe390a64a6bdf523347498041071df42c0a9f1de6bb916a6d67","size":619,"data":"","first_seen":"2025-11-13T00:28:09.214711Z","last_seen":"2026-01-24T00:09:28.758397Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/8d/e9/ae/8de9ae4b0e4b914d604a7e4b56139ffe.js","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"81c010ddfde2faeaf1c598844287df5a","sha1":"cd0fb06af4d1e8878a8c2c8d0311892ef13ff47b","sha256":"44442357bcab05b20364ed17aae2a3ae173b906529612b0e2f7d2217a76e51ab","sha512":"0acadda1dc3bba9f6178ba54356f2aed3dba23fbaf3b53b683fc5dd78eeff47a63ec7815ffbdb1e07041b274646eaa0a71ada2500f181775833f40761fc7cac8","ssdeep":"96:A9+XCx+8Ixmzn2ySej3zqIDNcxE6204l4sNm+E/0NK4Amfnqkk7lDAP2CwU6:A6Cg/S2yPXXWxW04fNPw6K4Amf4DAPA","tlshash":"13d1859c3e80b0a057b26077b97fa019b3696c50657fd80cd012b1a03e7562ad9bbba5","size":6454,"data":"","first_seen":"2025-12-01T12:09:20.892186Z","last_seen":"2026-01-29T12:50:40.978548Z","times_seen":4063,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intelligenceadx.com/vjrkrtwschenp?lDFvqsQM=BQNyAAAAAAAACZUAAmNwnkQvxnhoRzkESwQVgrhG81vW0vN7wNSHb4j49LnxQZsgFMnTR0tBlWnnOdHVv1ui9gKqgvo3Kyt_pPknhQmGcKRcmVmZcKhpvJtygrOGZDvjOZoBVBCS-VkGmCSPZ-A5OPuP3AQjCjujYB3AL9UHJaBiNDw6XbJGfmnYRj1Wj0Xk6PE7UACUdagGpl0zaMSFZSP5FgcOAPsyThkue2EbT0LGbCOhKDFtYlNaX69tAsyZ6EdHQW1hsr3ROuZrtwST8eQzMI_M2T-tNQyeFICh-vsCjtSYcSG_KRQnOICXBhkMnIxusDCZ6GEzebIcZkFrdmFuIWCO2aZIQ00H6fOURpWxY1yBv63Lv0u0vhDnRCQ4IQtgWgvr13OdLENzf8GENv69XTyABP6-HPjNvCUbqrYNDIzebhGEUf9r6zhiXI5QBqMZxwrDIuWwVPpcjN4Z13rVQZcwGr9QdSUni14Abaa_8RIHuPkSL9-3JawpOO0kpzsw5Yjg7W6JXSjcfzeJi1c5HbNQEc9TjMOmT85LNEvd2b3lkyQBQyCV8-c0vXv6S4zCHNC5f7utm61fSr7p5mVvngbr-stL4K5Ja_mhPdA6AWgEna0ZMls9cYef-AQXqmf8YsLneGOJrKoYnQNyHkvxtceC116rf4IdxwbajV7QsZXaXVVyi6FSFa_AmLfA3H9vgJJ9T_skAUCFVpOkBN2H107MZDHzmof2ez911q-E1X62Gp2oMXO5Fkb6uS2daNtM6RaRlpcnHiuhkfB7VkrNewU5HKVKo-i5NX1dsqWVmuxAfhg2685FCN7WeylDhNqwhc6ROfW3LnAwS86CzLaBPGQTJqqrJA5c2OjLCCsm4Nx2su7H5QBr7eF681aQHWSSeMmEGvFmCnte6UInwmfu3Or02WawS-gYBACoPdubHvarkhWzbp-lW9RN31NEK0irsPzcHH1a6nlFgPsmhEiicAmBERMU_W4qGQ-VfPXjTnSy4l8rejAebS6Ik9RGAo8MwlGfaGYLy01ZKEnEBUW1oAmWXhVPVs7lT-6DGK9X0eJ0oba754MY5dfMevO40kbAOBCMZeV_clX4TyRePk2gO_FNDWHXVg7hNCsjyciThO2jL7WNMqAnyLyK4s2GzFKFqjv-8dwaLl49lddktyA72lFMBZ33FZ3FF0w\u0026tYvjDyZI=4\u0026RaoLBkgE=4791157\u0026ZSAwHNct=\u0026HaAPEMIY=0,0\u0026weAdUfmD=\u0026fdgTzrxW=\u0026jXuxqQTw=1280,1024,1,1280,1024,0","fqdn":"intelligenceadx.com","domain":"intelligenceadx.com","tld":"com"},"ip":{"addr":"208.95.114.100","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5f0a25e4d3522d56d48ce7bc3e518fb","sha1":"86794caff58f7fee6e684c2ba7195f970a8d6f4c","sha256":"9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5","sha512":"a3a81801f516a4eb11f00d6f56dab0ed4b8a79219e6b4f5436993479f09dae08f14cffbab3327ff66fb39201d8eba1153ae7114f7705a01cc6f0edf840ef1616","ssdeep":"","tlshash":"789002801814116115d1500b8d5159d01259b1a4540801324446ca502dc7883a415774","size":44,"data":"","first_seen":"2023-03-07T01:17:45Z","last_seen":"2026-04-03T23:31:52.484042Z","times_seen":22736,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xxmygirl.com/themes/javascript/main.js","fqdn":"www.xxmygirl.com","domain":"xxmygirl.com","tld":"com"},"ip":{"addr":"104.21.16.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa3a0e06111b48c3de7fcf050e4bf48c","sha1":"036d6d3c0934fed1d2812460069a5d4c1ada987c","sha256":"6e587a6af6eeba3a76a5c70fd9142cfc7eb38244b3db1bafcff9f78e3a42f1c8","sha512":"bed25e27044ed3df5673e7563bf362a1027ac4b075f1a6788664b81fc066795cdcf96bb89a9cd5fc3ea386a6ffe05f81eff3679d34241328d45f25353c89b7f6","ssdeep":"","tlshash":"fa41fe6d7827b42386bb76b4f8bf14088e3ae01b9443e765b95d44941fb10084733ded","size":1975,"data":"","first_seen":"2023-04-16T22:44:54Z","last_seen":"2026-03-12T21:53:02.223615Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xxmygirl.com/themes/javascript/jquery.masonry.min.js","fqdn":"www.xxmygirl.com","domain":"xxmygirl.com","tld":"com"},"ip":{"addr":"104.21.16.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5e1c2523f4fbb7c9dc8b44309063add","sha1":"0b123f011142d59a3a859b05d810d0d6840f6454","sha256":"ddbf7266fc9d3a0ecf1cda38a39165fe97717ab8b3a3d51ba4e627e826dfb159","sha512":"084cd06c437191b71251b971af62224c5b74da9733acadbca8f75ffda543bba7577c440306d9250815990ede7bef4d25fe88b190a6a5a743d25cfa676edb898c","ssdeep":"768:NX+z0BF+frvghzgbPyRnUPICjfbRZINfX:NKyEbPOUf4l","tlshash":"41c2f94a7740b4249347b1a6a5af010fb23ba4ade90d94fcb285d8fa6db1c5c1137f39","size":28040,"data":"","first_seen":"2025-11-13T00:28:09.157397Z","last_seen":"2026-03-12T21:53:02.249758Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-04-03T23:36:18.877352Z","times_seen":13149,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xxmygirl.com/sexlist/brima-tiffany.htm","fqdn":"www.xxmygirl.com","domain":"xxmygirl.com","tld":"com"},"ip":{"addr":"104.21.16.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"31f40265c2d84522d7f9bfe2a039ec84","sha1":"577f111b4902dffc423337b17cb638db2dcf6b56","sha256":"f7d11ce8d80b83f5b434fbf4768f74b92e9731eb3c5360ac76e3a3366d9af105","sha512":"8c336a2b79096b2aa7cc72fbc5dc70acadb03ff883f231be2f9c19c2965d9550ee9bb660e445c33047b6f18f28c9d7d3758cabb5c5e23d2c3c3bbea7500f9612","ssdeep":"","tlshash":"7851ca8ab00635260bb725a35e5f5882ff2f4d902747e7a4f2c1e0b15d6cf055297ed1","size":2836,"data":"","first_seen":"2023-03-07T12:59:41Z","last_seen":"2026-02-23T04:15:43.880861Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xxmygirl.com/sexlist/brima-tiffany.htm","fqdn":"www.xxmygirl.com","domain":"xxmygirl.com","tld":"com"},"ip":{"addr":"104.21.16.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d720eef71edef78b948a643d5712ec07","sha1":"ea5eb334bd6ddb0f04abafb700dc2ecb30070c76","sha256":"2daa1a91b2430e9867296c9cb26d1483785954a9bdd66f79b2c754bab7092cae","sha512":"63368ff1fef849df7f849af23bc2f24698893bd3d58300282427a76665b2d5c94f097d409f93173ad9c36944b4fffc2e37fa03a91f81e4e04f3737f9b73d2d6f","ssdeep":"","tlshash":"5f6000c00000c00c0000ccc3c00300c030000030c0cc3c0003003c3300cf00ccc00033","size":15,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-03-06T11:55:01.51255Z","times_seen":24260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marchshotgun.com/79/4a/2d/794a2d540c40b1a3bd9a97a0e4bcc586.js","fqdn":"marchshotgun.com","domain":"marchshotgun.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0bf6711a68954a97ea74b110d6bf17d5","sha1":"783bc69d9056978fd40baf12bd7304b53fa183a3","sha256":"f3fa0533f28bcff42546cc56e9f22e8e7ea676c6565d5ea699d39003a7809219","sha512":"b73ac20e3c769befd3f62e3fbf8ba4f0eedc1b3db07fe19fe25b2e5b8b7283a1eb14b1602c9f4fda4f3f9b40d3421d5f191338759084e1bc8d7073275b93edd3","ssdeep":"3072:EYf17aMWZ44SXdVY4lDKVVbZ4i3/9j9y1UglGews2:EYfw194Lws2","tlshash":"cfa3c788bfd0f06d129a6473223f950ff11a4e42505ce558e907f8e66abc32af47db64","size":106859,"data":"","first_seen":"2025-12-31T23:42:35.296733Z","last_seen":"2025-12-31T23:51:27.275546Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-04-03T23:36:18.877352Z","times_seen":13149,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.intelligenceadx.com/fjson.min.js","fqdn":"www.intelligenceadx.com","domain":"intelligenceadx.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"b471780de03c277e94da454229d31da5","sha1":"7867400c83770049b71ab1fc079822d96f50f529","sha256":"cfe3c1f79b9a9bf642bc51ac533f89e0c606be946c2c760d44a1cb777065e0b4","sha512":"c786b5c5600b4d772ee66da6bdb5b26498532bc4ea28c7796ced2cca1232f97297bc589da4ca2de085ccb41d97d5e371ef243caab1ca6c518082035b0aec99e4","ssdeep":"768:bt9rqAYKKiZzFQ9JsQU+YDngZGihfzmMzhYrTsAysncCWcf5k5sigC0fCntlqoDX:bbxZzFQ9JsTgZvfzmMzhYrTscpiZZ","tlshash":"3f133aaab286282601e741b9503eb316b23305167912d458fcb9cdf96e3ddc6117b7fc","size":41946,"data":"","first_seen":"2025-12-31T23:42:35.24108Z","last_seen":"2026-01-03T12:32:01.17832Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-04-03T23:36:18.877352Z","times_seen":13149,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xxmygirl.com/sexlist/brima-tiffany.htm","fqdn":"www.xxmygirl.com","domain":"xxmygirl.com","tld":"com"},"ip":{"addr":"104.21.16.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e187ca335fce62c9daaa6fc37def354c","sha1":"0f6139bdb6b8c32c758bd2937ee805373b936afa","sha256":"69bdd5de19729fc7c34140613de668950ec5d0eb2999b968e88cf0e3cf9c9820","sha512":"349539f61a2a724cd9f3c0f1318960d07f4a96577819e38e508f36c8b821811b0785b5216f86bd31c82bac514b53a12beff593ef27079aff1798e24a78332f7b","ssdeep":"","tlshash":"1ee0ab2998e706384cf63b441039ca3934f838a0aaa3d017525cc82ccd39fc50c54aec","size":424,"data":"","first_seen":"2023-03-07T12:59:41Z","last_seen":"2026-03-12T21:53:02.256102Z","times_seen":99,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4412bf8023109ee9eb1f1f226d391329","sha1":"c273960aa874a87dd022b5e597887142f1b8e34f","sha256":"d40efcac911d8964f3728eaa767de281306ff55ba9377435a3364d4d1e1613f6","sha512":"de3dd553a582e6b3d00782ddd639cb57b29de71afe72af5abef870ab36c7fed68244d511a1e129a0f04af690f27ae9304b1c113c9f1f0e0bd85dde9291a6764c","ssdeep":"","tlshash":"212120987089b815521b9a35677f109bb078ab55d09c40a9c391e4e03f708820d72ef9","size":1300,"data":"","first_seen":"2023-03-07T01:14:34Z","last_seen":"2026-04-03T23:02:47.074505Z","times_seen":17719,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marchshotgun.com/ee/74/6d/ee746d575b41b2d1f7eab8c18240d37b.js","fqdn":"marchshotgun.com","domain":"marchshotgun.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bdac0523c7f06e32d1f394bdddc15eaf","sha1":"e7f2715d91f4554b4dfc5fa3cab924a5aa217bf6","sha256":"5abd0bb256cf4344bdd5c9433f335fcd93bd2607cc6a869b3438222eabf957db","sha512":"32956ff75df30c82cb5023e8d0eb569015053902b397268974b86c3b0ff51323d7b4dfdf8434e374740880effdc04ccc11981766becc7747f0d5651548a9e1bb","ssdeep":"1536:l9yUBg8XFOUGMAVTesz3WArOwlNyBv77NzxpQ2jFFwb2jI7:l3B91cHpUhxpJw8I7","tlshash":"b57309487f42b16b5352a073627fd047f0256f1261ecd498d123e6a86f6c33af636b98","size":78822,"data":"","first_seen":"2025-12-20T23:51:19.668813Z","last_seen":"2025-12-31T23:51:27.234688Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/ac/f3/b2/acf3b22a6b662089f6bf24e9ab222171.js","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e41d9a3e49e1538c5945dd6dd6652407","sha1":"1cb3ce4c28edb63e4ceec88f0b88b4cf9e1e6014","sha256":"ae1f4754fb66f229c01759b5b74b3976d08efa49cced03603bc53ea251f1f3f8","sha512":"05b89a3bd2c31b819cb8b9b5a35a5818e53174249d7ff65249e9627984fc783850bddd5df7f00cfb9783edf017b91225cadb70f9c51606fb1546ae57d2837e9d","ssdeep":"768:Hf9xpNBZtaip6qOthacqRAdw/xvj9RQRj3PYIokIiOij0xWTwZzmhj5oHbNnjLXl:9+th/qRAwyRtcWTboHbNnjLXV94bsj","tlshash":"9e3395543bc0654923978f7f323bf6caf4aa1d6b3818844ad105bd50b6a622bfdf1931","size":51450,"data":"","first_seen":"2025-11-22T18:02:14.379223Z","last_seen":"2025-12-31T23:51:27.28014Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xxmygirl.com/themes/javascript/jquery.min.js","fqdn":"www.xxmygirl.com","domain":"xxmygirl.com","tld":"com"},"ip":{"addr":"104.21.16.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-03T23:26:50.80227Z","times_seen":118069,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xxmygirl.com/themes/javascript/age-verification.js","fqdn":"www.xxmygirl.com","domain":"xxmygirl.com","tld":"com"},"ip":{"addr":"104.21.16.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"497b425d12cff733c92d673650574359","sha1":"ad50854529a8d05c960748cc52338d5eb077e4b5","sha256":"f9797733d7e1be884ed36a2ebed1e72d672e9ff23815a922d8f64712c7b4ca74","sha512":"fe526375cdf125445336138e1e87fb2a14dde4404da269b8f8725aac06711804be5f5f9e5b2a28069c63586b8859f2ff9ddc7add09fe286965e3207dc26b9d65","ssdeep":"","tlshash":"3e511036fabc9058833f552ffb2efac8223552eae6297d4740f4c5ac47d2a4106a1167","size":3078,"data":"","first_seen":"2023-04-16T22:44:55Z","last_seen":"2026-03-12T21:53:02.234493Z","times_seen":99,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"www.xxmygirl.com/themes/images/favicon.ico","fqdn":"www.xxmygirl.com","domain":"xxmygirl.com","tld":"com"},"ip":{"addr":"104.21.16.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:53.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxmygirl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 12:10:29 GMT","end":"Mon, 09 Feb 2026 13:09:16 GMT"},"fingerprint":{"sha1":"6B:EB:7A:AD:65:BC:A2:EA:19:0C:22:14:2D:97:8B:2D:E8:05:D8:5B","sha256":"C7:38:A9:16:95:A0:F3:B2:EF:4F:3B:F9:E8:92:F9:39:EB:71:B6:0E:D2:59:5A:BC:22:16:10:A8:5B:B5:BC:DB"}}},"request":{"raw":"GET /themes/images/favicon.ico HTTP/1.1\r\nHost: www.xxmygirl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/sexlist/brima-tiffany.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 995\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 12 Nov 2026 01:27:08 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Sat, 24 Jul 2021 07:56:41 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=6,i=?0\r\ndate: Wed, 31 Dec 2025 23:50:53 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4314224\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XBzN0LVI0e63DI0ZLR%2BSx3W0IWtVVjXzHormvbKVX39ZPkzdyTCsSZdJ5F%2Brc7hmXy5PEEmyWfGBYhk%2Bow90mtn8jtmjhFM6YGB64p1%2B\"}]}\r\ncf-ray: 9b6dae85ca4b56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"ec1bc9f387154ede8ad40c5238f5ef92","sha1":"9f80556787072ec1fe515a8e77e21cff212bbadb","sha256":"0af042f7245f4a4210d13a7e3bd93a9148a02f17835d25ee793b1b668a3a8f12","sha512":"fca6ec49ea35e1726e9a57b7780bcf336a179367010fda608e57be447a4b71c207ae1bfeb341190e103bc34aaa3b9fc74f23b53fdf6d02ebb18d51e644ca4cf0","ssdeep":"48:062wCkYmbonGDQ9VSHw9dbkvIl/m2jUlFPVT:HeG5Hw9d6Ixm2jUlF","tlshash":"9e91771919b92d4cc69d02f680aea639147bc8eed2e3946b200e0e9d070d05377f3e5f","first_seen":"2023-05-11T01:56:20Z","last_seen":"2026-03-12T21:53:02.254167Z","times_seen":97,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.xxmygirl.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4.adsco.re:2087/","fqdn":"4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":2087,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:53.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 4.adsco.re:2087\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.xxmygirl.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 31 Dec 2025 23:50:53 GMT\r\nContent-Type: text/plain;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Methods: GET, HEAD, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type\r\nAccess-Control-Allow-Origin: https://www.xxmygirl.com\r\nAccess-Control-Expose-Headers: *\r\nAccess-Control-Max-Age: 2592000\r\nCache-Control: private, max-age=300, immutable, stale-if-error=300, stale-while-revalidate=300\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":86,"dns":1,"connect":28,"send":0,"wait":30,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ts2.mm.bing.net/th?id=OIP.me03-4obtvTqe_Lr9-GQIwHaEK\u0026pid=15.1","fqdn":"ts2.mm.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:51.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mm.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 19 Oct 2025 14:07:53 GMT","end":"Fri, 17 Apr 2026 14:07:53 GMT"},"fingerprint":{"sha1":"87:26:AF:B1:86:84:6C:71:2A:20:8E:FB:BA:96:6F:1E:FC:D0:B5:E2","sha256":"D9:41:70:A4:15:0F:6F:6D:39:7B:E8:22:5C:C3:7C:55:6E:75:E0:81:F9:57:09:A6:0C:12:05:62:BB:94:B4:6E"}}},"request":{"raw":"GET /th?id=OIP.me03-4obtvTqe_Lr9-GQIwHaEK\u0026pid=15.1 HTTP/1.1\r\nHost: ts2.mm.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=1209600\r\ncontent-length: 23336\r\ncontent-type: image/jpeg\r\nx-cache: TCP_MISS\r\nhttpcacheability: 4\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ntiming-allow-origin: *\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://aefd.nelreports.net/api/report?cat=bingth\u0026ndcParam=nadatio\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1.0}\r\nx-powered-by: ASP.NET\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: E229D837455B4820BCB687724F536EF7 Ref B: OSL231050212052 Ref C: 2025-12-31T23:50:52Z\r\ndate: Wed, 31 Dec 2025 23:50:51 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":23336,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3","md5":"7070ef17774f9f05e263045db792c78e","sha1":"e0749f81c9c29ac433231ca90acb789083ffffa8","sha256":"188a9dc7390f14168a80e7f81a60405afdd150366c11010baadd9c9d437f99db","sha512":"529fd883a9d6210fdc115a71fac9776466251c0d56800a635dc30dda5fc373b70631f8f020d2037285832abc058520d896a4a20d42f20e4c3c7af2553e181016","ssdeep":"384:b7wiTt4THaVuZcUjchu/NVCKsmXY7u8vlyu1rx2znQnZnTovIqYY3R0/Zvho9fyh:nrTtIZJjVTCKs0Ou8Rr0znQnZTcva/Zx","tlshash":"7ea2d059377d9742c9e5c136ccfdf7934ca0161de8787b0c20968aea0eb0d0a91d8729","first_seen":"2025-12-31T23:51:27.22515Z","last_seen":"2025-12-31T23:51:27.22515Z","times_seen":1,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":20,"connect":37,"send":0,"wait":30,"receive":1,"ssl":143},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ts3.mm.bing.net/th?id=OIP.tBUDEVVyY6YLGZpt5MlU2wHaEK\u0026pid=15.1","fqdn":"ts3.mm.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:51.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mm.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 19 Oct 2025 14:07:53 GMT","end":"Fri, 17 Apr 2026 14:07:53 GMT"},"fingerprint":{"sha1":"87:26:AF:B1:86:84:6C:71:2A:20:8E:FB:BA:96:6F:1E:FC:D0:B5:E2","sha256":"D9:41:70:A4:15:0F:6F:6D:39:7B:E8:22:5C:C3:7C:55:6E:75:E0:81:F9:57:09:A6:0C:12:05:62:BB:94:B4:6E"}}},"request":{"raw":"GET /th?id=OIP.tBUDEVVyY6YLGZpt5MlU2wHaEK\u0026pid=15.1 HTTP/1.1\r\nHost: ts3.mm.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=1209600\r\ncontent-length: 23198\r\ncontent-type: image/jpeg\r\nx-cache: TCP_MISS\r\nhttpcacheability: 4\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ntiming-allow-origin: *\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://aefd.nelreports.net/api/report?cat=bingth\u0026ndcParam=nadatio\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1.0}\r\nx-powered-by: ASP.NET\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: E88EA1E7FAFB4038BB12B44E2D3E07F1 Ref B: OSL231050212052 Ref C: 2025-12-31T23:50:51Z\r\ndate: Wed, 31 Dec 2025 23:50:51 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":23198,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3","md5":"8326cf663bd9f39a4755ddb901b40efb","sha1":"72ed209b2f6673ec410c998ddc2285c6400fa882","sha256":"869b66fd5fc882c698729aa7ae339efd86265165bf58edd8a9c2b597e46574c9","sha512":"6afdde680aa459b03e23740ac28beb7dad3b258caeea917347c2d6b7290b8960da2a40d0ae52d4dc8c65c86d3a1b5bd6bffb9b24b78fbdb022f66785fe09cb61","ssdeep":"384:b7Ta1AedMg2HL1KYt7sVbS5d9FKX+MrQ3nNxHgl47vWfRvz0qMfG08Y:nOAedMoYt7ibS58X+sUNxC46dztM8Y","tlshash":"19a2e127e3ce9b37c58bb1bd53cef066861c82c86eb662363566dd13c07381a9689512","first_seen":"2025-12-31T23:51:27.22633Z","last_seen":"2025-12-31T23:51:27.22633Z","times_seen":1,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":18,"connect":2,"send":0,"wait":71,"receive":1,"ssl":113},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ts4.mm.bing.net/th?id=OIP.aB5tBPYfRdlKPwtZTKFhWAHaEK\u0026pid=15.1","fqdn":"ts4.mm.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:51.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mm.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 19 Oct 2025 14:07:53 GMT","end":"Fri, 17 Apr 2026 14:07:53 GMT"},"fingerprint":{"sha1":"87:26:AF:B1:86:84:6C:71:2A:20:8E:FB:BA:96:6F:1E:FC:D0:B5:E2","sha256":"D9:41:70:A4:15:0F:6F:6D:39:7B:E8:22:5C:C3:7C:55:6E:75:E0:81:F9:57:09:A6:0C:12:05:62:BB:94:B4:6E"}}},"request":{"raw":"GET /th?id=OIP.aB5tBPYfRdlKPwtZTKFhWAHaEK\u0026pid=15.1 HTTP/1.1\r\nHost: ts4.mm.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=1209600\r\ncontent-length: 26396\r\ncontent-type: image/jpeg\r\nx-cache: TCP_MISS\r\nhttpcacheability: 4\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ntiming-allow-origin: *\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://aefd.nelreports.net/api/report?cat=bingth\u0026ndcParam=nadatio\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1.0}\r\nx-powered-by: ASP.NET\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: 42B6A2743E2C474094D2A5136F650708 Ref B: OSL231050212052 Ref C: 2025-12-31T23:50:51Z\r\ndate: Wed, 31 Dec 2025 23:50:51 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":26396,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3","md5":"888738defd585b887afcea8f57221e3c","sha1":"01b4454d8b72e410f37ea97e7af0a599b1554091","sha256":"fa952acd3495488f1ced2856509800ce11c0acbdda24cca407a2139ae59b23b1","sha512":"5cc072d2fc832ddc538f283a9f0115f34095dd4fbbd73d2e352883f8b88fcc39454781c2e80fb04a88b9df293ebe5393b052c5e3c49328151b60f2cd9d9e2a83","ssdeep":"768:fOghfxRcMqS1ODojOG2GKhNPExJ+E4DP8:fOghf3cxS1jyHIm8","tlshash":"01c2e169bddea3508cd593a0282df461996c4c2d32f263852e8693965ca0bf47deec1c","first_seen":"2025-12-31T23:51:27.227461Z","last_seen":"2025-12-31T23:51:27.227461Z","times_seen":1,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":68,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"weirdopt.com/ad/advertisers.js","fqdn":"weirdopt.com","domain":"weirdopt.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:54.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"weirdopt.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 00:51:40 GMT","end":"Sun, 29 Mar 2026 00:51:39 GMT"},"fingerprint":{"sha1":"F3:CE:FF:C9:F8:70:23:18:40:13:70:96:1A:D1:FD:34:D3:CD:66:FC","sha256":"07:8C:A3:3F:1D:F1:E0:75:3D:26:20:F5:D5:75:64:CE:F7:40:6E:B7:BB:B9:EC:79:33:27:5F:51:2E:B0:12:E7"}}},"request":{"raw":"GET /ad/advertisers.js HTTP/1.1\r\nHost: weirdopt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 31 Dec 2025 23:50:54 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 0\r\nConnection: keep-alive\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 043170a9a981cecfdd46d0a64bdbed49\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T23:31:02.874036Z","times_seen":13307549,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":0,"dns":0,"connect":26,"send":0,"wait":18,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ts2.mm.bing.net/th?id=OIP.ayFKaI7T47jS6ZFi-BvffAAAAA\u0026pid=15.1","fqdn":"ts2.mm.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:51.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mm.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 19 Oct 2025 14:07:53 GMT","end":"Fri, 17 Apr 2026 14:07:53 GMT"},"fingerprint":{"sha1":"87:26:AF:B1:86:84:6C:71:2A:20:8E:FB:BA:96:6F:1E:FC:D0:B5:E2","sha256":"D9:41:70:A4:15:0F:6F:6D:39:7B:E8:22:5C:C3:7C:55:6E:75:E0:81:F9:57:09:A6:0C:12:05:62:BB:94:B4:6E"}}},"request":{"raw":"GET /th?id=OIP.ayFKaI7T47jS6ZFi-BvffAAAAA\u0026pid=15.1 HTTP/1.1\r\nHost: ts2.mm.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=1209600\r\ncontent-length: 18561\r\ncontent-type: image/jpeg\r\nx-cache: TCP_MISS\r\nhttpcacheability: 4\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ntiming-allow-origin: *\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://aefd.nelreports.net/api/report?cat=bingth\u0026ndcParam=nadatio\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1.0}\r\nx-powered-by: ASP.NET\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: F27B1C2EA04C468789040562A7E7F5B3 Ref B: OSL231050212052 Ref C: 2025-12-31T23:50:51Z\r\ndate: Wed, 31 Dec 2025 23:50:51 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":18561,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 352x198, components 3","md5":"f9e884b2130a881de54d466feafcedbb","sha1":"c33ca1d24da6fb18cd0879145d9bcc965529223a","sha256":"e4fe6a70e6fd8b5775f970a45fcb7a4046ea7de903a24a20a96a75c342849cd0","sha512":"3cc714535e4edfd2d801d63da69bd5ee74533bddcbed6752756a4ba64a85a99cf7dbf3b784811288430885d94d898e80eb68467ca69442d58df1bfce39dbd810","ssdeep":"384:ZemPWwmofSe/RHQ1ZwfL19DVV6YoMwOdG3/2hsitB8YuN:Y/oj/e1mn7gjOdGP4e3","tlshash":"5982d097df4e46d3c482937ea49d3ab29110edb0f2d05b3b2d65cd349ec06725e002ba","first_seen":"2025-12-31T23:51:27.229361Z","last_seen":"2025-12-31T23:51:27.229361Z","times_seen":1,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":136,"dns":26,"connect":17,"send":0,"wait":69,"receive":1,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ts2.mm.bing.net/th?id=OIP.VlQqF2E9hQ7K_cz9tbB3_gAAAA\u0026pid=15.1","fqdn":"ts2.mm.