{"report_id":"59b730c4-9095-47e5-b3eb-eb9e0c7f0550","version":6,"status":"done","tags":[],"date":"2026-01-06T02:53:15Z","url":{"schema":"http","addr":"hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","fqdn":"hehehub-acsu123.pythonanywhere.com","domain":"hehehub-acsu123.pythonanywhere.com","tld":"pythonanywhere.com"},"ip":{"addr":"35.173.69.207","port":0,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","fqdn":"hehehub-acsu123.pythonanywhere.com","domain":"hehehub-acsu123.pythonanywhere.com","tld":"pythonanywhere.com"},"title":"Get Key HoHo Hub - Step 1","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","fqdn":"hehehub-acsu123.pythonanywhere.com","domain":"hehehub-acsu123.pythonanywhere.com","tld":"pythonanywhere.com"},"ip":{"addr":"35.173.69.207","port":0,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-10T02:53:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":32}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"loseimposeherself.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"politicalpiano.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"politicalpiano.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"politicalpiano.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"politicalpiano.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"relishsubsequentlytank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"relishsubsequentlytank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"relishsubsequentlytank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"relishsubsequentlytank.com","ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-02-06","domain_rank":5445233,"first_seen":"2025-03-15T18:14:46.825163Z","last_seen":"2025-12-20T19:30:55.028148Z","alert_count":3,"request_count":1,"received_data":107704,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"cdn.storageimagedisplay.com","ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-09-13","domain_rank":170153,"first_seen":"2024-09-13T12:56:32Z","last_seen":"2026-01-05T09:14:03.22878Z","alert_count":0,"request_count":15,"received_data":1036074,"sent_data":7706,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"flushpersist.com","ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-07-01","domain_rank":23810,"first_seen":"2025-07-08T10:43:12.76905Z","last_seen":"2025-12-31T21:11:25.087578Z","alert_count":6,"request_count":2,"received_data":1060,"sent_data":1570,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"weirdopt.com","ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":37519,"first_seen":"2025-07-08T12:55:47.272157Z","last_seen":"2026-01-01T07:47:27.133157Z","alert_count":3,"request_count":1,"received_data":377,"sent_data":437,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"loseimposeherself.com","ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-12-19","domain_rank":0,"first_seen":"2026-01-05T21:10:22.370554Z","last_seen":"2026-01-05T21:10:22.370554Z","alert_count":46,"request_count":46,"received_data":133237,"sent_data":81946,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"preferencenail.com","ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":20606,"first_seen":"2025-07-08T12:55:47.271261Z","last_seen":"2025-12-31T21:55:03.360474Z","alert_count":6,"request_count":2,"received_data":171912,"sent_data":864,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"raw.githubusercontent.com","ip":{"addr":"185.199.109.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2014-02-06","domain_rank":22021,"first_seen":"2014-03-01T07:08:08Z","last_seen":"2026-01-05T19:03:08.668871Z","alert_count":0,"request_count":1,"received_data":256779,"sent_data":518,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}]},{"fqdn":"protrafficinspector.com","ip":{"addr":"35.156.32.205","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2025-06-18","domain_rank":614186,"first_seen":"2025-07-25T22:45:21.95813Z","last_seen":"2025-12-30T21:57:49.11287Z","alert_count":0,"request_count":4,"received_data":1772,"sent_data":1936,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.show-sb.com","ip":{"addr":"104.21.95.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-20","domain_rank":187612,"first_seen":"2024-08-31T03:46:04Z","last_seen":"2025-12-30T09:11:40.166977Z","alert_count":1,"request_count":1,"received_data":2443,"sent_data":522,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"hehehub-acsu123.pythonanywhere.com","ip":{"addr":"35.173.69.207","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2011-03-24","domain_rank":0,"first_seen":"2025-06-21T22:31:46.104115Z","last_seen":"2025-12-20T19:30:55.085552Z","alert_count":0,"request_count":1,"received_data":14474,"sent_data":536,"comment":"","tags":null,"fingerprints":[{"name":"PythonAnywhere","description":"PythonAnywhere is an online integrated development environment (IDE) and web hosting service (Platform as a service) based on the Python programming language.","website":"https://www.pythonanywhere.com","common_platform_enumeration":"","icon":"PythonAnywhere.svg","categories":["PaaS","Hosting"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]}]},{"fqdn":"creative-sb1.com","ip":{"addr":"172.67.210.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-01","domain_rank":22211,"first_seen":"2025-08-08T09:32:32.509707Z","last_seen":"2025-12-30T08:11:41.528618Z","alert_count":21,"request_count":7,"received_data":240298,"sent_data":3336,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-04T22:14:09.841371Z","alert_count":0,"request_count":2,"received_data":81926,"sent_data":1138,"comment":"","tags":null,"fingerprints":null},{"fqdn":"sourshaped.com","ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-03","domain_rank":0,"first_seen":"2025-10-06T14:35:38.581947Z","last_seen":"2026-01-03T09:56:38.479224Z","alert_count":12,"request_count":4,"received_data":21393,"sent_data":6273,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-04T22:17:15.216142Z","alert_count":0,"request_count":1,"received_data":17441,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"wayfarerorthodox.com","ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-03","domain_rank":0,"first_seen":"2025-08-08T11:06:50.216151Z","last_seen":"2025-12-30T10:54:18.159058Z","alert_count":27,"request_count":9,"received_data":19135,"sent_data":8412,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"politicalpiano.com","ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-05-10","domain_rank":1616700,"first_seen":"2025-03-06T15:38:47.579109Z","last_seen":"2025-12-20T19:30:55.231098Z","alert_count":12,"request_count":3,"received_data":171307,"sent_data":1406,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"kettledroopingcontinuation.com","ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-01","domain_rank":196057,"first_seen":"2025-07-30T15:18:19.355595Z","last_seen":"2026-01-05T13:53:37.280905Z","alert_count":10,"request_count":2,"received_data":7838,"sent_data":1012,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/9c/5d/14/9c5d14453d6b11cdec5b98e5ce5af0dc.js","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"81c010ddfde2faeaf1c598844287df5a","sha1":"cd0fb06af4d1e8878a8c2c8d0311892ef13ff47b","sha256":"44442357bcab05b20364ed17aae2a3ae173b906529612b0e2f7d2217a76e51ab","sha512":"0acadda1dc3bba9f6178ba54356f2aed3dba23fbaf3b53b683fc5dd78eeff47a63ec7815ffbdb1e07041b274646eaa0a71ada2500f181775833f40761fc7cac8","ssdeep":"96:A9+XCx+8Ixmzn2ySej3zqIDNcxE6204l4sNm+E/0NK4Amfnqkk7lDAP2CwU6:A6Cg/S2yPXXWxW04fNPw6K4Amf4DAPA","tlshash":"13d1859c3e80b0a057b26077b97fa019b3696c50657fd80cd012b1a03e7562ad9bbba5","size":6454,"data":"","first_seen":"2025-12-01T12:09:20.892186Z","last_seen":"2026-01-29T12:50:40.978548Z","times_seen":4063,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/1e/e3/36/1ee3363d3f6736b5616821dca2afa5c7.js","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"81c010ddfde2faeaf1c598844287df5a","sha1":"cd0fb06af4d1e8878a8c2c8d0311892ef13ff47b","sha256":"44442357bcab05b20364ed17aae2a3ae173b906529612b0e2f7d2217a76e51ab","sha512":"0acadda1dc3bba9f6178ba54356f2aed3dba23fbaf3b53b683fc5dd78eeff47a63ec7815ffbdb1e07041b274646eaa0a71ada2500f181775833f40761fc7cac8","ssdeep":"96:A9+XCx+8Ixmzn2ySej3zqIDNcxE6204l4sNm+E/0NK4Amfnqkk7lDAP2CwU6:A6Cg/S2yPXXWxW04fNPw6K4Amf4DAPA","tlshash":"13d1859c3e80b0a057b26077b97fa019b3696c50657fd80cd012b1a03e7562ad9bbba5","size":6454,"data":"","first_seen":"2025-12-01T12:09:20.892186Z","last_seen":"2026-01-29T12:50:40.978548Z","times_seen":4063,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"fd4082678f5f3302d202b3b4f570979d","sha1":"7593596832dccffc36f473c779d5910485662331","sha256":"290102241425eaf53198e3596c3177263d41ceeba66ac8896f68040433b0d617","sha512":"709b1ffc8f7dfa3b00806bc9d7c850cd854e63dd98f439bb2efc84ae03ee139092b4993a99411c8afccc3d450c14acc7f6f31bed4c2013ee4c445f336a61e173","ssdeep":"96:loz0qYAc8G8IQaZIyG/5Ck/oJ3Q25JvvJePBBmeEIzzC8fR11jD+CfMEDaH:SzFRIPZIyGMkQVQ2nvvJeZZEIf1fRvvw","tlshash":"e2912b29ed5d917c38a761fa177fae191d2892173600dd0cf8edeb800f20ab14599dd8","size":4562,"data":"","first_seen":"2026-01-06T02:53:22.885324Z","last_seen":"2026-01-06T02:53:22.885324Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"politicalpiano.com/df85ebbdb343866e18d5de2b6fd24249/invoke.js","fqdn":"politicalpiano.com","domain":"politicalpiano.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"13dcfd937875618c950ad1d5b1efb3b1","sha1":"40e3dfd58150d481f07090d4d9a8440eec1294fd","sha256":"55fc327aab42456e80f9a0a7041a449fa3e797a61890ec277bd5746a9bf555e0","sha512":"85def6bb35168baef6615f9f89ba4a5fdc359615a71f976d3d9a4c5f12c7b71b421a362eb9beb52df1db12f45d35951549d59d0340772a87609ed03d5599e971","ssdeep":"768:pL+PQPpOgoDGmXN43uQxjCoMSZR/IuVpPtyw4cLeJEOlhPsBeII3fX:pboDR6fCoM4R/Zyw4EBeI2","tlshash":"4213d79a7f91b5ac0376b47b143f922ff6399d0260c8c9acd103e8952f9ca4dc139b59","size":43728,"data":"","first_seen":"2026-01-06T02:53:22.872078Z","last_seen":"2026-01-06T02:53:22.872078Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e3928752ef0e337fde16d946d524e3a","sha1":"c4cfe9b2ac8cc2247f706385a43f8084f5b609df","sha256":"799b56c21ed041173f4f37a539487c5f6691788f32fd2b3439495f10838bd2a4","sha512":"90bb135caa13f29de41e09921dad649f841610306dcb4b6a4930e5a01667e6c7a2fb58c15988e6479309d2fbc7366b5974a3094738a8d7f4e1a13ea0f6b9d52e","ssdeep":"192:EV8VcrcYmJpJsVan1oJJpvOHMk0Tw3f5czhGEhN70oz0EhnA3YED8iDehT6J:EV8FDsVanyYH4TARCN7DRW3YEPb","tlshash":"4052734818bddd60c948912e307e6666f72409539c76bbd4bf8a4104afce82f797613f","size":14198,"data":"","first_seen":"2026-01-06T02:53:22.887561Z","last_seen":"2026-01-06T02:53:22.887561Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relishsubsequentlytank.com/c2/40/88/c24088fb2a6cd3f2c2336679f397c764.js","fqdn":"relishsubsequentlytank.com","domain":"relishsubsequentlytank.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f7b07b71fb3594fef4be0c0764997a5","sha1":"361aefdff4ff1081efff8d339b803c4d641834ed","sha256":"b2b7612af5e8b9ec22aa8d3901024fda83859b10595b40e07c16e09fb9b60615","sha512":"6aa5c4fa14853a509eed2a6690cee4bb5924b411fbead0b8130094d903e553deaaf6a0b066dade2b5ea82da66c78d35a89a17e61a36e4fa7c5dea0a7f31a63e7","ssdeep":"3072:Es/17aMWZ44SXdVY4lDKVVbZ4i3/9j9y1UglGews/:Es/w194Lws/","tlshash":"25a3c788bfd0f06d129a6473223f950ff11a4e42505ce558e907f8e66abc32af47db64","size":106852,"data":"","first_seen":"2026-01-06T02:53:22.842261Z","last_seen":"2026-01-06T02:53:22.842261Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"politicalpiano.com/8253a9c21e6081348abe9f05f9d8dea2/invoke.js","fqdn":"politicalpiano.com","domain":"politicalpiano.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cdd4b85f2325442ad39579db67ed88d5","sha1":"9652c1108405540d4918f2c9798083e452d724c5","sha256":"d88c4167d63afc99c7790c73f1c0d7d5c601b0e95e502e1f2ea64dc1db471302","sha512":"bf5b33d375a1dde9991ee7fad0458a04c7490e924b6ce7ca36df62a9506a1b9332d55666e4421faabc3029aeac9f6f0d63d8d4a47a82ff26ff5391b10c1624db","ssdeep":"768:dB2EL/5+sNKlKMHLQTwkf0R6sYeLvLoK12G6FYc0C+Jf:dB2EV+aMHLQTwkf0bLDLoK12tFYNJN","tlshash":"e723fa5dbf92f006165f70b7376fa106b11a8c19680cd89cfa07fda46d68f05e837aa4","size":46228,"data":"","first_seen":"2026-01-06T02:53:22.845006Z","last_seen":"2026-01-06T02:53:22.845006Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"politicalpiano.com/e0/2e/e1/e02ee106ac9f7f9a067c81c19bdc3c60.js","fqdn":"politicalpiano.com","domain":"politicalpiano.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba47ddefd6c0d18dc7119ecdc1103189","sha1":"8474161e8f1b9eb028c9207794dedb71363af966","sha256":"1968236f5abde3c27ee604882f10526558716bcb3707f306283af2fdbf5939f4","sha512":"f89ab6e4cf680812b4efc0bab5f519e5301211d7a424b5d193b2f5945c1f6ff2455e490e095e449a3c53898714bdd5a392f9e1b2debd376003e43e32eb5941b8","ssdeep":"1536:L9yUBg8XFOUGXAVTesz3WArOwlNyBv77NzxpQ2jFFwfnjI1:L3B91cipUhxpJwLI1","tlshash":"6b7309487f42b15b5352a073627fd047f0256f1261ecd498d123e6a86f6c33af63ab98","size":78819,"data":"","first_seen":"2026-01-06T02:53:22.835445Z","last_seen":"2026-01-12T23:18:36.564796Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-07-17T10:55:41.509086Z","times_seen":22071,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loseimposeherself.com/53/23/86/5323869a8beda1d7db01e9c875b2f49f.js","fqdn":"loseimposeherself.com","domain":"loseimposeherself.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"81c010ddfde2faeaf1c598844287df5a","sha1":"cd0fb06af4d1e8878a8c2c8d0311892ef13ff47b","sha256":"44442357bcab05b20364ed17aae2a3ae173b906529612b0e2f7d2217a76e51ab","sha512":"0acadda1dc3bba9f6178ba54356f2aed3dba23fbaf3b53b683fc5dd78eeff47a63ec7815ffbdb1e07041b274646eaa0a71ada2500f181775833f40761fc7cac8","ssdeep":"96:A9+XCx+8Ixmzn2ySej3zqIDNcxE6204l4sNm+E/0NK4Amfnqkk7lDAP2CwU6:A6Cg/S2yPXXWxW04fNPw6K4Amf4DAPA","tlshash":"13d1859c3e80b0a057b26077b97fa019b3696c50657fd80cd012b1a03e7562ad9bbba5","size":6454,"data":"","first_seen":"2025-12-01T12:09:20.892186Z","last_seen":"2026-01-29T12:50:40.978548Z","times_seen":4063,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"4d3288c4be2855f7921870ae50691c3b","sha1":"e32c163707dc26335e36b14ce29a8d2a8205f8dd","sha256":"d1c0c2d8f5482df7ca554f07592db7b722959f5e0ec65c7b9b939e1b587aa445","sha512":"e92d70f512cdda588f47b850f0baed4e1fc4e59fdcf1c1017d2950e23e80e11e8b0fa1f9fdf3c99fc3f1589aea7d5aff5cb04a567c6e2a32f4b00222d3fbc4a0","ssdeep":"","tlshash":"8d31e967fc1e7252adef62f306aeae6d1d2c9a1767809d0cc4e1af8242249d64248dc5","size":1800,"data":"","first_seen":"2026-01-06T02:53:22.889755Z","last_seen":"2026-01-06T02:53:22.889755Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","fqdn":"hehehub-acsu123.pythonanywhere.com","domain":"hehehub-acsu123.pythonanywhere.com","tld":"pythonanywhere.com"},"ip":{"addr":"35.173.69.207","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b33bcbda5370de032cffd736110beff0","sha1":"0de4c3068e4204fa96f6b368165e0e90c020c968","sha256":"438a42d1655710410902c3acd9fdcf215b8af2ee84c0272b2284cb36c0a82163","sha512":"6fefbbd1010074528dc585934354d70586a8ea834dfb6649d8e7341108bd2596c3a277ab9d953308084b95946bedf180f8e016a53ba79b78b8e53d7dbbbd4245","ssdeep":"","tlshash":"64d08cae87ccf2880093c46f003cc4845128dd737c0a682235ed28107f4c81d847676e","size":203,"data":"","first_seen":"2025-12-20T19:31:04.764147Z","last_seen":"2026-03-08T12:40:28.756037Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-07-17T10:55:41.509086Z","times_seen":22071,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/1b/50/e5/1b50e57a5911fd0a5b46962ab48ca22b.js","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"81c010ddfde2faeaf1c598844287df5a","sha1":"cd0fb06af4d1e8878a8c2c8d0311892ef13ff47b","sha256":"44442357bcab05b20364ed17aae2a3ae173b906529612b0e2f7d2217a76e51ab","sha512":"0acadda1dc3bba9f6178ba54356f2aed3dba23fbaf3b53b683fc5dd78eeff47a63ec7815ffbdb1e07041b274646eaa0a71ada2500f181775833f40761fc7cac8","ssdeep":"96:A9+XCx+8Ixmzn2ySej3zqIDNcxE6204l4sNm+E/0NK4Amfnqkk7lDAP2CwU6:A6Cg/S2yPXXWxW04fNPw6K4Amf4DAPA","tlshash":"13d1859c3e80b0a057b26077b97fa019b3696c50657fd80cd012b1a03e7562ad9bbba5","size":6454,"data":"","first_seen":"2025-12-01T12:09:20.892186Z","last_seen":"2026-01-29T12:50:40.978548Z","times_seen":4063,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d4ee2956bccf0a1313bfc1de9485e4d","sha1":"8405c5993aa3b715bc71633eee9a2e1762a4c8ac","sha256":"6bbdd700fb624339c1df5ddd2b5ce16d63d7a799bbb81a21420badeeda6b300d","sha512":"b66b984343deb9af70b9d64ba2fe15eb5bbcca4290a898f1ce2524f13bba15746df105d00e600f44dcb26460ffbaac47dcbe420141bf7cdbde99528222096276","ssdeep":"","tlshash":"22c02b899f05812b6bc138df530c03c84cc86b33b030471d90c2fb80a080033c00000e","size":145,"data":"","first_seen":"2025-12-20T19:31:04.808922Z","last_seen":"2026-03-08T12:40:28.763403Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"dfe772fa6a8871c36f9708dc58848286","sha1":"ed13293b3809219344ef986f496771c75eabb5b5","sha256":"05fea4078553558d346b8faf584f30c89f67968e695e89487aeb0d31e6f97c51","sha512":"bffe46447f1cd53dc0ca4147e27e31acb6698eaac790d5d2dede70f82b536599e7a3dfbe90c0b6276dda0f44b8776c8fb5dcb4e89070a333d1a25cbcbe223a56","ssdeep":"","tlshash":"b2310779e35c85ec32769a90175f1a354f764637b612dc448572c1481728533029b1f8","size":1530,"data":"","first_seen":"2026-01-06T02:53:22.89521Z","last_seen":"2026-01-06T02:53:22.89521Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/default/robot/4/js/jquery.min.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"172.67.210.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6326c600df01e3bfb9b40e1aa08176f8","sha1":"6b4fb754d29b297b539bf62ba9b4eaf0f33f314a","sha256":"df34524351c5fabc921a89183b5da5667aebd7b9e9a1c52255c76ff722935ea3","sha512":"641aaeecb9b89bcc319cabfef18f76faa9b1ba79f9de30c6d07f22d385fc78ac3f11a718fe9ec96f8a13d82e3dff4ca34944ccb449a4ef8e378ad65dfad581c0","ssdeep":"1536:oP10iSi65U/dXXeyhzeBuG+HYE0mdDuJO1z6Oy4sh3J1x72BjmN7TwpDKba98Hri:f+41hJiz6fhdlTqya98Hri","tlshash":"eb83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","size":84384,"data":"","first_seen":"2023-03-07T01:10:11Z","last_seen":"2026-07-17T07:25:57.177946Z","times_seen":12748,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","fqdn":"hehehub-acsu123.pythonanywhere.com","domain":"hehehub-acsu123.pythonanywhere.com","tld":"pythonanywhere.com"},"ip":{"addr":"35.173.69.207","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3330eaa78b2dbdfb32e472f7888f13ec","sha1":"fbf90f9695f863b0cdc0f2994c69a62865bd22c7","sha256":"a4b911d02b2de66f36d56288c8fcf20c33f226f5b3ad1a12d3b605a81b3ccc91","sha512":"bf0c9b3d992fb14313dc45d561ecd284e1a064bd5d28bc7c74558d4094ceee37da3f486c156ab017ab50531ca640787e1a1b4dd576170c286a2394384e161f06","ssdeep":"96:9mGdkWOg+hX4iRWzyVGMWO9zvLxGeLxGemT:XkWO/d4iYyVGk9DmT","tlshash":"cd91fd7a79f71c3509a7a06e47efa704373210032582d82878adc24cafd6e4594f5bd9","size":4600,"data":"","first_seen":"2025-12-20T19:31:04.814001Z","last_seen":"2026-03-08T12:40:28.762439Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"weirdopt.com/ad/advertisers.js","fqdn":"weirdopt.com","domain":"weirdopt.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:53.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"weirdopt.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 00:51:40 GMT","end":"Sun, 29 Mar 2026 00:51:39 GMT"},"fingerprint":{"sha1":"F3:CE:FF:C9:F8:70:23:18:40:13:70:96:1A:D1:FD:34:D3:CD:66:FC","sha256":"07:8C:A3:3F:1D:F1:E0:75:3D:26:20:F5:D5:75:64:CE:F7:40:6E:B7:BB:B9:EC:79:33:27:5F:51:2E:B0:12:E7"}}},"request":{"raw":"GET /ad/advertisers.js HTTP/1.1\r\nHost: weirdopt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:53 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 0\r\nConnection: keep-alive\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: c52f3160275c0a64db6933d40f132100\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":17,"send":0,"wait":20,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/acsu123/HohoV2/refs/heads/main/BloxFruit/keysystem/hoho_logo.png","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.109.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:55.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91","sha256":"7D:11:22:EA:96:98:52:34:1E:8D:D9:2B:CC:0C:7E:CC:00:96:30:D1:4D:A7:34:D7:CA:42:D5:B5:4A:2B:20:97"}}},"request":{"raw":"GET /acsu123/HohoV2/refs/heads/main/BloxFruit/keysystem/hoho_logo.png HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/png\r\netag: W/\"f18e3dc65e0f4879cccac9d86a23ccbdd607e9e6eeef1803c8894e364605ffe5\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: D706:B60FA:951FE0:A9BEBE:695C7907\r\naccept-ranges: bytes\r\ndate: Tue, 06 Jan 2026 02:52:55 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1767667976.827480,VS0,VE141\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: a8f607c266ae95fea3ae185a3f65fe34c26a2ee9\r\nexpires: Tue, 06 Jan 2026 02:57:55 GMT\r\nsource-age: 0\r\ncontent-length: 255904\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":255904,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced","md5":"8ba909a09c30969f204c1bfcdd1cab49","sha1":"aeb419cb528b9ffcc6bfc4bc4ab46d3fa126d99f","sha256":"66a48528c0a680cdd87aa839f634969b3a890b9e429bf66d72aa02cc613dd31b","sha512":"114f8891bcadd83f265f6d57a72091b9b62fa419b2c75fb6fb18f410600f4a0ec178e03e3dd282ef7c66e196c0f3c494b666ca36840ceac52879f2d055844999","ssdeep":"6144:++Gcr/cXFaFoMwHiX3frLsn+cdFnesu6QSTxn1l:+FckeoMwWzILFnet2V1l","tlshash":"2844022e9b8a9db3df5ccf57252781408a9f273b1e2d160113863bf17dbba845b2160d","first_seen":"2025-06-21T22:31:54.690206Z","last_seen":"2026-03-08T12:40:28.635206Z","times_seen":8,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":0,"dns":3,"connect":13,"send":0,"wait":155,"receive":45,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loseimposeherself.com/ren.gif?sid=H4sIAAAAAAAC_4RTzYscxRuu2Qw55Hf4oRHPg0RRcWf7c3baHMQ1rgRjEpJIDjFIVVf1Trk9VW1V9_TunoyBGDztwYN6seeZyW6iQeJVMYSJlxAQHC8Omr34F4gQPErvLqyefA_P-_EUxfs-9da1YbFDfBR0dvYtvSHTlC6Ebaf1_EWpuC5t6_SFluu0neOti1J1guOttRrM4GXXD9rOC603RLyqFzzHdRzXcVvL0ohEry3sspDZ7chtR0478NpuGGDN_Du3xRwsnQMf7JAnIfn0_78nlyDjCVT_zglhV3OdvfR6v0hprg0GfPtttap0qdA_CBPTQKK2909D2ykhn85Bq-39CaAH43oCMDklc08_AlPb-22CDW7sdcpSCAXG_4dyMIFIJ5B0glhfheQ_ESDmOH0Gqr91WpuSru-xtGanpPn4T8hySpqPnoLqf72UyrXWeZ0WudTKYi2pINcmkCsTZMUE-UYDsryPOP8Qkv9IFh6fguqPz9hUQ_LZMbHY8R2XLs6HkRDzQbQYzHcT3p2nUUg7rsv8UIS7EslkAmrnUNgGCtlAkTRQZA30-awVON0gdqnfSSIeLzoBDQIumBN1PcehUbyIIr4CyTcRm2tbhYptEA3d28W7WeqFHT8IvWDozo6pVMQ86YaCMc78wO92OsLt8pALj3US7gVeEN26FEaB67vu5a2M9_LVwTg3hRjXdw7dm3ulINotIjNXbnJ_UfgsDoYMq3ITprgH26tgeQM2JxjwCqUgKC1BSQlKSVDmBOWgusFT69lqi6e2YO6-9_a9X410vjKkN3S-IhQBNZswvBrL7H17FXF-aLSRWD7SNVCWVyPKeDXMdsgT9RM2PnruN6yKWeu_poWVFaSdA7UNbMgpWf75L2RySp698wCM3odN7yOWh0ALF7SsQHsVNtTsmZ7oiV7B5mlsC9fz29l63tOKqvWyJ4xox7oPritkeRP5emOY7pCjo3MXlu7tLtjlX76DiB-SfUNsKmSmwnvyB4KV9PronC7J-JwuLfnmTJbLvtyg9fKdz2kuDn_5plgvteEnT9jNW6_GNVGHty8Im5-iiku1YslXS5JzYZa1iQX5_qS9KNjZwvaWCqOK7NTZ15ZP9jMjrJVaTUDllBz542PEckqO3v1i92OFL_6KOPsANjvo02oCljWRSoJUHNQpq2D_kbODeGivY8U0QfOrUP0KA1NhkFag6SZscWSUZ-bhKw8-q-1zsLQ5Yqlpjllq0k9qne7W8G0Nkz3ZrJy1Qo_5nW63I5IOT3zuez6PQkdEAY06QRSEyO1UvrN--O8AAAD__wSxpXwKBQAA","fqdn":"loseimposeherself.com","domain":"loseimposeherself.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"loseimposeherself.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 08:12:24 GMT","end":"Thu, 19 Mar 2026 08:12:23 GMT"},"fingerprint":{"sha1":"B1:6B:EB:05:E0:5A:FE:EB:0E:C8:A3:8B:EC:61:8D:51:CD:8C:90:5B","sha256":"87:C6:97:CB:C2:A5:11:74:9B:43:AB:AB:6C:80:15:71:6F:DB:98:4D:C1:34:D2:A7:47:B5:D1:64:F6:AD:05:80"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_4RTzYscxRuu2Qw55Hf4oRHPg0RRcWf7c3baHMQ1rgRjEpJIDjFIVVf1Trk9VW1V9_TunoyBGDztwYN6seeZyW6iQeJVMYSJlxAQHC8Omr34F4gQPErvLqyefA_P-_EUxfs-9da1YbFDfBR0dvYtvSHTlC6Ebaf1_EWpuC5t6_SFluu0neOti1J1guOttRrM4GXXD9rOC603RLyqFzzHdRzXcVvL0ohEry3sspDZ7chtR0478NpuGGDN_Du3xRwsnQMf7JAnIfn0_78nlyDjCVT_zglhV3OdvfR6v0hprg0GfPtttap0qdA_CBPTQKK2909D2ykhn85Bq-39CaAH43oCMDklc08_AlPb-22CDW7sdcpSCAXG_4dyMIFIJ5B0glhfheQ_ESDmOH0Gqr91WpuSru-xtGanpPn4T8hySpqPnoLqf72UyrXWeZ0WudTKYi2pINcmkCsTZMUE-UYDsryPOP8Qkv9IFh6fguqPz9hUQ_LZMbHY8R2XLs6HkRDzQbQYzHcT3p2nUUg7rsv8UIS7EslkAmrnUNgGCtlAkTRQZA30-awVON0gdqnfSSIeLzoBDQIumBN1PcehUbyIIr4CyTcRm2tbhYptEA3d28W7WeqFHT8IvWDozo6pVMQ86YaCMc78wO92OsLt8pALj3US7gVeEN26FEaB67vu5a2M9_LVwTg3hRjXdw7dm3ulINotIjNXbnJ_UfgsDoYMq3ITprgH26tgeQM2JxjwCqUgKC1BSQlKSVDmBOWgusFT69lqi6e2YO6-9_a9X410vjKkN3S-IhQBNZswvBrL7H17FXF-aLSRWD7SNVCWVyPKeDXMdsgT9RM2PnruN6yKWeu_poWVFaSdA7UNbMgpWf75L2RySp698wCM3odN7yOWh0ALF7SsQHsVNtTsmZ7oiV7B5mlsC9fz29l63tOKqvWyJ4xox7oPritkeRP5emOY7pCjo3MXlu7tLtjlX76DiB-SfUNsKmSmwnvyB4KV9PronC7J-JwuLfnmTJbLvtyg9fKdz2kuDn_5plgvteEnT9jNW6_GNVGHty8Im5-iiku1YslXS5JzYZa1iQX5_qS9KNjZwvaWCqOK7NTZ15ZP9jMjrJVaTUDllBz542PEckqO3v1i92OFL_6KOPsANjvo02oCljWRSoJUHNQpq2D_kbODeGivY8U0QfOrUP0KA1NhkFag6SZscWSUZ-bhKw8-q-1zsLQ5Yqlpjllq0k9qne7W8G0Nkz3ZrJy1Qo_5nW63I5IOT3zuez6PQkdEAY06QRSEyO1UvrN--O8AAAD__wSxpXwKBQAA HTTP/1.1\r\nHost: loseimposeherself.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl25634524=1; nlecdf85ebbdb343866e18d5de2b6fd24249=[5941311]; uid_id2=e76301a7-59ee-4974-8fd8-a95a611b35e5:2:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:54 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: loseimposeherself.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 0dabb54861e3e1cc6ef04ccf93022f9a\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":366,"timings":{"blocked":268,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"loseimposeherself.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"35.156.32.205","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:53.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"traffinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Fri, 18 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"11:9F:BE:35:27:7B:7B:85:C9:B3:FF:0E:CA:F6:0D:13:B0:A9:A0:BB","sha256":"81:A4:38:32:0D:BC:66:C8:7B:6D:08:BC:93:91:76:73:A2:BD:D0:53:3C:BF:2F:FD:B8:87:00:C6:EC:3B:6C:77"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hehehub-acsu123.pythonanywhere.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 02:52:53 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://hehehub-acsu123.pythonanywhere.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=e3fc7a49-8f00-4fdd-bc32-5e9b197e91d0:3:1; expires=Fri, 04 Jan 2036 02:52:53 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"50dc07258c35e75f81332fc1e1c5d89a","sha1":"0230a0bdeb1e0d29f6eb612b17d1c80764f243af","sha256":"253812351d205f2c81a9e9cfe8bc3950c4115076fda6b2be50564b1c264293b4","sha512":"a3333a12e2cb6a810b309624b7fddfb33d3784807c7adc514d8bfe151df2379ff868fc1e8ba4dd9f88161e2499ef200e8af44eed2022523af5bb7caca1521ae4","ssdeep":"","tlshash":"40900435134d00f75430d151dd3434d43c35d001335f44105410430455110cd4141053","first_seen":"2026-01-06T02:53:22.803211Z","last_seen":"2026-01-06T02:53:22.803211Z","times_seen":1,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":-1,"dns":5,"connect":22,"send":0,"wait":21,"receive":0,"ssl":279},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loseimposeherself.com/impr.gif?sid=H4sIAAAAAAAC_4RTz4scVRd9PRmyyLf4-L6I60aiqDg9VV1V3V1mIY5xJBiTkESyiEHer5p-TvV75XtVXTOzMgZicDULF-rG6tOdmUSDxKULJfRkEwKKLYgNZjb5C0QILqUnA6Mr7-Lce8-pxb2n7rs2KHZJgIJOz75lNlSa0sWo4dWfv6i0MKWrn75Q972Gd7x-UelWeLy-NgPbf9kPwob3Qv0NyVfNYtPzPc_3_PqysjIxa4t7KlR2O_YbsdcImw0_CrFm_9m7Yg6OzkH0d8n_ocTkv4-SS1B8DN27c0K61dxkL73eK1KaG4u-2H5br2pTavQOysTWkOjt_a9h3ISQT-dg9Pb-BjD90WwDMDUhc08_BNPb-2OC9W88mZSlkBpM_AdlfwyZjqHoGNxchRI_EYALnD4D3ds6bWxJ15-odKZOyPzjP6DKCZl_-BR07-ulVK3Vz5u0yJXRDmtJBbU2hloZIyvGyDdqUOUOeP4hlPiBLD4-Bd0bnXGpgRLTY7LdCjyftheiWMqFMG6HC51EdBZoHNGW77MgktGeRSoZg7o5FK6GQtVQJDUUWQ09Ma2HXifkPg1aSSx42wtpGArJvLjT9Dwa8zYKfgVKbILba9NjOpVcJJ1IMiZYEAadVkv6HREJ2WStRDTDZhjfuhTFoR_4_uWtTHTz1f4ot4UcFZq7gX_zCRXGe-TWjAzjgX-7eDdLm1ErCKNmOPCR2Ss3RdCWAePhgGFVbcIWd-G6FZyoweUEfVGhlASlIygpQakIypyg7Fc3ROqartoSqSuYv5-b-zmohiZfGdAbJl-RmoDaTVhRjVT2vrsKnh8abiRODM0MKMurIWWiGmS75H-zX1j76LnfsCqn9X9zAU5VUG4O1NWwoSZk-ec_kakJefbOfTC6A5fugKtDoIUPWlag3QobevpMV3Zlt2ALlLvCbwaNbD3vGk31etmVVja46UGYClk-j3y9Nkh3ydHhuQtLd_cO7PKvO5D8AdkPcFshsxXeU_cIVtLrw3OmJKNzpnTkmzNZrnpqg86O73xOc3n4yzflemmsOHnCbd56lc-EWXn7gnT5KaqF0iuOfLWkhJB22VguyXcn3UXJzhauu1RYXWSnzr62fLKXWemcMnoMqibkyO8fg6sJOfr9F3sPK3rxEXj2AVx2MKczBCyrIVUEqTzgKavg_tazg3rgrmPFzoPmV6F7Ffq2Qj-tQNNNuOLIMM_sg1fufzaLz8HS-SFL7fyIpTb9ZM-nGXw7g3sTcvmXH-HUtJ4Essk9r9Nu-UEnkX4QCp5EnTAWLeoFgUTuJuqd9cN_BQAA__-8efvrCgUAAA==","fqdn":"loseimposeherself.com","domain":"loseimposeherself.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"loseimposeherself.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 08:12:24 GMT","end":"Thu, 19 Mar 2026 08:12:23 GMT"},"fingerprint":{"sha1":"B1:6B:EB:05:E0:5A:FE:EB:0E:C8:A3:8B:EC:61:8D:51:CD:8C:90:5B","sha256":"87:C6:97:CB:C2:A5:11:74:9B:43:AB:AB:6C:80:15:71:6F:DB:98:4D:C1:34:D2:A7:47:B5:D1:64:F6:AD:05:80"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_4RTz4scVRd9PRmyyLf4-L6I60aiqDg9VV1V3V1mIY5xJBiTkESyiEHer5p-TvV75XtVXTOzMgZicDULF-rG6tOdmUSDxKULJfRkEwKKLYgNZjb5C0QILqUnA6Mr7-Lce8-pxb2n7rs2KHZJgIJOz75lNlSa0sWo4dWfv6i0MKWrn75Q972Gd7x-UelWeLy-NgPbf9kPwob3Qv0NyVfNYtPzPc_3_PqysjIxa4t7KlR2O_YbsdcImw0_CrFm_9m7Yg6OzkH0d8n_ocTkv4-SS1B8DN27c0K61dxkL73eK1KaG4u-2H5br2pTavQOysTWkOjt_a9h3ISQT-dg9Pb-BjD90WwDMDUhc08_BNPb-2OC9W88mZSlkBpM_AdlfwyZjqHoGNxchRI_EYALnD4D3ds6bWxJ15-odKZOyPzjP6DKCZl_-BR07-ulVK3Vz5u0yJXRDmtJBbU2hloZIyvGyDdqUOUOeP4hlPiBLD4-Bd0bnXGpgRLTY7LdCjyftheiWMqFMG6HC51EdBZoHNGW77MgktGeRSoZg7o5FK6GQtVQJDUUWQ09Ma2HXifkPg1aSSx42wtpGArJvLjT9Dwa8zYKfgVKbILba9NjOpVcJJ1IMiZYEAadVkv6HREJ2WStRDTDZhjfuhTFoR_4_uWtTHTz1f4ot4UcFZq7gX_zCRXGe-TWjAzjgX-7eDdLm1ErCKNmOPCR2Ss3RdCWAePhgGFVbcIWd-G6FZyoweUEfVGhlASlIygpQakIypyg7Fc3ROqartoSqSuYv5-b-zmohiZfGdAbJl-RmoDaTVhRjVT2vrsKnh8abiRODM0MKMurIWWiGmS75H-zX1j76LnfsCqn9X9zAU5VUG4O1NWwoSZk-ec_kakJefbOfTC6A5fugKtDoIUPWlag3QobevpMV3Zlt2ALlLvCbwaNbD3vGk31etmVVja46UGYClk-j3y9Nkh3ydHhuQtLd_cO7PKvO5D8AdkPcFshsxXeU_cIVtLrw3OmJKNzpnTkmzNZrnpqg86O73xOc3n4yzflemmsOHnCbd56lc-EWXn7gnT5KaqF0iuOfLWkhJB22VguyXcn3UXJzhauu1RYXWSnzr62fLKXWemcMnoMqibkyO8fg6sJOfr9F3sPK3rxEXj2AVx2MKczBCyrIVUEqTzgKavg_tazg3rgrmPFzoPmV6F7Ffq2Qj-tQNNNuOLIMM_sg1fufzaLz8HS-SFL7fyIpTb9ZM-nGXw7g3sTcvmXH-HUtJ4Essk9r9Nu-UEnkX4QCp5EnTAWLeoFgUTuJuqd9cN_BQAA__-8efvrCgUAAA== HTTP/1.1\r\nHost: loseimposeherself.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl25634524=1; nlecdf85ebbdb343866e18d5de2b6fd24249=[5941311]; uid_id2=e76301a7-59ee-4974-8fd8-a95a611b35e5:2:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:54 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 3\r\nHost: loseimposeherself.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 13c41f609a7c410396f127128a386c58\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":309,"timings":{"blocked":213,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"loseimposeherself.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-sb.com/sb/notifications/utility/default/robot/4/index.html","fqdn":"cdn.show-sb.com","domain":"show-sb.com","tld":"com"},"ip":{"addr":"104.21.95.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-sb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 18:32:18 GMT","end":"Fri, 06 Mar 2026 19:30:50 GMT"},"fingerprint":{"sha1":"9A:CB:17:6D:8B:24:6D:0F:99:B5:FD:4A:00:CB:D3:DE:2B:8E:84:93","sha256":"3B:72:94:40:4C:CD:DE:97:5A:DF:6C:E1:90:81:0D:BF:33:9E:10:3C:16:3A:61:15:FF:65:B0:6B:5D:34:32:21"}}},"request":{"raw":"GET /sb/notifications/utility/default/robot/4/index.html HTTP/1.1\r\nHost: cdn.show-sb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hehehub-acsu123.pythonanywhere.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 02:52:54 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Oct 2025 11:45:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9AiDqKgXfmwZBNseySdJ1kRma2MZELdtz0eF%2BvGfD0eOFd%2BrAJGTJz3poPFa95VHY7HG%2FV3S67rC9M7NFoK0dpd%2BgMl%2BpgVLQLd3zxw%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b97ec0a5e51569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":1697,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"8c024defb5345037142ac4cf312385f6","sha1":"ad4e1f42e3795b6700337cdaec5ce306ba06982a","sha256":"4bcdc426ac9e85cd93b8588bf3e8e54d308eefdfc943146dbaf767b83792f1a3","sha512":"9e78d8e4308a23fc80796883d497474719b60bd24f0befb9d7e2e1220259fdbd517eb6e43da54e9c72e6e5ac9ac6d88ff53006fe99d9fe1dd87113efb1745957","ssdeep":"","tlshash":"ff31af5a29ecd13315c380937b312f6ba886d58f9a0ba54073ec4e848fd6ed5ce03207","first_seen":"2025-11-14T03:18:27.852546Z","last_seen":"2026-06-14T11:34:58.480814Z","times_seen":113,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":14,"dns":4,"connect":1,"send":0,"wait":124,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loseimposeherself.com/ren.gif?sid=H4sIAAAAAAAC_4RTT4scxRuu2Sw55Hf4oRHPg0SJ4M7239lpcxDXuBKMSUgiOcQgVV3VO-X2VLVV3dO7ezIGYvC0Bw_qxZ5nJruJBokfQImTeAgBxRHEAbMXP4CIEDxKbwZWT76H5_3zFMX7vPXW1UGxS3wUdHrmDb0p05Quhi2nefSCVFyXtnnqfNN1Ws6x5gWp2sGx5noNpv-i6wct5_nmayJe04ue4zqO67jNFWlEotcX91jI7FbktiKnFXgtNwywbv6d22IOls6B93fJk5B88v_fkouQ8Riqd_u4sGu5zl54tVekNNcGfb7zplpTulTo7YeJaSBRO7PT0HZCyMdz0GpnpgC6P6oVgMkJmXv6IZjambUJ1r_-uFOWQigw_j-U_TFEOoakY8T6CiT_kQAxx6nTUL3tU9qUdOMxS2t2QuYf_QlZTsj8w6egel8up3K9eU6nRS61slhPKsj1MeTqGFkxRr7ZgCzvIs7fh-Tfk8VHJ6F6o9M21ZB8ekQstX3HpUsLYSTEQhAtBQudhHcWaBTStusyPxTh3ohkMga1cyhsA4VsoEgaKLIGenzaDJxOELvUbycRj5ecgAYBF8yJOp7j0CheQhFfhuRbiM3V7ULFNogG7q3i7Sz1wrYfhF4wcKdHVCpinnRCwRhnfuB32m3hdnjIhcfaCfcCL4huXgyjwPVd99J2xrv5Wn-Um0KM6jsH7o3HpSDaKyIzl29wf0n4LA4GDGtyC6a4A9utYHkDNifo8wqlICgtQUkJSklQ5gRlv7rOU-vZapuntmDuzHsz71dDna8O6HWdrwpFQM0WDK9GMnvXXkGcHxhuJpYPdQ2U5dWQMl4Nsl3yRP2EjQ-e-xVrYtr8L7WwsoK0c6C2gU05ISs__YVMTsizt--D0buw6V3E8gBo4YKWFWi3wqaaPtMVXdEt2AKNbeF6fivbyLtaUbVRdoURrVj3wHWFLJ9HvtEYpLvk8PDs-eU7ewt26ecfIOIHZGaITYXMVHhH3iNYTa8Nz-qSjM7q0pKvTme57MlNWi_fuZzm4uDnr4uNUht-4rjduvlyXBN1eOu8sPlJqrhUq5Z8sSw5F2ZFm1iQr0_YC4KdKWx3uTCqyE6eeWXlRC8zwlqp1RhUTsihPz5ELCfk8Def7X2s8OjviLP3YLP9Pq0mYFkDqSRIxX6dsgr2Hznbjwf2GlbNPGh-BapXoW8q9NMKNN2CLQ4N88w8eOn-J7V9CpbOD1lq5kcsNelHe3OakEu_fFfDtzXcg5XTZugxv93ptEXS5onPfc_nUeiIKKBRO4iCELmdyLc2Dv4dAAD__95eBp0KBQAA","fqdn":"loseimposeherself.com","domain":"loseimposeherself.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"loseimposeherself.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 08:12:24 GMT","end":"Thu, 19 Mar 2026 08:12:23 GMT"},"fingerprint":{"sha1":"B1:6B:EB:05:E0:5A:FE:EB:0E:C8:A3:8B:EC:61:8D:51:CD:8C:90:5B","sha256":"87:C6:97:CB:C2:A5:11:74:9B:43:AB:AB:6C:80:15:71:6F:DB:98:4D:C1:34:D2:A7:47:B5:D1:64:F6:AD:05:80"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_4RTT4scxRuu2Sw55Hf4oRHPg0SJ4M7239lpcxDXuBKMSUgiOcQgVV3VO-X2VLVV3dO7ezIGYvC0Bw_qxZ5nJruJBokfQImTeAgBxRHEAbMXP4CIEDxKbwZWT76H5_3zFMX7vPXW1UGxS3wUdHrmDb0p05Quhi2nefSCVFyXtnnqfNN1Ws6x5gWp2sGx5noNpv-i6wct5_nmayJe04ue4zqO67jNFWlEotcX91jI7FbktiKnFXgtNwywbv6d22IOls6B93fJk5B88v_fkouQ8Riqd_u4sGu5zl54tVekNNcGfb7zplpTulTo7YeJaSBRO7PT0HZCyMdz0GpnpgC6P6oVgMkJmXv6IZjambUJ1r_-uFOWQigw_j-U_TFEOoakY8T6CiT_kQAxx6nTUL3tU9qUdOMxS2t2QuYf_QlZTsj8w6egel8up3K9eU6nRS61slhPKsj1MeTqGFkxRr7ZgCzvIs7fh-Tfk8VHJ6F6o9M21ZB8ekQstX3HpUsLYSTEQhAtBQudhHcWaBTStusyPxTh3ohkMga1cyhsA4VsoEgaKLIGenzaDJxOELvUbycRj5ecgAYBF8yJOp7j0CheQhFfhuRbiM3V7ULFNogG7q3i7Sz1wrYfhF4wcKdHVCpinnRCwRhnfuB32m3hdnjIhcfaCfcCL4huXgyjwPVd99J2xrv5Wn-Um0KM6jsH7o3HpSDaKyIzl29wf0n4LA4GDGtyC6a4A9utYHkDNifo8wqlICgtQUkJSklQ5gRlv7rOU-vZapuntmDuzHsz71dDna8O6HWdrwpFQM0WDK9GMnvXXkGcHxhuJpYPdQ2U5dWQMl4Nsl3yRP2EjQ-e-xVrYtr8L7WwsoK0c6C2gU05ISs__YVMTsizt--D0buw6V3E8gBo4YKWFWi3wqaaPtMVXdEt2AKNbeF6fivbyLtaUbVRdoURrVj3wHWFLJ9HvtEYpLvk8PDs-eU7ewt26ecfIOIHZGaITYXMVHhH3iNYTa8Nz-qSjM7q0pKvTme57MlNWi_fuZzm4uDnr4uNUht-4rjduvlyXBN1eOu8sPlJqrhUq5Z8sSw5F2ZFm1iQr0_YC4KdKWx3uTCqyE6eeWXlRC8zwlqp1RhUTsihPz5ELCfk8Def7X2s8OjviLP3YLP9Pq0mYFkDqSRIxX6dsgr2Hznbjwf2GlbNPGh-BapXoW8q9NMKNN2CLQ4N88w8eOn-J7V9CpbOD1lq5kcsNelHe3OakEu_fFfDtzXcg5XTZugxv93ptEXS5onPfc_nUeiIKKBRO4iCELmdyLc2Dv4dAAD__95eBp0KBQAA HTTP/1.1\r\nHost: loseimposeherself.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl25634524=1; nlecdf85ebbdb343866e18d5de2b6fd24249=[5941311]; uid_id2=e76301a7-59ee-4974-8fd8-a95a611b35e5:2:1; iprc_l+b9a0dfe34c8114f1d5a734fcb9221aeb=5941311; iprc_l:5941311=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:54 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: loseimposeherself.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 2b8965d044b472665c4bf9d570a0eb60\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"loseimposeherself.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loseimposeherself.com/ren.gif?sid=H4sIAAAAAAAC_4RTT4scxRuu2Qw55Hf4oRHPg0RRcWf77-y0OYhrXAnGJCSRHGKQqq7qnXJ7qtqq7undPRkDMXjagwf1Ys8zk91Eg8QPoMTZeAgBxRHEAbMX_QIiBI8yuwOrJ9_D--d5-vA-T791rV_sEh8FnZx9Q2_INKULYdNpPHtRKq5L2zh9oeE6Ted446JUreB4Y22aTO9F1w-aznON10S8qhc8x3Uc13Eby9KIRK8t7LGQ2e3IbUZOM_Cabhhgzfx7tsUcLJ0D7-2SxyH5-P-_JZcg4xFU984JYVdznb3wardIaa4Nenz7TbWqdKnQPWgTU0OitmdfQ9sxIR_PQavtmQLo3nCqAEyOydyTD8HU9mxNsN6N_U1ZCqHA-P9Q9kYQ6QiSjhDrq5D8RwLEHKfPQHW3TmtT0vV9lk7ZMak_-hOyHJP6wyegul8upXKtcV6nRS61slhLKsi1EeTKCFkxQr5Rgyx3EOfvQ_LvycKjU1Dd4Rmbakg-OSYWW77j0sX5MBJiPogWg_l2wtvzNAppy3WZH4pwzyKZjEDtHApbQyFrKJIaiqyGLp80AqcdxC71W0nE40UnoEHABXOituc4NIoXUcRXIPkmYnNtK-OdfLU3zE0hhoWKbd-9uQ8F0R64NQWDqO_eLt7OUi9s-UHoBX13ckylIuZJOxSMceYHfrvVEm6bh1x4rJVwL_CC6NalMApc33UvIzNXbnJ_UfgsDvoMq3ITprgL26lgeQ02J-jxCqUgKC1BSQlKSVDmBGWvusFT69lqi6e2YO6serPqVwOdr_TpDZ2vCEVAzSYMr4Yye9deRZwfGmwklg_0NFGWVwPKeNXPdslj019Y--CZX7EqJo3_EgMrK0g7B2pr2JBjsvzTX8jkmDx95z4Y3YFNdxDLQ6CFC1pWoJ0KG2ryVEd0RKdg8zS2hev5zWw972hF1XrZEUY0Y90F1xWyvI58vdZPd8nRwbkLS3f3DuzyL_cg4gdkFohNhcxUeEfeI1hJrw_O6ZIMz-nSkq_OZLnsyg06Pb7zOc3F4c9fF-ulNvzkCbt56-V4Skzb2xeEzU9RxaVaseSLJcm5MMvaxIJ8fdJeFOxsYTtLhVFFdursK8snu5kR1kqtRqByTI788SFiOSZHv_ls72GFz_-OOHsPNjvY02oCltWRSoJUHOCUVbD_mNlB37fXsWLqoPlVqG6FnqnQSyvQdBO2ODLIM_PgpfufTONTsLQ-YKmpD1lq0o_G5PLPP0zN-m6avt23zcpJI_SY32q3WyJp8cTnvufzKHREFNCoFURBiNyO5Vvrh_8OAAD__0Yf3l8KBQAA","fqdn":"loseimposeherself.com","domain":"loseimposeherself.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"loseimposeherself.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 08:12:24 GMT","end":"Thu, 19 Mar 2026 08:12:23 GMT"},"fingerprint":{"sha1":"B1:6B:EB:05:E0:5A:FE:EB:0E:C8:A3:8B:EC:61:8D:51:CD:8C:90:5B","sha256":"87:C6:97:CB:C2:A5:11:74:9B:43:AB:AB:6C:80:15:71:6F:DB:98:4D:C1:34:D2:A7:47:B5:D1:64:F6:AD:05:80"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_4RTT4scxRuu2Qw55Hf4oRHPg0RRcWf77-y0OYhrXAnGJCSRHGKQqq7qnXJ7qtqq7undPRkDMXjagwf1Ys8zk91Eg8QPoMTZeAgBxRHEAbMX_QIiBI8yuwOrJ9_D--d5-vA-T791rV_sEh8FnZx9Q2_INKULYdNpPHtRKq5L2zh9oeE6Ted446JUreB4Y22aTO9F1w-aznON10S8qhc8x3Uc13Eby9KIRK8t7LGQ2e3IbUZOM_Cabhhgzfx7tsUcLJ0D7-2SxyH5-P-_JZcg4xFU984JYVdznb3wardIaa4Nenz7TbWqdKnQPWgTU0OitmdfQ9sxIR_PQavtmQLo3nCqAEyOydyTD8HU9mxNsN6N_U1ZCqHA-P9Q9kYQ6QiSjhDrq5D8RwLEHKfPQHW3TmtT0vV9lk7ZMak_-hOyHJP6wyegul8upXKtcV6nRS61slhLKsi1EeTKCFkxQr5Rgyx3EOfvQ_LvycKjU1Dd4Rmbakg-OSYWW77j0sX5MBJiPogWg_l2wtvzNAppy3WZH4pwzyKZjEDtHApbQyFrKJIaiqyGLp80AqcdxC71W0nE40UnoEHABXOituc4NIoXUcRXIPkmYnNtK-OdfLU3zE0hhoWKbd-9uQ8F0R64NQWDqO_eLt7OUi9s-UHoBX13ckylIuZJOxSMceYHfrvVEm6bh1x4rJVwL_CC6NalMApc33UvIzNXbnJ_UfgsDvoMq3ITprgL26lgeQ02J-jxCqUgKC1BSQlKSVDmBGWvusFT69lqi6e2YO6serPqVwOdr_TpDZ2vCEVAzSYMr4Yye9deRZwfGmwklg_0NFGWVwPKeNXPdslj019Y--CZX7EqJo3_EgMrK0g7B2pr2JBjsvzTX8jkmDx95z4Y3YFNdxDLQ6CFC1pWoJ0KG2ryVEd0RKdg8zS2hev5zWw972hF1XrZEUY0Y90F1xWyvI58vdZPd8nRwbkLS3f3DuzyL_cg4gdkFohNhcxUeEfeI1hJrw_O6ZIMz-nSkq_OZLnsyg06Pb7zOc3F4c9fF-ulNvzkCbt56-V4Skzb2xeEzU9RxaVaseSLJcm5MMvaxIJ8fdJeFOxsYTtLhVFFdursK8snu5kR1kqtRqByTI788SFiOSZHv_ls72GFz_-OOHsPNjvY02oCltWRSoJUHOCUVbD_mNlB37fXsWLqoPlVqG6FnqnQSyvQdBO2ODLIM_PgpfufTONTsLQ-YKmpD1lq0o_G5PLPP0zN-m6avt23zcpJI_SY32q3WyJp8cTnvufzKHREFNCoFURBiNyO5Vvrh_8OAAD__0Yf3l8KBQAA HTTP/1.1\r\nHost: loseimposeherself.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl25634524=1; nlecdf85ebbdb343866e18d5de2b6fd24249=[5941311]; uid_id2=e76301a7-59ee-4974-8fd8-a95a611b35e5:2:1; iprc_l+b9a0dfe34c8114f1d5a734fcb9221aeb=5941311; iprc_l:5941311=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:54 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nvary: Origin\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: loseimposeherself.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 86bea3f817e4b4c65d674c22f5a701e5\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":82,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"loseimposeherself.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loseimposeherself.com/impr.gif?sid=H4sIAAAAAAAC_4RTz4scRRSu2Sw5xINoxPMgUVTc2e7pnh9tDuIaV4IxCUkkhxikfvVOuT1VbVX39O6ejIEYPO3Bg3qx55vJbqJB4h9gCLMihIDgeHHA7EXwLkLwKL1ZWD35Dt_78TWP971-dW2Y75IAOZ2dfcdsqCShi62GV3_xotLCFK5--kLd9xre8fpFpdvh8fpaBXbwqh-EDe-l-luSr5rFpud7nu_59WVlZWzWFvdYqPR25DcirxE2G34rxJr9b-7yOTg6BzHYJU9DiemTv8eXoPgEun_nhHSrmUlfebOfJzQzFgOx_a5e1abQ6B-Esa0h1tv7X8O4KSGfz8Ho7X0FMINxpQBMTcncsw_B9Pb-mGCDG48nZQmkBhNPoBhMIJMJFJ2Am6tQ4mcCcIHTZ6D7W6eNLej6Y5ZW7JTMP_oLqpiS-YfPQPe_XUrUWv28SfJMGe2wFpdQaxOolQnSfIJsowZV7IBnH0OJn8jio1PQ_fEZlxgoMTsmO-3A82lnoRVJuRBGnXChG4vuAo1atO37LGjJ1t6KVDwBdXPIXQ25qiGPa8jTGvpiVg-9bsh9GrTjSPCOF9IwFJJ5UbfpeTTiHeT8CpTYBLfXxrnmbujfTEUvWx2E0TizudyqimE09G_n76dJs9UOwlYzHPqzYzqRXMTdlmRMsCAMuu229LuiJWSTtWPRDJthdOtSKwr9wPcvbz3uutcTqb1yUwQdGTAeDhlW1SZsfg-uV8KJGlxGMBAlCklQOIKCEhSKoMgIikF5QySu6cotkbic-fu-ue-DcmSylSG9YbIVqQmo3YQV5VilH7qr4Nmh0UbsxMhUQFlWjigT5TDdJU9Vv7D2yQu_YVXO6v8nDE6VUG4O1NWwoaZk-Ze_kaopef7OfTC6A5fsgKtDoLkPWpSgvRIbevZcT_ZkL2cLlLvcbwaNdD3rGU31etGTVja46UOYEmk2j2y9Nkx2ydHRuQtL9_YO7PKvP0LyB2TfwG2J1Jb4QP1AsJJcH50zBRmfM4Uj351JM9VXG7Q6vvMZzeThr9-W64Wx4uQJt3nrdV4RVXj7gnTZKaqF0iuOfLOkhJB22Vguyfcn3UXJzuaut5Rbnaenzr6xfLKfWumcMnoCqqbkyJ-fgqspOXr3q72H1Xr5D_D0I7j0YE5nCFhaQ6IIEnlQp6yE-1fODuKhu44VOw-aXYXulxjYEoOkBE024fIjoyy1D167_0VlX4Il8yOW2PkxS2zy2d6eKphUcLeCHTg1q8eBbHLP63baftCNpR-EgsetbhiJNvWCQCJzU_Xe-uF_AgAA__80CgDLCgUAAA==","fqdn":"loseimposeherself.com","domain":"loseimposeherself.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"loseimposeherself.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 08:12:24 GMT","end":"Thu, 19 Mar 2026 08:12:23 GMT"},"fingerprint":{"sha1":"B1:6B:EB:05:E0:5A:FE:EB:0E:C8:A3:8B:EC:61:8D:51:CD:8C:90:5B","sha256":"87:C6:97:CB:C2:A5:11:74:9B:43:AB:AB:6C:80:15:71:6F:DB:98:4D:C1:34:D2:A7:47:B5:D1:64:F6:AD:05:80"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_4RTz4scRRSu2Sw5xINoxPMgUVTc2e7pnh9tDuIaV4IxCUkkhxikfvVOuT1VbVX39O6ejIEYPO3Bg3qx55vJbqJB4h9gCLMihIDgeHHA7EXwLkLwKL1ZWD35Dt_78TWP971-dW2Y75IAOZ2dfcdsqCShi62GV3_xotLCFK5--kLd9xre8fpFpdvh8fpaBXbwqh-EDe-l-luSr5rFpud7nu_59WVlZWzWFvdYqPR25DcirxE2G34rxJr9b-7yOTg6BzHYJU9DiemTv8eXoPgEun_nhHSrmUlfebOfJzQzFgOx_a5e1abQ6B-Esa0h1tv7X8O4KSGfz8Ho7X0FMINxpQBMTcncsw_B9Pb-mGCDG48nZQmkBhNPoBhMIJMJFJ2Am6tQ4mcCcIHTZ6D7W6eNLej6Y5ZW7JTMP_oLqpiS-YfPQPe_XUrUWv28SfJMGe2wFpdQaxOolQnSfIJsowZV7IBnH0OJn8jio1PQ_fEZlxgoMTsmO-3A82lnoRVJuRBGnXChG4vuAo1atO37LGjJ1t6KVDwBdXPIXQ25qiGPa8jTGvpiVg-9bsh9GrTjSPCOF9IwFJJ5UbfpeTTiHeT8CpTYBLfXxrnmbujfTEUvWx2E0TizudyqimE09G_n76dJs9UOwlYzHPqzYzqRXMTdlmRMsCAMuu229LuiJWSTtWPRDJthdOtSKwr9wPcvbz3uutcTqb1yUwQdGTAeDhlW1SZsfg-uV8KJGlxGMBAlCklQOIKCEhSKoMgIikF5QySu6cotkbic-fu-ue-DcmSylSG9YbIVqQmo3YQV5VilH7qr4Nmh0UbsxMhUQFlWjigT5TDdJU9Vv7D2yQu_YVXO6v8nDE6VUG4O1NWwoaZk-Ze_kaopef7OfTC6A5fsgKtDoLkPWpSgvRIbevZcT_ZkL2cLlLvcbwaNdD3rGU31etGTVja46UOYEmk2j2y9Nkx2ydHRuQtL9_YO7PKvP0LyB2TfwG2J1Jb4QP1AsJJcH50zBRmfM4Uj351JM9VXG7Q6vvMZzeThr9-W64Wx4uQJt3nrdV4RVXj7gnTZKaqF0iuOfLOkhJB22Vguyfcn3UXJzuaut5Rbnaenzr6xfLKfWumcMnoCqqbkyJ-fgqspOXr3q72H1Xr5D_D0I7j0YE5nCFhaQ6IIEnlQp6yE-1fODuKhu44VOw-aXYXulxjYEoOkBE024fIjoyy1D167_0VlX4Il8yOW2PkxS2zy2d6eKphUcLeCHTg1q8eBbHLP63baftCNpR-EgsetbhiJNvWCQCJzU_Xe-uF_AgAA__80CgDLCgUAAA== HTTP/1.1\r\nHost: loseimposeherself.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl25634524=1; nlecdf85ebbdb343866e18d5de2b6fd24249=[5941311]; uid_id2=e76301a7-59ee-4974-8fd8-a95a611b35e5:2:1; iprc_l+b9a0dfe34c8114f1d5a734fcb9221aeb=5941311; iprc_l:5941311=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:55 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 4\r\nHost: loseimposeherself.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 5ea70b5e23a7f4c163c86985f1b910b5\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":218,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"loseimposeherself.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","fqdn":"hehehub-acsu123.pythonanywhere.com","domain":"hehehub-acsu123.pythonanywhere.com","tld":"pythonanywhere.com"},"ip":{"addr":"35.173.69.207","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-06T02:52:52.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pythonanywhere.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 12:27:37 GMT","end":"Tue, 10 Mar 2026 12:27:36 GMT"},"fingerprint":{"sha1":"3F:C3:72:83:D0:DC:ED:70:8B:88:69:0B:D1:00:62:30:95:C9:DC:44","sha256":"70:3F:A8:B5:19:C3:81:C7:F6:59:C9:DA:E5:1C:5B:7F:41:AB:6D:4D:16:53:5A:37:6D:04:BD:ED:1E:CA:37:E5"}}},"request":{"raw":"GET /api/getkey?hwid=1767656646.038565 HTTP/1.1\r\nHost: hehehub-acsu123.pythonanywhere.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 06 Jan 2026 02:52:52 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Clacks-Overhead: GNU Terry Pratchett\r\nContent-Encoding: gzip\r\nServer: PythonAnywhere\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PythonAnywhere","description":"PythonAnywhere is an online integrated development environment (IDE) and web hosting service (Platform as a service) based on the Python programming language.","website":"https://www.pythonanywhere.com","common_platform_enumeration":"","icon":"PythonAnywhere.svg","categories":["PaaS","Hosting"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]}],"data":{"size":14215,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"7a0ad75b333cbde2ddc55f76102d5d99","sha1":"7862118bc8de8f365a203a594c3e1cdead980dc4","sha256":"138f4e4af504c1966689c4585055f63aba6037650c9c04d27ef9b83f16d44069","sha512":"817582bdd78e884b17803c8a35e5fb5ec90945087a583e845d2b7280d04cf031139817da714b65f0f043d9fda09b26e9d559445d8ff0bda79a734a256c9dc1ec","ssdeep":"192:BS+oWchPJcZQYYAQDn6uu+kTb1wTMPCTPqKcezrd8P/Q6TYA9DM6NynLyJugbVZh:b+Y+SWRgtOmu5mh","tlshash":"1252859a6cf71475a417a0691bfb8b4933389103b107cc3c3acd524c9fc5a98dce6798","first_seen":"2025-12-20T19:31:04.626488Z","last_seen":"2026-03-08T12:40:28.67963Z","times_seen":5,"resource_available":false,"data":null}},"time_used":542,"timings":{"blocked":221,"dns":20,"connect":94,"send":0,"wait":100,"receive":0,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loseimposeherself.com/ren.gif?sid=H4sIAAAAAAAC_1RSzWskxRuu3h32sL_DD13xPAiKik66Z3pmZ9zDYlwjizGJ2UjAj0NVV_VMmZ6qtqp7emZO0YAunnLwoF7sPJNs_Fhk_QPUOPGyLAi2FwNuEPwLRFg8SicD0Rfq_ainDs_zvPX-TnpMGkjp0coreiyjiM41a271yXWpuM5sdWmt6rk190p1XaqWf6U6LJMZPOc1_Jr7VPUlEWzoubrrua7netUFaUSoh3MnKGR8u-PVOm7Nr9e8po-h-e9sUweWOuCDY_IwJC_-_0f4BmQwherfuSbsRqLjZ17spxFNtMGA77-mNpTOFPpnbWgchGp_9hraFoR8fA5a7c8UQA92SwVgsiDnHr0PpvZnNMEGe6dMWQShwPj_kA2mENEUkk4R6C1I_jMBAo6lZaj-rSVtMjo6RWmJFqTy4C_IrCCV-49A9b-ej-SwekNHaSK1shiGOeRwCtmdIk4PkYwdyOwQQfIeJP-JzD1YhOrvLttIQ_L8RL0Mp6DWQVoe6SANHaSxgz4_qvpu2w882miFHR5cdn3q-1wwt9Ouuy7tBJeRBu9C8m0EZhOx2cSG3IZJD2B7OSx3YJOCOK9uYsBzZIIgswQZJcgkQZYQZIN8j0e2bvNbPLIp82a1PquNfKKT7g7d00lXKAJqtmF4vivjd-wWguT8ZBxaPtFloizJJ5TxfCc-Jg-VbjkfPPEbNsRRlYftpmCMs4bfaLdawmvzJhd11gp53a_7HViZQ9pzJ0aMZUEWfvkbsSzI43fugtFD2OgQgTwPmnqgWQ7ayzFWR4_1RE_0UvYsDWzq1Ru1eJT0tKJqlPWEEbVA98F1jjipIBk5O9ExuTRZXZs_ONnlW78eQAT3yCwQmByxyfG2_JGgG92crOqM7K7qzJJvluNE9uWYlnu-kdBEXPjyZTHKtOHXr9ntL54PSqBsb68JmyxSxaXqWvLVvORcmAVtAkG-vW7XBVtJbW8-NSqNF1deWLjej42wVmo1BZUFufjnhwhkQS5999nJH24-_TuCeBM2PuNpNQGLK4gkQSTO7inLYf81s7N-x95E11RAky2ofo6ByTGIctBoGza9OElic-_q3U_K-BQsqkxYZCq7LDLRRwV5_fOrpVk_lOn7U9usPKo266zRardbImzxsMEb9QbvNF3R8Wmn5Xf8JhJbyDdHF_4JAAD__0vMuMJ1BAAA","fqdn":"loseimposeherself.com","domain":"loseimposeherself.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"loseimposeherself.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 08:12:24 GMT","end":"Thu, 19 Mar 2026 08:12:23 GMT"},"fingerprint":{"sha1":"B1:6B:EB:05:E0:5A:FE:EB:0E:C8:A3:8B:EC:61:8D:51:CD:8C:90:5B","sha256":"87:C6:97:CB:C2:A5:11:74:9B:43:AB:AB:6C:80:15:71:6F:DB:98:4D:C1:34:D2:A7:47:B5:D1:64:F6:AD:05:80"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSzWskxRuu3h32sL_DD13xPAiKik66Z3pmZ9zDYlwjizGJ2UjAj0NVV_VMmZ6qtqp7emZO0YAunnLwoF7sPJNs_Fhk_QPUOPGyLAi2FwNuEPwLRFg8SicD0Rfq_ainDs_zvPX-TnpMGkjp0coreiyjiM41a271yXWpuM5sdWmt6rk190p1XaqWf6U6LJMZPOc1_Jr7VPUlEWzoubrrua7netUFaUSoh3MnKGR8u-PVOm7Nr9e8po-h-e9sUweWOuCDY_IwJC_-_0f4BmQwherfuSbsRqLjZ17spxFNtMGA77-mNpTOFPpnbWgchGp_9hraFoR8fA5a7c8UQA92SwVgsiDnHr0PpvZnNMEGe6dMWQShwPj_kA2mENEUkk4R6C1I_jMBAo6lZaj-rSVtMjo6RWmJFqTy4C_IrCCV-49A9b-ej-SwekNHaSK1shiGOeRwCtmdIk4PkYwdyOwQQfIeJP-JzD1YhOrvLttIQ_L8RL0Mp6DWQVoe6SANHaSxgz4_qvpu2w882miFHR5cdn3q-1wwt9Ouuy7tBJeRBu9C8m0EZhOx2cSG3IZJD2B7OSx3YJOCOK9uYsBzZIIgswQZJcgkQZYQZIN8j0e2bvNbPLIp82a1PquNfKKT7g7d00lXKAJqtmF4vivjd-wWguT8ZBxaPtFloizJJ5TxfCc-Jg-VbjkfPPEbNsRRlYftpmCMs4bfaLdawmvzJhd11gp53a_7HViZQ9pzJ0aMZUEWfvkbsSzI43fugtFD2OgQgTwPmnqgWQ7ayzFWR4_1RE_0UvYsDWzq1Ru1eJT0tKJqlPWEEbVA98F1jjipIBk5O9ExuTRZXZs_ONnlW78eQAT3yCwQmByxyfG2_JGgG92crOqM7K7qzJJvluNE9uWYlnu-kdBEXPjyZTHKtOHXr9ntL54PSqBsb68JmyxSxaXqWvLVvORcmAVtAkG-vW7XBVtJbW8-NSqNF1deWLjej42wVmo1BZUFufjnhwhkQS5999nJH24-_TuCeBM2PuNpNQGLK4gkQSTO7inLYf81s7N-x95E11RAky2ofo6ByTGIctBoGza9OElic-_q3U_K-BQsqkxYZCq7LDLRRwV5_fOrpVk_lOn7U9usPKo266zRardbImzxsMEb9QbvNF3R8Wmn5Xf8JhJbyDdHF_4JAAD__0vMuMJ1BAAA HTTP/1.1\r\nHost: loseimposeherself.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl25634524=1; nlecdf85ebbdb343866e18d5de2b6fd24249=[5941311]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:54 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nvary: Origin\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: loseimposeherself.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 268c4f5c6985cea5378e14ef88ab5cb2\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":105,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"loseimposeherself.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loseimposeherself.com/ren.gif?sid=H4sIAAAAAAAC_4RTv28cRRidc6wUoUAQRH1CAQHC5_15viUFwgSjiJBESVCKEKGZnVnf4L2ZZWb31nZFiBQiKhcUQMPeu4udQIRCSQGKzmmiSCAOCXEScQP_AEKKKNHalgwVX_H9eG-L77395tqg2CE-Cjo9-5Zel2lK58OW03z-olRcl7Z5-kLTdVrO8eZFqdrB8eZqnUz_ZdcPWs4LzTdEvKLnPcd1HNdxm0vSiESvzu-ykNntyG1FTivwWm4YYNX8d7bFDCydAe_vkCch-eTx35NLkPEYqnfnhLAruc5eer1XpDTXBn2-9bZaUbpU6B20iWkgUVv7X0PbCSGfzkCrrX0F0P1RrQBMTsjM0w_B1Nb-mmD9G3ubshRCgfHHUPbHEOkYko4R66uQ_CcCxBynz0D1Nk9rU9K1PZbW7ITMPvoLspyQ2YdPQfW-XkzlavO8TotcamWxmlSQq2PI5TGyYox8vQFZbiPOP4TkP5D5R6egeqMzNtWQfHpMLLR9x6ULc2EkxFwQLQRznYR35mgU0rbrMj8U4a5FMhmD2hkUtoFCNlAkDRRZAz0-bQZOJ4hd6reTiMcLTkCDgAvmRB3PcWgUL6CIr0DyDcTm2mbGu_lKf5SbQowKFduBe3MPCqJdcLMGg2jg3i7ezVIvbPtB6AUDd3pMpSLmSScUjHHmB36n3RZuh4dceKydcC_wgujWpTAKXN91LyMzV25yf0H4LA4GDCtyA6a4C9utYHkDNifo8wqlICgtQUkJSklQ5gRlv7rBU-vZapOntmDufvX2q18Ndb48oDd0viwUATUbMLwayex9exVxfmi4nlg-1HWiLK-GlPFqkO2QJ-pf2Pjoud-wIqbN_xMDKytIOwNqG1iXE7L089_I5IQ8e-c-GN2GTbcRy0OghQtaVqDdCutq-kxXdEW3YHM0toXr-a1sLe9qRdVa2RVGtGLdA9cVsnwW-VpjkO6Qo8NzFxbv7h7Y5V_vQcQPyH4gNhUyU-E9eY9gOb0-PKdLMjqnS0u-OZPlsifXaX1853Oai8NfvinWSm34yRN249arcU3U7e0LwuanqOJSLVvy1aLkXJglbWJBvjtpLwp2trDdxcKoIjt19rWlk73MCGulVmNQOSFH_vwYsZyQo99_sfuwwhf_QJx9AJsd7Gk1AcsOIZUEqTjAKatg_zWzg35gr2PZzILmV6F6FfqmQj-tQNMN2OLIMM_Mg1fuf1bH52Dp7JClZnbEUpN-Uvu0Xadvdx2bkMu__Agrp83QY36702mLpM0Tn_uez6PQEVFAo3YQBSFyO5HvrB3-JwAA__8qWUAPCgUAAA==","fqdn":"loseimposeherself.com","domain":"loseimposeherself.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"loseimposeherself.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 08:12:24 GMT","end":"Thu, 19 Mar 2026 08:12:23 GMT"},"fingerprint":{"sha1":"B1:6B:EB:05:E0:5A:FE:EB:0E:C8:A3:8B:EC:61:8D:51:CD:8C:90:5B","sha256":"87:C6:97:CB:C2:A5:11:74:9B:43:AB:AB:6C:80:15:71:6F:DB:98:4D:C1:34:D2:A7:47:B5:D1:64:F6:AD:05:80"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_4RTv28cRRidc6wUoUAQRH1CAQHC5_15viUFwgSjiJBESVCKEKGZnVnf4L2ZZWb31nZFiBQiKhcUQMPeu4udQIRCSQGKzmmiSCAOCXEScQP_AEKKKNHalgwVX_H9eG-L77395tqg2CE-Cjo9-5Zel2lK58OW03z-olRcl7Z5-kLTdVrO8eZFqdrB8eZqnUz_ZdcPWs4LzTdEvKLnPcd1HNdxm0vSiESvzu-ykNntyG1FTivwWm4YYNX8d7bFDCydAe_vkCch-eTx35NLkPEYqnfnhLAruc5eer1XpDTXBn2-9bZaUbpU6B20iWkgUVv7X0PbCSGfzkCrrX0F0P1RrQBMTsjM0w_B1Nb-mmD9G3ubshRCgfHHUPbHEOkYko4R66uQ_CcCxBynz0D1Nk9rU9K1PZbW7ITMPvoLspyQ2YdPQfW-XkzlavO8TotcamWxmlSQq2PI5TGyYox8vQFZbiPOP4TkP5D5R6egeqMzNtWQfHpMLLR9x6ULc2EkxFwQLQRznYR35mgU0rbrMj8U4a5FMhmD2hkUtoFCNlAkDRRZAz0-bQZOJ4hd6reTiMcLTkCDgAvmRB3PcWgUL6CIr0DyDcTm2mbGu_lKf5SbQowKFduBe3MPCqJdcLMGg2jg3i7ezVIvbPtB6AUDd3pMpSLmSScUjHHmB36n3RZuh4dceKydcC_wgujWpTAKXN91LyMzV25yf0H4LA4GDCtyA6a4C9utYHkDNifo8wqlICgtQUkJSklQ5gRlv7rBU-vZapOntmDufvX2q18Ndb48oDd0viwUATUbMLwayex9exVxfmi4nlg-1HWiLK-GlPFqkO2QJ-pf2Pjoud-wIqbN_xMDKytIOwNqG1iXE7L089_I5IQ8e-c-GN2GTbcRy0OghQtaVqDdCutq-kxXdEW3YHM0toXr-a1sLe9qRdVa2RVGtGLdA9cVsnwW-VpjkO6Qo8NzFxbv7h7Y5V_vQcQPyH4gNhUyU-E9eY9gOb0-PKdLMjqnS0u-OZPlsifXaX1853Oai8NfvinWSm34yRN249arcU3U7e0LwuanqOJSLVvy1aLkXJglbWJBvjtpLwp2trDdxcKoIjt19rWlk73MCGulVmNQOSFH_vwYsZyQo99_sfuwwhf_QJx9AJsd7Gk1AcsOIZUEqTjAKatg_zWzg35gr2PZzILmV6F6FfqmQj-tQNMN2OLIMM_Mg1fuf1bH52Dp7JClZnbEUpN-Uvu0Xadvdx2bkMu__Agrp83QY36702mLpM0Tn_uez6PQEVFAo3YQBSFyO5HvrB3-JwAA__8qWUAPCgUAAA== HTTP/1.1\r\nHost: loseimposeherself.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl25634524=1; nlecdf85ebbdb343866e18d5de2b6fd24249=[5941311]; uid_id2=e76301a7-59ee-4974-8fd8-a95a611b35e5:2:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:54 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: loseimposeherself.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 8f1882c273f4acb15af88988c36d3960\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":304,"timings":{"blocked":209,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"loseimposeherself.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/b6/5b/1c/b65b1cf51705640151362d9bac4923cd/1756662083.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:33:02 GMT","end":"Thu, 05 Feb 2026 02:33:01 GMT"},"fingerprint":{"sha1":"FF:BB:C7:F6:31:A3:EE:08:8E:72:C4:2F:A2:C8:78:1B:3C:22:C4:57","sha256":"93:BE:65:88:B5:AC:E6:69:91:EE:F6:7E:27:3F:D6:9F:59:B1:AB:46:F7:49:0D:E8:F2:1C:9E:A9:BE:F9:B6:95"}}},"request":{"raw":"GET /cti/b6/5b/1c/b65b1cf51705640151362d9bac4923cd/1756662083.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 02:52:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 60318\r\nserver: nginx/1.21.6\r\nlast-modified: Sun, 31 Aug 2025 17:41:23 GMT\r\netag: \"68b48943-eb9e\"\r\nexpires: Thu, 08 Jan 2026 02:52:54 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":60318,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.3 (Macintosh), datetime=2025:08:30 15:33:45], progressive, precision 8, 320x240, components 3","md5":"966e6f8ade8598adc3b34c3b44b5a336","sha1":"408489c1dac8b455a5d76d83f79843c029f62344","sha256":"9f492d84c3eee3a470cdd18490f011829b896ddc531efe104df0143dc52db04e","sha512":"364731deca5e406f8d555e952287418dace9acef8d583bdc84ced07fb92da26db076a3946a566d5d82ad797357d7ea0f0aa8e3b009c647ea4d589aa76da3c043","ssdeep":"1536:LDy3bDOsDy3bDOUopIMYiW8UzK8dMhg7gmaZSDw2Y:HhwhUgIBWgEyw2Y","tlshash":"9c43d0a1e392de69f4c0d63e94c2e6d2f3521991a3d3da047c9c3f8277e52a70d5d282","first_seen":"2025-09-02T17:23:30.704726Z","last_seen":"2026-05-24T21:18:31.068638Z","times_seen":1366,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loseimposeherself.com/impr.gif?sid=H4sIAAAAAAAC_4RTz4sc1Rq9PRmyyFs83ou4biSKitNT1VXV3WUW4hhHgjEJSSSLGOT-qunrVN9b3lvVNTMrYyAGV7NwoW6sPt2ZSTRIXLpQQk82IaDYgthgZqP_gAjBpfRkYHTlt_h-nFOL75z67rVBsUsCFHR69g2zodKULkYNr_7sRaWFKV399IW67zW84_WLSrfC4_W1WbL9F_0gbHjP1V-TfNUsNj3f83zPry8rKxOztrjHQmW3Y78Re42w2fCjEGv2n7Mr5uDoHER_l_wfSkz--2tyCYqPoXt3Tki3mpvshVd7RUpzY9EX22_qVW1Kjd5Bm9gaEr29_zWMmxDy8RyM3t5XANMfzRSAqQmZe_IhmN7eXxOsf-PxpiyF1GDiPyj7Y8h0DEXH4OYqlPiBAFzg9Bno3tZpY0u6_pilM3ZC5h_9AVVOyPzDJ6B7Xy6laq1-3qRFrox2WEsqqLUx1MoYWTFGvlGDKnfA8_ehxHdk8dEp6N7ojEsNlJgek-1W4Pm0vRDFUi6EcTtc6CSis0DjiLZ8nwWRjPYsUskY1M2hcDUUqoYiqaHIauiJaT30OiH3adBKYsHbXkjDUEjmxZ2m59GYt1HwK1BiE9xeu128naXNqBWEUTMc-NNjOpVcJJ1IMiZYEAadVkv6HREJ2WStRDTDZhjfuhTFoR_4_uWtTHTz1f4ot4UcFZq7gX_zMRTGe-DWDAzjgY_MXrkpgrYMGA8HDKtqE7a4C9et4EQNLifoiwqlJCgdQUkJSkVQ5gRlv7ohUtd01ZZIXcH8_drcr0E1NPnKgN4w-YrUBNRuwopqpLJ33VXw_NBwI3FiaGaJsrwaUiaqQbZL_jf7hbUPnvkFq3Ja_zfZcKqCcnOgroYNNSHLP_6JTE3I03fug9EduHQHXB0CLXzQsgLtVtjQ06e6siu7BVug3BV-M2hk63nXaKrXy660ssFND8JUyPJ55Ou1QbpLjg7PXVi6u3dgl3--B8kfkP0AtxUyW-EddY9gJb0-PGdKMjpnSke-OpPlqqc26Oz4zuc0l4c_f12ul8aKkyfc5q2X-YyYtbcvSJefolooveLIF0tKCGmXjeWSfHPSXZTsbOG6S4XVRXbq7CvLJ3uZlc4po8egakKO_P4huJqQo99-tvewoud_A8_eg8sO9nSGgGWHkCqCVB7glFVwf5vZQT9w17Fi50Hzq9C9Cn1boZ9WoOkmXHFkmGf2wUv3P5nFp2Dp_JCldn7EUpt-NPNpZ5a-3nNsQi7_9D2cmtaTQDa553XaLT_oJNIPQsGTqBPGokW9IJDI3US9tX74rwAAAP__LvTz4woFAAA=","fqdn":"loseimposeherself.com","domain":"loseimposeherself.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"loseimposeherself.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 08:12:24 GMT","end":"Thu, 19 Mar 2026 08:12:23 GMT"},"fingerprint":{"sha1":"B1:6B:EB:05:E0:5A:FE:EB:0E:C8:A3:8B:EC:61:8D:51:CD:8C:90:5B","sha256":"87:C6:97:CB:C2:A5:11:74:9B:43:AB:AB:6C:80:15:71:6F:DB:98:4D:C1:34:D2:A7:47:B5:D1:64:F6:AD:05:80"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_4RTz4sc1Rq9PRmyyFs83ou4biSKitNT1VXV3WUW4hhHgjEJSSSLGOT-qunrVN9b3lvVNTMrYyAGV7NwoW6sPt2ZSTRIXLpQQk82IaDYgthgZqP_gAjBpfRkYHTlt_h-nFOL75z67rVBsUsCFHR69g2zodKULkYNr_7sRaWFKV399IW67zW84_WLSrfC4_W1WbL9F_0gbHjP1V-TfNUsNj3f83zPry8rKxOztrjHQmW3Y78Re42w2fCjEGv2n7Mr5uDoHER_l_wfSkz--2tyCYqPoXt3Tki3mpvshVd7RUpzY9EX22_qVW1Kjd5Bm9gaEr29_zWMmxDy8RyM3t5XANMfzRSAqQmZe_IhmN7eXxOsf-PxpiyF1GDiPyj7Y8h0DEXH4OYqlPiBAFzg9Bno3tZpY0u6_pilM3ZC5h_9AVVOyPzDJ6B7Xy6laq1-3qRFrox2WEsqqLUx1MoYWTFGvlGDKnfA8_ehxHdk8dEp6N7ojEsNlJgek-1W4Pm0vRDFUi6EcTtc6CSis0DjiLZ8nwWRjPYsUskY1M2hcDUUqoYiqaHIauiJaT30OiH3adBKYsHbXkjDUEjmxZ2m59GYt1HwK1BiE9xeu128naXNqBWEUTMc-NNjOpVcJJ1IMiZYEAadVkv6HREJ2WStRDTDZhjfuhTFoR_4_uWtTHTz1f4ot4UcFZq7gX_zMRTGe-DWDAzjgY_MXrkpgrYMGA8HDKtqE7a4C9et4EQNLifoiwqlJCgdQUkJSkVQ5gRlv7ohUtd01ZZIXcH8_drcr0E1NPnKgN4w-YrUBNRuwopqpLJ33VXw_NBwI3FiaGaJsrwaUiaqQbZL_jf7hbUPnvkFq3Ja_zfZcKqCcnOgroYNNSHLP_6JTE3I03fug9EduHQHXB0CLXzQsgLtVtjQ06e6siu7BVug3BV-M2hk63nXaKrXy660ssFND8JUyPJ55Ou1QbpLjg7PXVi6u3dgl3--B8kfkP0AtxUyW-EddY9gJb0-PGdKMjpnSke-OpPlqqc26Oz4zuc0l4c_f12ul8aKkyfc5q2X-YyYtbcvSJefolooveLIF0tKCGmXjeWSfHPSXZTsbOG6S4XVRXbq7CvLJ3uZlc4po8egakKO_P4huJqQo99-tvewoud_A8_eg8sO9nSGgGWHkCqCVB7glFVwf5vZQT9w17Fi50Hzq9C9Cn1boZ9WoOkmXHFkmGf2wUv3P5nFp2Dp_JCldn7EUpt-NPNpZ5a-3nNsQi7_9D2cmtaTQDa553XaLT_oJNIPQsGTqBPGokW9IJDI3US9tX74rwAAAP__LvTz4woFAAA= HTTP/1.1\r\nHost: loseimposeherself.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl25634524=1; nlecdf85ebbdb343866e18d5de2b6fd24249=[5941311]; uid_id2=e76301a7-59ee-4974-8fd8-a95a611b35e5:2:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:54 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 4\r\nHost: loseimposeherself.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 11ff7438f9a34b29b9b37f4db392ada0\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":320,"timings":{"blocked":221,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"loseimposeherself.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loseimposeherself.com/ren.gif?sid=H4sIAAAAAAAC_4RTz4scxRevmSw55Hv4ohHPg0RRcWf75-y0OYhrXAnGJCSRHGKQqq7qnXJ7qtqq7undPRkDMXjagwf1Ys9nJruJBol_gBIn8RACiiOIA2Yv4h8gQvAovVlYPfkOn_fj0zze5_WrK8Nih_go6Oz0G3pDpildCNtO69nzUnFd2tbJcy3XaTtHW-el6gRHW2s1mMGLrh-0nedar4l4VS94jus4ruO2lqURiV5b2GUhs5uR246cduC13TDAmvl3bosmLG2CD3bI45B8-v_fkguQ8QSqf-uYsKu5zl54tV-kNNcGA779plpVulTo74eJaSBR23tfQ9spIR83odX2ngLowbhWACanpPnkAzC1vTcm2ODao0lZCqHA-P9QDiYQ6QSSThDry5D8RwLEHCdPQfW3TmpT0vVHLK3ZKZl7-CdkOSVzD56A6n-5lMq11lmdFrnUymItqSDXJpArE2TFBPlGA7K8gzh_H5J_TxYenoDqj0_ZVEPy2RGx2PEdly7Oh5EQ80G0GMx3E96dp1FIO67L_FCEuyuSyQTUNlHYBgrZQJE0UGQN9PmsFTjdIHap30kiHi86AQ0CLpgTdT3HoVG8iCK-BMk3EZsr40LFduhez3gvXx0E0Tg3hdiqi0E0dG8Wb2epF3b8IPSCoTs7olIR86QbCsY48wO_2-kIt8tDLjzWSbgXeEF040IYBa7vuhe3HnXd7YnMXLrO_UXhszgYMqzKTZjiNmyvguUN2JxgwCuUgqC0BCUlKCVBmROUg-oaT61nqy2e2oK5e97b83410vnKkF7T-YpQBNRswvBqLLN37WXE-YHRRmL5SNdAWV6NKOPVMNshj9W_sPHBM79iVcxa_yUMVlaQtglqG9iQU7L801_I5JQ8feseGL0Dm95BLA-AFi5oWYH2Kmyo2VM90RO9gs3T2Bau57ez9bynFVXrZU8Y0Y51H1xXyPI55OuNYbpDDo_OnFu6vXtgF3_5DiK-T_YMsamQmQrvyLsEK-nV0RldkvEZXVry1aksl325QevjO5vTXBz8_HWxXmrDjx-zmzdejmuiDm-eEzY_QRWXasWSL5Yk58IsaxML8vVxe16w04XtLRVGFdmJ068sH-9nRlgrtZqAyik59MeHiOWUHP7ms92HFT7_O-LsPdhsf06rCVjWRCoJUrFfp6yC_UfO9uOhvYoVMweaX4bqVxiYCoO0Ak03YYtDozwz91-690ltn4KlcyOWmrkxS0360ZRc_PmH3WXV8G0Nd2HlrBV6zO90ux2RdHjic9_zeRQ6Igpo1AmiIERup_Kt9YN_BwAA__8HhGIICgUAAA==","fqdn":"loseimposeherself.com","domain":"loseimposeherself.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"loseimposeherself.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 08:12:24 GMT","end":"Thu, 19 Mar 2026 08:12:23 GMT"},"fingerprint":{"sha1":"B1:6B:EB:05:E0:5A:FE:EB:0E:C8:A3:8B:EC:61:8D:51:CD:8C:90:5B","sha256":"87:C6:97:CB:C2:A5:11:74:9B:43:AB:AB:6C:80:15:71:6F:DB:98:4D:C1:34:D2:A7:47:B5:D1:64:F6:AD:05:80"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_4RTz4scxRevmSw55Hv4ohHPg0RRcWf75-y0OYhrXAnGJCSRHGKQqq7qnXJ7qtqq7undPRkDMXjagwf1Ys9nJruJBol_gBIn8RACiiOIA2Yv4h8gQvAovVlYPfkOn_fj0zze5_WrK8Nih_go6Oz0G3pDpildCNtO69nzUnFd2tbJcy3XaTtHW-el6gRHW2s1mMGLrh-0nedar4l4VS94jus4ruO2lqURiV5b2GUhs5uR246cduC13TDAmvl3bosmLG2CD3bI45B8-v_fkguQ8QSqf-uYsKu5zl54tV-kNNcGA779plpVulTo74eJaSBR23tfQ9spIR83odX2ngLowbhWACanpPnkAzC1vTcm2ODao0lZCqHA-P9QDiYQ6QSSThDry5D8RwLEHCdPQfW3TmpT0vVHLK3ZKZl7-CdkOSVzD56A6n-5lMq11lmdFrnUymItqSDXJpArE2TFBPlGA7K8gzh_H5J_TxYenoDqj0_ZVEPy2RGx2PEdly7Oh5EQ80G0GMx3E96dp1FIO67L_FCEuyuSyQTUNlHYBgrZQJE0UGQN9PmsFTjdIHap30kiHi86AQ0CLpgTdT3HoVG8iCK-BMk3EZsr40LFduhez3gvXx0E0Tg3hdiqi0E0dG8Wb2epF3b8IPSCoTs7olIR86QbCsY48wO_2-kIt8tDLjzWSbgXeEF040IYBa7vuhe3HnXd7YnMXLrO_UXhszgYMqzKTZjiNmyvguUN2JxgwCuUgqC0BCUlKCVBmROUg-oaT61nqy2e2oK5e97b83410vnKkF7T-YpQBNRswvBqLLN37WXE-YHRRmL5SNdAWV6NKOPVMNshj9W_sPHBM79iVcxa_yUMVlaQtglqG9iQU7L801_I5JQ8feseGL0Dm95BLA-AFi5oWYH2Kmyo2VM90RO9gs3T2Bau57ez9bynFVXrZU8Y0Y51H1xXyPI55OuNYbpDDo_OnFu6vXtgF3_5DiK-T_YMsamQmQrvyLsEK-nV0RldkvEZXVry1aksl325QevjO5vTXBz8_HWxXmrDjx-zmzdejmuiDm-eEzY_QRWXasWSL5Yk58IsaxML8vVxe16w04XtLRVGFdmJ068sH-9nRlgrtZqAyik59MeHiOWUHP7ms92HFT7_O-LsPdhsf06rCVjWRCoJUrFfp6yC_UfO9uOhvYoVMweaX4bqVxiYCoO0Ak03YYtDozwz91-690ltn4KlcyOWmrkxS0360ZRc_PmH3WXV8G0Nd2HlrBV6zO90ux2RdHjic9_zeRQ6Igpo1AmiIERup_Kt9YN_BwAA__8HhGIICgUAAA== HTTP/1.1\r\nHost: loseimposeherself.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl25634524=1; nlecdf85ebbdb343866e18d5de2b6fd24249=[5941311]; uid_id2=e76301a7-59ee-4974-8fd8-a95a611b35e5:2:1; iprc_l+b9a0dfe34c8114f1d5a734fcb9221aeb=5941311; iprc_l:5941311=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:54 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: loseimposeherself.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: e9463ff7c595e5f5c41d2be9dcf68d27\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"loseimposeherself.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loseimposeherself.com/ren.gif?sid=H4sIAAAAAAAC_4RTT4scxRuu2Sw55Hf4oRHPg0RRcWf77-y0OYhrXAnGJCSRHGKQqq7qnXJ7qtqq7undPRkDMXjagwf1Ys8zk91Eg8QPoMRJPISA4gjigFkQP4EIwaP0ZmD15Ht4_9RTvLzPU29dGRS7xEdBp6ff0JsyTeli2HKaz56XiuvSNk-ea7pOyznaPC9VOzjaXK-d6b_o-kHLea75mojX9KLnuI7jOm5zRRqR6PXFPRQyuxm5rchpBV7LDQOsm3_XtpiDpXPg_V3yOCSf_P_35AJkPIbq3Tom7Fqusxde7RUpzbVBn--8qdaULhV6-2liGkjUzuw2tJ0Q8vEctNqZMYDuj2oGYHJC5p58AKZ2ZmOC9a89mpSlEAqM_w9lfwyRjiHpGLG-DMl_JEDMcfIUVG_7pDYl3XiE0hqdkPmHf0KWEzL_4Amo3pfLqVxvntVpkUutLNaTCnJ9DLk6RlaMkW82IMs7iPP3Ifn3ZPHhCaje6JRNNSSfHhFLbd9x6dJCGAmxEERLwUIn4Z0FGoW07brMD0W4J5FMxqB2DoVtoJANFEkDRdZAj0-bgdMJYpf67STi8ZIT0CDggjlRx3McGsVLKOJLkHwLsblyPePdfK0fRKPcFGK7ULENooF7s3g7S72w7QehFwzc6RGVipgnnVAwxpkf-J12W7gdHnLhsXbCvcALohsXwihwfde9uP2o617PUd1z4CIzl65zf0n4LA4GDGtyC6a4DdutYHkDNifo8wqlICgtQUkJSklQ5gRlv7rGU-vZapuntmDuLHqz6FdDna8O6DWdrwpFQM0WDK9GMnvXXkacHxhuJpYPde0oy6shZbwaZLvksfoJGx888yvWxLT5X_xgZQVp50BtA5tyQlZ--guZnJCnb90Do3dg0zuI5QHQwgUtK9BuhU01faoruqJbsAUa28L1_Fa2kXe1omqj7AojWrHugesKWT6PfKMxSHfJ4eGZc8u39xbs4i_fQsT3ycwQmwqZqfCOvEuwml4dntElGZ3RpSVfncpy2ZObtF6-sznNxcHPXxcbpTb8-DG7dePluAbq9OY5YfMTVHGpVi35YllyLsyKNrEgXx-35wU7XdjucmFUkZ04_crK8V5mhLVSqzGonJBDf3yIWE7I4W8-2_tY4fO_Ic7eg83257SagGUHkEqCVOyfU1bB_qNm-_nAXsWqmQfNL0P1KvRNhX5agaZbsMWhYZ6Z-y_d-6S2T8HS-SFLzfyIpSb9aEIu_vxDLdZ3e4rV7i6snDZDj_ntTqctkjZPfO57Po9CR0QBjdpBFITI7US-tXHw7wAAAP__2RzXfQoFAAA=","fqdn":"loseimposeherself.com","domain":"loseimposeherself.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"loseimposeherself.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 08:12:24 GMT","end":"Thu, 19 Mar 2026 08:12:23 GMT"},"fingerprint":{"sha1":"B1:6B:EB:05:E0:5A:FE:EB:0E:C8:A3:8B:EC:61:8D:51:CD:8C:90:5B","sha256":"87:C6:97:CB:C2:A5:11:74:9B:43:AB:AB:6C:80:15:71:6F:DB:98:4D:C1:34:D2:A7:47:B5:D1:64:F6:AD:05:80"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_4RTT4scxRuu2Sw55Hf4oRHPg0RRcWf77-y0OYhrXAnGJCSRHGKQqq7qnXJ7qtqq7undPRkDMXjagwf1Ys8zk91Eg8QPoMRJPISA4gjigFkQP4EIwaP0ZmD15Ht4_9RTvLzPU29dGRS7xEdBp6ff0JsyTeli2HKaz56XiuvSNk-ea7pOyznaPC9VOzjaXK-d6b_o-kHLea75mojX9KLnuI7jOm5zRRqR6PXFPRQyuxm5rchpBV7LDQOsm3_XtpiDpXPg_V3yOCSf_P_35AJkPIbq3Tom7Fqusxde7RUpzbVBn--8qdaULhV6-2liGkjUzuw2tJ0Q8vEctNqZMYDuj2oGYHJC5p58AKZ2ZmOC9a89mpSlEAqM_w9lfwyRjiHpGLG-DMl_JEDMcfIUVG_7pDYl3XiE0hqdkPmHf0KWEzL_4Amo3pfLqVxvntVpkUutLNaTCnJ9DLk6RlaMkW82IMs7iPP3Ifn3ZPHhCaje6JRNNSSfHhFLbd9x6dJCGAmxEERLwUIn4Z0FGoW07brMD0W4J5FMxqB2DoVtoJANFEkDRdZAj0-bgdMJYpf67STi8ZIT0CDggjlRx3McGsVLKOJLkHwLsblyPePdfK0fRKPcFGK7ULENooF7s3g7S72w7QehFwzc6RGVipgnnVAwxpkf-J12W7gdHnLhsXbCvcALohsXwihwfde9uP2o617PUd1z4CIzl65zf0n4LA4GDGtyC6a4DdutYHkDNifo8wqlICgtQUkJSklQ5gRlv7rGU-vZapuntmDuLHqz6FdDna8O6DWdrwpFQM0WDK9GMnvXXkacHxhuJpYPde0oy6shZbwaZLvksfoJGx888yvWxLT5X_xgZQVp50BtA5tyQlZ--guZnJCnb90Do3dg0zuI5QHQwgUtK9BuhU01faoruqJbsAUa28L1_Fa2kXe1omqj7AojWrHugesKWT6PfKMxSHfJ4eGZc8u39xbs4i_fQsT3ycwQmwqZqfCOvEuwml4dntElGZ3RpSVfncpy2ZObtF6-sznNxcHPXxcbpTb8-DG7dePluAbq9OY5YfMTVHGpVi35YllyLsyKNrEgXx-35wU7XdjucmFUkZ04_crK8V5mhLVSqzGonJBDf3yIWE7I4W8-2_tY4fO_Ic7eg83257SagGUHkEqCVOyfU1bB_qNm-_nAXsWqmQfNL0P1KvRNhX5agaZbsMWhYZ6Z-y_d-6S2T8HS-SFLzfyIpSb9aEIu_vxDLdZ3e4rV7i6snDZDj_ntTqctkjZPfO57Po9CR0QBjdpBFITI7US-tXHw7wAAAP__2RzXfQoFAAA= HTTP/1.1\r\nHost: loseimposeherself.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl25634524=1; nlecdf85ebbdb343866e18d5de2b6fd24249=[5941311]; uid_id2=e76301a7-59ee-4974-8fd8-a95a611b35e5:2:1; iprc_l+b9a0dfe34c8114f1d5a734fcb9221aeb=5941311; iprc_l:5941311=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:54 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nvary: Origin\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: loseimposeherself.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: f767e4319f02e7a12f37637957c563c0\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":66,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"loseimposeherself.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Frobot%2F4%2Fcss%2Fmagic.css\u0026l=45054\u0026fd=505","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:55.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 00:50:13 GMT","end":"Sun, 29 Mar 2026 00:50:12 GMT"},"fingerprint":{"sha1":"B6:89:38:EE:EF:1E:F1:A0:93:51:BB:7A:F2:13:F5:DF:8C:9B:8F:F7","sha256":"74:22:2C:3F:1E:A6:04:C8:AD:7C:D8:B4:13:57:A5:95:EF:83:FA:28:18:BC:F3:BD:38:93:CB:DA:4B:30:3F:8A"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Frobot%2F4%2Fcss%2Fmagic.css\u0026l=45054\u0026fd=505 HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: uid_id2=e3fc7a49-8f00-4fdd-bc32-5e9b197e91d0:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl25634495=1; slece02ee106ac9f7f9a067c81c19bdc3c60=[6293536]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:55 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/ae/79/89/ae7989f2633270f8048003ed9cebf55b/1756661969.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:33:02 GMT","end":"Thu, 05 Feb 2026 02:33:01 GMT"},"fingerprint":{"sha1":"FF:BB:C7:F6:31:A3:EE:08:8E:72:C4:2F:A2:C8:78:1B:3C:22:C4:57","sha256":"93:BE:65:88:B5:AC:E6:69:91:EE:F6:7E:27:3F:D6:9F:59:B1:AB:46:F7:49:0D:E8:F2:1C:9E:A9:BE:F9:B6:95"}}},"request":{"raw":"GET /cti/ae/79/89/ae7989f2633270f8048003ed9cebf55b/1756661969.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 02:52:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 100950\r\nserver: nginx/1.21.6\r\nlast-modified: Sun, 31 Aug 2025 17:39:29 GMT\r\netag: \"68b488d1-18a56\"\r\nexpires: Thu, 08 Jan 2026 02:52:54 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":100950,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.3 (Macintosh), datetime=2025:08:30 15:27:26], progressive, precision 8, 320x240, components 3","md5":"5188b48a2994b55c67b2211a8ed9208d","sha1":"bb1c8a605f489997516d624fbd593b3639e517f8","sha256":"571cbce9dfe4866d792c5bee341d78496f485c467f62fc02b05ceefb08ec6640","sha512":"e399ae6cb27bb09cf3b6103ddb797913f01b43bdafe23d901cd146ed2d544950268e28dd3ee6636fc04d0e6b3c46efdf4141e79de3cfeecd7f18e98e3ab25905","ssdeep":"3072:ooliolMDPZveGJW14aqv8nDsabzPqaqEGf:H92Nzv8UaqJ","tlshash":"bda3f12d6b69ce53f4d4277d3aa38ac68751a91253a3b7843cbd504933b064dbcce907","first_seen":"2025-09-02T18:27:26.483242Z","last_seen":"2026-05-24T23:15:49.41749Z","times_seen":1368,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":85,"connect":23,"send":0,"wait":35,"receive":40,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/11/ca/f4/11caf4e942c5d5d5d04515433ce3d147/1756566718.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:33:02 GMT","end":"Thu, 05 Feb 2026 02:33:01 GMT"},"fingerprint":{"sha1":"FF:BB:C7:F6:31:A3:EE:08:8E:72:C4:2F:A2:C8:78:1B:3C:22:C4:57","sha256":"93:BE:65:88:B5:AC:E6:69:91:EE:F6:7E:27:3F:D6:9F:59:B1:AB:46:F7:49:0D:E8:F2:1C:9E:A9:BE:F9:B6:95"}}},"request":{"raw":"GET /cti/11/ca/f4/11caf4e942c5d5d5d04515433ce3d147/1756566718.