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:51.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mm.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 19 Oct 2025 14:07:53 GMT","end":"Fri, 17 Apr 2026 14:07:53 GMT"},"fingerprint":{"sha1":"87:26:AF:B1:86:84:6C:71:2A:20:8E:FB:BA:96:6F:1E:FC:D0:B5:E2","sha256":"D9:41:70:A4:15:0F:6F:6D:39:7B:E8:22:5C:C3:7C:55:6E:75:E0:81:F9:57:09:A6:0C:12:05:62:BB:94:B4:6E"}}},"request":{"raw":"GET /th?id=OIP.VlQqF2E9hQ7K_cz9tbB3_gAAAA\u0026pid=15.1 HTTP/1.1\r\nHost: ts2.mm.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=1209600\r\ncontent-length: 14269\r\ncontent-type: image/jpeg\r\nx-cache: TCP_MISS\r\nhttpcacheability: 4\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ntiming-allow-origin: *\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://aefd.nelreports.net/api/report?cat=bingth\u0026ndcParam=nadatio\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1.0}\r\nx-powered-by: ASP.NET\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: 3A01A514E6434BFE81D98F683FF99225 Ref B: OSL231050212052 Ref C: 2025-12-31T23:50:51Z\r\ndate: Wed, 31 Dec 2025 23:50:51 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":14269,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 352x198, components 3","md5":"1eb470fb7a48150f253c458530b49ecf","sha1":"e76ef4825ddbf366b8ae4bbb63cc4e2e7102b8e8","sha256":"95ca6aa1b4d11d3a61c1aded2e0417a52df12d564db9ebfc1af17680e18e8f4d","sha512":"38006a3cd8e8cce9062d572adcfb56a5ac3089fe330ce5ceacfbcb7c459f75aa585c5361df2dd653536ddc3b319d73ac5d66b5eed0817038e27add5271c19ee4","ssdeep":"384:OeyCzHSpGv43F0uVNJBcDwynP4kDkFY+lBL/:bF2pGA10u5BcD74k87","tlshash":"3a52c0931a5d2747ced647f267ae329a43994cf1f229d1cf1a3a8deb3b0124b5c61c11","first_seen":"2025-12-31T23:51:27.230847Z","last_seen":"2025-12-31T23:51:27.230847Z","times_seen":1,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":134,"dns":27,"connect":17,"send":0,"wait":73,"receive":1,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xxmygirl.com/themes/javascript/jquery.min.js","fqdn":"www.xxmygirl.com","domain":"xxmygirl.com","tld":"com"},"ip":{"addr":"104.21.16.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:52.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxmygirl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 12:10:29 GMT","end":"Mon, 09 Feb 2026 13:09:16 GMT"},"fingerprint":{"sha1":"6B:EB:7A:AD:65:BC:A2:EA:19:0C:22:14:2D:97:8B:2D:E8:05:D8:5B","sha256":"C7:38:A9:16:95:A0:F3:B2:EF:4F:3B:F9:E8:92:F9:39:EB:71:B6:0E:D2:59:5A:BC:22:16:10:A8:5B:B5:BC:DB"}}},"request":{"raw":"GET /themes/javascript/jquery.min.js HTTP/1.1\r\nHost: www.xxmygirl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/sexlist/brima-tiffany.htm\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 29664\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=2678400\r\nexpires: Sun, 11 Jan 2026 01:53:03 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 23 Mar 2021 09:05:31 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\npriority: u=3,i=?0\r\ndate: Wed, 31 Dec 2025 23:50:52 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nage: 1720668\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hBXmnbVAQXOMY7Wub70Iwzr0OodXBt6asdTv6fj2cPDUQw0RwsVpbWIGmrMMfbmvxTwhqNQevLeV6JgefaynTi8YLgOoKCNkfD1Xn9ym\"}]}\r\ncf-ray: 9b6dae7f1a1c56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":86927,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-03T23:26:50.80227Z","times_seen":118069,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.xxmygirl.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yy610eoghin9.l4.adsco.re/","fqdn":"yy610eoghin9.l4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"185.200.118.62","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:53.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.l4.adsco.re","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Nov 2025 09:14:30 GMT","end":"Wed, 11 Feb 2026 09:14:29 GMT"},"fingerprint":{"sha1":"44:4A:2D:C5:7F:AC:E8:4E:70:9B:91:5D:F6:AE:99:5F:66:18:51:46","sha256":"3B:1C:F2:20:1E:BC:6C:00:04:8F:3E:30:B9:AC:DE:26:B1:D4:73:CB:C2:6F:2F:F4:1C:E8:C4:A5:FD:38:8D:68"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: yy610eoghin9.l4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.xxmygirl.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 23:50:53 GMT\r\ncontent-type: text/html\r\ncontent-length: 0\r\nlast-modified: Fri, 02 Jun 2023 14:03:32 GMT\r\netag: \"6479f6b4-0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T23:31:02.874036Z","times_seen":13307549,"resource_available":true,"data":null}},"time_used":306,"timings":{"blocked":133,"dns":65,"connect":25,"send":0,"wait":26,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:56.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.xxmygirl.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 19:22:36 GMT\r\nexpires: Wed, 30 Dec 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 102500\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-03T23:31:22.080424Z","times_seen":713337,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":155,"dns":0,"connect":0,"send":0,"wait":9,"receive":7,"ssl":136},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xxmygirl.com/themes/age-verification.css","fqdn":"www.xxmygirl.com","domain":"xxmygirl.com","tld":"com"},"ip":{"addr":"104.21.16.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:51.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxmygirl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 12:10:29 GMT","end":"Mon, 09 Feb 2026 13:09:16 GMT"},"fingerprint":{"sha1":"6B:EB:7A:AD:65:BC:A2:EA:19:0C:22:14:2D:97:8B:2D:E8:05:D8:5B","sha256":"C7:38:A9:16:95:A0:F3:B2:EF:4F:3B:F9:E8:92:F9:39:EB:71:B6:0E:D2:59:5A:BC:22:16:10:A8:5B:B5:BC:DB"}}},"request":{"raw":"GET /themes/age-verification.css HTTP/1.1\r\nHost: www.xxmygirl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/sexlist/brima-tiffany.htm\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1854\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=2678400\r\nexpires: Sun, 11 Jan 2026 01:53:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jun 2022 00:03:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\npriority: u=2,i=?0\r\ndate: Wed, 31 Dec 2025 23:50:51 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nage: 1720668\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rl6NNMrAEV9ve%2FsYS0EG1Y0fb%2FsyasgPfmQ%2Bn%2B3nLhhO9FnFyXc7d%2FRISXik0uJHE2e99SGweSpVZaHPbiR4GUFJNAAH8b6QPF0O5Tjl\"}]}\r\ncf-ray: 9b6dae7dda0456a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":4596,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1083), with CRLF line terminators","md5":"53ba3aa2c68e4824e9090687becf555f","sha1":"cf82a2f0aaae7834030588c4e7c550513b6dd007","sha256":"dbfe2ab8f1ce037e812682a76bea2241f4e0548b1b3106c86992c2229ed922e1","sha512":"fcd5ac0ff39017ab4ce57863e6053e761b1286e9c8bc2c6fa360a00f533200707d105cfe41a85547c59d295f75fce267a2e009bcefb751f9c65b4dee4630aba2","ssdeep":"96:dorfGUT6ltNwRBjG/wH3LKeM6csrs8QANcBxIxnrx1U/P:mLGUqNwRxU7SzQANcBihKP","tlshash":"64914237aa6f108c730e9a657778bfa05a504021c62bb3fb74f192a4aac571116f73c9","first_seen":"2023-10-28T08:54:04Z","last_seen":"2026-03-17T14:12:53.071578Z","times_seen":134,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.xxmygirl.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.xxmygirl.com/themes/javascript/main.js","fqdn":"www.xxmygirl.com","domain":"xxmygirl.com","tld":"com"},"ip":{"addr":"104.21.16.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:52.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxmygirl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 12:10:29 GMT","end":"Mon, 09 Feb 2026 13:09:16 GMT"},"fingerprint":{"sha1":"6B:EB:7A:AD:65:BC:A2:EA:19:0C:22:14:2D:97:8B:2D:E8:05:D8:5B","sha256":"C7:38:A9:16:95:A0:F3:B2:EF:4F:3B:F9:E8:92:F9:39:EB:71:B6:0E:D2:59:5A:BC:22:16:10:A8:5B:B5:BC:DB"}}},"request":{"raw":"GET /themes/javascript/main.js HTTP/1.1\r\nHost: www.xxmygirl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/sexlist/brima-tiffany.htm\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 763\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=2678400\r\nexpires: Wed, 07 Jan 2026 01:58:29 GMT\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 31 Dec 2025 23:50:52 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 78742\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nlast-modified: Wed, 31 Dec 2025 01:58:29 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WHjLon%2Bz%2FZ4ZTZ4F1gJd9uwb0m1%2FI9CcnSsTNg1YYC7zVWr27Zfa8VA422jw6dC7mL0b6vMs5fZIrNlmktHt0MBsf9c9tT4Fz7BbWFb4\"}]}\r\ncf-ray: 9b6dae7f0a1956a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1975,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"fa3a0e06111b48c3de7fcf050e4bf48c","sha1":"036d6d3c0934fed1d2812460069a5d4c1ada987c","sha256":"6e587a6af6eeba3a76a5c70fd9142cfc7eb38244b3db1bafcff9f78e3a42f1c8","sha512":"bed25e27044ed3df5673e7563bf362a1027ac4b075f1a6788664b81fc066795cdcf96bb89a9cd5fc3ea386a6ffe05f81eff3679d34241328d45f25353c89b7f6","ssdeep":"","tlshash":"fa41fe6d7827b42386bb76b4f8bf14088e3ae01b9443e765b95d44941fb10084733ded","first_seen":"2023-04-16T22:44:54Z","last_seen":"2026-03-12T21:53:02.223615Z","times_seen":98,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.xxmygirl.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/impr.gif?sid=H4sIAAAAAAAC_1RSz2skRRit3l1PHtR1UQSFOXhQMJP-lc60C0azayQYk5DNkoMHqa6qnpTp7mqruqcnc5BoQPeYvXnw0HmTbFCDuJe9CcvEW0DYEYQcNgj7Jwh7E2QmA6sf1Pe9j1eH917VN_vlOfFQ0rPVT1RPJgmdnmnajbc2ZMZVZRrL6w3HbtrXGxsyC_zrje6o6c67juc37bcbHwm2paZd27Ftx3YaC1KLWHWnxyxkfhw6zdBu-m7TmfHR1f_fTWnBUAu8c06uQvLhC0_iTyHZAFn6y01htgqVv_NhWia0UBodfnQ728pUlSF9BmNtIc6OJrehzJCQ7y5BZUcTB1Cdg5EDRHJILr3yGFF2NJGJqHN4oTRKIDJE_HlUnQFEMoCkAzC1C8kfEYBxLK8gS-8tK13R7QuWjtghufL0b8hqSK48voYs_Xk-kd3GLZWUhVSZQTeuIbsDyPYAeXmComdBVidgxdeQ_Hcy_XQJWXqwYhIFyc_ebHFXsJbwpljoOFO-F3hTkQjtKSecCUM7mA0C4Y0jkvEA1FgoR0daKGMLZW4h5WcN3275zKFeEIeczdo-9X0uIjtsubZNQzaLkn0FyffA9A5yvYMteffRzFXo8iHMZg3DLZiCoMNrVIKgMgQVJagkQVUQVJ36kCfGNfU9npgycibTnUyv7quivU8PVdEWGQHVe9C8PpD5F2YXrLjc78WG99Wo0aio-zTi9X5-Tl4aJ_rP969jS5w1KIu9yHVpEAWBa7fCOIhi1xchjVzXdWYdGFlDmkvjHHpySF4zD5DLISHfvo-InsAkJ2DyRdDyDdCqBt2s0cuOjehut5Oy12QqBVc18uIKim1rPzknL_fX1ucfjmV8tvslBDude-KNC0zXyHWNz-VvBO3kTn9NVeRgTVWG3F_JC5nKHh09-q2CFuLyjx-L7UppvnjT7P3wARsRI3i8LkyxRDMus7YhP81LzoVeUJoJ8uui2RDRamk250udlfnS6o2FxTTXwhipsgHoyNn958DkkFy78d74QwetV8HyHZj8dO7PeFwwiiDKLSSSIBGnZFKgUQ3znz16hvfNHbS1BVrsIktrdHSNTlKDJnsw5eV-kevTuT8mOUSJ1Y8SbR1EiU7uXuRk5Fkj9oTLbLs1GzheKxaO53MWz7T8kAfU9jyBwgzl7Qd__RsAAP__exD8aHMEAAA=","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:57.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 22:08:08 GMT","end":"Wed, 25 Mar 2026 22:08:07 GMT"},"fingerprint":{"sha1":"BE:03:A2:AD:89:FD:C3:94:0E:B0:AC:88:9E:E3:AD:33:6F:39:72:EA","sha256":"86:5E:AF:03:20:81:8A:65:09:C9:A1:D4:22:8C:8B:1F:82:60:C9:82:6B:01:09:E8:98:E2:F3:DA:A8:3C:D5:71"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSz2skRRit3l1PHtR1UQSFOXhQMJP-lc60C0azayQYk5DNkoMHqa6qnpTp7mqruqcnc5BoQPeYvXnw0HmTbFCDuJe9CcvEW0DYEYQcNgj7Jwh7E2QmA6sf1Pe9j1eH917VN_vlOfFQ0rPVT1RPJgmdnmnajbc2ZMZVZRrL6w3HbtrXGxsyC_zrje6o6c67juc37bcbHwm2paZd27Ftx3YaC1KLWHWnxyxkfhw6zdBu-m7TmfHR1f_fTWnBUAu8c06uQvLhC0_iTyHZAFn6y01htgqVv_NhWia0UBodfnQ728pUlSF9BmNtIc6OJrehzJCQ7y5BZUcTB1Cdg5EDRHJILr3yGFF2NJGJqHN4oTRKIDJE_HlUnQFEMoCkAzC1C8kfEYBxLK8gS-8tK13R7QuWjtghufL0b8hqSK48voYs_Xk-kd3GLZWUhVSZQTeuIbsDyPYAeXmComdBVidgxdeQ_Hcy_XQJWXqwYhIFyc_ebHFXsJbwpljoOFO-F3hTkQjtKSecCUM7mA0C4Y0jkvEA1FgoR0daKGMLZW4h5WcN3275zKFeEIeczdo-9X0uIjtsubZNQzaLkn0FyffA9A5yvYMteffRzFXo8iHMZg3DLZiCoMNrVIKgMgQVJagkQVUQVJ36kCfGNfU9npgycibTnUyv7quivU8PVdEWGQHVe9C8PpD5F2YXrLjc78WG99Wo0aio-zTi9X5-Tl4aJ_rP969jS5w1KIu9yHVpEAWBa7fCOIhi1xchjVzXdWYdGFlDmkvjHHpySF4zD5DLISHfvo-InsAkJ2DyRdDyDdCqBt2s0cuOjehut5Oy12QqBVc18uIKim1rPzknL_fX1ucfjmV8tvslBDude-KNC0zXyHWNz-VvBO3kTn9NVeRgTVWG3F_JC5nKHh09-q2CFuLyjx-L7UppvnjT7P3wARsRI3i8LkyxRDMus7YhP81LzoVeUJoJ8uui2RDRamk250udlfnS6o2FxTTXwhipsgHoyNn958DkkFy78d74QwetV8HyHZj8dO7PeFwwiiDKLSSSIBGnZFKgUQ3znz16hvfNHbS1BVrsIktrdHSNTlKDJnsw5eV-kevTuT8mOUSJ1Y8SbR1EiU7uXuRk5Fkj9oTLbLs1GzheKxaO53MWz7T8kAfU9jyBwgzl7Qd__RsAAP__exD8aHMEAAA= HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nCookie: uid_id2=8d2ec8e3-c911-4363-be90-1959906766e3:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl16620572=1; slecacf3b22a6b662089f6bf24e9ab222171=[6259582]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 31 Dec 2025 23:50:57 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nset-cookie: iprc_l+aab2b789f66df9b234c0de93582b1ffc=6259582; expires=Thu, 01 Jan 2026 23:50:57 GMT; path=/; secure; SameSite=None\niprc_l:6259582=1; expires=Thu, 01 Jan 2026 23:50:57 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 2\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: ae9a55ee94fc77f77dc40162146f7bdf\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T23:31:02.874036Z","times_seen":13307549,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marchshotgun.com/ee/74/6d/ee746d575b41b2d1f7eab8c18240d37b.js","fqdn":"marchshotgun.com","domain":"marchshotgun.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:51.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"marchshotgun.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Dec 2025 21:38:56 GMT","end":"Tue, 03 Mar 2026 21:38:55 GMT"},"fingerprint":{"sha1":"05:6C:D5:56:33:81:85:68:BB:66:54:01:6D:C5:5C:E0:77:F8:A7:C6","sha256":"F5:2B:3B:65:26:FF:30:D3:A7:C0:E7:8D:84:1B:02:61:61:51:48:3F:52:A7:AC:49:5E:C3:F1:9C:3D:84:77:8D"}}},"request":{"raw":"GET /ee/74/6d/ee746d575b41b2d1f7eab8c18240d37b.js HTTP/1.1\r\nHost: marchshotgun.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 31 Dec 2025 23:50:52 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 30171\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 5\r\nHost: marchshotgun.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 6ab4ad150c4c8a8cb8239c8e4116e0bd\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78822,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bdac0523c7f06e32d1f394bdddc15eaf","sha1":"e7f2715d91f4554b4dfc5fa3cab924a5aa217bf6","sha256":"5abd0bb256cf4344bdd5c9433f335fcd93bd2607cc6a869b3438222eabf957db","sha512":"32956ff75df30c82cb5023e8d0eb569015053902b397268974b86c3b0ff51323d7b4dfdf8434e374740880effdc04ccc11981766becc7747f0d5651548a9e1bb","ssdeep":"1536:l9yUBg8XFOUGMAVTesz3WArOwlNyBv77NzxpQ2jFFwb2jI7:l3B91cHpUhxpJw8I7","tlshash":"b57309487f42b16b5352a073627fd047f0256f1261ecd498d123e6a86f6c33af636b98","first_seen":"2025-12-20T23:51:19.668813Z","last_seen":"2025-12-31T23:51:27.234688Z","times_seen":5,"resource_available":true,"data":null}},"time_used":768,"timings":{"blocked":287,"dns":3,"connect":94,"send":0,"wait":100,"receive":94,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"marchshotgun.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"marchshotgun.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"marchshotgun.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marchshotgun.com/impr.gif?sid=H4sIAAAAAAAC_1RSz2skRRitTuJJRF0XxYMwBw8KZtI93fOjXTCaXaPBmIRslhz2INVV1ZMyPV1tVff0zBwkGnD3mD3psfMm2aAGdS97E5aJeAkIO4KQw0Zh_wAPwp5lJgPLvsP3veLV4Xvv-77Zz86Ji4yerX2qejKK6Fy1bJfe2pQxV7kprWyUHLtsXyltyrjmXSl1RkW333Vcr2y_XfpIsG01V7Ed23Zsp7QotQhVZ26sQibHvlP27bJXKTtVDx397NtkFgy1wNvn5BIkH774OLwJyQaIW79cE2Y7Vck7H7ayiKZKo82PbsTbscpjtJ7SUFsI46PJbygzJOS7Kaj4aOIAqn0wcoBADsnUq48QxEeTMRG0Dy8mDSKIGAF_Hnl7ABENIOkATO1C8ocEYBwrq4hbd1eUzmn3QqUjdUhmnvwHmQ_JzKPLiFs_LUSyU7quoiyVKjbohAVkZwDZHCDJTpD2LMj8BCz9GpL_QeaeLCNuHayaSEHysze9uucyQems71fqs17N8Wd9j9PZsGFXXJ_ajSDwxxHJcABqppEZC5m0kIUWssRCi5-VPLvhMYe6tdDnrG571PO4CGy_UbFt6rM6MvYVJN8D0ztI9A625Z2H1UvQ2QOYrQKGWzApQZsXyAVBbghySpBLgjwlyNvFIY9MxRR3eWSywJn0yqS7RV-lzX16qNKmiAmo3oPmxYFMvjC7YOl0vxca3lejQoO06NOAF_vJOXl5lKj1QvdbbIuzkhB1r8ar9WrgOUGFO2Fd0KDBnEbFs7lbD2BkAWmmQI2FnhyS1819JHJIyK33EdATmOgETL4Emr0BmhegWwV68bERnW4zynplplrgqkCSziDtWvvROXmlv76x8GC82M92v4Rgp_OP3THAdIFEF_hc_kbQjG7311VODtZVbsi91SSVLdmjo6VfT2kqpn_4RHRzpfnSNbP3_QdsJIzo8YYw6TKNuYybhvy4IDkXelFpJsivS2ZTBGuZ2VrIdJwly2tXF5daiRbGSBUPQEfO7j0HJofk8tX3xgdda7wGluzAJKfzf4VjwCiCILEQySH5-OY_iMTp_M_djVu_H_0LGhQw4pRMgOAp3ze30dQWaLqLuFWgrQu0owI02oPJpvtpok_n_5xkEURWP4i0dRBEOrpzkZWRZ6XQFRVm2416zXEboXBcj7Ow2vB8XqO26wqkZihv3P_7_wAAAP__KBv2cHcEAAA=","fqdn":"marchshotgun.com","domain":"marchshotgun.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:56.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"marchshotgun.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Dec 2025 21:38:56 GMT","end":"Tue, 03 Mar 2026 21:38:55 GMT"},"fingerprint":{"sha1":"05:6C:D5:56:33:81:85:68:BB:66:54:01:6D:C5:5C:E0:77:F8:A7:C6","sha256":"F5:2B:3B:65:26:FF:30:D3:A7:C0:E7:8D:84:1B:02:61:61:51:48:3F:52:A7:AC:49:5E:C3:F1:9C:3D:84:77:8D"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSz2skRRitTuJJRF0XxYMwBw8KZtI93fOjXTCaXaPBmIRslhz2INVV1ZMyPV1tVff0zBwkGnD3mD3psfMm2aAGdS97E5aJeAkIO4KQw0Zh_wAPwp5lJgPLvsP3veLV4Xvv-77Zz86Ji4yerX2qejKK6Fy1bJfe2pQxV7kprWyUHLtsXyltyrjmXSl1RkW333Vcr2y_XfpIsG01V7Ed23Zsp7QotQhVZ26sQibHvlP27bJXKTtVDx397NtkFgy1wNvn5BIkH774OLwJyQaIW79cE2Y7Vck7H7ayiKZKo82PbsTbscpjtJ7SUFsI46PJbygzJOS7Kaj4aOIAqn0wcoBADsnUq48QxEeTMRG0Dy8mDSKIGAF_Hnl7ABENIOkATO1C8ocEYBwrq4hbd1eUzmn3QqUjdUhmnvwHmQ_JzKPLiFs_LUSyU7quoiyVKjbohAVkZwDZHCDJTpD2LMj8BCz9GpL_QeaeLCNuHayaSEHysze9uucyQems71fqs17N8Wd9j9PZsGFXXJ_ajSDwxxHJcABqppEZC5m0kIUWssRCi5-VPLvhMYe6tdDnrG571PO4CGy_UbFt6rM6MvYVJN8D0ztI9A625Z2H1UvQ2QOYrQKGWzApQZsXyAVBbghySpBLgjwlyNvFIY9MxRR3eWSywJn0yqS7RV-lzX16qNKmiAmo3oPmxYFMvjC7YOl0vxca3lejQoO06NOAF_vJOXl5lKj1QvdbbIuzkhB1r8ar9WrgOUGFO2Fd0KDBnEbFs7lbD2BkAWmmQI2FnhyS1819JHJIyK33EdATmOgETL4Emr0BmhegWwV68bERnW4zynplplrgqkCSziDtWvvROXmlv76x8GC82M92v4Rgp_OP3THAdIFEF_hc_kbQjG7311VODtZVbsi91SSVLdmjo6VfT2kqpn_4RHRzpfnSNbP3_QdsJIzo8YYw6TKNuYybhvy4IDkXelFpJsivS2ZTBGuZ2VrIdJwly2tXF5daiRbGSBUPQEfO7j0HJofk8tX3xgdda7wGluzAJKfzf4VjwCiCILEQySH5-OY_iMTp_M_djVu_H_0LGhQw4pRMgOAp3ze30dQWaLqLuFWgrQu0owI02oPJpvtpok_n_5xkEURWP4i0dRBEOrpzkZWRZ6XQFRVm2416zXEboXBcj7Ow2vB8XqO26wqkZihv3P_7_wAAAP__KBv2cHcEAAA= HTTP/1.1\r\nHost: marchshotgun.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nCookie: uid_id2=4743ceaa-9927-4619-94da-f80239a08bb9:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl17660311=1; slecee746d575b41b2d1f7eab8c18240d37b=[6259582]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 31 Dec 2025 23:50:56 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nset-cookie: iprc_l+ad7cad15fb10c4d96aded5355694179e=6259582; expires=Thu, 01 Jan 2026 23:50:56 GMT; path=/; secure; SameSite=None\niprc_l:6259582=1; expires=Thu, 01 Jan 2026 23:50:56 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 3\r\nHost: marchshotgun.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 56c2404617ef576b75d1bee6ea9d3b95\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T23:31:02.874036Z","times_seen":13307549,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"marchshotgun.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"marchshotgun.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"marchshotgun.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marchshotgun.com/pixel/sbs?c=1","fqdn":"marchshotgun.com","domain":"marchshotgun.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:56.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"marchshotgun.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Dec 2025 21:38:56 GMT","end":"Tue, 03 Mar 2026 21:38:55 GMT"},"fingerprint":{"sha1":"05:6C:D5:56:33:81:85:68:BB:66:54:01:6D:C5:5C:E0:77:F8:A7:C6","sha256":"F5:2B:3B:65:26:FF:30:D3:A7:C0:E7:8D:84:1B:02:61:61:51:48:3F:52:A7:AC:49:5E:C3:F1:9C:3D:84:77:8D"}}},"request":{"raw":"GET /pixel/sbs?c=1 HTTP/1.1\r\nHost: marchshotgun.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nCookie: uid_id2=4743ceaa-9927-4619-94da-f80239a08bb9:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl17660311=1; slecee746d575b41b2d1f7eab8c18240d37b=[6259582]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 31 Dec 2025 23:50:56 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: marchshotgun.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T23:31:02.874036Z","times_seen":13307549,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"marchshotgun.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"marchshotgun.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"marchshotgun.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ts2.mm.bing.net/th?id=OIP.AaOFxseTWUnCfHyP85RcRgHaEK\u0026pid=15.1","fqdn":"ts2.mm.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:51.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mm.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 19 Oct 2025 14:07:53 GMT","end":"Fri, 17 Apr 2026 14:07:53 GMT"},"fingerprint":{"sha1":"87:26:AF:B1:86:84:6C:71:2A:20:8E:FB:BA:96:6F:1E:FC:D0:B5:E2","sha256":"D9:41:70:A4:15:0F:6F:6D:39:7B:E8:22:5C:C3:7C:55:6E:75:E0:81:F9:57:09:A6:0C:12:05:62:BB:94:B4:6E"}}},"request":{"raw":"GET /th?id=OIP.AaOFxseTWUnCfHyP85RcRgHaEK\u0026pid=15.1 HTTP/1.1\r\nHost: ts2.mm.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=1209600\r\ncontent-length: 14902\r\ncontent-type: image/jpeg\r\nx-cache: TCP_MISS\r\nhttpcacheability: 4\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ntiming-allow-origin: *\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://aefd.nelreports.net/api/report?cat=bingth\u0026ndcParam=nadatio\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1.0}\r\nx-powered-by: ASP.NET\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: E38B782D8C064A08B838BCB924C6D194 Ref B: OSL231050212052 Ref C: 2025-12-31T23:50:51Z\r\ndate: Wed, 31 Dec 2025 23:50:51 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":14902,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3","md5":"80fa128167e42d3dfba340deed4826d0","sha1":"8c7040ac66a054a7781c0fbd68e6bc323c799e08","sha256":"7a4eea2cf81051703d78f6a9746d5c618094d7ec12709e9aa4594e671209c7d5","sha512":"64d6ad7ff0081b6efc5c3f431a5fdac30f8dd6dd7f4bc5c47bb102a84c125515f7e3ad851fadead9b65797c4bc9a08c3f8827bf11cca9083a58f6b7317539dfb","ssdeep":"192:rY7BDkB8+KfQjYjSs2yaOJoVnV/O7iaY+oXfcFsYBW6LNFgmOH01FDKTg7VFcQEL:M7SvtS6P/OzY7GsYBlNFeUHDl7sQun","tlshash":"7462cfab9e5b038284d807b3d95f787c830e8b6882de3ba534334c2b4c8159546bf50e","first_seen":"2025-12-31T23:51:27.235369Z","last_seen":"2025-12-31T23:51:27.235369Z","times_seen":1,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":82,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marchshotgun.com/sbar.json?key=ee746d575b41b2d1f7eab8c18240d37b\u0026uuid=4743ceaa-9927-4619-94da-f80239a08bb9%3A3%3A1","fqdn":"marchshotgun.com","domain":"marchshotgun.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:55.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"marchshotgun.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Dec 2025 21:38:56 GMT","end":"Tue, 03 Mar 2026 21:38:55 GMT"},"fingerprint":{"sha1":"05:6C:D5:56:33:81:85:68:BB:66:54:01:6D:C5:5C:E0:77:F8:A7:C6","sha256":"F5:2B:3B:65:26:FF:30:D3:A7:C0:E7:8D:84:1B:02:61:61:51:48:3F:52:A7:AC:49:5E:C3:F1:9C:3D:84:77:8D"}}},"request":{"raw":"GET /sbar.json?key=ee746d575b41b2d1f7eab8c18240d37b\u0026uuid=4743ceaa-9927-4619-94da-f80239a08bb9%3A3%3A1 HTTP/1.1\r\nHost: marchshotgun.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.xxmygirl.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 31 Dec 2025 23:50:55 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 4772\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://www.xxmygirl.com\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=4743ceaa-9927-4619-94da-f80239a08bb9:3:1; expires=Wed, 07 Jan 2026 23:50:55 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Thu, 01 Jan 2026 23:50:55 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Thu, 01 Jan 2026 23:50:55 GMT; path=/; secure; SameSite=None\npdhtkv29=true; expires=Thu, 01 Jan 2026 23:50:55 GMT; path=/; secure; SameSite=None\nuncs29=1; expires=Thu, 01 Jan 2026 23:50:55 GMT; path=/; secure; SameSite=None\nu_pl17660311=1; expires=Thu, 01 Jan 2026 23:50:55 GMT; path=/; secure; SameSite=None\nslecee746d575b41b2d1f7eab8c18240d37b=[6259582]; expires=Wed, 31 Dec 2025 23:51:00 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 215\r\nHost: marchshotgun.