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 02:52:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 59745\r\nserver: nginx/1.21.6\r\nlast-modified: Sat, 30 Aug 2025 15:11:58 GMT\r\netag: \"68b314be-e961\"\r\nexpires: Thu, 08 Jan 2026 02:52:54 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59745,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.3 (Macintosh), datetime=2025:08:30 14:52:07], progressive, precision 8, 320x240, components 3","md5":"553444adab3dfcd61adc177371e70b19","sha1":"9cc9b386d317956511049e01988a6d95c10d02bf","sha256":"ae84ed1c8b29159b1746f9c305c3ab04f45ba50652ac4a645477e44fcd616882","sha512":"1c05db90f15c1a34847938159eec2284d7c280b14b3017a7c44f716fff49a61684cf7673543334bd9f97f6e5b17e28f275c1af76b28f570ced515d758d05970f","ssdeep":"1536:9H+iH+gX5OhYC0V1fluUkOk3TqDx18otcaUA:p+u+QkYC0V10UkOk3TqDx1btcaUA","tlshash":"8c43e169bf51eda3f4da8b388468d3d1ba0a7d65a387765230cc995c3fe06949c4d013","first_seen":"2025-09-02T18:27:26.543026Z","last_seen":"2026-05-23T14:11:03.798393Z","times_seen":1395,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loseimposeherself.com/impr.gif?sid=H4sIAAAAAAAC_4RTz4scRRSu2Qw5xINoxPMgUSK4s93TPT_aHMQ1rgRjEpJIDjFI_eqdcnuq2qru6d09GQMxeNqDB_VizzeT3USDxKMHJczmEgKKI4gDZi_-ASJC8Cizu7B68h2-99739eG9r19dH-Q7JEBOp-feMusqSehCs-7Vjl9SWpjC1c5crPle3TtRu6R0KzxRW52B7b_sB2Hde7H2huQrZqHh-Z7ne35tSVkZm9WFXRUqvRP59cirh4263wyxav_bu3wOjs5B9HfI01Bi8uTv8WUoPobu3T0p3Upm0pde7-UJzYxFX2y9rVe0KTR6B2VsK4j11v7XMG5CyKdzMHprfwOY_mi2AZiakLlnH4Hprf0xwfo39yZlCaQGE0-g6I8hkzEUHYOba1DiJwJwgTNnoXubZ4wt6NqeSmfqhFQf_wVVTEj10TPQva8XE7Vau2CSPFNGO6zGJdTqGGp5jDQfI1uvQBXb4NmHUOIHsvD4NHRvdNYlBkpMj8l2K_B82p5vRlLOh1E7nO_EojNPoyZt-T4LmrK5a5GKx6BuDrmrIFcV5HEFeVpBT0xrodcJuU-DVhwJ3vZCGoZCMi_qNDyPRryNnF-FEhvg9vr0mE4kF3GnKRkTLAiDTqsl_Y5oCtlgrVg0wkYY3b7cjEI_8P0rm6noZiv9UWZzOco1dwP_1h4VRrvk5owMo4F_J383TRrNVhA2G-HAR2qv3hJBWwaMhwOGFbUBm9-D65ZwogKXEfRFiUISFI6goASFIigygqJf3hSJa7hyUyQuZ_5-buznoByabHlAb5psWWoCajdgRTlS6fvuGnh2aLgeOzE0M6AsK4eUiXKQ7pCnZr-w8tELv2FFTmv_5wKcKqHcHKirYF1NyNLPfyNVE_L83QdgdBsu2QZXh0BzH7QoQbsl1vX0ua7sym7O5il3ud8I6ula1jWa6rWiK62sc9ODMCXSrIpsrTJIdsjR4fmLi_d2D-zKLz9C8odkP8BtidSWeE_dJ1hObgzPm4KMzpvCkW_OppnqqXU6O74LGc3k4S_flGuFseLUSbdx-1U-E2blnYvSZaepFkovO_LVohJC2iVjuSTfnXKXJDuXu-5ibnWenj732tKpXmqlc8roMaiakCN_fgyuJuTo91_sPqzm8T_A0w_g0oM5nSFgaRWJIkjkAU9ZCfevnh3UA3cDy7YKml2D7pXo2xL9pARNNuDyI8MstQ9fefDZLD4HS6pDltjqiCU2-WRCrvy6PYNvZ3B_zzanprU4kA3ueZ12yw86sfSDUPC42Qkj0aJeEEhkbqLeWTv8TwAAAP__iIhuBQoFAAA=","fqdn":"loseimposeherself.com","domain":"loseimposeherself.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"loseimposeherself.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 08:12:24 GMT","end":"Thu, 19 Mar 2026 08:12:23 GMT"},"fingerprint":{"sha1":"B1:6B:EB:05:E0:5A:FE:EB:0E:C8:A3:8B:EC:61:8D:51:CD:8C:90:5B","sha256":"87:C6:97:CB:C2:A5:11:74:9B:43:AB:AB:6C:80:15:71:6F:DB:98:4D:C1:34:D2:A7:47:B5:D1:64:F6:AD:05:80"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_4RTz4scRRSu2Qw5xINoxPMgUSK4s93TPT_aHMQ1rgRjEpJIDjFI_eqdcnuq2qru6d09GQMxeNqDB_VizzeT3USDxKMHJczmEgKKI4gDZi_-ASJC8Cizu7B68h2-99739eG9r19dH-Q7JEBOp-feMusqSehCs-7Vjl9SWpjC1c5crPle3TtRu6R0KzxRW52B7b_sB2Hde7H2huQrZqHh-Z7ne35tSVkZm9WFXRUqvRP59cirh4263wyxav_bu3wOjs5B9HfI01Bi8uTv8WUoPobu3T0p3Upm0pde7-UJzYxFX2y9rVe0KTR6B2VsK4j11v7XMG5CyKdzMHprfwOY_mi2AZiakLlnH4Hprf0xwfo39yZlCaQGE0-g6I8hkzEUHYOba1DiJwJwgTNnoXubZ4wt6NqeSmfqhFQf_wVVTEj10TPQva8XE7Vau2CSPFNGO6zGJdTqGGp5jDQfI1uvQBXb4NmHUOIHsvD4NHRvdNYlBkpMj8l2K_B82p5vRlLOh1E7nO_EojNPoyZt-T4LmrK5a5GKx6BuDrmrIFcV5HEFeVpBT0xrodcJuU-DVhwJ3vZCGoZCMi_qNDyPRryNnF-FEhvg9vr0mE4kF3GnKRkTLAiDTqsl_Y5oCtlgrVg0wkYY3b7cjEI_8P0rm6noZiv9UWZzOco1dwP_1h4VRrvk5owMo4F_J383TRrNVhA2G-HAR2qv3hJBWwaMhwOGFbUBm9-D65ZwogKXEfRFiUISFI6goASFIigygqJf3hSJa7hyUyQuZ_5-buznoByabHlAb5psWWoCajdgRTlS6fvuGnh2aLgeOzE0M6AsK4eUiXKQ7pCnZr-w8tELv2FFTmv_5wKcKqHcHKirYF1NyNLPfyNVE_L83QdgdBsu2QZXh0BzH7QoQbsl1vX0ua7sym7O5il3ud8I6ula1jWa6rWiK62sc9ODMCXSrIpsrTJIdsjR4fmLi_d2D-zKLz9C8odkP8BtidSWeE_dJ1hObgzPm4KMzpvCkW_OppnqqXU6O74LGc3k4S_flGuFseLUSbdx-1U-E2blnYvSZaepFkovO_LVohJC2iVjuSTfnXKXJDuXu-5ibnWenj732tKpXmqlc8roMaiakCN_fgyuJuTo91_sPqzm8T_A0w_g0oM5nSFgaRWJIkjkAU9ZCfevnh3UA3cDy7YKml2D7pXo2xL9pARNNuDyI8MstQ9fefDZLD4HS6pDltjqiCU2-WRCrvy6PYNvZ3B_zzanprU4kA3ueZ12yw86sfSDUPC42Qkj0aJeEEhkbqLeWTv8TwAAAP__iIhuBQoFAAA= HTTP/1.1\r\nHost: loseimposeherself.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl25634524=1; nlecdf85ebbdb343866e18d5de2b6fd24249=[5941311]; uid_id2=e76301a7-59ee-4974-8fd8-a95a611b35e5:2:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:54 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nvary: Origin\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: loseimposeherself.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: c97f3efe561f182d55bb04b74cd91b92\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":338,"timings":{"blocked":235,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"loseimposeherself.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Frobot%2F4%2Findex.html\u0026l=1697\u0026fd=247","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 00:50:13 GMT","end":"Sun, 29 Mar 2026 00:50:12 GMT"},"fingerprint":{"sha1":"B6:89:38:EE:EF:1E:F1:A0:93:51:BB:7A:F2:13:F5:DF:8C:9B:8F:F7","sha256":"74:22:2C:3F:1E:A6:04:C8:AD:7C:D8:B4:13:57:A5:95:EF:83:FA:28:18:BC:F3:BD:38:93:CB:DA:4B:30:3F:8A"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Frobot%2F4%2Findex.html\u0026l=1697\u0026fd=247 HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: uid_id2=e3fc7a49-8f00-4fdd-bc32-5e9b197e91d0:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl25634495=1; slece02ee106ac9f7f9a067c81c19bdc3c60=[6293536]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:54 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/default/robot/4/js/script.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"172.67.210.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:55.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:26:15 GMT","end":"Wed, 25 Mar 2026 23:23:44 GMT"},"fingerprint":{"sha1":"05:E7:A3:19:D2:55:91:F8:B7:45:48:72:0B:86:C7:0C:2C:CA:27:03","sha256":"14:76:91:36:84:B6:CF:C4:0A:BA:6F:14:80:F9:C7:77:48:3B:08:A3:C8:48:DC:0F:F6:CE:86:72:BB:CC:0B:06"}}},"request":{"raw":"GET /sb/notifications/utility/default/robot/4/js/script.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hehehub-acsu123.pythonanywhere.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 02:52:55 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Oct 2025 11:45:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Et8jN%2BvvMcsbUQdBATx6cmqSizWVzSNFQADtRT%2FuPXnavD%2BJ94Zd3jFUbVaQtokoSM5uTygdjrjDhPzykZriGcAgb%2F3Gnyh%2BYNVm9wF81pY%3D\"}]}\r\ncf-cache-status: MISS\r\netag: W/\"68e64ec4-36c0\"\r\ncontent-encoding: br\r\ncf-ray: 9b97ec0cee0b0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14016,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"d2efe717e9b0b11eea7556b57159e2a1","sha1":"93bf30d7b07d280b9ff420d222f2fea41ae83e62","sha256":"d73bb04bb88c55a49fd45a0e8c97edb03e2b9241b33749197bc3d7ae147fdbc6","sha512":"3d38bf8012aae500dc6fd8677d5a4e5ebd2cec8249bffee8987d2ea3fa6ced2f479ee2d2f13e3d18972dc597349b6448ca3b266e954aa05437bdb42ecb421a60","ssdeep":"192:SF8VcrcYmJBJsVan1oJJpvOHMk0Tw3f5czhGEhN70oz0EhnA3YED8iDehT6S:SF8FLsVanyYH4TARCN7DRW3YEP0","tlshash":"e652610418bddd64c548a12e307e6666f7280a539c76bbd4bf8a4104afce82f797513f","first_seen":"2025-11-22T19:29:25.124381Z","last_seen":"2026-06-14T11:34:58.483566Z","times_seen":102,"resource_available":false,"data":null}},"time_used":480,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":479,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loseimposeherself.com/impr.gif?sid=H4sIAAAAAAAC_1RSz2skRRSu3h08rAdxXTwPgqKgk-7pzuyMewjGNSEYk5iNBPxxqO6qninTU9VWdU_PjJdoQPeYgwf11Pkm2ei6LOsfIMaJlyUg2B404AbEP0FY9ig9OxB9UN97r746vO979dleekZcpPR07S01FFFEZ2ZrdvXFTSGZykx1ZaPq2DX7WnVTyIZ3rdovQfdedVyvZr9UXeTBlpqp245tO7ZTXRCah6o_M2Eh4jstp9aya1695sx66Ov_9ya1YKgF1jsjlyFY8dTf4XsQwRiye-86N1uJil9-o5tGNFEaPXb4jtySKpPonpehthDKw-lrKFMQ8uUFKHk4VQDV2y8VwBcFufDsA_jycDom_N7B40n9CFzCZ08i643BozEEHSNQOxDsVwIEDCurkN1bK0pndPCYpSVbkMrDfyCyglQeXIHs3p2PRL96Q0VpIpQ06Ic5RH8M0R4jTo-RDC2I7BhB8ikE-4XMPFyG7O6vmkhBsHyiXoRjUGMhLY-wkIYW0thCl51WPbvpBQ51G2GLBVdtj3oe477datZtm7aCq0iDTyDYLgK9jVhvY0vsQqdHMJ0chlkwSUGst7fRYzkyTpAZgowSZIIgSwiyXn7AIlM3-S0WmdR3prk-zW4-Ukl7jx6opM0lAdW70CzfF_FHZgdBcnE0DA0bqRKon-Qj6rN8Lz4jT5duWZ-_8Ce2-GmVhc1Z7vvMdz232Whwp8lmGa_7jZDVvbrXghE5hLkwMWIoCrLw2yPEoiDP37sPnx7DRMcIxEXQ1AHNctBOjqE8fa7DO7yT-q_QwKRO3a3Fg6SjJJWDrMM1rwWqC6ZyxEkFycDai87IM6P1jfmjyS7f_WYOPDiZS4Z_Ld698jECnSPWOT4UPxO0o5ujdZWR_XWVGfL9apyIrhjScs83Eprwi7ff5INMabZ03ex--1pQEmV5Z4ObZJlKJmTbkO_mBWNcLygdcPLDktnk_lpqOvOplmm8vPb6wlI31twYoeQYVBTk0tFtBKIgl3_fmfxhd_ERgngbJj4h04BRBH5sIRIEET-_p34O85_eP6_3zE20dQU02YHs5ujpHL0oB412YdJLoyTWJ3P3vyrja_hRZeRHurLvRzr6YuJTQT7446cSfizhCEacVkOX1wPbbl5tOG4z5I7rsSCcbXot1qC263IkphDvD574NwAA__9JPMahdQQAAA==","fqdn":"loseimposeherself.com","domain":"loseimposeherself.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"loseimposeherself.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 08:12:24 GMT","end":"Thu, 19 Mar 2026 08:12:23 GMT"},"fingerprint":{"sha1":"B1:6B:EB:05:E0:5A:FE:EB:0E:C8:A3:8B:EC:61:8D:51:CD:8C:90:5B","sha256":"87:C6:97:CB:C2:A5:11:74:9B:43:AB:AB:6C:80:15:71:6F:DB:98:4D:C1:34:D2:A7:47:B5:D1:64:F6:AD:05:80"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSz2skRRSu3h08rAdxXTwPgqKgk-7pzuyMewjGNSEYk5iNBPxxqO6qninTU9VWdU_PjJdoQPeYgwf11Pkm2ei6LOsfIMaJlyUg2B404AbEP0FY9ig9OxB9UN97r746vO979dleekZcpPR07S01FFFEZ2ZrdvXFTSGZykx1ZaPq2DX7WnVTyIZ3rdovQfdedVyvZr9UXeTBlpqp245tO7ZTXRCah6o_M2Eh4jstp9aya1695sx66Ov_9ya1YKgF1jsjlyFY8dTf4XsQwRiye-86N1uJil9-o5tGNFEaPXb4jtySKpPonpehthDKw-lrKFMQ8uUFKHk4VQDV2y8VwBcFufDsA_jycDom_N7B40n9CFzCZ08i643BozEEHSNQOxDsVwIEDCurkN1bK0pndPCYpSVbkMrDfyCyglQeXIHs3p2PRL96Q0VpIpQ06Ic5RH8M0R4jTo-RDC2I7BhB8ikE-4XMPFyG7O6vmkhBsHyiXoRjUGMhLY-wkIYW0thCl51WPbvpBQ51G2GLBVdtj3oe477datZtm7aCq0iDTyDYLgK9jVhvY0vsQqdHMJ0chlkwSUGst7fRYzkyTpAZgowSZIIgSwiyXn7AIlM3-S0WmdR3prk-zW4-Ukl7jx6opM0lAdW70CzfF_FHZgdBcnE0DA0bqRKon-Qj6rN8Lz4jT5duWZ-_8Ce2-GmVhc1Z7vvMdz232Whwp8lmGa_7jZDVvbrXghE5hLkwMWIoCrLw2yPEoiDP37sPnx7DRMcIxEXQ1AHNctBOjqE8fa7DO7yT-q_QwKRO3a3Fg6SjJJWDrMM1rwWqC6ZyxEkFycDai87IM6P1jfmjyS7f_WYOPDiZS4Z_Ld698jECnSPWOT4UPxO0o5ujdZWR_XWVGfL9apyIrhjScs83Eprwi7ff5INMabZ03ex--1pQEmV5Z4ObZJlKJmTbkO_mBWNcLygdcPLDktnk_lpqOvOplmm8vPb6wlI31twYoeQYVBTk0tFtBKIgl3_fmfxhd_ERgngbJj4h04BRBH5sIRIEET-_p34O85_eP6_3zE20dQU02YHs5ujpHL0oB412YdJLoyTWJ3P3vyrja_hRZeRHurLvRzr6YuJTQT7446cSfizhCEacVkOX1wPbbl5tOG4z5I7rsSCcbXot1qC263IkphDvD574NwAA__9JPMahdQQAAA== HTTP/1.1\r\nHost: loseimposeherself.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl25634524=1; nlecdf85ebbdb343866e18d5de2b6fd24249=[5941311]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:54 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nset-cookie: iprc_l+b9a0dfe34c8114f1d5a734fcb9221aeb=5941311; expires=Wed, 07 Jan 2026 02:52:54 GMT; path=/; secure; SameSite=None\niprc_l:5941311=1; expires=Wed, 07 Jan 2026 02:52:54 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 1\r\nHost: loseimposeherself.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 3a761a0c2168181a9b9be06897e3a2dc\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":140,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"loseimposeherself.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loseimposeherself.com/ren.gif?sid=H4sIAAAAAAAC_4RTz4scRRSumSw5xINoxPMgUVTc2f45O20O4hpXgjEJSSSHGKSqq3qn3J6qtqp7endPxkAMnvbgQb3Y881kN9Eg8Q8whFkRQkBwvDhg9qB_gQjBo_RmYfXkO3zvve_rw3tfv7o2LHaJj4LOzr6jN2Sa0oWw7bRevCgV16Vtnb7Qcp22c7x1UapOcLy1VoMZvOr6Qdt5qfWWiFf1gue4juM6bmtZGpHotYU9FTK7HbntyGkHXtsNA6yZ__a2aMLSJvhglzwNyadP_pFcgownUP07J4RdzXX2ypv9IqW5Nhjw7XfVqtKlQv-gTEwDidre_xraTgn5vAmttvc3gB6M6w3A5JQ0n30Iprb3xwQb3Hg8KUshFBh_AuVgApFOIOkEsb4KyX8mQMxx-gxUf-u0NiVdf6zSWp2SuUd_QZZTMvfwGaj-t0upXGud12mRS60s1pIKcm0CuTJBVkyQbzQgyx3E-ceQ_Cey8OgUVH98xqYaks-OicWO77h0cT6MhJgPosVgvpvw7jyNQtpxXeaHItyzSCYTUNtEYRsoZANF0kCRNdDns1bgdIPYpX4niXi86AQ0CLhgTtT1HIdG8SKK-Aok30Rsrm1lvJevDsa5KcS4ULEdujcfU0G0R27VZBAN3dvF-1nqhR0_CL1g6M6OqVTEPOmGgjHO_MDvdjrC7fKQC491Eu4FXhDduhRGgeu77mVk5spN7i8Kn8XBkGFVbsIU92B7FSxvwOYEA16hFASlJSgpQSkJypygHFQ3eGo9W23x1BbM3c_efvarkc5XhvSGzleEIqBmE4ZXY5l9aK8izg-NNhLLR7oGyvJqRBmvhtkuear-hY1PXvgNq2LW-r9lYGUFaZugtoENOSXLv_yNTE7J83fug9Ed2HQHsTwEWrigZQXaq7ChZs_1RE_0CjZPY1u4nt_O1vOeVlStlz1hRDvWfXBdIcvnkK83hukuOTo6d2Hp3t6BXf51AhE_IPuB2FTITIUP5A8EK-n10TldkvE5XVry3Zksl325QevjO5_TXBz--m2xXmrDT56wm7dej2uhLm9fEDY_RRWXasWSb5Yk58IsaxML8v1Je1Gws4XtLRVGFdmps28sn-xnRlgrtZqAyik58ueniOWUHL371d7DCl_-HXH2EWx2MKfVBCxrIpUEqTjgKatg_9Wzg3por2PFzIHmV6H6FQamwiCtQNNN2OLIKM_Mg9fuf1HHl2Dp3IilZm7MUpN-Vvv0455ZNdytYQdWzlqhx_xOt9sRSYcnPvc9n0ehI6KARp0gCkLkdirfWz_8TwAAAP__1HAXpQoFAAA=","fqdn":"loseimposeherself.com","domain":"loseimposeherself.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"loseimposeherself.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 08:12:24 GMT","end":"Thu, 19 Mar 2026 08:12:23 GMT"},"fingerprint":{"sha1":"B1:6B:EB:05:E0:5A:FE:EB:0E:C8:A3:8B:EC:61:8D:51:CD:8C:90:5B","sha256":"87:C6:97:CB:C2:A5:11:74:9B:43:AB:AB:6C:80:15:71:6F:DB:98:4D:C1:34:D2:A7:47:B5:D1:64:F6:AD:05:80"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_4RTz4scRRSumSw5xINoxPMgUVTc2f45O20O4hpXgjEJSSSHGKSqq3qn3J6qtqp7endPxkAMnvbgQb3Y881kN9Eg8Q8whFkRQkBwvDhg9qB_gQjBo_RmYfXkO3zvve_rw3tfv7o2LHaJj4LOzr6jN2Sa0oWw7bRevCgV16Vtnb7Qcp22c7x1UapOcLy1VoMZvOr6Qdt5qfWWiFf1gue4juM6bmtZGpHotYU9FTK7HbntyGkHXtsNA6yZ__a2aMLSJvhglzwNyadP_pFcgownUP07J4RdzXX2ypv9IqW5Nhjw7XfVqtKlQv-gTEwDidre_xraTgn5vAmttvc3gB6M6w3A5JQ0n30Iprb3xwQb3Hg8KUshFBh_AuVgApFOIOkEsb4KyX8mQMxx-gxUf-u0NiVdf6zSWp2SuUd_QZZTMvfwGaj-t0upXGud12mRS60s1pIKcm0CuTJBVkyQbzQgyx3E-ceQ_Cey8OgUVH98xqYaks-OicWO77h0cT6MhJgPosVgvpvw7jyNQtpxXeaHItyzSCYTUNtEYRsoZANF0kCRNdDns1bgdIPYpX4niXi86AQ0CLhgTtT1HIdG8SKK-Aok30Rsrm1lvJevDsa5KcS4ULEdujcfU0G0R27VZBAN3dvF-1nqhR0_CL1g6M6OqVTEPOmGgjHO_MDvdjrC7fKQC491Eu4FXhDduhRGgeu77mVk5spN7i8Kn8XBkGFVbsIU92B7FSxvwOYEA16hFASlJSgpQSkJypygHFQ3eGo9W23x1BbM3c_efvarkc5XhvSGzleEIqBmE4ZXY5l9aK8izg-NNhLLR7oGyvJqRBmvhtkuear-hY1PXvgNq2LW-r9lYGUFaZugtoENOSXLv_yNTE7J83fug9Ed2HQHsTwEWrigZQXaq7ChZs_1RE_0CjZPY1u4nt_O1vOeVlStlz1hRDvWfXBdIcvnkK83hukuOTo6d2Hp3t6BXf51AhE_IPuB2FTITIUP5A8EK-n10TldkvE5XVry3Zksl325QevjO5_TXBz--m2xXmrDT56wm7dej2uhLm9fEDY_RRWXasWSb5Yk58IsaxML8v1Je1Gws4XtLRVGFdmps28sn-xnRlgrtZqAyik58ueniOWUHL371d7DCl_-HXH2EWx2MKfVBCxrIpUEqTjgKatg_9Wzg3por2PFzIHmV6H6FQamwiCtQNNN2OLIKM_Mg9fuf1HHl2Dp3IilZm7MUpN-Vvv0455ZNdytYQdWzlqhx_xOt9sRSYcnPvc9n0ehI6KARp0gCkLkdirfWz_8TwAAAP__1HAXpQoFAAA= HTTP/1.1\r\nHost: loseimposeherself.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl25634524=1; nlecdf85ebbdb343866e18d5de2b6fd24249=[5941311]; uid_id2=e76301a7-59ee-4974-8fd8-a95a611b35e5:2:1; iprc_l+b9a0dfe34c8114f1d5a734fcb9221aeb=5941311; iprc_l:5941311=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:55 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: loseimposeherself.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 5ca56db040204f80abe9c8d66fbc2ffe\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":169,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"loseimposeherself.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loseimposeherself.com/impr.gif?sid=H4sIAAAAAAAC_4RTzYsc1Rd9PRmyyG_xQyOuG4mi4vRUdVV_lFmIYxwJxiQkkSxikPdV08-pfq98r6prZlbGQAyuZuFC3Vh9ujOTaJD4BxhCjwghINhubDCz8S8QIbiUmhkYXXkX536c4nLvqftuDPNdEiCns_PvmA2VJHSx1fDqL15WWpjC1c9eqvtewztZv6x0OzxZX6vADl71g7DhvVR_S_JVs9j0fM_zPb--rKyMzdriHguV3o38RuQ1wmbDb4VYs__OXT4HR-cgBrvkaSgx_f_v8RUoPoHu3zsl3Wpm0lfe7OcJzYzFQGy_q1e1KTT6h2Fsa4j19sHXMG5KyOdzMHr7YAOYwbjaAExNydyzj8H09sGYYINb-5OyBFKDif-hGEwgkwkUnYCb61DiZwJwgbPnoPtbZ40t6Po-Syt2Suaf_AlVTMn842eg-98uJWqtftEkeaaMdliLS6i1CdTKBGk-QbZRgyp2wLOPocRPZPHJGej--JxLDJSYnZCdduD5tLPQiqRcCKNOuNCNRXeBRi3a9n0WtGRrTyIVT0DdHHJXQ65qyOMa8rSGvpjVQ68bcp8G7TgSvOOFNAyFZF7UbXoejXgHOb8GJTbB7Y1xrrkb-rdT0ctWB2E0zmwut6piGA39u_n7adJstYOw1QyH_uyETiQXcbclGRMsCINuuy39rmgJ2WTtWDTDZhjdudKKQj_w_atb-133eiK1126LoCMDxsMhw6rahM0fwPVKOFGDywgGokQhCQpHUFCCQhEUGUExKG-JxDVduSUSlzP_wDcPfFCOTLYypLdMtiI1AbWbsKIcq_RDdx08OzLaiJ0YmQooy8oRZaIcprvkqeoX1j554Tesyln9vxaDUyWUmwN1NWyoKVn-5S-kakqev_cQjO7AJTvg6gho7oMWJWivxIaePdeTPdnL2QLlLvebQSNdz3pGU71e9KSVDW76EKZEms0jW68Nk11yfHTh0tKDvQO7-ut9SP6IHBi4LZHaEh-oHwhWkpujC6Yg4wumcOS7c2mm-mqDVsd3MaOZPPr123K9MFacPuU277zOK6IK716SLjtDtVB6xZFvlpQQ0i4byyX5_rS7LNn53PWWcqvz9Mz5N5ZP91MrnVNGT0DVlBz741NwNSXH73-197BaL--Cpx_BpYdzOkPA0iNIFEEiD-uUlXD_yNlhPHQ3sWLnQbPr0P0SA1tikJSgySZcfmyUpfbRaw-_qOxLsGR-xBI7P2aJTT6rdPqxgsmeYhXswKlZPQ5kk3tet9P2g24s_SAUPG51w0i0qRcEEpmbqvfWj_4dAAD__82A3qEKBQAA","fqdn":"loseimposeherself.com","domain":"loseimposeherself.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"loseimposeherself.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 08:12:24 GMT","end":"Thu, 19 Mar 2026 08:12:23 GMT"},"fingerprint":{"sha1":"B1:6B:EB:05:E0:5A:FE:EB:0E:C8:A3:8B:EC:61:8D:51:CD:8C:90:5B","sha256":"87:C6:97:CB:C2:A5:11:74:9B:43:AB:AB:6C:80:15:71:6F:DB:98:4D:C1:34:D2:A7:47:B5:D1:64:F6:AD:05:80"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_4RTzYsc1Rd9PRmyyG_xQyOuG4mi4vRUdVV_lFmIYxwJxiQkkSxikPdV08-pfq98r6prZlbGQAyuZuFC3Vh9ujOTaJD4BxhCjwghINhubDCz8S8QIbiUmhkYXXkX536c4nLvqftuDPNdEiCns_PvmA2VJHSx1fDqL15WWpjC1c9eqvtewztZv6x0OzxZX6vADl71g7DhvVR_S_JVs9j0fM_zPb--rKyMzdriHguV3o38RuQ1wmbDb4VYs__OXT4HR-cgBrvkaSgx_f_v8RUoPoHu3zsl3Wpm0lfe7OcJzYzFQGy_q1e1KTT6h2Fsa4j19sHXMG5KyOdzMHr7YAOYwbjaAExNydyzj8H09sGYYINb-5OyBFKDif-hGEwgkwkUnYCb61DiZwJwgbPnoPtbZ40t6Po-Syt2Suaf_AlVTMn842eg-98uJWqtftEkeaaMdliLS6i1CdTKBGk-QbZRgyp2wLOPocRPZPHJGej--JxLDJSYnZCdduD5tLPQiqRcCKNOuNCNRXeBRi3a9n0WtGRrTyIVT0DdHHJXQ65qyOMa8rSGvpjVQ68bcp8G7TgSvOOFNAyFZF7UbXoejXgHOb8GJTbB7Y1xrrkb-rdT0ctWB2E0zmwut6piGA39u_n7adJstYOw1QyH_uyETiQXcbclGRMsCINuuy39rmgJ2WTtWDTDZhjdudKKQj_w_atb-133eiK1126LoCMDxsMhw6rahM0fwPVKOFGDywgGokQhCQpHUFCCQhEUGUExKG-JxDVduSUSlzP_wDcPfFCOTLYypLdMtiI1AbWbsKIcq_RDdx08OzLaiJ0YmQooy8oRZaIcprvkqeoX1j554Tesyln9vxaDUyWUmwN1NWyoKVn-5S-kakqev_cQjO7AJTvg6gho7oMWJWivxIaePdeTPdnL2QLlLvebQSNdz3pGU71e9KSVDW76EKZEms0jW68Nk11yfHTh0tKDvQO7-ut9SP6IHBi4LZHaEh-oHwhWkpujC6Yg4wumcOS7c2mm-mqDVsd3MaOZPPr123K9MFacPuU277zOK6IK716SLjtDtVB6xZFvlpQQ0i4byyX5_rS7LNn53PWWcqvz9Mz5N5ZP91MrnVNGT0DVlBz741NwNSXH73-197BaL--Cpx_BpYdzOkPA0iNIFEEiD-uUlXD_yNlhPHQ3sWLnQbPr0P0SA1tikJSgySZcfmyUpfbRaw-_qOxLsGR-xBI7P2aJTT6rdPqxgsmeYhXswKlZPQ5kk3tet9P2g24s_SAUPG51w0i0qRcEEpmbqvfWj_4dAAD__82A3qEKBQAA HTTP/1.1\r\nHost: loseimposeherself.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl25634524=1; nlecdf85ebbdb343866e18d5de2b6fd24249=[5941311]; uid_id2=e76301a7-59ee-4974-8fd8-a95a611b35e5:2:1; iprc_l+b9a0dfe34c8114f1d5a734fcb9221aeb=5941311; iprc_l:5941311=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:55 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nvary: Origin\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 3\r\nHost: loseimposeherself.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 969b310aaf6d3bb68a7b0ecdb86e0e86\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":348,"timings":{"blocked":238,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"loseimposeherself.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loseimposeherself.com/impr.gif?sid=H4sIAAAAAAAC_4RTz4scRRSu2Qw5xINoxPMgUVTc2e7p7plpcxDXuBKMSUgiOcQg1VXVO-X2VLVV3dO7ezIGYvC0Bw_qxZ5vJruJLhL_AEOYFSEEBMeLA2Yv-QtECB6ldxdWT77D9358zeO9r1_dGOa7xENOZ-ff0-sySehC0HQaL1-WiuvCNs5earhO0znZuCxV2z_ZWK3ADF53Pb_pvNJ4R7AVvdByXMdxHbexJI2I9erCHguZboduM3SafqvpBj5WzX9zm8_B0jnwwS55FpJPn34cX4FkE6j-3VPCrmQ6fe3tfp7QTBsM-Nb7akXpQqF_GMamhlhtHXwNbaeEfDkHrbYONoAejKsNEMkpmXv-ESK1dTAmosGt_UmjBEIh4k-hGEwgkgkknYDp65D8VwIwjrPnoPqbZ7Up6No-Syt2SupP_oIspqT-6Dmo_veLiVxtXNRJnkmtLFbjEnJ1Ark8QZpPkK3XIIsdsOxTSP4LWXhyBqo_PmcTDclnJ0Sn7Tku7cwHoRDzftjx57sx787TMKBt1428QAR7Esl4AmrnkNsacllDHteQpzX0-azhO12fudRrxyFnHcenvs9F5ITdluPQkHWQs2uQfAPM3BjnitmhezvlvWxl4IfjzORisyr64dDdzj9Mk1bQ9vyg5Q_d2QmVCMbjbiCiiEee73XbbeF2ecBFK2rHvOW3_PDOlSD0Xc91r27ud93ridRcu829jvAi5g8jrMgNmPw-bK-E5TXYjGDASxSCoLAEBSUoJEGRERSD8hZPbMuWmzyxeeQe-NaB98qRzpaH9JbOloUioGYDhpdjmX5sr4NlR0brseUjXQGNsnJEI14O013yTPULa5-99AdWxKzxf4vByhLSzoHaGtbllCz99jdSOSUv3n2AiO7AJjtg8gho7oIWJWivxLqavdATPdHLo3nKbO62vGa6lvW0omqt6Akjmkz3wXWJNKsjW6sNk11yfHTh0uL9vQO7-vsOBHtIDgzMlEhNiY_kTwTLyc3RBV2Q8QVdWPLDuTSTfblOq-O7mNFMHP32XbFWaMNPn7Ibd95kFVGF25eEzc5QxaVatuS7Rcm5MEvaMEF-PG0vi-h8bnuLuVF5eub8W0un-6kR1kqtJqBySo79-TmYnJLj977Ze1jBq4_B0k9g08M5rSaI0joSSZCIwzqNSth_5dFhPLQ3sWzqoNl1qH6JgSkxSErQZAM2PzbKUvPwjQdfVfY1oqQ-ihJTH0eJSb6odPq5gkkF9_Zls3LWiD3RYo7T7bRdrxsL1_M5i4OuH_I2dTxPILNT-cHa0X8CAAD__2mDOywKBQAA","fqdn":"loseimposeherself.com","domain":"loseimposeherself.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"loseimposeherself.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 08:12:24 GMT","end":"Thu, 19 Mar 2026 08:12:23 GMT"},"fingerprint":{"sha1":"B1:6B:EB:05:E0:5A:FE:EB:0E:C8:A3:8B:EC:61:8D:51:CD:8C:90:5B","sha256":"87:C6:97:CB:C2:A5:11:74:9B:43:AB:AB:6C:80:15:71:6F:DB:98:4D:C1:34:D2:A7:47:B5:D1:64:F6:AD:05:80"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_4RTz4scRRSu2Qw5xINoxPMgUVTc2e7p7plpcxDXuBKMSUgiOcQg1VXVO-X2VLVV3dO7ezIGYvC0Bw_qxZ5vJruJLhL_AEOYFSEEBMeLA2Yv-QtECB6ldxdWT77D9358zeO9r1_dGOa7xENOZ-ff0-sySehC0HQaL1-WiuvCNs5earhO0znZuCxV2z_ZWK3ADF53Pb_pvNJ4R7AVvdByXMdxHbexJI2I9erCHguZboduM3SafqvpBj5WzX9zm8_B0jnwwS55FpJPn34cX4FkE6j-3VPCrmQ6fe3tfp7QTBsM-Nb7akXpQqF_GMamhlhtHXwNbaeEfDkHrbYONoAejKsNEMkpmXv-ESK1dTAmosGt_UmjBEIh4k-hGEwgkgkknYDp65D8VwIwjrPnoPqbZ7Up6No-Syt2SupP_oIspqT-6Dmo_veLiVxtXNRJnkmtLFbjEnJ1Ark8QZpPkK3XIIsdsOxTSP4LWXhyBqo_PmcTDclnJ0Sn7Tku7cwHoRDzftjx57sx787TMKBt1428QAR7Esl4AmrnkNsacllDHteQpzX0-azhO12fudRrxyFnHcenvs9F5ITdluPQkHWQs2uQfAPM3BjnitmhezvlvWxl4IfjzORisyr64dDdzj9Mk1bQ9vyg5Q_d2QmVCMbjbiCiiEee73XbbeF2ecBFK2rHvOW3_PDOlSD0Xc91r27ud93ridRcu829jvAi5g8jrMgNmPw-bK-E5TXYjGDASxSCoLAEBSUoJEGRERSD8hZPbMuWmzyxeeQe-NaB98qRzpaH9JbOloUioGYDhpdjmX5sr4NlR0brseUjXQGNsnJEI14O013yTPULa5-99AdWxKzxf4vByhLSzoHaGtbllCz99jdSOSUv3n2AiO7AJjtg8gho7oIWJWivxLqavdATPdHLo3nKbO62vGa6lvW0omqt6Akjmkz3wXWJNKsjW6sNk11yfHTh0uL9vQO7-vsOBHtIDgzMlEhNiY_kTwTLyc3RBV2Q8QVdWPLDuTSTfblOq-O7mNFMHP32XbFWaMNPn7Ibd95kFVGF25eEzc5QxaVatuS7Rcm5MEvaMEF-PG0vi-h8bnuLuVF5eub8W0un-6kR1kqtJqBySo79-TmYnJLj977Ze1jBq4_B0k9g08M5rSaI0joSSZCIwzqNSth_5dFhPLQ3sWzqoNl1qH6JgSkxSErQZAM2PzbKUvPwjQdfVfY1oqQ-ihJTH0eJSb6odPq5gkkF9_Zls3LWiD3RYo7T7bRdrxsL1_M5i4OuH_I2dTxPILNT-cHa0X8CAAD__2mDOywKBQAA HTTP/1.1\r\nHost: loseimposeherself.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl25634524=1; nlecdf85ebbdb343866e18d5de2b6fd24249=[5941311]; uid_id2=e76301a7-59ee-4974-8fd8-a95a611b35e5:2:1; iprc_l+b9a0dfe34c8114f1d5a734fcb9221aeb=5941311; iprc_l:5941311=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:55 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 3\r\nHost: loseimposeherself.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 02c10cf52bff9d5243bdb88f4575e3b9\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":351,"timings":{"blocked":252,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"loseimposeherself.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Frobot%2F4%2Fcss%2Fstyle.css\u0026l=7008\u0026fd=529","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:55.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 00:50:13 GMT","end":"Sun, 29 Mar 2026 00:50:12 GMT"},"fingerprint":{"sha1":"B6:89:38:EE:EF:1E:F1:A0:93:51:BB:7A:F2:13:F5:DF:8C:9B:8F:F7","sha256":"74:22:2C:3F:1E:A6:04:C8:AD:7C:D8:B4:13:57:A5:95:EF:83:FA:28:18:BC:F3:BD:38:93:CB:DA:4B:30:3F:8A"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Frobot%2F4%2Fcss%2Fstyle.css\u0026l=7008\u0026fd=529 HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: uid_id2=e3fc7a49-8f00-4fdd-bc32-5e9b197e91d0:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl25634495=1; slece02ee106ac9f7f9a067c81c19bdc3c60=[6293536]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:55 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":90,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/impr.gif?sid=H4sIAAAAAAAC_1RSMWwcRRSdjSOERIGAiA60QoBAwufZ2_XdbVJEmGAUEZKQBLmAgtmZ2buJ93aWmd3bu6sMFhCJxnSU63d2LCCKQpcGiM40yBISl-qKuEFUlEgRJTr7JMMv_n9fb4r337wvtotD4qNg06vv6aFKEra0XKPua2sqFbq07uUbrkdr9Jy7ptJGcM7tz5rpnfX8oEZfd9-RfF0v1alHqUc9d1UZGev-0hELld0JvVpIa0G95i0H6Jv_77ZwYJkD0Tskz0KJydN_xB9C8THS7r0L0q7nOnvj7W6RsFwb9MTeB-l6qssU3RMYGwdxujd_DW0nhHxzCjrdm18A3duZXYBITcip5x8hSvfmMhH1do-VRglkikg8hbI3hkzGUGwMrjehxO8E4AKXryDt3r6sTckGxyybsRNy-vHfUOWEnH50Bmn37kqi-u51nRS50qlFP66g-mOo9hhZsY986ECV--D5Z1DiN7L0-BLS7s4Vm2goMX1Z-jFvsiBcbMWULgaxEIsR9-uLyzKMvLApQ0_QI4tUPAazCyisg0I5KGIHReagK6ZuQFsB95jfiEPBmzRgQSBkRMNWnVIW8iYK_imU2AI3G8jMBtbVFkzxALZTwQoHNifoiQqlJCgtQckISkVQ5gRlr9oVia3b6rZIbBF581mfT78a6by9zXZ13pYpATNbMKLaUdkndhM8XxgNYytGetZYlFcjFolqOzskz8zsdL589Wesy6kraV1KjzYYD-NmHDLaaPKWx70wEtznDQqrKih7Csw6GKoJWX34DzI1Ia_c-xUR24dN9sHVAljxAlhZgXUqDNPpSx3ZkZ0iWmTcFl7dr2WDvKNTlg7KjjSyxnUXQlfI8tPIB852ckieG127sfLg6LM_ftKF5Afn795__6_PX7wPbipkpsJN9QtBO7k1uqZLsnNNl5b8cCXLVVcN2SwI13OWy4Xv3pWDUhtx8YLd-vZNPiNm8M4NafNLLBUqbVvy_YoSQppVbbgkP160azK6WtjOSmHSIrt09a3Vi93MSGuVTsdgakKcsz-Bqwk5c_PPo5A3vjoHnm3AZic6rSaIMgeJIkjkAZkXWFTB_mePTvC2vYW2ccDyTaTdCj1ToZdUYMkWbLEwyjNzcP6hf1SIEmcUJcbZiRKTfH3sk1VTN_ZlnVPaajY8vxVLzw8Ej5dbQSgajPq-RG4n6qPBE_8GAAD___vuyPiHBAAA","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:55.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 00:50:13 GMT","end":"Sun, 29 Mar 2026 00:50:12 GMT"},"fingerprint":{"sha1":"B6:89:38:EE:EF:1E:F1:A0:93:51:BB:7A:F2:13:F5:DF:8C:9B:8F:F7","sha256":"74:22:2C:3F:1E:A6:04:C8:AD:7C:D8:B4:13:57:A5:95:EF:83:FA:28:18:BC:F3:BD:38:93:CB:DA:4B:30:3F:8A"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSMWwcRRSdjSOERIGAiA60QoBAwufZ2_XdbVJEmGAUEZKQBLmAgtmZ2buJ93aWmd3bu6sMFhCJxnSU63d2LCCKQpcGiM40yBISl-qKuEFUlEgRJTr7JMMv_n9fb4r337wvtotD4qNg06vv6aFKEra0XKPua2sqFbq07uUbrkdr9Jy7ptJGcM7tz5rpnfX8oEZfd9-RfF0v1alHqUc9d1UZGev-0hELld0JvVpIa0G95i0H6Jv_77ZwYJkD0Tskz0KJydN_xB9C8THS7r0L0q7nOnvj7W6RsFwb9MTeB-l6qssU3RMYGwdxujd_DW0nhHxzCjrdm18A3duZXYBITcip5x8hSvfmMhH1do-VRglkikg8hbI3hkzGUGwMrjehxO8E4AKXryDt3r6sTckGxyybsRNy-vHfUOWEnH50Bmn37kqi-u51nRS50qlFP66g-mOo9hhZsY986ECV--D5Z1DiN7L0-BLS7s4Vm2goMX1Z-jFvsiBcbMWULgaxEIsR9-uLyzKMvLApQ0_QI4tUPAazCyisg0I5KGIHReagK6ZuQFsB95jfiEPBmzRgQSBkRMNWnVIW8iYK_imU2AI3G8jMBtbVFkzxALZTwQoHNifoiQqlJCgtQckISkVQ5gRlr9oVia3b6rZIbBF581mfT78a6by9zXZ13pYpATNbMKLaUdkndhM8XxgNYytGetZYlFcjFolqOzskz8zsdL589Wesy6kraV1KjzYYD-NmHDLaaPKWx70wEtznDQqrKih7Csw6GKoJWX34DzI1Ia_c-xUR24dN9sHVAljxAlhZgXUqDNPpSx3ZkZ0iWmTcFl7dr2WDvKNTlg7KjjSyxnUXQlfI8tPIB852ckieG127sfLg6LM_ftKF5Afn795__6_PX7wPbipkpsJN9QtBO7k1uqZLsnNNl5b8cCXLVVcN2SwI13OWy4Xv3pWDUhtx8YLd-vZNPiNm8M4NafNLLBUqbVvy_YoSQppVbbgkP160azK6WtjOSmHSIrt09a3Vi93MSGuVTsdgakKcsz-Bqwk5c_PPo5A3vjoHnm3AZic6rSaIMgeJIkjkAZkXWFTB_mePTvC2vYW2ccDyTaTdCj1ToZdUYMkWbLEwyjNzcP6hf1SIEmcUJcbZiRKTfH3sk1VTN_ZlnVPaajY8vxVLzw8Ej5dbQSgajPq-RG4n6qPBE_8GAAD___vuyPiHBAAA HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: uid_id2=e3fc7a49-8f00-4fdd-bc32-5e9b197e91d0:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl25634495=1; slece02ee106ac9f7f9a067c81c19bdc3c60=[6293536]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:56 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nset-cookie: iprc_l+933d93c29093831b9202c6ea73a977b7=6293536; expires=Wed, 07 Jan 2026 02:52:56 GMT; path=/; secure; SameSite=None\niprc_l:6293536=1; expires=Wed, 07 Jan 2026 02:52:56 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 3\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 6f29047072ca3bbd02104d53264560d1\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/1e/e3/36/1ee3363d3f6736b5616821dca2afa5c7.js","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:53.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 00:50:13 GMT","end":"Sun, 29 Mar 2026 00:50:12 GMT"},"fingerprint":{"sha1":"B6:89:38:EE:EF:1E:F1:A0:93:51:BB:7A:F2:13:F5:DF:8C:9B:8F:F7","sha256":"74:22:2C:3F:1E:A6:04:C8:AD:7C:D8:B4:13:57:A5:95:EF:83:FA:28:18:BC:F3:BD:38:93:CB:DA:4B:30:3F:8A"}}},"request":{"raw":"GET /1e/e3/36/1ee3363d3f6736b5616821dca2afa5c7.js HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:54 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3403\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: c7dabf530250567d61df21145f174133\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6454,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6454), with no line terminators","md5":"81c010ddfde2faeaf1c598844287df5a","sha1":"cd0fb06af4d1e8878a8c2c8d0311892ef13ff47b","sha256":"44442357bcab05b20364ed17aae2a3ae173b906529612b0e2f7d2217a76e51ab","sha512":"0acadda1dc3bba9f6178ba54356f2aed3dba23fbaf3b53b683fc5dd78eeff47a63ec7815ffbdb1e07041b274646eaa0a71ada2500f181775833f40761fc7cac8","ssdeep":"96:A9+XCx+8Ixmzn2ySej3zqIDNcxE6204l4sNm+E/0NK4Amfnqkk7lDAP2CwU6:A6Cg/S2yPXXWxW04fNPw6K4Amf4DAPA","tlshash":"13d1859c3e80b0a057b26077b97fa019b3696c50657fd80cd012b1a03e7562ad9bbba5","first_seen":"2025-12-01T12:09:20.892186Z","last_seen":"2026-01-29T12:50:40.978548Z","times_seen":4063,"resource_available":true,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":13,"connect":106,"send":0,"wait":114,"receive":0,"ssl":220},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"35.156.32.205","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:53.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"traffinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Fri, 18 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"11:9F:BE:35:27:7B:7B:85:C9:B3:FF:0E:CA:F6:0D:13:B0:A9:A0:BB","sha256":"81:A4:38:32:0D:BC:66:C8:7B:6D:08:BC:93:91:76:73:A2:BD:D0:53:3C:BF:2F:FD:B8:87:00:C6:EC:3B:6C:77"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hehehub-acsu123.pythonanywhere.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 02:52:54 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://hehehub-acsu123.pythonanywhere.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=c3a8916b-fa75-48b2-8c85-71b4057dde5d:3:1; expires=Fri, 04 Jan 2036 02:52:54 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"c189d91df1676c4bec2f2792e756fe73","sha1":"6c6743180a1f7b863b82696eeff8494b396b05f0","sha256":"ee6e95b167093a9099956aa06e33c20fbf14d3f7ebbb8579587b09fdad401b35","sha512":"dd1068f1b26a00762a1c76141df0e963a724ade3f410436d01042c60b6391d2ff6a54312bc3ba5836b8f1a0a0acd6ed0dc525093dcc2a546fd6234b4e26225e1","ssdeep":"","tlshash":"8b90047140c0104d704705114d041544fc3407c7dc54d10d705cd53fdc4315d35c1df1","first_seen":"2026-01-06T02:53:22.828929Z","last_seen":"2026-01-06T02:53:22.828929Z","times_seen":1,"resource_available":false,"data":null}},"time_used":842,"timings":{"blocked":437,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":384},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loseimposeherself.com/impr.gif?sid=H4sIAAAAAAAC_1RSzWskRRytzg57WA-iK54HQVHRSfd0z2TGPSzGNRKMScxGAn4cqruqZ8r0VLVV3dMzc4oGdPGUgwf1YudNsvFjkfUPUOPEy7Ig2F4MuEHwLxBh8SidDMT9Qf0-6tXhvferD3fTE-Iipcerr6mRiCI626jZ1ac3hGQqM9Xl9apj1-wr1Q0hm96V6qBMuv-C43o1-5nqKzzYVLN127Ftx3aqC0LzUA1mT1GI-FbbqbXtmlevOQ0PA_3gbFILhlpg_RPyKAQrHv4rfAsimED2bl_jZjNR8XMv99KIJkqjzw7ekJtSZRK98zbUFkJ5MH0NZQpCPp2BkgdTBVD9vVIBfFGQmcfvwZcHU5rw-_tnTP0IXMJnDyHrT8CjCQSdIFDbEOxXAgQMyyuQvZvLSmd0eIbSEi1I5f4_EFlBKvceg-x9Ox-JQfW6itJEKGkwCHOIwQSiM0GcHiEZWRDZEYLkAwj2C5m9vwTZ21sxkYJg-al6EU5AjYW0PMJCGlpIYws9dlz17JYXONRthm0WzNke9TzGfbvdqts2bQdzSIP3IdgOAr2FWG9hU-xAp4cw3RyGWTBJQazXt9BnOTJOkBmCjBJkgiBLCLJ-vs8iUzf5TRaZ1HemtT6tbj5WSWeX7qukwyUB1TvQLN8T8XtmG0FyYTwKDRurMlE_ycfUZ_lufEIeKd2yPnrqD2zy4yoLWw3u-8x3PbfVbHKnxRqM1_1myOpe3WvDiBzCzJwaMRIFWfjtX8SiIE_evgOfHsFERwjEBdDUAc1y0G6OkTx-osu7vJv6z9PApE7drcXDpKsklcOsyzWvBaoHpnLESQXJ0NqNTsjl8dr6_OHpLt_5_RA8uEumgUDniHWOd8XPBJ3oxnhNZWRvTWWGfLcSJ6InRrTc8_WEJvzi16_yYaY0W7xmdr56MSiBsr21zk2yRCUTsmPIN_OCMa4XlA44-X7RbHB_NTXd-VTLNF5afWlhsRdrboxQcgIqCnLp748RiIJc_uGL0z_cePZPBPEWTHzO0ygCP64gEgQRP7-nfg7zv9k_73fNDXR0BTTZhuzl6Osc_SgHjXZg0kvjJNZ3r975rIzP4UeVsR_pyp4f6eiTgrz55dXSrJ_K9OOZbUYcV0OX1wPbbs01HbcVcsf1WBA2Wl6bNantuhyJKcTbw4v_BQAA__-3pCgcdQQAAA==","fqdn":"loseimposeherself.com","domain":"loseimposeherself.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"loseimposeherself.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 08:12:24 GMT","end":"Thu, 19 Mar 2026 08:12:23 GMT"},"fingerprint":{"sha1":"B1:6B:EB:05:E0:5A:FE:EB:0E:C8:A3:8B:EC:61:8D:51:CD:8C:90:5B","sha256":"87:C6:97:CB:C2:A5:11:74:9B:43:AB:AB:6C:80:15:71:6F:DB:98:4D:C1:34:D2:A7:47:B5:D1:64:F6:AD:05:80"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSzWskRRytzg57WA-iK54HQVHRSfd0z2TGPSzGNRKMScxGAn4cqruqZ8r0VLVV3dMzc4oGdPGUgwf1YudNsvFjkfUPUOPEy7Ig2F4MuEHwLxBh8SidDMT9Qf0-6tXhvferD3fTE-Iipcerr6mRiCI626jZ1ac3hGQqM9Xl9apj1-wr1Q0hm96V6qBMuv-C43o1-5nqKzzYVLN127Ftx3aqC0LzUA1mT1GI-FbbqbXtmlevOQ0PA_3gbFILhlpg_RPyKAQrHv4rfAsimED2bl_jZjNR8XMv99KIJkqjzw7ekJtSZRK98zbUFkJ5MH0NZQpCPp2BkgdTBVD9vVIBfFGQmcfvwZcHU5rw-_tnTP0IXMJnDyHrT8CjCQSdIFDbEOxXAgQMyyuQvZvLSmd0eIbSEi1I5f4_EFlBKvceg-x9Ox-JQfW6itJEKGkwCHOIwQSiM0GcHiEZWRDZEYLkAwj2C5m9vwTZ21sxkYJg-al6EU5AjYW0PMJCGlpIYws9dlz17JYXONRthm0WzNke9TzGfbvdqts2bQdzSIP3IdgOAr2FWG9hU-xAp4cw3RyGWTBJQazXt9BnOTJOkBmCjBJkgiBLCLJ-vs8iUzf5TRaZ1HemtT6tbj5WSWeX7qukwyUB1TvQLN8T8XtmG0FyYTwKDRurMlE_ycfUZ_lufEIeKd2yPnrqD2zy4yoLWw3u-8x3PbfVbHKnxRqM1_1myOpe3WvDiBzCzJwaMRIFWfjtX8SiIE_evgOfHsFERwjEBdDUAc1y0G6OkTx-osu7vJv6z9PApE7drcXDpKsklcOsyzWvBaoHpnLESQXJ0NqNTsjl8dr6_OHpLt_5_RA8uEumgUDniHWOd8XPBJ3oxnhNZWRvTWWGfLcSJ6InRrTc8_WEJvzi16_yYaY0W7xmdr56MSiBsr21zk2yRCUTsmPIN_OCMa4XlA44-X7RbHB_NTXd-VTLNF5afWlhsRdrboxQcgIqCnLp748RiIJc_uGL0z_cePZPBPEWTHzO0ygCP64gEgQRP7-nfg7zv9k_73fNDXR0BTTZhuzl6Osc_SgHjXZg0kvjJNZ3r975rIzP4UeVsR_pyp4f6eiTgrz55dXSrJ_K9OOZbUYcV0OX1wPbbs01HbcVcsf1WBA2Wl6bNantuhyJKcTbw4v_BQAA__-3pCgcdQQAAA== HTTP/1.1\r\nHost: loseimposeherself.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl25634524=1; nlecdf85ebbdb343866e18d5de2b6fd24249=[5941311]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:54 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nvary: Origin\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: loseimposeherself.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: c0719600d368c73e16b62b84c0eee39d\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":379,"timings":{"blocked":282,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"loseimposeherself.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loseimposeherself.com/ren.gif?sid=H4sIAAAAAAAC_4RTzYscxRuumSw55Hf4oRHPg0RRcWf7c3baHMQ1rgRjEpJIDjFIVVf1Trk9VW1V9_TunoyBGDztwYN6seeZyW6iQeLRgxJmcwkBxRHEAbMX_wIRgkfpzcLqyffwfjxPH97n6beuDYtd4qOgs7Nv6Q2ZpnQhbDut5y9KxXVpW6cvtFyn7RxvXZSqExxvrdXJDF52_aDtvNB6Q8SresFzXMdxHbe1LI1I9NrCHguZ3Y7cduS0A6_thgHWzL9nWzRhaRN8sEuehOTT__-eXIKMJ1D9OyeEXc119tLr_SKluTYY8O231arSpUL_oE1MA4na3v8a2k4J-bQJrbb3FUAPxrUCMDklzacfgqnt_TXBBjceb8pSCAXG_4dyMIFIJ5B0glhfheQ_ESDmOH0Gqr91WpuSrj9mac1OydyjPyHLKZl7-BRU_-ulVK61zuu0yKVWFmtJBbk2gVyZICsmyDcakOUO4vxDSP4DWXh0Cqo_PmNTDclnx8Rix3dcujgfRkLMB9FiMN9NeHeeRiHtuC7zQxHuWSSTCahtorANFLKBImmgyBro81krcLpB7FK_k0Q8XnQCGgRcMCfqeo5Do3gRRXwFkm8iNte2Mt7LVwfj3BRiXKjYDt2bj6Eg2gO3ajCIhu7t4t0s9cKOH4ReMHRnx1QqYp50Q8EYZ37gdzsd4XZ5yIXHOgn3Ai-Ibl0Ko8D1XfcyMnPlJvcXhc_iYMiwKjdhiruwvQqWN2BzggGvUAqC0hKUlKCUBGVOUA6qGzy1nq22eGoL5u5Xb7_61UjnK0N6Q-crQhFQswnDq7HM3rdXEeeHRhuJ5SNdJ8ryakQZr4bZLnmi_oWNj577Dati1vovMbCygrRNUNvAhpyS5Z__Qian5Nk798HoDmy6g1geAi1c0LIC7VXYULNneqInegWbp7EtXM9vZ-t5Tyuq1sueMKId6z64rpDlc8jXG8N0lxwdnbuwdHfvwC7_-i1E_IDsB2JTITMV3pP3CFbS66NzuiTjc7q05JszWS77coPWx3c-p7k4_OWbYr3Uhp88YTdvvRrXRN3eviBsfooqLtWKJV8tSc6FWdYmFuS7k_aiYGcL21sqjCqyU2dfWz7Zz4ywVmo1AZVTcuSPjxHLKTn6_Rd7Dyt8cYY4-wA2O9jTagKWNZFKglQc4JRVsP-Y2UE_tNexYuZA86tQ_QoDU2GQVqDpJmxxZJRn5sEr9z-r43OwdG7EUjM3ZqlJP6l92tkzq073puTyLz_Cylkr9Jjf6XY7IunwxOe-5_ModEQU0KgTREGI3E7lO-uH_w4AAP__vCuc6AoFAAA=","fqdn":"loseimposeherself.com","domain":"loseimposeherself.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"loseimposeherself.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 08:12:24 GMT","end":"Thu, 19 Mar 2026 08:12:23 GMT"},"fingerprint":{"sha1":"B1:6B:EB:05:E0:5A:FE:EB:0E:C8:A3:8B:EC:61:8D:51:CD:8C:90:5B","sha256":"87:C6:97:CB:C2:A5:11:74:9B:43:AB:AB:6C:80:15:71:6F:DB:98:4D:C1:34:D2:A7:47:B5:D1:64:F6:AD:05:80"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_4RTzYscxRuumSw55Hf4oRHPg0RRcWf7c3baHMQ1rgRjEpJIDjFIVVf1Trk9VW1V9_TunoyBGDztwYN6seeZyW6iQeLRgxJmcwkBxRHEAbMX_wIRgkfpzcLqyffwfjxPH97n6beuDYtd4qOgs7Nv6Q2ZpnQhbDut5y9KxXVpW6cvtFyn7RxvXZSqExxvrdXJDF52_aDtvNB6Q8SresFzXMdxHbe1LI1I9NrCHguZ3Y7cduS0A6_thgHWzL9nWzRhaRN8sEuehOTT__-eXIKMJ1D9OyeEXc119tLr_SKluTYY8O231arSpUL_oE1MA4na3v8a2k4J-bQJrbb3FUAPxrUCMDklzacfgqnt_TXBBjceb8pSCAXG_4dyMIFIJ5B0glhfheQ_ESDmOH0Gqr91WpuSrj9mac1OydyjPyHLKZl7-BRU_-ulVK61zuu0yKVWFmtJBbk2gVyZICsmyDcakOUO4vxDSP4DWXh0Cqo_PmNTDclnx8Rix3dcujgfRkLMB9FiMN9NeHeeRiHtuC7zQxHuWSSTCahtorANFLKBImmgyBro81krcLpB7FK_k0Q8XnQCGgRcMCfqeo5Do3gRRXwFkm8iNte2Mt7LVwfj3BRiXKjYDt2bj6Eg2gO3ajCIhu7t4t0s9cKOH4ReMHRnx1QqYp50Q8EYZ37gdzsd4XZ5yIXHOgn3Ai-Ibl0Ko8D1XfcyMnPlJvcXhc_iYMiwKjdhiruwvQqWN2BzggGvUAqC0hKUlKCUBGVOUA6qGzy1nq22eGoL5u5Xb7_61UjnK0N6Q-crQhFQswnDq7HM3rdXEeeHRhuJ5SNdJ8ryakQZr4bZLnmi_oWNj577Dati1vovMbCygrRNUNvAhpyS5Z__Qian5Nk798HoDmy6g1geAi1c0LIC7VXYULNneqInegWbp7EtXM9vZ-t5Tyuq1sueMKId6z64rpDlc8jXG8N0lxwdnbuwdHfvwC7_-i1E_IDsB2JTITMV3pP3CFbS66NzuiTjc7q05JszWS77coPWx3c-p7k4_OWbYr3Uhp88YTdvvRrXRN3eviBsfooqLtWKJV8tSc6FWdYmFuS7k_aiYGcL21sqjCqyU2dfWz7Zz4ywVmo1AZVTcuSPjxHLKTn6_Rd7Dyt8cYY4-wA2O9jTagKWNZFKglQc4JRVsP-Y2UE_tNexYuZA86tQ_QoDU2GQVqDpJmxxZJRn5sEr9z-r43OwdG7EUjM3ZqlJP6l92tkzq073puTyLz_Cylkr9Jjf6XY7IunwxOe-5_ModEQU0KgTREGI3E7lO-uH_w4AAP__vCuc6AoFAAA= HTTP/1.1\r\nHost: loseimposeherself.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl25634524=1; nlecdf85ebbdb343866e18d5de2b6fd24249=[5941311]; uid_id2=e76301a7-59ee-4974-8fd8-a95a611b35e5:2:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:54 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: loseimposeherself.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 5b54b31722f9f1bb46a309a5fa5c26de\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":297,"timings":{"blocked":200,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"loseimposeherself.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/5c/a6/f9/5ca6f9517dd500f87e3a4b75cd9c0009/1756661718.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:33:02 GMT","end":"Thu, 05 Feb 2026 02:33:01 GMT"},"fingerprint":{"sha1":"FF:BB:C7:F6:31:A3:EE:08:8E:72:C4:2F:A2:C8:78:1B:3C:22:C4:57","sha256":"93:BE:65:88:B5:AC:E6:69:91:EE:F6:7E:27:3F:D6:9F:59:B1:AB:46:F7:49:0D:E8:F2:1C:9E:A9:BE:F9:B6:95"}}},"request":{"raw":"GET /cti/5c/a6/f9/5ca6f9517dd500f87e3a4b75cd9c0009/1756661718.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 02:52:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 76594\r\nserver: nginx/1.21.6\r\nlast-modified: Sun, 31 Aug 2025 17:35:18 GMT\r\netag: \"68b487d6-12b32\"\r\nexpires: Thu, 08 Jan 2026 02:52:54 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":76594,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.3 (Macintosh), datetime=2025:08:30 14:55:59], progressive, precision 8, 320x240, components 3","md5":"69be0ae352649c5c4534bade7a52fcda","sha1":"52c5b614ab2213cd48b483e4336ed81b6c5c40c4","sha256":"637a6132b53002fd82f88455665944757438b103df6e9cac8eb21c9402faecb3","sha512":"2d324c37c48798431de06ce5d34f37b9ca477e02b793c743e8203abc5b2976912ca45ae8a22e55def5eae164752e24df805b327a8cae636debbc4122ed2cfbbd","ssdeep":"1536:Ye0NCH4JwffwHpxlCaw0pQYi64OAEseKD:YesIffwHs3/6VAEsn","tlshash":"1e73f130179b4d23d4d2f57849e9cbd26390f7b93f83a7427aac250173f03a26ca9196","first_seen":"2025-09-02T17:23:30.749389Z","last_seen":"2026-05-25T10:53:19.667549Z","times_seen":1397,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/f9/ad/1e/f9ad1e8c84bbfd29025a219de7a6e2e4/1756661889.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:33:02 GMT","end":"Thu, 05 Feb 2026 02:33:01 GMT"},"fingerprint":{"sha1":"FF:BB:C7:F6:31:A3:EE:08:8E:72:C4:2F:A2:C8:78:1B:3C:22:C4:57","sha256":"93:BE:65:88:B5:AC:E6:69:91:EE:F6:7E:27:3F:D6:9F:59:B1:AB:46:F7:49:0D:E8:F2:1C:9E:A9:BE:F9:B6:95"}}},"request":{"raw":"GET /cti/f9/ad/1e/f9ad1e8c84bbfd29025a219de7a6e2e4/1756661889.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 02:52:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 72616\r\nserver: nginx/1.21.6\r\nlast-modified: Sun, 31 Aug 2025 17:38:09 GMT\r\netag: \"68b48881-11ba8\"\r\nexpires: Thu, 08 Jan 2026 02:52:54 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":72616,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.3 (Macintosh), datetime=2025:08:30 15:17:17], progressive, precision 8, 320x240, components 3","md5":"dc08b03725a02eb4bcce51a4c8bc3523","sha1":"833cebbe8351d267c41889bcae2a7060b73b2c47","sha256":"a6c47a6cd72ed353ef5b8b14eb91639b5a085c266b40021527d71874e77b7e3e","sha512":"ec649f021b9ccfd939c655659521cb3cee79713d91430c67933d5ad7e93c5f8fc9e9f50d323c4278bed3fa16a574d53ba0c55c44fe82da3344eb1f8771a74c5e","ssdeep":"1536:MAji72b6OQTAji72b6O5t6kf0k0RO6inwyxPkOdxGIw2:ri72bti72bN6kb0Q6inweckpw2","tlshash":"b663f139f3d2ef22e7f863784c51c6a3f102af4897932790bc2c65691b712a24c6d249","first_seen":"2025-09-02T19:18:23.955875Z","last_seen":"2026-05-25T10:53:19.655424Z","times_seen":1380,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:55.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://hehehub-acsu123.pythonanywhere.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 19:22:36 GMT\r\nexpires: Wed, 30 Dec 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 545420\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-07-17T10:40:30.93082Z","times_seen":930239,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":70,"dns":1,"connect":7,"send":0,"wait":8,"receive":10,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loseimposeherself.com/impr.gif?sid=H4sIAAAAAAAC_1RST2skxRuuzg572N_hh654HgRFRSfd0z2TGfewGNdIMCYxGwn451DdVT1TpqeqreqenplTNKCLpxw8qBc7zyQb_yyyfgA1TrwsC4LtxYAbED-BCItH6dmB6Av1vO9bTx3e53nr_f30jLhI6en6K2okoojON2p29cktIZnKTHV1s-rYNftKdUvIpnelOihB959zXK9mP1V9iQfbar5uO7bt2E51SWgeqsH8lIWIb7WdWtuuefWa0_Aw0P_tTWrBUAusf0YehmDF__8I34AIJpC929e42U5U_MyLvTSiidLos6PX5LZUmUTvvAy1hVAezV5DmYKQj-eg5NFMAVT_oFQAXxRk7tF78OXRbEz4_cMHk_oRuITP_oesPwGPJhB0gkDtQrCfCRAwrK5B9m6uKp3R4QOWlmxBKvf_gsgKUrn3CGTv68VIDKrXVZQmQkmDQZhDDCYQnQni9ATJyILIThAk70Gwn8j8_RXI3sGaiRQEy6fqRTgBNRbS8ggLaWghjS302GnVs1te4FC3GbZZsGB71PMY9-12q27btB0sIA3ehWB7CPQOYr2DbbEHnR7DdHMYZsEkBbFe3UGf5cg4QWYIMkqQCYIsIcj6-SGLTN3kN1lkUt-Z5fosu_lYJZ19eqiSDpcEVO9Bs_xAxO-YXQTJhfEoNGysSqB-ko-pz_L9-Iw8VLplffDEb9jmp1UWthrc95nvem6r2eROizUYr_vNkNW9uteGETmEmZsaMRIFWfrlb8SiII_fvgOfnsBEJwjEBdDUAc1y0G6OkTx9rMu7vJv6z9LApE7drcXDpKsklcOsyzWvBaoHpnLESQXJ0NqPzsjl8cbm4vF0l2_9-gN4cJfMAoHOEescb4sfCTrRjfGGysjBhsoM-WYtTkRPjGi55-sJTfjFL1_mw0xptnzN7H3xfFASZXlrk5tkhUomZMeQrxYFY1wvKR1w8u2y2eL-emq6i6mWabyy_sLSci_W3Bih5ARUFOTSnx8iEAW5_N1n0z_cePp3BPEOTHw-p1EEfjyHSBBE_Pye-jnMv3r_vN43N9DRFdBkF7KXo69z9KMcNNqDSS-Nk1jfvXrnkzI-hR9Vxn6kKwd-pKOPCvL651enZpXwfQnHMOK0Grq8Hth2a6HpuK2QO67HgrDR8tqsSW3X5UhMId4cXvwnAAD__2GWiIp1BAAA","fqdn":"loseimposeherself.com","domain":"loseimposeherself.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"loseimposeherself.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 08:12:24 GMT","end":"Thu, 19 Mar 2026 08:12:23 GMT"},"fingerprint":{"sha1":"B1:6B:EB:05:E0:5A:FE:EB:0E:C8:A3:8B:EC:61:8D:51:CD:8C:90:5B","sha256":"87:C6:97:CB:C2:A5:11:74:9B:43:AB:AB:6C:80:15:71:6F:DB:98:4D:C1:34:D2:A7:47:B5:D1:64:F6:AD:05:80"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RST2skxRuuzg572N_hh654HgRFRSfd0z2TGfewGNdIMCYxGwn451DdVT1TpqeqreqenplTNKCLpxw8qBc7zyQb_yyyfgA1TrwsC4LtxYAbED-BCItH6dmB6Av1vO9bTx3e53nr_f30jLhI6en6K2okoojON2p29cktIZnKTHV1s-rYNftKdUvIpnelOihB959zXK9mP1V9iQfbar5uO7bt2E51SWgeqsH8lIWIb7WdWtuuefWa0_Aw0P_tTWrBUAusf0YehmDF__8I34AIJpC929e42U5U_MyLvTSiidLos6PX5LZUmUTvvAy1hVAezV5DmYKQj-eg5NFMAVT_oFQAXxRk7tF78OXRbEz4_cMHk_oRuITP_oesPwGPJhB0gkDtQrCfCRAwrK5B9m6uKp3R4QOWlmxBKvf_gsgKUrn3CGTv68VIDKrXVZQmQkmDQZhDDCYQnQni9ATJyILIThAk70Gwn8j8_RXI3sGaiRQEy6fqRTgBNRbS8ggLaWghjS302GnVs1te4FC3GbZZsGB71PMY9-12q27btB0sIA3ehWB7CPQOYr2DbbEHnR7DdHMYZsEkBbFe3UGf5cg4QWYIMkqQCYIsIcj6-SGLTN3kN1lkUt-Z5fosu_lYJZ19eqiSDpcEVO9Bs_xAxO-YXQTJhfEoNGysSqB-ko-pz_L9-Iw8VLplffDEb9jmp1UWthrc95nvem6r2eROizUYr_vNkNW9uteGETmEmZsaMRIFWfrlb8SiII_fvgOfnsBEJwjEBdDUAc1y0G6OkTx9rMu7vJv6z9LApE7drcXDpKsklcOsyzWvBaoHpnLESQXJ0NqPzsjl8cbm4vF0l2_9-gN4cJfMAoHOEescb4sfCTrRjfGGysjBhsoM-WYtTkRPjGi55-sJTfjFL1_mw0xptnzN7H3xfFASZXlrk5tkhUomZMeQrxYFY1wvKR1w8u2y2eL-emq6i6mWabyy_sLSci_W3Bih5ARUFOTSnx8iEAW5_N1n0z_cePp3BPEOTHw-p1EEfjyHSBBE_Pye-jnMv3r_vN43N9DRFdBkF7KXo69z9KMcNNqDSS-Nk1jfvXrnkzI-hR9Vxn6kKwd-pKOPCvL651enZpXwfQnHMOK0Grq8Hth2a6HpuK2QO67HgrDR8tqsSW3X5UhMId4cXvwnAAD__2GWiIp1BAAA HTTP/1.1\r\nHost: loseimposeherself.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl25634524=1; nlecdf85ebbdb343866e18d5de2b6fd24249=[5941311]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:54 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: loseimposeherself.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: f17b6eb9474e8bdafd10b2b6c7340517\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":187,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"loseimposeherself.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loseimposeherself.com/ren.gif?sid=H4sIAAAAAAAC_4RTz4scRRSu2Sw5xINoxPMgUVTc2f45O20O4hpXgjEJSSSHGKSqq3qn3J6qtqp7endPxkAMnvbgQb3Y881kN9Eg8ehBCbO5hIDiCOKA2Uv-AhGCR-ndhdWT7_C9H1_zeN_rV9cGxQ7xUdDp2Xf0ukxTOh-2nOaLF6XiurTN0xeartNyjjcvStUOjjdXazD9V10_aDkvNd8S8Yqe9xzXcVzHbS5JIxK9Or_LQma3I7cVOa3Aa7lhgFXz39wWM7B0Bry_Q56G5JMnHyWXIOMxVO_OCWFXcp298mavSGmuDfp86121onSp0DsIE9NAorb2v4a2E0I-n4FWW_sKoPujWgGYnJCZZx-Cqa39McH6N_YmZSmEAuNPoOyPIdIxJB0j1lch-S8EiDlOn4HqbZ7WpqRreyyt2QmZffwXZDkhsw-fgep9u5jK1eZ5nRa51MpiNakgV8eQy2NkxRj5egOy3EacfwzJfyLzj09B9UZnbKoh-fSYWGj7jksX5sJIiLkgWgjmOgnvzNEopG3XZX4owt0VyWQMamdQ2AYK2UCRNFBkDfT4tBk4nSB2qd9OIh4vOAENAi6YE3U8x6FRvIAivgLJNxCba6NCxXbg3sx4N1_pB9EoN4XYrItBNHBvF-9nqRe2_SD0goE7PaZSEfOkEwrGOPMDv9NuC7fDQy481k64F3hBdOtSGAWu77qXN_e67vZEZq7c5P6C8FkcDBhW5AZMcRe2W8HyBmxO0OcVSkFQWoKSEpSSoMwJyn51g6fWs9UmT23B3H3v7Xu_Gup8eUBv6HxZKAJqNmB4NZLZh_Yq4vzQcD2xfKhroCyvhpTxapDtkKfqX9j45IU_sCKmzf8TBisrSDsDahtYlxOy9OvfyOSEPH_nPhjdhk23EctDoIULWlag3QrravpcV3RFt2BzNLaF6_mtbC3vakXVWtkVRrRi3QPXFbJ8FvlaY5DukKPDcxcW7-4e2OXftyHiB2TfEJsKmanwgbxHsJxeH57TJRmd06Ul353JctmT67Q-vvM5zcXhr98Wa6U2_OQJu3Hr9bgm6vD2BWHzU1RxqZYt-WZRci7MkjaxID-ctBcFO1vY7mJhVJGdOvvG0sleZoS1UqsxqJyQI39-ilhOyNEfv9p9WOHLjxBnH8FmB3NaTcCyBlJJkIqDOmUV7L9ydhAP7HUsm1nQ_CpUr0LfVOinFWi6AVscGeaZefDa_S9q-xIsnR2y1MyOWGrSz3b3VMP3NdybkMu__Qwrp83QY36702mLpM0Tn_uez6PQEVFAo3YQBSFyO5HvrR3-JwAA__8T48bECgUAAA==","fqdn":"loseimposeherself.com","domain":"loseimposeherself.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"loseimposeherself.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 08:12:24 GMT","end":"Thu, 19 Mar 2026 08:12:23 GMT"},"fingerprint":{"sha1":"B1:6B:EB:05:E0:5A:FE:EB:0E:C8:A3:8B:EC:61:8D:51:CD:8C:90:5B","sha256":"87:C6:97:CB:C2:A5:11:74:9B:43:AB:AB:6C:80:15:71:6F:DB:98:4D:C1:34:D2:A7:47:B5:D1:64:F6:AD:05:80"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_4RTz4scRRSu2Sw5xINoxPMgUVTc2f45O20O4hpXgjEJSSSHGKSqq3qn3J6qtqp7endPxkAMnvbgQb3Y881kN9Eg8ehBCbO5hIDiCOKA2Uv-AhGCR-ndhdWT7_C9H1_zeN_rV9cGxQ7xUdDp2Xf0ukxTOh-2nOaLF6XiurTN0xeartNyjjcvStUOjjdXazD9V10_aDkvNd8S8Yqe9xzXcVzHbS5JIxK9Or_LQma3I7cVOa3Aa7lhgFXz39wWM7B0Bry_Q56G5JMnHyWXIOMxVO_OCWFXcp298mavSGmuDfp86121onSp0DsIE9NAorb2v4a2E0I-n4FWW_sKoPujWgGYnJCZZx-Cqa39McH6N_YmZSmEAuNPoOyPIdIxJB0j1lch-S8EiDlOn4HqbZ7WpqRreyyt2QmZffwXZDkhsw-fgep9u5jK1eZ5nRa51MpiNakgV8eQy2NkxRj5egOy3EacfwzJfyLzj09B9UZnbKoh-fSYWGj7jksX5sJIiLkgWgjmOgnvzNEopG3XZX4owt0VyWQMamdQ2AYK2UCRNFBkDfT4tBk4nSB2qd9OIh4vOAENAi6YE3U8x6FRvIAivgLJNxCba6NCxXbg3sx4N1_pB9EoN4XYrItBNHBvF-9nqRe2_SD0goE7PaZSEfOkEwrGOPMDv9NuC7fDQy481k64F3hBdOtSGAWu77qXN_e67vZEZq7c5P6C8FkcDBhW5AZMcRe2W8HyBmxO0OcVSkFQWoKSEpSSoMwJyn51g6fWs9UmT23B3H3v7Xu_Gup8eUBv6HxZKAJqNmB4NZLZh_Yq4vzQcD2xfKhroCyvhpTxapDtkKfqX9j45IU_sCKmzf8TBisrSDsDahtYlxOy9OvfyOSEPH_nPhjdhk23EctDoIULWlag3QrravpcV3RFt2BzNLaF6_mtbC3vakXVWtkVRrRi3QPXFbJ8FvlaY5DukKPDcxcW7-4e2OXftyHiB2TfEJsKmanwgbxHsJxeH57TJRmd06Ul353JctmT67Q-vvM5zcXhr98Wa6U2_OQJu3Hr9bgm6vD2BWHzU1RxqZYt-WZRci7MkjaxID-ctBcFO1vY7mJhVJGdOvvG0sleZoS1UqsxqJyQI39-ilhOyNEfv9p9WOHLjxBnH8FmB3NaTcCyBlJJkIqDOmUV7L9ydhAP7HUsm1nQ_CpUr0LfVOinFWi6AVscGeaZefDa_S9q-xIsnR2y1MyOWGrSz3b3VMP3NdybkMu__Qwrp83QY36702mLpM0Tn_uez6PQEVFAo3YQBSFyO5HvrR3-JwAA__8T48bECgUAAA== HTTP/1.1\r\nHost: loseimposeherself.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl25634524=1; nlecdf85ebbdb343866e18d5de2b6fd24249=[5941311]; uid_id2=e76301a7-59ee-4974-8fd8-a95a611b35e5:2:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:54 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nvary: Origin\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: loseimposeherself.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 42f244780400da726c1bda246c4df7ca\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":294,"timings":{"blocked":200,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"loseimposeherself.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loseimposeherself.com/impr.gif?sid=H4sIAAAAAAAC_4RTQYscRRSumSw5xINoxPMgUVTc2e7p7plpcxDXuBKMSUgiOcQg1VXVO-X2VLVV3dO7ezIGYvC0Bw_qxZ5vJruJBok_wBBmRQgBwfHigNmD_gIRgkfpzcDqyXf43nvf14f3vn51bZjvEQ85nZ19R2_KJKFLQdNpvHhRKq4L2zh9oeE6Ted446JUbf94Y70CM3jV9fym81LjLcHW9FLLcR3HddzGijQi1utL-ypkejt0m6HT9FtNN_Cxbv7b27wOS-vggz3yNCSfPvlHfAmSTaD6d04Iu5bp9JU3-3lCM20w4DvvqjWlC4X-QRmbGmK1M_8a2k4J-bwOrXbmG0APxtUGiOSU1J99iEjtzMdENLjxeNIogVCI-BMoBhOIZAJJJ2D6KiT_mQCM4_QZqP72aW0KuvFYpZU6JQuP_oIspmTh4TNQ_W-XE7neOK-TPJNaWazHJeT6BHJ1gjSfINusQRa7YNnHkPwnsvToFFR_fMYmGpLPjolO23Nc2lkMQiEW_bDjL3Zj3l2kYUDbrht5gQj2LZLxBNTWkdsacllDHteQpzX0-azhO12fudRrxyFnHcenvs9F5ITdluPQkHWQsyuQfAvMXNtOeS9bG4wzk4txrpgdujcfU364T25XpB8O3dv5-2nSCtqeH7T8oTs7phLBeNwNRBTxyPO9brst3C4PuGhF7Zi3_JYf3roUhL7rue5lpObKTe51hBcxfxhhTW7B5PdgeyUsr8FmBANeohAEhSUoKEEhCYqMoBiUN3hiW7bc5onNI3eeW_PslSOdrQ7pDZ2tCkVAzRYML8cy_dBeBcsOjTZjy0e6Ahpl5YhGvByme-Sp6hfWPnnhN6yJWeP_loGVJaStg9oaNuWUrPzyN1I5Jc_fuY-I7sImu2DyEGjughYlaK_Eppo91xM90cujRcps7ra8ZrqR9bSiaqPoCSOaTPfBdYk0W0C2URsme-To6NyF5Xv7B3b51wkEe0DmAWZKpKbEB_IHgtXk-uicLsj4nC4s-e5Mmsm-3KTV8Z3PaCYOf_222Ci04SdP2K1br7NKqMrbF4TNTlHFpVq15JtlybkwK9owQb4_aS-K6Gxue8u5UXl66uwbKyf7qRHWSq0moHJKjvz5KZickqN3v9p_WMHLv4OlH8GmB3NaTRCldSSSIBEHPI1K2H_10UE9tNexahZAs6tQ_RIDU2KQlKDJFmx-ZJSl5sFr97-o4ktEycIoSszCOEpM8lnl04_7ZlVwt4JdWDlrxJ5oMcfpdtqu142F6_mcxUHXD3mbOp4nkNmpfG_j8D8BAAD__ygYh3sKBQAA","fqdn":"loseimposeherself.com","domain":"loseimposeherself.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"loseimposeherself.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 08:12:24 GMT","end":"Thu, 19 Mar 2026 08:12:23 GMT"},"fingerprint":{"sha1":"B1:6B:EB:05:E0:5A:FE:EB:0E:C8:A3:8B:EC:61:8D:51:CD:8C:90:5B","sha256":"87:C6:97:CB:C2:A5:11:74:9B:43:AB:AB:6C:80:15:71:6F:DB:98:4D:C1:34:D2:A7:47:B5:D1:64:F6:AD:05:80"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_4RTQYscRRSumSw5xINoxPMgUVTc2e7p7plpcxDXuBKMSUgiOcQg1VXVO-X2VLVV3dO7ezIGYvC0Bw_qxZ5vJruJBok_wBBmRQgBwfHigNmD_gIRgkfpzcDqyXf43nvf14f3vn51bZjvEQ85nZ19R2_KJKFLQdNpvHhRKq4L2zh9oeE6Ted446JUbf94Y70CM3jV9fym81LjLcHW9FLLcR3HddzGijQi1utL-ypkejt0m6HT9FtNN_Cxbv7b27wOS-vggz3yNCSfPvlHfAmSTaD6d04Iu5bp9JU3-3lCM20w4DvvqjWlC4X-QRmbGmK1M_8a2k4J-bwOrXbmG0APxtUGiOSU1J99iEjtzMdENLjxeNIogVCI-BMoBhOIZAJJJ2D6KiT_mQCM4_QZqP72aW0KuvFYpZU6JQuP_oIspmTh4TNQ_W-XE7neOK-TPJNaWazHJeT6BHJ1gjSfINusQRa7YNnHkPwnsvToFFR_fMYmGpLPjolO23Nc2lkMQiEW_bDjL3Zj3l2kYUDbrht5gQj2LZLxBNTWkdsacllDHteQpzX0-azhO12fudRrxyFnHcenvs9F5ITdluPQkHWQsyuQfAvMXNtOeS9bG4wzk4txrpgdujcfU364T25XpB8O3dv5-2nSCtqeH7T8oTs7phLBeNwNRBTxyPO9brst3C4PuGhF7Zi3_JYf3roUhL7rue5lpObKTe51hBcxfxhhTW7B5PdgeyUsr8FmBANeohAEhSUoKEEhCYqMoBiUN3hiW7bc5onNI3eeW_PslSOdrQ7pDZ2tCkVAzRYML8cy_dBeBcsOjTZjy0e6Ahpl5YhGvByme-Sp6hfWPnnhN6yJWeP_loGVJaStg9oaNuWUrPzyN1I5Jc_fuY-I7sImu2DyEGjughYlaK_Eppo91xM90cujRcps7ra8ZrqR9bSiaqPoCSOaTPfBdYk0W0C2URsme-To6NyF5Xv7B3b51wkEe0DmAWZKpKbEB_IHgtXk-uicLsj4nC4s-e5Mmsm-3KTV8Z3PaCYOf_222Ci04SdP2K1br7NKqMrbF4TNTlHFpVq15JtlybkwK9owQb4_aS-K6Gxue8u5UXl66uwbKyf7qRHWSq0moHJKjvz5KZickqN3v9p_WMHLv4OlH8GmB3NaTRCldSSSIBEHPI1K2H_10UE9tNexahZAs6tQ_RIDU2KQlKDJFmx-ZJSl5sFr97-o4ktEycIoSszCOEpM8lnl04_7ZlVwt4JdWDlrxJ5oMcfpdtqu142F6_mcxUHXD3mbOp4nkNmpfG_j8D8BAAD__ygYh3sKBQAA HTTP/1.1\r\nHost: loseimposeherself.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl25634524=1; nlecdf85ebbdb343866e18d5de2b6fd24249=[5941311]; uid_id2=e76301a7-59ee-4974-8fd8-a95a611b35e5:2:1; iprc_l+b9a0dfe34c8114f1d5a734fcb9221aeb=5941311; iprc_l:5941311=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:55 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: close\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 3\r\nHost: loseimposeherself.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: a5231849ce19ae96f08c8a31c19573d2\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":320,"timings":{"blocked":223,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"loseimposeherself.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/pixel/sbs?c=1","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:55.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 00:50:13 GMT","end":"Sun, 29 Mar 2026 00:50:12 GMT"},"fingerprint":{"sha1":"B6:89:38:EE:EF:1E:F1:A0:93:51:BB:7A:F2:13:F5:DF:8C:9B:8F:F7","sha256":"74:22:2C:3F:1E:A6:04:C8:AD:7C:D8:B4:13:57:A5:95:EF:83:FA:28:18:BC:F3:BD:38:93:CB:DA:4B:30:3F:8A"}}},"request":{"raw":"GET /pixel/sbs?c=1 HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: uid_id2=e3fc7a49-8f00-4fdd-bc32-5e9b197e91d0:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl25634495=1; slece02ee106ac9f7f9a067c81c19bdc3c60=[6293536]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:56 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:53.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 23:36:36 GMT","end":"Sat, 28 Mar 2026 23:36:35 GMT"},"fingerprint":{"sha1":"0E:EE:1D:ED:80:5A:CA:0C:1E:93:89:94:78:B7:34:91:38:D4:89:51","sha256":"CF:77:1B:FB:04:67:32:02:DF:D9:38:24:27:3D:A5:98:54:0C:4D:BA:C5:1B:62:FD:C1:E1:17:57:6F:63:B3:BF"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:53 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 700dbc3543e127745de9b9152b04c80b\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-07-17T10:55:41.509086Z","times_seen":22071,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":1,"connect":17,"send":0,"wait":23,"receive":18,"ssl":46},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"politicalpiano.com/e0/2e/e1/e02ee106ac9f7f9a067c81c19bdc3c60.js","fqdn":"politicalpiano.com","domain":"politicalpiano.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:53.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"politicalpiano.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 23:19:37 GMT","end":"Wed, 01 Apr 2026 23:19:36 GMT"},"fingerprint":{"sha1":"A5:83:F5:2D:A1:5D:A3:A2:E5:BF:36:5E:89:DB:C5:4E:F4:70:D4:A9","sha256":"3D:27:07:82:E4:0C:5D:C1:8E:B4:50:A2:BD:65:45:AD:B2:FF:E2:03:00:A7:61:A0:60:54:A0:BE:12:BA:5A:DF"}}},"request":{"raw":"GET /e0/2e/e1/e02ee106ac9f7f9a067c81c19bdc3c60.js HTTP/1.1\r\nHost: politicalpiano.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:53 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 30198\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 4\r\nHost: politicalpiano.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: b39a570c2a288e0c1944da708ff40406\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78819,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ba47ddefd6c0d18dc7119ecdc1103189","sha1":"8474161e8f1b9eb028c9207794dedb71363af966","sha256":"1968236f5abde3c27ee604882f10526558716bcb3707f306283af2fdbf5939f4","sha512":"f89ab6e4cf680812b4efc0bab5f519e5301211d7a424b5d193b2f5945c1f6ff2455e490e095e449a3c53898714bdd5a392f9e1b2debd376003e43e32eb5941b8","ssdeep":"1536:L9yUBg8XFOUGXAVTesz3WArOwlNyBv77NzxpQ2jFFwfnjI1:L3B91cipUhxpJwLI1","tlshash":"6b7309487f42b15b5352a073627fd047f0256f1261ecd498d123e6a86f6c33af63ab98","first_seen":"2026-01-06T02:53:22.835445Z","last_seen":"2026-01-12T23:18:36.564796Z","times_seen":2,"resource_available":true,"data":null}},"time_used":844,"timings":{"blocked":322,"dns":45,"connect":93,"send":0,"wait":102,"receive":92,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"politicalpiano.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"politicalpiano.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"politicalpiano.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"politicalpiano.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/98/4a/ea/984aea0590243673d8100824b542b2eb/1756662026.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:33:02 GMT","end":"Thu, 05 Feb 2026 02:33:01 GMT"},"fingerprint":{"sha1":"FF:BB:C7:F6:31:A3:EE:08:8E:72:C4:2F:A2:C8:78:1B:3C:22:C4:57","sha256":"93:BE:65:88:B5:AC:E6:69:91:EE:F6:7E:27:3F:D6:9F:59:B1:AB:46:F7:49:0D:E8:F2:1C:9E:A9:BE:F9:B6:95"}}},"request":{"raw":"GET /cti/98/4a/ea/984aea0590243673d8100824b542b2eb/1756662026.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 02:52:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 54266\r\nserver: nginx/1.21.6\r\nlast-modified: Sun, 31 Aug 2025 17:40:26 GMT\r\netag: \"68b4890a-d3fa\"\r\nexpires: Thu, 08 Jan 2026 02:52:54 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54266,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.3 (Macintosh), datetime=2025:08:30 15:29:30], progressive, precision 8, 320x240, components 3","md5":"61ed57bf223ebc615f8a1df5d6df4368","sha1":"efb61d1f59f6dcdb45ff2205a02ce0cd6d8577b1","sha256":"301c9c6b429a2b8c70326d0acd72bf1d503fdde4c081f8da9a71f60f90b27442","sha512":"d3323768584bf852bc18a08ebcff711b49c72b3797e973c18aee182e17d44da76937f8db37f17cbc6601e758d31e79c551fe825b153809d253d4effc00025d06","ssdeep":"768:XnaGnvGicnaGnvVhsSYymkxswdA5HURFmI2PI+KIaSMUeFBhMkIh:XbSbVVzmwdA5HURFL2PzMUeFbMkQ","tlshash":"dc33d128f3a2ef22f4d4fab55195e7a372259b2483d71b517c6d70593736090cc8e2c6","first_seen":"2025-09-02T17:23:30.730781Z","last_seen":"2026-05-24T00:35:06.918554Z","times_seen":1381,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":146,"dns":88,"connect":23,"send":0,"wait":55,"receive":30,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loseimposeherself.com/ren.gif?sid=H4sIAAAAAAAC_4RTz4scRRSu2Sw5xINoxPMgUVTc2f45O20O4hpXgjEJSSSHGKSqq3qn3J6qtqp7endPxkAMnvbgQb3Y881kN9Eg8aoYwsRLCAiOFwfMXvwLRAgepXcHVk--w_d-fEXxvlevrg2KXeKjoNOz7-hNmaZ0MWw5zRcvSsV1aZunLzRdp-Ucb16Uqh0cb67XYPqvun7Qcl5qviXiNb3oOa7juI7bXJFGJHp9cY-FzG5HbityWoHXcsMA6-a_uS3mYOkceH-XPA3JJ0_-kVyCjMdQvTsnhF3LdfbKm70ipbk26POdd9Wa0qVC7yBMTAOJ2pmdhrYTQj6fg1Y7MwXQ_VGtAExOyNyzj8DUzqxNsP6N_U5ZCqHA-BMo-2OIdAxJx4j1VUj-CwFijtNnoHrbp7Up6cY-S2t2QuYf_wVZTsj8o2eget8up3K9eV6nRS61slhPKsj1MeTqGFkxRr7ZgCzvI84_huQ_k8XHp6B6ozM21ZB8ekwstX3HpUsLYSTEQhAtBQudhHcWaBTStusyPxTh3ohkMga1cyhsA4VsoEgaKLIGenzaDJxOELvUbycRj5ecgAYBF8yJOp7j0CheQhFfgeRbiM217ULFNogG7u3i_Sz1wrYfhF4wcKfHVCpinnRCwRhnfuB32m3hdnjIhcfaCfcCL4huXQqjwPVd9_J2xrv5Wn-Um0KM6jsH7s39UhDtFZGZKze5vyR8FgcDhjW5BVPcg-1WsLwBmxP0eYVSEJSWoKQEpSQoc4KyX93gqfVstc1TWzB35r2Z96uhzlcH9IbOV4UioGYLhlcjmX1oryLODw03E8uHugbK8mpIGa8G2S55qn7Cxicv_I41MW3-n1pYWUHaOVDbwKackJVf_0YmJ-T5Ow_A6H3Y9D5ieQi0cEHLCrRbYVNNn-uKrugWbIHGtnA9v5Vt5F2tqNoou8KIVqx74LpCls8j32gM0l1ydHjuwvK9vQW7_NtdiPghmRliUyEzFT6QPxGspteH53RJRud0acl3Z7Jc9uQmrZfvfE5zcfjrt8VGqQ0_ecJu3Xo9rok6vH1B2PwUVVyqVUu-WZacC7OiTSzIjyftRcHOFra7XBhVZKfOvrFyspcZYa3UagwqJ-TIn58ilhNy9O5Xex8rfHkXcfYRbHbQp9UELGsglQSpOKhTVsH-K2cH8cBex6qZB82vQvUq9E2FflqBpluwxZFhnpmHrz34orYvwdL5IUvN_IilJv1sb041fF_DuIYfYOW0GXrMb3c6bZG0eeJz3_N5FDoiCmjUDqIgRG4n8r2Nw_8EAAD__1k4npsKBQAA","fqdn":"loseimposeherself.com","domain":"loseimposeherself.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"loseimposeherself.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 08:12:24 GMT","end":"Thu, 19 Mar 2026 08:12:23 GMT"},"fingerprint":{"sha1":"B1:6B:EB:05:E0:5A:FE:EB:0E:C8:A3:8B:EC:61:8D:51:CD:8C:90:5B","sha256":"87:C6:97:CB:C2:A5:11:74:9B:43:AB:AB:6C:80:15:71:6F:DB:98:4D:C1:34:D2:A7:47:B5:D1:64:F6:AD:05:80"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_4RTz4scRRSu2Sw5xINoxPMgUVTc2f45O20O4hpXgjEJSSSHGKSqq3qn3J6qtqp7endPxkAMnvbgQb3Y881kN9Eg8aoYwsRLCAiOFwfMXvwLRAgepXcHVk--w_d-fEXxvlevrg2KXeKjoNOz7-hNmaZ0MWw5zRcvSsV1aZunLzRdp-Ucb16Uqh0cb67XYPqvun7Qcl5qviXiNb3oOa7juI7bXJFGJHp9cY-FzG5HbityWoHXcsMA6-a_uS3mYOkceH-XPA3JJ0_-kVyCjMdQvTsnhF3LdfbKm70ipbk26POdd9Wa0qVC7yBMTAOJ2pmdhrYTQj6fg1Y7MwXQ_VGtAExOyNyzj8DUzqxNsP6N_U5ZCqHA-BMo-2OIdAxJx4j1VUj-CwFijtNnoHrbp7Up6cY-S2t2QuYf_wVZTsj8o2eget8up3K9eV6nRS61slhPKsj1MeTqGFkxRr7ZgCzvI84_huQ_k8XHp6B6ozM21ZB8ekwstX3HpUsLYSTEQhAtBQudhHcWaBTStusyPxTh3ohkMga1cyhsA4VsoEgaKLIGenzaDJxOELvUbycRj5ecgAYBF8yJOp7j0CheQhFfgeRbiM217ULFNogG7u3i_Sz1wrYfhF4wcKfHVCpinnRCwRhnfuB32m3hdnjIhcfaCfcCL4huXQqjwPVd9_J2xrv5Wn-Um0KM6jsH7s39UhDtFZGZKze5vyR8FgcDhjW5BVPcg-1WsLwBmxP0eYVSEJSWoKQEpSQoc4KyX93gqfVstc1TWzB35r2Z96uhzlcH9IbOV4UioGYLhlcjmX1oryLODw03E8uHugbK8mpIGa8G2S55qn7Cxicv_I41MW3-n1pYWUHaOVDbwKackJVf_0YmJ-T5Ow_A6H3Y9D5ieQi0cEHLCrRbYVNNn-uKrugWbIHGtnA9v5Vt5F2tqNoou8KIVqx74LpCls8j32gM0l1ydHjuwvK9vQW7_NtdiPghmRliUyEzFT6QPxGspteH53RJRud0acl3Z7Jc9uQmrZfvfE5zcfjrt8VGqQ0_ecJu3Xo9rok6vH1B2PwUVVyqVUu-WZacC7OiTSzIjyftRcHOFra7XBhVZKfOvrFyspcZYa3UagwqJ-TIn58ilhNy9O5Xex8rfHkXcfYRbHbQp9UELGsglQSpOKhTVsH-K2cH8cBex6qZB82vQvUq9E2FflqBpluwxZFhnpmHrz34orYvwdL5IUvN_IilJv1sb041fF_DuIYfYOW0GXrMb3c6bZG0eeJz3_N5FDoiCmjUDqIgRG4n8r2Nw_8EAAD__1k4npsKBQAA HTTP/1.1\r\nHost: loseimposeherself.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl25634524=1; nlecdf85ebbdb343866e18d5de2b6fd24249=[5941311]; uid_id2=e76301a7-59ee-4974-8fd8-a95a611b35e5:2:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:54 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: loseimposeherself.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: a746c961c9f5099ead73a8335dddacba\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":343,"timings":{"blocked":246,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"loseimposeherself.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loseimposeherself.com/impr.gif?sid=H4sIAAAAAAAC_4RTz4scxRev2Sw55Hv4ohHPg0SJ4M52T3fPTJuDuMaVYExCEskhBqlfvVNuT1Vb1T29uydjIAZPe_CgXuz5zGQ30SDxD1DiJB5CQHEEccDsxT9ARAgeZTYLqyff4fPeq0_xeJ9Xr64Oih0SoKDTM2-YDZWmdDFqePWjF5QWpnT1U-frvtfwjtUvKN0Kj9XXZmD7L_pB2PCer78m-apZbHq-5_meX19WViZmbXGXhcpuxX4j9hphs-FHIdbsv3NXzMHROYj-DnkSSkz-_1tyEYqPoXu3j0u3mpvshVd7RUpzY9EX22_qVW1Kjd5-mNgaEr29dxvGTQj5eA5Gb-8pgOmPZgrA1ITMPf0QTG_vtQnWv_64U5ZCajDxP5T9MWQ6hqJjcHMFSvxIAC5w6jR0b-uUsSVdf8zSGTsh84_-hConZP7hU9C9L5dStVY_Z9IiV0Y7rCUV1NoYamWMrBgj36hBlXfB8_ehxPdk8dFJ6N7otEsNlJgeke1W4Pm0vRDFUi6EcTtc6CSis0DjiLZ8nwWRjHZHpJIxqJtD4WooVA1FUkOR1dAT03rodULu06CVxIK3vZCGoZDMiztNz6Mxb6Pgl6HEJri9eiMT3Xy1H8aj3BZyq9DchfHAv1W8naXNqBWEUTMc-NMjOpVcJJ1IMiZYEAadVkv6HREJ2WStRDTDZhjfvBjFoR_4_qWtx1V3a45mNQc-Mnv5hgjaMmA8HDCsqk3Y4g5ct4ITNbicoC8qlJKgdAQlJSgVQZkTlP3qukhd01VbInUF8_d8c88H1dDkKwN63eQrUhNQuwkrqpHK3nVXwPMDw43EiaGZAWV5NaRMVINshzwxe8LaB8_9ilU5rf-XPjhVQbk5UFfDhpqQ5Z_-QqYm5Nnb98HoXbj0Lrg6AFr4oGUF2q2woafPdGVXdgu2QLkr_GbQyNbzrtFUr5ddaWWDmx6EqZDl88jXa4N0hxwenj2_dGd3wS79_AMkf0D2DNxWyGyFd9Q9gpX02vCsKcnorCkd-ep0lque2qCz5TuX01we_Px1uV4aK04cd5s3X-YzYhbeOi9dfpJqofSKI18sKSGkXTaWS_L1CXdBsjOF6y4VVhfZyTOvLJ_oZVY6p4weg6oJOfTHh-BqQg5_89nux4qO_g6evQeX7ffpDAHLakgVQSr3zymr4P6Rs_144K5hxc6D5legexX6tkI_rUDTTbji0DDP7IOX7n8ys0_B0vkhS-38iKU2_Wh3ThNy6ZfvZvDtDO7BqWk9CWSTe16n3fKDTiL9IBQ8iTphLFrUCwKJ3E3UW-sH_w4AAP__4h9zoAoFAAA=","fqdn":"loseimposeherself.com","domain":"loseimposeherself.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"loseimposeherself.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 08:12:24 GMT","end":"Thu, 19 Mar 2026 08:12:23 GMT"},"fingerprint":{"sha1":"B1:6B:EB:05:E0:5A:FE:EB:0E:C8:A3:8B:EC:61:8D:51:CD:8C:90:5B","sha256":"87:C6:97:CB:C2:A5:11:74:9B:43:AB:AB:6C:80:15:71:6F:DB:98:4D:C1:34:D2:A7:47:B5:D1:64:F6:AD:05:80"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_4RTz4scxRev2Sw55Hv4ohHPg0SJ4M52T3fPTJuDuMaVYExCEskhBqlfvVNuT1Vb1T29uydjIAZPe_CgXuz5zGQ30SDxD1DiJB5CQHEEccDsxT9ARAgeZTYLqyff4fPeq0_xeJ9Xr64Oih0SoKDTM2-YDZWmdDFqePWjF5QWpnT1U-frvtfwjtUvKN0Kj9XXZmD7L_pB2PCer78m-apZbHq-5_meX19WViZmbXGXhcpuxX4j9hphs-FHIdbsv3NXzMHROYj-DnkSSkz-_1tyEYqPoXu3j0u3mpvshVd7RUpzY9EX22_qVW1Kjd5-mNgaEr29dxvGTQj5eA5Gb-8pgOmPZgrA1ITMPf0QTG_vtQnWv_64U5ZCajDxP5T9MWQ6hqJjcHMFSvxIAC5w6jR0b-uUsSVdf8zSGTsh84_-hConZP7hU9C9L5dStVY_Z9IiV0Y7rCUV1NoYamWMrBgj36hBlXfB8_ehxPdk8dFJ6N7otEsNlJgeke1W4Pm0vRDFUi6EcTtc6CSis0DjiLZ8nwWRjHZHpJIxqJtD4WooVA1FUkOR1dAT03rodULu06CVxIK3vZCGoZDMiztNz6Mxb6Pgl6HEJri9eiMT3Xy1H8aj3BZyq9DchfHAv1W8naXNqBWEUTMc-NMjOpVcJJ1IMiZYEAadVkv6HREJ2WStRDTDZhjfvBjFoR_4_qWtx1V3a45mNQc-Mnv5hgjaMmA8HDCsqk3Y4g5ct4ITNbicoC8qlJKgdAQlJSgVQZkTlP3qukhd01VbInUF8_d8c88H1dDkKwN63eQrUhNQuwkrqpHK3nVXwPMDw43EiaGZAWV5NaRMVINshzwxe8LaB8_9ilU5rf-XPjhVQbk5UFfDhpqQ5Z_-QqYm5Nnb98HoXbj0Lrg6AFr4oGUF2q2woafPdGVXdgu2QLkr_GbQyNbzrtFUr5ddaWWDmx6EqZDl88jXa4N0hxwenj2_dGd3wS79_AMkf0D2DNxWyGyFd9Q9gpX02vCsKcnorCkd-ep0lque2qCz5TuX01we_Px1uV4aK04cd5s3X-YzYhbeOi9dfpJqofSKI18sKSGkXTaWS_L1CXdBsjOF6y4VVhfZyTOvLJ_oZVY6p4weg6oJOfTHh-BqQg5_89nux4qO_g6evQeX7ffpDAHLakgVQSr3zymr4P6Rs_144K5hxc6D5legexX6tkI_rUDTTbji0DDP7IOX7n8ys0_B0vkhS-38iKU2_Wh3ThNy6ZfvZvDtDO7BqWk9CWSTe16n3fKDTiL9IBQ8iTphLFrUCwKJ3E3UW-sH_w4AAP__4h9zoAoFAAA= HTTP/1.1\r\nHost: loseimposeherself.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl25634524=1; nlecdf85ebbdb343866e18d5de2b6fd24249=[5941311]; uid_id2=e76301a7-59ee-4974-8fd8-a95a611b35e5:2:1; iprc_l+b9a0dfe34c8114f1d5a734fcb9221aeb=5941311; iprc_l:5941311=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:54 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 3\r\nHost: loseimposeherself.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 4ad418805e586b93bdf074a05f1a92e6\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":82,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"loseimposeherself.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loseimposeherself.com/impr.gif?sid=H4sIAAAAAAAC_4RTzYsc1Rd9PWmyyG_xQyOuG4mi4vRUdVV_lFmIYxwJxiQkkSxikPdV08-pfq98r6prZlbGQAyuZuFC3Vh9ujOTaJD4ByixJy5CQLEFscHMRv8BEYJL6ZmB0ZV3cb9Ocbnn1H3XBvkOCZDT6dk3zLpKErrQrHu1Zy8qLUzhaqcv1Hyv7h2vXVS6FR6vrc6c7b_oB2Hde672muQrZqHh-Z7ne35tSVkZm9WFXRQqvR359cirh4263wyxav9du3wOjs5B9HfI41Bi8v_f4ktQfAzdu3NCupXMpC-82ssTmhmLvth6U69oU2j0DtLYVhDrrf2vYdyEkI_nYPTWPgOY_mjGAExNyNyTD8H01v6aYP0be5uyBFKDif-h6I8hkzEUHYObq1DiRwJwgdNnoHubp40t6NoeSmfohFQf_QlVTEj14RPQvS8XE7VaO2-SPFNGO6zGJdTqGGp5jDQfI1uvQBXb4Nn7UOJ7svDoFHRvdMYlBkpMj8l2K_B82p5vRlLOh1E7nO_EojNPoyZt-T4LmrK5K5GKx6BuDrmrIFcV5HEFeVpBT0xrodcJuU-DVhwJ3vZCGoZCMi_qNDyPRryNnF-BEhvg9too19wN_Jup6GYr_TAaZTaXm7NmGA382_nbadJotoKw2QgH_vSYTiQXcacpGRMsCINOqyX9jmgK2WCtWDTCRhjdutSMQj_w_cube1N3ZyK1V26KoC0DxsMBw4ragM3vwnVLOFGBywj6okQhCQpHUFCCQhEUGUHRL2-IxDVcuSkSlzN_Pzb2Y1AOTbY8oDdMtiw1AbUbsKIcqfRddxU8OzRcj50YmpmjLCuHlIlykO6Qx2a_sPLBM79iRU5r_0UMTpVQbg7UVbCuJmTpp7-Qqgl5-s59MLoNl2yDq0OguQ9alKDdEut6-lRXdmU3Z_OUu9xvBPV0LesaTfVa0ZVW1rnpQZgSaVZFtlYZJDvk6PDchcW7uwd2-Zd7kPwB2TdwWyK1Jd5R9wiWk-vDc6Ygo3OmcOSrM2mmemqdzo7vfEYzefjz1-VaYaw4ecJt3HqZz4BZevuCdNkpqoXSy458saiEkHbJWC7J1yfdRcnO5q67mFudp6fOvrJ0spda6ZwyegyqJuTIHx-Cqwk5-s1nuw-r-fzv4Ol7cOnBns4QsLSKRBEk8qBPWQn3j5od5AN3Hcu2Cppdhe6V6NsS_aQETTbg8iPDLLUPXrr_ycw-BUuqQ5bY6oglNvloQi7__MNMrO9m7ts92Zya1uJANrjnddotP-jE0g9CweNmJ4xEi3pBIJG5iXpr7fDfAQAA__8t3lJACgUAAA==","fqdn":"loseimposeherself.com","domain":"loseimposeherself.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"loseimposeherself.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 08:12:24 GMT","end":"Thu, 19 Mar 2026 08:12:23 GMT"},"fingerprint":{"sha1":"B1:6B:EB:05:E0:5A:FE:EB:0E:C8:A3:8B:EC:61:8D:51:CD:8C:90:5B","sha256":"87:C6:97:CB:C2:A5:11:74:9B:43:AB:AB:6C:80:15:71:6F:DB:98:4D:C1:34:D2:A7:47:B5:D1:64:F6:AD:05:80"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_4RTzYsc1Rd9PWmyyG_xQyOuG4mi4vRUdVV_lFmIYxwJxiQkkSxikPdV08-pfq98r6prZlbGQAyuZuFC3Vh9ujOTaJD4ByixJy5CQLEFscHMRv8BEYJL6ZmB0ZV3cb9Ocbnn1H3XBvkOCZDT6dk3zLpKErrQrHu1Zy8qLUzhaqcv1Hyv7h2vXVS6FR6vrc6c7b_oB2Hde672muQrZqHh-Z7ne35tSVkZm9WFXRQqvR359cirh4263wyxav9du3wOjs5B9HfI41Bi8v_f4ktQfAzdu3NCupXMpC-82ssTmhmLvth6U69oU2j0DtLYVhDrrf2vYdyEkI_nYPTWPgOY_mjGAExNyNyTD8H01v6aYP0be5uyBFKDif-h6I8hkzEUHYObq1DiRwJwgdNnoHubp40t6NoeSmfohFQf_QlVTEj14RPQvS8XE7VaO2-SPFNGO6zGJdTqGGp5jDQfI1uvQBXb4Nn7UOJ7svDoFHRvdMYlBkpMj8l2K_B82p5vRlLOh1E7nO_EojNPoyZt-T4LmrK5K5GKx6BuDrmrIFcV5HEFeVpBT0xrodcJuU-DVhwJ3vZCGoZCMi_qNDyPRryNnF-BEhvg9too19wN_Jup6GYr_TAaZTaXm7NmGA382_nbadJotoKw2QgH_vSYTiQXcacpGRMsCINOqyX9jmgK2WCtWDTCRhjdutSMQj_w_cube1N3ZyK1V26KoC0DxsMBw4ragM3vwnVLOFGBywj6okQhCQpHUFCCQhEUGUHRL2-IxDVcuSkSlzN_Pzb2Y1AOTbY8oDdMtiw1AbUbsKIcqfRddxU8OzRcj50YmpmjLCuHlIlykO6Qx2a_sPLBM79iRU5r_0UMTpVQbg7UVbCuJmTpp7-Qqgl5-s59MLoNl2yDq0OguQ9alKDdEut6-lRXdmU3Z_OUu9xvBPV0LesaTfVa0ZVW1rnpQZgSaVZFtlYZJDvk6PDchcW7uwd2-Zd7kPwB2TdwWyK1Jd5R9wiWk-vDc6Ygo3OmcOSrM2mmemqdzo7vfEYzefjz1-VaYaw4ecJt3HqZz4BZevuCdNkpqoXSy458saiEkHbJWC7J1yfdRcnO5q67mFudp6fOvrJ0spda6ZwyegyqJuTIHx-Cqwk5-s1nuw-r-fzv4Ol7cOnBns4QsLSKRBEk8qBPWQn3j5od5AN3Hcu2Cppdhe6V6NsS_aQETTbg8iPDLLUPXrr_ycw-BUuqQ5bY6oglNvloQi7__MNMrO9m7ts92Zya1uJANrjnddotP-jE0g9CweNmJ4xEi3pBIJG5iXpr7fDfAQAA__8t3lJACgUAAA== HTTP/1.1\r\nHost: loseimposeherself.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl25634524=1; nlecdf85ebbdb343866e18d5de2b6fd24249=[5941311]; uid_id2=e76301a7-59ee-4974-8fd8-a95a611b35e5:2:1; iprc_l+b9a0dfe34c8114f1d5a734fcb9221aeb=5941311; iprc_l:5941311=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:54 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nvary: Origin\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: loseimposeherself.