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: e17599bfd1bd2a72b689042c95f3149d\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6094,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"bae3cd4fd71eb84ed9170e7e0c4777fa","sha1":"51ece543d4f904c920a3b11af012694ee0f133a2","sha256":"5daf4a9a8d5bddabc28e58a5a9cb5405f6d87e7538853b2197a849f1690d22fe","sha512":"728c38d4d77f4a41768005a68e490d82df4dd5513d26d3bfbd7431b78a9d1a22d1f5e5e82ca629c1f8e85bd4fbff81b444c950766e780eb57400bdd6daaf4ddd","ssdeep":"96:9z3F9lU73gLzT77FfegPw8QP8676b/S9lVDVf3CDBd8qB3/60XoLWOs:9z3jlq3G77Qb86ebulBVOH8MS0X0WOs","tlshash":"50c16dbc6084b5810d61ccf15964ae6c1cda194ff7c9f24d467ee3aec5261603b531ec","first_seen":"2025-12-31T23:51:27.236388Z","last_seen":"2025-12-31T23:51:27.236388Z","times_seen":1,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":314,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"marchshotgun.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"marchshotgun.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"marchshotgun.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.creative-sb1.com/sb/ssp/in-page_push/os/android/2/css/style.css","fqdn":"cdn.creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:56.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:26:15 GMT","end":"Wed, 25 Mar 2026 23:23:44 GMT"},"fingerprint":{"sha1":"05:E7:A3:19:D2:55:91:F8:B7:45:48:72:0B:86:C7:0C:2C:CA:27:03","sha256":"14:76:91:36:84:B6:CF:C4:0A:BA:6F:14:80:F9:C7:77:48:3B:08:A3:C8:48:DC:0F:F6:CE:86:72:BB:CC:0B:06"}}},"request":{"raw":"GET /sb/ssp/in-page_push/os/android/2/css/style.css HTTP/1.1\r\nHost: cdn.creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.xxmygirl.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 23:50:56 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65aa8500-124a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\nage: 584\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XX%2F%2Bo1r72ciJWJapKWI0rPT8wXEOPlTKJ%2BNVhZ4dle%2FIRJ8bxN%2BHMJerp3TO062qm25HqQSZTZznHbhymQ6AWXyKHfP5pevVGbbezdKAquwrdQ%3D%3D\"}]}\r\ncf-ray: 9b6dae9d396d0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4682,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"7ad23d9668c9b8532ded3994515354be","sha1":"9290a13e0f2adc3968a20c600eb1a338b9622051","sha256":"6927de206bba6147969b9a6f208b6dd605d4c11755a310678521f9c6d4d47ffe","sha512":"cc4acd3345a2839b149ea6312477d35063a7bfddb4c6988e5172bfc0cebffd34501906849c091ebcf62fbcb9631fb8c797ec768b91090d027d400b49ac3a1741","ssdeep":"96:2Ci7aTMXYM1Fezms0HhIHhpLiRiVmJxMX5eiVPJUZQoBqj793tnaluqto9eMS:2OMX51F4OHhIHhZJAJxMX5TPJelAJaQm","tlshash":"79a1ed962b771a04b80bd4ab3f6a2707271440039a0fed647fc9624c8fc51a8d6a278f","first_seen":"2024-04-14T09:02:27Z","last_seen":"2026-03-17T08:11:57.708893Z","times_seen":1133,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":72,"dns":23,"connect":5,"send":0,"wait":16,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"cdn.creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"cdn.creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"cdn.creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ts3.mm.bing.net/th?id=OIP.Nz9IarRPEd-cWqbuT6rJtAHaEK\u0026pid=15.1","fqdn":"ts3.mm.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:51.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mm.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 19 Oct 2025 14:07:53 GMT","end":"Fri, 17 Apr 2026 14:07:53 GMT"},"fingerprint":{"sha1":"87:26:AF:B1:86:84:6C:71:2A:20:8E:FB:BA:96:6F:1E:FC:D0:B5:E2","sha256":"D9:41:70:A4:15:0F:6F:6D:39:7B:E8:22:5C:C3:7C:55:6E:75:E0:81:F9:57:09:A6:0C:12:05:62:BB:94:B4:6E"}}},"request":{"raw":"GET /th?id=OIP.Nz9IarRPEd-cWqbuT6rJtAHaEK\u0026pid=15.1 HTTP/1.1\r\nHost: ts3.mm.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=1209600\r\ncontent-length: 22045\r\ncontent-type: image/jpeg\r\nx-cache: TCP_MISS\r\nhttpcacheability: 4\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ntiming-allow-origin: *\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://aefd.nelreports.net/api/report?cat=bingth\u0026ndcParam=nadatio\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1.0}\r\nx-powered-by: ASP.NET\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: A090F6A155D749739112930B8AAF11AB Ref B: OSL231050212052 Ref C: 2025-12-31T23:50:52Z\r\ndate: Wed, 31 Dec 2025 23:50:51 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":22045,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3","md5":"a15db0cbc2042ee7f37a10bea20a033b","sha1":"997930bf2d47d402678e16f416a8774791e006df","sha256":"8e111b489fd0365703acd19eb02a002407f0512bff53c8896dbe1bca5946a321","sha512":"c7ac623f4e0dd8b67bcc2355062087459ac77db39e840e113a01b153d1eb41aa7de4cd07008175af13525c653c86c9539a1369c9b1238ef21113725eca8d2023","ssdeep":"384:A7jLnRaPL6V/k3bQCSUPSX9jkNXRqNNdXeWnt62Zln1TxAbVcNKv:gjLnRDOsCSQ8jkNRU9xn311AbVcNKv","tlshash":"c6a2d0a871885387f39da969565533fca146ecf92c54032430c31b7e6a4bacab054c4a","first_seen":"2025-12-31T23:51:27.238577Z","last_seen":"2025-12-31T23:51:27.238577Z","times_seen":1,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":11,"connect":18,"send":0,"wait":43,"receive":1,"ssl":120},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ts2.mm.bing.net/th?id=OIP.id82zFh7Qo7QWG_V-AOcvQHaEK\u0026pid=15.1","fqdn":"ts2.mm.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:51.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mm.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 19 Oct 2025 14:07:53 GMT","end":"Fri, 17 Apr 2026 14:07:53 GMT"},"fingerprint":{"sha1":"87:26:AF:B1:86:84:6C:71:2A:20:8E:FB:BA:96:6F:1E:FC:D0:B5:E2","sha256":"D9:41:70:A4:15:0F:6F:6D:39:7B:E8:22:5C:C3:7C:55:6E:75:E0:81:F9:57:09:A6:0C:12:05:62:BB:94:B4:6E"}}},"request":{"raw":"GET /th?id=OIP.id82zFh7Qo7QWG_V-AOcvQHaEK\u0026pid=15.1 HTTP/1.1\r\nHost: ts2.mm.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=1209600\r\ncontent-length: 16522\r\ncontent-type: image/jpeg\r\nx-cache: TCP_MISS\r\nhttpcacheability: 4\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ntiming-allow-origin: *\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://aefd.nelreports.net/api/report?cat=bingth\u0026ndcParam=nadatio\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1.0}\r\nx-powered-by: ASP.NET\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: FCCBF6861FF549B8B8483AB00B2E4027 Ref B: OSL231050212052 Ref C: 2025-12-31T23:50:51Z\r\ndate: Wed, 31 Dec 2025 23:50:51 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":16522,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3","md5":"9262fb8d8c1369d930a18b4866203916","sha1":"1e4a0068c6b208472ad7e725460e5709f7ae05f8","sha256":"850857d11f8367e034b7c9e5c74c32e637518bf510520892e3ce92e13380084e","sha512":"0b13b877ed09d93083ea04b82aac46c5afbebb959c5f71de2ec2487b916fa324cde503b19a0f026e5d30fce5905f9b405720950cdfea64f4d3cea2f4fdad3463","ssdeep":"384:27gUtfGaWVy/m9AZqtUmBUHrWKBKiN17qEAK4sxM97tBlV:SvfGaWVy/muZq5+DBntAFsO","tlshash":"af72c0dd753e8b32aaf5d219e6dfb8c2704ec839b090744f3331829cd762a650f85994","first_seen":"2025-12-31T23:51:27.239815Z","last_seen":"2025-12-31T23:51:27.239815Z","times_seen":1,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":63,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:52.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 23:50:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 591\r\ncf-ray: 9b6dae7f694e712e-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec1-514\"\r\nlast-modified: Mon, 04 May 2020 16:11:45 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1114280\r\nexpires: Mon, 21 Dec 2026 23:50:52 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=7o28b3zcrpxhcYU7k0OxkN%2FOBu1gujLKMfo5U%2Fm%2F28uo2Nu9pvRdatY4gtCvCKekEgV9KggJcUBeMlxqRb8MDjM9fDkVgqphMe9pdK8VhLYNQWl0PNGcKGctwB6kQqgWYO99dxFG\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1300,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1266)","md5":"4412bf8023109ee9eb1f1f226d391329","sha1":"c273960aa874a87dd022b5e597887142f1b8e34f","sha256":"d40efcac911d8964f3728eaa767de281306ff55ba9377435a3364d4d1e1613f6","sha512":"de3dd553a582e6b3d00782ddd639cb57b29de71afe72af5abef870ab36c7fed68244d511a1e129a0f04af690f27ae9304b1c113c9f1f0e0bd85dde9291a6764c","ssdeep":"","tlshash":"212120987089b815521b9a35677f109bb078ab55d09c40a9c391e4e03f708820d72ef9","first_seen":"2023-03-07T01:14:34Z","last_seen":"2026-04-03T23:02:47.074505Z","times_seen":17719,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":10,"connect":13,"send":0,"wait":14,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/sbar.json?key=acf3b22a6b662089f6bf24e9ab222171\u0026uuid=8d2ec8e3-c911-4363-be90-1959906766e3%3A1%3A1","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:55.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 22:08:08 GMT","end":"Wed, 25 Mar 2026 22:08:07 GMT"},"fingerprint":{"sha1":"BE:03:A2:AD:89:FD:C3:94:0E:B0:AC:88:9E:E3:AD:33:6F:39:72:EA","sha256":"86:5E:AF:03:20:81:8A:65:09:C9:A1:D4:22:8C:8B:1F:82:60:C9:82:6B:01:09:E8:98:E2:F3:DA:A8:3C:D5:71"}}},"request":{"raw":"GET /sbar.json?key=acf3b22a6b662089f6bf24e9ab222171\u0026uuid=8d2ec8e3-c911-4363-be90-1959906766e3%3A1%3A1 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.xxmygirl.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 31 Dec 2025 23:50:56 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 4379\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://www.xxmygirl.com\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=8d2ec8e3-c911-4363-be90-1959906766e3:1:1; expires=Wed, 07 Jan 2026 23:50:55 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Thu, 01 Jan 2026 23:50:56 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Thu, 01 Jan 2026 23:50:56 GMT; path=/; secure; SameSite=None\npdhtkv29=true; expires=Thu, 01 Jan 2026 23:50:56 GMT; path=/; secure; SameSite=None\nuncs29=1; expires=Thu, 01 Jan 2026 23:50:56 GMT; path=/; secure; SameSite=None\nu_pl16620572=1; expires=Thu, 01 Jan 2026 23:50:56 GMT; path=/; secure; SameSite=None\nslecacf3b22a6b662089f6bf24e9ab222171=[6259582]; expires=Wed, 31 Dec 2025 23:51:01 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 216\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: e8bda08afc575ad84cf65a0b282a5c2b\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":5998,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"bcf62cb7c3100efcd8c3a4a0d04c2b60","sha1":"783768daa5a212a96c2f3c6f7e6d27e4c789dbfd","sha256":"9274514e01beaddafb0847cb7af6fd1da873576661012000c5b1530d622d0744","sha512":"8d3752a69253a52b29191268d2f1bdd84f13918ada268075313948ed0db89e3a3a5c557c78a86d9ab21efa5a0e38184595298597a198af7e6f09a0ef6a57c605","ssdeep":"96:9z3DgDbwJMRdErj8QSYS79KW+HSW8eGqD/yXiWxrfnVLmVrfA+dngLWOs:9z30vQMRdErg0bFD/y/xDVLmVrfNn8WJ","tlshash":"65c16edb424d01a45d5f4a40e913edbd1df1180a5b2cb34884ab9befc73945755912cc","first_seen":"2025-12-31T23:51:27.241755Z","last_seen":"2025-12-31T23:51:27.241755Z","times_seen":1,"resource_available":false,"data":null}},"time_used":906,"timings":{"blocked":297,"dns":14,"connect":93,"send":0,"wait":309,"receive":1,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/in-page_push/os/android/2/img/close.png","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"172.67.210.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:56.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:26:15 GMT","end":"Wed, 25 Mar 2026 23:23:44 GMT"},"fingerprint":{"sha1":"05:E7:A3:19:D2:55:91:F8:B7:45:48:72:0B:86:C7:0C:2C:CA:27:03","sha256":"14:76:91:36:84:B6:CF:C4:0A:BA:6F:14:80:F9:C7:77:48:3B:08:A3:C8:48:DC:0F:F6:CE:86:72:BB:CC:0B:06"}}},"request":{"raw":"GET /sb/ssp/in-page_push/os/android/2/img/close.png HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 23:50:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 2005\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"65aa8500-7d5\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 1018908\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RHzrD4g14niSQUAKnSGq%2BPN3v64wrDZHdS5uhQ8Jdbo0L3FteYuATkKRZhOZTKSZZP9vCwW1HYMqo2u0oqKPFnIcoMw9vNb0lX4c4Vw8\"}]}\r\ncf-ray: 9b6dae9899c556b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2005,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 19 x 19, 8-bit/color RGBA, non-interlaced","md5":"2cecae5111d5ff932a996679215ad573","sha1":"f4c63abb5dc373aba5bc144c3831d98516cc7cc9","sha256":"31f6aad6a88eca32f245dc6d0e030ef422f306b4f8479855b30e59b6dc134ebc","sha512":"f1a62cb77df45c07d203b3e4a31964e8267371a6bac6fe45be07cd178c5e1e1815ab4a3586626b616355d653365707eca6d2a2d950614227f017b854f5c1e072","ssdeep":"","tlshash":"ed41b407fba09d106a9df9827de822532b3b17809ac2b542fddd485398f00fa8b5d1c2","first_seen":"2023-04-11T12:56:03Z","last_seen":"2026-03-17T08:11:57.735716Z","times_seen":1549,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ts2.mm.bing.net/th?id=OIP.jubHDBChJTPexGavzVBUewHaEK\u0026pid=15.1","fqdn":"ts2.mm.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:51.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mm.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 19 Oct 2025 14:07:53 GMT","end":"Fri, 17 Apr 2026 14:07:53 GMT"},"fingerprint":{"sha1":"87:26:AF:B1:86:84:6C:71:2A:20:8E:FB:BA:96:6F:1E:FC:D0:B5:E2","sha256":"D9:41:70:A4:15:0F:6F:6D:39:7B:E8:22:5C:C3:7C:55:6E:75:E0:81:F9:57:09:A6:0C:12:05:62:BB:94:B4:6E"}}},"request":{"raw":"GET /th?id=OIP.jubHDBChJTPexGavzVBUewHaEK\u0026pid=15.1 HTTP/1.1\r\nHost: ts2.mm.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=1209600\r\ncontent-length: 16663\r\ncontent-type: image/jpeg\r\nx-cache: TCP_MISS\r\nhttpcacheability: 4\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ntiming-allow-origin: *\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://aefd.nelreports.net/api/report?cat=bingth\u0026ndcParam=nadatio\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1.0}\r\nx-powered-by: ASP.NET\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: 63FE01BD36644E4B9409CD38B14DADB4 Ref B: OSL231050212052 Ref C: 2025-12-31T23:50:51Z\r\ndate: Wed, 31 Dec 2025 23:50:51 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":16663,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3","md5":"a11ce7ea1a01bf0bc6c57cb01434e60f","sha1":"26675e6e2adaf74aa036ae606d947d4a4f104a32","sha256":"08f34cd1a5cc0a3fc5b24f11826c612c6a799e064857c2edd1ef2c6ff91b0e9e","sha512":"a0ac505fe0129367925040be42d89ca03c293713abf6275f67593f66d914eca756590798004a69c67519826f65e25708edd94eb3d4b9d0dda9a9d1e836aef688","ssdeep":"384:j7T6RupBfXWQZMazoFdOtKkPI4YmLtLbcEWAulPxTiepOdM:/eRurJINkPI+tA5fTiDdM","tlshash":"6f72d11baa4dc37aa5cdb136d96d379ad301155029add6333322af0662e0cf7e04865e","first_seen":"2025-12-31T23:51:27.243645Z","last_seen":"2025-12-31T23:51:27.243645Z","times_seen":1,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":75,"dns":0,"connect":0,"send":0,"wait":56,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ts1.mm.bing.net/th?id=OIP.OYwNv5HCGMLTSpTEhByH5QHaEK\u0026pid=15.1","fqdn":"ts1.mm.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.27.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:51.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mm.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 19 Oct 2025 14:07:53 GMT","end":"Fri, 17 Apr 2026 14:07:53 GMT"},"fingerprint":{"sha1":"87:26:AF:B1:86:84:6C:71:2A:20:8E:FB:BA:96:6F:1E:FC:D0:B5:E2","sha256":"D9:41:70:A4:15:0F:6F:6D:39:7B:E8:22:5C:C3:7C:55:6E:75:E0:81:F9:57:09:A6:0C:12:05:62:BB:94:B4:6E"}}},"request":{"raw":"GET /th?id=OIP.OYwNv5HCGMLTSpTEhByH5QHaEK\u0026pid=15.1 HTTP/1.1\r\nHost: ts1.mm.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=1209600\r\ncontent-length: 17271\r\ncontent-type: image/jpeg\r\nx-cache: TCP_MISS\r\nhttpcacheability: 4\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ntiming-allow-origin: *\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://aefd.nelreports.net/api/report?cat=bingth\u0026ndcParam=nadatio\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1.0}\r\nx-powered-by: ASP.NET\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: 9C3AFF10ACCA4106A6D034FD4D158713 Ref B: OSL231050212023 Ref C: 2025-12-31T23:50:51Z\r\ndate: Wed, 31 Dec 2025 23:50:51 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":17271,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3","md5":"09b9ac29f709d8b99a152e336807bd75","sha1":"f6ed1df2a6d88ac1e90882531e413ee4d823eec2","sha256":"3373f206df968e96f05737372dc2c264e7361b5e5bbc2e44f6ea665ae6620ef8","sha512":"bcafb0f0beac22a1d55c63626ab461077dae72ad3300b6a9962dade117e67caa03d0a91ef6453a5160576449b73d807335a20729eb8557543f990d971e19c03c","ssdeep":"384:T7G7IFAX41lRZEutgx3C7gYBYeVZI9PeL31HB/WgsFmw:vGcFAo1NEigx3C7gm9ixrgsN","tlshash":"e172d097790e2710bbd8a3a5dbffb314c5f543a0b1206d64b9316aaa6f160345c04f52","first_seen":"2025-12-31T23:51:27.244746Z","last_seen":"2025-12-31T23:51:27.244746Z","times_seen":1,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":3,"connect":2,"send":0,"wait":58,"receive":1,"ssl":101},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ts1.mm.bing.net/th?id=OIP.RJ9cwul0WRz--C1llutiJwHaEK\u0026pid=15.1","fqdn":"ts1.mm.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.27.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:51.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mm.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 19 Oct 2025 14:07:53 GMT","end":"Fri, 17 Apr 2026 14:07:53 GMT"},"fingerprint":{"sha1":"87:26:AF:B1:86:84:6C:71:2A:20:8E:FB:BA:96:6F:1E:FC:D0:B5:E2","sha256":"D9:41:70:A4:15:0F:6F:6D:39:7B:E8:22:5C:C3:7C:55:6E:75:E0:81:F9:57:09:A6:0C:12:05:62:BB:94:B4:6E"}}},"request":{"raw":"GET /th?id=OIP.RJ9cwul0WRz--C1llutiJwHaEK\u0026pid=15.1 HTTP/1.1\r\nHost: ts1.mm.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=1209600\r\ncontent-length: 15507\r\ncontent-type: image/jpeg\r\nx-cache: TCP_MISS\r\nhttpcacheability: 4\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ntiming-allow-origin: *\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://aefd.nelreports.net/api/report?cat=bingth\u0026ndcParam=nadatio\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1.0}\r\nx-powered-by: ASP.NET\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: DE3007C9DBC944C0A2330D0B37B41E23 Ref B: OSL231050212023 Ref C: 2025-12-31T23:50:51Z\r\ndate: Wed, 31 Dec 2025 23:50:51 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":15507,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3","md5":"0ebcd11afed434280d3a9a33cbb3b266","sha1":"14e4a08fc36d23177c06b0d665b79032a21ca362","sha256":"1e003d427b8506db080777c67e784f122e91e0e0b4f3708afb2e90bb6c9592e5","sha512":"cb52ae86a66c7c010f84bd6bbbc1f60e14afce5160e61c5ffbc03b55b45069b8313f30fc6d793177d1000d766a783bf7138cb2314d67df2bc8ca9bbfcf39e954","ssdeep":"384:A7ztus8Z+9FZh5iesOGmHQbsxxgwVHU2Rlh:ghF5ieAMQAxeeHHh","tlshash":"5e62cf87076f86d4fccef3ed85ec3e0d82c5f4986049e34e6956a035aad0b964f06693","first_seen":"2025-12-31T23:51:27.2457Z","last_seen":"2025-12-31T23:51:27.2457Z","times_seen":1,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":69,"dns":0,"connect":0,"send":0,"wait":54,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yy610eoghin9.s4.adsco.re/","fqdn":"yy610eoghin9.s4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"185.200.116.60","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:53.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.s4.adsco.re","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Nov 2025 09:14:21 GMT","end":"Wed, 11 Feb 2026 09:14:20 GMT"},"fingerprint":{"sha1":"7A:03:26:53:17:4A:DA:4B:6B:97:17:4A:3D:39:18:9E:5A:E0:99:3D","sha256":"BC:B6:01:45:97:52:31:7E:50:44:A4:6C:B3:E7:A3:3D:8E:5A:1E:32:79:2D:E0:BF:94:ED:5C:36:3A:0D:94:6E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: yy610eoghin9.s4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.xxmygirl.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 23:50:54 GMT\r\ncontent-type: text/html\r\ncontent-length: 0\r\nlast-modified: Tue, 03 Oct 2023 13:29:59 GMT\r\netag: \"651c1757-0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T23:31:02.874036Z","times_seen":13307549,"resource_available":true,"data":null}},"time_used":1962,"timings":{"blocked":884,"dns":333,"connect":183,"send":0,"wait":188,"receive":0,"ssl":370},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ts3.mm.bing.net/th?id=OIP.uANiUoqPdCXzJ58GFzXbdwHaEK\u0026pid=15.1","fqdn":"ts3.mm.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:51.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mm.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 19 Oct 2025 14:07:53 GMT","end":"Fri, 17 Apr 2026 14:07:53 GMT"},"fingerprint":{"sha1":"87:26:AF:B1:86:84:6C:71:2A:20:8E:FB:BA:96:6F:1E:FC:D0:B5:E2","sha256":"D9:41:70:A4:15:0F:6F:6D:39:7B:E8:22:5C:C3:7C:55:6E:75:E0:81:F9:57:09:A6:0C:12:05:62:BB:94:B4:6E"}}},"request":{"raw":"GET /th?id=OIP.uANiUoqPdCXzJ58GFzXbdwHaEK\u0026pid=15.1 HTTP/1.1\r\nHost: ts3.mm.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=1209600\r\ncontent-length: 19039\r\ncontent-type: image/jpeg\r\nx-cache: TCP_MISS\r\nhttpcacheability: 4\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ntiming-allow-origin: *\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://aefd.nelreports.net/api/report?cat=bingth\u0026ndcParam=nadatio\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1.0}\r\nx-powered-by: ASP.NET\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: 810E69922D5548C99F27B696D53EEA9B Ref B: OSL231050212052 Ref C: 2025-12-31T23:50:51Z\r\ndate: Wed, 31 Dec 2025 23:50:51 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":19039,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3","md5":"a2593429e9c36b6d7d72e07d2ee30449","sha1":"c115a7a9624c5f70df6744ae53018b617b643051","sha256":"c43e3939de3a7a0ea5400f45a83d0f33fd848dea7046af0ce6e3f46f526addaf","sha512":"7576889f2868b23eafab3d85d014539e620af71ddddb96ab20a922eeb91c35c5aca784e2e788b07d3d931d433ab867e3da5ccbe8cf42f32181401f3876a511dc","ssdeep":"384:q7Jkwt2ORlCr1/vYP3unBXzmLRIKj839v2ELrUT2PAIF6IT4gm5dZrxqH2NBp:+JFHC1/CuwANyT6AyhT4fWHsp","tlshash":"e382d0e6debe33b193e6d4b9222c3f41991686136b253750d8710cbe4512b917f23f1a","first_seen":"2025-12-31T23:51:27.246835Z","last_seen":"2025-12-31T23:51:27.246835Z","times_seen":1,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":73,"dns":0,"connect":0,"send":0,"wait":73,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/ren.gif?sid=H4sIAAAAAAAC_1RSz2skRRit3sSTB3VdFEFhDh4UzKR_TWfaBaPZNRKMSchmycGDVHVVT8r0dLVV3dOTOUg0oHvM3jx46LxJNqhB3MvehGXiLSDsCEIOG4T9E4S9CTKTgdUP6vvex6vDe6_qm4Pigngo6PnaJ6onk4TONup27a1NmXJVmtrKRs2x6_b12qZMA_96rTtquvOu4_l1--3aRyLaVrOu7di2Yzu1RalFrLqzYxYyOwmdemjXfbfuNHx09f93U1gw1ALvXJCrkHz4wpP4U8hogLT9y01htnOVvfNhu0horjQ6_Ph2up2qMkX7GYy1hTg9ntyGMkNCvrsClR5PHEB1DkcOwOSQXHnlMVh6PJEJ1jm6VMoSiBSMP4-yM4BIBpB0gEjtQfJHBIg4VlaRtu-tKF3SnUuWjtghmX76N2Q5JNOPryFt_7yQyG7tlkqKXKrUoBtXkN0BZGuArDhF3rMgy1NE-deQ_Hcy-3QZaftw1SQKkp-_2eSuiJrCm4lCx5nxvcCbYSK0Z5ywEYZ2MBcEwhtHJOMBqLFQjI60UMQWisxCm5_XfLvpRw71gjjk0ZztU9_ngtlh07VtGkZzKKKvIPk-Ir2LTO9iW9591LgKXTyE2apguAWTE3R4hVIQlIagpASlJChzgrJTHfHEuKa6xxNTMGcy3cn0qr7KWwf0SOUtkRJQvQ_Nq0OZfWH2EOVT_V5seF-NGmV51aeMVwfZBXlpnOg_37-ObXFeo1HsMdelAQsC126GccBi1xchZa7rOnMOjKwgzZVxDj05JK-ZB8jkkJBv3wejpzDJKSL5ImjxBmhZgW5V6KUnRnR3WknRq0eqDa4qZPk08h3rILkgL_fXNxYejmV8tvclRHQ2_8QbFyJdIdMVPpe_EbSSO_11VZLDdVUacn81y2Vb9ujo0W_lNBdTP34sdkql-dJNs__DB9GIGMGTDWHyZZpymbYM-WlBci70otKRIL8umU3B1gqztVDotMiW124sLrUzLYyRKh2Ajpzdfw6RHJJrN94bf-ig-SqibBcmO5v_Mx4XjCJgmYVEEiTijEwKlFUw_9nZM3xg7qClLdB8D2m7QkdX6CQVaLIPU0z180yfzf8xyYElVp8l2jpkiU7uXuZk5Hmt4TIvaDYDEQc89rjnejxs2CL0aRj4od9Aboby9oO__g0AAP__h3hstnMEAAA=","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:56.