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 2885f64952d2e7b0bb7a96cacadc3fed\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":133,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"loseimposeherself.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Frobot%2F4%2Fjs%2Fscript.js\u0026l=10828\u0026fd=491","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:55.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 00:50:13 GMT","end":"Sun, 29 Mar 2026 00:50:12 GMT"},"fingerprint":{"sha1":"B6:89:38:EE:EF:1E:F1:A0:93:51:BB:7A:F2:13:F5:DF:8C:9B:8F:F7","sha256":"74:22:2C:3F:1E:A6:04:C8:AD:7C:D8:B4:13:57:A5:95:EF:83:FA:28:18:BC:F3:BD:38:93:CB:DA:4B:30:3F:8A"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Frobot%2F4%2Fjs%2Fscript.js\u0026l=10828\u0026fd=491 HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: uid_id2=e3fc7a49-8f00-4fdd-bc32-5e9b197e91d0:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl25634495=1; slece02ee106ac9f7f9a067c81c19bdc3c60=[6293536]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:55 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loseimposeherself.com/impr.gif?sid=H4sIAAAAAAAC_1RSzW8bxRuebawe-jv8BEWcLSQQIHB2vWvHpoeKUIIiQhLSoEh8HGZ3Zu0h65llZtdr-xSIBBWnHDgAFzaPk4aPCpU_AAgOl6oSEsuFSDQc-AsQUsURrWsp8Erzfswzh-d53nl_Pz0jLlJ6uv6KGokoovONml19cktIpjJTXd2sOnbNvlLdErLpXakOyqT7zzmuV7Ofqr7Eg201X7cd23Zsp7okNA_VYH6KQsS32k6tbde8es1peBjo_84mtWCoBdY_Iw9DsOL_f4RvQAQTyN7ta9xsJyp-5sVeGtFEafTZ0WtyW6pMonfehtpCKI9mr6FMQcjHF6Dk0UwBVP-gVABfFOTCo_fgy6MZTfj9wwdM_Qhcwmf_Q9afgEcTCDpBoHYh2M8ECBhW1yB7N1eVzujwAUpLtCCV-39BZAWp3HsEsvf1YiQG1esqShOhpMEgzCEGE4jOBHF6gmRkQWQnCJL3INhPZP7-CmTvYM1ECoLlU_UinIAaC2l5hIU0tJDGFnrstOrZLS9wqNsM2yxYsD3qeYz7drtVt23aDhaQBu9CsD0Eegex3sG22INOj2G6OQyzYJKCWK_uoM9yZJwgMwQZJcgEQZYQZP38kEWmbvKbLDKp78xqfVbdfKySzj49VEmHSwKq96BZfiDid8wugmRuPAoNG6syUT_Jx9Rn-X58Rh4q3bI-eOI3bPPTKgtbDe77zHc9t9VscqfFGozX_WbI6l7da8OIHMJcmBoxEgVZ-uVvxKIgj9--A5-ewEQnCMQcaOqAZjloN8dInj7W5V3eTf1naWBSp-7W4mHSVZLKYdblmtcC1QNTOeKkgmRo7Udn5PJ4Y3PxeLrLt379Hjy4S2aBQOeIdY63xY8EnejGeENl5GBDZYZ8sxYnoidGtNzz9YQm_OKXL_NhpjRbvmb2vng-KIGyvbXJTbJCJROyY8hXi4IxrpeUDjj5dtlscX89Nd3FVMs0Xll_YWm5F2tujFByAioKcunPDxGIglz-7rPpH248_TuCeAcmPudpFIEfzyESBBE_v6d-DvOv2T_v980NdHQFNNmF7OXo6xz9KAeN9mDSS-Mk1nev3vmkjE_hR5WxH-nKgR_p6KOCvP751dKsH6aOlekYRpxWQ5fXA9tuLTQdtxVyx_VYEDZaXps1qe26HIkpxJvDi_8EAAD__5omjrN1BAAA","fqdn":"loseimposeherself.com","domain":"loseimposeherself.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"loseimposeherself.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 08:12:24 GMT","end":"Thu, 19 Mar 2026 08:12:23 GMT"},"fingerprint":{"sha1":"B1:6B:EB:05:E0:5A:FE:EB:0E:C8:A3:8B:EC:61:8D:51:CD:8C:90:5B","sha256":"87:C6:97:CB:C2:A5:11:74:9B:43:AB:AB:6C:80:15:71:6F:DB:98:4D:C1:34:D2:A7:47:B5:D1:64:F6:AD:05:80"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSzW8bxRuebawe-jv8BEWcLSQQIHB2vWvHpoeKUIIiQhLSoEh8HGZ3Zu0h65llZtdr-xSIBBWnHDgAFzaPk4aPCpU_AAgOl6oSEsuFSDQc-AsQUsURrWsp8Erzfswzh-d53nl_Pz0jLlJ6uv6KGokoovONml19cktIpjJTXd2sOnbNvlLdErLpXakOyqT7zzmuV7Ofqr7Eg201X7cd23Zsp7okNA_VYH6KQsS32k6tbde8es1peBjo_84mtWCoBdY_Iw9DsOL_f4RvQAQTyN7ta9xsJyp-5sVeGtFEafTZ0WtyW6pMonfehtpCKI9mr6FMQcjHF6Dk0UwBVP-gVABfFOTCo_fgy6MZTfj9wwdM_Qhcwmf_Q9afgEcTCDpBoHYh2M8ECBhW1yB7N1eVzujwAUpLtCCV-39BZAWp3HsEsvf1YiQG1esqShOhpMEgzCEGE4jOBHF6gmRkQWQnCJL3INhPZP7-CmTvYM1ECoLlU_UinIAaC2l5hIU0tJDGFnrstOrZLS9wqNsM2yxYsD3qeYz7drtVt23aDhaQBu9CsD0Eegex3sG22INOj2G6OQyzYJKCWK_uoM9yZJwgMwQZJcgEQZYQZP38kEWmbvKbLDKp78xqfVbdfKySzj49VEmHSwKq96BZfiDid8wugmRuPAoNG6syUT_Jx9Rn-X58Rh4q3bI-eOI3bPPTKgtbDe77zHc9t9VscqfFGozX_WbI6l7da8OIHMJcmBoxEgVZ-uVvxKIgj9--A5-ewEQnCMQcaOqAZjloN8dInj7W5V3eTf1naWBSp-7W4mHSVZLKYdblmtcC1QNTOeKkgmRo7Udn5PJ4Y3PxeLrLt379Hjy4S2aBQOeIdY63xY8EnejGeENl5GBDZYZ8sxYnoidGtNzz9YQm_OKXL_NhpjRbvmb2vng-KIGyvbXJTbJCJROyY8hXi4IxrpeUDjj5dtlscX89Nd3FVMs0Xll_YWm5F2tujFByAioKcunPDxGIglz-7rPpH248_TuCeAcmPudpFIEfzyESBBE_v6d-DvOv2T_v980NdHQFNNmF7OXo6xz9KAeN9mDSS-Mk1nev3vmkjE_hR5WxH-nKgR_p6KOCvP751dKsH6aOlekYRpxWQ5fXA9tuLTQdtxVyx_VYEDZaXps1qe26HIkpxJvDi_8EAAD__5omjrN1BAAA HTTP/1.1\r\nHost: loseimposeherself.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl25634524=1; nlecdf85ebbdb343866e18d5de2b6fd24249=[5941311]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:54 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nvary: Origin\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: loseimposeherself.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: e70d20ee5aac789249263c6852fcae5e\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":327,"timings":{"blocked":233,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"loseimposeherself.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loseimposeherself.com/impr.gif?sid=H4sIAAAAAAAC_4RTz4scRRSu2Sw5xINoxPMgUVTc2e7pnh9tDuIaV4IxCUkkhxikfvVOuT1VbVX39O6ejIEYPO3Bg3qx55vJbqJB4lUxhImXEBAcLw6YvfgXiBA8Su8urJ58h-_9-Irifa9eXRvmOyRATmdn3zEbKknoYqvh1V-8qLQwhaufvlD3vYZ3vH5R6XZ4vL5WgR286gdhw3up_pbkq2ax6fme53t-fVlZGZu1xV0WKr0d-Y3Ia4TNht8KsWb_m7t8Do7OQQx2yNNQYvrkH_ElKD6B7t85Id1qZtJX3uznCc2MxUBsv6tXtSk0-gdhbGuI9fb-aRg3JeTzORi9va8AZjCuFICpKZl79hGY3t5vE2xwY69TlkBqMPEEisEEMplA0Qm4uQolfiEAFzh9Brq_ddrYgq7vsbRip2T-8V9QxZTMP3oGuv_tUqLW6udNkmfKaIe1uIRam0CtTJDmE2QbNajiPnj2MZT4mSw-PgXdH59xiYESs2Oy0w48n3YWWpGUC2HUCRe6segu0KhF277PgpZs7Y5IxRNQN4fc1ZCrGvK4hjytoS9m9dDrhtynQTuOBO94IQ1DIZkXdZueRyPeQc6vQIlNcHttK9fchdHQv52_nybNVjsIW81w6M-O6URyEXdbkjHBgjDottvS74qWkE3WjkUzbIbRrUutKPQD37-8lYpetjoYZzaX4-rOoX9zrxRGu0Wk9spNEXRkwHg4ZFhVm7D5PbheCSdqcBnBQJQoJEHhCApKUCiCIiMoBuUNkbimK7dE4nLm7_vmvg_KkclWhvSGyVakJqB2E1aUY5V-6K6CZ4dGG7ETI1MBZVk5okyUw3SHPFU9Ye2TF37HqpzV_08tnCqh3Byoq2FDTcnyr38jVVPy_J0HYPQ-XHIfXB0CzX3QogTtldjQs-d6sid7OVug3OV-M2ik61nPaKrXi560ssFNH8KUSLN5ZOu1YbJDjo7OXVi6t7tgl3-7C8kfkn0DtyVSW-ID9RPBSnJ9dM4UZHzOFI58dybNVF9t0Gr5zmc0k4e_fluuF8aKkyfc5q3XeUVU4e0L0mWnqBZKrzjyzZISQtplY7kkP550FyU7m7veUm51np46-8byyX5qpXPK6AmompIjf34Krqbk6N2vdj9W6-Ud8PQjuPSgT2cIWFpDoggSeVCnrIT7V84O4qG7jhU7D5pdhe6XGNgSg6QETTbh8iOjLLUPX3vwRWVfgiXzI5bY-TFLbPLZ7pwq-L6CSQU_wKlZPQ5kk3tet9P2g24s_SAUPG51w0i0qRcEEpmbqvfWD_8TAAD__6VQDkUKBQAA","fqdn":"loseimposeherself.com","domain":"loseimposeherself.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"loseimposeherself.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 08:12:24 GMT","end":"Thu, 19 Mar 2026 08:12:23 GMT"},"fingerprint":{"sha1":"B1:6B:EB:05:E0:5A:FE:EB:0E:C8:A3:8B:EC:61:8D:51:CD:8C:90:5B","sha256":"87:C6:97:CB:C2:A5:11:74:9B:43:AB:AB:6C:80:15:71:6F:DB:98:4D:C1:34:D2:A7:47:B5:D1:64:F6:AD:05:80"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_4RTz4scRRSu2Sw5xINoxPMgUVTc2e7pnh9tDuIaV4IxCUkkhxikfvVOuT1VbVX39O6ejIEYPO3Bg3qx55vJbqJB4lUxhImXEBAcLw6YvfgXiBA8Su8urJ58h-_9-Irifa9eXRvmOyRATmdn3zEbKknoYqvh1V-8qLQwhaufvlD3vYZ3vH5R6XZ4vL5WgR286gdhw3up_pbkq2ax6fme53t-fVlZGZu1xV0WKr0d-Y3Ia4TNht8KsWb_m7t8Do7OQQx2yNNQYvrkH_ElKD6B7t85Id1qZtJX3uznCc2MxUBsv6tXtSk0-gdhbGuI9fb-aRg3JeTzORi9va8AZjCuFICpKZl79hGY3t5vE2xwY69TlkBqMPEEisEEMplA0Qm4uQolfiEAFzh9Brq_ddrYgq7vsbRip2T-8V9QxZTMP3oGuv_tUqLW6udNkmfKaIe1uIRam0CtTJDmE2QbNajiPnj2MZT4mSw-PgXdH59xiYESs2Oy0w48n3YWWpGUC2HUCRe6segu0KhF277PgpZs7Y5IxRNQN4fc1ZCrGvK4hjytoS9m9dDrhtynQTuOBO94IQ1DIZkXdZueRyPeQc6vQIlNcHttK9fchdHQv52_nybNVjsIW81w6M-O6URyEXdbkjHBgjDottvS74qWkE3WjkUzbIbRrUutKPQD37-8lYpetjoYZzaX4-rOoX9zrxRGu0Wk9spNEXRkwHg4ZFhVm7D5PbheCSdqcBnBQJQoJEHhCApKUCiCIiMoBuUNkbimK7dE4nLm7_vmvg_KkclWhvSGyVakJqB2E1aUY5V-6K6CZ4dGG7ETI1MBZVk5okyUw3SHPFU9Ye2TF37HqpzV_08tnCqh3Byoq2FDTcnyr38jVVPy_J0HYPQ-XHIfXB0CzX3QogTtldjQs-d6sid7OVug3OV-M2ik61nPaKrXi560ssFNH8KUSLN5ZOu1YbJDjo7OXVi6t7tgl3-7C8kfkn0DtyVSW-ID9RPBSnJ9dM4UZHzOFI58dybNVF9t0Gr5zmc0k4e_fluuF8aKkyfc5q3XeUVU4e0L0mWnqBZKrzjyzZISQtplY7kkP550FyU7m7veUm51np46-8byyX5qpXPK6AmompIjf34Krqbk6N2vdj9W6-Ud8PQjuPSgT2cIWFpDoggSeVCnrIT7V84O4qG7jhU7D5pdhe6XGNgSg6QETTbh8iOjLLUPX3vwRWVfgiXzI5bY-TFLbPLZ7pwq-L6CSQU_wKlZPQ5kk3tet9P2g24s_SAUPG51w0i0qRcEEpmbqvfWD_8TAAD__6VQDkUKBQAA HTTP/1.1\r\nHost: loseimposeherself.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl25634524=1; nlecdf85ebbdb343866e18d5de2b6fd24249=[5941311]; uid_id2=e76301a7-59ee-4974-8fd8-a95a611b35e5:2:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:54 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 5\r\nHost: loseimposeherself.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 8bb7490ecd8dd28fa2531052ead44058\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":373,"timings":{"blocked":272,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"loseimposeherself.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loseimposeherself.com/impr.gif?sid=H4sIAAAAAAAC_4RTvW8c1Rd961gp8it-giDqFQoIEF7P7Mx-DCkQJhhFhCRKglKECL2v8T48-97w3syO7YoQKURULiiAhtmzGzuBCIUWRBRtaKJISCwNKxEX8BcgpIgSjW3JUHGLc-89Z4p7z9x3bZjvkAA5nZ19y2yoJKGLrYZXf_6i0sIUrn76Qt33Gt7x-kWl2-Hx-loFdvCyH4QN74X6G5KvmsWm53ue7_n1ZWVlbNYWd1Wo9HbkNyKvETYbfivEmv137_I5ODoHMdghT0KJ6f9_jy9B8Ql0_84J6VYzk770ej9PaGYsBmL7bb2qTaHRPyhjW0Ost_e_hnFTQj6dg9Hb-xvADMbVBmBqSuaefgSmt_fHBBvc2JuUJZAaTPwPxWACmUyg6ATcXIUSPxGAC5w-A93fOm1sQdf3VFqpUzL_-E-oYkrmHz0F3f96KVFr9fMmyTNltMNaXEKtTaBWJkjzCbKNGlRxHzz7EEr8SBYfn4Luj8-4xECJ2THZaQeeTzsLrUjKhTDqhAvdWHQXaNSibd9nQUu2di1S8QTUzSF3NeSqhjyuIU9r6ItZPfS6Ifdp0I4jwTteSMNQSOZF3abn0Yh3kPMrUGIT3F67nb-bJs1WOwhbzXDoz47pRHIRd1uSMcGCMOi229LvipaQTdaORTNshtGtS60o9APfv7yVil62OhhnNpfjXHM39G_uUWG0S25VZBgNfaT2yk0RdGTAeDhkWFWbsPk9uF4JJ2pwGcFAlCgkQeEICkpQKIIiIygG5Q2RuKYrt0Ticubv5-Z-DsqRyVaG9IbJVqQmoHYTVpRjlb7vroJnh0YbsRMjUwFlWTmiTJTDdIc8Uf3C2kfP_YpVOav_19pwqoRyc6Cuhg01Jcs__4VUTcmzdx6A0ftwyX1wdQg090GLErRXYkPPnunJnuzlbIFyl_vNoJGuZz2jqV4vetLKBjd9CFMizeaRrdeGyQ45Ojp3Yene7oFd_mUCyR-S_QC3JVJb4j31A8FKcn10zhRkfM4UjnxzJs1UX23Q6vjOZzSTh798U64XxoqTJ9zmrVd5JVTl7QvSZaeoFkqvOPLVkhJC2mVjuSTfn3QXJTubu95SbnWenjr72vLJfmqlc8roCaiakiN_fAyupuTo3S92H1brxd_A0w_g0oM5nSFg6SEkiiCRBzxlJdw_enZQD911rNh50OwqdL_EwJYYJCVosgmXHxllqX34yoPPqvgcLJkfscTOj1lik08qn-5W8O2uYxV8B6dm9TiQTe553U7bD7qx9INQ8LjVDSPRpl4QSGRuqt5ZP_x3AAAA__9lbWTvCgUAAA==","fqdn":"loseimposeherself.com","domain":"loseimposeherself.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"loseimposeherself.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 08:12:24 GMT","end":"Thu, 19 Mar 2026 08:12:23 GMT"},"fingerprint":{"sha1":"B1:6B:EB:05:E0:5A:FE:EB:0E:C8:A3:8B:EC:61:8D:51:CD:8C:90:5B","sha256":"87:C6:97:CB:C2:A5:11:74:9B:43:AB:AB:6C:80:15:71:6F:DB:98:4D:C1:34:D2:A7:47:B5:D1:64:F6:AD:05:80"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_4RTvW8c1Rd961gp8it-giDqFQoIEF7P7Mx-DCkQJhhFhCRKglKECL2v8T48-97w3syO7YoQKURULiiAhtmzGzuBCIUWRBRtaKJISCwNKxEX8BcgpIgSjW3JUHGLc-89Z4p7z9x3bZjvkAA5nZ19y2yoJKGLrYZXf_6i0sIUrn76Qt33Gt7x-kWl2-Hx-loFdvCyH4QN74X6G5KvmsWm53ue7_n1ZWVlbNYWd1Wo9HbkNyKvETYbfivEmv137_I5ODoHMdghT0KJ6f9_jy9B8Ql0_84J6VYzk770ej9PaGYsBmL7bb2qTaHRPyhjW0Ost_e_hnFTQj6dg9Hb-xvADMbVBmBqSuaefgSmt_fHBBvc2JuUJZAaTPwPxWACmUyg6ATcXIUSPxGAC5w-A93fOm1sQdf3VFqpUzL_-E-oYkrmHz0F3f96KVFr9fMmyTNltMNaXEKtTaBWJkjzCbKNGlRxHzz7EEr8SBYfn4Luj8-4xECJ2THZaQeeTzsLrUjKhTDqhAvdWHQXaNSibd9nQUu2di1S8QTUzSF3NeSqhjyuIU9r6ItZPfS6Ifdp0I4jwTteSMNQSOZF3abn0Yh3kPMrUGIT3F67nb-bJs1WOwhbzXDoz47pRHIRd1uSMcGCMOi229LvipaQTdaORTNshtGtS60o9APfv7yVil62OhhnNpfjXHM39G_uUWG0S25VZBgNfaT2yk0RdGTAeDhkWFWbsPk9uF4JJ2pwGcFAlCgkQeEICkpQKIIiIygG5Q2RuKYrt0Ticubv5-Z-DsqRyVaG9IbJVqQmoHYTVpRjlb7vroJnh0YbsRMjUwFlWTmiTJTDdIc8Uf3C2kfP_YpVOav_19pwqoRyc6Cuhg01Jcs__4VUTcmzdx6A0ftwyX1wdQg090GLErRXYkPPnunJnuzlbIFyl_vNoJGuZz2jqV4vetLKBjd9CFMizeaRrdeGyQ45Ojp3Yene7oFd_mUCyR-S_QC3JVJb4j31A8FKcn10zhRkfM4UjnxzJs1UX23Q6vjOZzSTh798U64XxoqTJ9zmrVd5JVTl7QvSZaeoFkqvOPLVkhJC2mVjuSTfn3QXJTubu95SbnWenjr72vLJfmqlc8roCaiakiN_fAyupuTo3S92H1brxd_A0w_g0oM5nSFg6SEkiiCRBzxlJdw_enZQD911rNh50OwqdL_EwJYYJCVosgmXHxllqX34yoPPqvgcLJkfscTOj1lik08qn-5W8O2uYxV8B6dm9TiQTe553U7bD7qx9INQ8LjVDSPRpl4QSGRuqt5ZP_x3AAAA__9lbWTvCgUAAA== HTTP/1.1\r\nHost: loseimposeherself.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl25634524=1; nlecdf85ebbdb343866e18d5de2b6fd24249=[5941311]; uid_id2=e76301a7-59ee-4974-8fd8-a95a611b35e5:2:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:54 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: loseimposeherself.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 00c07219761228bc8bdc7ecbe496d5cb\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":394,"timings":{"blocked":299,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"loseimposeherself.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/ren.gif?sid=H4sIAAAAAAAC_1RSPWwcRRidjSOERIGAiA60QoBAwufd272fTYoIE4wijG0cIxdQMDszezfx3s4ys3t7d5XBAiLRmI5y_c6OBURR6NIA0ZkGWULiUl0RN4iKEimiRGefZPiK73uf3hTve_O-2MtPiIecTtbeUwMZx3ShVnHs1zZlwlVh7JUN23UqzhV7UyZ1_4rdmzbdvex6fsV53X5HsC21UHVcx3Ed116SWkSqt3DKQqZ3ArcSOBW_WnFrPnr6_7vJLRhqgXdPyLOQfPz0H9GHkGyEpHPvmjBbmUrfeLuTxzRTGl1--EGylagiQeccRtpClBzOXkOZMSHfXIBKDmcXQHX3pxcglGNy4flHCJPDmUyE3YMzpWEMkSDkT6HojiDiESQdgakdSP47ARjHyiqSzu0VpQvaP2PplB2Ti4__hizG5OKjS0g6dxdj2bNvqDjPpEoMelEJ2RtBtkZI8yNkAwuyOALLPoPkv5GFx8tIOvurJlaQfPKy8CLWoH4w34wcZ96POJ8PmVedr4kgdIOGCFzunFokoxGomUNuLOTSQh5ZyFMLHT6xfafpM5d69SjgrOH41Pe5CJ2gWXUcGrAGcvYpJN8F09tI9Ta25C50_gCmXcJwCyYj6PIShSAoDEFBCQpJUGQERbc84LGpmvI2j00eurNZnU2vHKqstUcPVNYSCQHVu9C83JfpJ2YHLJsbDiLDh2raaJiVQxryci89Ic9M7bS-fPVnbImJLZyqEK5TpyyIGlFAnXqDNV3mBiFnHqs7MLKENBdAjYWBHJOlh_8glWPyyr1fEdIjmPgITM6B5i-AFiVou8QgmbzUFm3RzsN5ykzuVr1K2s_aKqFJv2gLLSpMdcBViTS7iKxv7cUn5Lnh-sbig9PP_vhJG4IdX717__2_Pn_xPpgukeoSN-UvBK341nBdFWR_XRWG_LCaZrIjB3QahBsZzcTcd--KfqE0v37N7H77JpsSU3hnQ5hsmSZcJi1Dvl-UnAu9pDQT5MfrZlOEa7lpL-Y6ydPltbeWrndSLYyRKhmByjGxLv8EJsfk0s0_T0Ne_-oKWLoNk57rNIogTC3EkiAWx2RWoGEJ8589PMd75hZa2gLNdpB0SnR1iW5cgsa7MPncMEv18dWH3mkhjK1hGGtrP4x1_PWZT0ZO7Fo19OrNZl1EdR553Kt6PKg5IvBpUPcDv4bMjOVH_Sf-DQAA__8HhlgmhwQAAA==","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 00:50:13 GMT","end":"Sun, 29 Mar 2026 00:50:12 GMT"},"fingerprint":{"sha1":"B6:89:38:EE:EF:1E:F1:A0:93:51:BB:7A:F2:13:F5:DF:8C:9B:8F:F7","sha256":"74:22:2C:3F:1E:A6:04:C8:AD:7C:D8:B4:13:57:A5:95:EF:83:FA:28:18:BC:F3:BD:38:93:CB:DA:4B:30:3F:8A"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSPWwcRRidjSOERIGAiA60QoBAwufd272fTYoIE4wijG0cIxdQMDszezfx3s4ys3t7d5XBAiLRmI5y_c6OBURR6NIA0ZkGWULiUl0RN4iKEimiRGefZPiK73uf3hTve_O-2MtPiIecTtbeUwMZx3ShVnHs1zZlwlVh7JUN23UqzhV7UyZ1_4rdmzbdvex6fsV53X5HsC21UHVcx3Ed116SWkSqt3DKQqZ3ArcSOBW_WnFrPnr6_7vJLRhqgXdPyLOQfPz0H9GHkGyEpHPvmjBbmUrfeLuTxzRTGl1--EGylagiQeccRtpClBzOXkOZMSHfXIBKDmcXQHX3pxcglGNy4flHCJPDmUyE3YMzpWEMkSDkT6HojiDiESQdgakdSP47ARjHyiqSzu0VpQvaP2PplB2Ti4__hizG5OKjS0g6dxdj2bNvqDjPpEoMelEJ2RtBtkZI8yNkAwuyOALLPoPkv5GFx8tIOvurJlaQfPKy8CLWoH4w34wcZ96POJ8PmVedr4kgdIOGCFzunFokoxGomUNuLOTSQh5ZyFMLHT6xfafpM5d69SjgrOH41Pe5CJ2gWXUcGrAGcvYpJN8F09tI9Ta25C50_gCmXcJwCyYj6PIShSAoDEFBCQpJUGQERbc84LGpmvI2j00eurNZnU2vHKqstUcPVNYSCQHVu9C83JfpJ2YHLJsbDiLDh2raaJiVQxryci89Ic9M7bS-fPVnbImJLZyqEK5TpyyIGlFAnXqDNV3mBiFnHqs7MLKENBdAjYWBHJOlh_8glWPyyr1fEdIjmPgITM6B5i-AFiVou8QgmbzUFm3RzsN5ykzuVr1K2s_aKqFJv2gLLSpMdcBViTS7iKxv7cUn5Lnh-sbig9PP_vhJG4IdX717__2_Pn_xPpgukeoSN-UvBK341nBdFWR_XRWG_LCaZrIjB3QahBsZzcTcd--KfqE0v37N7H77JpsSU3hnQ5hsmSZcJi1Dvl-UnAu9pDQT5MfrZlOEa7lpL-Y6ydPltbeWrndSLYyRKhmByjGxLv8EJsfk0s0_T0Ne_-oKWLoNk57rNIogTC3EkiAWx2RWoGEJ8589PMd75hZa2gLNdpB0SnR1iW5cgsa7MPncMEv18dWH3mkhjK1hGGtrP4x1_PWZT0ZO7Fo19OrNZl1EdR553Kt6PKg5IvBpUPcDv4bMjOVH_Sf-DQAA__8HhlgmhwQAAA== HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: uid_id2=e3fc7a49-8f00-4fdd-bc32-5e9b197e91d0:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl25634495=1; slece02ee106ac9f7f9a067c81c19bdc3c60=[6293536]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:54 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: e9741df547710b0a11618efa10206944\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loseimposeherself.com/ren.gif?sid=H4sIAAAAAAAC_4RTz4scVRd9PWmyyLf4-L6I60aiqDg99bOnyyzEMY4EYxKSSBYxyHv1Xk0_p_q98r2qrplZGQMxuJqFC3Vj9enOTKJB4h9gCD0ihIBgu7HBzCZ_gQjBpdTMwOjKuzj33nNqce-p-24Mi13io6Cz8-_oDZmmdCFsO60XL0vFdWlbZy-1XKftnGxdlqoTnGyt1WAGr7p-0HZear0l4lW94Dmu47iO21qWRiR6bWFPhczuRm47ctqB13bDAGvmn70t5mDpHPhgl_wfkk__-yS5AhlPoPr3Tgm7muvslTf7RUpzbTDg2--qVaVLhf5hmZgGErV98DW0nRLy-Ry02j7YAHowrjcAk1My9-xjMLV9MCbY4Nb-pCyFUGD8PygHE4h0AkkniPV1SP4zAWKOs-eg-ltntSnp-r5Ka3VKmk__gCynpPn4Gaj-t0upXGtd1GmRS60s1pIKcm0CuTJBVkyQbzQgyx3E-ceQ_Cey8PQMVH98zqYaks9OiMWO77h0cT6MhJgPosVgvpvw7jyNQtpxXeaHItyzSCYTUDuHwjZQyAaKpIEia6DPZ63A6QaxS_1OEvF40QloEHDBnKjrOQ6N4kUU8TVIvonY3NjKeC9fHYxzU4hxoWI7dG_vU0G0R27VZBAN3bvF-1nqhR0_CL1g6M5OqFTEPOmGgjHO_MDvdjrC7fKQC491Eu4FXhDduRJGgeu77lVk5tpt7i8Kn8XBkGFVbsIUD2B7FSxvwOYEA16hFASlJSgpQSkJypygHFS3eGo9W23x1BbMPcjeQfarkc5XhvSWzleEIqBmE4ZXY5l9aK8jzo-MNhLLR7oGyvJqRBmvhtku-V_9CxufvPAbVsWs9W_LwMoK0s6B2gY25JQs__InMjklz997CEZ3YNMdxPIIaOGClhVor8KGmj3XEz3RK9g8jW3hen47W897WlG1XvaEEe1Y98F1hSxvIl9vDNNdcnx04dLSg70Du_rrDkT8iBwEYlMhMxU-kD8QrKQ3Rxd0ScYXdGnJd-eyXPblBq2P72JOc3H067fFeqkNP33Kbt55Pa6Furx7Sdj8DFVcqhVLvlmSnAuzrE0syPen7WXBzhe2t1QYVWRnzr-xfLqfGWGt1GoCKqfk2O-fIpZTcvz-V3sPK3z5CeLsI9jscE6rCVjWRCoJUnHIU1bB_q1nh_XQ3sSKaYLm16H6FQamwiCtQNNN2OLYKM_Mo9ceflHHl2Bpc8RS0xyz1KSf1T79WMOkhvv7tlk5a4Ue8zvdbkckHZ743Pd8HoWOiAIadYIoCJHbqXxv_ehfAQAA__8CQrczCgUAAA==","fqdn":"loseimposeherself.com","domain":"loseimposeherself.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"loseimposeherself.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 08:12:24 GMT","end":"Thu, 19 Mar 2026 08:12:23 GMT"},"fingerprint":{"sha1":"B1:6B:EB:05:E0:5A:FE:EB:0E:C8:A3:8B:EC:61:8D:51:CD:8C:90:5B","sha256":"87:C6:97:CB:C2:A5:11:74:9B:43:AB:AB:6C:80:15:71:6F:DB:98:4D:C1:34:D2:A7:47:B5:D1:64:F6:AD:05:80"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_4RTz4scVRd9PWmyyLf4-L6I60aiqDg99bOnyyzEMY4EYxKSSBYxyHv1Xk0_p_q98r2qrplZGQMxuJqFC3Vj9enOTKJB4h9gCD0ihIBgu7HBzCZ_gQjBpdTMwOjKuzj33nNqce-p-24Mi13io6Cz8-_oDZmmdCFsO60XL0vFdWlbZy-1XKftnGxdlqoTnGyt1WAGr7p-0HZear0l4lW94Dmu47iO21qWRiR6bWFPhczuRm47ctqB13bDAGvmn70t5mDpHPhgl_wfkk__-yS5AhlPoPr3Tgm7muvslTf7RUpzbTDg2--qVaVLhf5hmZgGErV98DW0nRLy-Ry02j7YAHowrjcAk1My9-xjMLV9MCbY4Nb-pCyFUGD8PygHE4h0AkkniPV1SP4zAWKOs-eg-ltntSnp-r5Ka3VKmk__gCynpPn4Gaj-t0upXGtd1GmRS60s1pIKcm0CuTJBVkyQbzQgyx3E-ceQ_Cey8PQMVH98zqYaks9OiMWO77h0cT6MhJgPosVgvpvw7jyNQtpxXeaHItyzSCYTUDuHwjZQyAaKpIEia6DPZ63A6QaxS_1OEvF40QloEHDBnKjrOQ6N4kUU8TVIvonY3NjKeC9fHYxzU4hxoWI7dG_vU0G0R27VZBAN3bvF-1nqhR0_CL1g6M5OqFTEPOmGgjHO_MDvdjrC7fKQC491Eu4FXhDduRJGgeu77lVk5tpt7i8Kn8XBkGFVbsIUD2B7FSxvwOYEA16hFASlJSgpQSkJypygHFS3eGo9W23x1BbMPcjeQfarkc5XhvSWzleEIqBmE4ZXY5l9aK8jzo-MNhLLR7oGyvJqRBmvhtku-V_9CxufvPAbVsWs9W_LwMoK0s6B2gY25JQs__InMjklz997CEZ3YNMdxPIIaOGClhVor8KGmj3XEz3RK9g8jW3hen47W897WlG1XvaEEe1Y98F1hSxvIl9vDNNdcnx04dLSg70Du_rrDkT8iBwEYlMhMxU-kD8QrKQ3Rxd0ScYXdGnJd-eyXPblBq2P72JOc3H067fFeqkNP33Kbt55Pa6Furx7Sdj8DFVcqhVLvlmSnAuzrE0syPen7WXBzhe2t1QYVWRnzr-xfLqfGWGt1GoCKqfk2O-fIpZTcvz-V3sPK3z5CeLsI9jscE6rCVjWRCoJUnHIU1bB_q1nh_XQ3sSKaYLm16H6FQamwiCtQNNN2OLYKM_Mo9ceflHHl2Bpc8RS0xyz1KSf1T79WMOkhvv7tlk5a4Ue8zvdbkckHZ743Pd8HoWOiAIadYIoCJHbqXxv_ehfAQAA__8CQrczCgUAAA== HTTP/1.1\r\nHost: loseimposeherself.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl25634524=1; nlecdf85ebbdb343866e18d5de2b6fd24249=[5941311]; uid_id2=e76301a7-59ee-4974-8fd8-a95a611b35e5:2:1; iprc_l+b9a0dfe34c8114f1d5a734fcb9221aeb=5941311; iprc_l:5941311=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:55 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: loseimposeherself.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 45af847342117b9c39978ff810089f3e\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":306,"timings":{"blocked":207,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"loseimposeherself.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:56.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://hehehub-acsu123.pythonanywhere.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 19:22:36 GMT\r\nexpires: Wed, 30 Dec 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 545420\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-07-17T10:40:30.93082Z","times_seen":930239,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":43,"dns":6,"connect":7,"send":0,"wait":8,"receive":6,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loseimposeherself.com/ntv.json?key=df85ebbdb343866e18d5de2b6fd24249\u0026vstc=4\u0026rb=","fqdn":"loseimposeherself.com","domain":"loseimposeherself.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:53.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"loseimposeherself.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 08:12:24 GMT","end":"Thu, 19 Mar 2026 08:12:23 GMT"},"fingerprint":{"sha1":"B1:6B:EB:05:E0:5A:FE:EB:0E:C8:A3:8B:EC:61:8D:51:CD:8C:90:5B","sha256":"87:C6:97:CB:C2:A5:11:74:9B:43:AB:AB:6C:80:15:71:6F:DB:98:4D:C1:34:D2:A7:47:B5:D1:64:F6:AD:05:80"}}},"request":{"raw":"GET /ntv.json?key=df85ebbdb343866e18d5de2b6fd24249\u0026vstc=4\u0026rb= HTTP/1.1\r\nHost: loseimposeherself.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hehehub-acsu123.pythonanywhere.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:54 GMT\r\nContent-Type: application/json\r\nContent-Length: 15821\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://hehehub-acsu123.pythonanywhere.com\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: pdhtkv=true; expires=Wed, 07 Jan 2026 02:52:54 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Wed, 07 Jan 2026 02:52:54 GMT; path=/; secure; SameSite=None\npdhtkv49=true; expires=Wed, 07 Jan 2026 02:52:54 GMT; path=/; secure; SameSite=None\nuncs49=1; expires=Wed, 07 Jan 2026 02:52:54 GMT; path=/; secure; SameSite=None\nu_pl25634524=1; expires=Wed, 07 Jan 2026 02:52:54 GMT; path=/; secure; SameSite=None\nnlecdf85ebbdb343866e18d5de2b6fd24249=[5941311]; expires=Tue, 06 Jan 2026 02:52:59 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 33\r\nHost: loseimposeherself.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 07b7ad78da4d54bfc593bd6f35ad5e11\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15796,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"97136754384327a261c8b9341750a40e","sha1":"5472f4a448db1dea1aacdc07cac1fb683e668bec","sha256":"d75b9b1ffedb599c6b643760cc54d578ddaacec77416f1551f65c2ca55cf66a5","sha512":"aaf0247141b8afc4ba774851488e39645575c211b10645cb187b04000795a768cbaa7c1ef05d8a00019a11a5a2fc762e44626748fda64f718c3e744d2941102d","ssdeep":"384:tsV3sHhfF6LQ1cE3NYbkkMNXdpqUzDvKvU1BbrGBv7bIxIBaxME2M7Iy:tsV3sBfFAKcE9YbCBdprDSAxGBvPIxRD","tlshash":"1262cef56889299717556b252c84fb8819c6a213cfe92e8c5fb8dafc216d431033b1ec","first_seen":"2026-01-06T02:53:22.839438Z","last_seen":"2026-01-06T02:53:22.839438Z","times_seen":1,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":1,"dns":16,"connect":92,"send":0,"wait":127,"receive":93,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"loseimposeherself.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/watch.1302880017751.js?key=8253a9c21e6081348abe9f05f9d8dea2\u0026kw=%5B%22get%22%2C%22key%22%2C%22hoho%22%2C%22hub%22%2C%22-%22%2C%22step%22%2C%221%22%5D\u0026refer=https%3A%2F%2Fhehehub-acsu123.pythonanywhere.com%2Fapi%2Fgetkey%3Fhwid%3D1767656646.038565\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=df5693cb-8a90-406e-8abd-a2bbb689ce41%3A3%3A1","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:53.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 00:11:03 GMT","end":"Sun, 29 Mar 2026 00:11:02 GMT"},"fingerprint":{"sha1":"93:86:61:9F:2D:73:66:D5:37:73:1C:FE:70:C8:9F:23:B1:C8:8A:D6","sha256":"9D:5E:D7:81:B8:B1:D7:5F:1F:E3:92:85:57:6C:B5:66:34:D6:DE:4F:AA:6C:8B:E9:92:36:D1:CC:BF:CC:45:D3"}}},"request":{"raw":"GET /watch.1302880017751.js?key=8253a9c21e6081348abe9f05f9d8dea2\u0026kw=%5B%22get%22%2C%22key%22%2C%22hoho%22%2C%22hub%22%2C%22-%22%2C%22step%22%2C%221%22%5D\u0026refer=https%3A%2F%2Fhehehub-acsu123.pythonanywhere.com%2Fapi%2Fgetkey%3Fhwid%3D1767656646.038565\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=df5693cb-8a90-406e-8abd-a2bbb689ce41%3A3%3A1 HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hehehub-acsu123.pythonanywhere.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:54 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://hehehub-acsu123.pythonanywhere.com\r\naccess-control-allow-credentials: true\r\nlocation: https://sourshaped.com/watch.1302880017751.js?key=8253a9c21e6081348abe9f05f9d8dea2\u0026kw=%5B%22get%22%2C%22key%22%2C%22hoho%22%2C%22hub%22%2C%22-%22%2C%22step%22%2C%221%22%5D\u0026refer=https%3A%2F%2Fhehehub-acsu123.pythonanywhere.com%2Fapi%2Fgetkey%3Fhwid%3D1767656646.038565\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=df5693cb-8a90-406e-8abd-a2bbb689ce41%3A3%3A1\u0026shu=024c1d1b208e360a991a036e6663a7458d7e767f7b0f0c96b2feac43b8ce18f0b22931753c2079cf928903bca6d0e374dd01db820129bfbac086e6efd6052a1af9c235efac3c8743f7a9b40b63f8c03b21cb008382c80787eb8d\u0026pst=1767668034\u0026rmtc=t\r\nset-cookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwIjp7ImlkIjoyNTYzNDI1NCwiayI6IjgyNTNhOWMyMWU2MDgxMzQ4YWJlOWYwNWY5ZDhkZWEyIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjo0NjQxNzg0LCJwaWQiOjI0NzAwODksImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MywiYWlkIjoyMywicHQiOjQsInBrIjoic2VhN2N2N2hndCIsInQiOjF9LCJ1Ijp7InUiOjEsImF1IjoxLCJkIjp7ImlkIjoyNjY1NjExMTUsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjozODkxNCwib24iOiJXaW5kb3dzIiwib3YiOiIxMC4wIiwiYmlkIjoxMzY5MjUsImJuIjoiRmlyZWZveCIsImJ2IjoiMTM0LjAiLCJ3diI6ZmFsc2UsImUiOnRydWUsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJjdCI6eyJpZCI6MzE0MzI0NCwibiI6Ik9zbG8ifSwicmciOnsiaWQiOjE4NDQsIm4iOiJPc2xvIENvdW50eSJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsIml3ZiI6dHJ1ZSwidXAiOnRydWUsInIiOiJodHRwczovL2hlaGVodWItYWNzdTEyMy5weXRob25hbnl3aGVyZS5jb20vYXBpL2dldGtleT9od2lkPTE3Njc2NTY2NDYuMDM4NTY1IiwidHoiOjEsImFyIjpbXX19.T3VuMPcNtbd8tKuzKeFSjYW9eSx-RX8KuT2uljmhh4A; expires=Tue, 06 Jan 2026 02:53:54 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 1\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 14c512e794ec2f33f30f342fc2db700f\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4594,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":44,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"relishsubsequentlytank.com/c2/40/88/c24088fb2a6cd3f2c2336679f397c764.js","fqdn":"relishsubsequentlytank.com","domain":"relishsubsequentlytank.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:53.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"relishsubsequentlytank.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Dec 2025 21:56:14 GMT","end":"Tue, 03 Mar 2026 21:56:13 GMT"},"fingerprint":{"sha1":"AE:C0:37:62:05:CE:68:5D:4C:88:C9:8D:70:AF:F7:6D:9C:31:92:3A","sha256":"1A:FD:86:A0:5C:2E:36:A8:2B:3C:C3:36:88:DC:A6:22:BE:80:83:11:B2:53:A8:02:03:67:04:57:B7:C0:12:EA"}}},"request":{"raw":"GET /c2/40/88/c24088fb2a6cd3f2c2336679f397c764.js HTTP/1.1\r\nHost: relishsubsequentlytank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:53 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 38131\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: relishsubsequentlytank.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: d93b7960e29013f501534a3823a30701\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":106852,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8f7b07b71fb3594fef4be0c0764997a5","sha1":"361aefdff4ff1081efff8d339b803c4d641834ed","sha256":"b2b7612af5e8b9ec22aa8d3901024fda83859b10595b40e07c16e09fb9b60615","sha512":"6aa5c4fa14853a509eed2a6690cee4bb5924b411fbead0b8130094d903e553deaaf6a0b066dade2b5ea82da66c78d35a89a17e61a36e4fa7c5dea0a7f31a63e7","ssdeep":"3072:Es/17aMWZ44SXdVY4lDKVVbZ4i3/9j9y1UglGews/:Es/w194Lws/","tlshash":"25a3c788bfd0f06d129a6473223f950ff11a4e42505ce558e907f8e66abc32af47db64","first_seen":"2026-01-06T02:53:22.842261Z","last_seen":"2026-01-06T02:53:22.842261Z","times_seen":1,"resource_available":true,"data":null}},"time_used":887,"timings":{"blocked":347,"dns":68,"connect":92,"send":0,"wait":97,"receive":93,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"relishsubsequentlytank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"relishsubsequentlytank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"relishsubsequentlytank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"politicalpiano.com/8253a9c21e6081348abe9f05f9d8dea2/invoke.js","fqdn":"politicalpiano.com","domain":"politicalpiano.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:53.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"politicalpiano.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 23:19:37 GMT","end":"Wed, 01 Apr 2026 23:19:36 GMT"},"fingerprint":{"sha1":"A5:83:F5:2D:A1:5D:A3:A2:E5:BF:36:5E:89:DB:C5:4E:F4:70:D4:A9","sha256":"3D:27:07:82:E4:0C:5D:C1:8E:B4:50:A2:BD:65:45:AD:B2:FF:E2:03:00:A7:61:A0:60:54:A0:BE:12:BA:5A:DF"}}},"request":{"raw":"GET /8253a9c21e6081348abe9f05f9d8dea2/invoke.js HTTP/1.1\r\nHost: politicalpiano.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:53 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 18489\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 3\r\nHost: politicalpiano.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 2ecbd38fc7d1e28856ab57ade993b309\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46228,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (46228), with no line terminators","md5":"cdd4b85f2325442ad39579db67ed88d5","sha1":"9652c1108405540d4918f2c9798083e452d724c5","sha256":"d88c4167d63afc99c7790c73f1c0d7d5c601b0e95e502e1f2ea64dc1db471302","sha512":"bf5b33d375a1dde9991ee7fad0458a04c7490e924b6ce7ca36df62a9506a1b9332d55666e4421faabc3029aeac9f6f0d63d8d4a47a82ff26ff5391b10c1624db","ssdeep":"768:dB2EL/5+sNKlKMHLQTwkf0R6sYeLvLoK12G6FYc0C+Jf:dB2EV+aMHLQTwkf0bLDLoK12tFYNJN","tlshash":"e723fa5dbf92f006165f70b7376fa106b11a8c19680cd89cfa07fda46d68f05e837aa4","first_seen":"2026-01-06T02:53:22.845006Z","last_seen":"2026-01-06T02:53:22.845006Z","times_seen":1,"resource_available":true,"data":null}},"time_used":833,"timings":{"blocked":320,"dns":46,"connect":91,"send":0,"wait":97,"receive":91,"ssl":185},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"politicalpiano.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"politicalpiano.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"politicalpiano.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"politicalpiano.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loseimposeherself.com/ren.gif?sid=H4sIAAAAAAAC_4RTz4scRRSu2Qw5xINoxPMgUSK4s_1zdtocxDWuBGMSkkgOMUhVV_VOuT1VbVX39O6ejIEYPO3Bg3qx55vJbqJB4tGDEmZzCQHFEcQBsxf_ABEheJTZHVg9-Q7fe-_7-vC-16-u94td4qOgk3Nv6Q2ZpnQhbDqN45ek4rq0jTMXG67TdE40LknVCk401qZgei-7ftB0Xmy8IeJVveA5ruO4jttYlkYkem1hT4XM7kRuM3Kagdd0wwBr5r-9LeZg6Rx4b5c8DcnHT_6eXIaMR1DduyeFXc119tLr3SKluTbo8e231arSpUL3oExMDYnann0NbceEfDoHrbZnDqB7w6kDMDkmc88-AlPbszHBejf3J2UphALjT6DsjSDSESQdIdbXIPlPBIg5zpyF6m6d0aak6_sqnapjUn_8F2Q5JvVHz0B1v15K5Vrjgk6LXGplsZZUkGsjyJURsmKEfKMGWe4gzj-E5D-QhcenobrDszbVkHxyTCy2fMeli_NhJMR8EC0G8-2Et-dpFNKW6zI_FOHeimQyArVzKGwNhayhSGooshq6fNIInHYQu9RvJRGPF52ABgEXzInanuPQKF5EEV-F5JuIzfWtjHfy1d4wN4UYFiq2fffWPhVEe-TWlAyivnuneDdLvbDlB6EX9N3JMZWKmCftUDDGmR_47VZLuG0ecuGxVsK9wAui25fDKHB9172CzFy9xf1F4bM46DOsyk2Y4h5sp4LlNdicoMcrlIKgtAQlJSglQZkTlL3qJk-tZ6stntqCubPszbJfDXS-0qc3db4iFAE1mzC8GsrsfXsNcX5osJFYPtBToCyvBpTxqp_tkqemv7D20Qu_YVVMGv9nBlZWkHYO1NawIcdk-ee_kckxef7uAzC6A5vuIJaHQAsXtKxAOxU21OS5juiITsHmaWwL1_Ob2Xre0Yqq9bIjjGjGuguuK2R5Hfl6rZ_ukqOD8xeX7u0d2JVffoSIH5JZIDYVMlPhPXmfYCW9MTivSzI8r0tLvjmb5bIrN-j0-C7kNBeHv3xTrJfa8FMn7ebtV-OpMC3vXBQ2P00Vl2rFkq-WJOfCLGsTC_LdKXtJsHOF7SwVRhXZ6XOvLZ_qZkZYK7UagcoxOfLnx4jlmBz9_ou9hxUe_wNx9gFsdjCn1QQsqyOVBKk44CmrYP_Vs4O6b29gxdRB82tQ3Qo9U6GXVqDpJmxxZJBn5uErDz6bxudgaX3AUlMfstSkn4zJlV93pvDtFO7vr83KSSP0mN9qt1siafHE577n8yh0RBTQqBVEQYjcjuU764f_CQAA__-wu0_rCgUAAA==","fqdn":"loseimposeherself.com","domain":"loseimposeherself.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"loseimposeherself.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 08:12:24 GMT","end":"Thu, 19 Mar 2026 08:12:23 GMT"},"fingerprint":{"sha1":"B1:6B:EB:05:E0:5A:FE:EB:0E:C8:A3:8B:EC:61:8D:51:CD:8C:90:5B","sha256":"87:C6:97:CB:C2:A5:11:74:9B:43:AB:AB:6C:80:15:71:6F:DB:98:4D:C1:34:D2:A7:47:B5:D1:64:F6:AD:05:80"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_4RTz4scRRSu2Qw5xINoxPMgUSK4s_1zdtocxDWuBGMSkkgOMUhVV_VOuT1VbVX39O6ejIEYPO3Bg3qx55vJbqJB4tGDEmZzCQHFEcQBsxf_ABEheJTZHVg9-Q7fe-_7-vC-16-u94td4qOgk3Nv6Q2ZpnQhbDqN45ek4rq0jTMXG67TdE40LknVCk401qZgei-7ftB0Xmy8IeJVveA5ruO4jttYlkYkem1hT4XM7kRuM3Kagdd0wwBr5r-9LeZg6Rx4b5c8DcnHT_6eXIaMR1DduyeFXc119tLr3SKluTbo8e231arSpUL3oExMDYnann0NbceEfDoHrbZnDqB7w6kDMDkmc88-AlPbszHBejf3J2UphALjT6DsjSDSESQdIdbXIPlPBIg5zpyF6m6d0aak6_sqnapjUn_8F2Q5JvVHz0B1v15K5Vrjgk6LXGplsZZUkGsjyJURsmKEfKMGWe4gzj-E5D-QhcenobrDszbVkHxyTCy2fMeli_NhJMR8EC0G8-2Et-dpFNKW6zI_FOHeimQyArVzKGwNhayhSGooshq6fNIInHYQu9RvJRGPF52ABgEXzInanuPQKF5EEV-F5JuIzfWtjHfy1d4wN4UYFiq2fffWPhVEe-TWlAyivnuneDdLvbDlB6EX9N3JMZWKmCftUDDGmR_47VZLuG0ecuGxVsK9wAui25fDKHB9172CzFy9xf1F4bM46DOsyk2Y4h5sp4LlNdicoMcrlIKgtAQlJSglQZkTlL3qJk-tZ6stntqCubPszbJfDXS-0qc3db4iFAE1mzC8GsrsfXsNcX5osJFYPtBToCyvBpTxqp_tkqemv7D20Qu_YVVMGv9nBlZWkHYO1NawIcdk-ee_kckxef7uAzC6A5vuIJaHQAsXtKxAOxU21OS5juiITsHmaWwL1_Ob2Xre0Yqq9bIjjGjGuguuK2R5Hfl6rZ_ukqOD8xeX7u0d2JVffoSIH5JZIDYVMlPhPXmfYCW9MTivSzI8r0tLvjmb5bIrN-j0-C7kNBeHv3xTrJfa8FMn7ebtV-OpMC3vXBQ2P00Vl2rFkq-WJOfCLGsTC_LdKXtJsHOF7SwVRhXZ6XOvLZ_qZkZYK7UagcoxOfLnx4jlmBz9_ou9hxUe_wNx9gFsdjCn1QQsqyOVBKk44CmrYP_Vs4O6b29gxdRB82tQ3Qo9U6GXVqDpJmxxZJBn5uErDz6bxudgaX3AUlMfstSkn4zJlV93pvDtFO7vr83KSSP0mN9qt1siafHE577n8yh0RBTQqBVEQYjcjuU764f_CQAA__-wu0_rCgUAAA== HTTP/1.1\r\nHost: loseimposeherself.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl25634524=1; nlecdf85ebbdb343866e18d5de2b6fd24249=[5941311]; uid_id2=e76301a7-59ee-4974-8fd8-a95a611b35e5:2:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:54 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: loseimposeherself.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 7a71e759e51ac1d05afb55971c050e64\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":308,"timings":{"blocked":212,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"loseimposeherself.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loseimposeherself.com/impr.gif?sid=H4sIAAAAAAAC_4RTzYsc1Rd9PRmyyG_xQyOuG4mi4vRUdVV1d5mFOMaRYExCEskiBnlfNf2c6vfK96q6ZmZlDMTgahYu1I3VpzsziQaJSxdK6MkmBBRbEBvMbPwLRAgupScDoyvv4n6cU4t7Tt13bVDskgAFnZ59y2yoNKWLUcOrP39RaWFKVz99oe57De94_aLSrfB4fW2WbP9lPwgb3gv1NyRfNYtNz_c83_Pry8rKxKwt7rFQ2e3Yb8ReI2w2_CjEmv337Io5ODoH0d8lT0KJyf9_Ty5B8TF0784J6VZzk730eq9IaW4s-mL7bb2qTanRO2gTW0Oit_e_hnETQj6dg9Hb-wpg-qOZAjA1IXNPPwTT2_trgvVvPN6UpZAaTPwPZX8MmY6h6BjcXIUSPxGAC5w-A93bOm1sSdcfs3TGTsj8oz-hygmZf_gUdO_rpVSt1c-btMiV0Q5rSQW1NoZaGSMrxsg3alDlDnj-IZT4gSw-OgXdG51xqYES02Oy3Qo8n7YXoljKhTBuhwudRHQWaBzRlu-zIJLRnkUqGYO6ORSuhkLVUCQ1FFkNPTGth14n5D4NWkkseNsLaRgKyby40_Q8GvM2Cn4FSmyC22tbmejmq_1Rbgs5KjR3A__mYyiM98CtGRjGA_928W6WNqNWEEbNcOBPj-lUcpF0IsmYYEEYdFot6XdEJGSTtRLRDJthfOtSFId-4PuXkdkrN0XQlgHj4YBhVW3CFnfhuhWcqMHlBH1RoZQEpSMoKUGpCMqcoOxXN0Tqmq7aEqkrmL9fm_s1qIYmXxnQGyZfkZqA2k1YUY1U9r67Cp4fGm4kTgzNLFGWV0PKRDXIdskTs19Y--i537Aqp_X_EgOnKig3B-pq2FATsvzzX8jUhDx75z4Y3YFLd8DVIdDCBy0r0G6FDT19piu7sluwBcpd4TeDRraed42mer3sSisb3PQgTIUsn0e-Xhuku-To8NyFpbt7B3b5128h-QOyH-C2QmYrvKfuEayk14fnTElG50zpyDdnslz11AadHd_5nOby8JdvyvXSWHHyhNu89SqfEbP29gXp8lNUC6VXHPlqSQkh7bKxXJLvTrqLkp0tXHepsLrITp19bflkL7PSOWX0GFRNyJE_PgZXE3L0-y_2Hlb04hQ8-wAuO9jTGQKWzSFVBKk8wCmr4P4xs4N-4K5jxc6D5lehexX6tkI_rUDTTbjiyDDP7INX7n82i8_B0vkhS-38iKU2_WTm086eWbN0b0Iu__IjnJrWk0A2ued12i0_6CTSD0LBk6gTxqJFvSCQyN1EvbN--O8AAAD__0BDDDYKBQAA","fqdn":"loseimposeherself.com","domain":"loseimposeherself.