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 22:08:08 GMT","end":"Wed, 25 Mar 2026 22:08:07 GMT"},"fingerprint":{"sha1":"BE:03:A2:AD:89:FD:C3:94:0E:B0:AC:88:9E:E3:AD:33:6F:39:72:EA","sha256":"86:5E:AF:03:20:81:8A:65:09:C9:A1:D4:22:8C:8B:1F:82:60:C9:82:6B:01:09:E8:98:E2:F3:DA:A8:3C:D5:71"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSz2skRRit3sSTB3VdFEFhDh4UzKR_TWfaBaPZNRKMSchmycGDVHVVT8r0dLVV3dOTOUg0oHvM3jx46LxJNqhB3MvehGXiLSDsCEIOG4T9E4S9CTKTgdUP6vvex6vDe6_qm4Pigngo6PnaJ6onk4TONup27a1NmXJVmtrKRs2x6_b12qZMA_96rTtquvOu4_l1--3aRyLaVrOu7di2Yzu1RalFrLqzYxYyOwmdemjXfbfuNHx09f93U1gw1ALvXJCrkHz4wpP4U8hogLT9y01htnOVvfNhu0horjQ6_Ph2up2qMkX7GYy1hTg9ntyGMkNCvrsClR5PHEB1DkcOwOSQXHnlMVh6PJEJ1jm6VMoSiBSMP4-yM4BIBpB0gEjtQfJHBIg4VlaRtu-tKF3SnUuWjtghmX76N2Q5JNOPryFt_7yQyG7tlkqKXKrUoBtXkN0BZGuArDhF3rMgy1NE-deQ_Hcy-3QZaftw1SQKkp-_2eSuiJrCm4lCx5nxvcCbYSK0Z5ywEYZ2MBcEwhtHJOMBqLFQjI60UMQWisxCm5_XfLvpRw71gjjk0ZztU9_ngtlh07VtGkZzKKKvIPk-Ir2LTO9iW9591LgKXTyE2apguAWTE3R4hVIQlIagpASlJChzgrJTHfHEuKa6xxNTMGcy3cn0qr7KWwf0SOUtkRJQvQ_Nq0OZfWH2EOVT_V5seF-NGmV51aeMVwfZBXlpnOg_37-ObXFeo1HsMdelAQsC126GccBi1xchZa7rOnMOjKwgzZVxDj05JK-ZB8jkkJBv3wejpzDJKSL5ImjxBmhZgW5V6KUnRnR3WknRq0eqDa4qZPk08h3rILkgL_fXNxYejmV8tvclRHQ2_8QbFyJdIdMVPpe_EbSSO_11VZLDdVUacn81y2Vb9ujo0W_lNBdTP34sdkql-dJNs__DB9GIGMGTDWHyZZpymbYM-WlBci70otKRIL8umU3B1gqztVDotMiW124sLrUzLYyRKh2Ajpzdfw6RHJJrN94bf-ig-SqibBcmO5v_Mx4XjCJgmYVEEiTijEwKlFUw_9nZM3xg7qClLdB8D2m7QkdX6CQVaLIPU0z180yfzf8xyYElVp8l2jpkiU7uXuZk5Hmt4TIvaDYDEQc89rjnejxs2CL0aRj4od9Aboby9oO__g0AAP__h3hstnMEAAA= HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nCookie: uid_id2=8d2ec8e3-c911-4363-be90-1959906766e3:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl16620572=1; slecacf3b22a6b662089f6bf24e9ab222171=[6259582]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 31 Dec 2025 23:50:56 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nvary: Origin\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 329a41109888585cc99808ba2947856b\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T23:31:02.874036Z","times_seen":13307549,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":67,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ts1.mm.bing.net/th?id=OIP.hWAGqxHL5sJLgn9zbvHV4AHaLH\u0026pid=15.1","fqdn":"ts1.mm.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.27.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:51.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mm.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 19 Oct 2025 14:07:53 GMT","end":"Fri, 17 Apr 2026 14:07:53 GMT"},"fingerprint":{"sha1":"87:26:AF:B1:86:84:6C:71:2A:20:8E:FB:BA:96:6F:1E:FC:D0:B5:E2","sha256":"D9:41:70:A4:15:0F:6F:6D:39:7B:E8:22:5C:C3:7C:55:6E:75:E0:81:F9:57:09:A6:0C:12:05:62:BB:94:B4:6E"}}},"request":{"raw":"GET /th?id=OIP.hWAGqxHL5sJLgn9zbvHV4AHaLH\u0026pid=15.1 HTTP/1.1\r\nHost: ts1.mm.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=1209600\r\ncontent-length: 29615\r\ncontent-type: image/jpeg\r\nx-cache: TCP_MISS\r\nhttpcacheability: 4\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ntiming-allow-origin: *\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://aefd.nelreports.net/api/report?cat=bingth\u0026ndcParam=nadatio\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1.0}\r\nx-powered-by: ASP.NET\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: 72BF855E2F534919B5DD223AB3C480A2 Ref B: OSL231050212023 Ref C: 2025-12-31T23:50:51Z\r\ndate: Wed, 31 Dec 2025 23:50:51 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":29615,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x711, components 3","md5":"f643f7dd28eab85fd39bad2189ded5cf","sha1":"131b906ffa67b011b2ab7982baf4fb356e932cba","sha256":"c40231d0a0799b2dc23e36fbb8a5bff630cff404698f66cc444de778fa20880d","sha512":"d6e8604188ced70b57982919301f5b8d4689a77eca5649c79b278d9bf3717f5feb46fcf50b5a509902aac66a50f79cbb725414873d975ac6adc44138fd4a7547","ssdeep":"768:IAl/cPAusuGfMyuGs3ea+Ls6ddSj30ReZg+AAKSORTXbfp1:IAl/TuoMqrSoRe+nRXbn","tlshash":"55d2e14f676d190bb7f760bb693e71119a2ab30d2212fbb5e417cd1a491908cdc2f0da","first_seen":"2025-12-31T23:51:27.247966Z","last_seen":"2025-12-31T23:51:27.247966Z","times_seen":1,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":74,"dns":0,"connect":0,"send":0,"wait":38,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ts1.mm.bing.net/th?id=OIP.m8A2R_MjTspiW9SDwEIGvwHaEK\u0026pid=15.1","fqdn":"ts1.mm.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.27.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:51.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mm.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 19 Oct 2025 14:07:53 GMT","end":"Fri, 17 Apr 2026 14:07:53 GMT"},"fingerprint":{"sha1":"87:26:AF:B1:86:84:6C:71:2A:20:8E:FB:BA:96:6F:1E:FC:D0:B5:E2","sha256":"D9:41:70:A4:15:0F:6F:6D:39:7B:E8:22:5C:C3:7C:55:6E:75:E0:81:F9:57:09:A6:0C:12:05:62:BB:94:B4:6E"}}},"request":{"raw":"GET /th?id=OIP.m8A2R_MjTspiW9SDwEIGvwHaEK\u0026pid=15.1 HTTP/1.1\r\nHost: ts1.mm.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=1209600\r\ncontent-length: 16654\r\ncontent-type: image/jpeg\r\nx-cache: TCP_MISS\r\nhttpcacheability: 4\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ntiming-allow-origin: *\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://aefd.nelreports.net/api/report?cat=bingth\u0026ndcParam=nadatio\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1.0}\r\nx-powered-by: ASP.NET\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: D1EA5AE338644B53942E38EA6F22EA01 Ref B: OSL231050212023 Ref C: 2025-12-31T23:50:51Z\r\ndate: Wed, 31 Dec 2025 23:50:51 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":16654,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3","md5":"95dd0ed7b8fafc707a761ce9e0f4724d","sha1":"a93792e3dc2596d3038007905c8e98478e9d0dd0","sha256":"4ab13daf2a15122865fe2001beb55ab7aba4fa38a876256bc118d03f1c05ca3f","sha512":"e0405099a9f0e2b1b0cd8cbe33db9dd5c46c0d0c640c3d9036b463b8e01ea168f7dbb5fe63ae2a468ac5a2a62c95acb6040d95f0792f1170203cc885d39c4e40","ssdeep":"192:P7dNnLdXxkjF2w734OJobkuXLay8bQj7WxA7m92zOdejkdF3ejvThH59KgouFniD:P7XnkjrLjmTXLkbY7ZadfF3ezQy5lp/S","tlshash":"5e72c08b2e5c3304d4e30776009f32e2f6468592bb996a1150dd0ff72752cf969694af","first_seen":"2025-12-31T23:51:27.249513Z","last_seen":"2025-12-31T23:51:27.249513Z","times_seen":1,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":65,"dns":0,"connect":0,"send":0,"wait":121,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ts3.mm.bing.net/th?id=OIP.ykH23XHIFvqg_-uH4dcq6gHaEK\u0026pid=15.1","fqdn":"ts3.mm.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:51.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mm.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 19 Oct 2025 14:07:53 GMT","end":"Fri, 17 Apr 2026 14:07:53 GMT"},"fingerprint":{"sha1":"87:26:AF:B1:86:84:6C:71:2A:20:8E:FB:BA:96:6F:1E:FC:D0:B5:E2","sha256":"D9:41:70:A4:15:0F:6F:6D:39:7B:E8:22:5C:C3:7C:55:6E:75:E0:81:F9:57:09:A6:0C:12:05:62:BB:94:B4:6E"}}},"request":{"raw":"GET /th?id=OIP.ykH23XHIFvqg_-uH4dcq6gHaEK\u0026pid=15.1 HTTP/1.1\r\nHost: ts3.mm.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=1209600\r\ncontent-length: 14979\r\ncontent-type: image/jpeg\r\nx-cache: TCP_MISS\r\nhttpcacheability: 4\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ntiming-allow-origin: *\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://aefd.nelreports.net/api/report?cat=bingth\u0026ndcParam=nadatio\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1.0}\r\nx-powered-by: ASP.NET\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: B9EB724EC203490B9BA6AF5165CF5061 Ref B: OSL231050212052 Ref C: 2025-12-31T23:50:51Z\r\ndate: Wed, 31 Dec 2025 23:50:51 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":14979,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3","md5":"4f477f3ee87c91a7aea8b5dbfeb1d722","sha1":"97836b5b6e958a285a0174a8e9727abfa64e72dd","sha256":"61dc07052dc7d3b0deb01739c2c4dde8c5869e5caf1856f393eca49067c01c1b","sha512":"d401fd90f0c056a33b9cde1db6c9ed6bb56842e43e0e8fabbd6fac5bcc5c57114c2dd830339d033379dee52d7048a4cbacf242dd34b6db19e41d65b806b78619","ssdeep":"192:r7tnziGw9y9Bu8tm8koKNum2v/pQj6ZCcPqZR+tkCqeW2AiSMsEiERCBvHKPbu5x:r7JiGw9JUm8knWROMqZR7CD7Sxcu+bA","tlshash":"b162d1c7567d87045c7dce7b4c8fbb5af700e902daa29d4116a38aa27d211c28592ceb","first_seen":"2025-12-31T23:51:27.250682Z","last_seen":"2025-12-31T23:51:27.250682Z","times_seen":1,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":73,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xxmygirl.com/themes/images/ajax-loader.gif","fqdn":"www.xxmygirl.com","domain":"xxmygirl.com","tld":"com"},"ip":{"addr":"104.21.16.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:51.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxmygirl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 12:10:29 GMT","end":"Mon, 09 Feb 2026 13:09:16 GMT"},"fingerprint":{"sha1":"6B:EB:7A:AD:65:BC:A2:EA:19:0C:22:14:2D:97:8B:2D:E8:05:D8:5B","sha256":"C7:38:A9:16:95:A0:F3:B2:EF:4F:3B:F9:E8:92:F9:39:EB:71:B6:0E:D2:59:5A:BC:22:16:10:A8:5B:B5:BC:DB"}}},"request":{"raw":"GET /themes/images/ajax-loader.gif HTTP/1.1\r\nHost: www.xxmygirl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/themes/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\ndate: Wed, 31 Dec 2025 23:50:51 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ljb%2F6JDsrFGNwvHhl%2FzWynF78VFE67Rhs8%2FQvha1tnQDAxE29nRiVz4eG7MbS3QYbKYZYrE%2FW2YpX322mQ%2FS%2BhK3eqrLursSGJJtVqZk\"}]}\r\ncf-ray: 9b6dae7eaa1556a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-03T23:20:09.885196Z","times_seen":115503,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.xxmygirl.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"3.120.91.143","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:54.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"traffinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Fri, 18 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"11:9F:BE:35:27:7B:7B:85:C9:B3:FF:0E:CA:F6:0D:13:B0:A9:A0:BB","sha256":"81:A4:38:32:0D:BC:66:C8:7B:6D:08:BC:93:91:76:73:A2:BD:D0:53:3C:BF:2F:FD:B8:87:00:C6:EC:3B:6C:77"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.xxmygirl.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 23:50:54 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://www.xxmygirl.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=8d2ec8e3-c911-4363-be90-1959906766e3:1:1; expires=Sat, 29 Dec 2035 23:50:54 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"64dcdc320df7abae64e3430670139639","sha1":"7cfd1c147d9ad36e141e24d31941c8f6dc154c42","sha256":"c2e843edfc669ede72da7e311ad326a43af3a23cc014fa8c19b914d34d0c3dd7","sha512":"9b9cc7e54411f05b981a5182982f83a0d363c87eb00a6656072783bfc15ae9bd782e1480bad5102e9d853d65d6784a1a1c5c8f181385fb85c6f3ded6c739c0f8","ssdeep":"","tlshash":"cf9004704d53731574d7fd33f5514103c7503047401d00300313d705305d3143075415","first_seen":"2025-12-31T23:51:27.252561Z","last_seen":"2025-12-31T23:51:27.252561Z","times_seen":1,"resource_available":false,"data":null}},"time_used":663,"timings":{"blocked":326,"dns":11,"connect":32,"send":0,"wait":21,"receive":0,"ssl":265},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-sb.com/sb/au/e1/6f/bb/e16fbbe9f31c82c23d1d57f9726b5fc7/1654616215.html","fqdn":"cdn.show-sb.com","domain":"show-sb.com","tld":"com"},"ip":{"addr":"104.21.95.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:55.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-sb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 18:32:18 GMT","end":"Fri, 06 Mar 2026 19:30:50 GMT"},"fingerprint":{"sha1":"9A:CB:17:6D:8B:24:6D:0F:99:B5:FD:4A:00:CB:D3:DE:2B:8E:84:93","sha256":"3B:72:94:40:4C:CD:DE:97:5A:DF:6C:E1:90:81:0D:BF:33:9E:10:3C:16:3A:61:15:FF:65:B0:6B:5D:34:32:21"}}},"request":{"raw":"GET /sb/au/e1/6f/bb/e16fbbe9f31c82c23d1d57f9726b5fc7/1654616215.html HTTP/1.1\r\nHost: cdn.show-sb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.xxmygirl.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 23:50:55 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 07 Jun 2022 15:37:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pVdGJIrHBGmupTPHv%2Bto5OMC7Y0aVD4xxDTjJ%2B5wzTbun6CPBSOSJavYXZ0TGDWkW8ZieicVK9GNzseRwpyjnt7jFawd8gvFc99R%2Fhk%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b6dae949e0f56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1038,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"3069039fb65877459a52e10be8c00f66","sha1":"15fca88fa2ad1344333421bd691cb4345923c214","sha256":"6bd6d71714163cd6c64ee6f1f318b16db90f93e6b09d6ea925a54a1dba92851e","sha512":"ac070d5917627b1a4ccea03d7005f39b36fd3548ceade646c7313dcd370cea680410f8e963445aedadedf4178eceda028030782b547c8ad3d008d11329a935f4","ssdeep":"","tlshash":"64114c252ef8c4b300969090bb357f1fec80e283984f6940b3bc45659f9ade6cd9380b","first_seen":"2023-04-06T22:23:51Z","last_seen":"2026-03-17T08:11:57.702991Z","times_seen":1373,"resource_available":false,"data":null}},"time_used":540,"timings":{"blocked":28,"dns":3,"connect":1,"send":0,"wait":487,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=24.48.4990\u0026tmpl=810\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Fin-page_push%2Fos%2Fandroid%2F2%2Fcss%2Fstyle.css\u0026l=4682\u0026fd=48","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:56.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 22:08:08 GMT","end":"Wed, 25 Mar 2026 22:08:07 GMT"},"fingerprint":{"sha1":"BE:03:A2:AD:89:FD:C3:94:0E:B0:AC:88:9E:E3:AD:33:6F:39:72:EA","sha256":"86:5E:AF:03:20:81:8A:65:09:C9:A1:D4:22:8C:8B:1F:82:60:C9:82:6B:01:09:E8:98:E2:F3:DA:A8:3C:D5:71"}}},"request":{"raw":"GET /pixel/sbls?bv=24.48.4990\u0026tmpl=810\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Fin-page_push%2Fos%2Fandroid%2F2%2Fcss%2Fstyle.css\u0026l=4682\u0026fd=48 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 31 Dec 2025 23:50:56 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T23:31:02.874036Z","times_seen":13307549,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":97,"dns":0,"connect":0,"send":0,"wait":95,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ts3.mm.bing.net/th?id=OIP.fBnwT9odBddDMMWWbis4WgAAAA\u0026pid=15.1","fqdn":"ts3.mm.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:51.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mm.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 19 Oct 2025 14:07:53 GMT","end":"Fri, 17 Apr 2026 14:07:53 GMT"},"fingerprint":{"sha1":"87:26:AF:B1:86:84:6C:71:2A:20:8E:FB:BA:96:6F:1E:FC:D0:B5:E2","sha256":"D9:41:70:A4:15:0F:6F:6D:39:7B:E8:22:5C:C3:7C:55:6E:75:E0:81:F9:57:09:A6:0C:12:05:62:BB:94:B4:6E"}}},"request":{"raw":"GET /th?id=OIP.fBnwT9odBddDMMWWbis4WgAAAA\u0026pid=15.1 HTTP/1.1\r\nHost: ts3.mm.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=1209600\r\ncontent-length: 15117\r\ncontent-type: image/jpeg\r\nx-cache: TCP_MISS\r\nhttpcacheability: 4\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ntiming-allow-origin: *\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://aefd.nelreports.net/api/report?cat=bingth\u0026ndcParam=nadatio\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1.0}\r\nx-powered-by: ASP.NET\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: 43E6485D2F6640CF916F54B065CE6FD2 Ref B: OSL231050212052 Ref C: 2025-12-31T23:50:52Z\r\ndate: Wed, 31 Dec 2025 23:50:51 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":15117,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 352x198, components 3","md5":"fccbc97dfd42d8944cf5a0a31228b0d4","sha1":"bbd0ad517b3c0cb37927dbaed026cf9c2dd9b13d","sha256":"69fbf2a0fcd0896356f3abe98892970b43c12bf335300dcb2b73f9785bb598aa","sha512":"9da95eaebb51dd33eeefc56fff936b59c24afcbf8e3be35eee85d8bc733807d8ba11a60e1bc9fe4db0c32360b9ce9c4b1095caf3295e0a74874821932ce75180","ssdeep":"384:beq5/J3zp219jvfpzMiUxjlThu1AjXsx7J1T+OFEVWkP7b3kTu:yIivfP6848HTJEnP7b","tlshash":"fb62c0e4679ca321c8e884fca75ff09b9b1edac42df15e6fa42885b40701576a0c5ce4","first_seen":"2025-12-31T23:51:27.254384Z","last_seen":"2025-12-31T23:51:27.254384Z","times_seen":1,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":172,"dns":25,"connect":2,"send":0,"wait":35,"receive":0,"ssl":144},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ts3.mm.bing.net/th?id=OIP.AH24kdl4RRRoVDx7yWmkDQHaEK\u0026pid=15.1","fqdn":"ts3.mm.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:51.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mm.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 19 Oct 2025 14:07:53 GMT","end":"Fri, 17 Apr 2026 14:07:53 GMT"},"fingerprint":{"sha1":"87:26:AF:B1:86:84:6C:71:2A:20:8E:FB:BA:96:6F:1E:FC:D0:B5:E2","sha256":"D9:41:70:A4:15:0F:6F:6D:39:7B:E8:22:5C:C3:7C:55:6E:75:E0:81:F9:57:09:A6:0C:12:05:62:BB:94:B4:6E"}}},"request":{"raw":"GET /th?id=OIP.AH24kdl4RRRoVDx7yWmkDQHaEK\u0026pid=15.1 HTTP/1.1\r\nHost: ts3.mm.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=1209600\r\ncontent-length: 16024\r\ncontent-type: image/jpeg\r\nx-cache: TCP_MISS\r\nhttpcacheability: 4\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ntiming-allow-origin: *\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://aefd.nelreports.net/api/report?cat=bingth\u0026ndcParam=nadatio\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1.0}\r\nx-powered-by: ASP.NET\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: D99F84A8B60F4BE3A31DBD57CE122D85 Ref B: OSL231050212052 Ref C: 2025-12-31T23:50:51Z\r\ndate: Wed, 31 Dec 2025 23:50:51 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":16024,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3","md5":"81cf6f7e833158dba9771a8cdb0139b0","sha1":"99146045452a4e24251a55f180c637713ba28ef3","sha256":"b7e7a86864d1a57201c5ac60dd2e6b19ff58fdbe8cad37f20024f3e5f880e4d8","sha512":"43c39ad43367e85c29e3f26218c08bff34fdc590014df5b6e410298f0ce3e745ee6432980fee3adadf553b9506362e633810dcbc5aded88f55823e274e6132ba","ssdeep":"384:v7aCJ0dOc5CGsSQZK0DwmjVG2g3oHDBpcEayC411kC:TLzDGv4Hnc6B","tlshash":"8f72d1f2499f2b458afe757d404c1f9a0f69a4a5559e023cdc21c22258d2e93dc1b4fc","first_seen":"2025-12-31T23:51:27.25544Z","last_seen":"2025-12-31T23:51:27.25544Z","times_seen":1,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":69,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ts1.mm.bing.net/th?id=OIP.HAE_XGUInV6zcfsu7wII5AHaEK\u0026pid=15.1","fqdn":"ts1.mm.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.27.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:51.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mm.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 19 Oct 2025 14:07:53 GMT","end":"Fri, 17 Apr 2026 14:07:53 GMT"},"fingerprint":{"sha1":"87:26:AF:B1:86:84:6C:71:2A:20:8E:FB:BA:96:6F:1E:FC:D0:B5:E2","sha256":"D9:41:70:A4:15:0F:6F:6D:39:7B:E8:22:5C:C3:7C:55:6E:75:E0:81:F9:57:09:A6:0C:12:05:62:BB:94:B4:6E"}}},"request":{"raw":"GET /th?id=OIP.HAE_XGUInV6zcfsu7wII5AHaEK\u0026pid=15.1 HTTP/1.1\r\nHost: ts1.mm.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=1209600\r\ncontent-length: 21649\r\ncontent-type: image/jpeg\r\nx-cache: TCP_MISS\r\nhttpcacheability: 4\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ntiming-allow-origin: *\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://aefd.nelreports.net/api/report?cat=bingth\u0026ndcParam=nadatio\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1.0}\r\nx-powered-by: ASP.NET\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: B41F3C49C3334A04BF31F6DDBEA2131E Ref B: OSL231050212023 Ref C: 2025-12-31T23:50:51Z\r\ndate: Wed, 31 Dec 2025 23:50:51 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":21649,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3","md5":"f973dc071cf0fb1034ee83760c221fd2","sha1":"aaefdc78399004356887e4925bd6aee7828af338","sha256":"605a9e621b0ceeb0d4898b6184d37f957433c717df1c0939aeceeafbe57e15ad","sha512":"59ce22f5f818bf694fe1ae06034eec7180a72e008ab9e00d7da67d91c57e88cbadb7e1b28e78243fa23108d8e958bd7a882b13407a5dee266cd6340fc85553c5","ssdeep":"384:M7YffW3HgCJ34wTIJGdQtZuoXz62zAk1zikTLwmtk3FJk3c9zctDBAnv2bYQuH:UKfW3HZZ/QXuv20Wl0mtk3FJJu8uYP","tlshash":"9ba2d0a7bd6ca386b5fd4d676f0f342997dd4f1b320c281d0150881b4c21586b85cbe7","first_seen":"2025-12-31T23:51:27.256575Z","last_seen":"2025-12-31T23:51:27.256575Z","times_seen":1,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":72,"dns":0,"connect":0,"send":0,"wait":71,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xxmygirl.com/themes/javascript/jquery.masonry.min.js","fqdn":"www.xxmygirl.com","domain":"xxmygirl.com","tld":"com"},"ip":{"addr":"104.21.16.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:52.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxmygirl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 12:10:29 GMT","end":"Mon, 09 Feb 2026 13:09:16 GMT"},"fingerprint":{"sha1":"6B:EB:7A:AD:65:BC:A2:EA:19:0C:22:14:2D:97:8B:2D:E8:05:D8:5B","sha256":"C7:38:A9:16:95:A0:F3:B2:EF:4F:3B:F9:E8:92:F9:39:EB:71:B6:0E:D2:59:5A:BC:22:16:10:A8:5B:B5:BC:DB"}}},"request":{"raw":"GET /themes/javascript/jquery.masonry.min.js HTTP/1.1\r\nHost: www.xxmygirl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/sexlist/brima-tiffany.htm\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 8687\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=2678400\r\nexpires: Mon, 19 Jan 2026 19:47:41 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 23 Mar 2021 09:05:31 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\npriority: u=3,i=?0\r\ndate: Wed, 31 Dec 2025 23:50:52 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nage: 964990\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7FaEWxfQH0K4jp9FoU34O1cse2mDtD%2B8OX4%2BpsJPi0XMECByLRLWcyco71OedhFFyeYpFaqSPjYsNVW6L0jWDNLfqt1fmhP47EQcBEWq\"}]}\r\ncf-ray: 9b6dae7f1a1b56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28040,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (25114)","md5":"d5e1c2523f4fbb7c9dc8b44309063add","sha1":"0b123f011142d59a3a859b05d810d0d6840f6454","sha256":"ddbf7266fc9d3a0ecf1cda38a39165fe97717ab8b3a3d51ba4e627e826dfb159","sha512":"084cd06c437191b71251b971af62224c5b74da9733acadbca8f75ffda543bba7577c440306d9250815990ede7bef4d25fe88b190a6a5a743d25cfa676edb898c","ssdeep":"768:NX+z0BF+frvghzgbPyRnUPICjfbRZINfX:NKyEbPOUf4l","tlshash":"41c2f94a7740b4249347b1a6a5af010fb23ba4ade90d94fcb285d8fa6db1c5c1137f39","first_seen":"2025-11-13T00:28:09.157397Z","last_seen":"2026-03-12T21:53:02.249758Z","times_seen":63,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.xxmygirl.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4.adsco.re/","fqdn":"4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:53.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.xxmygirl.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 31 Dec 2025 23:50:53 GMT\r\nContent-Type: text/plain;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Methods: GET, HEAD, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type\r\nAccess-Control-Allow-Origin: https://www.xxmygirl.com\r\nAccess-Control-Expose-Headers: *\r\nAccess-Control-Max-Age: 2592000\r\nCache-Control: private, max-age=300, immutable, stale-if-error=300, stale-while-revalidate=300\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":93,"dns":5,"connect":26,"send":0,"wait":29,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=24.48.4990\u0026tmpl=810\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Fin-page_push%2Fos%2Fandroid%2F2%2Fcss%2Fanimate.css\u0026l=78689\u0026fd=49","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:56.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 22:08:08 GMT","end":"Wed, 25 Mar 2026 22:08:07 GMT"},"fingerprint":{"sha1":"BE:03:A2:AD:89:FD:C3:94:0E:B0:AC:88:9E:E3:AD:33:6F:39:72:EA","sha256":"86:5E:AF:03:20:81:8A:65:09:C9:A1:D4:22:8C:8B:1F:82:60:C9:82:6B:01:09:E8:98:E2:F3:DA:A8:3C:D5:71"}}},"request":{"raw":"GET /pixel/sbls?bv=24.48.4990\u0026tmpl=810\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Fin-page_push%2Fos%2Fandroid%2F2%2Fcss%2Fanimate.css\u0026l=78689\u0026fd=49 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 31 Dec 2025 23:50:56 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T23:31:02.874036Z","times_seen":13307549,"resource_available":true,"data":null}},"time_used":667,"timings":{"blocked":283,"dns":1,"connect":95,"send":0,"wait":94,"receive":0,"ssl":190},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:56.