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"loseimposeherself.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 08:12:24 GMT","end":"Thu, 19 Mar 2026 08:12:23 GMT"},"fingerprint":{"sha1":"B1:6B:EB:05:E0:5A:FE:EB:0E:C8:A3:8B:EC:61:8D:51:CD:8C:90:5B","sha256":"87:C6:97:CB:C2:A5:11:74:9B:43:AB:AB:6C:80:15:71:6F:DB:98:4D:C1:34:D2:A7:47:B5:D1:64:F6:AD:05:80"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_4RTzYsc1Rd9PRmyyG_xQyOuG4mi4vRUdVV1d5mFOMaRYExCEskiBnlfNf2c6vfK96q6ZmZlDMTgahYu1I3VpzsziQaJSxdK6MkmBBRbEBvMbPwLRAgupScDoyvv4n6cU4t7Tt13bVDskgAFnZ59y2yoNKWLUcOrP39RaWFKVz99oe57De94_aLSrfB4fW2WbP9lPwgb3gv1NyRfNYtNz_c83_Pry8rKxKwt7rFQ2e3Yb8ReI2w2_CjEmv337Io5ODoH0d8lT0KJyf9_Ty5B8TF0784J6VZzk730eq9IaW4s-mL7bb2qTanRO2gTW0Oit_e_hnETQj6dg9Hb-wpg-qOZAjA1IXNPPwTT2_trgvVvPN6UpZAaTPwPZX8MmY6h6BjcXIUSPxGAC5w-A93bOm1sSdcfs3TGTsj8oz-hygmZf_gUdO_rpVSt1c-btMiV0Q5rSQW1NoZaGSMrxsg3alDlDnj-IZT4gSw-OgXdG51xqYES02Oy3Qo8n7YXoljKhTBuhwudRHQWaBzRlu-zIJLRnkUqGYO6ORSuhkLVUCQ1FFkNPTGth14n5D4NWkkseNsLaRgKyby40_Q8GvM2Cn4FSmyC22tbmejmq_1Rbgs5KjR3A__mYyiM98CtGRjGA_928W6WNqNWEEbNcOBPj-lUcpF0IsmYYEEYdFot6XdEJGSTtRLRDJthfOtSFId-4PuXkdkrN0XQlgHj4YBhVW3CFnfhuhWcqMHlBH1RoZQEpSMoKUGpCMqcoOxXN0Tqmq7aEqkrmL9fm_s1qIYmXxnQGyZfkZqA2k1YUY1U9r67Cp4fGm4kTgzNLFGWV0PKRDXIdskTs19Y--i537Aqp_X_EgOnKig3B-pq2FATsvzzX8jUhDx75z4Y3YFLd8DVIdDCBy0r0G6FDT19piu7sluwBcpd4TeDRraed42mer3sSisb3PQgTIUsn0e-Xhuku-To8NyFpbt7B3b5128h-QOyH-C2QmYrvKfuEayk14fnTElG50zpyDdnslz11AadHd_5nOby8JdvyvXSWHHyhNu89SqfEbP29gXp8lNUC6VXHPlqSQkh7bKxXJLvTrqLkp0tXHepsLrITp19bflkL7PSOWX0GFRNyJE_PgZXE3L0-y_2Hlb04hQ8-wAuO9jTGQKWzSFVBKk8wCmr4P4xs4N-4K5jxc6D5lehexX6tkI_rUDTTbjiyDDP7INX7n82i8_B0vkhS-38iKU2_WTm086eWbN0b0Iu__IjnJrWk0A2ued12i0_6CTSD0LBk6gTxqJFvSCQyN1EvbN--O8AAAD__0BDDDYKBQAA HTTP/1.1\r\nHost: loseimposeherself.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl25634524=1; nlecdf85ebbdb343866e18d5de2b6fd24249=[5941311]; uid_id2=e76301a7-59ee-4974-8fd8-a95a611b35e5:2:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:54 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: loseimposeherself.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 47881fba2f6d15a6022950e60d720487\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":307,"timings":{"blocked":211,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"loseimposeherself.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/default/robot/4/css/style.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"172.67.210.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:26:15 GMT","end":"Wed, 25 Mar 2026 23:23:44 GMT"},"fingerprint":{"sha1":"05:E7:A3:19:D2:55:91:F8:B7:45:48:72:0B:86:C7:0C:2C:CA:27:03","sha256":"14:76:91:36:84:B6:CF:C4:0A:BA:6F:14:80:F9:C7:77:48:3B:08:A3:C8:48:DC:0F:F6:CE:86:72:BB:CC:0B:06"}}},"request":{"raw":"GET /sb/notifications/utility/default/robot/4/css/style.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hehehub-acsu123.pythonanywhere.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 02:52:55 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Oct 2025 11:45:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68e64ebf-1b60\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uqaECh4k%2BvWr0xSfY49mV46DdxNOBNKXEkwM37wm2hygvCsrFYx0dnxuJFKiBfF1djRayhq0LaN7zLJ7WUMFimrsZzGK8irOLgDOKgkct1I%3D\"}]}\r\ncf-ray: 9b97ec0b9cc10731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7008,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"fb36710663e1b1cea266cd22469df0a5","sha1":"c26947d20f845e479a729880b019b94387a7572c","sha256":"489b7a8da57bff7e1700ef24006bbb60451f933c6c12b4808b251db88355fdf2","sha512":"49de21e634ae6383567bedd988764c685f2c0dfb09b2489b453fc06c1849804d3717b2aff972c54f285573435d0334d37e0c728cdb122b8c6aabf964036be701","ssdeep":"192:fMFIn7CSiyXnMsWM0kFRxX4zb32l0QofZ:fM9TyXnMrcF7E32l0RZ","tlshash":"c6e1109617a80204b50bd86739126f5767688043ef0fdab86ed1205c9eca6ce56f378f","first_seen":"2025-07-04T18:28:09.299693Z","last_seen":"2026-07-13T11:35:46.362887Z","times_seen":1492,"resource_available":false,"data":null}},"time_used":542,"timings":{"blocked":25,"dns":2,"connect":4,"send":0,"wait":491,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/default/robot/4/js/jquery.min.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"172.67.210.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:55.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:26:15 GMT","end":"Wed, 25 Mar 2026 23:23:44 GMT"},"fingerprint":{"sha1":"05:E7:A3:19:D2:55:91:F8:B7:45:48:72:0B:86:C7:0C:2C:CA:27:03","sha256":"14:76:91:36:84:B6:CF:C4:0A:BA:6F:14:80:F9:C7:77:48:3B:08:A3:C8:48:DC:0F:F6:CE:86:72:BB:CC:0B:06"}}},"request":{"raw":"GET /sb/notifications/utility/default/robot/4/js/jquery.min.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 02:52:55 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Oct 2025 11:45:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SpQ45usv9TeTcW7RrWmdy0SB0GtMp9wha9DLqmKCYYW2QzXLwZqcpM2AIDTxEj5A0s9NUL11pno7fdGb7OgPV8TLrb8W796Xv66ZDQS%2BdEI%3D\"}]}\r\nage: 3969849\r\ncf-cache-status: HIT\r\netag: W/\"68e64ec4-149a0\"\r\ncontent-encoding: br\r\ncf-ray: 9b97ec0c3d4a0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84384,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025), with CRLF line terminators","md5":"6326c600df01e3bfb9b40e1aa08176f8","sha1":"6b4fb754d29b297b539bf62ba9b4eaf0f33f314a","sha256":"df34524351c5fabc921a89183b5da5667aebd7b9e9a1c52255c76ff722935ea3","sha512":"641aaeecb9b89bcc319cabfef18f76faa9b1ba79f9de30c6d07f22d385fc78ac3f11a718fe9ec96f8a13d82e3dff4ca34944ccb449a4ef8e378ad65dfad581c0","ssdeep":"1536:oP10iSi65U/dXXeyhzeBuG+HYE0mdDuJO1z6Oy4sh3J1x72BjmN7TwpDKba98Hri:f+41hJiz6fhdlTqya98Hri","tlshash":"eb83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","first_seen":"2023-03-07T01:10:11Z","last_seen":"2026-07-17T07:25:57.177946Z","times_seen":12748,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loseimposeherself.com/53/23/86/5323869a8beda1d7db01e9c875b2f49f.js","fqdn":"loseimposeherself.com","domain":"loseimposeherself.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:53.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"loseimposeherself.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 08:12:24 GMT","end":"Thu, 19 Mar 2026 08:12:23 GMT"},"fingerprint":{"sha1":"B1:6B:EB:05:E0:5A:FE:EB:0E:C8:A3:8B:EC:61:8D:51:CD:8C:90:5B","sha256":"87:C6:97:CB:C2:A5:11:74:9B:43:AB:AB:6C:80:15:71:6F:DB:98:4D:C1:34:D2:A7:47:B5:D1:64:F6:AD:05:80"}}},"request":{"raw":"GET /53/23/86/5323869a8beda1d7db01e9c875b2f49f.js HTTP/1.1\r\nHost: loseimposeherself.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:54 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3403\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: loseimposeherself.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 69d9b5433693bfd21f371683c70900fc\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6454,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6454), with no line terminators","md5":"81c010ddfde2faeaf1c598844287df5a","sha1":"cd0fb06af4d1e8878a8c2c8d0311892ef13ff47b","sha256":"44442357bcab05b20364ed17aae2a3ae173b906529612b0e2f7d2217a76e51ab","sha512":"0acadda1dc3bba9f6178ba54356f2aed3dba23fbaf3b53b683fc5dd78eeff47a63ec7815ffbdb1e07041b274646eaa0a71ada2500f181775833f40761fc7cac8","ssdeep":"96:A9+XCx+8Ixmzn2ySej3zqIDNcxE6204l4sNm+E/0NK4Amfnqkk7lDAP2CwU6:A6Cg/S2yPXXWxW04fNPw6K4Amf4DAPA","tlshash":"13d1859c3e80b0a057b26077b97fa019b3696c50657fd80cd012b1a03e7562ad9bbba5","first_seen":"2025-12-01T12:09:20.892186Z","last_seen":"2026-01-29T12:50:40.978548Z","times_seen":4063,"resource_available":true,"data":null}},"time_used":400,"timings":{"blocked":-1,"dns":20,"connect":94,"send":0,"wait":96,"receive":0,"ssl":190},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"loseimposeherself.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/d6/39/0a/d6390af0b4f58d3725cd01a19abacd3a/1756661987.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:33:02 GMT","end":"Thu, 05 Feb 2026 02:33:01 GMT"},"fingerprint":{"sha1":"FF:BB:C7:F6:31:A3:EE:08:8E:72:C4:2F:A2:C8:78:1B:3C:22:C4:57","sha256":"93:BE:65:88:B5:AC:E6:69:91:EE:F6:7E:27:3F:D6:9F:59:B1:AB:46:F7:49:0D:E8:F2:1C:9E:A9:BE:F9:B6:95"}}},"request":{"raw":"GET /cti/d6/39/0a/d6390af0b4f58d3725cd01a19abacd3a/1756661987.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 02:52:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 93518\r\nserver: nginx/1.21.6\r\nlast-modified: Sun, 31 Aug 2025 17:39:48 GMT\r\netag: \"68b488e4-16d4e\"\r\nexpires: Thu, 08 Jan 2026 02:52:54 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93518,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.3 (Macintosh), datetime=2025:08:30 15:25:00], progressive, precision 8, 320x240, components 3","md5":"c68d4f79a76b758c2624caba8892164b","sha1":"f5fbfbc14fea8c9b05a962b395ff854517c333fe","sha256":"19e1f4a3d8aa639cc69911d4c6bc713497f0936330c1fc4539ca2dade4eeb6af","sha512":"ef6f997a9bfe1a208b4c54ba2f7d732f19348df16b73cc73a7628d190fe456aba0ec1d87993daefa127cd8f093cca3ca7cc2c49c4c4a8017f20d0c79badff1e1","ssdeep":"1536:BGfG/zbP01UpLKf55/FiVhLgNa1qiokfY89PqoPt48z:BGfGbT018L+9iVhLr1qiBw89PJJz","tlshash":"4d93f23bb6a2db21f5e4563886fbe79503b30e68ae3701503ccdb6d4b7a64c31999407","first_seen":"2025-09-02T18:13:44.321498Z","last_seen":"2026-05-24T06:06:45.014164Z","times_seen":1394,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":83,"connect":23,"send":0,"wait":58,"receive":32,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/f0/fb/23/f0fb231c3868f7f970a30d973f7bfa93/1756662127.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:33:02 GMT","end":"Thu, 05 Feb 2026 02:33:01 GMT"},"fingerprint":{"sha1":"FF:BB:C7:F6:31:A3:EE:08:8E:72:C4:2F:A2:C8:78:1B:3C:22:C4:57","sha256":"93:BE:65:88:B5:AC:E6:69:91:EE:F6:7E:27:3F:D6:9F:59:B1:AB:46:F7:49:0D:E8:F2:1C:9E:A9:BE:F9:B6:95"}}},"request":{"raw":"GET /cti/f0/fb/23/f0fb231c3868f7f970a30d973f7bfa93/1756662127.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 02:52:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 81446\r\nserver: nginx/1.21.6\r\nlast-modified: Sun, 31 Aug 2025 17:42:07 GMT\r\netag: \"68b4896f-13e26\"\r\nexpires: Thu, 08 Jan 2026 02:52:54 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":81446,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.3 (Macintosh), datetime=2025:08:30 15:39:09], progressive, precision 8, 320x240, components 3","md5":"5cc1ea1ae22514d2a4e634a3fc00fc38","sha1":"17a827b9ae082506fe9d086fd2d006d0593ae5e8","sha256":"2a7d63fc873f793b91adea7c866b01e00bb59f075fc29953fd108f52fb5ede09","sha512":"9b57eb1e4bf4668182319d2f0bfa356c766de2afe94f188dc84054140014267d1f1ad0cf81b91421d88cdba16a9ad51b8acc87b9540c93c523bd66dd444304b5","ssdeep":"1536:LNkk6f2Nkk6fvhbg2DyMgTuF+faDypx3cvkYWMwjYz8+HjFOn:LZk2ZkJb+XTuF80sYWnYz8MjFQ","tlshash":"c183e125b3d1efb2e5d8973498a3c719f6219e45673760913e8db5a03fe2361da8c023","first_seen":"2025-09-02T19:18:23.934309Z","last_seen":"2026-07-16T02:44:51.111713Z","times_seen":1464,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loseimposeherself.com/ren.gif?sid=H4sIAAAAAAAC_4RTz4scRRSu2Sw5xINoxPMgUVTc2f45O20O4hpXgjEJSSSHGKSqq3qn3J6qtqp7endPxkAMnvbgQb3Y881kN9Eg8Q8whFkRQkBwvDhg9iJ4FyF4lN4MrJ58h--99319eN_rV9cGxR7xUdDp2Xf0pkxTuhi2nOaLF6XiurTN0xeartNyjjcvStUOjjfXazD9V10_aDkvNd8S8Zpe9BzXcVzHba5IIxK9vrivQma3I7cVOa3Aa7lhgHXz394Wc7B0Dry_R56G5JMnf08uQcZjqN6dE8Ku5Tp75c1ekdJcG_T5zrtqTelSoXdQJqaBRO3Mvoa2E0I-n4NWOzMH0P1R7QBMTsjcsw_B1M5sTLD-jceTshRCgfEnUPbHEOkYko4R66uQ_GcCxBynz0D1tk9rU9KNxyqt1QmZf_QXZDkh8w-fgep9u5zK9eZ5nRa51MpiPakg18eQq2NkxRj5ZgOy3EWcfwzJfyKLj05B9UZnbKoh-fSYWGr7jkuXFsJIiIUgWgoWOgnvLNAopG3XZX4owv0VyWQMaudQ2AYK2UCRNFBkDfT4tBk4nSB2qd9OIh4vOQENAi6YE3U8x6FRvIQivgLJtxCba9sZ7-Zr_VFuCjEqVGwH7s3HVBDtk9s1GUQD93bxfpZ6YdsPQi8YuNNjKhUxTzqhYIwzP_A77bZwOzzkwmPthHuBF0S3LoVR4PquexmZuXKT-0vCZ3EwYFiTWzDFPdhuBcsbsDlBn1coBUFpCUpKUEqCMico-9UNnlrPVts8tQVzZ9mbZb8a6nx1QG_ofFUoAmq2YHg1ktmH9iri_NBwM7F8qGugLK-GlPFqkO2Rp-pf2Pjkhd-wJqbN_zMDKytIOwdqG9iUE7Lyy9_I5IQ8f-c-GN2FTXcRy0OghQtaVqDdCptq-lxXdEW3YAs0toXr-a1sI-9qRdVG2RVGtGLdA9cVsnwe-UZjkO6Ro8NzF5bv7R_Y5V9_hIgfkFkgNhUyU-ED-QPBanp9eE6XZHROl5Z8dybLZU9u0vr4zuc0F4e_fltslNrwkyfs1q3X41qoy9sXhM1PUcWlWrXkm2XJuTAr2sSCfH_SXhTsbGG7y4VRRXbq7BsrJ3uZEdZKrcagckKO_PkpYjkhR-9-tf-wwpf_QJx9BJsdzGk1AcsaSCVBKg54yirYf_XsoB7Y61g186D5Vahehb6p0E8r0HQLtjgyzDPz4LX7X9TxJVg6P2SpmR-x1KSf7e-phnENd2vYhZXTZugxv93ptEXS5onPfc_nUeiIKKBRO4iCELmdyPc2Dv8TAAD__1_LjNQKBQAA","fqdn":"loseimposeherself.com","domain":"loseimposeherself.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"loseimposeherself.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 08:12:24 GMT","end":"Thu, 19 Mar 2026 08:12:23 GMT"},"fingerprint":{"sha1":"B1:6B:EB:05:E0:5A:FE:EB:0E:C8:A3:8B:EC:61:8D:51:CD:8C:90:5B","sha256":"87:C6:97:CB:C2:A5:11:74:9B:43:AB:AB:6C:80:15:71:6F:DB:98:4D:C1:34:D2:A7:47:B5:D1:64:F6:AD:05:80"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_4RTz4scRRSu2Sw5xINoxPMgUVTc2f45O20O4hpXgjEJSSSHGKSqq3qn3J6qtqp7endPxkAMnvbgQb3Y881kN9Eg8Q8whFkRQkBwvDhg9iJ4FyF4lN4MrJ58h--99319eN_rV9cGxR7xUdDp2Xf0pkxTuhi2nOaLF6XiurTN0xeartNyjjcvStUOjjfXazD9V10_aDkvNd8S8Zpe9BzXcVzHba5IIxK9vrivQma3I7cVOa3Aa7lhgHXz394Wc7B0Dry_R56G5JMnf08uQcZjqN6dE8Ku5Tp75c1ekdJcG_T5zrtqTelSoXdQJqaBRO3Mvoa2E0I-n4NWOzMH0P1R7QBMTsjcsw_B1M5sTLD-jceTshRCgfEnUPbHEOkYko4R66uQ_GcCxBynz0D1tk9rU9KNxyqt1QmZf_QXZDkh8w-fgep9u5zK9eZ5nRa51MpiPakg18eQq2NkxRj5ZgOy3EWcfwzJfyKLj05B9UZnbKoh-fSYWGr7jkuXFsJIiIUgWgoWOgnvLNAopG3XZX4owv0VyWQMaudQ2AYK2UCRNFBkDfT4tBk4nSB2qd9OIh4vOQENAi6YE3U8x6FRvIQivgLJtxCba9sZ7-Zr_VFuCjEqVGwH7s3HVBDtk9s1GUQD93bxfpZ6YdsPQi8YuNNjKhUxTzqhYIwzP_A77bZwOzzkwmPthHuBF0S3LoVR4PquexmZuXKT-0vCZ3EwYFiTWzDFPdhuBcsbsDlBn1coBUFpCUpKUEqCMico-9UNnlrPVts8tQVzZ9mbZb8a6nx1QG_ofFUoAmq2YHg1ktmH9iri_NBwM7F8qGugLK-GlPFqkO2Rp-pf2Pjkhd-wJqbN_zMDKytIOwdqG9iUE7Lyy9_I5IQ8f-c-GN2FTXcRy0OghQtaVqDdCptq-lxXdEW3YAs0toXr-a1sI-9qRdVG2RVGtGLdA9cVsnwe-UZjkO6Ro8NzF5bv7R_Y5V9_hIgfkFkgNhUyU-ED-QPBanp9eE6XZHROl5Z8dybLZU9u0vr4zuc0F4e_fltslNrwkyfs1q3X41qoy9sXhM1PUcWlWrXkm2XJuTAr2sSCfH_SXhTsbGG7y4VRRXbq7BsrJ3uZEdZKrcagckKO_PkpYjkhR-9-tf-wwpf_QJx9BJsdzGk1AcsaSCVBKg54yirYf_XsoB7Y61g186D5Vahehb6p0E8r0HQLtjgyzDPz4LX7X9TxJVg6P2SpmR-x1KSf7e-phnENd2vYhZXTZugxv93ptEXS5onPfc_nUeiIKKBRO4iCELmdyPc2Dv8TAAD__1_LjNQKBQAA HTTP/1.1\r\nHost: loseimposeherself.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl25634524=1; nlecdf85ebbdb343866e18d5de2b6fd24249=[5941311]; uid_id2=e76301a7-59ee-4974-8fd8-a95a611b35e5:2:1; iprc_l+b9a0dfe34c8114f1d5a734fcb9221aeb=5941311; iprc_l:5941311=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:54 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: loseimposeherself.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: d3d78e3355b209fdd82951ac5e1858f0\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":149,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"loseimposeherself.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"35.156.32.205","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:53.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"traffinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Fri, 18 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"11:9F:BE:35:27:7B:7B:85:C9:B3:FF:0E:CA:F6:0D:13:B0:A9:A0:BB","sha256":"81:A4:38:32:0D:BC:66:C8:7B:6D:08:BC:93:91:76:73:A2:BD:D0:53:3C:BF:2F:FD:B8:87:00:C6:EC:3B:6C:77"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hehehub-acsu123.pythonanywhere.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 02:52:53 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://hehehub-acsu123.pythonanywhere.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=e76301a7-59ee-4974-8fd8-a95a611b35e5:2:1; expires=Fri, 04 Jan 2036 02:52:53 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5c9357da0b8fa1d89f8499357cc75259","sha1":"ed67b5ad188879848aeb72b4b17cad04d6fefcf0","sha256":"0c3b8a993650522026b698c81ab9f1835ef9e2df347c9903394ccec490a8568f","sha512":"58adac423fd9ba4d30686c04b4b699ac285e56f8ca5b75dcf52a0de5223ee31f63417ea18c1cdfcba6c0d479707181159cdbcb8f93d912675c789a4782441a8c","ssdeep":"","tlshash":"ec9004570134f003c4517fc307c703d110501407557545cc0d557d010330344075130d","first_seen":"2026-01-06T02:53:22.851351Z","last_seen":"2026-01-06T02:53:22.851351Z","times_seen":1,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":1,"connect":21,"send":0,"wait":21,"receive":0,"ssl":218},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loseimposeherself.com/ntv.json?key=df85ebbdb343866e18d5de2b6fd24249\u0026vstc=4\u0026uuid=e76301a7-59ee-4974-8fd8-a95a611b35e5%3A2%3A1\u0026custom=%7B%22d37e3bc4%22%3A%22b%22%7D\u0026rb=","fqdn":"loseimposeherself.com","domain":"loseimposeherself.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"loseimposeherself.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 08:12:24 GMT","end":"Thu, 19 Mar 2026 08:12:23 GMT"},"fingerprint":{"sha1":"B1:6B:EB:05:E0:5A:FE:EB:0E:C8:A3:8B:EC:61:8D:51:CD:8C:90:5B","sha256":"87:C6:97:CB:C2:A5:11:74:9B:43:AB:AB:6C:80:15:71:6F:DB:98:4D:C1:34:D2:A7:47:B5:D1:64:F6:AD:05:80"}}},"request":{"raw":"GET /ntv.json?key=df85ebbdb343866e18d5de2b6fd24249\u0026vstc=4\u0026uuid=e76301a7-59ee-4974-8fd8-a95a611b35e5%3A2%3A1\u0026custom=%7B%22d37e3bc4%22%3A%22b%22%7D\u0026rb= HTTP/1.1\r\nHost: loseimposeherself.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hehehub-acsu123.pythonanywhere.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl25634524=1; nlecdf85ebbdb343866e18d5de2b6fd24249=[5941311]\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:54 GMT\r\nContent-Type: application/json\r\nContent-Length: 13209\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://hehehub-acsu123.pythonanywhere.com\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=e76301a7-59ee-4974-8fd8-a95a611b35e5:2:1; expires=Tue, 13 Jan 2026 02:52:54 GMT; path=/; secure; SameSite=None\nuncs=2; expires=Wed, 07 Jan 2026 02:52:54 GMT; path=/; secure; SameSite=None\nuncs49=2; expires=Wed, 07 Jan 2026 02:52:54 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 21\r\nHost: loseimposeherself.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 02918c938da69c61f951d2d03a61e3d9\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17295,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0a3e0bf05098487e9a98fa0c24f7a357","sha1":"3909e2d8d69227e5b24fb596454363397dd6a7ab","sha256":"e3b59378c667060e57193f377b461c3e8ab0586f33c978ac8fa3c6d89f4280e6","sha512":"a1b373c73e2fe32e2cc028f7c96dfcdcd511a377f2985d67d0ec052bb24c082d763574413b290af3b2009dce03ce66fef22e761b276bc9213b10e2472b8a7328","ssdeep":"384:BlMw3J9d6PGqOHjob+Ja3ObIC8HRTQjqir5DQrOEQ1SCcnSUPUzwlGPPj+y:BlMw3TdGCDobcaebj8x8BErOonSUPq4E","tlshash":"0f72b0fc210e86dd2635be09409b161f6d55b21f12aaef0aeeefe20d2e082f55235d54","first_seen":"2026-01-06T02:53:22.853745Z","last_seen":"2026-01-06T02:53:22.853745Z","times_seen":1,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"loseimposeherself.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/sbar.json?key=e02ee106ac9f7f9a067c81c19bdc3c60\u0026uuid=e3fc7a49-8f00-4fdd-bc32-5e9b197e91d0%3A3%3A1","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 00:50:13 GMT","end":"Sun, 29 Mar 2026 00:50:12 GMT"},"fingerprint":{"sha1":"B6:89:38:EE:EF:1E:F1:A0:93:51:BB:7A:F2:13:F5:DF:8C:9B:8F:F7","sha256":"74:22:2C:3F:1E:A6:04:C8:AD:7C:D8:B4:13:57:A5:95:EF:83:FA:28:18:BC:F3:BD:38:93:CB:DA:4B:30:3F:8A"}}},"request":{"raw":"GET /sbar.json?key=e02ee106ac9f7f9a067c81c19bdc3c60\u0026uuid=e3fc7a49-8f00-4fdd-bc32-5e9b197e91d0%3A3%3A1 HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hehehub-acsu123.pythonanywhere.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:54 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 4424\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://hehehub-acsu123.pythonanywhere.com\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=e3fc7a49-8f00-4fdd-bc32-5e9b197e91d0:3:1; expires=Tue, 13 Jan 2026 02:52:54 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Wed, 07 Jan 2026 02:52:54 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Wed, 07 Jan 2026 02:52:54 GMT; path=/; secure; SameSite=None\npdhtkv29=true; expires=Wed, 07 Jan 2026 02:52:54 GMT; path=/; secure; SameSite=None\nuncs29=1; expires=Wed, 07 Jan 2026 02:52:54 GMT; path=/; secure; SameSite=None\nu_pl25634495=1; expires=Wed, 07 Jan 2026 02:52:54 GMT; path=/; secure; SameSite=None\nslece02ee106ac9f7f9a067c81c19bdc3c60=[6293536]; expires=Tue, 06 Jan 2026 02:52:59 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 212\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 76248f0cbe1b81f89c8d76a36afa0cce\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":5695,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"a49551f355dcc54b3ac939aa4d15ac11","sha1":"77e92df187497b5b3c9a4303a10cd5c9c98b45cb","sha256":"e34a842e73b09722491610c3d17c1f9210237c986bad4e3539bb7d8eef07c14c","sha512":"72db109d99d49e8107fbc5e765db20cc2a306a14c3dea6c9dd26b020288ac1f6edf501728c6897a0034dd4cc7dfe4f1888f457bad14644f95b858af11c7bf1bb","ssdeep":"96:9z4tcJ342SH6+QWAfDaJ+1aJYNIgc9fD8STwVIG66lc8BR8AQwKU/2lXAqe7S4ys:9z2cJo2F+tAfg+1a79gSMVZlbBRAlU/P","tlshash":"59c17e6e2d4aa1d747d50e9e58080d7c7e880cdf5b70d905c19d5aff6f358241bd52c2","first_seen":"2026-01-06T02:53:22.855844Z","last_seen":"2026-01-06T02:53:22.855844Z","times_seen":1,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":323,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/si/d8/b1/09/d8b109165fc0ec08002c14fd9e81f6ece67b955e786b918b73abb33e5be5188f.png","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:33:02 GMT","end":"Thu, 05 Feb 2026 02:33:01 GMT"},"fingerprint":{"sha1":"FF:BB:C7:F6:31:A3:EE:08:8E:72:C4:2F:A2:C8:78:1B:3C:22:C4:57","sha256":"93:BE:65:88:B5:AC:E6:69:91:EE:F6:7E:27:3F:D6:9F:59:B1:AB:46:F7:49:0D:E8:F2:1C:9E:A9:BE:F9:B6:95"}}},"request":{"raw":"GET /si/d8/b1/09/d8b109165fc0ec08002c14fd9e81f6ece67b955e786b918b73abb33e5be5188f.png HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 02:52:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 57237\r\nserver: nginx/1.21.6\r\nlast-modified: Sun, 11 May 2025 14:02:30 GMT\r\netag: \"6820adf6-df95\"\r\nexpires: Thu, 08 Jan 2026 02:52:54 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57237,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 320 x 240, 8-bit/color RGBA, non-interlaced","md5":"423a240fbfb182d7805dad3bb9e822bb","sha1":"6a853689b2cc95a6c36b98e6938e598bf2a28d52","sha256":"da19475c70c6669a83473eb52dec1feb61e629e374fdd426dd02024080d0b1a6","sha512":"98e063f429420821aa55688891aa4426d16d9e7ffa44f92f8d9d7f3e3870007872a66a718185428f197db14d070b7254e92a2cc7734cc54c39034c808daa7c8f","ssdeep":"1536:BP5oFAaPeX990yL036TelNvY6lEFLXmLw2JR:FWqaPeXz0yLDe7luXyH","tlshash":"ab430224ff03e61784be24af91eae88f1f6421bfb5b092807770221445b7c6b4282463","first_seen":"2025-05-16T16:44:08.672031Z","last_seen":"2026-07-17T07:58:02.757329Z","times_seen":4285,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":147,"dns":0,"connect":0,"send":0,"wait":57,"receive":23,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/59/8c/2f/598c2f373d6812e269996af23a7f78f1/1756661784.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:33:02 GMT","end":"Thu, 05 Feb 2026 02:33:01 GMT"},"fingerprint":{"sha1":"FF:BB:C7:F6:31:A3:EE:08:8E:72:C4:2F:A2:C8:78:1B:3C:22:C4:57","sha256":"93:BE:65:88:B5:AC:E6:69:91:EE:F6:7E:27:3F:D6:9F:59:B1:AB:46:F7:49:0D:E8:F2:1C:9E:A9:BE:F9:B6:95"}}},"request":{"raw":"GET /cti/59/8c/2f/598c2f373d6812e269996af23a7f78f1/1756661784.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 02:52:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 69386\r\nserver: nginx/1.21.6\r\nlast-modified: Sun, 31 Aug 2025 17:36:25 GMT\r\netag: \"68b48819-10f0a\"\r\nexpires: Thu, 08 Jan 2026 02:52:54 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69386,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.3 (Macintosh), datetime=2025:08:30 15:08:08], progressive, precision 8, 320x240, components 3","md5":"5f7d286b0003d4c7114958bcfe2f5ddf","sha1":"49b578a264b391002192798301ff8130b3108bf8","sha256":"7f80c6088ea177b9fbfb0fd5e735477bd378811eb55f182c289cc9cb89241bb8","sha512":"91e7dc2ad002a97a2f968877a5b5b5b78eca1dc130e71670d8ca459c7a79fa0f9d4bc497d21ba8863548aec29aac61191c7bd1ae6e688e2e34ff5a0ffca6c653","ssdeep":"1536:PiE1WE1irjUPrAimkKnW0ChT00A9ctznHDqDd0:P1j1EHimTnwhTAUHDMd0","tlshash":"fe6301269b919c33e0f84d74ed54dfa37712bca8e7c34a017d6d3a16a760289ec4819f","first_seen":"2025-09-02T18:13:44.375856Z","last_seen":"2026-05-24T21:20:22.539331Z","times_seen":1386,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/impr.gif?sid=H4sIAAAAAAAC_1STz4scRRTHq7MhBz2IRvQ6iAEVd7a6qqe72hzENa4EYxKSSA7qoX7ulNvT1XZ1T-_OKRrQ4EHWm9563-xmUUOI4FUJs14kEMjk4hyyF_8CEYJHmc3C6ju8H_Wpw_cV3_piq95HFGo-u_i-G9ks40u9Lu68ctXmyjW-c_5KJ8RdfLpz1eZxdLqzPk_l8I2QRl38auddLdfcEsEhxiEOOyu21MatLx1QsMWtNOymuBuRbtiLYL38_-zrADwPQA330XNg1fSZP82HYOUE8sGdM9qvVa54_Z1BnfHKlTBUux_ka7lrchgctaYMwOS7h7fB-SlC3x4Dl-8ebgBuuD3fAISdomMvPAKR7x7KBDHceaJUZKBzEOppaIYT0NkeWD4B6a6DVQ8QgFRw_gLkg5vnXdnwjSeUz-kUHX_8N9hmio4_eh7ywe3lzK53LrusrqzLPaybFuz6BOzqBIp6D6pRALbZA1l9DlbdR0uPz0E-2L7gMwdWzV5WphenVIpFxlO8GOFYLzIu1CInQoiYpVJH4cETWTMB7heg9gHUNoDaBFAXAQzUrBNhFsmQ09ikSiY44lGktMApIxjzVCZQy8_Aqk2Q5TUoymuwZr950BtBWd8F35_9jEkkQxUKgpmmMeZpGnJMYx3HMeVJ1GMq0UmcmERgg2UaC2I0lxEVTOqQGSwISWmY9KgkOEmlSQlLMRWSxwprmkRK4VAJRnBIUmEEl5jFOtZGxbhHeMhNKgntacMllSyJqEl4KiIsYmqYxFSQUAqMGWVEMpywRAumwKsAfIVgqFpoNILGI2g4gsYiaCoEzbDdUZknvr2pMl-L8LCSw0rbsatWt_iOq1Z1joCXm1CqdtsWn_rrIKuF8ch4NXbzxEXVjrlQ7Vaxj56d2yD48tR9WNOzDiM9ylNJQh1jFtKIcaFTg3smVUxpTsDbFqw_BtwHMLJTtPLwHyjsFJ268zsIvgc-2wNpF4DXLwJvxglhwPuQYhjls5f6uq_7tVjk0tchod1io-q7nOcbTV-XuivdAJRroaiOQ7URbGX76OT40pXluwdO_fiPr0HLe-gwQJYtFGULn9jfEKxmN8aXXIO2L7nGo58uFJUd2BGfu_hyxSt94of39EbjSnX2jN_8_i05B_P21hXtq3M8VzZf9ejHZauULldcKTX65ay_qsXF2veX6zKvi3MX3145OyhK7b11-QS4naKn_voKpJ2ik79-d_BDe6_dBllcA18c6fQOgSgQZBZBpo_OuWjB_2cWR_2WvwGrZQC8ug75oIVh2cIwa4Fnm-DrhXFVlPfefEgPAkQWjEVWom2RlXNuZx1DNZEYsyQOKTM6pJGSpseiVMUcU6qh8lP70caJfwMAAP__DG9uaT8FAAA=","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 00:11:03 GMT","end":"Sun, 29 Mar 2026 00:11:02 GMT"},"fingerprint":{"sha1":"93:86:61:9F:2D:73:66:D5:37:73:1C:FE:70:C8:9F:23:B1:C8:8A:D6","sha256":"9D:5E:D7:81:B8:B1:D7:5F:1F:E3:92:85:57:6C:B5:66:34:D6:DE:4F:AA:6C:8B:E9:92:36:D1:CC:BF:CC:45:D3"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1STz4scRRTHq7MhBz2IRvQ6iAEVd7a6qqe72hzENa4EYxKSSA7qoX7ulNvT1XZ1T-_OKRrQ4EHWm9563-xmUUOI4FUJs14kEMjk4hyyF_8CEYJHmc3C6ju8H_Wpw_cV3_piq95HFGo-u_i-G9ks40u9Lu68ctXmyjW-c_5KJ8RdfLpz1eZxdLqzPk_l8I2QRl38auddLdfcEsEhxiEOOyu21MatLx1QsMWtNOymuBuRbtiLYL38_-zrADwPQA330XNg1fSZP82HYOUE8sGdM9qvVa54_Z1BnfHKlTBUux_ka7lrchgctaYMwOS7h7fB-SlC3x4Dl-8ebgBuuD3fAISdomMvPAKR7x7KBDHceaJUZKBzEOppaIYT0NkeWD4B6a6DVQ8QgFRw_gLkg5vnXdnwjSeUz-kUHX_8N9hmio4_eh7ywe3lzK53LrusrqzLPaybFuz6BOzqBIp6D6pRALbZA1l9DlbdR0uPz0E-2L7gMwdWzV5WphenVIpFxlO8GOFYLzIu1CInQoiYpVJH4cETWTMB7heg9gHUNoDaBFAXAQzUrBNhFsmQ09ikSiY44lGktMApIxjzVCZQy8_Aqk2Q5TUoymuwZr950BtBWd8F35_9jEkkQxUKgpmmMeZpGnJMYx3HMeVJ1GMq0UmcmERgg2UaC2I0lxEVTOqQGSwISWmY9KgkOEmlSQlLMRWSxwprmkRK4VAJRnBIUmEEl5jFOtZGxbhHeMhNKgntacMllSyJqEl4KiIsYmqYxFSQUAqMGWVEMpywRAumwKsAfIVgqFpoNILGI2g4gsYiaCoEzbDdUZknvr2pMl-L8LCSw0rbsatWt_iOq1Z1joCXm1CqdtsWn_rrIKuF8ch4NXbzxEXVjrlQ7Vaxj56d2yD48tR9WNOzDiM9ylNJQh1jFtKIcaFTg3smVUxpTsDbFqw_BtwHMLJTtPLwHyjsFJ268zsIvgc-2wNpF4DXLwJvxglhwPuQYhjls5f6uq_7tVjk0tchod1io-q7nOcbTV-XuivdAJRroaiOQ7URbGX76OT40pXluwdO_fiPr0HLe-gwQJYtFGULn9jfEKxmN8aXXIO2L7nGo58uFJUd2BGfu_hyxSt94of39EbjSnX2jN_8_i05B_P21hXtq3M8VzZf9ejHZauULldcKTX65ay_qsXF2veX6zKvi3MX3145OyhK7b11-QS4naKn_voKpJ2ik79-d_BDe6_dBllcA18c6fQOgSgQZBZBpo_OuWjB_2cWR_2WvwGrZQC8ug75oIVh2cIwa4Fnm-DrhXFVlPfefEgPAkQWjEVWom2RlXNuZx1DNZEYsyQOKTM6pJGSpseiVMUcU6qh8lP70caJfwMAAP__DG9uaT8FAAA= HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.T3VuMPcNtbd8tKuzKeFSjYW9eSx-RX8KuT2uljmhh4A; uid_id2=df5693cb-8a90-406e-8abd-a2bbb689ce41:3:1; pdhtkv=true; uncs=1; pdhtkv23=true; uncs23=1; u_pl25634254=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:54 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 4c77f855dc8aa29bbaa840d22cc0cfa5\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=e3fc7a49-8f00-4fdd-bc32-5e9b197e91d0\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=c24088fb2a6cd3f2c2336679f397c764\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=2","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 22:13:33 GMT","end":"Sat, 28 Mar 2026 22:13:32 GMT"},"fingerprint":{"sha1":"A3:08:82:4A:9A:ED:6E:4C:29:FC:10:0D:1D:8F:8B:68:0E:D0:49:72","sha256":"B4:01:36:5D:F9:70:75:BF:F6:56:67:76:BB:CC:A2:D3:BA:69:61:33:56:FC:C7:21:69:6E:04:BE:95:D7:B2:F5"}}},"request":{"raw":"GET /pxf.gif?uuid=e3fc7a49-8f00-4fdd-bc32-5e9b197e91d0\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=c24088fb2a6cd3f2c2336679f397c764\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=2 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:55 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 1\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: c5aa9357c19f261259b3f8f4fc89c955\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":656,"timings":{"blocked":268,"dns":1,"connect":92,"send":0,"wait":97,"receive":0,"ssl":195},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:55.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css?family=Roboto:300,400,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 06 Jan 2026 02:52:55 GMT\r\ndate: Tue, 06 Jan 2026 02:52:55 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"1f04e9e49d52374a409de4887e47180d","sha1":"8fee2f920567a574448d1aa6565c95951b68f9b5","sha256":"10cf0680b9dc5b310d265479bcebc5b380474bf2e8da9361cf8be458d183994e","sha512":"5fde8f721343e9c6254229e791ed64d6b47f28fad7690f7c83fa8c29e3112d0974f65ae0c63f09acd3e026dcb56c4de3fe0ffe37c464eb326b0495aa6c03b31c","ssdeep":"384:pKf5KgKPKrKyUK/qY4+K4KYKpKfMK1KWK6KyhK/qY4XKNKtK4KfdKkKDK3KyQK/9:pCJmwBUiRDfMTcfFBhiEymdmtC0BQiVb","tlshash":"df7210a1041750009b834ce223cebf35fe1f52117152d0b5abfdab6b9dcbc66526939d","first_seen":"2025-11-19T00:20:32.486705Z","last_seen":"2026-06-29T08:11:42.465835Z","times_seen":6029,"resource_available":false,"data":null}},"time_used":374,"timings":{"blocked":170,"dns":1,"connect":20,"send":0,"wait":31,"receive":0,"ssl":147},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loseimposeherself.com/ntv.json?key=df85ebbdb343866e18d5de2b6fd24249\u0026vstc=4\u0026uuid=e76301a7-59ee-4974-8fd8-a95a611b35e5%3A2%3A1\u0026custom=%7B%22d37e3bc4%22%3A%22b%22%7D\u0026rb=","fqdn":"loseimposeherself.com","domain":"loseimposeherself.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"loseimposeherself.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 08:12:24 GMT","end":"Thu, 19 Mar 2026 08:12:23 GMT"},"fingerprint":{"sha1":"B1:6B:EB:05:E0:5A:FE:EB:0E:C8:A3:8B:EC:61:8D:51:CD:8C:90:5B","sha256":"87:C6:97:CB:C2:A5:11:74:9B:43:AB:AB:6C:80:15:71:6F:DB:98:4D:C1:34:D2:A7:47:B5:D1:64:F6:AD:05:80"}}},"request":{"raw":"GET /ntv.json?key=df85ebbdb343866e18d5de2b6fd24249\u0026vstc=4\u0026uuid=e76301a7-59ee-4974-8fd8-a95a611b35e5%3A2%3A1\u0026custom=%7B%22d37e3bc4%22%3A%22b%22%7D\u0026rb= HTTP/1.1\r\nHost: loseimposeherself.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hehehub-acsu123.pythonanywhere.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl25634524=1; nlecdf85ebbdb343866e18d5de2b6fd24249=[5941311]\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:54 GMT\r\nContent-Type: application/json\r\nContent-Length: 12365\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://hehehub-acsu123.pythonanywhere.com\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=e76301a7-59ee-4974-8fd8-a95a611b35e5:2:1; expires=Tue, 13 Jan 2026 02:52:54 GMT; path=/; secure; SameSite=None\nuncs=2; expires=Wed, 07 Jan 2026 02:52:54 GMT; path=/; secure; SameSite=None\nuncs49=2; expires=Wed, 07 Jan 2026 02:52:54 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 12\r\nHost: loseimposeherself.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: fe936db1bba0cc2963ca7bad7a6485e7\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":17229,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"30d968db53b0a88bbd256d65b6c99fe2","sha1":"e5f90c2c9156b66b3036c97f96f44a253a9ec520","sha256":"e824c7c3f4c7b6370967f95ebd3352921d37adf7f1e4d90e46e3d362d163b8c8","sha512":"adedda9c8002f2a6ae7ddd7640654bf969b1a3fc445942be02f7ada92182b471fbf29229e8e7cfa8535ceb2147718403788e632d97aacb6b01c5e815cd5e7042","ssdeep":"384:zejw9Jdiy0v8in9p0asGW8CpOzZ0QRxcANZ8c15XecXOQ8:ze4Jdz0H70rDOzZ7gATj1JfXU","tlshash":"2a72bff3230c4aee39a5fed551db1aab5d57140580d4abc320d8fd9e0c3eca36163a19","first_seen":"2026-01-06T02:53:22.861151Z","last_seen":"2026-01-06T02:53:22.861151Z","times_seen":1,"resource_available":false,"data":null}},"time_used":671,"timings":{"blocked":280,"dns":1,"connect":91,"send":0,"wait":106,"receive":1,"ssl":190},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"loseimposeherself.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loseimposeherself.com/ntv.json?key=df85ebbdb343866e18d5de2b6fd24249\u0026vstc=4\u0026uuid=e76301a7-59ee-4974-8fd8-a95a611b35e5%3A2%3A1\u0026custom=%7B%22d37e3bc4%22%3A%22b%22%7D\u0026rb=","fqdn":"loseimposeherself.com","domain":"loseimposeherself.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"loseimposeherself.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 08:12:24 GMT","end":"Thu, 19 Mar 2026 08:12:23 GMT"},"fingerprint":{"sha1":"B1:6B:EB:05:E0:5A:FE:EB:0E:C8:A3:8B:EC:61:8D:51:CD:8C:90:5B","sha256":"87:C6:97:CB:C2:A5:11:74:9B:43:AB:AB:6C:80:15:71:6F:DB:98:4D:C1:34:D2:A7:47:B5:D1:64:F6:AD:05:80"}}},"request":{"raw":"GET /ntv.json?key=df85ebbdb343866e18d5de2b6fd24249\u0026vstc=4\u0026uuid=e76301a7-59ee-4974-8fd8-a95a611b35e5%3A2%3A1\u0026custom=%7B%22d37e3bc4%22%3A%22b%22%7D\u0026rb= HTTP/1.1\r\nHost: loseimposeherself.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hehehub-acsu123.pythonanywhere.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl25634524=1; nlecdf85ebbdb343866e18d5de2b6fd24249=[5941311]\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:54 GMT\r\nContent-Type: application/json\r\nContent-Length: 13253\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://hehehub-acsu123.pythonanywhere.com\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=e76301a7-59ee-4974-8fd8-a95a611b35e5:2:1; expires=Tue, 13 Jan 2026 02:52:54 GMT; path=/; secure; SameSite=None\nuncs=2; expires=Wed, 07 Jan 2026 02:52:54 GMT; path=/; secure; SameSite=None\nuncs49=2; expires=Wed, 07 Jan 2026 02:52:54 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 11\r\nHost: loseimposeherself.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 42636649b36ada0f4ecbe65a87950b9e\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17339,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"46204ebc15d3477e26c25f895c2d5aae","sha1":"bfedb496856199406f0974113ef48ee5731681e5","sha256":"7e1ee92cd23ce84db06367fe6f65cd40434ab0e83dfeafed96e2d23789f6451b","sha512":"a2e97d7f8648ce5f4bb59c41d172d4e6cc50750e3f4ba3c9fc04e4be5cd27f78498808c872502cdefcbe58269425c881112130b5b0bcae5375a4c8843d58cdf8","ssdeep":"384:xetZJ7y5tI4ofhuJDObVOUbajK/rHQG6Tu9h3Pj+xVHEItmVyXa:xea+lQYxhadShfqXkItmVj","tlshash":"9d72bf793743f0d92f29fd9af04b255b5c9f81a34a09a8c19c588a1d2d3c0f6c37ada5","first_seen":"2026-01-06T02:53:22.863412Z","last_seen":"2026-01-06T02:53:22.863412Z","times_seen":1,"resource_available":false,"data":null}},"time_used":630,"timings":{"blocked":249,"dns":0,"connect":0,"send":0,"wait":106,"receive":91,"ssl":184},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"loseimposeherself.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/watch.1302880017751.js?key=8253a9c21e6081348abe9f05f9d8dea2\u0026kw=%5B%22get%22%2C%22key%22%2C%22hoho%22%2C%22hub%22%2C%22-%22%2C%22step%22%2C%221%22%5D\u0026refer=https%3A%2F%2Fhehehub-acsu123.pythonanywhere.com%2Fapi%2Fgetkey%3Fhwid%3D1767656646.038565\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=df5693cb-8a90-406e-8abd-a2bbb689ce41%3A3%3A1\u0026shu=024c1d1b208e360a991a036e6663a7458d7e767f7b0f0c96b2feac43b8ce18f0b22931753c2079cf928903bca6d0e374dd01db820129bfbac086e6efd6052a1af9c235efac3c8743f7a9b40b63f8c03b21cb008382c80787eb8d\u0026pst=1767668034\u0026rmtc=t","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 00:11:03 GMT","end":"Sun, 29 Mar 2026 00:11:02 GMT"},"fingerprint":{"sha1":"93:86:61:9F:2D:73:66:D5:37:73:1C:FE:70:C8:9F:23:B1:C8:8A:D6","sha256":"9D:5E:D7:81:B8:B1:D7:5F:1F:E3:92:85:57:6C:B5:66:34:D6:DE:4F:AA:6C:8B:E9:92:36:D1:CC:BF:CC:45:D3"}}},"request":{"raw":"GET /watch.1302880017751.js?key=8253a9c21e6081348abe9f05f9d8dea2\u0026kw=%5B%22get%22%2C%22key%22%2C%22hoho%22%2C%22hub%22%2C%22-%22%2C%22step%22%2C%221%22%5D\u0026refer=https%3A%2F%2Fhehehub-acsu123.pythonanywhere.com%2Fapi%2Fgetkey%3Fhwid%3D1767656646.038565\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=df5693cb-8a90-406e-8abd-a2bbb689ce41%3A3%3A1\u0026shu=024c1d1b208e360a991a036e6663a7458d7e767f7b0f0c96b2feac43b8ce18f0b22931753c2079cf928903bca6d0e374dd01db820129bfbac086e6efd6052a1af9c235efac3c8743f7a9b40b63f8c03b21cb008382c80787eb8d\u0026pst=1767668034\u0026rmtc=t HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hehehub-acsu123.pythonanywhere.com\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.T3VuMPcNtbd8tKuzKeFSjYW9eSx-RX8KuT2uljmhh4A\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:54 GMT\r\nContent-Type: text/html\r\nContent-Length: 3264\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://hehehub-acsu123.pythonanywhere.com\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=df5693cb-8a90-406e-8abd-a2bbb689ce41:3:1; expires=Tue, 13 Jan 2026 02:52:54 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Wed, 07 Jan 2026 02:52:54 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Wed, 07 Jan 2026 02:52:54 GMT; path=/; secure; SameSite=None\npdhtkv23=true; expires=Wed, 07 Jan 2026 02:52:54 GMT; path=/; secure; SameSite=None\nuncs23=1; expires=Wed, 07 Jan 2026 02:52:54 GMT; path=/; secure; SameSite=None\nu_pl25634254=1; expires=Wed, 07 Jan 2026 02:52:54 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 19\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 9355825cc299288bb48d4ddbbf202dcf\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4594,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (3718)","md5":"335be2a22bbc60e18fc8992f6cc96b5c","sha1":"38709b5624c0f6fe30624e39617224ef8df58ce5","sha256":"55fa86f6d753205f12019d24d8302a1736ddd3c1dc8e486229df927402161cbd","sha512":"f02c3fab2f915211f182027147cafe4c8d08a629e86d7847ac0e30bc2e515eefc2d9a686b082e1bd3357cbd5df572c6b1dd595631c5376c9bd724e8d288aa47b","ssdeep":"96:Ioz0qYAc8G8IQaZIyG/5Ck/oJ3Q25JvvJePBBmeEIzzC8fR11ZD+CfMEDaH:RzFRIPZIyGMkQVQ2nvvJeZZEIf1fRvVw","tlshash":"d3912b25ed5d917d346761ba177fae292d2492173200dd0cf8edfb800f20ab24599ddd","first_seen":"2026-01-06T02:53:22.865664Z","last_seen":"2026-01-06T02:53:22.865664Z","times_seen":1,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loseimposeherself.com/ren.gif?sid=H4sIAAAAAAAC_1RSz28bRRSebS0O5YAoFWcLCQQSOLvetWvTQ0UoqSJCEtKgSPw4zO7M2kPWM8vMrtc2l0Ak6DEHDsBp8zlpoFRV-QMQweFSRUJiOUAkGgnxJyBVPaJ1LQWeNN97b745vO9789luekpcpPRk9S01ElFE5xo1u_rihpBMZaa6vF517Jp9pbohZNO7Uh2UoPuvOq5Xs1-qXufBppqr245tO7ZTXRCah2owN2Uh4jttp9a2a1695jQ8DPT_e5NaMNQC65-SixCseOrv8D2IYALZu3eNm81ExS-_0UsjmiiNPjt4R25KlUn0zspQWwjlwew1lCkI-fIclDyYKYDq75UK4IuCnHv2AXx5MBsTfn__8aR-BC7hsyeR9Sfg0QSCThCobQj2KwEChuUVyN6tZaUzOnzM0pItSOXhPxBZQSoPLkH27s5HYlC9oaI0EUoaDMIcYjCB6EwQp0dIRhZEdoQg-RSC_ULmHi5B9vZWTKQgWD5VL8IJqLGQlkdYSEMLaWyhx06qnt3yAoe6zbDNgsu2Rz2Pcd9ut-q2TdvBZaTBJxBsB4HeQqy3sCl2oNNDmG4OwyyYpCDW21vosxwZJ8gMQUYJMkGQJQRZP99nkamb_BaLTOo7s1yfZTcfq6SzS_dV0uGSgOodaJbvifgjs40gOT8ehYaNVQnUT_Ix9Vm-G5-Sp0u3rM9f-BOb_KTKwlaD-z7zXc9tNZvcabEG43W_GbK6V_faMCKHMOemRoxEQRZ-e4RYFOT5e_fh0yOY6AiBOA-aOqBZDtrNMZInz3V5l3dT_xUamNSpu7V4mHSVpHKYdbnmtUD1wFSOOKkgGVq70Sl5Zry2Pn843eW731wFD46vJqO_rt-99DECnSPWOT4UPxN0opvjNZWRvTWVGfL9SpyInhjRcs83Eprw87ff5MNMabZ4zex8-1pQEmV5Z52bZIlKJmTHkO_mBWNcLygdcPLDotng_mpquvOplmm8tPr6wmIv1twYoeQEVBTkwuFtBKIgF3_fnv5h9_ojBPEWTHxMZgGjCPzYQiQIIn52T_0c5j-9f1bvmpvo6Aposg3Zy9HXOfpRDhrtwKQXxkmsj6_e_6qMr-FHlbEf6cqeH-noi6lPBfngj59K-LGEQxhxUm3UfbfZajV52GShy9y6y9oNm7c92m56ba-BxBTi_eET_wYAAP__tVRWf3UEAAA=","fqdn":"loseimposeherself.com","domain":"loseimposeherself.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"loseimposeherself.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 08:12:24 GMT","end":"Thu, 19 Mar 2026 08:12:23 GMT"},"fingerprint":{"sha1":"B1:6B:EB:05:E0:5A:FE:EB:0E:C8:A3:8B:EC:61:8D:51:CD:8C:90:5B","sha256":"87:C6:97:CB:C2:A5:11:74:9B:43:AB:AB:6C:80:15:71:6F:DB:98:4D:C1:34:D2:A7:47:B5:D1:64:F6:AD:05:80"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSz28bRRSebS0O5YAoFWcLCQQSOLvetWvTQ0UoqSJCEtKgSPw4zO7M2kPWM8vMrtc2l0Ak6DEHDsBp8zlpoFRV-QMQweFSRUJiOUAkGgnxJyBVPaJ1LQWeNN97b745vO9789luekpcpPRk9S01ElFE5xo1u_rihpBMZaa6vF517Jp9pbohZNO7Uh2UoPuvOq5Xs1-qXufBppqr245tO7ZTXRCah2owN2Uh4jttp9a2a1695jQ8DPT_e5NaMNQC65-SixCseOrv8D2IYALZu3eNm81ExS-_0UsjmiiNPjt4R25KlUn0zspQWwjlwew1lCkI-fIclDyYKYDq75UK4IuCnHv2AXx5MBsTfn__8aR-BC7hsyeR9Sfg0QSCThCobQj2KwEChuUVyN6tZaUzOnzM0pItSOXhPxBZQSoPLkH27s5HYlC9oaI0EUoaDMIcYjCB6EwQp0dIRhZEdoQg-RSC_ULmHi5B9vZWTKQgWD5VL8IJqLGQlkdYSEMLaWyhx06qnt3yAoe6zbDNgsu2Rz2Pcd9ut-q2TdvBZaTBJxBsB4HeQqy3sCl2oNNDmG4OwyyYpCDW21vosxwZJ8gMQUYJMkGQJQRZP99nkamb_BaLTOo7s1yfZTcfq6SzS_dV0uGSgOodaJbvifgjs40gOT8ehYaNVQnUT_Ix9Vm-G5-Sp0u3rM9f-BOb_KTKwlaD-z7zXc9tNZvcabEG43W_GbK6V_faMCKHMOemRoxEQRZ-e4RYFOT5e_fh0yOY6AiBOA-aOqBZDtrNMZInz3V5l3dT_xUamNSpu7V4mHSVpHKYdbnmtUD1wFSOOKkgGVq70Sl5Zry2Pn843eW731wFD46vJqO_rt-99DECnSPWOT4UPxN0opvjNZWRvTWVGfL9SpyInhjRcs83Eprw87ff5MNMabZ4zex8-1pQEmV5Z52bZIlKJmTHkO_mBWNcLygdcPLDotng_mpquvOplmm8tPr6wmIv1twYoeQEVBTkwuFtBKIgF3_fnv5h9_ojBPEWTHxMZgGjCPzYQiQIIn52T_0c5j-9f1bvmpvo6Aposg3Zy9HXOfpRDhrtwKQXxkmsj6_e_6qMr-FHlbEf6cqeH-noi6lPBfngj59K-LGEQxhxUm3UfbfZajV52GShy9y6y9oNm7c92m56ba-BxBTi_eET_wYAAP__tVRWf3UEAAA= HTTP/1.1\r\nHost: loseimposeherself.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl25634524=1; nlecdf85ebbdb343866e18d5de2b6fd24249=[5941311]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:54 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: loseimposeherself.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: d09d6d5553106350b2f872808bae08de\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":528,"timings":{"blocked":241,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":190},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"loseimposeherself.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loseimposeherself.com/ren.gif?sid=H4sIAAAAAAAC_1RSzW8bxRueba0e-jv8BEWcLSQQIHB27bVr00NFKEEVJQlpUCQ-DjM7s_aQ9cwys-u1fQpEgopTDhyAC5vHScNHhcofAASHS1UJieVCJBoO_AUIqeKI1rUUeKV5P-aZw_M877y_m56QBlJ6vPqKHssoogvNmlt9ckMqrjNbXV6vem7NvVTdkKrlX6oOy2QGz3kNv-Y-VX1JBJt6oe56ruu5XnVJGhHq4cIMhYxvdbxax6359ZrX9DE0_51t6sBSB3xwQh6G5MX__wjfgAymUP3bV4TdTHT8zIv9NKKJNhjwg9fUptKZQv-0DY2DUB3MX0PbgpCPz0Crg7kC6MFeqQBMFuTMo_fA1MGcJthg_wFTFkEoMP4_ZIMpRDSFpFMEehuS_0yAgGN5Bap_c1mbjI4eoLREC1K5_xdkVpDKvUeg-l8vRnJYva6jNJFaWQzDHHI4hexOEadHSMYOZHaEIHkPkv9EFu5fg-rvrdhIQ_J8pl6GU1DrIC2PdJCGDtLYQZ8fV3237QcebbTCDg8uuj71fS6Y22nXXZd2gotIg3ch-Q4Cs4XYbGFT7sCkh7C9HJY7sElBnFe3MOA5MkGQWYKMEmSSIEsIskG-zyNbt_lNHtmUefNan9dGPtFJd5fu66QrFAE1OzA835PxO3YbQXJ2Mg4tn-gyUZbkE8p4vhufkIdKt5wPnvgNm-K4ysN2UzDGWcNvtFst4bV5k4s6a4W87tf9DqzMIe2ZmRFjWZClX_5GLAvy-O07YPQINjpCIM-Cph5oloP2cozV8WM90RO9lD1LA5t69UYtHiU9ragaZT1hRC3QfXCdI04qSEbObnRCLkzW1hcPZ7t869fvIYK7ZB4ITI7Y5Hhb_kjQjW5M1nRG9tZ0Zsk3K3Ei-3JMyz1fT2gizn35shhl2vCrV-zOF88HJVC2t9aFTa5RxaXqWvLVouRcmCVtAkG-vWo3BFtNbW8xNSqNr62-sHS1HxthrdRqCioLcv7PDxHIglz47rPZH24-_TuCeAs2PuVpNQGLzyKSBJE4vacsh_3XzE77XXsDXVMBTbah-jkGJscgykGjHdj0_CSJzd3Ldz4p41OwqDJhkansschEHxXk9c8vl2b9MHOsTIew8rjarLNGq91uibDFwwZv1Bu803RFx6edlt_xm0hsId8cnfsnAAD__2ZOHm11BAAA","fqdn":"loseimposeherself.com","domain":"loseimposeherself.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"loseimposeherself.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 08:12:24 GMT","end":"Thu, 19 Mar 2026 08:12:23 GMT"},"fingerprint":{"sha1":"B1:6B:EB:05:E0:5A:FE:EB:0E:C8:A3:8B:EC:61:8D:51:CD:8C:90:5B","sha256":"87:C6:97:CB:C2:A5:11:74:9B:43:AB:AB:6C:80:15:71:6F:DB:98:4D:C1:34:D2:A7:47:B5:D1:64:F6:AD:05:80"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSzW8bxRueba0e-jv8BEWcLSQQIHB27bVr00NFKEEVJQlpUCQ-DjM7s_aQ9cwys-u1fQpEgopTDhyAC5vHScNHhcofAASHS1UJieVCJBoO_AUIqeKI1rUUeKV5P-aZw_M877y_m56QBlJ6vPqKHssoogvNmlt9ckMqrjNbXV6vem7NvVTdkKrlX6oOy2QGz3kNv-Y-VX1JBJt6oe56ruu5XnVJGhHq4cIMhYxvdbxax6359ZrX9DE0_51t6sBSB3xwQh6G5MX__wjfgAymUP3bV4TdTHT8zIv9NKKJNhjwg9fUptKZQv-0DY2DUB3MX0PbgpCPz0Crg7kC6MFeqQBMFuTMo_fA1MGcJthg_wFTFkEoMP4_ZIMpRDSFpFMEehuS_0yAgGN5Bap_c1mbjI4eoLREC1K5_xdkVpDKvUeg-l8vRnJYva6jNJFaWQzDHHI4hexOEadHSMYOZHaEIHkPkv9EFu5fg-rvrdhIQ_J8pl6GU1DrIC2PdJCGDtLYQZ8fV3237QcebbTCDg8uuj71fS6Y22nXXZd2gotIg3ch-Q4Cs4XYbGFT7sCkh7C9HJY7sElBnFe3MOA5MkGQWYKMEmSSIEsIskG-zyNbt_lNHtmUefNan9dGPtFJd5fu66QrFAE1OzA835PxO3YbQXJ2Mg4tn-gyUZbkE8p4vhufkIdKt5wPnvgNm-K4ysN2UzDGWcNvtFst4bV5k4s6a4W87tf9DqzMIe2ZmRFjWZClX_5GLAvy-O07YPQINjpCIM-Cph5oloP2cozV8WM90RO9lD1LA5t69UYtHiU9ragaZT1hRC3QfXCdI04qSEbObnRCLkzW1hcPZ7t869fvIYK7ZB4ITI7Y5Hhb_kjQjW5M1nRG9tZ0Zsk3K3Ei-3JMyz1fT2gizn35shhl2vCrV-zOF88HJVC2t9aFTa5RxaXqWvLVouRcmCVtAkG-vWo3BFtNbW8xNSqNr62-sHS1HxthrdRqCioLcv7PDxHIglz47rPZH24-_TuCeAs2PuVpNQGLzyKSBJE4vacsh_3XzE77XXsDXVMBTbah-jkGJscgykGjHdj0_CSJzd3Ldz4p41OwqDJhkansschEHxXk9c8vl2b9MHOsTIew8rjarLNGq91uibDFwwZv1Bu803RFx6edlt_xm0hsId8cnfsnAAD__2ZOHm11BAAA HTTP/1.1\r\nHost: loseimposeherself.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl25634524=1; nlecdf85ebbdb343866e18d5de2b6fd24249=[5941311]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:54 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: loseimposeherself.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 265a566abb31e600e07c07f760df2e20\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":654,"timings":{"blocked":272,"dns":0,"connect":93,"send":0,"wait":96,"receive":0,"ssl":191},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"loseimposeherself.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loseimposeherself.com/ren.gif?sid=H4sIAAAAAAAC_4RTv28cVRd9u7FS5Cs-QRD1CgUECK_n53qHFAgTjCJCEiVBKUKE3pv3xvvw7HvDezM7titCpBBRuaAAGmbPbuwEIhRaEFG0oYkiIbE0LCJu-AsQUkSJxrZkqLjFufeeM8W9Z-67Nix2iI-Czs6-pTdkmtKFsO20nr8oFdelbZ2-0HKdtnO8dVGqTnC8tVaDGbzs-kHbeaH1hohX9YLnuI7jOm5rWRqR6LWFXRUyux257chpB17bDQOsmX_3tmjC0ib4YIc8Ccmn__89uQQZT6D6d04Iu5rr7KXX-0VKc20w4Ntvq1WlS4X-QZmYBhK1vf81tJ0S8mkTWm3vbwA9GNcbgMkpaT79CExt748JNrixNylLIRQY_x_KwQQinUDSCWJ9FZL_RICY4_QZqP7WaW1Kur6n0lqdkrnHf0KWUzL36Cmo_tdLqVxrnddpkUutLNaSCnJtArkyQVZMkG80IMv7iPMPIfmPZOHxKaj--IxNNSSfHROLHd9x6eJ8GAkxH0SLwXw34d15GoW047rMD0W4a5FMJqC2icI2UMgGiqSBImugz2etwOkGsUv9ThLxeNEJaBBwwZyo6zkOjeJFFPEVSL6J2FzbyngvXx2Mc1OIcaFiO3Rv7lFBtEtu1WQQDd3bxbtZ6oUdPwi9YOjOjqlUxDzphoIxzvzA73Y6wu3ykAuPdRLuBV4Q3boURoHru-5lZObKTe4vCp_FwZBhVW7CFPdgexUsb8DmBANeoRQEpSUoKUEpCcqcoBxUN3hqPVtt8dQWzN3P3n72q5HOV4b0hs5XhCKgZhOGV2OZvW-vIs4PjTYSy0e6BsryakQZr4bZDnmi_oWNj577Dati1vqvZWBlBWmboLaBDTklyz__hUxOybN3HoDR-7DpfcTyEGjhgpYVaK_Chpo90xM90SvYPI1t4Xp-O1vPe1pRtV72hBHtWPfBdYUsn0O-3himO-To6NyFpXu7B3b5l28h4odkPxCbCpmp8J78gWAlvT46p0syPqdLS745k-WyLzdofXznc5qLw1--KdZLbfjJE3bz1qtxLdTl7QvC5qeo4lKtWPLVkuRcmGVtYkG-P2kvCna2sL2lwqgiO3X2teWT_cwIa6VWE1A5JUf--BixnJKjd7_YfVjhi78izj6AzQ7mtJqAZU2kkiAVBzxlFew_enZQD-11rJg50PwqVL_CwFQYpBVouglbHBnlmXn4yoPP6vgcLJ0bsdTMjVlq0k9qn-7umlXDpIbvYOWsFXrM73S7HZF0eOJz3_N5FDoiCmjUCaIgRG6n8p31w38HAAD__wHyFVwKBQAA","fqdn":"loseimposeherself.com","domain":"loseimposeherself.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"loseimposeherself.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 08:12:24 GMT","end":"Thu, 19 Mar 2026 08:12:23 GMT"},"fingerprint":{"sha1":"B1:6B:EB:05:E0:5A:FE:EB:0E:C8:A3:8B:EC:61:8D:51:CD:8C:90:5B","sha256":"87:C6:97:CB:C2:A5:11:74:9B:43:AB:AB:6C:80:15:71:6F:DB:98:4D:C1:34:D2:A7:47:B5:D1:64:F6:AD:05:80"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_4RTv28cVRd9u7FS5Cs-QRD1CgUECK_n53qHFAgTjCJCEiVBKUKE3pv3xvvw7HvDezM7titCpBBRuaAAGmbPbuwEIhRaEFG0oYkiIbE0LCJu-AsQUkSJxrZkqLjFufeeM8W9Z-67Nix2iI-Czs6-pTdkmtKFsO20nr8oFdelbZ2-0HKdtnO8dVGqTnC8tVaDGbzs-kHbeaH1hohX9YLnuI7jOm5rWRqR6LWFXRUyux257chpB17bDQOsmX_3tmjC0ib4YIc8Ccmn__89uQQZT6D6d04Iu5rr7KXX-0VKc20w4Ntvq1WlS4X-QZmYBhK1vf81tJ0S8mkTWm3vbwA9GNcbgMkpaT79CExt748JNrixNylLIRQY_x_KwQQinUDSCWJ9FZL_RICY4_QZqP7WaW1Kur6n0lqdkrnHf0KWUzL36Cmo_tdLqVxrnddpkUutLNaSCnJtArkyQVZMkG80IMv7iPMPIfmPZOHxKaj--IxNNSSfHROLHd9x6eJ8GAkxH0SLwXw34d15GoW047rMD0W4a5FMJqC2icI2UMgGiqSBImugz2etwOkGsUv9ThLxeNEJaBBwwZyo6zkOjeJFFPEVSL6J2FzbyngvXx2Mc1OIcaFiO3Rv7lFBtEtu1WQQDd3bxbtZ6oUdPwi9YOjOjqlUxDzphoIxzvzA73Y6wu3ykAuPdRLuBV4Q3boURoHru-5lZObKTe4vCp_FwZBhVW7CFPdgexUsb8DmBANeoRQEpSUoKUEpCcqcoBxUN3hqPVtt8dQWzN3P3n72q5HOV4b0hs5XhCKgZhOGV2OZvW-vIs4PjTYSy0e6BsryakQZr4bZDnmi_oWNj577Dati1vqvZWBlBWmboLaBDTklyz__hUxOybN3HoDR-7DpfcTyEGjhgpYVaK_Chpo90xM90SvYPI1t4Xp-O1vPe1pRtV72hBHtWPfBdYUsn0O-3himO-To6NyFpXu7B3b5l28h4odkPxCbCpmp8J78gWAlvT46p0syPqdLS745k-WyLzdofXznc5qLw1--KdZLbfjJE3bz1qtxLdTl7QvC5qeo4lKtWPLVkuRcmGVtYkG-P2kvCna2sL2lwqgiO3X2teWT_cwIa6VWE1A5JUf--BixnJKjd7_YfVjhi78izj6AzQ7mtJqAZU2kkiAVBzxlFew_enZQD-11rJg50PwqVL_CwFQYpBVouglbHBnlmXn4yoPP6vgcLJ0bsdTMjVlq0k9qn-7umlXDpIbvYOWsFXrM73S7HZF0eOJz3_N5FDoiCmjUCaIgRG6n8p31w38HAAD__wHyFVwKBQAA HTTP/1.1\r\nHost: loseimposeherself.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl25634524=1; nlecdf85ebbdb343866e18d5de2b6fd24249=[5941311]; uid_id2=e76301a7-59ee-4974-8fd8-a95a611b35e5:2:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:54 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: loseimposeherself.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: e0d91e48bd17ad81183444a31587118d\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":367,"timings":{"blocked":267,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"loseimposeherself.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/a1/b9/23/a1b923bbe5846975f178468a56c44507/1756662048.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:33:02 GMT","end":"Thu, 05 Feb 2026 02:33:01 GMT"},"fingerprint":{"sha1":"FF:BB:C7:F6:31:A3:EE:08:8E:72:C4:2F:A2:C8:78:1B:3C:22:C4:57","sha256":"93:BE:65:88:B5:AC:E6:69:91:EE:F6:7E:27:3F:D6:9F:59:B1:AB:46:F7:49:0D:E8:F2:1C:9E:A9:BE:F9:B6:95"}}},"request":{"raw":"GET /cti/a1/b9/23/a1b923bbe5846975f178468a56c44507/1756662048.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 02:52:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 40880\r\nserver: nginx/1.21.6\r\nlast-modified: Sun, 31 Aug 2025 17:40:48 GMT\r\netag: \"68b48920-9fb0\"\r\nexpires: Thu, 08 Jan 2026 02:52:54 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40880,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.3 (Macintosh), datetime=2025:08:30 15:30:24], progressive, precision 8, 320x240, components 3","md5":"0ad45ff4319349ed2dcd5676103824ef","sha1":"63e168f607a393499e2494cf135403cf8bf55939","sha256":"ce5dbe9393b069f813258f03db62338e64f03dc550fde2e549ce1f435b335192","sha512":"b41e0a88c3e70d29a6cad28878cba25d7b5c631842c8b337475a66a49fc8d38a0581913e364089f3395a61f71dff54c6784a015baf8f0ba30a58020e732a9719","ssdeep":"768:Q0ixim0iM7Yy2nBu1/5h6bTM/k+w4zTXAvVUO6pFq5:Q0+0V7wBu1/5AQg4zTXAe7e5","tlshash":"4303bf55fb62cc62e8e06a3c10f1e717b2319658ab730b953d4e728b3790b564c8d747","first_seen":"2025-09-02T17:23:30.688077Z","last_seen":"2026-05-25T10:53:19.641674Z","times_seen":1333,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loseimposeherself.com/ntv.json?key=df85ebbdb343866e18d5de2b6fd24249\u0026vstc=4\u0026uuid=e76301a7-59ee-4974-8fd8-a95a611b35e5%3A2%3A1\u0026custom=%7B%22d37e3bc4%22%3A%22b%22%7D\u0026rb=","fqdn":"loseimposeherself.com","domain":"loseimposeherself.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"loseimposeherself.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 08:12:24 GMT","end":"Thu, 19 Mar 2026 08:12:23 GMT"},"fingerprint":{"sha1":"B1:6B:EB:05:E0:5A:FE:EB:0E:C8:A3:8B:EC:61:8D:51:CD:8C:90:5B","sha256":"87:C6:97:CB:C2:A5:11:74:9B:43:AB:AB:6C:80:15:71:6F:DB:98:4D:C1:34:D2:A7:47:B5:D1:64:F6:AD:05:80"}}},"request":{"raw":"GET /ntv.json?key=df85ebbdb343866e18d5de2b6fd24249\u0026vstc=4\u0026uuid=e76301a7-59ee-4974-8fd8-a95a611b35e5%3A2%3A1\u0026custom=%7B%22d37e3bc4%22%3A%22b%22%7D\u0026rb= HTTP/1.1\r\nHost: loseimposeherself.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hehehub-acsu123.pythonanywhere.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl25634524=1; nlecdf85ebbdb343866e18d5de2b6fd24249=[5941311]\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:54 GMT\r\nContent-Type: application/json\r\nContent-Length: 13171\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://hehehub-acsu123.pythonanywhere.com\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=e76301a7-59ee-4974-8fd8-a95a611b35e5:2:1; expires=Tue, 13 Jan 2026 02:52:54 GMT; path=/; secure; SameSite=None\nuncs=2; expires=Wed, 07 Jan 2026 02:52:54 GMT; path=/; secure; SameSite=None\nuncs49=2; expires=Wed, 07 Jan 2026 02:52:54 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 10\r\nHost: loseimposeherself.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 536af2c3dae94dc05a0b82e5383cfcc3\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17251,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"86cb44dfcd725b2c463f9149fbeb594f","sha1":"455ed9cb751a331d377d384beb416ea8c8e470f0","sha256":"ded9de8f78b815f8590ac1ea037b921c2d8020d143d73911962ebb7c4e75f161","sha512":"9a503453c6cf74811b3ad620fa572e57c61c5776748cc583429f1b024bbb0e26bec9df8668a2c61ccbf601cb54b44c8f61651cfc4df0eb53c4a24ebef3fe3714","ssdeep":"384:r5hbvdGjD2rdelWyO1t4iqxU2RGv5YYrvgDDmJsKp3T1o1yVc1:r5hUw0A34nU2RGRYTDf4juYVc1","tlshash":"4b729f74490f8afe1eb9796f8b8e75865c96181b8488e7d5f1ac339a182b459c330c25","first_seen":"2026-01-06T02:53:22.86987Z","last_seen":"2026-01-06T02:53:22.86987Z","times_seen":1,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":104,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"loseimposeherself.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"politicalpiano.com/df85ebbdb343866e18d5de2b6fd24249/invoke.js","fqdn":"politicalpiano.com","domain":"politicalpiano.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:53.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"politicalpiano.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 23:19:37 GMT","end":"Wed, 01 Apr 2026 23:19:36 GMT"},"fingerprint":{"sha1":"A5:83:F5:2D:A1:5D:A3:A2:E5:BF:36:5E:89:DB:C5:4E:F4:70:D4:A9","sha256":"3D:27:07:82:E4:0C:5D:C1:8E:B4:50:A2:BD:65:45:AD:B2:FF:E2:03:00:A7:61:A0:60:54:A0:BE:12:BA:5A:DF"}}},"request":{"raw":"GET /df85ebbdb343866e18d5de2b6fd24249/invoke.js HTTP/1.1\r\nHost: politicalpiano.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:53 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 15836\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: politicalpiano.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 24fa19b50b613802de3c7b426c0bd63a\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":43728,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (43726), with no line terminators","md5":"13dcfd937875618c950ad1d5b1efb3b1","sha1":"40e3dfd58150d481f07090d4d9a8440eec1294fd","sha256":"55fc327aab42456e80f9a0a7041a449fa3e797a61890ec277bd5746a9bf555e0","sha512":"85def6bb35168baef6615f9f89ba4a5fdc359615a71f976d3d9a4c5f12c7b71b421a362eb9beb52df1db12f45d35951549d59d0340772a87609ed03d5599e971","ssdeep":"768:pL+PQPpOgoDGmXN43uQxjCoMSZR/IuVpPtyw4cLeJEOlhPsBeII3fX:pboDR6fCoM4R/Zyw4EBeI2","tlshash":"4213d79a7f91b5ac0376b47b143f922ff6399d0260c8c9acd103e8952f9ca4dc139b59","first_seen":"2026-01-06T02:53:22.872078Z","last_seen":"2026-01-06T02:53:22.872078Z","times_seen":1,"resource_available":true,"data":null}},"time_used":941,"timings":{"blocked":361,"dns":45,"connect":105,"send":0,"wait":109,"receive":105,"ssl":213},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"politicalpiano.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"politicalpiano.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"politicalpiano.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"politicalpiano.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/9c/5d/14/9c5d14453d6b11cdec5b98e5ce5af0dc.js","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:53.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 21:42:11 GMT","end":"Wed, 25 Mar 2026 21:42:10 GMT"},"fingerprint":{"sha1":"DD:BF:7F:13:B7:AA:5E:41:65:09:9E:F1:FE:42:C4:9A:00:0B:F4:E6","sha256":"FE:3B:B4:EE:8B:60:30:E2:9F:CB:E9:E2:06:C0:A4:2E:FF:35:D3:22:85:14:1C:B8:13:CD:72:FB:EA:5C:E9:98"}}},"request":{"raw":"GET /9c/5d/14/9c5d14453d6b11cdec5b98e5ce5af0dc.js HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:53 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3403\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 39cfd98d182baabacd242a785c5b4085\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6454,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6454), with no line terminators","md5":"81c010ddfde2faeaf1c598844287df5a","sha1":"cd0fb06af4d1e8878a8c2c8d0311892ef13ff47b","sha256":"44442357bcab05b20364ed17aae2a3ae173b906529612b0e2f7d2217a76e51ab","sha512":"0acadda1dc3bba9f6178ba54356f2aed3dba23fbaf3b53b683fc5dd78eeff47a63ec7815ffbdb1e07041b274646eaa0a71ada2500f181775833f40761fc7cac8","ssdeep":"96:A9+XCx+8Ixmzn2ySej3zqIDNcxE6204l4sNm+E/0NK4Amfnqkk7lDAP2CwU6:A6Cg/S2yPXXWxW04fNPw6K4Amf4DAPA","tlshash":"13d1859c3e80b0a057b26077b97fa019b3696c50657fd80cd012b1a03e7562ad9bbba5","first_seen":"2025-12-01T12:09:20.892186Z","last_seen":"2026-01-29T12:50:40.978548Z","times_seen":4063,"resource_available":true,"data":null}},"time_used":664,"timings":{"blocked":288,"dns":0,"connect":91,"send":0,"wait":95,"receive":0,"ssl":186},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:53.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 23:36:36 GMT","end":"Sat, 28 Mar 2026 23:36:35 GMT"},"fingerprint":{"sha1":"0E:EE:1D:ED:80:5A:CA:0C:1E:93:89:94:78:B7:34:91:38:D4:89:51","sha256":"CF:77:1B:FB:04:67:32:02:DF:D9:38:24:27:3D:A5:98:54:0C:4D:BA:C5:1B:62:FD:C1:E1:17:57:6F:63:B3:BF"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:53 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 41fb99c612cdba394a8f885c002c8672\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-07-17T10:55:41.509086Z","times_seen":22071,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":56,"dns":1,"connect":17,"send":0,"wait":21,"receive":18,"ssl":38},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loseimposeherself.com/ren.gif?sid=H4sIAAAAAAAC_4RTz4scxRev2Sw55Hv4ohHPg0RRcWf75-y0OYhrXAnGJCSRHGKQqq7qnXJ7qtqq7undPRkDMXjagwf1Ys9nJruJBolXxRAmXkJAcLw4YPagf4EIwaP07sDqyXf4vB-f5vHep19dGxS7xEdBp2ff0psyTeli2HKaz1-UiuvSNk9faLpOyznevChVOzjeXK_B9F92_aDlvNB8Q8RretFzXMdxHbe5Io1I9PriHguZ3Y7cVuS0Aq_lhgHWzb9zW8zB0jnw_i55EpJP_v97cgkyHkP17pwQdi3X2Uuv94qU5tqgz3feVmtKlwq9gzAxDSRqZ_Y1tJ0Q8ukctNqZbQDdH9UbgMkJmXv6EZjamY0J1r-xPylLIRQY_x_K_hgiHUPSMWJ9FZL_RICY4_QZqN72aW1KurHP0pqdkPnHf0KWEzL_6Cmo3tfLqVxvntdpkUutLNaTCnJ9DLk6RlaMkW82IMv7iPMPIfmPZPHxKaje6IxNNSSfHhNLbd9x6dJCGAmxEERLwUIn4Z0FGoW07brMD0W4J5FMxqB2DoVtoJANFEkDRdZAj0-bgdMJYpf67STi8ZIT0CDggjlRx3McGsVLKOIrkHwLsbk2KlRsB-7NjHfztX4QjXJTiO26GEQD93bxbpZ6YdsPQi8YuNNjKhUxTzqhYIwzP_A77bZwOzzkwmPthHuBF0S3LoVR4Pque3l7v-teT2Tmyk3uLwmfxcGAYU1uwRT3YLsVLG_A5gR9XqEUBKUlKClBKQnKnKDsVzd4aj1bbfPUFsydeW_m_Wqo89UBvaHzVaEIqNmC4dVIZu_bq4jzQ8PNxPKhroGyvBpSxqtBtkueqH9h46PnfsWamDb_azFYWUHaOVDbwKackJWf_0ImJ-TZOw_A6H3Y9D5ieQi0cEHLCrRbYVNNn-mKrugWbIHGtnA9v5Vt5F2tqNoou8KIVqx74LpCls8j32gM0l1ydHjuwvK9vQO7_MsYIn5IZobYVMhMhffkDwSr6fXhOV2S0TldWvLNmSyXPblJ6-M7n9NcHP7yTbFRasNPnrBbt16Na6IOb18QNj9FFZdq1ZKvliXnwqxoEwvy_Ul7UbCzhe0uF0YV2amzr62c7GVGWCu1GoPKCTnyx8eI5YQcvfvF3sMKX_wNcfYBbHYwp9UELDuEVBKk4qBOWQX7j5wdxAN7HatmHjS_CtWr0DcV-mkFmm7BFkeGeWYevvLgs9o-B0vnhyw18yOWmvSTWqe7NXy7p1gN38HKaTP0mN_udNoiafPE577n8yh0RBTQqB1EQYjcTuQ7G4f_DgAA___2acvCCgUAAA==","fqdn":"loseimposeherself.com","domain":"loseimposeherself.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"loseimposeherself.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 08:12:24 GMT","end":"Thu, 19 Mar 2026 08:12:23 GMT"},"fingerprint":{"sha1":"B1:6B:EB:05:E0:5A:FE:EB:0E:C8:A3:8B:EC:61:8D:51:CD:8C:90:5B","sha256":"87:C6:97:CB:C2:A5:11:74:9B:43:AB:AB:6C:80:15:71:6F:DB:98:4D:C1:34:D2:A7:47:B5:D1:64:F6:AD:05:80"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_4RTz4scxRev2Sw55Hv4ohHPg0RRcWf75-y0OYhrXAnGJCSRHGKQqq7qnXJ7qtqq7undPRkDMXjagwf1Ys9nJruJBolXxRAmXkJAcLw4YPagf4EIwaP07sDqyXf4vB-f5vHep19dGxS7xEdBp2ff0psyTeli2HKaz1-UiuvSNk9faLpOyznevChVOzjeXK_B9F92_aDlvNB8Q8RretFzXMdxHbe5Io1I9PriHguZ3Y7cVuS0Aq_lhgHWzb9zW8zB0jnw_i55EpJP_v97cgkyHkP17pwQdi3X2Uuv94qU5tqgz3feVmtKlwq9gzAxDSRqZ_Y1tJ0Q8ukctNqZbQDdH9UbgMkJmXv6EZjamY0J1r-xPylLIRQY_x_K_hgiHUPSMWJ9FZL_RICY4_QZqN72aW1KurHP0pqdkPnHf0KWEzL_6Cmo3tfLqVxvntdpkUutLNaTCnJ9DLk6RlaMkW82IMv7iPMPIfmPZPHxKaje6IxNNSSfHhNLbd9x6dJCGAmxEERLwUIn4Z0FGoW07brMD0W4J5FMxqB2DoVtoJANFEkDRdZAj0-bgdMJYpf67STi8ZIT0CDggjlRx3McGsVLKOIrkHwLsbk2KlRsB-7NjHfztX4QjXJTiO26GEQD93bxbpZ6YdsPQi8YuNNjKhUxTzqhYIwzP_A77bZwOzzkwmPthHuBF0S3LoVR4Pque3l7v-teT2Tmyk3uLwmfxcGAYU1uwRT3YLsVLG_A5gR9XqEUBKUlKClBKQnKnKDsVzd4aj1bbfPUFsydeW_m_Wqo89UBvaHzVaEIqNmC4dVIZu_bq4jzQ8PNxPKhroGyvBpSxqtBtkueqH9h46PnfsWamDb_azFYWUHaOVDbwKackJWf_0ImJ-TZOw_A6H3Y9D5ieQi0cEHLCrRbYVNNn-mKrugWbIHGtnA9v5Vt5F2tqNoou8KIVqx74LpCls8j32gM0l1ydHjuwvK9vQO7_MsYIn5IZobYVMhMhffkDwSr6fXhOV2S0TldWvLNmSyXPblJ6-M7n9NcHP7yTbFRasNPnrBbt16Na6IOb18QNj9FFZdq1ZKvliXnwqxoEwvy_Ul7UbCzhe0uF0YV2amzr62c7GVGWCu1GoPKCTnyx8eI5YQcvfvF3sMKX_wNcfYBbHYwp9UELDuEVBKk4qBOWQX7j5wdxAN7HatmHjS_CtWr0DcV-mkFmm7BFkeGeWYevvLgs9o-B0vnhyw18yOWmvSTWqe7NXy7p1gN38HKaTP0mN_udNoiafPE577n8yh0RBTQqB1EQYjcTuQ7G4f_DgAA___2acvCCgUAAA== HTTP/1.1\r\nHost: loseimposeherself.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl25634524=1; nlecdf85ebbdb343866e18d5de2b6fd24249=[5941311]; uid_id2=e76301a7-59ee-4974-8fd8-a95a611b35e5:2:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:54 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: loseimposeherself.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 3bf582347f3dda38fd3aec411757c5d8\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":389,"timings":{"blocked":293,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"loseimposeherself.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/bb/5e/7a/bb5e7a409e9493480d272715857de006/1756661819.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:33:02 GMT","end":"Thu, 05 Feb 2026 02:33:01 GMT"},"fingerprint":{"sha1":"FF:BB:C7:F6:31:A3:EE:08:8E:72:C4:2F:A2:C8:78:1B:3C:22:C4:57","sha256":"93:BE:65:88:B5:AC:E6:69:91:EE:F6:7E:27:3F:D6:9F:59:B1:AB:46:F7:49:0D:E8:F2:1C:9E:A9:BE:F9:B6:95"}}},"request":{"raw":"GET /cti/bb/5e/7a/bb5e7a409e9493480d272715857de006/1756661819.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 02:52:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 81333\r\nserver: nginx/1.21.6\r\nlast-modified: Sun, 31 Aug 2025 17:36:59 GMT\r\netag: \"68b4883b-13db5\"\r\nexpires: Thu, 08 Jan 2026 02:52:54 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":81333,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.3 (Macintosh), datetime=2025:08:30 15:01:08], progressive, precision 8, 320x240, components 3","md5":"37216fc5eeed9ad5265913b11e7cdb2a","sha1":"b503474df8033aa8618961be68df64198b8def1c","sha256":"f72be2709677c7315d46e09e382db81a10d42f9da63e4b0fcebcfb91cc920c19","sha512":"80ab464711d9b4b0f57182872eff6ae25289b870fdec7c85295f60c742829b0955db4dccbae1bf875003751cbc17d6f2c7114ee7c80ef7e9f3d576ba7e2bf0a2","ssdeep":"1536:bA9iNcqwL9iNcqwhOW5r8XCOMs8dTDMbw0DGeY5So53yGTscD:6iCxiCUWKXC6Suid53y2D","tlshash":"6083f17cb38ade03f0e9257e54a2d3ebc3799e98a3832605785da9443bf60107d4e249","first_seen":"2025-09-02T18:13:44.358405Z","last_seen":"2026-05-25T10:53:19.587504Z","times_seen":1403,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loseimposeherself.com/impr.gif?sid=H4sIAAAAAAAC_4RTwYscxReu2Qw55Hf4oRHPg0RRcWe7p7tnps1BXONKMCYhieQQg1RXVe-U21PVVnVP7-7JGIjB0x48qBd7vpnsJhokXhVDmHgJAcHx4qDZi3-BCMGj9O7A6sl3-N579RWP9756dW2Y7xIPOZ2dfUtvyiShS0HTaTx_USquC9s4faHhOk3neOOiVG3_eGO9AjN42fX8pvNC4w3B1vRSy3Edx3Xcxoo0ItbrS3ssZHo7dJuh0_RbTTfwsW7-ndt8AZYugA92yZOQfPr_3-NLkGwC1b9zQti1TKcvvd7PE5ppgwHfeVutKV0o9A_C2NQQq535bWg7JeTTBWi1M58AejCuJkAkp2Th6UeI1M68TUSDG_udRgmEQsT_h2IwgUgmkHQCpq9C8p8IwDhOn4Hqb5_WpqAb-yyt2CmpP_4TspiS-qOnoPpfLydyvXFeJ3kmtbJYj0vI9Qnk6gRpPkG2WYMs7oNlH0LyH8nS41NQ_fEZm2hIPjsmOm3PcWlnMQiFWPTDjr_YjXl3kYYBbbtu5AUi2JNIxhNQu4Dc1pDLGvK4hjytoc9nDd_p-sylXjsOOes4PvV9LiIn7LYch4asg5xdgeRbYObazZT3srWBH44zk4vtXDHrh0P3dv5umrSCtucHLX_ozo6pRDAedwMRRTzyfK_bbgu3ywMuWlE75i2_5Ye3LgWh73que3l7v-pezXFVc-giNVducq8jvIj5wwhrcgsmvwfbK2F5DTYjGPAShSAoLEFBCQpJUGQExaC8wRPbsuU2T2weuXPfmnuvHOlsdUhv6GxVKAJqtmB4OZbp-_YqWHZotBlbPtIV0CgrRzTi5TDdJU9UT1j76LnfsCZmjf-aD1aWkHYB1NawKadk5ee_kMopefbOA0T0PmxyH0weAs1d0KIE7ZXYVLNneqInenm0SJnN3ZbXTDeynlZUbRQ9YUST6T64LpFmdWQbtWGyS46Ozl1Yvre3YJd_-Q6CPSRzAzMlUlPiPfkDwWpyfXROF2R8TheWfHMmzWRfbtJq-c5nNBOHv3xTbBTa8JMn7NatV1lFVOHtC8Jmp6jiUq1a8tWy5FyYFW2YIN-ftBdFdDa3veXcqDw9dfa1lZP91AhrpVYTUDklR_74GExOydG7X-x9rODFX8HSD2DTgz6tJojSOhJJkIiDcxqVsP_Io4N4aK9j1dRBs6tQ_RIDU2KQlKDJFmx-ZJSl5uErDz6r7HNESX0UJaY-jhKTfFLpdLeCbyuY7Mtm5awRe6LFHKfbabteNxau53MWB10_5G3qeJ5AZqfynY3DfwcAAP__OPDQQQoFAAA=","fqdn":"loseimposeherself.com","domain":"loseimposeherself.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"loseimposeherself.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 08:12:24 GMT","end":"Thu, 19 Mar 2026 08:12:23 GMT"},"fingerprint":{"sha1":"B1:6B:EB:05:E0:5A:FE:EB:0E:C8:A3:8B:EC:61:8D:51:CD:8C:90:5B","sha256":"87:C6:97:CB:C2:A5:11:74:9B:43:AB:AB:6C:80:15:71:6F:DB:98:4D:C1:34:D2:A7:47:B5:D1:64:F6:AD:05:80"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_4RTwYscxReu2Qw55Hf4oRHPg0RRcWe7p7tnps1BXONKMCYhieQQg1RXVe-U21PVVnVP7-7JGIjB0x48qBd7vpnsJhokXhVDmHgJAcHx4qDZi3-BCMGj9O7A6sl3-N579RWP9756dW2Y7xIPOZ2dfUtvyiShS0HTaTx_USquC9s4faHhOk3neOOiVG3_eGO9AjN42fX8pvNC4w3B1vRSy3Edx3Xcxoo0ItbrS3ssZHo7dJuh0_RbTTfwsW7-ndt8AZYugA92yZOQfPr_3-NLkGwC1b9zQti1TKcvvd7PE5ppgwHfeVutKV0o9A_C2NQQq535bWg7JeTTBWi1M58AejCuJkAkp2Th6UeI1M68TUSDG_udRgmEQsT_h2IwgUgmkHQCpq9C8p8IwDhOn4Hqb5_WpqAb-yyt2CmpP_4TspiS-qOnoPpfLydyvXFeJ3kmtbJYj0vI9Qnk6gRpPkG2WYMs7oNlH0LyH8nS41NQ_fEZm2hIPjsmOm3PcWlnMQiFWPTDjr_YjXl3kYYBbbtu5AUi2JNIxhNQu4Dc1pDLGvK4hjytoc9nDd_p-sylXjsOOes4PvV9LiIn7LYch4asg5xdgeRbYObazZT3srWBH44zk4vtXDHrh0P3dv5umrSCtucHLX_ozo6pRDAedwMRRTzyfK_bbgu3ywMuWlE75i2_5Ye3LgWh73que3l7v-pezXFVc-giNVducq8jvIj5wwhrcgsmvwfbK2F5DTYjGPAShSAoLEFBCQpJUGQExaC8wRPbsuU2T2weuXPfmnuvHOlsdUhv6GxVKAJqtmB4OZbp-_YqWHZotBlbPtIV0CgrRzTi5TDdJU9UT1j76LnfsCZmjf-aD1aWkHYB1NawKadk5ee_kMopefbOA0T0PmxyH0weAs1d0KIE7ZXYVLNneqInenm0SJnN3ZbXTDeynlZUbRQ9YUST6T64LpFmdWQbtWGyS46Ozl1Yvre3YJd_-Q6CPSRzAzMlUlPiPfkDwWpyfXROF2R8TheWfHMmzWRfbtJq-c5nNBOHv3xTbBTa8JMn7NatV1lFVOHtC8Jmp6jiUq1a8tWy5FyYFW2YIN-ftBdFdDa3veXcqDw9dfa1lZP91AhrpVYTUDklR_74GExOydG7X-x9rODFX8HSD2DTgz6tJojSOhJJkIiDcxqVsP_Io4N4aK9j1dRBs6tQ_RIDU2KQlKDJFmx-ZJSl5uErDz6r7HNESX0UJaY-jhKTfFLpdLeCbyuY7Mtm5awRe6LFHKfbabteNxau53MWB10_5G3qeJ5AZqfynY3DfwcAAP__OPDQQQoFAAA= HTTP/1.1\r\nHost: loseimposeherself.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl25634524=1; nlecdf85ebbdb343866e18d5de2b6fd24249=[5941311]; uid_id2=e76301a7-59ee-4974-8fd8-a95a611b35e5:2:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:54 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: loseimposeherself.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: dd069ae65e2ffd1d7a3db4eedf2206d1\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":421,"timings":{"blocked":320,"dns":0,"connect":0,"send":0,"wait":100,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"loseimposeherself.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=e3fc7a49-8f00-4fdd-bc32-5e9b197e91d0\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=e02ee106ac9f7f9a067c81c19bdc3c60\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=2","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 22:13:33 GMT","end":"Sat, 28 Mar 2026 22:13:32 GMT"},"fingerprint":{"sha1":"A3:08:82:4A:9A:ED:6E:4C:29:FC:10:0D:1D:8F:8B:68:0E:D0:49:72","sha256":"B4:01:36:5D:F9:70:75:BF:F6:56:67:76:BB:CC:A2:D3:BA:69:61:33:56:FC:C7:21:69:6E:04:BE:95:D7:B2:F5"}}},"request":{"raw":"GET /pxf.gif?uuid=e3fc7a49-8f00-4fdd-bc32-5e9b197e91d0\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=e02ee106ac9f7f9a067c81c19bdc3c60\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=2 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:55 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 1\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 25d6da8036cf3c19127e7f6f913104f0\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":646,"timings":{"blocked":265,"dns":1,"connect":94,"send":0,"wait":94,"receive":0,"ssl":189},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"35.156.32.205","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:53.