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.xxmygirl.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20408\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 20:14:59 GMT\r\nexpires: Wed, 30 Dec 2026 20:14:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 99357\r\nlast-modified: Tue, 18 Nov 2025 19:00:14 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20408,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20408, version 1.0","md5":"e8730678d4610fa908d3cba1ef0b4ddf","sha1":"1efcbee909ce74bf04878d74867f12a1e41ae7a4","sha256":"e921785496ed2d98c2257c88a6f838afa6acbee05cb8467048501bfe2a301461","sha512":"d7c3f81ad11ac5b3e6f454fbbb9be0940b3e8da93cde0b80f9a91a8259966be466b4d6a0fd5527fcc6c8f218aad8ffd0124bb29dfa08f6ca658ce49fe9e37e6c","ssdeep":"384:D+h1xN53scre+kLtT5+wpcR98ffVvdSMyNaHAUvLFNPBtn2aotFn9mTCAKDi055c:Ss/XRT5+wpM98ffxd6uZZRXnemWDj5WL","tlshash":"fa92d1cdfc0e5797a8e14ee93c0a7a4dd76f438af366a94b25e66122e67a55c040320c","first_seen":"2025-01-09T02:30:28.977279Z","last_seen":"2026-04-03T21:15:27.177231Z","times_seen":56139,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":160,"dns":1,"connect":22,"send":0,"wait":17,"receive":2,"ssl":136},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ts4.mm.bing.net/th?id=OIP.JB636bnmVU9LYJOWjThgpQHaEK\u0026pid=15.1","fqdn":"ts4.mm.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:51.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mm.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 19 Oct 2025 14:07:53 GMT","end":"Fri, 17 Apr 2026 14:07:53 GMT"},"fingerprint":{"sha1":"87:26:AF:B1:86:84:6C:71:2A:20:8E:FB:BA:96:6F:1E:FC:D0:B5:E2","sha256":"D9:41:70:A4:15:0F:6F:6D:39:7B:E8:22:5C:C3:7C:55:6E:75:E0:81:F9:57:09:A6:0C:12:05:62:BB:94:B4:6E"}}},"request":{"raw":"GET /th?id=OIP.JB636bnmVU9LYJOWjThgpQHaEK\u0026pid=15.1 HTTP/1.1\r\nHost: ts4.mm.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=1209600\r\ncontent-length: 24153\r\ncontent-type: image/jpeg\r\nx-cache: TCP_MISS\r\nhttpcacheability: 4\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ntiming-allow-origin: *\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://aefd.nelreports.net/api/report?cat=bingth\u0026ndcParam=nadatio\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1.0}\r\nx-powered-by: ASP.NET\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: 4500A9FA3C1443D19AF27FD0A31CD506 Ref B: OSL231050212052 Ref C: 2025-12-31T23:50:51Z\r\ndate: Wed, 31 Dec 2025 23:50:51 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":24153,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3","md5":"468f882b96c258366aa5b0d786650062","sha1":"1f519884fd6be37c8cd54f4dbf7f9c667a00d25d","sha256":"cf7e4f9541e9a25456c08d5b121cad16c7fc2140b30d6594e44b75f8f134b145","sha512":"694ad448beb3490842144b288828d9c6a223dc10890196bbfad2fb5c0023e15e2789d376d9c2c134c14e14053b8338904896d1882fa20bc9d78d293fa2167115","ssdeep":"384:B7Y/3QwPXi9ft8bwlsTsgpeG/5sheyVlEIWRfnqQs+CJtUHM9:hYFPdUmpH/ry0IFLPtUs9","tlshash":"ddb2d045ba18b7749fed913fba2c9921c3b2dcf679602792a9810fcb53015978e50fa0","first_seen":"2025-12-31T23:51:27.259007Z","last_seen":"2025-12-31T23:51:27.259007Z","times_seen":1,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":16,"connect":3,"send":0,"wait":75,"receive":1,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ts4.mm.bing.net/th?id=OIP.8nAjZ5_kI5fg2FcRArRBGQHaEK\u0026pid=15.1","fqdn":"ts4.mm.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:51.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mm.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 19 Oct 2025 14:07:53 GMT","end":"Fri, 17 Apr 2026 14:07:53 GMT"},"fingerprint":{"sha1":"87:26:AF:B1:86:84:6C:71:2A:20:8E:FB:BA:96:6F:1E:FC:D0:B5:E2","sha256":"D9:41:70:A4:15:0F:6F:6D:39:7B:E8:22:5C:C3:7C:55:6E:75:E0:81:F9:57:09:A6:0C:12:05:62:BB:94:B4:6E"}}},"request":{"raw":"GET /th?id=OIP.8nAjZ5_kI5fg2FcRArRBGQHaEK\u0026pid=15.1 HTTP/1.1\r\nHost: ts4.mm.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=1209600\r\ncontent-length: 17940\r\ncontent-type: image/jpeg\r\nx-cache: TCP_MISS\r\nhttpcacheability: 4\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ntiming-allow-origin: *\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://aefd.nelreports.net/api/report?cat=bingth\u0026ndcParam=nadatio\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1.0}\r\nx-powered-by: ASP.NET\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: 1643A2E581DA4969AEEC894E231DF5B3 Ref B: OSL231050212052 Ref C: 2025-12-31T23:50:51Z\r\ndate: Wed, 31 Dec 2025 23:50:51 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":17940,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3","md5":"56464cc8486194832be20ca0b67072e1","sha1":"e3ebbec119bbcab7435e4d5ee0b066d6ad17823d","sha256":"7991b145b78a99d3e5ad8341ff4552d7301f7e195f25a6b0634e67d219a123f8","sha512":"7b22558072d6d2ed42419051b8bb559e0bda287e3fa997afb146fecb654e1acfd61eb047d533f4fd7bac94b831e23004f8fe222f53f635492c90afc60f077c71","ssdeep":"384:e7EqjMPgqIGtAhQJoupRPui8BjFGYwgDR9BnbmF4sMPXj6Zi:qEqjMFIGiQJoupF3H+dgM/mZi","tlshash":"1482d04c8b4c6b50c7dbd375e65cba5c51b88de15caaae28fd0195d0ccc822572ec84f","first_seen":"2025-12-31T23:51:27.260006Z","last_seen":"2025-12-31T23:51:27.260006Z","times_seen":1,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":60,"dns":0,"connect":0,"send":0,"wait":35,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.creative-sb1.com/sb/ssp/in-page_push/os/android/2/js/script.js","fqdn":"cdn.creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:56.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:26:15 GMT","end":"Wed, 25 Mar 2026 23:23:44 GMT"},"fingerprint":{"sha1":"05:E7:A3:19:D2:55:91:F8:B7:45:48:72:0B:86:C7:0C:2C:CA:27:03","sha256":"14:76:91:36:84:B6:CF:C4:0A:BA:6F:14:80:F9:C7:77:48:3B:08:A3:C8:48:DC:0F:F6:CE:86:72:BB:CC:0B:06"}}},"request":{"raw":"GET /sb/ssp/in-page_push/os/android/2/js/script.js HTTP/1.1\r\nHost: cdn.creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.xxmygirl.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 23:50:56 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v3%2F1VGL5uBihfKtaWftVg%2F2gsra2aYemM0%2BhUBJjHIT7AzEy02Gr7Y6BKAPJeuOB0QAPqOBGTsegnZEQKWD%2BKjFVCKTwV72n60boj0ELifctIQ%3D%3D\"}]}\r\nage: 584\r\ncf-cache-status: HIT\r\netag: W/\"65aa8500-194\"\r\ncontent-encoding: br\r\ncf-ray: 9b6dae9d39670b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":404,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"abc278581baa24320b5dc93b8020a15d","sha1":"c150966236e6e7a96ffab93035d7b27200d0b228","sha256":"e3d07a34118c01ad2fb7a2a12307b6922224e5998bc92022fd280b5efe8b3557","sha512":"14248a8df9d7087e54b1fd9f9d94612cd8cb72c614bf1d25f7b4a261343dd986a151e30262bd008c0e2372823fc1228c1eb1db48c358ba63414645923a98dbc7","ssdeep":"","tlshash":"22e02b38a168527497b7e2a2629f2bdf2630425fd006464eb02c574e0de1fb622d1e97","first_seen":"2023-04-11T12:56:03Z","last_seen":"2026-03-17T08:11:57.746216Z","times_seen":1250,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":67,"dns":22,"connect":5,"send":0,"wait":11,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"cdn.creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"cdn.creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"cdn.creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=24.48.4990\u0026tmpl=810\u0026u=https%3A%2F%2Fcdn.creative-sb1.com%2Fsb%2Fssp%2Fin-page_push%2Fos%2Fandroid%2F2%2Fjs%2Fscript.js\u0026l=404\u0026fd=103","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:56.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 22:08:08 GMT","end":"Wed, 25 Mar 2026 22:08:07 GMT"},"fingerprint":{"sha1":"BE:03:A2:AD:89:FD:C3:94:0E:B0:AC:88:9E:E3:AD:33:6F:39:72:EA","sha256":"86:5E:AF:03:20:81:8A:65:09:C9:A1:D4:22:8C:8B:1F:82:60:C9:82:6B:01:09:E8:98:E2:F3:DA:A8:3C:D5:71"}}},"request":{"raw":"GET /pixel/sbls?bv=24.48.4990\u0026tmpl=810\u0026u=https%3A%2F%2Fcdn.creative-sb1.com%2Fsb%2Fssp%2Fin-page_push%2Fos%2Fandroid%2F2%2Fjs%2Fscript.js\u0026l=404\u0026fd=103 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nCookie: uid_id2=8d2ec8e3-c911-4363-be90-1959906766e3:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl16620572=1; slecacf3b22a6b662089f6bf24e9ab222171=[6259582]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 31 Dec 2025 23:50:56 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T23:31:02.874036Z","times_seen":13307549,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ts1.mm.bing.net/th?id=OIP.3ewNO9NLjOMRnXVivBbxzwHaEK\u0026pid=15.1","fqdn":"ts1.mm.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.27.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:51.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mm.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 19 Oct 2025 14:07:53 GMT","end":"Fri, 17 Apr 2026 14:07:53 GMT"},"fingerprint":{"sha1":"87:26:AF:B1:86:84:6C:71:2A:20:8E:FB:BA:96:6F:1E:FC:D0:B5:E2","sha256":"D9:41:70:A4:15:0F:6F:6D:39:7B:E8:22:5C:C3:7C:55:6E:75:E0:81:F9:57:09:A6:0C:12:05:62:BB:94:B4:6E"}}},"request":{"raw":"GET /th?id=OIP.3ewNO9NLjOMRnXVivBbxzwHaEK\u0026pid=15.1 HTTP/1.1\r\nHost: ts1.mm.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=1209600\r\ncontent-length: 11206\r\ncontent-type: image/jpeg\r\nx-cache: TCP_MISS\r\nhttpcacheability: 4\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ntiming-allow-origin: *\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://aefd.nelreports.net/api/report?cat=bingth\u0026ndcParam=nadatio\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1.0}\r\nx-powered-by: ASP.NET\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: FBC1BB3538454204BEBBBCAE03BE758A Ref B: OSL231050212023 Ref C: 2025-12-31T23:50:52Z\r\ndate: Wed, 31 Dec 2025 23:50:51 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":11206,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3","md5":"76fda7c4a14bb5475be35587e08c4af7","sha1":"85382d24d5dd15f064a9eaf8b032e74c9cda3ed7","sha256":"f7173859bca577a7346b552e66badd077bfeb78f96c45763cf58037603ebbb23","sha512":"86aa8afcf6c2d38068e84b0ebdc7cf17c607b73ee23c028fcc753a75de00164863d919f41831182e26d3a3b188ad1e14009e71336e4a0f88c3f734ab4a00f251","ssdeep":"192:i72Kw6dupnNLW6O4fOPpvAS/3yVgfICD14NI67li6QhzqHk6LGGU:i7vqpnNfO42PqS/OgfICmdi6QtoL1U","tlshash":"8932bfa285cf7b4ecad76ab5064ff3283bb4e6257ec1dc44f4745d969a28826402c489","first_seen":"2025-12-31T23:51:27.262097Z","last_seen":"2025-12-31T23:51:27.262097Z","times_seen":1,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":2,"connect":53,"send":0,"wait":33,"receive":0,"ssl":125},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-sb.com/sb/au/e1/6f/bb/e16fbbe9f31c82c23d1d57f9726b5fc7/1654616215.html","fqdn":"cdn.show-sb.com","domain":"show-sb.com","tld":"com"},"ip":{"addr":"104.21.95.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:56.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-sb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 18:32:18 GMT","end":"Fri, 06 Mar 2026 19:30:50 GMT"},"fingerprint":{"sha1":"9A:CB:17:6D:8B:24:6D:0F:99:B5:FD:4A:00:CB:D3:DE:2B:8E:84:93","sha256":"3B:72:94:40:4C:CD:DE:97:5A:DF:6C:E1:90:81:0D:BF:33:9E:10:3C:16:3A:61:15:FF:65:B0:6B:5D:34:32:21"}}},"request":{"raw":"GET /sb/au/e1/6f/bb/e16fbbe9f31c82c23d1d57f9726b5fc7/1654616215.html HTTP/1.1\r\nHost: cdn.show-sb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.xxmygirl.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 23:50:56 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 07 Jun 2022 15:37:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9vWcLW5wtcGszn1%2Bas7slZTYqPU3fwHPL5TC1ySlenFo%2BrQU6UO6KaekxcBBOHkKBYYdL7pFz7gULLyNLECrY4wTNlVPh5MEg3CIalg%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b6dae9969ba56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1038,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"3069039fb65877459a52e10be8c00f66","sha1":"15fca88fa2ad1344333421bd691cb4345923c214","sha256":"6bd6d71714163cd6c64ee6f1f318b16db90f93e6b09d6ea925a54a1dba92851e","sha512":"ac070d5917627b1a4ccea03d7005f39b36fd3548ceade646c7313dcd370cea680410f8e963445aedadedf4178eceda028030782b547c8ad3d008d11329a935f4","ssdeep":"","tlshash":"64114c252ef8c4b300969090bb357f1fec80e283984f6940b3bc45659f9ade6cd9380b","first_seen":"2023-04-06T22:23:51Z","last_seen":"2026-03-17T08:11:57.702991Z","times_seen":1373,"resource_available":false,"data":null}},"time_used":501,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":501,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbs?c=1","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:57.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 22:08:08 GMT","end":"Wed, 25 Mar 2026 22:08:07 GMT"},"fingerprint":{"sha1":"BE:03:A2:AD:89:FD:C3:94:0E:B0:AC:88:9E:E3:AD:33:6F:39:72:EA","sha256":"86:5E:AF:03:20:81:8A:65:09:C9:A1:D4:22:8C:8B:1F:82:60:C9:82:6B:01:09:E8:98:E2:F3:DA:A8:3C:D5:71"}}},"request":{"raw":"GET /pixel/sbs?c=1 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nCookie: uid_id2=8d2ec8e3-c911-4363-be90-1959906766e3:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl16620572=1; slecacf3b22a6b662089f6bf24e9ab222171=[6259582]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 31 Dec 2025 23:50:57 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T23:31:02.874036Z","times_seen":13307549,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ts4.mm.bing.net/th?id=OIP.PGb2WCUaIc50huvHn4wjmwHaIH\u0026pid=15.1","fqdn":"ts4.mm.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:51.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mm.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 19 Oct 2025 14:07:53 GMT","end":"Fri, 17 Apr 2026 14:07:53 GMT"},"fingerprint":{"sha1":"87:26:AF:B1:86:84:6C:71:2A:20:8E:FB:BA:96:6F:1E:FC:D0:B5:E2","sha256":"D9:41:70:A4:15:0F:6F:6D:39:7B:E8:22:5C:C3:7C:55:6E:75:E0:81:F9:57:09:A6:0C:12:05:62:BB:94:B4:6E"}}},"request":{"raw":"GET /th?id=OIP.PGb2WCUaIc50huvHn4wjmwHaIH\u0026pid=15.1 HTTP/1.1\r\nHost: ts4.mm.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=1209600\r\ncontent-length: 39121\r\ncontent-type: image/jpeg\r\nx-cache: TCP_MISS\r\nhttpcacheability: 4\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ntiming-allow-origin: *\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://aefd.nelreports.net/api/report?cat=bingth\u0026ndcParam=nadatio\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1.0}\r\nx-powered-by: ASP.NET\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: 840F46C090C44D3192FCD8D07CDA8135 Ref B: OSL231050212052 Ref C: 2025-12-31T23:50:51Z\r\ndate: Wed, 31 Dec 2025 23:50:51 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":39121,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x519, components 3","md5":"3f6aac383fc29613e138578bb5cb3a44","sha1":"10fda6ba82492bd1de776c4ae42cd289946bb870","sha256":"5bbfebe7ca332eb68fb7448d6067de08eeb612a6591c26e98881f6279cc6c35f","sha512":"6964d6c69f8dd194a41eb5712e2c34f7ac21d5d462fbf18b6a0103526410d232fb3b4109db3144fcaf6bc492b15b0ae37ed7cfc6ea564361b8c86ae68cac5ee0","ssdeep":"768:btADmmWcxYMmcxSae+i8G4KjfO4CZ3mOjBdw4Rbuf4yENOHsMYYYc:b2D9xYXafi14KjfO4S3mMdwE0woHWJc","tlshash":"1e03f1c61a5c8f0dd3cebf7ca71b224117d1a7605592c3bdb281eee1d29b3c619c9690","first_seen":"2025-12-31T23:51:27.263175Z","last_seen":"2025-12-31T23:51:27.263175Z","times_seen":1,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":15,"connect":3,"send":0,"wait":125,"receive":1,"ssl":106},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ts2.mm.bing.net/th?id=OIP.C6q6iVTPBvVk3c1mr-6bCAHaIH\u0026pid=15.1","fqdn":"ts2.mm.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:51.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mm.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 19 Oct 2025 14:07:53 GMT","end":"Fri, 17 Apr 2026 14:07:53 GMT"},"fingerprint":{"sha1":"87:26:AF:B1:86:84:6C:71:2A:20:8E:FB:BA:96:6F:1E:FC:D0:B5:E2","sha256":"D9:41:70:A4:15:0F:6F:6D:39:7B:E8:22:5C:C3:7C:55:6E:75:E0:81:F9:57:09:A6:0C:12:05:62:BB:94:B4:6E"}}},"request":{"raw":"GET /th?id=OIP.C6q6iVTPBvVk3c1mr-6bCAHaIH\u0026pid=15.1 HTTP/1.1\r\nHost: ts2.mm.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=1209600\r\ncontent-length: 36794\r\ncontent-type: image/jpeg\r\nx-cache: TCP_MISS\r\nhttpcacheability: 4\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ntiming-allow-origin: *\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://aefd.nelreports.net/api/report?cat=bingth\u0026ndcParam=nadatio\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1.0}\r\nx-powered-by: ASP.NET\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: F42D8630548644BD9329F3A1EE42702E Ref B: OSL231050212052 Ref C: 2025-12-31T23:50:52Z\r\ndate: Wed, 31 Dec 2025 23:50:51 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":36794,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x519, components 3","md5":"b5f73a24a76bf445e4e444f66adbe7fc","sha1":"3af4a770235b4a8ee5ab2457a7f9b20aa75a2598","sha256":"3262b86848f84cf969a424dcaf93663e2e3850671f78bb87615996a1b3b1cbca","sha512":"ead237ee8519ae17e353920a8893d72e01bc5dc5ab2e79f23b57fd3317919843cb122c528fec19c41f5425ce1a7c8c7a422321dc7fe57dd1729e7efd0a97441b","ssdeep":"768:bbI4b9BMPp76t9yJn+hISKLPzhwT/YstTmeTR8dtyr139pfoWTDh:bbBhyPJu1KRqTmeTR8veJTDh","tlshash":"48f2e1ae42bc2b8a9ffb0362155a3d5c914229841af191dad9018f33eb918c9d44f6fc","first_seen":"2025-12-31T23:51:27.264078Z","last_seen":"2025-12-31T23:51:27.264078Z","times_seen":1,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":15,"connect":37,"send":0,"wait":30,"receive":1,"ssl":114},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ts2.mm.bing.net/th?id=OIP.tek9z6i3ClEa2TfuiQ1kdQHaEK\u0026pid=15.1","fqdn":"ts2.mm.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:51.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mm.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 19 Oct 2025 14:07:53 GMT","end":"Fri, 17 Apr 2026 14:07:53 GMT"},"fingerprint":{"sha1":"87:26:AF:B1:86:84:6C:71:2A:20:8E:FB:BA:96:6F:1E:FC:D0:B5:E2","sha256":"D9:41:70:A4:15:0F:6F:6D:39:7B:E8:22:5C:C3:7C:55:6E:75:E0:81:F9:57:09:A6:0C:12:05:62:BB:94:B4:6E"}}},"request":{"raw":"GET /th?id=OIP.tek9z6i3ClEa2TfuiQ1kdQHaEK\u0026pid=15.1 HTTP/1.1\r\nHost: ts2.mm.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=1209600\r\ncontent-length: 17179\r\ncontent-type: image/jpeg\r\nx-cache: TCP_MISS\r\nhttpcacheability: 4\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ntiming-allow-origin: *\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://aefd.nelreports.net/api/report?cat=bingth\u0026ndcParam=nadatio\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1.0}\r\nx-powered-by: ASP.NET\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: 9B219250D14849198A518EE5D84639C8 Ref B: OSL231050212052 Ref C: 2025-12-31T23:50:51Z\r\ndate: Wed, 31 Dec 2025 23:50:51 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":17179,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3","md5":"a3a588380d217e03a7fa0d3a94c4e92c","sha1":"8d2048e5861c5e57ab59f118ccb29255eb1b96aa","sha256":"8d0f6731bd385ad5c250defe69ac6c074de972bf5fe698e31c537444b2f68064","sha512":"5d459f1e257b95cec42cbb211563000626c119df0dce11b2565ccff613ac9087f5074f46aa97fcbaed72f3c50e54afb52a0344240bb58c0300bd8c2af592145a","ssdeep":"384:17OiMe6v/Z90tXGARhqJJPVbcySDeSp8vcureqvxqcsdC:tOWoZi/hQ9b9TSpUeqvxqcsM","tlshash":"9d72d0a0213ed774dcda6071a16ef5b673133ba432388304d9c5a3e9dda29c87e07c62","first_seen":"2025-12-31T23:51:27.265687Z","last_seen":"2025-12-31T23:51:27.265687Z","times_seen":1,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":80,"dns":0,"connect":0,"send":0,"wait":53,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"3.120.91.143","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:54.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"traffinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Fri, 18 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"11:9F:BE:35:27:7B:7B:85:C9:B3:FF:0E:CA:F6:0D:13:B0:A9:A0:BB","sha256":"81:A4:38:32:0D:BC:66:C8:7B:6D:08:BC:93:91:76:73:A2:BD:D0:53:3C:BF:2F:FD:B8:87:00:C6:EC:3B:6C:77"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.xxmygirl.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 23:50:54 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://www.xxmygirl.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=4743ceaa-9927-4619-94da-f80239a08bb9:3:1; expires=Sat, 29 Dec 2035 23:50:54 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"df6f7099b6bc3b3bbfbce3b4b188663b","sha1":"e0208cd5ad1b99d16d705ef56f75240bd5001481","sha256":"582709183d12884ee5848e7726058a6ae02bc4da9b3e0265d4fac8adcd54b5ef","sha512":"3df40fb71591960dd84e9ad6e3f89d0f58dce3f0200c1ba2577027e369e1e7d2d20da776fbfe08d2f89f609bf3dffae287bfa7088e2f2fa2a6c109119c562066","ssdeep":"","tlshash":"ce9004cd15fd3355414d01c50cf1445543031d77001111d3145d53011000c3300d4017","first_seen":"2025-12-31T23:51:27.267117Z","last_seen":"2025-12-31T23:51:27.267117Z","times_seen":1,"resource_available":false,"data":null}},"time_used":449,"timings":{"blocked":217,"dns":0,"connect":32,"send":0,"wait":23,"receive":0,"ssl":172},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:56.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css?family=Roboto:300,400,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 31 Dec 2025 23:50:56 GMT\r\ndate: Wed, 31 Dec 2025 23:50:56 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"1f04e9e49d52374a409de4887e47180d","sha1":"8fee2f920567a574448d1aa6565c95951b68f9b5","sha256":"10cf0680b9dc5b310d265479bcebc5b380474bf2e8da9361cf8be458d183994e","sha512":"5fde8f721343e9c6254229e791ed64d6b47f28fad7690f7c83fa8c29e3112d0974f65ae0c63f09acd3e026dcb56c4de3fe0ffe37c464eb326b0495aa6c03b31c","ssdeep":"384:pKf5KgKPKrKyUK/qY4+K4KYKpKfMK1KWK6KyhK/qY4XKNKtK4KfdKkKDK3KyQK/9:pCJmwBUiRDfMTcfFBhiEymdmtC0BQiVb","tlshash":"df7210a1041750009b834ce223cebf35fe1f52117152d0b5abfdab6b9dcbc66526939d","first_seen":"2025-11-19T00:20:32.486705Z","last_seen":"2026-02-19T22:23:13.628811Z","times_seen":6025,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":114,"dns":1,"connect":9,"send":0,"wait":22,"receive":0,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.creative-sb1.com/sb/ssp/in-page_push/os/android/2/img/close.png","fqdn":"cdn.creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:56.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:26:15 GMT","end":"Wed, 25 Mar 2026 23:23:44 GMT"},"fingerprint":{"sha1":"05:E7:A3:19:D2:55:91:F8:B7:45:48:72:0B:86:C7:0C:2C:CA:27:03","sha256":"14:76:91:36:84:B6:CF:C4:0A:BA:6F:14:80:F9:C7:77:48:3B:08:A3:C8:48:DC:0F:F6:CE:86:72:BB:CC:0B:06"}}},"request":{"raw":"GET /sb/ssp/in-page_push/os/android/2/img/close.png HTTP/1.1\r\nHost: cdn.creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 23:50:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 2005\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"65aa8500-7d5\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 1186893\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bkJ5pUeqtEJrkGnMsvPugh31ifcild%2Fka9FRvumfxJwPmneCR1ylRq1D8ZmnSKpMzIU4gAnkuFsy5q5tOlETcjIEDyYPK7l410vafhbIdgDL1A%3D%3D\"}]}\r\ncf-ray: 9b6dae9d69800b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2005,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 19 x 19, 8-bit/color RGBA, non-interlaced","md5":"2cecae5111d5ff932a996679215ad573","sha1":"f4c63abb5dc373aba5bc144c3831d98516cc7cc9","sha256":"31f6aad6a88eca32f245dc6d0e030ef422f306b4f8479855b30e59b6dc134ebc","sha512":"f1a62cb77df45c07d203b3e4a31964e8267371a6bac6fe45be07cd178c5e1e1815ab4a3586626b616355d653365707eca6d2a2d950614227f017b854f5c1e072","ssdeep":"","tlshash":"ed41b407fba09d106a9df9827de822532b3b17809ac2b542fddd485398f00fa8b5d1c2","first_seen":"2023-04-11T12:56:03Z","last_seen":"2026-03-17T08:11:57.735716Z","times_seen":1549,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"cdn.creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"cdn.creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"cdn.creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:57.