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"traffinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Fri, 18 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"11:9F:BE:35:27:7B:7B:85:C9:B3:FF:0E:CA:F6:0D:13:B0:A9:A0:BB","sha256":"81:A4:38:32:0D:BC:66:C8:7B:6D:08:BC:93:91:76:73:A2:BD:D0:53:3C:BF:2F:FD:B8:87:00:C6:EC:3B:6C:77"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hehehub-acsu123.pythonanywhere.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 02:52:53 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://hehehub-acsu123.pythonanywhere.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=df5693cb-8a90-406e-8abd-a2bbb689ce41:3:1; expires=Fri, 04 Jan 2036 02:52:53 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"607765101cb229509076e2158aa54dfb","sha1":"18cb23e70e9ba5e48a5fbdba7934cef6a396dd51","sha256":"9fec2ad86687e6bdbe58b422de4cee540d48508eed10ea7fe3b52414ea83818b","sha512":"ea7cf60ba278ee3778b0dac7b016a2d58eeae72f58ea84e9b9225e7a2a3d55a0df026ce784fc66c33fe57a9c66e53f2d7b4d17626a9e73b375627562f06da6d9","ssdeep":"","tlshash":"b990041d35511c170010751d1400c1434d0415131cf0f1f40c1cf0c0045dd4cc3cc707","first_seen":"2026-01-06T02:53:22.875372Z","last_seen":"2026-01-06T02:53:22.875372Z","times_seen":1,"resource_available":false,"data":null}},"time_used":510,"timings":{"blocked":247,"dns":0,"connect":23,"send":0,"wait":25,"receive":2,"ssl":205},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loseimposeherself.com/impr.gif?sid=H4sIAAAAAAAC_4RTsY8bxRceO6cU-RU_QRC1hQICxPl2vbu2lxSIIxyKCEmUBKUIEZqdmT0Pt55ZZna9d1cRIoWI6goKoGH92blLIEKhBRFFDk0UCQnTYESu4S9ASBEl2jtLBxWv-N5737fFe9--uTbMd4mHnM7OvqU3ZZLQpaDpNJ6_KBXXhW2cvtBwnaZzvHFRqrZ_vLFegRm87Hp-03mh8YZga3qp5biO4zpuY0UaEev1pT0VMr0dus3Qafqtphv4WDf_7m1eh6V18MEueRKST___e3wJkk2g-ndOCLuW6fSl1_t5QjNtMOA7b6s1pQuF_kEZmxpitTP_GtpOCfm0Dq125htAD8bVBojklNSffoRI7czHRDS4sT9plEAoRPx_KAYTiGQCSSdg-iok_4kAjOP0Gaj-9mltCrqxr9JKnZKFx39CFlOy8OgpqP7Xy4lcb5zXSZ5JrSzW4xJyfQK5OkGaT5Bt1iCL-2DZh5D8R7L0-BRUf3zGJhqSz46JTttzXNpZDEIhFv2w4y92Y95dpGFA264beYEI9iyS8QTU1pHbGnJZQx7XkKc19Pms4Ttdn7nUa8chZx3Hp77PReSE3Zbj0JB1kLMrkHwLzFzbTnkvWxuMM5OLca6YHbo39yk_3CO3K9IPh-7t_N00aQVtzw9a_tCdHVOJYDzuBiKKeOT5XrfdFm6XB1y0onbMW37LD29dCkLf9Vz3MlJz5Sb3OsKLmD-MsCa3YPJ7sL0SltdgM4IBL1EIgsISFJSgkARFRlAMyhs8sS1bbvPE5pE7z6159sqRzlaH9IbOVoUioGYLhpdjmb5vr4Jlh0abseUjXQGNsnJEI14O013yRPULax899xvWxKzxX8vAyhLS1kFtDZtySlZ-_gupnJJn7zxARO_DJvfB5CHQ3AUtStBeiU01e6YneqKXR4uU2dxtec10I-tpRdVG0RNGNJnug-sSabaAbKM2THbJ0dG5C8v39g7s8i_fQrCHZB5gpkRqSrwnfyBYTa6PzumCjM_pwpJvzqSZ7MtNWh3f-Yxm4vCXb4qNQht-8oTduvUqq4SqvH1B2OwUVVyqVUu-WpacC7OiDRPk-5P2oojO5ra3nBuVp6fOvrZysp8aYa3UagIqp-TIHx-DySk5eveLvYcVvPgrWPoBbHowp9UEUVpHIgkSccDTqIT9Rx8d1EN7HatmATS7CtUvMTAlBkkJmmzB5kdGWWoevvLgsyo-R5QsjKLELIyjxCSfVD7d3TOrgkkF38HKWSP2RIs5TrfTdr1uLFzP5ywOun7I29TxPIHMTuU7G4f_DgAA___9moWCCgUAAA==","fqdn":"loseimposeherself.com","domain":"loseimposeherself.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"loseimposeherself.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 08:12:24 GMT","end":"Thu, 19 Mar 2026 08:12:23 GMT"},"fingerprint":{"sha1":"B1:6B:EB:05:E0:5A:FE:EB:0E:C8:A3:8B:EC:61:8D:51:CD:8C:90:5B","sha256":"87:C6:97:CB:C2:A5:11:74:9B:43:AB:AB:6C:80:15:71:6F:DB:98:4D:C1:34:D2:A7:47:B5:D1:64:F6:AD:05:80"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_4RTsY8bxRceO6cU-RU_QRC1hQICxPl2vbu2lxSIIxyKCEmUBKUIEZqdmT0Pt55ZZna9d1cRIoWI6goKoGH92blLIEKhBRFFDk0UCQnTYESu4S9ASBEl2jtLBxWv-N5737fFe9--uTbMd4mHnM7OvqU3ZZLQpaDpNJ6_KBXXhW2cvtBwnaZzvHFRqrZ_vLFegRm87Hp-03mh8YZga3qp5biO4zpuY0UaEev1pT0VMr0dus3Qafqtphv4WDf_7m1eh6V18MEueRKST___e3wJkk2g-ndOCLuW6fSl1_t5QjNtMOA7b6s1pQuF_kEZmxpitTP_GtpOCfm0Dq125htAD8bVBojklNSffoRI7czHRDS4sT9plEAoRPx_KAYTiGQCSSdg-iok_4kAjOP0Gaj-9mltCrqxr9JKnZKFx39CFlOy8OgpqP7Xy4lcb5zXSZ5JrSzW4xJyfQK5OkGaT5Bt1iCL-2DZh5D8R7L0-BRUf3zGJhqSz46JTttzXNpZDEIhFv2w4y92Y95dpGFA264beYEI9iyS8QTU1pHbGnJZQx7XkKc19Pms4Ttdn7nUa8chZx3Hp77PReSE3Zbj0JB1kLMrkHwLzFzbTnkvWxuMM5OLca6YHbo39yk_3CO3K9IPh-7t_N00aQVtzw9a_tCdHVOJYDzuBiKKeOT5XrfdFm6XB1y0onbMW37LD29dCkLf9Vz3MlJz5Sb3OsKLmD-MsCa3YPJ7sL0SltdgM4IBL1EIgsISFJSgkARFRlAMyhs8sS1bbvPE5pE7z6159sqRzlaH9IbOVoUioGYLhpdjmb5vr4Jlh0abseUjXQGNsnJEI14O013yRPULax899xvWxKzxX8vAyhLS1kFtDZtySlZ-_gupnJJn7zxARO_DJvfB5CHQ3AUtStBeiU01e6YneqKXR4uU2dxtec10I-tpRdVG0RNGNJnug-sSabaAbKM2THbJ0dG5C8v39g7s8i_fQrCHZB5gpkRqSrwnfyBYTa6PzumCjM_pwpJvzqSZ7MtNWh3f-Yxm4vCXb4qNQht-8oTduvUqq4SqvH1B2OwUVVyqVUu-WpacC7OiDRPk-5P2oojO5ra3nBuVp6fOvrZysp8aYa3UagIqp-TIHx-DySk5eveLvYcVvPgrWPoBbHowp9UEUVpHIgkSccDTqIT9Rx8d1EN7HatmATS7CtUvMTAlBkkJmmzB5kdGWWoevvLgsyo-R5QsjKLELIyjxCSfVD7d3TOrgkkF38HKWSP2RIs5TrfTdr1uLFzP5ywOun7I29TxPIHMTuU7G4f_DgAA___9moWCCgUAAA== HTTP/1.1\r\nHost: loseimposeherself.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl25634524=1; nlecdf85ebbdb343866e18d5de2b6fd24249=[5941311]; uid_id2=e76301a7-59ee-4974-8fd8-a95a611b35e5:2:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:54 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: loseimposeherself.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: bb89c5dd34ec0ff0b6b717b4ec00cb47\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":389,"timings":{"blocked":290,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"loseimposeherself.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/c6/03/e8/c603e83fb40b46b58dbb360dc1747e11/1756656826.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:33:02 GMT","end":"Thu, 05 Feb 2026 02:33:01 GMT"},"fingerprint":{"sha1":"FF:BB:C7:F6:31:A3:EE:08:8E:72:C4:2F:A2:C8:78:1B:3C:22:C4:57","sha256":"93:BE:65:88:B5:AC:E6:69:91:EE:F6:7E:27:3F:D6:9F:59:B1:AB:46:F7:49:0D:E8:F2:1C:9E:A9:BE:F9:B6:95"}}},"request":{"raw":"GET /cti/c6/03/e8/c603e83fb40b46b58dbb360dc1747e11/1756656826.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 02:52:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 53571\r\nserver: nginx/1.21.6\r\nlast-modified: Sun, 31 Aug 2025 16:13:46 GMT\r\netag: \"68b474ba-d143\"\r\nexpires: Thu, 08 Jan 2026 02:52:54 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":53571,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.3 (Macintosh), datetime=2025:08:29 18:43:28], progressive, precision 8, 728x90, components 3","md5":"e2a3f96684fe29f60b2f3641ac5133b5","sha1":"19067bc7d9210709212cd32db05b55aefc422bea","sha256":"68a37280ff695ace386f3aabbbd8b75b36edce98355533b33bdf0788a7e8e8ce","sha512":"2811fce581695ab109a3788a4b0537b399804d0614cb04c0bd5f6e054f2ce6fa7dbff1385d3b222bbe7725a4489b3efbc3c1781d9f1d37688c160e2cd9dde8e2","ssdeep":"1536:GlRHx8xHqHTbzDnzmr0vCqxt3O82BAhjE:yHmKzfDzfvp2Gh4","tlshash":"f233f1078fe18d92fae48475f8f2d791d22259d5e7b316603e5cf91837b1892dd4d202","first_seen":"2025-09-02T22:57:47.7902Z","last_seen":"2026-05-18T15:28:38.148595Z","times_seen":737,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loseimposeherself.com/ren.gif?sid=H4sIAAAAAAAC_4RTT4sc1Rd9PRmyyG_xQyOuG4mi4vTU354usxDHOBKMSUgiWcQg79V7Nf2c6vfK96q6ZmZlDMTgahYu1I3VpzsziQaJH8AQekQIAcF2Y4OZjZ9AhOBSaqZhdOVdnHvvObW499R9NwbFHvFR0On5d_SmTFO6GLac5ouXpeK6tM2zl5qu03JONi9L1Q5ONtdrMP1XXT9oOS813xLxml70HNdxXMdtrkgjEr2-uK9CZncjtxU5rcBruWGAdfPv3hZzsHQOvL9Hnobkk___nlyBjMdQvXunhF3LdfbKm70ipbk26POdd9Wa0qVC77BMTAOJ2pl9DW0nhHw-B612ZhtA90f1BmByQuaefQymdmZjgvVvHUzKUggFxv-Hsj-GSMeQdIxYX4fkPxMg5jh7Dqq3fVabkm4cqLRWJ2T-yZ-Q5YTMP34GqvftcirXmxd1WuRSK4v1pIJcH0OujpEVY-SbDchyF3H-MST_iSw-OQPVG52zqYbk0xNiqe07Ll1aCCMhFoJoKVjoJLyzQKOQtl2X-aEI9y2SyRjUzqGwDRSygSJpoMga6PFpM3A6QexSv51EPF5yAhoEXDAn6niOQ6N4CUV8DZJvITY37hbvZ6kXtv0g9IKBOz2hUhHzpBMKxjjzA7_Tbgu3w0MuPNZOuBd4QXTnShgFru-6V7cz3s3X-qPcFGJUqNgO3NsHVBDtk9s1GUQDF5m5dpv7S8JncTBgWJNbMMUD2G4FyxuwOUGfVygFQWkJSkpQSoIyJyj71S2eWs9W2zy1BXNn2ZtlvxrqfHVAb-l8VSgCarZgeDWS2Yf2OuL8yHAzsXyoa6Asr4aU8WqQ7ZGn6l_Y-OSF37Amps3_WhtWVpB2DtQ2sCknZOWXv5DJCXn-3kMwugub7iKWR0ALF7SsQLsVNtX0ua7oim7BFmhsC9fzW9lG3tWKqo2yK4xoxboHritk-TzyjcYg3SPHhxcuLT_YP7Crv96HiB-RWSA2FTJT4QP5A8FqenN4QZdkdEGXlnx3LstlT27S-vgu5jQXR79-W2yU2vDTp-zWndfjWqjLu5eEzc9QxaVateSbZcm5MCvaxIJ8f9peFux8YbvLhVFFdub8Gyune5kR1kqtxqByQo798SliOSHH73-1_7DCl_cQZx_BZodzWk3AsiNIJUEqDnnKKth_9OywHtibWDXzoPl1qF6FvqnQTyvQdAu2ODbMM_PotYdf1PElWDo_ZKmZH7HUpJ_VPv1Yw3jfsRp2YeW0GXrMb3c6bZG0eeJz3_N5FDoiCmjUDqIgRG4n8r2No38HAAD__16EcYwKBQAA","fqdn":"loseimposeherself.com","domain":"loseimposeherself.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"loseimposeherself.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 08:12:24 GMT","end":"Thu, 19 Mar 2026 08:12:23 GMT"},"fingerprint":{"sha1":"B1:6B:EB:05:E0:5A:FE:EB:0E:C8:A3:8B:EC:61:8D:51:CD:8C:90:5B","sha256":"87:C6:97:CB:C2:A5:11:74:9B:43:AB:AB:6C:80:15:71:6F:DB:98:4D:C1:34:D2:A7:47:B5:D1:64:F6:AD:05:80"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_4RTT4sc1Rd9PRmyyG_xQyOuG4mi4vTU354usxDHOBKMSUgiWcQg79V7Nf2c6vfK96q6ZmZlDMTgahYu1I3VpzsziQaJH8AQekQIAcF2Y4OZjZ9AhOBSaqZhdOVdnHvvObW499R9NwbFHvFR0On5d_SmTFO6GLac5ouXpeK6tM2zl5qu03JONi9L1Q5ONtdrMP1XXT9oOS813xLxml70HNdxXMdtrkgjEr2-uK9CZncjtxU5rcBruWGAdfPv3hZzsHQOvL9Hnobkk___nlyBjMdQvXunhF3LdfbKm70ipbk26POdd9Wa0qVC77BMTAOJ2pl9DW0nhHw-B612ZhtA90f1BmByQuaefQymdmZjgvVvHUzKUggFxv-Hsj-GSMeQdIxYX4fkPxMg5jh7Dqq3fVabkm4cqLRWJ2T-yZ-Q5YTMP34GqvftcirXmxd1WuRSK4v1pIJcH0OujpEVY-SbDchyF3H-MST_iSw-OQPVG52zqYbk0xNiqe07Ll1aCCMhFoJoKVjoJLyzQKOQtl2X-aEI9y2SyRjUzqGwDRSygSJpoMga6PFpM3A6QexSv51EPF5yAhoEXDAn6niOQ6N4CUV8DZJvITY37hbvZ6kXtv0g9IKBOz2hUhHzpBMKxjjzA7_Tbgu3w0MuPNZOuBd4QXTnShgFru-6V7cz3s3X-qPcFGJUqNgO3NsHVBDtk9s1GUQDF5m5dpv7S8JncTBgWJNbMMUD2G4FyxuwOUGfVygFQWkJSkpQSoIyJyj71S2eWs9W2zy1BXNn2ZtlvxrqfHVAb-l8VSgCarZgeDWS2Yf2OuL8yHAzsXyoa6Asr4aU8WqQ7ZGn6l_Y-OSF37Amps3_WhtWVpB2DtQ2sCknZOWXv5DJCXn-3kMwugub7iKWR0ALF7SsQLsVNtX0ua7oim7BFmhsC9fzW9lG3tWKqo2yK4xoxboHritk-TzyjcYg3SPHhxcuLT_YP7Crv96HiB-RWSA2FTJT4QP5A8FqenN4QZdkdEGXlnx3LstlT27S-vgu5jQXR79-W2yU2vDTp-zWndfjWqjLu5eEzc9QxaVateSbZcm5MCvaxIJ8f9peFux8YbvLhVFFdub8Gyune5kR1kqtxqByQo798SliOSHH73-1_7DCl_cQZx_BZodzWk3AsiNIJUEqDnnKKth_9OywHtibWDXzoPl1qF6FvqnQTyvQdAu2ODbMM_PotYdf1PElWDo_ZKmZH7HUpJ_VPv1Yw3jfsRp2YeW0GXrMb3c6bZG0eeJz3_N5FDoiCmjUDqIgRG4n8r2No38HAAD__16EcYwKBQAA HTTP/1.1\r\nHost: loseimposeherself.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl25634524=1; nlecdf85ebbdb343866e18d5de2b6fd24249=[5941311]; uid_id2=e76301a7-59ee-4974-8fd8-a95a611b35e5:2:1; iprc_l+b9a0dfe34c8114f1d5a734fcb9221aeb=5941311; iprc_l:5941311=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:55 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: close\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: loseimposeherself.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: cd2221850b5917070d88074e879f7725\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":270,"timings":{"blocked":174,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"loseimposeherself.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/default/robot/4/css/magic.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"172.67.210.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:26:15 GMT","end":"Wed, 25 Mar 2026 23:23:44 GMT"},"fingerprint":{"sha1":"05:E7:A3:19:D2:55:91:F8:B7:45:48:72:0B:86:C7:0C:2C:CA:27:03","sha256":"14:76:91:36:84:B6:CF:C4:0A:BA:6F:14:80:F9:C7:77:48:3B:08:A3:C8:48:DC:0F:F6:CE:86:72:BB:CC:0B:06"}}},"request":{"raw":"GET /sb/notifications/utility/default/robot/4/css/magic.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hehehub-acsu123.pythonanywhere.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 02:52:55 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Oct 2025 11:45:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68e64ebe-affe\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v0aJD54ws1%2BMmJ2iJ4KX1JO7HHkuXuhqyazoilNXZJxXSZRkhYB%2B84FxdJch4Hh2HAJZR%2FvSlc8KOm8Yca5CA8SLMIW%2BxKlzLaGm%2FRr3nLM%3D\"}]}\r\ncf-ray: 9b97ec0b9cbe0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45054,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"bcd1967f8c2604f55f57197de0ae895e","sha1":"c31a10c3ecde74b50450a0a1ad21aa474ff05e7d","sha256":"787eac5d9417257a04de7b18ef21f5ec887de3aee642ceba9a7d56a8209eea2a","sha512":"b37f1a61bbe740bc29308e664227701366ac978d4fbed081f13c47200edd74a792ab980559a236cff39ae27d3fda3ffffef3f1ac2dc420612b616496b44e9df8","ssdeep":"384:lQLl1pRp0itimTKDbObwHuHXFlF7FPFSWRyYyRZZZaZjZPfbfUO3OipypE:GpRp0itiFbObwHuHXFlF7FPFSWX","tlshash":"b913276b2dd2114086564365a3fe6b2c261c85c31c6becfab3a218ce8f1567c53db61f","first_seen":"2025-06-11T18:18:27.729381Z","last_seen":"2026-07-15T20:25:25.989651Z","times_seen":5744,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":23,"dns":3,"connect":1,"send":0,"wait":470,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/default/robot/4/img/close.png","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"172.67.210.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:55.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:26:15 GMT","end":"Wed, 25 Mar 2026 23:23:44 GMT"},"fingerprint":{"sha1":"05:E7:A3:19:D2:55:91:F8:B7:45:48:72:0B:86:C7:0C:2C:CA:27:03","sha256":"14:76:91:36:84:B6:CF:C4:0A:BA:6F:14:80:F9:C7:77:48:3B:08:A3:C8:48:DC:0F:F6:CE:86:72:BB:CC:0B:06"}}},"request":{"raw":"GET /sb/notifications/utility/default/robot/4/img/close.png HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 02:52:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 7005\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Oct 2025 11:45:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68e64ec1-1b5d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 4887521\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g4MMHEvfBsPUg0XMQwnumu1ciHcNFKGKjOOZnmL8rcNjQ1bLJZBL090UZRTA9sTyCEBysrzDbWhPTTNVO0Z7MFg7TkH1UNZbt3l05XupB3Y%3D\"}]}\r\ncf-ray: 9b97ec0c2d430731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7005,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"5127599f81c439cb0cf21166da26e991","sha1":"a750620e45c25855fb32ede5f1adb69ad28c1eeb","sha256":"9402058e0a31e79cd70001ebb397de51144d6e638a482f33bcee9a94dc20a6ff","sha512":"4e01869e43212009dc3811b4fc2303c39ab9aa123ce034ff4df220539a1e65784835b6cb0873cea4f6de027a7dcf1dd440ac0631e6b9c9db9085804473e3a0a8","ssdeep":"192:FkknNHG5WNN4kVyitdix/Inm2I6BRvBevoIPkucZ:9nNmoN4kVyiswm2I6BFBpuI","tlshash":"dee17d19dda17e1005d57f8a2fef815243638390c2856282dced8c5237e40f1ec6e4cb","first_seen":"2025-07-04T18:28:09.283921Z","last_seen":"2026-07-13T11:35:46.348318Z","times_seen":3252,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/default/robot/4/img/cap.png","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"172.67.210.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:55.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:26:15 GMT","end":"Wed, 25 Mar 2026 23:23:44 GMT"},"fingerprint":{"sha1":"05:E7:A3:19:D2:55:91:F8:B7:45:48:72:0B:86:C7:0C:2C:CA:27:03","sha256":"14:76:91:36:84:B6:CF:C4:0A:BA:6F:14:80:F9:C7:77:48:3B:08:A3:C8:48:DC:0F:F6:CE:86:72:BB:CC:0B:06"}}},"request":{"raw":"GET /sb/notifications/utility/default/robot/4/img/cap.png HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 02:52:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 9969\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Oct 2025 11:45:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68e64ec1-26f1\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 3881795\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9klHAHLGSDH0liXVU%2Brnid4gYP%2FxeKrVdnVziNryglFsSJQVPp8yhTZ53a5tjD9SgVkcnds4St%2BCWWqjRooYPvh4a6EwZsE805%2Fb802wx8s%3D\"}]}\r\ncf-ray: 9b97ec0c2d470731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9969,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 413 x 104, 8-bit/color RGB, non-interlaced","md5":"cd399821f365e9b2e08a8db38a7bf686","sha1":"94a95b55d5c755df8c30f7b2a80022ad014ab2b5","sha256":"f6fe4493007eb93efc7760942585342f506295cff8ca86432bde23fe256ccdb3","sha512":"72f641b5095cb7aafce82ccd88d740d9761e8bcaac1ad845ff01ceda61c469afe7e42c0ef76b49d73d4b51c21bf2dfc85073a1d49ce0fe19f77af907d05d18d9","ssdeep":"192:wS5knGCCJeNHLR+444aBNWkUzhkeJrkyuisuDP8GQxJF:XinGC1dR+441SJrkyPNEJF","tlshash":"7a22cfd2ec402ef47a4cbcdedbd80c667a8332c4e1537867ecde7c5ac80a03a8952945","first_seen":"2025-07-04T18:28:09.289965Z","last_seen":"2026-07-13T11:35:46.189464Z","times_seen":1530,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/1b/50/e5/1b50e57a5911fd0a5b46962ab48ca22b.js","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:53.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 00:11:03 GMT","end":"Sun, 29 Mar 2026 00:11:02 GMT"},"fingerprint":{"sha1":"93:86:61:9F:2D:73:66:D5:37:73:1C:FE:70:C8:9F:23:B1:C8:8A:D6","sha256":"9D:5E:D7:81:B8:B1:D7:5F:1F:E3:92:85:57:6C:B5:66:34:D6:DE:4F:AA:6C:8B:E9:92:36:D1:CC:BF:CC:45:D3"}}},"request":{"raw":"GET /1b/50/e5/1b50e57a5911fd0a5b46962ab48ca22b.js HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:53 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3403\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 2930d2cbfa656d5ff5e267ddb598bd2b\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6454,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6454), with no line terminators","md5":"81c010ddfde2faeaf1c598844287df5a","sha1":"cd0fb06af4d1e8878a8c2c8d0311892ef13ff47b","sha256":"44442357bcab05b20364ed17aae2a3ae173b906529612b0e2f7d2217a76e51ab","sha512":"0acadda1dc3bba9f6178ba54356f2aed3dba23fbaf3b53b683fc5dd78eeff47a63ec7815ffbdb1e07041b274646eaa0a71ada2500f181775833f40761fc7cac8","ssdeep":"96:A9+XCx+8Ixmzn2ySej3zqIDNcxE6204l4sNm+E/0NK4Amfnqkk7lDAP2CwU6:A6Cg/S2yPXXWxW04fNPw6K4Amf4DAPA","tlshash":"13d1859c3e80b0a057b26077b97fa019b3696c50657fd80cd012b1a03e7562ad9bbba5","first_seen":"2025-12-01T12:09:20.892186Z","last_seen":"2026-01-29T12:50:40.978548Z","times_seen":4063,"resource_available":true,"data":null}},"time_used":690,"timings":{"blocked":296,"dns":14,"connect":92,"send":0,"wait":97,"receive":0,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=1019\u0026rd=1019\u0026fd=570\u0026bv=25.12.4806\u0026tmpl=70","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.243","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:53.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 21:42:11 GMT","end":"Wed, 25 Mar 2026 21:42:10 GMT"},"fingerprint":{"sha1":"DD:BF:7F:13:B7:AA:5E:41:65:09:9E:F1:FE:42:C4:9A:00:0B:F4:E6","sha256":"FE:3B:B4:EE:8B:60:30:E2:9F:CB:E9:E2:06:C0:A4:2E:FF:35:D3:22:85:14:1C:B8:13:CD:72:FB:EA:5C:E9:98"}}},"request":{"raw":"GET /pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=1019\u0026rd=1019\u0026fd=570\u0026bv=25.12.4806\u0026tmpl=70 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:53 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":694,"timings":{"blocked":300,"dns":9,"connect":94,"send":0,"wait":96,"receive":0,"ssl":191},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loseimposeherself.com/ren.gif?sid=H4sIAAAAAAAC_1RST28bxRueTa0e-jv8BEWcLSQQIHB27bVr00NFKEEVpQlpUCT-HGZ2Zu0h65llZtdr-xSIBBWnHDgAFzaPk4Y_FSofAAgOl6oSEsuFSDQS4hMgpIojWtdS4JXmed93njm8z_PO-7vpCWkgpcerr-ixjCK62Ky51Sc3pOI6s9Vr61XPrbkXqxtStfyL1WEJZvCc1_Br7lPVl0SwqRfrrue6nutVl6URoR4uzljI-FbHq3Xcml-veU0fQ_Pf3qYOLHXAByfkYUhe_P-P8A3IYArVv31Z2M1Ex8-82E8jmmiDAT94TW0qnSn0T8vQOAjVwfw1tC0I-XgBWh3MFUAP9koFYLIgC4_eA1MH8zHBBvsPJmURhALj_0M2mEJEU0g6RaC3IfnPBAg4rq1A9W9e0yajowcsLdmCVO7_BZkVpHLvEaj-10uRHFav6yhNpFYWwzCHHE4hu1PE6RGSsQOZHSFI3oPkP5HF-1eh-nsrNtKQPJ-pl-EU1DpIyyMdpKGDNHbQ58dV3237gUcbrbDDgwuuT32fC-Z22nXXpZ3gAtLgXUi-g8BsITZb2JQ7MOkhbC-H5Q5sUhDn1S0MeI5MEGSWIKMEmSTIEoJskO_zyNZtfpNHNmXePNfnuZFPdNLdpfs66QpFQM0ODM_3ZPyO3UaQnJmMQ8snugTKknxCGc934xPyUOmW88ETv2FTHFd52G4Kxjhr-I12qyW8Nm9yUWetkNf9ut-BlTmkXZgZMZYFWf7lb8SyII_fvgNGj2CjIwTyDGjqgWY5aC_HWB0_1hM90UvZszSwqVdv1OJR0tOKqlHWE0bUAt0H1znipIJk5OxGJ-T8ZG196XC2y7d-_QEiuEvmgcDkiE2Ot-WPBN3oxmRNZ2RvTWeWfLMSJ7Ivx7Tc8_WEJuLsly-LUaYNv3LZ7nzxfFASZXlrXdjkKlVcqq4lXy1JzoVZ1iYQ5NsrdkOw1dT2llKj0vjq6gvLV_qxEdZKraagsiDn_vwQgSzI-e8-m_3h5tO_I4i3YOPTOa0mYPECIkkQidN7ynLYf_XstN61N9A1FdBkG6qfY2ByDKIcNNqBTc9NktjcvXTnkzI-BYsqExaZyh6LTPRRQV7__NLMrBK-L-EQVh5Xm3XWaLXbLRG2eNjgjXqDd5qu6Pi00_I7fhOJLeSbo7P_BAAA__-d_hhUdQQAAA==","fqdn":"loseimposeherself.com","domain":"loseimposeherself.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"loseimposeherself.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 08:12:24 GMT","end":"Thu, 19 Mar 2026 08:12:23 GMT"},"fingerprint":{"sha1":"B1:6B:EB:05:E0:5A:FE:EB:0E:C8:A3:8B:EC:61:8D:51:CD:8C:90:5B","sha256":"87:C6:97:CB:C2:A5:11:74:9B:43:AB:AB:6C:80:15:71:6F:DB:98:4D:C1:34:D2:A7:47:B5:D1:64:F6:AD:05:80"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RST28bxRueTa0e-jv8BEWcLSQQIHB27bVr00NFKEEVpQlpUCT-HGZ2Zu0h65llZtdr-xSIBBWnHDgAFzaPk4Y_FSofAAgOl6oSEsuFSDQS4hMgpIojWtdS4JXmed93njm8z_PO-7vpCWkgpcerr-ixjCK62Ky51Sc3pOI6s9Vr61XPrbkXqxtStfyL1WEJZvCc1_Br7lPVl0SwqRfrrue6nutVl6URoR4uzljI-FbHq3Xcml-veU0fQ_Pf3qYOLHXAByfkYUhe_P-P8A3IYArVv31Z2M1Ex8-82E8jmmiDAT94TW0qnSn0T8vQOAjVwfw1tC0I-XgBWh3MFUAP9koFYLIgC4_eA1MH8zHBBvsPJmURhALj_0M2mEJEU0g6RaC3IfnPBAg4rq1A9W9e0yajowcsLdmCVO7_BZkVpHLvEaj-10uRHFav6yhNpFYWwzCHHE4hu1PE6RGSsQOZHSFI3oPkP5HF-1eh-nsrNtKQPJ-pl-EU1DpIyyMdpKGDNHbQ58dV3237gUcbrbDDgwuuT32fC-Z22nXXpZ3gAtLgXUi-g8BsITZb2JQ7MOkhbC-H5Q5sUhDn1S0MeI5MEGSWIKMEmSTIEoJskO_zyNZtfpNHNmXePNfnuZFPdNLdpfs66QpFQM0ODM_3ZPyO3UaQnJmMQ8snugTKknxCGc934xPyUOmW88ETv2FTHFd52G4Kxjhr-I12qyW8Nm9yUWetkNf9ut-BlTmkXZgZMZYFWf7lb8SyII_fvgNGj2CjIwTyDGjqgWY5aC_HWB0_1hM90UvZszSwqVdv1OJR0tOKqlHWE0bUAt0H1znipIJk5OxGJ-T8ZG196XC2y7d-_QEiuEvmgcDkiE2Ot-WPBN3oxmRNZ2RvTWeWfLMSJ7Ivx7Tc8_WEJuLsly-LUaYNv3LZ7nzxfFASZXlrXdjkKlVcqq4lXy1JzoVZ1iYQ5NsrdkOw1dT2llKj0vjq6gvLV_qxEdZKraagsiDn_vwQgSzI-e8-m_3h5tO_I4i3YOPTOa0mYPECIkkQidN7ynLYf_XstN61N9A1FdBkG6qfY2ByDKIcNNqBTc9NktjcvXTnkzI-BYsqExaZyh6LTPRRQV7__NLMrBK-L-EQVh5Xm3XWaLXbLRG2eNjgjXqDd5qu6Pi00_I7fhOJLeSbo7P_BAAA__-d_hhUdQQAAA== HTTP/1.1\r\nHost: loseimposeherself.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl25634524=1; nlecdf85ebbdb343866e18d5de2b6fd24249=[5941311]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:54 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: loseimposeherself.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 609e7f96aff2e721108c81d322e68a87\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":60,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"loseimposeherself.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/8c/ef/5b/8cef5b6cd280bdae3f6f105d6e4e2a6d/1756662103.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:33:02 GMT","end":"Thu, 05 Feb 2026 02:33:01 GMT"},"fingerprint":{"sha1":"FF:BB:C7:F6:31:A3:EE:08:8E:72:C4:2F:A2:C8:78:1B:3C:22:C4:57","sha256":"93:BE:65:88:B5:AC:E6:69:91:EE:F6:7E:27:3F:D6:9F:59:B1:AB:46:F7:49:0D:E8:F2:1C:9E:A9:BE:F9:B6:95"}}},"request":{"raw":"GET /cti/8c/ef/5b/8cef5b6cd280bdae3f6f105d6e4e2a6d/1756662103.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 02:52:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 53091\r\nserver: nginx/1.21.6\r\nlast-modified: Sun, 31 Aug 2025 17:41:43 GMT\r\netag: \"68b48957-cf63\"\r\nexpires: Thu, 08 Jan 2026 02:52:54 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":53091,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.3 (Macintosh), datetime=2025:08:30 15:35:05], progressive, precision 8, 320x240, components 3","md5":"fdb07c2afc692d63cbeb795f5801a46b","sha1":"294c000fc4d8e045eb5a79dbf33eaf434aa558c0","sha256":"fd2f69bf1ca00815fbf7d5c63d2ed44e4d490a0b068e1ea00054d75eff8c4c57","sha512":"10b6855380bd8863826f64ab3f9357687ab465d11345b5530dffa0f8444ab09f8681a3b4b66b64449e9acdfc0769812dac80a1cb8506d56eec9324934a93f7f7","ssdeep":"768:SvEiGvpoSwpYyhDzX1/V6UdlEnFa0oKt0m/gRYV1g6:Do79DLKupm//V1V","tlshash":"f733c0bab7449d73dce006b899b0ead233317651a35376117cec7b04bb24dba4dad421","first_seen":"2025-09-02T19:18:23.981517Z","last_seen":"2026-07-13T02:15:36.17388Z","times_seen":1402,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loseimposeherself.com/impr.gif?sid=H4sIAAAAAAAC_4RTT4sc1Rd9PRmyyG_xQyOuG4mi4vRUdVV1d5mFOMaRYExCEskiBnn_avo51e-V71V1zczKGIjB1SxcqBurT3dmEg0SP4ASO3ERAootiA1mNuIHECG4lJ4MjK68i3PvPacW99y678qg2CEBCjo9_YbZUGlKF6OGV3_2vNLClK5-8lzd9xre0fp5pVvh0fraDGz_RT8IG95z9dckXzWLTc_3PN_z68vKysSsLe6qUNnN2G_EXiNsNvwoxJr9d--KOTg6B9HfIY9Dicn_f0suQPExdO_WMelWc5O98GqvSGluLPpi-029qk2p0dsvE1tDorf3voZxE0I-noPR23sOYPqjmQMwNSFzTz4A09t7Y4L1rz2alKWQGkz8D2V_DJmOoegY3FyGEj8SgAucPAXd2zppbEnXH6l0pk7I_MM_ocoJmX_wBHTvy6VUrdXPmrTIldEOa0kFtTaGWhkjK8bIN2pQ5R3w_H0o8T1ZfHgCujc65VIDJaZHZLsVeD5tL0SxlAth3A4XOonoLNA4oi3fZ0Eko90VqWQM6uZQuBoKVUOR1FBkNfTEtB56nZD7NGglseBtL6RhKCTz4k7T82jM2yj4JSixCW6v3CzeztJm1ArCqBkO_OkRnUoukk4kGRMsCINOqyX9joiEbLJWIpphM4xvXIji0A98_-JWJrr5an-U20KOCs3dwL_-iArjXXJrRobxwEdmL10XQVsGjIcDhlW1CVvchutWcKIGlxP0RYVSEpSOoKQEpSIoc4KyX10TqWu6akukrmD-Xm7u5aAamnxlQK-ZfEVqAmo3YUU1Utm77jJ4fmC4kTgxNDOgLK-GlIlqkO2Qx2a_sPbBM79iVU7r_2UbTlVQbg7U1bChJmT5p7-QqQl5-tY9MHoHLr0Drg6AFj5oWYF2K2zo6VNd2ZXdgi1Q7gq_GTSy9bxrNNXrZVda2eCmB2EqZPk88vXaIN0hh4dnzi3d3j2wi798B8nvk70AtxUyW-EddZdgJb06PGNKMjpjSke-OpXlqqc26Oz4zuY0lwc_f12ul8aK48fc5o2X-UyYlTfPSZefoFooveLIF0tKCGmXjeWSfH3cnZfsdOG6S4XVRXbi9CvLx3uZlc4po8egakIO_fEhuJqQw998tvuwoud_B8_eg8v253SGgGVzSBVBKvd5yiq4f_Rsvx64q1ix86D5Zehehb6t0E8r0HQTrjg0zDN7_6V7n8ziU7B0fshSOz9iqU0_mpCLP_-wu6wZfDuDu3BqWk8C2eSe12m3_KCTSD8IBU-iThiLFvWCQCJ3E_XW-sG_AwAA__-UgM0lCgUAAA==","fqdn":"loseimposeherself.com","domain":"loseimposeherself.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"loseimposeherself.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 08:12:24 GMT","end":"Thu, 19 Mar 2026 08:12:23 GMT"},"fingerprint":{"sha1":"B1:6B:EB:05:E0:5A:FE:EB:0E:C8:A3:8B:EC:61:8D:51:CD:8C:90:5B","sha256":"87:C6:97:CB:C2:A5:11:74:9B:43:AB:AB:6C:80:15:71:6F:DB:98:4D:C1:34:D2:A7:47:B5:D1:64:F6:AD:05:80"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_4RTT4sc1Rd9PRmyyG_xQyOuG4mi4vRUdVV1d5mFOMaRYExCEskiBnn_avo51e-V71V1zczKGIjB1SxcqBurT3dmEg0SP4ASO3ERAootiA1mNuIHECG4lJ4MjK68i3PvPacW99y678qg2CEBCjo9_YbZUGlKF6OGV3_2vNLClK5-8lzd9xre0fp5pVvh0fraDGz_RT8IG95z9dckXzWLTc_3PN_z68vKysSsLe6qUNnN2G_EXiNsNvwoxJr9d--KOTg6B9HfIY9Dicn_f0suQPExdO_WMelWc5O98GqvSGluLPpi-029qk2p0dsvE1tDorf3voZxE0I-noPR23sOYPqjmQMwNSFzTz4A09t7Y4L1rz2alKWQGkz8D2V_DJmOoegY3FyGEj8SgAucPAXd2zppbEnXH6l0pk7I_MM_ocoJmX_wBHTvy6VUrdXPmrTIldEOa0kFtTaGWhkjK8bIN2pQ5R3w_H0o8T1ZfHgCujc65VIDJaZHZLsVeD5tL0SxlAth3A4XOonoLNA4oi3fZ0Eko90VqWQM6uZQuBoKVUOR1FBkNfTEtB56nZD7NGglseBtL6RhKCTz4k7T82jM2yj4JSixCW6v3CzeztJm1ArCqBkO_OkRnUoukk4kGRMsCINOqyX9joiEbLJWIpphM4xvXIji0A98_-JWJrr5an-U20KOCs3dwL_-iArjXXJrRobxwEdmL10XQVsGjIcDhlW1CVvchutWcKIGlxP0RYVSEpSOoKQEpSIoc4KyX10TqWu6akukrmD-Xm7u5aAamnxlQK-ZfEVqAmo3YUU1Utm77jJ4fmC4kTgxNDOgLK-GlIlqkO2Qx2a_sPbBM79iVU7r_2UbTlVQbg7U1bChJmT5p7-QqQl5-tY9MHoHLr0Drg6AFj5oWYF2K2zo6VNd2ZXdgi1Q7gq_GTSy9bxrNNXrZVda2eCmB2EqZPk88vXaIN0hh4dnzi3d3j2wi798B8nvk70AtxUyW-EddZdgJb06PGNKMjpjSke-OpXlqqc26Oz4zuY0lwc_f12ul8aK48fc5o2X-UyYlTfPSZefoFooveLIF0tKCGmXjeWSfH3cnZfsdOG6S4XVRXbi9CvLx3uZlc4po8egakIO_fEhuJqQw998tvuwoud_B8_eg8v253SGgGVzSBVBKvd5yiq4f_Rsvx64q1ix86D5Zehehb6t0E8r0HQTrjg0zDN7_6V7n8ziU7B0fshSOz9iqU0_mpCLP_-wu6wZfDuDu3BqWk8C2eSe12m3_KCTSD8IBU-iThiLFvWCQCJ3E_XW-sG_AwAA__-UgM0lCgUAAA== HTTP/1.1\r\nHost: loseimposeherself.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl25634524=1; nlecdf85ebbdb343866e18d5de2b6fd24249=[5941311]; uid_id2=e76301a7-59ee-4974-8fd8-a95a611b35e5:2:1; iprc_l+b9a0dfe34c8114f1d5a734fcb9221aeb=5941311; iprc_l:5941311=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:54 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: loseimposeherself.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 6e016672f55fb218885592197b9406e3\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":110,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"loseimposeherself.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loseimposeherself.com/impr.gif?sid=H4sIAAAAAAAC_4RTT4sc1Rd9PRmyyG_xQyOuG4mi4vRUdVV1d5mFOMaRYExCEskiBnn_avo51e-V71V1zczKGIjB1SxcqBurT3dmEg0SP4ASO3ERAootiA1mQPwEIgSX0pOB0ZV3cf-cU4tzT913ZVDskAAFnZ5-w2yoNKWLUcOrP3teaWFKVz95ru57De9o_bzSrfBofW2WbP9FPwgb3nP11yRfNYtNz_c83_Pry8rKxKwt7rJQ2c3Yb8ReI2w2_CjEmv337Io5ODoH0d8hj0OJyf9_Ty5A8TF079Yx6VZzk73waq9IaW4s-mL7Tb2qTanR228TW0Oit_e-hnETQj6eg9HbexvA9EezDcDUhMw9-QBMb-_JBOtfe6SUpZAaTPwPZX8MmY6h6BjcXIYSPxKAC5w8Bd3bOmlsSdcfsXTGTsj8wz-hygmZf_AEdO_LpVSt1c-atMiV0Q5rSQW1NoZaGSMrxsg3alDlHfD8fSjxPVl8eAK6NzrlUgMlpkdkuxV4Pm0vRLGUC2HcDhc6iegs0DiiLd9nQSSjXYtUMgZ1cyhcDYWqoUhqKLIaemJaD71OyH0atJJY8LYX0jAUknlxp-l5NOZtFPwSlNgEt1emR3QquUg6kWRMsCAMOq2W9DsiErLJWolohs0wvnEhikM_8P2LW5no5qv9UW4LOSo0dwP_-iMojHfBrRkYxgP_ZvF2ljajVhBGzXDgI7OXrougLQPGwwHDqtqELW7DdSs4UYPLCfqiQikJSkdQUoJSEZQ5QdmvronUNV21JVJXMH-vNvdqUA1NvjKg10y-IjUBtZuwohqp7F13GTw_MNxInBiaWaIsr4aUiWqQ7ZDHZr-w9sEzv2JVTuv_5QKcqqDcHKirYUNNyPJPfyFTE_L0rXtg9A5cegdcHQAtfNCyAu1W2NDTp7qyK7sFW6DcFX4zaGTreddoqtfLrrSywU0PwlTI8nnk67VBukMOD8-cW7q9e2AXf_kWkt8newFuK2S2wjvqLsFKenV4xpRkdMaUjnx1KstVT23Q2fGdzWkuD37-ulwvjRXHj7nNGy_zGTFrb56TLj9BtVB6xZEvlpQQ0i4byyX5-rg7L9npwnWXCquL7MTpV5aP9zIrnVNGj0HVhBz640NwNSGHv_ls92FFz_8Gnr0Hl-3rdIaAZQeQKoJU7uOUVXD_mNl-P3BXsWLnQfPL0L0KfVuhn1ag6SZccWiYZ_b-S_c-mcWnYOn8kKV2fsRSm340IRd__mFm1ne7js3SXTg1rSeBbHLP67RbftBJpB-EgidRJ4xFi3pBIJG7iXpr_eDfAQAA___ydwPGCgUAAA==","fqdn":"loseimposeherself.com","domain":"loseimposeherself.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"loseimposeherself.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 08:12:24 GMT","end":"Thu, 19 Mar 2026 08:12:23 GMT"},"fingerprint":{"sha1":"B1:6B:EB:05:E0:5A:FE:EB:0E:C8:A3:8B:EC:61:8D:51:CD:8C:90:5B","sha256":"87:C6:97:CB:C2:A5:11:74:9B:43:AB:AB:6C:80:15:71:6F:DB:98:4D:C1:34:D2:A7:47:B5:D1:64:F6:AD:05:80"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_4RTT4sc1Rd9PRmyyG_xQyOuG4mi4vRUdVV1d5mFOMaRYExCEskiBnn_avo51e-V71V1zczKGIjB1SxcqBurT3dmEg0SP4ASO3ERAootiA1mQPwEIgSX0pOB0ZV3cf-cU4tzT913ZVDskAAFnZ5-w2yoNKWLUcOrP3teaWFKVz95ru57De9o_bzSrfBofW2WbP9FPwgb3nP11yRfNYtNz_c83_Pry8rKxKwt7rJQ2c3Yb8ReI2w2_CjEmv337Io5ODoH0d8hj0OJyf9_Ty5A8TF079Yx6VZzk73waq9IaW4s-mL7Tb2qTanR228TW0Oit_e-hnETQj6eg9HbexvA9EezDcDUhMw9-QBMb-_JBOtfe6SUpZAaTPwPZX8MmY6h6BjcXIYSPxKAC5w8Bd3bOmlsSdcfsXTGTsj8wz-hygmZf_AEdO_LpVSt1c-atMiV0Q5rSQW1NoZaGSMrxsg3alDlHfD8fSjxPVl8eAK6NzrlUgMlpkdkuxV4Pm0vRLGUC2HcDhc6iegs0DiiLd9nQSSjXYtUMgZ1cyhcDYWqoUhqKLIaemJaD71OyH0atJJY8LYX0jAUknlxp-l5NOZtFPwSlNgEt1emR3QquUg6kWRMsCAMOq2W9DsiErLJWolohs0wvnEhikM_8P2LW5no5qv9UW4LOSo0dwP_-iMojHfBrRkYxgP_ZvF2ljajVhBGzXDgI7OXrougLQPGwwHDqtqELW7DdSs4UYPLCfqiQikJSkdQUoJSEZQ5QdmvronUNV21JVJXMH-vNvdqUA1NvjKg10y-IjUBtZuwohqp7F13GTw_MNxInBiaWaIsr4aUiWqQ7ZDHZr-w9sEzv2JVTuv_5QKcqqDcHKirYUNNyPJPfyFTE_L0rXtg9A5cegdcHQAtfNCyAu1W2NDTp7qyK7sFW6DcFX4zaGTreddoqtfLrrSywU0PwlTI8nnk67VBukMOD8-cW7q9e2AXf_kWkt8newFuK2S2wjvqLsFKenV4xpRkdMaUjnx1KstVT23Q2fGdzWkuD37-ulwvjRXHj7nNGy_zGTFrb56TLj9BtVB6xZEvlpQQ0i4byyX5-rg7L9npwnWXCquL7MTpV5aP9zIrnVNGj0HVhBz640NwNSGHv_ls92FFz_8Gnr0Hl-3rdIaAZQeQKoJU7uOUVXD_mNl-P3BXsWLnQfPL0L0KfVuhn1ag6SZccWiYZ_b-S_c-mcWnYOn8kKV2fsRSm340IRd__mFm1ne7js3SXTg1rSeBbHLP67RbftBJpB-EgidRJ4xFi3pBIJG7iXpr_eDfAQAA___ydwPGCgUAAA== HTTP/1.1\r\nHost: loseimposeherself.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl25634524=1; nlecdf85ebbdb343866e18d5de2b6fd24249=[5941311]; uid_id2=e76301a7-59ee-4974-8fd8-a95a611b35e5:2:1; iprc_l+b9a0dfe34c8114f1d5a734fcb9221aeb=5941311; iprc_l:5941311=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 06 Jan 2026 02:52:54 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: loseimposeherself.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 9f746a120e536983c3f680bcfcd15a67\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":130,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"loseimposeherself.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/98/cf/e7/98cfe7688276f1513feb6852014bbd27/1756662145.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:54.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:33:02 GMT","end":"Thu, 05 Feb 2026 02:33:01 GMT"},"fingerprint":{"sha1":"FF:BB:C7:F6:31:A3:EE:08:8E:72:C4:2F:A2:C8:78:1B:3C:22:C4:57","sha256":"93:BE:65:88:B5:AC:E6:69:91:EE:F6:7E:27:3F:D6:9F:59:B1:AB:46:F7:49:0D:E8:F2:1C:9E:A9:BE:F9:B6:95"}}},"request":{"raw":"GET /cti/98/cf/e7/98cfe7688276f1513feb6852014bbd27/1756662145.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hehehub-acsu123.pythonanywhere.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 02:52:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 75865\r\nserver: nginx/1.21.6\r\nlast-modified: Sun, 31 Aug 2025 17:42:25 GMT\r\netag: \"68b48981-12859\"\r\nexpires: Thu, 08 Jan 2026 02:52:54 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":75865,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.3 (Macintosh), datetime=2025:08:30 15:50:24], progressive, precision 8, 320x240, components 3","md5":"690ac1a706457911a7cce051678a1aa1","sha1":"4883b6be15aedcb4f227ff96f470f06fce68ec23","sha256":"26425b8fffaa9a2084accf391313c0e8739affab7321037b0a159a434691cc10","sha512":"a085e66651c6c4caa18b0812d692137e6275d3e75eb6067931e984230a82a25a34fac0187a291c193f8f1e0e7a300c5610377500bcdc64c003ea791725641920","ssdeep":"1536:T9BsHbdwiQ9BsHbdwi2CKarAz12ABWNAYUuy1NOqKhE0fX19xQST:JydaydbKX8A0AYUu2wqgE0P1s8","tlshash":"0573020a9702ac21fed191770ae2e7b3b562e77d9753744afd9c2c153b60199884a3c2","first_seen":"2025-09-02T18:13:44.363283Z","last_seen":"2026-07-16T15:47:27.921266Z","times_seen":1403,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/utility/default/robot/4/img/moto.jpg","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"172.67.210.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hehehub-acsu123.pythonanywhere.com/api/getkey?hwid=1767656646.038565","date":"2026-01-06T02:52:55.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:26:15 GMT","end":"Wed, 25 Mar 2026 23:23:44 GMT"},"fingerprint":{"sha1":"05:E7:A3:19:D2:55:91:F8:B7:45:48:72:0B:86:C7:0C:2C:CA:27:03","sha256":"14:76:91:36:84:B6:CF:C4:0A:BA:6F:14:80:F9:C7:77:48:3B:08:A3:C8:48:DC:0F:F6:CE:86:72:BB:CC:0B:06"}}},"request":{"raw":"GET /sb/notifications/utility/default/robot/4/img/moto.jpg HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 02:52:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 67346\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Oct 2025 11:45:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68e64ec1-10712\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 4056550\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KIl05cqVLoKZpIcqycbUwypDnJ6WVNKiXsw%2Bj9vvxwh7o0iV1TSuaIasa6bjsQTL171fCoHKmzoY5E63Whtc%2FJUNHix%2FC7sTRPomL1bPbnI%3D\"}]}\r\ncf-ray: 9b97ec0c2d440731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67346,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 979x977, components 3","md5":"9332b3326cc361a4a12bedd347c0627b","sha1":"a664493b30154627e0111431603effa83ea3501d","sha256":"3a3e2f3cbb2612be427015f9d7890a061fd43d926f3e2c5520329cd9a98caecb","sha512":"d1eac35f0c2769d9abfe98b4f0c74a00a376f272783f07993900b45401a7aa2c2c6e3d9f92f3e02754cfed0e36244a4b0f28dda9c141ad3a69d4fa97080db31c","ssdeep":"1536:4RYzKW/1uASQjsyb7b3wPbmFMexScznEZ6YTjIpxzRE2:sW/TzsyHOalxFzne6IjoRm2","tlshash":"ee63018e7e45d5dc4fc8db61bc1eaed992861936044af1e2092c7a03967d00db539ecb","first_seen":"2025-07-04T18:28:09.271582Z","last_seen":"2026-07-13T11:35:46.351103Z","times_seen":1531,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}