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.xxmygirl.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 19:22:36 GMT\r\nexpires: Wed, 30 Dec 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 102501\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-03T23:31:22.080424Z","times_seen":713337,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ts2.mm.bing.net/th?id=OIP.Ln4WQRAM5wzydftHxuGHiwHaEK\u0026pid=15.1","fqdn":"ts2.mm.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:51.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mm.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 19 Oct 2025 14:07:53 GMT","end":"Fri, 17 Apr 2026 14:07:53 GMT"},"fingerprint":{"sha1":"87:26:AF:B1:86:84:6C:71:2A:20:8E:FB:BA:96:6F:1E:FC:D0:B5:E2","sha256":"D9:41:70:A4:15:0F:6F:6D:39:7B:E8:22:5C:C3:7C:55:6E:75:E0:81:F9:57:09:A6:0C:12:05:62:BB:94:B4:6E"}}},"request":{"raw":"GET /th?id=OIP.Ln4WQRAM5wzydftHxuGHiwHaEK\u0026pid=15.1 HTTP/1.1\r\nHost: ts2.mm.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=1209600\r\ncontent-length: 26940\r\ncontent-type: image/jpeg\r\nx-cache: TCP_MISS\r\nhttpcacheability: 4\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ntiming-allow-origin: *\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://aefd.nelreports.net/api/report?cat=bingth\u0026ndcParam=nadatio\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1.0}\r\nx-powered-by: ASP.NET\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: 7F73C49C22F547BAB5EBE90AA6B38F6F Ref B: OSL231050212052 Ref C: 2025-12-31T23:50:52Z\r\ndate: Wed, 31 Dec 2025 23:50:51 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":26940,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3","md5":"0fd83d43a9b916358e2058623cb5bb51","sha1":"b1d9f243064e348684f0de47de2422a1b6a2fb49","sha256":"e17667e7cff67a74faf043f96cc5ef7f46aafde5968c164c5e60ee0abe4e9380","sha512":"3642b359cbc4ddb0c178c42d36678250d8a38a866053ae6f3f991231ca7e79534879ac41f7c1b729355c8ecb568b8dac345379de88b84c71f2e693ad7f6ed7d4","ssdeep":"768:GBqKHhzAZ6Aflb1GBoG4+nLAY3pJ7xqdzFv+EkK620:GBqKHVcGeG46d5JUFVnv0","tlshash":"82c2e01683dda713d990ae3c721c33f2be674eb837c1e3c88d34a79c8c68784a812556","first_seen":"2025-12-31T23:51:27.26905Z","last_seen":"2025-12-31T23:51:27.26905Z","times_seen":1,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":194,"dns":21,"connect":37,"send":0,"wait":29,"receive":1,"ssl":137},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=24.48.4990\u0026tmpl=810\u0026u=https%3A%2F%2Fcdn.creative-sb1.com%2Fsb%2Fssp%2Fin-page_push%2Fos%2Fandroid%2F2%2Fcss%2Fanimate.css\u0026l=78689\u0026fd=109","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:56.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 22:08:08 GMT","end":"Wed, 25 Mar 2026 22:08:07 GMT"},"fingerprint":{"sha1":"BE:03:A2:AD:89:FD:C3:94:0E:B0:AC:88:9E:E3:AD:33:6F:39:72:EA","sha256":"86:5E:AF:03:20:81:8A:65:09:C9:A1:D4:22:8C:8B:1F:82:60:C9:82:6B:01:09:E8:98:E2:F3:DA:A8:3C:D5:71"}}},"request":{"raw":"GET /pixel/sbls?bv=24.48.4990\u0026tmpl=810\u0026u=https%3A%2F%2Fcdn.creative-sb1.com%2Fsb%2Fssp%2Fin-page_push%2Fos%2Fandroid%2F2%2Fcss%2Fanimate.css\u0026l=78689\u0026fd=109 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nCookie: uid_id2=8d2ec8e3-c911-4363-be90-1959906766e3:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl16620572=1; slecacf3b22a6b662089f6bf24e9ab222171=[6259582]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 31 Dec 2025 23:50:56 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T23:31:02.874036Z","times_seen":13307549,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:56.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css?family=Roboto:300,400,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 31 Dec 2025 23:50:56 GMT\r\ndate: Wed, 31 Dec 2025 23:50:56 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"1f04e9e49d52374a409de4887e47180d","sha1":"8fee2f920567a574448d1aa6565c95951b68f9b5","sha256":"10cf0680b9dc5b310d265479bcebc5b380474bf2e8da9361cf8be458d183994e","sha512":"5fde8f721343e9c6254229e791ed64d6b47f28fad7690f7c83fa8c29e3112d0974f65ae0c63f09acd3e026dcb56c4de3fe0ffe37c464eb326b0495aa6c03b31c","ssdeep":"384:pKf5KgKPKrKyUK/qY4+K4KYKpKfMK1KWK6KyhK/qY4XKNKtK4KfdKkKDK3KyQK/9:pCJmwBUiRDfMTcfFBhiEymdmtC0BQiVb","tlshash":"df7210a1041750009b834ce223cebf35fe1f52117152d0b5abfdab6b9dcbc66526939d","first_seen":"2025-11-19T00:20:32.486705Z","last_seen":"2026-02-19T22:23:13.628811Z","times_seen":6025,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ts4.mm.bing.net/th?id=OIP.OyEnDnVeFCe9BXb5tfMKXQHaEK\u0026pid=15.1","fqdn":"ts4.mm.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:51.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mm.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 19 Oct 2025 14:07:53 GMT","end":"Fri, 17 Apr 2026 14:07:53 GMT"},"fingerprint":{"sha1":"87:26:AF:B1:86:84:6C:71:2A:20:8E:FB:BA:96:6F:1E:FC:D0:B5:E2","sha256":"D9:41:70:A4:15:0F:6F:6D:39:7B:E8:22:5C:C3:7C:55:6E:75:E0:81:F9:57:09:A6:0C:12:05:62:BB:94:B4:6E"}}},"request":{"raw":"GET /th?id=OIP.OyEnDnVeFCe9BXb5tfMKXQHaEK\u0026pid=15.1 HTTP/1.1\r\nHost: ts4.mm.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=1209600\r\ncontent-length: 19289\r\ncontent-type: image/jpeg\r\nx-cache: TCP_MISS\r\nhttpcacheability: 4\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ntiming-allow-origin: *\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://aefd.nelreports.net/api/report?cat=bingth\u0026ndcParam=nadatio\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1.0}\r\nx-powered-by: ASP.NET\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: C990E8A029974616B65A4BB6CD5D0D12 Ref B: OSL231050212052 Ref C: 2025-12-31T23:50:51Z\r\ndate: Wed, 31 Dec 2025 23:50:51 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":19289,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3","md5":"7771eb18a81604b24f234d8337a10bfd","sha1":"88e15277af6b288352d6c851f4cf082eb79737ff","sha256":"7cb3e135c2624c32b96fb7ea90663bdc8edd2af82ea1ad88da47ca95e1176b4a","sha512":"f665ebc9506eb3a845ddd4b0e0cd7f23f0505dd8dbc9b55910977af18dcdec780ddcce4e6496e830f02a8ed740b4507dee4f9c01080a7b837df67ae504ed29d6","ssdeep":"384:B77/kLZ32bkxKcq86K12UNMCoedvybFIzbbFP/nT05J6OWbSKPyZ9:hALZm+KcfCCo8nbh0PlQW","tlshash":"dd82d0b7490e5f33dfda31bf425f2789f776d522eab9ae9a54240830d51231a7a34082","first_seen":"2025-12-31T23:51:27.269966Z","last_seen":"2025-12-31T23:51:27.269966Z","times_seen":1,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":18,"connect":3,"send":0,"wait":76,"receive":1,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ts1.mm.bing.net/th?id=OIP.kwxqshcUDjvModeWPj8j3wHaE8\u0026pid=15.1","fqdn":"ts1.mm.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.27.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:51.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mm.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 19 Oct 2025 14:07:53 GMT","end":"Fri, 17 Apr 2026 14:07:53 GMT"},"fingerprint":{"sha1":"87:26:AF:B1:86:84:6C:71:2A:20:8E:FB:BA:96:6F:1E:FC:D0:B5:E2","sha256":"D9:41:70:A4:15:0F:6F:6D:39:7B:E8:22:5C:C3:7C:55:6E:75:E0:81:F9:57:09:A6:0C:12:05:62:BB:94:B4:6E"}}},"request":{"raw":"GET /th?id=OIP.kwxqshcUDjvModeWPj8j3wHaE8\u0026pid=15.1 HTTP/1.1\r\nHost: ts1.mm.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=1209600\r\ncontent-length: 15225\r\ncontent-type: image/jpeg\r\nx-cache: TCP_MISS\r\nhttpcacheability: 4\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ntiming-allow-origin: *\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://aefd.nelreports.net/api/report?cat=bingth\u0026ndcParam=nadatio\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1.0}\r\nx-powered-by: ASP.NET\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: 8C48DF2E7BE04AF79EC8A8399663402C Ref B: OSL231050212023 Ref C: 2025-12-31T23:50:51Z\r\ndate: Wed, 31 Dec 2025 23:50:51 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":15225,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x316, components 3","md5":"bc7c3ef73eca6173a7e4853b6a5a1ea4","sha1":"36851a01da9b94910f2e31ec0e34640e1d09f61a","sha256":"366b4c6fa94c9bd5bc4107737f13d4b3f6b1388de819fe15f295a3a43b022026","sha512":"7d204af894452630e6d61138a7cd87ddbafa1c7165e95c3c29948ef15f1d1a94f07d23d2ac444aeb396f24d02e4cdf45b876ec20aca00a0a5680416368285f77","ssdeep":"384:DZcpJEZs7hpj1zCV7QXTXcBFNvQbMux3Q+FOqWv:Fm77BC1qiYbPxA4OP","tlshash":"9062bfa17a0c9fcbf5c77fa2d32d324382649bc7594d3684a4dbbb289940d9e5a00e48","first_seen":"2025-12-31T23:51:27.270994Z","last_seen":"2025-12-31T23:51:27.270994Z","times_seen":1,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":13,"connect":2,"send":0,"wait":64,"receive":0,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ts3.mm.bing.net/th?id=OIP.NWotceyKsdR6O7L7D1CLbAAAAA\u0026pid=15.1","fqdn":"ts3.mm.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:51.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mm.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 19 Oct 2025 14:07:53 GMT","end":"Fri, 17 Apr 2026 14:07:53 GMT"},"fingerprint":{"sha1":"87:26:AF:B1:86:84:6C:71:2A:20:8E:FB:BA:96:6F:1E:FC:D0:B5:E2","sha256":"D9:41:70:A4:15:0F:6F:6D:39:7B:E8:22:5C:C3:7C:55:6E:75:E0:81:F9:57:09:A6:0C:12:05:62:BB:94:B4:6E"}}},"request":{"raw":"GET /th?id=OIP.NWotceyKsdR6O7L7D1CLbAAAAA\u0026pid=15.1 HTTP/1.1\r\nHost: ts3.mm.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=1209600\r\ncontent-length: 13515\r\ncontent-type: image/jpeg\r\nx-cache: TCP_MISS\r\nhttpcacheability: 4\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ntiming-allow-origin: *\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://aefd.nelreports.net/api/report?cat=bingth\u0026ndcParam=nadatio\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1.0}\r\nx-powered-by: ASP.NET\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: A027E53E098C40B6A8D4864FCD263B44 Ref B: OSL231050212052 Ref C: 2025-12-31T23:50:51Z\r\ndate: Wed, 31 Dec 2025 23:50:51 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":13515,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 376x214, components 3","md5":"e8b4eefc0682e2bbe9a8419fbd1395c5","sha1":"a83da3d39ff91c9a2fb7815c60f908beb8156012","sha256":"f7e48815acd7aa53753bd209a5e1be1e81e36ed209aee3eeb23fdb2fdd4dbea0","sha512":"ba794f46d5925b958b7c964f1b1e50b2c55683f1be8a814118eeee5446d2b5d71ad85e98bd50f47909c28ff0485c494f47ca208e948bf4c8d78f25930792a4d8","ssdeep":"192:SW0v8xy9oDPndO8zLVs1rnNA138Epi4qf/Mgo9e0moE4EAgPoTjg4IGeA6AMatHX:SW15rvu10Q4Obo9e0DSPoTEGe/APRR","tlshash":"6c52b0f0060d1725a0c77fb89f0db743631b24b669507ba78df10be5a9a3d5971880ec","first_seen":"2025-12-31T23:51:27.271947Z","last_seen":"2025-12-31T23:51:27.271947Z","times_seen":1,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":131,"dns":24,"connect":2,"send":0,"wait":74,"receive":0,"ssl":109},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ts2.mm.bing.net/th?id=OIP.hQATM3SJdtha9sFvlT9TEgHaEK\u0026pid=15.1","fqdn":"ts2.mm.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:51.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mm.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 19 Oct 2025 14:07:53 GMT","end":"Fri, 17 Apr 2026 14:07:53 GMT"},"fingerprint":{"sha1":"87:26:AF:B1:86:84:6C:71:2A:20:8E:FB:BA:96:6F:1E:FC:D0:B5:E2","sha256":"D9:41:70:A4:15:0F:6F:6D:39:7B:E8:22:5C:C3:7C:55:6E:75:E0:81:F9:57:09:A6:0C:12:05:62:BB:94:B4:6E"}}},"request":{"raw":"GET /th?id=OIP.hQATM3SJdtha9sFvlT9TEgHaEK\u0026pid=15.1 HTTP/1.1\r\nHost: ts2.mm.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=1209600\r\ncontent-length: 12415\r\ncontent-type: image/jpeg\r\nx-cache: TCP_MISS\r\nhttpcacheability: 4\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ntiming-allow-origin: *\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://aefd.nelreports.net/api/report?cat=bingth\u0026ndcParam=nadatio\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1.0}\r\nx-powered-by: ASP.NET\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: F5233ACAC7D34FA092D3B13A04AD3339 Ref B: OSL231050212052 Ref C: 2025-12-31T23:50:52Z\r\ndate: Wed, 31 Dec 2025 23:50:51 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":12415,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3","md5":"a483a92f707fe101b6fae28a7c764fd6","sha1":"c360e08bf74780b581b1fca6fd7b2aeacc4750f0","sha256":"1d4aa15ffe7ceb4d066a07bca24dac064ed0c55c9861225ef38c054efd300687","sha512":"092cc7322454002fac35e8d3fd054eae5fe3b9e8c391fda81f4c7b980143d27c4acc03973046533ab147bbb0a2598450aace5f31c6448a5dce78388e08a8f1be","ssdeep":"384:a74ijTjDbhVSlTZNGZ/AC9Ifv4DgE3KZ12Nhy21:uJDb3SjgZ/AC9mXIYQX1","tlshash":"a542af82174c9b9bb58dc0f9091ff4b44c462f28d6669fbb6854af5139531c32dce60a","first_seen":"2025-12-31T23:51:27.272859Z","last_seen":"2025-12-31T23:51:27.272859Z","times_seen":1,"resource_available":false,"data":null}},"time_used":539,"timings":{"blocked":193,"dns":21,"connect":37,"send":0,"wait":120,"receive":1,"ssl":139},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ts3.mm.bing.net/th?id=OIP.RG_IQh9wPXux0rvQ1ZfRQwHaEK\u0026pid=15.1","fqdn":"ts3.mm.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:51.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mm.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 19 Oct 2025 14:07:53 GMT","end":"Fri, 17 Apr 2026 14:07:53 GMT"},"fingerprint":{"sha1":"87:26:AF:B1:86:84:6C:71:2A:20:8E:FB:BA:96:6F:1E:FC:D0:B5:E2","sha256":"D9:41:70:A4:15:0F:6F:6D:39:7B:E8:22:5C:C3:7C:55:6E:75:E0:81:F9:57:09:A6:0C:12:05:62:BB:94:B4:6E"}}},"request":{"raw":"GET /th?id=OIP.RG_IQh9wPXux0rvQ1ZfRQwHaEK\u0026pid=15.1 HTTP/1.1\r\nHost: ts3.mm.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=1209600\r\ncontent-length: 22481\r\ncontent-type: image/jpeg\r\nx-cache: TCP_MISS\r\nhttpcacheability: 4\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ntiming-allow-origin: *\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://aefd.nelreports.net/api/report?cat=bingth\u0026ndcParam=nadatio\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1.0}\r\nx-powered-by: ASP.NET\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: C404D71C08D8440FA8A5AF5248144CC1 Ref B: OSL231050212052 Ref C: 2025-12-31T23:50:51Z\r\ndate: Wed, 31 Dec 2025 23:50:51 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":22481,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3","md5":"c3dbe4ebd75d8a16886d6eee29d8b6b9","sha1":"bb705fa54a78e64dd177e14b2d230cc948409263","sha256":"e7204185b24d83fd9a6c5d4b43e7eca36481c5bc5c3678c3ce921dbb2b4cfc4d","sha512":"109738403334cfe87b494dbac30726a0d42356d2dda255af08a205555ec3b1a78b55c452c06f383498284e085ed06bd723841130c299863d03b8d41d393b79c2","ssdeep":"384:F7RCJRrNDlMj+DNuJTZUY7FZgf/f3yB01ByR5poK9KWxt5+IFl1Ijv:9o/1lMqDkOYZgPnyenWxt5Ryz","tlshash":"ada2e0478d7cc31a9dc8236897def60e29e98e7872556192f7e27dc0572484c3c48c6c","first_seen":"2025-12-31T23:51:27.273688Z","last_seen":"2025-12-31T23:51:27.273688Z","times_seen":1,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":76,"dns":0,"connect":0,"send":0,"wait":79,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6.adsco.re/","fqdn":"6.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.16.84.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:53.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 6.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.xxmygirl.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 23:50:53 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 45\r\ncf-ray: 9b6dae87bb45b4f4-OSL\r\naccess-control-allow-origin: https://www.xxmygirl.com\r\ncache-control: private, max-age=300, immutable, stale-if-error=300, stale-while-revalidate=300\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\naccess-control-max-age: 2592000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":18,"dns":1,"connect":1,"send":0,"wait":19,"receive":1,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xxmygirl.com/sexlist/brima-tiffany.htm","fqdn":"www.xxmygirl.com","domain":"xxmygirl.com","tld":"com"},"ip":{"addr":"104.21.16.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-31T23:50:51.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxmygirl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 12:10:29 GMT","end":"Mon, 09 Feb 2026 13:09:16 GMT"},"fingerprint":{"sha1":"6B:EB:7A:AD:65:BC:A2:EA:19:0C:22:14:2D:97:8B:2D:E8:05:D8:5B","sha256":"C7:38:A9:16:95:A0:F3:B2:EF:4F:3B:F9:E8:92:F9:39:EB:71:B6:0E:D2:59:5A:BC:22:16:10:A8:5B:B5:BC:DB"}}},"request":{"raw":"GET /sexlist/brima-tiffany.htm HTTP/1.1\r\nHost: www.xxmygirl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 23:50:51 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HQKgZZnw3QXvIuERCjObJNt4Y5QdrcO4uyxYF%2F46Hs2A%2FJb3PCnCFogqV4Nu7aH0XOLsZftJ1dXfUs%2BRk6zKAwWKKmEAto3gEAenr1J9goo%3D\"}]}\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 30 Jan 2026 23:50:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b6dae7ba93a1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery:1.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"imagesLoaded","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]}],"data":{"size":44652,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (4703), with CRLF, LF line terminators","md5":"7adf71033d9b7bfedac5e20428fb6208","sha1":"307f7ad74f77ebb38ac508bb9ba721ae86d77e39","sha256":"de61574b38ffcee3917205536649536aa895f9418800221fefc936aabffe0131","sha512":"cfbfb4dba6a419f50e629f690d11d933aeaede852ccd666de39e543d1c7c7d9e9aca78064e9ea3e28f9a8b162e63561a703e97beb13432ae3989c0328ff65afc","ssdeep":"768:2A5A4c4PGgBn18tyQMjBOpSxS0qGxW3s6ty1H3gC9rd5eTHazYLJDJL+NSvwpQ45:Je7oGgBn18tyQMjBOpSxS0qGxW3s6ty5","tlshash":"b913827fb7418116cef235eb25a83368a58f8eed0d0544b8b0cba726e707e542897dc5","first_seen":"2025-12-31T23:51:27.274585Z","last_seen":"2025-12-31T23:51:27.274585Z","times_seen":1,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":22,"dns":3,"connect":1,"send":0,"wait":63,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.xxmygirl.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marchshotgun.com/79/4a/2d/794a2d540c40b1a3bd9a97a0e4bcc586.js","fqdn":"marchshotgun.com","domain":"marchshotgun.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:51.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"marchshotgun.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Dec 2025 21:38:56 GMT","end":"Tue, 03 Mar 2026 21:38:55 GMT"},"fingerprint":{"sha1":"05:6C:D5:56:33:81:85:68:BB:66:54:01:6D:C5:5C:E0:77:F8:A7:C6","sha256":"F5:2B:3B:65:26:FF:30:D3:A7:C0:E7:8D:84:1B:02:61:61:51:48:3F:52:A7:AC:49:5E:C3:F1:9C:3D:84:77:8D"}}},"request":{"raw":"GET /79/4a/2d/794a2d540c40b1a3bd9a97a0e4bcc586.js HTTP/1.1\r\nHost: marchshotgun.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 31 Dec 2025 23:50:52 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 38154\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 3\r\nHost: marchshotgun.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: e7f370f0c22abad95ddb34be4452ed10\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":106859,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0bf6711a68954a97ea74b110d6bf17d5","sha1":"783bc69d9056978fd40baf12bd7304b53fa183a3","sha256":"f3fa0533f28bcff42546cc56e9f22e8e7ea676c6565d5ea699d39003a7809219","sha512":"b73ac20e3c769befd3f62e3fbf8ba4f0eedc1b3db07fe19fe25b2e5b8b7283a1eb14b1602c9f4fda4f3f9b40d3421d5f191338759084e1bc8d7073275b93edd3","ssdeep":"3072:EYf17aMWZ44SXdVY4lDKVVbZ4i3/9j9y1UglGews2:EYfw194Lws2","tlshash":"cfa3c788bfd0f06d129a6473223f950ff11a4e42505ce558e907f8e66abc32af47db64","first_seen":"2025-12-31T23:42:35.296733Z","last_seen":"2025-12-31T23:51:27.275546Z","times_seen":2,"resource_available":true,"data":null}},"time_used":785,"timings":{"blocked":288,"dns":19,"connect":92,"send":0,"wait":101,"receive":93,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"marchshotgun.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"marchshotgun.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"marchshotgun.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/8d/e9/ae/8de9ae4b0e4b914d604a7e4b56139ffe.js","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:54.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 00:50:13 GMT","end":"Sun, 29 Mar 2026 00:50:12 GMT"},"fingerprint":{"sha1":"B6:89:38:EE:EF:1E:F1:A0:93:51:BB:7A:F2:13:F5:DF:8C:9B:8F:F7","sha256":"74:22:2C:3F:1E:A6:04:C8:AD:7C:D8:B4:13:57:A5:95:EF:83:FA:28:18:BC:F3:BD:38:93:CB:DA:4B:30:3F:8A"}}},"request":{"raw":"GET /8d/e9/ae/8de9ae4b0e4b914d604a7e4b56139ffe.js HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 31 Dec 2025 23:50:54 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3403\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 2abfebb74bfd19d26c0537b623f8071a\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":6454,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6454), with no line terminators","md5":"81c010ddfde2faeaf1c598844287df5a","sha1":"cd0fb06af4d1e8878a8c2c8d0311892ef13ff47b","sha256":"44442357bcab05b20364ed17aae2a3ae173b906529612b0e2f7d2217a76e51ab","sha512":"0acadda1dc3bba9f6178ba54356f2aed3dba23fbaf3b53b683fc5dd78eeff47a63ec7815ffbdb1e07041b274646eaa0a71ada2500f181775833f40761fc7cac8","ssdeep":"96:A9+XCx+8Ixmzn2ySej3zqIDNcxE6204l4sNm+E/0NK4Amfnqkk7lDAP2CwU6:A6Cg/S2yPXXWxW04fNPw6K4Amf4DAPA","tlshash":"13d1859c3e80b0a057b26077b97fa019b3696c50657fd80cd012b1a03e7562ad9bbba5","first_seen":"2025-12-01T12:09:20.892186Z","last_seen":"2026-01-29T12:50:40.978548Z","times_seen":4063,"resource_available":true,"data":null}},"time_used":687,"timings":{"blocked":291,"dns":8,"connect":91,"send":0,"wait":100,"receive":1,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marchshotgun.com/ren.gif?sid=H4sIAAAAAAAC_1RSz2skRRitTuJJRF0XxYMwBw8KZtI93fOjXTCaXaPBmIRslhz2IFVd1ZMyPV1tVff0zBwkGnD3mD3psfMm2aAGdS97E5aJeAkIO4KQw0Zh_wAPwp5lJgPLvsP3veLV4Xvv-77Zz86Ji4yerX2qejKK6Fy1bJfe2pQxV7kprWyUHLtsXyltyrjmXSl1RkW333Vcr2y_XfpIBNtqrmI7tu3YTmlRahGqztxYhUyOfafs22WvUnaqHjr62bfJLBhqgbfPySVIPnzxcXgTMhggbv1yTZjtVCXvfNjKIpoqjTY_uhFvxyqP0XpKQ20hjI8mv6HMkJDvpqDio4kDqPbByAGYHJKpVx-BxUeTMcHahxeTsggiBuPPI28PIKIBJB0gULuQ_CEBAo6VVcStuytK57R7odKROiQzT_6DzIdk5tFlxK2fFiLZKV1XUZZKFRt0wgKyM4BsDpBkJ0h7FmR-giD9GpL_QeaeLCNuHayaSEHysze9uucGgtJZ36_UZ72a48_6HqezYcOuuD61G4z544hkOAA108iMhUxayEILWWKhxc9Knt3wAoe6tdDnQd32qOdxwWy_UbFt6gd1ZMFXkHwPgd5BonewLe88rF6Czh7AbBUw3IJJCdq8QC4IckOQU4JcEuQpQd4uDnlkKqa4yyOTMWfSK5PuFn2VNvfpoUqbIiageg-aFwcy-cLsIkin-73Q8L4aFcrSok8ZL_aTc_LyKFHrhe632BZnJSHqXo1X61XmOazCnbAuKGsETqPi2dytMxhZQJopUGOhJ4fkdXMfiRwScut9MHoCE50gkC-BZm-A5gXoVoFefGxEp9uMsl45UC1wVSBJZ5B2rf3onLzSX99YeDBe7Ge7X0IEp_OP3TEQ6AKJLvC5_I2gGd3ur6ucHKyr3JB7q0kqW7JHR0u_ntJUTP_wiejmSvOla2bv-w-CkTCixxvCpMs05jJuGvLjguRc6EWlA0F-XTKbgq1lZmsh03GWLK9dXVxqJVoYI1U8AB05u_ccAjkkl6--Nz7oWuM1BMkOTHI6_1c4BowiYImFSA7Jxzf_QSRO53_ubtz6_ehfUFbAiFMyAdhTvm9uo6kt0HQXcatAWxdoRwVotAeTTffTRJ_O_znJgkVWn0XaOmCRju5cZGXkWalaYW6t0aiJsMZDl7sVl_tVW_ge9Wue71WRmqG8cf_v_wMAAP__1HNmrncEAAA=","fqdn":"marchshotgun.com","domain":"marchshotgun.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:55.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"marchshotgun.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Dec 2025 21:38:56 GMT","end":"Tue, 03 Mar 2026 21:38:55 GMT"},"fingerprint":{"sha1":"05:6C:D5:56:33:81:85:68:BB:66:54:01:6D:C5:5C:E0:77:F8:A7:C6","sha256":"F5:2B:3B:65:26:FF:30:D3:A7:C0:E7:8D:84:1B:02:61:61:51:48:3F:52:A7:AC:49:5E:C3:F1:9C:3D:84:77:8D"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSz2skRRitTuJJRF0XxYMwBw8KZtI93fOjXTCaXaPBmIRslhz2IFVd1ZMyPV1tVff0zBwkGnD3mD3psfMm2aAGdS97E5aJeAkIO4KQw0Zh_wAPwp5lJgPLvsP3veLV4Xvv-77Zz86Ji4yerX2qejKK6Fy1bJfe2pQxV7kprWyUHLtsXyltyrjmXSl1RkW333Vcr2y_XfpIBNtqrmI7tu3YTmlRahGqztxYhUyOfafs22WvUnaqHjr62bfJLBhqgbfPySVIPnzxcXgTMhggbv1yTZjtVCXvfNjKIpoqjTY_uhFvxyqP0XpKQ20hjI8mv6HMkJDvpqDio4kDqPbByAGYHJKpVx-BxUeTMcHahxeTsggiBuPPI28PIKIBJB0gULuQ_CEBAo6VVcStuytK57R7odKROiQzT_6DzIdk5tFlxK2fFiLZKV1XUZZKFRt0wgKyM4BsDpBkJ0h7FmR-giD9GpL_QeaeLCNuHayaSEHysze9uucGgtJZ36_UZ72a48_6HqezYcOuuD61G4z544hkOAA108iMhUxayEILWWKhxc9Knt3wAoe6tdDnQd32qOdxwWy_UbFt6gd1ZMFXkHwPgd5BonewLe88rF6Czh7AbBUw3IJJCdq8QC4IckOQU4JcEuQpQd4uDnlkKqa4yyOTMWfSK5PuFn2VNvfpoUqbIiageg-aFwcy-cLsIkin-73Q8L4aFcrSok8ZL_aTc_LyKFHrhe632BZnJSHqXo1X61XmOazCnbAuKGsETqPi2dytMxhZQJopUGOhJ4fkdXMfiRwScut9MHoCE50gkC-BZm-A5gXoVoFefGxEp9uMsl45UC1wVSBJZ5B2rf3onLzSX99YeDBe7Ge7X0IEp_OP3TEQ6AKJLvC5_I2gGd3ur6ucHKyr3JB7q0kqW7JHR0u_ntJUTP_wiejmSvOla2bv-w-CkTCixxvCpMs05jJuGvLjguRc6EWlA0F-XTKbgq1lZmsh03GWLK9dXVxqJVoYI1U8AB05u_ccAjkkl6--Nz7oWuM1BMkOTHI6_1c4BowiYImFSA7Jxzf_QSRO53_ubtz6_ehfUFbAiFMyAdhTvm9uo6kt0HQXcatAWxdoRwVotAeTTffTRJ_O_znJgkVWn0XaOmCRju5cZGXkWalaYW6t0aiJsMZDl7sVl_tVW_ge9Wue71WRmqG8cf_v_wMAAP__1HNmrncEAAA= HTTP/1.1\r\nHost: marchshotgun.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nCookie: uid_id2=4743ceaa-9927-4619-94da-f80239a08bb9:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl17660311=1; slecee746d575b41b2d1f7eab8c18240d37b=[6259582]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 31 Dec 2025 23:50:55 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: marchshotgun.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: c585d58a03774a4cc07d84b1100741f5\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T23:31:02.874036Z","times_seen":13307549,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"marchshotgun.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"marchshotgun.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"marchshotgun.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:56.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.xxmygirl.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 19:22:36 GMT\r\nexpires: Wed, 30 Dec 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 102500\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-03T23:31:22.080424Z","times_seen":713337,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":125,"dns":3,"connect":8,"send":0,"wait":8,"receive":12,"ssl":106},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xxmygirl.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"www.xxmygirl.com","domain":"xxmygirl.com","tld":"com"},"ip":{"addr":"104.21.16.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:51.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxmygirl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 12:10:29 GMT","end":"Mon, 09 Feb 2026 13:09:16 GMT"},"fingerprint":{"sha1":"6B:EB:7A:AD:65:BC:A2:EA:19:0C:22:14:2D:97:8B:2D:E8:05:D8:5B","sha256":"C7:38:A9:16:95:A0:F3:B2:EF:4F:3B:F9:E8:92:F9:39:EB:71:B6:0E:D2:59:5A:BC:22:16:10:A8:5B:B5:BC:DB"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: www.xxmygirl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/sexlist/brima-tiffany.htm\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Thu, 01 Jan 2026 00:38:51 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I6Pxa09Lv0BkRtr8QeuWFe1iW9%2BsIPKg22q0nKIZVPvO%2BVT8t4nXJW6DkLDTuLxAY2WrtmKjpjf8%2BQVqxHP1e24aH4rBwUbBmjK3UPWX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Wed, 31 Dec 2025 23:50:51 GMT\r\ncf-ray: 9b6dae7e6a1256a5-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-03T23:31:32.693633Z","times_seen":94300,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.xxmygirl.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/in-page_push/os/android/2/js/script.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"172.67.210.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:55.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:26:15 GMT","end":"Wed, 25 Mar 2026 23:23:44 GMT"},"fingerprint":{"sha1":"05:E7:A3:19:D2:55:91:F8:B7:45:48:72:0B:86:C7:0C:2C:CA:27:03","sha256":"14:76:91:36:84:B6:CF:C4:0A:BA:6F:14:80:F9:C7:77:48:3B:08:A3:C8:48:DC:0F:F6:CE:86:72:BB:CC:0B:06"}}},"request":{"raw":"GET /sb/ssp/in-page_push/os/android/2/js/script.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.xxmygirl.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 23:50:56 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BWFoGZoQB94zWVcgu%2Bjc6mUEt5FceuxXJLWePYL9xgX7vY4UFR15YYK49Wk68crHv9dPD8PRZuQG6Z9HUjUTwIby6qDSssKnGFf92p7B\"}]}\r\nage: 696535\r\ncf-cache-status: HIT\r\netag: W/\"65aa8500-194\"\r\ncontent-encoding: br\r\ncf-ray: 9b6dae98197f56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":404,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"abc278581baa24320b5dc93b8020a15d","sha1":"c150966236e6e7a96ffab93035d7b27200d0b228","sha256":"e3d07a34118c01ad2fb7a2a12307b6922224e5998bc92022fd280b5efe8b3557","sha512":"14248a8df9d7087e54b1fd9f9d94612cd8cb72c614bf1d25f7b4a261343dd986a151e30262bd008c0e2372823fc1228c1eb1db48c358ba63414645923a98dbc7","ssdeep":"","tlshash":"22e02b38a168527497b7e2a2629f2bdf2630425fd006464eb02c574e0de1fb622d1e97","first_seen":"2023-04-11T12:56:03Z","last_seen":"2026-03-17T08:11:57.746216Z","times_seen":1250,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":36,"dns":4,"connect":6,"send":0,"wait":10,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.xxmygirl.com/themes/javascript/jquery.imagesloaded.min.js","fqdn":"www.xxmygirl.com","domain":"xxmygirl.com","tld":"com"},"ip":{"addr":"104.21.16.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:52.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxmygirl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 12:10:29 GMT","end":"Mon, 09 Feb 2026 13:09:16 GMT"},"fingerprint":{"sha1":"6B:EB:7A:AD:65:BC:A2:EA:19:0C:22:14:2D:97:8B:2D:E8:05:D8:5B","sha256":"C7:38:A9:16:95:A0:F3:B2:EF:4F:3B:F9:E8:92:F9:39:EB:71:B6:0E:D2:59:5A:BC:22:16:10:A8:5B:B5:BC:DB"}}},"request":{"raw":"GET /themes/javascript/jquery.imagesloaded.min.js HTTP/1.1\r\nHost: www.xxmygirl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/sexlist/brima-tiffany.htm\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 2235\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=2678400\r\nexpires: Sat, 17 Jan 2026 19:27:57 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 16 Oct 2020 05:13:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\npriority: u=3,i=?0\r\ndate: Wed, 31 Dec 2025 23:50:52 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nage: 1138974\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=En8rmCA%2BApSv%2BZoooxywMPmSCbaCM73P2adQiXeUTKMSVQA2ZCJDO8Zx3GsaX%2BBKhQJDXd7sqG9kINmDoPGT7LFo8UYAhqWjyX7SrjD%2F\"}]}\r\ncf-ray: 9b6dae7f0a1856a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6955,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6832), with CRLF line terminators","md5":"71a6605a26dfa54d09a609e490d02027","sha1":"258bf5e342315e75ae1667f8c5b40721544c03f6","sha256":"dc008f649c463c6bd9e8f5b2aebea7c0d0b5d13aa1d837c0ccd1173706247b68","sha512":"c5bdf3df8df57fcd0033057dbf4233fd42534b3db9a97b12c762f22718a8f3182fe32fc1d6e1559569c7edbb8f26d381655c39f4553e65d044111c0632d6a7cc","ssdeep":"192:cwBiC7Gd4QY6Pm+OrOJ42uVOpDsu1mx3AJzE8f:cNC7Gd4QPm+Or0WOpou1mxQlEy","tlshash":"e5e143cd3796712113dab177a22f020ff237a599681d80687356e8f22c7a89d4633f79","first_seen":"2023-03-07T12:02:21Z","last_seen":"2026-04-03T21:13:30.763891Z","times_seen":1094,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.xxmygirl.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.creative-sb1.com/sb/ssp/in-page_push/os/android/2/css/animate.css","fqdn":"cdn.creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:56.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:26:15 GMT","end":"Wed, 25 Mar 2026 23:23:44 GMT"},"fingerprint":{"sha1":"05:E7:A3:19:D2:55:91:F8:B7:45:48:72:0B:86:C7:0C:2C:CA:27:03","sha256":"14:76:91:36:84:B6:CF:C4:0A:BA:6F:14:80:F9:C7:77:48:3B:08:A3:C8:48:DC:0F:F6:CE:86:72:BB:CC:0B:06"}}},"request":{"raw":"GET /sb/ssp/in-page_push/os/android/2/css/animate.css HTTP/1.1\r\nHost: cdn.creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.xxmygirl.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 23:50:56 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65aa8500-13361\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\nage: 584\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xlFGdK8V%2FSbYfPL8eYRi4kgojdVYluUe%2Bz0NGESdUKgeMPRI741xirlmjj7RlwuivRFMtkJyrqzB1D5kUV%2Bcx8UBP2u95zgv%2FRiWEOZyiDMEkg%3D%3D\"}]}\r\ncf-ray: 9b6dae9d39650b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78689,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3d4123dbfb33d27a5cfdfcfa91df6783","sha1":"e7d0eeeec54b848f0bc3da8685fa3bc88429d660","sha256":"cb7d1393b65701b2f97d8da244c2c6023e9cbc3463ecb0136b915cfc775c6887","sha512":"75c8a48dc207595e201b50b87ff68782112a21aded9f15f14185c07d40f0151d6afe74a2b278aa575caf12ac422e8166316296ed7b6573ea24e667cca4af51dd","ssdeep":"384:jvuAuF81dghu3ublZlX/m/Gu7uNUtrL4VrbZJgBhLYNKwZiMUL6Vpaj7F:jvuAu21dghu3uLu7uNKwZiMUL6Vpaj7F","tlshash":"22731bad399115845263861d83df9e68273ce5731826acef73c2488bcf8bf9867c9147","first_seen":"2024-01-20T06:37:31Z","last_seen":"2026-04-03T21:08:41.899388Z","times_seen":10529,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":68,"dns":21,"connect":5,"send":0,"wait":14,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"cdn.creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"cdn.creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"cdn.creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ts2.mm.bing.net/th?id=OIP.5TjEAk6ehIM6SGyAzcL0fwHaEK\u0026pid=15.1","fqdn":"ts2.mm.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:51.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mm.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 19 Oct 2025 14:07:53 GMT","end":"Fri, 17 Apr 2026 14:07:53 GMT"},"fingerprint":{"sha1":"87:26:AF:B1:86:84:6C:71:2A:20:8E:FB:BA:96:6F:1E:FC:D0:B5:E2","sha256":"D9:41:70:A4:15:0F:6F:6D:39:7B:E8:22:5C:C3:7C:55:6E:75:E0:81:F9:57:09:A6:0C:12:05:62:BB:94:B4:6E"}}},"request":{"raw":"GET /th?id=OIP.5TjEAk6ehIM6SGyAzcL0fwHaEK\u0026pid=15.1 HTTP/1.1\r\nHost: ts2.mm.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=1209600\r\ncontent-length: 19140\r\ncontent-type: image/jpeg\r\nx-cache: TCP_MISS\r\nhttpcacheability: 4\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ntiming-allow-origin: *\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://aefd.nelreports.net/api/report?cat=bingth\u0026ndcParam=nadatio\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1.0}\r\nx-powered-by: ASP.NET\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: 1EE3CB0B7A7248A3A0DA323C7C67CDAF Ref B: OSL231050212052 Ref C: 2025-12-31T23:50:51Z\r\ndate: Wed, 31 Dec 2025 23:50:51 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":19140,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3","md5":"beaa3436e561cfb13e7def62faa57eb9","sha1":"1b7409aa2d50a714abc5218d78a0bf03513e8b4b","sha256":"300f9da4f14669b91b53c1cbf141f75187e7468fcc15e614c0390840e12e222b","sha512":"cb0542c13b51e91576b3717d0d7cf90757acec2e945e93b0db459243fa1cd7355643b7239c004bb8bb891d8be22493c1fc8f914822c0e13857b7585afb4a54fb","ssdeep":"384:X7L5jJ3pnU8YtGs57xy+fRvODwlo3t/1zA1hO0KPDa693cwVkWZfhqPZQ3:rlnUxIsd4+JvOslo9/dAq0g3cwVkW3","tlshash":"8b82e09b828fe79addc62bb8972ef1e911ac26b091375f096841bdc2af54c5d3503039","first_seen":"2025-12-31T23:51:27.279221Z","last_seen":"2025-12-31T23:51:27.279221Z","times_seen":1,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":74,"dns":0,"connect":0,"send":0,"wait":71,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/ac/f3/b2/acf3b22a6b662089f6bf24e9ab222171.js","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:54.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 00:50:13 GMT","end":"Sun, 29 Mar 2026 00:50:12 GMT"},"fingerprint":{"sha1":"B6:89:38:EE:EF:1E:F1:A0:93:51:BB:7A:F2:13:F5:DF:8C:9B:8F:F7","sha256":"74:22:2C:3F:1E:A6:04:C8:AD:7C:D8:B4:13:57:A5:95:EF:83:FA:28:18:BC:F3:BD:38:93:CB:DA:4B:30:3F:8A"}}},"request":{"raw":"GET /ac/f3/b2/acf3b22a6b662089f6bf24e9ab222171.js HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 31 Dec 2025 23:50:54 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 18884\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 5\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 211b4d29dc9a64d8572762a3b6a0889a\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":51450,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (51450), with no line terminators","md5":"e41d9a3e49e1538c5945dd6dd6652407","sha1":"1cb3ce4c28edb63e4ceec88f0b88b4cf9e1e6014","sha256":"ae1f4754fb66f229c01759b5b74b3976d08efa49cced03603bc53ea251f1f3f8","sha512":"05b89a3bd2c31b819cb8b9b5a35a5818e53174249d7ff65249e9627984fc783850bddd5df7f00cfb9783edf017b91225cadb70f9c51606fb1546ae57d2837e9d","ssdeep":"768:Hf9xpNBZtaip6qOthacqRAdw/xvj9RQRj3PYIokIiOij0xWTwZzmhj5oHbNnjLXl:9+th/qRAwyRtcWTboHbNnjLXV94bsj","tlshash":"9e3395543bc0654923978f7f323bf6caf4aa1d6b3818844ad105bd50b6a622bfdf1931","first_seen":"2025-11-22T18:02:14.379223Z","last_seen":"2025-12-31T23:51:27.28014Z","times_seen":6,"resource_available":true,"data":null}},"time_used":747,"timings":{"blocked":263,"dns":0,"connect":92,"send":0,"wait":102,"receive":98,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=24.48.4990\u0026tmpl=810\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2Fe1%2F6f%2Fbb%2Fe16fbbe9f31c82c23d1d57f9726b5fc7%2F1654616215.html\u0026l=1038\u0026fd=523","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:55.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 22:08:08 GMT","end":"Wed, 25 Mar 2026 22:08:07 GMT"},"fingerprint":{"sha1":"BE:03:A2:AD:89:FD:C3:94:0E:B0:AC:88:9E:E3:AD:33:6F:39:72:EA","sha256":"86:5E:AF:03:20:81:8A:65:09:C9:A1:D4:22:8C:8B:1F:82:60:C9:82:6B:01:09:E8:98:E2:F3:DA:A8:3C:D5:71"}}},"request":{"raw":"GET /pixel/sbls?bv=24.48.4990\u0026tmpl=810\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2Fe1%2F6f%2Fbb%2Fe16fbbe9f31c82c23d1d57f9726b5fc7%2F1654616215.html\u0026l=1038\u0026fd=523 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 31 Dec 2025 23:50:56 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T23:31:02.874036Z","times_seen":13307549,"resource_available":true,"data":null}},"time_used":669,"timings":{"blocked":287,"dns":1,"connect":93,"send":0,"wait":94,"receive":1,"ssl":191},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.xxmygirl.com/sexlist/brima-tiffany.htm#%23ICON%23%23","fqdn":"www.xxmygirl.com","domain":"xxmygirl.com","tld":"com"},"ip":{"addr":"104.21.16.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:56.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxmygirl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 12:10:29 GMT","end":"Mon, 09 Feb 2026 13:09:16 GMT"},"fingerprint":{"sha1":"6B:EB:7A:AD:65:BC:A2:EA:19:0C:22:14:2D:97:8B:2D:E8:05:D8:5B","sha256":"C7:38:A9:16:95:A0:F3:B2:EF:4F:3B:F9:E8:92:F9:39:EB:71:B6:0E:D2:59:5A:BC:22:16:10:A8:5B:B5:BC:DB"}}},"request":{"raw":"GET /sexlist/brima-tiffany.htm HTTP/1.1\r\nHost: www.xxmygirl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=8d2ec8e3-c911-4363-be90-1959906766e3%3A1%3A1; pp_main_794a2d540c40b1a3bd9a97a0e4bcc586=1; sb_main_ee746d575b41b2d1f7eab8c18240d37b=1; sb_count_ee746d575b41b2d1f7eab8c18240d37b=1; pbpr0tpuw4isk85t8yg3jb2lj5vqf=skinnycrawlinglax.com; sb_main_acf3b22a6b662089f6bf24e9ab222171=1; sb_count_acf3b22a6b662089f6bf24e9ab222171=1; _popprepop=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BP7ESpCCsgz37T9bvvK8yvUkv9RxMIV3gfJmnLkt2O6AhkILrMaDiV%2BSEKSKu05CMkCjDbE7w213slSjF%2F1TlMasd9dhNiUJMAB%2FEeun\"}]}\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 30 Jan 2026 23:50:56 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ndate: Wed, 31 Dec 2025 23:50:56 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9b6dae9d6b0e56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:1.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"imagesLoaded","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":44652,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (4703), with CRLF, LF line terminators","md5":"82b87d66a16323e911751c8119c1e478","sha1":"96f8415e11ddd4b46bfa037a274de9330c9b60cc","sha256":"7fda60ff2b4a2e652057591fa5ef4c3d154f0c61fc8207ad09cfd53339af1f29","sha512":"edf5dbcc61556debcabb4c95c7871f398e7f1ead543c7183b1f87b4a118436c5440ec87a6b4a37ed634dff31d653c47bca2adf9dc9191fa9a7cdc08fd8eae887","ssdeep":"768:2A5AbZ4PGgBn18tyQMjBOpSxS0qGxW3s6ty1H3gC9rd5eTHazYLJwJL+NSqwpQ4k:JeVoGgBn18tyQMjBOpSxS0qGxW3s6ty2","tlshash":"de13837fb7418116cef135eb25a83368a58f8eed4d0154b8b0cba72ae707e542897cc5","first_seen":"2025-12-31T23:51:27.281117Z","last_seen":"2025-12-31T23:51:27.281117Z","times_seen":1,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.xxmygirl.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ts2.mm.bing.net/th?id=OIP.Xf9bJSzGoVg0SLes8omXNAHaEK\u0026pid=15.1","fqdn":"ts2.mm.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:51.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mm.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 19 Oct 2025 14:07:53 GMT","end":"Fri, 17 Apr 2026 14:07:53 GMT"},"fingerprint":{"sha1":"87:26:AF:B1:86:84:6C:71:2A:20:8E:FB:BA:96:6F:1E:FC:D0:B5:E2","sha256":"D9:41:70:A4:15:0F:6F:6D:39:7B:E8:22:5C:C3:7C:55:6E:75:E0:81:F9:57:09:A6:0C:12:05:62:BB:94:B4:6E"}}},"request":{"raw":"GET /th?id=OIP.Xf9bJSzGoVg0SLes8omXNAHaEK\u0026pid=15.1 HTTP/1.1\r\nHost: ts2.mm.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=1209600\r\ncontent-length: 24158\r\ncontent-type: image/jpeg\r\nx-cache: TCP_MISS\r\nhttpcacheability: 4\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ntiming-allow-origin: *\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://aefd.nelreports.net/api/report?cat=bingth\u0026ndcParam=nadatio\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1.0}\r\nx-powered-by: ASP.NET\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: 50025AEC51AD4E109F8EE2BAB899F802 Ref B: OSL231050212052 Ref C: 2025-12-31T23:50:51Z\r\ndate: Wed, 31 Dec 2025 23:50:51 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":24158,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3","md5":"06dc3e1c8d63148741a9e37d1afb03f3","sha1":"19b46fc2d6f1bc2111f307713762a0c0175bae6d","sha256":"e7534e79c40e2dc012517fba7de117f782967c212d30791aa2d953524019845d","sha512":"b33f831ed33ff9ab712c477fafd5d7b7589e5562862182b0692e03ba86d55d52e0a1ae0b19ae028a1712cefb233cd2aff853dc2d6c75cdbf0a94f0eb0d00aa3d","ssdeep":"384:27Nre3NfcWQmZa6XNjyA+NfGkutWO5N+wQgpQPXOoKLGkPMf95kHQ0/BpQI8Tucz:SNCVcq5NjSNm9fkPXWLGqiupQ7TMry","tlshash":"46b2e0f5af3d7b8b8cd5e6ad5fddb07deb8030c63200aa5042498431b9491970089f76","first_seen":"2025-12-31T23:51:27.282011Z","last_seen":"2025-12-31T23:51:27.282011Z","times_seen":1,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":77,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ts3.mm.bing.net/th?id=OIP.6_txZM7_8pYVx7Sqk0wAJgHaEK\u0026pid=15.1","fqdn":"ts3.mm.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:51.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mm.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 19 Oct 2025 14:07:53 GMT","end":"Fri, 17 Apr 2026 14:07:53 GMT"},"fingerprint":{"sha1":"87:26:AF:B1:86:84:6C:71:2A:20:8E:FB:BA:96:6F:1E:FC:D0:B5:E2","sha256":"D9:41:70:A4:15:0F:6F:6D:39:7B:E8:22:5C:C3:7C:55:6E:75:E0:81:F9:57:09:A6:0C:12:05:62:BB:94:B4:6E"}}},"request":{"raw":"GET /th?id=OIP.6_txZM7_8pYVx7Sqk0wAJgHaEK\u0026pid=15.1 HTTP/1.1\r\nHost: ts3.mm.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=1209600\r\ncontent-length: 15588\r\ncontent-type: image/jpeg\r\nx-cache: TCP_MISS\r\nhttpcacheability: 4\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ntiming-allow-origin: *\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://aefd.nelreports.net/api/report?cat=bingth\u0026ndcParam=nadatio\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1.0}\r\nx-powered-by: ASP.NET\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: 2FCE91CAA23A46C0A997E1C7E5E170C8 Ref B: OSL231050212052 Ref C: 2025-12-31T23:50:52Z\r\ndate: Wed, 31 Dec 2025 23:50:51 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":15588,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3","md5":"1ce9e8f38beb2425de5740f4c936f0ff","sha1":"080f58f03940140ce47536e1c2f67160c008aa7b","sha256":"aba370fc3b7638ddfac1bbd80a79791269954ff30ed5cfafff2c32c4007bbc09","sha512":"fe903a1ab118049afb9d48831a30baed9ec993299cf0e07f943bc069c0a0227f2bcd8351398f68d8806a2ef9236019c64fc340ba92807033f0963ad9700aa76d","ssdeep":"384:A7txvV2ErW3MCXOyqp40qxs7XlGYyEFM0byN0jw5WqgbVD:gtxvVJrAMCXOyqWxYj/2bGE5sD","tlshash":"c662b0044bcd9360d6cbe27c83af30ba49957972bc46130bd5999af414245fac5e3b8d","first_seen":"2025-12-31T23:51:27.282939Z","last_seen":"2025-12-31T23:51:27.282939Z","times_seen":1,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":9,"connect":17,"send":0,"wait":45,"receive":1,"ssl":123},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yy610eoghin9.n4.adsco.re/","fqdn":"yy610eoghin9.n4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"38.132.109.126","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:53.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.n4.adsco.re","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Nov 2025 09:14:20 GMT","end":"Wed, 11 Feb 2026 09:14:19 GMT"},"fingerprint":{"sha1":"FB:34:12:01:B6:D1:B3:BD:9C:64:10:4B:29:6B:C7:44:FD:21:82:69","sha256":"D8:BD:52:A0:9E:11:2A:7E:51:D4:43:1D:9D:F7:F0:66:68:70:DF:0B:20:4A:38:60:4C:B5:37:82:2C:42:01:6B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: yy610eoghin9.n4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.xxmygirl.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 23:50:53 GMT\r\ncontent-type: text/html\r\ncontent-length: 0\r\nlast-modified: Fri, 16 Jun 2023 08:37:42 GMT\r\netag: \"648c1f56-0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T23:31:02.874036Z","times_seen":13307549,"resource_available":true,"data":null}},"time_used":885,"timings":{"blocked":395,"dns":130,"connect":87,"send":0,"wait":88,"receive":0,"ssl":182},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=24.48.4990\u0026tmpl=810\u0026u=https%3A%2F%2Fcdn.creative-sb1.com%2Fsb%2Fssp%2Fin-page_push%2Fos%2Fandroid%2F2%2Fcss%2Fstyle.css\u0026l=4682\u0026fd=115","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:56.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 22:08:08 GMT","end":"Wed, 25 Mar 2026 22:08:07 GMT"},"fingerprint":{"sha1":"BE:03:A2:AD:89:FD:C3:94:0E:B0:AC:88:9E:E3:AD:33:6F:39:72:EA","sha256":"86:5E:AF:03:20:81:8A:65:09:C9:A1:D4:22:8C:8B:1F:82:60:C9:82:6B:01:09:E8:98:E2:F3:DA:A8:3C:D5:71"}}},"request":{"raw":"GET /pixel/sbls?bv=24.48.4990\u0026tmpl=810\u0026u=https%3A%2F%2Fcdn.creative-sb1.com%2Fsb%2Fssp%2Fin-page_push%2Fos%2Fandroid%2F2%2Fcss%2Fstyle.css\u0026l=4682\u0026fd=115 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nCookie: uid_id2=8d2ec8e3-c911-4363-be90-1959906766e3:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl16620572=1; slecacf3b22a6b662089f6bf24e9ab222171=[6259582]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 31 Dec 2025 23:50:56 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T23:31:02.874036Z","times_seen":13307549,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:57.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.xxmygirl.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 19:22:36 GMT\r\nexpires: Wed, 30 Dec 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 102501\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-03T23:31:22.080424Z","times_seen":713337,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6.adsco.re:2087/","fqdn":"6.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.16.84.77","port":2087,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:53.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 6.adsco.re:2087\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.xxmygirl.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 23:50:53 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 45\r\ncf-ray: 9b6dae87ce7256af-OSL\r\naccess-control-allow-origin: https://www.xxmygirl.com\r\ncache-control: private, max-age=300, immutable, stale-if-error=300, stale-while-revalidate=300\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\naccess-control-max-age: 2592000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":2087\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":17,"dns":1,"connect":1,"send":0,"wait":27,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/in-page_push/os/android/2/css/style.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"172.67.210.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:55.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:26:15 GMT","end":"Wed, 25 Mar 2026 23:23:44 GMT"},"fingerprint":{"sha1":"05:E7:A3:19:D2:55:91:F8:B7:45:48:72:0B:86:C7:0C:2C:CA:27:03","sha256":"14:76:91:36:84:B6:CF:C4:0A:BA:6F:14:80:F9:C7:77:48:3B:08:A3:C8:48:DC:0F:F6:CE:86:72:BB:CC:0B:06"}}},"request":{"raw":"GET /sb/ssp/in-page_push/os/android/2/css/style.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.xxmygirl.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 23:50:56 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65aa8500-124a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\nage: 1021105\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EPEX32eCI0ahOIF6KVGpoQhKsPSKXb3NjeU2KS6v8Sv9h19ycBWvYWJh1OIEsmqm5nbgNCIjDQJ%2Btl5BnyQ0hQyFPVDxGn3jkgx4SQcx\"}]}\r\ncf-ray: 9b6dae98097c56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4682,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"7ad23d9668c9b8532ded3994515354be","sha1":"9290a13e0f2adc3968a20c600eb1a338b9622051","sha256":"6927de206bba6147969b9a6f208b6dd605d4c11755a310678521f9c6d4d47ffe","sha512":"cc4acd3345a2839b149ea6312477d35063a7bfddb4c6988e5172bfc0cebffd34501906849c091ebcf62fbcb9631fb8c797ec768b91090d027d400b49ac3a1741","ssdeep":"96:2Ci7aTMXYM1Fezms0HhIHhpLiRiVmJxMX5eiVPJUZQoBqj793tnaluqto9eMS:2OMX51F4OHhIHhZJAJxMX5TPJelAJaQm","tlshash":"79a1ed962b771a04b80bd4ab3f6a2707271440039a0fed647fc9624c8fc51a8d6a278f","first_seen":"2024-04-14T09:02:27Z","last_seen":"2026-03-17T08:11:57.708893Z","times_seen":1133,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":35,"dns":0,"connect":3,"send":0,"wait":6,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ts3.mm.bing.net/th?id=OIP.2N0oM9NtgJxpBZPlcdq0oQHaEK\u0026pid=15.1","fqdn":"ts3.mm.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:51.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mm.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 19 Oct 2025 14:07:53 GMT","end":"Fri, 17 Apr 2026 14:07:53 GMT"},"fingerprint":{"sha1":"87:26:AF:B1:86:84:6C:71:2A:20:8E:FB:BA:96:6F:1E:FC:D0:B5:E2","sha256":"D9:41:70:A4:15:0F:6F:6D:39:7B:E8:22:5C:C3:7C:55:6E:75:E0:81:F9:57:09:A6:0C:12:05:62:BB:94:B4:6E"}}},"request":{"raw":"GET /th?id=OIP.2N0oM9NtgJxpBZPlcdq0oQHaEK\u0026pid=15.1 HTTP/1.1\r\nHost: ts3.mm.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=1209600\r\ncontent-length: 20735\r\ncontent-type: image/jpeg\r\nx-cache: TCP_MISS\r\nhttpcacheability: 4\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ntiming-allow-origin: *\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://aefd.nelreports.net/api/report?cat=bingth\u0026ndcParam=nadatio\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1.0}\r\nx-powered-by: ASP.NET\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: 4F9AEE9FC95B4469A66C394F3D3C4C93 Ref B: OSL231050212052 Ref C: 2025-12-31T23:50:52Z\r\ndate: Wed, 31 Dec 2025 23:50:51 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":20735,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3","md5":"b8efd268d82c854b4c83b52b25c05dbe","sha1":"92c0e956bb487731178c3561dccb535a9ff27eac","sha256":"021fbd1b90a579f4817692704ba95c29d0ab4bede07972a532a0d42e93962b81","sha512":"95d9cc3e8d3db76f0265f0ec4e8ee70c6c7716df453283dc82c7268a19a3db42d61c96de0db8d5e0e27257d542ec474ab18c6689e4f268eaad85818c1669a9c7","ssdeep":"384:x7tHK4TtiKvuUsF8XPQ+zTG+CHRCMrbkfYqpvhdyVQ20rR:RtzvbsaXPQ+/ghqpZdtrR","tlshash":"f192c02b1a4d0b918f90eabd1d0efc1f6519b7887772f6293f8a5a60ce5335d840e94c","first_seen":"2025-12-31T23:51:27.284091Z","last_seen":"2025-12-31T23:51:27.284091Z","times_seen":1,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":10,"connect":18,"send":0,"wait":44,"receive":0,"ssl":122},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xxmygirl.com/themes/javascript/age-verification.js","fqdn":"www.xxmygirl.com","domain":"xxmygirl.com","tld":"com"},"ip":{"addr":"104.21.16.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:52.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxmygirl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 12:10:29 GMT","end":"Mon, 09 Feb 2026 13:09:16 GMT"},"fingerprint":{"sha1":"6B:EB:7A:AD:65:BC:A2:EA:19:0C:22:14:2D:97:8B:2D:E8:05:D8:5B","sha256":"C7:38:A9:16:95:A0:F3:B2:EF:4F:3B:F9:E8:92:F9:39:EB:71:B6:0E:D2:59:5A:BC:22:16:10:A8:5B:B5:BC:DB"}}},"request":{"raw":"GET /themes/javascript/age-verification.js HTTP/1.1\r\nHost: www.xxmygirl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/sexlist/brima-tiffany.htm\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1021\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=2678400\r\nexpires: Sun, 11 Jan 2026 02:27:13 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 22 Jul 2022 03:36:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\npriority: u=3,i=?0\r\ndate: Wed, 31 Dec 2025 23:50:52 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nage: 1718618\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sd64whqOBJq5bhJFkNjLxhJDawVhnily9PQdtVXMrzJAU9YFe6o30hn%2BKTeDEjrdzVSBAWy4NZW5IE77ptuh4yIbH2pu6mGbJdtQ5ZNs\"}]}\r\ncf-ray: 9b6dae7f0a1a56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3078,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (301)","md5":"497b425d12cff733c92d673650574359","sha1":"ad50854529a8d05c960748cc52338d5eb077e4b5","sha256":"f9797733d7e1be884ed36a2ebed1e72d672e9ff23815a922d8f64712c7b4ca74","sha512":"fe526375cdf125445336138e1e87fb2a14dde4404da269b8f8725aac06711804be5f5f9e5b2a28069c63586b8859f2ff9ddc7add09fe286965e3207dc26b9d65","ssdeep":"","tlshash":"3e511036fabc9058833f552ffb2efac8223552eae6297d4740f4c5ac47d2a4106a1167","first_seen":"2023-04-16T22:44:55Z","last_seen":"2026-03-12T21:53:02.234493Z","times_seen":99,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.xxmygirl.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:54.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 23:36:36 GMT","end":"Sat, 28 Mar 2026 23:36:35 GMT"},"fingerprint":{"sha1":"0E:EE:1D:ED:80:5A:CA:0C:1E:93:89:94:78:B7:34:91:38:D4:89:51","sha256":"CF:77:1B:FB:04:67:32:02:DF:D9:38:24:27:3D:A5:98:54:0C:4D:BA:C5:1B:62:FD:C1:E1:17:57:6F:63:B3:BF"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 31 Dec 2025 23:50:54 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: cea4b90ef8b693f5d8ce5092333167f7\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-04-03T23:36:18.877352Z","times_seen":13149,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":90,"dns":0,"connect":18,"send":0,"wait":21,"receive":19,"ssl":54},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/in-page_push/os/android/2/css/animate.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"172.67.210.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:55.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:26:15 GMT","end":"Wed, 25 Mar 2026 23:23:44 GMT"},"fingerprint":{"sha1":"05:E7:A3:19:D2:55:91:F8:B7:45:48:72:0B:86:C7:0C:2C:CA:27:03","sha256":"14:76:91:36:84:B6:CF:C4:0A:BA:6F:14:80:F9:C7:77:48:3B:08:A3:C8:48:DC:0F:F6:CE:86:72:BB:CC:0B:06"}}},"request":{"raw":"GET /sb/ssp/in-page_push/os/android/2/css/animate.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.xxmygirl.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 23:50:56 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65aa8500-13361\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\nage: 1420379\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=josI0gntGbgTvKrE9MfJ4C8guTt7MdgHuqZU4%2BM%2FIWngEYAS0FyNo3Kp6WCQxp%2BwVgTB%2BHExbp9b4c0FSzPqz85p0zWaFtj3glWjZ6%2FA\"}]}\r\ncf-ray: 9b6dae98097856b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78689,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3d4123dbfb33d27a5cfdfcfa91df6783","sha1":"e7d0eeeec54b848f0bc3da8685fa3bc88429d660","sha256":"cb7d1393b65701b2f97d8da244c2c6023e9cbc3463ecb0136b915cfc775c6887","sha512":"75c8a48dc207595e201b50b87ff68782112a21aded9f15f14185c07d40f0151d6afe74a2b278aa575caf12ac422e8166316296ed7b6573ea24e667cca4af51dd","ssdeep":"384:jvuAuF81dghu3ublZlX/m/Gu7uNUtrL4VrbZJgBhLYNKwZiMUL6Vpaj7F:jvuAu21dghu3uLu7uNKwZiMUL6Vpaj7F","tlshash":"22731bad399115845263861d83df9e68273ce5731826acef73c2488bcf8bf9867c9147","first_seen":"2024-01-20T06:37:31Z","last_seen":"2026-04-03T21:08:41.899388Z","times_seen":10529,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":33,"dns":1,"connect":1,"send":0,"wait":9,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ts1.mm.bing.net/th?id=OIP.lXyXhCl393oaY9uHhqFaZgHaEK\u0026pid=15.1","fqdn":"ts1.mm.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.27.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:51.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mm.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 19 Oct 2025 14:07:53 GMT","end":"Fri, 17 Apr 2026 14:07:53 GMT"},"fingerprint":{"sha1":"87:26:AF:B1:86:84:6C:71:2A:20:8E:FB:BA:96:6F:1E:FC:D0:B5:E2","sha256":"D9:41:70:A4:15:0F:6F:6D:39:7B:E8:22:5C:C3:7C:55:6E:75:E0:81:F9:57:09:A6:0C:12:05:62:BB:94:B4:6E"}}},"request":{"raw":"GET /th?id=OIP.lXyXhCl393oaY9uHhqFaZgHaEK\u0026pid=15.1 HTTP/1.1\r\nHost: ts1.mm.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=1209600\r\ncontent-length: 20632\r\ncontent-type: image/jpeg\r\nx-cache: TCP_MISS\r\nhttpcacheability: 4\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ntiming-allow-origin: *\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://aefd.nelreports.net/api/report?cat=bingth\u0026ndcParam=nadatio\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1.0}\r\nx-powered-by: ASP.NET\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: 99E25E6D41AF4811951B9EAF226E97AA Ref B: OSL231050212023 Ref C: 2025-12-31T23:50:51Z\r\ndate: Wed, 31 Dec 2025 23:50:51 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":20632,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3","md5":"fbdf2479203361daea21ad14bb6b3407","sha1":"a4fdccbcf7dac7af83c49d8010016f353d03b992","sha256":"26e974eb95033e009161ca32f3fac91886476af78be8bdf0b0cd0e56e6d66f94","sha512":"d7b08075fcfe20b152e9abbf46927c2492aa60fdc6e006014bfd15242cc9eefee6f1cfc67376104d4877111178d75d666c8fb38d27aa8ee552190e7fb8ebbb26","ssdeep":"384:27pGn1lq+jDkPHskSuMzswjpIs23UypF5WhJtBeEycCKPk5x:Sg7Y+vBj1JzbztdPw","tlshash":"9e92d01f4a2e3fd6edd535a9e04e39bd336a5128c71493b70ba5138e508207b796837c","first_seen":"2025-12-31T23:51:27.28729Z","last_seen":"2025-12-31T23:51:27.28729Z","times_seen":1,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":17,"connect":3,"send":0,"wait":59,"receive":1,"ssl":115},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:55.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 23:36:36 GMT","end":"Sat, 28 Mar 2026 23:36:35 GMT"},"fingerprint":{"sha1":"0E:EE:1D:ED:80:5A:CA:0C:1E:93:89:94:78:B7:34:91:38:D4:89:51","sha256":"CF:77:1B:FB:04:67:32:02:DF:D9:38:24:27:3D:A5:98:54:0C:4D:BA:C5:1B:62:FD:C1:E1:17:57:6F:63:B3:BF"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 31 Dec 2025 23:50:55 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 023d3c350f8ff298cde43f38b59542de\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-04-03T23:36:18.877352Z","times_seen":13149,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intelligenceadx.com/vjrkrtwschenp?lDFvqsQM=BQNyAAAAAAAACZUAAmNwnkQvxnhoRzkESwQVgrhG81vW0vN7wNSHb4j49LnxQZsgFMnTR0tBlWnnOdHVv1ui9gKqgvo3Kyt_pPknhQmGcKRcmVmZcKhpvJtygrOGZDvjOZoBVBCS-VkGmCSPZ-A5OPuP3AQjCjujYB3AL9UHJaBiNDw6XbJGfmnYRj1Wj0Xk6PE7UACUdagGpl0zaMSFZSP5FgcOAPsyThkue2EbT0LGbCOhKDFtYlNaX69tAsyZ6EdHQW1hsr3ROuZrtwST8eQzMI_M2T-tNQyeFICh-vsCjtSYcSG_KRQnOICXBhkMnIxusDCZ6GEzebIcZkFrdmFuIWCO2aZIQ00H6fOURpWxY1yBv63Lv0u0vhDnRCQ4IQtgWgvr13OdLENzf8GENv69XTyABP6-HPjNvCUbqrYNDIzebhGEUf9r6zhiXI5QBqMZxwrDIuWwVPpcjN4Z13rVQZcwGr9QdSUni14Abaa_8RIHuPkSL9-3JawpOO0kpzsw5Yjg7W6JXSjcfzeJi1c5HbNQEc9TjMOmT85LNEvd2b3lkyQBQyCV8-c0vXv6S4zCHNC5f7utm61fSr7p5mVvngbr-stL4K5Ja_mhPdA6AWgEna0ZMls9cYef-AQXqmf8YsLneGOJrKoYnQNyHkvxtceC116rf4IdxwbajV7QsZXaXVVyi6FSFa_AmLfA3H9vgJJ9T_skAUCFVpOkBN2H107MZDHzmof2ez911q-E1X62Gp2oMXO5Fkb6uS2daNtM6RaRlpcnHiuhkfB7VkrNewU5HKVKo-i5NX1dsqWVmuxAfhg2685FCN7WeylDhNqwhc6ROfW3LnAwS86CzLaBPGQTJqqrJA5c2OjLCCsm4Nx2su7H5QBr7eF681aQHWSSeMmEGvFmCnte6UInwmfu3Or02WawS-gYBACoPdubHvarkhWzbp-lW9RN31NEK0irsPzcHH1a6nlFgPsmhEiicAmBERMU_W4qGQ-VfPXjTnSy4l8rejAebS6Ik9RGAo8MwlGfaGYLy01ZKEnEBUW1oAmWXhVPVs7lT-6DGK9X0eJ0oba754MY5dfMevO40kbAOBCMZeV_clX4TyRePk2gO_FNDWHXVg7hNCsjyciThO2jL7WNMqAnyLyK4s2GzFKFqjv-8dwaLl49lddktyA72lFMBZ33FZ3FF0w\u0026tYvjDyZI=4\u0026RaoLBkgE=4791157\u0026ZSAwHNct=\u0026HaAPEMIY=0,0\u0026weAdUfmD=\u0026fdgTzrxW=\u0026jXuxqQTw=1280,1024,1,1280,1024,0","fqdn":"intelligenceadx.com","domain":"intelligenceadx.com","tld":"com"},"ip":{"addr":"208.95.114.100","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:55.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"intelligenceadx.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 04 Apr 2025 00:00:00 GMT","end":"Tue, 05 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BB:72:94:6A:70:D1:57:77:77:94:C0:B2:5D:D9:4B:21:50:01:A9:EA","sha256":"D2:95:A2:80:F9:9D:D0:6A:F9:69:A4:1F:1D:36:37:CF:38:B4:C0:2B:39:B3:6F:8D:3A:38:6E:26:C1:01:2E:F8"}}},"request":{"raw":"GET /vjrkrtwschenp?lDFvqsQM=BQNyAAAAAAAACZUAAmNwnkQvxnhoRzkESwQVgrhG81vW0vN7wNSHb4j49LnxQZsgFMnTR0tBlWnnOdHVv1ui9gKqgvo3Kyt_pPknhQmGcKRcmVmZcKhpvJtygrOGZDvjOZoBVBCS-VkGmCSPZ-A5OPuP3AQjCjujYB3AL9UHJaBiNDw6XbJGfmnYRj1Wj0Xk6PE7UACUdagGpl0zaMSFZSP5FgcOAPsyThkue2EbT0LGbCOhKDFtYlNaX69tAsyZ6EdHQW1hsr3ROuZrtwST8eQzMI_M2T-tNQyeFICh-vsCjtSYcSG_KRQnOICXBhkMnIxusDCZ6GEzebIcZkFrdmFuIWCO2aZIQ00H6fOURpWxY1yBv63Lv0u0vhDnRCQ4IQtgWgvr13OdLENzf8GENv69XTyABP6-HPjNvCUbqrYNDIzebhGEUf9r6zhiXI5QBqMZxwrDIuWwVPpcjN4Z13rVQZcwGr9QdSUni14Abaa_8RIHuPkSL9-3JawpOO0kpzsw5Yjg7W6JXSjcfzeJi1c5HbNQEc9TjMOmT85LNEvd2b3lkyQBQyCV8-c0vXv6S4zCHNC5f7utm61fSr7p5mVvngbr-stL4K5Ja_mhPdA6AWgEna0ZMls9cYef-AQXqmf8YsLneGOJrKoYnQNyHkvxtceC116rf4IdxwbajV7QsZXaXVVyi6FSFa_AmLfA3H9vgJJ9T_skAUCFVpOkBN2H107MZDHzmof2ez911q-E1X62Gp2oMXO5Fkb6uS2daNtM6RaRlpcnHiuhkfB7VkrNewU5HKVKo-i5NX1dsqWVmuxAfhg2685FCN7WeylDhNqwhc6ROfW3LnAwS86CzLaBPGQTJqqrJA5c2OjLCCsm4Nx2su7H5QBr7eF681aQHWSSeMmEGvFmCnte6UInwmfu3Or02WawS-gYBACoPdubHvarkhWzbp-lW9RN31NEK0irsPzcHH1a6nlFgPsmhEiicAmBERMU_W4qGQ-VfPXjTnSy4l8rejAebS6Ik9RGAo8MwlGfaGYLy01ZKEnEBUW1oAmWXhVPVs7lT-6DGK9X0eJ0oba754MY5dfMevO40kbAOBCMZeV_clX4TyRePk2gO_FNDWHXVg7hNCsjyciThO2jL7WNMqAnyLyK4s2GzFKFqjv-8dwaLl49lddktyA72lFMBZ33FZ3FF0w\u0026tYvjDyZI=4\u0026RaoLBkgE=4791157\u0026ZSAwHNct=\u0026HaAPEMIY=0,0\u0026weAdUfmD=\u0026fdgTzrxW=\u0026jXuxqQTw=1280,1024,1,1280,1024,0 HTTP/1.1\r\nHost: intelligenceadx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\npopads-node: wb9\r\naccess-control-allow-origin: *\r\nasf: 9\r\npopads-ec: ASB\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-length: 44\r\ndate: Wed, 31 Dec 2025 23:50:55 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":44,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"d5f0a25e4d3522d56d48ce7bc3e518fb","sha1":"86794caff58f7fee6e684c2ba7195f970a8d6f4c","sha256":"9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5","sha512":"a3a81801f516a4eb11f00d6f56dab0ed4b8a79219e6b4f5436993479f09dae08f14cffbab3327ff66fb39201d8eba1153ae7114f7705a01cc6f0edf840ef1616","ssdeep":"","tlshash":"789002801814116115d1500b8d5159d01259b1a4540801324446ca502dc7883a415774","first_seen":"2023-03-07T01:17:45Z","last_seen":"2026-04-03T23:31:52.484042Z","times_seen":22736,"resource_available":true,"data":null}},"time_used":728,"timings":{"blocked":305,"dns":1,"connect":94,"send":0,"wait":117,"receive":0,"ssl":208},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"intelligenceadx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/si/847ce550794c0faa68305126eb5944e905192309033bd90575dfa8bb79fc9209.png","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:56.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:33:02 GMT","end":"Thu, 05 Feb 2026 02:33:01 GMT"},"fingerprint":{"sha1":"FF:BB:C7:F6:31:A3:EE:08:8E:72:C4:2F:A2:C8:78:1B:3C:22:C4:57","sha256":"93:BE:65:88:B5:AC:E6:69:91:EE:F6:7E:27:3F:D6:9F:59:B1:AB:46:F7:49:0D:E8:F2:1C:9E:A9:BE:F9:B6:95"}}},"request":{"raw":"GET /si/847ce550794c0faa68305126eb5944e905192309033bd90575dfa8bb79fc9209.png HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 23:50:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 6359\r\nserver: nginx/1.21.6\r\nlast-modified: Thu, 24 Oct 2024 15:52:28 GMT\r\netag: \"671a6d3c-18d7\"\r\nexpires: Fri, 02 Jan 2026 23:50:56 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6359,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3","md5":"0beb662b0d17c9deab9b094bb79629ed","sha1":"69c012eccdc927949f609776784652ad85970286","sha256":"4319f2026d966d428de82f23e33521b096eb01ae0b4a9460bbb9f01511258fb7","sha512":"772b901ebec54dc5692a6e2f601a2ddf68415e13147b25c1f6e2ad14824c9f101e8ea01bfb53fe96304ae89134a36ec50d00332587d411189704ce6dbe5444cf","ssdeep":"96:IElbw+iwcIYcYx2D2SgpAjKwq2Ed8LkH7vNCMTjj1i+tgipA2Ba74DRPif154E:9w0S326S7q2zLkH70MHEegMBDd0oE","tlshash":"8bd1af54634643aef676abb37462175332151463db30466070cf6bc08e9cccaaf26ab6","first_seen":"2024-10-25T01:28:34.347246Z","last_seen":"2026-02-08T18:07:09.099811Z","times_seen":982,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":44,"dns":0,"connect":20,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=24.48.4990\u0026tmpl=810\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Fin-page_push%2Fos%2Fandroid%2F2%2Fjs%2Fscript.js\u0026l=404\u0026fd=49","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:56.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 22:08:08 GMT","end":"Wed, 25 Mar 2026 22:08:07 GMT"},"fingerprint":{"sha1":"BE:03:A2:AD:89:FD:C3:94:0E:B0:AC:88:9E:E3:AD:33:6F:39:72:EA","sha256":"86:5E:AF:03:20:81:8A:65:09:C9:A1:D4:22:8C:8B:1F:82:60:C9:82:6B:01:09:E8:98:E2:F3:DA:A8:3C:D5:71"}}},"request":{"raw":"GET /pixel/sbls?bv=24.48.4990\u0026tmpl=810\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Fin-page_push%2Fos%2Fandroid%2F2%2Fjs%2Fscript.js\u0026l=404\u0026fd=49 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 31 Dec 2025 23:50:56 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T23:31:02.874036Z","times_seen":13307549,"resource_available":true,"data":null}},"time_used":643,"timings":{"blocked":269,"dns":1,"connect":91,"send":0,"wait":93,"receive":0,"ssl":186},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.intelligenceadx.com/fjson.min.js","fqdn":"www.intelligenceadx.com","domain":"intelligenceadx.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:51.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1868349309.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 16:39:05 GMT","end":"Tue, 10 Feb 2026 16:39:04 GMT"},"fingerprint":{"sha1":"C4:0D:0B:27:61:6F:77:0A:F6:BE:83:C5:8D:3B:4E:30:A5:64:70:47","sha256":"92:56:EB:06:47:BF:20:23:7A:AE:C9:60:78:79:B6:18:A1:29:A7:13:D1:59:E9:9D:C9:B9:26:FD:7C:7C:FF:36"}}},"request":{"raw":"GET /fjson.min.js HTTP/1.1\r\nHost: www.intelligenceadx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.xxmygirl.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 23:50:52 GMT\r\ncontent-type: application/x-javascript\r\npopads-node: wb3\r\nexpires: Wed, 07 Jan 2026 22:37:34 GMT\r\naccess-control-allow-origin: https://www.xxmygirl.com\r\nlink: \u003chttps://intelligenceadx.com/\u003e;rel=preconnect\r\ncache-control: public, max-age=604800\r\nx-77-nzt: EwwBX63NDQHXSAIAAAwBuUwKAQH38goAAAwBJRPCNAG39AMAAA\r\nx-77-nzt-ray: 2a494a15f85e9a6901b75569efb17b03\r\nx-77-cache: HIT\r\nx-77-age: 584\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":41946,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (1568)","md5":"b471780de03c277e94da454229d31da5","sha1":"7867400c83770049b71ab1fc079822d96f50f529","sha256":"cfe3c1f79b9a9bf642bc51ac533f89e0c606be946c2c760d44a1cb777065e0b4","sha512":"c786b5c5600b4d772ee66da6bdb5b26498532bc4ea28c7796ced2cca1232f97297bc589da4ca2de085ccb41d97d5e371ef243caab1ca6c518082035b0aec99e4","ssdeep":"768:bt9rqAYKKiZzFQ9JsQU+YDngZGihfzmMzhYrTsAysncCWcf5k5sigC0fCntlqoDX:bbxZzFQ9JsTgZvfzmMzhYrTscpiZZ","tlshash":"3f133aaab286282601e741b9503eb316b23305167912d458fcb9cdf96e3ddc6117b7fc","first_seen":"2025-12-31T23:42:35.24108Z","last_seen":"2026-01-03T12:32:01.17832Z","times_seen":3,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":117,"dns":31,"connect":5,"send":0,"wait":3,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.intelligenceadx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:54.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 23:36:36 GMT","end":"Sat, 28 Mar 2026 23:36:35 GMT"},"fingerprint":{"sha1":"0E:EE:1D:ED:80:5A:CA:0C:1E:93:89:94:78:B7:34:91:38:D4:89:51","sha256":"CF:77:1B:FB:04:67:32:02:DF:D9:38:24:27:3D:A5:98:54:0C:4D:BA:C5:1B:62:FD:C1:E1:17:57:6F:63:B3:BF"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 31 Dec 2025 23:50:54 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 4d309a53bb9b035a443ecff4a43fd737\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-04-03T23:36:18.877352Z","times_seen":13149,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":113,"dns":14,"connect":17,"send":0,"wait":21,"receive":19,"ssl":59},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adsco.re/p","fqdn":"adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:55.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"POST /p HTTP/1.1\r\nHost: adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Length: 2854\r\nOrigin: https://www.xxmygirl.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 31 Dec 2025 23:50:55 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAS-P-1: OK lon123\r\nAS-P-2: OK\r\nAS-P-3: OK\r\nAccess-Control-Max-Age: 2592000\r\nCache-Control: no-transform\r\nAccept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR\r\nAccess-Control-Allow-Origin: https://www.xxmygirl.com\r\nAccess-Control-Allow-Credentials: true\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1191,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (1191), with no line terminators","md5":"bb310f8da6c9efd32e87d373a07e5057","sha1":"908f35669226a95b6a359c0a873043041db2750a","sha256":"06d85872551b502500beb246009c2f9a47d536a415e0bae5196a6b384d518841","sha512":"b1b70366842bc7ad828542d6d50106c8ee8c51f9fa4fae1bb3a5dfa074d557e3c127aa53e4ea71aada0896593cf39fe9882faeb48c8b2302602b016db3a57b06","ssdeep":"","tlshash":"ef21d7e3de4fa1893f0895e744e218423644905344b9a52e34b7ca084faf44e04496db","first_seen":"2025-12-31T23:51:27.302256Z","last_seen":"2025-12-31T23:51:27.302256Z","times_seen":1,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":87,"dns":1,"connect":27,"send":0,"wait":82,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=24.48.4990\u0026tmpl=810\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2Fe1%2F6f%2Fbb%2Fe16fbbe9f31c82c23d1d57f9726b5fc7%2F1654616215.html\u0026l=1038\u0026fd=523","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxmygirl.com/sexlist/brima-tiffany.htm","date":"2025-12-31T23:50:56.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 22:08:08 GMT","end":"Wed, 25 Mar 2026 22:08:07 GMT"},"fingerprint":{"sha1":"BE:03:A2:AD:89:FD:C3:94:0E:B0:AC:88:9E:E3:AD:33:6F:39:72:EA","sha256":"86:5E:AF:03:20:81:8A:65:09:C9:A1:D4:22:8C:8B:1F:82:60:C9:82:6B:01:09:E8:98:E2:F3:DA:A8:3C:D5:71"}}},"request":{"raw":"GET /pixel/sbls?bv=24.48.4990\u0026tmpl=810\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2Fe1%2F6f%2Fbb%2Fe16fbbe9f31c82c23d1d57f9726b5fc7%2F1654616215.html\u0026l=1038\u0026fd=523 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxmygirl.com/\r\nCookie: uid_id2=8d2ec8e3-c911-4363-be90-1959906766e3:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl16620572=1; slecacf3b22a6b662089f6bf24e9ab222171=[6259582]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 31 Dec 2025 23:50:56 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T23:31:02.874036Z","times_seen":13307549,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}