{"report_id":"5c07cdce-e38c-46ef-a554-7ef23d8790ec","version":6,"status":"done","tags":[],"date":"2025-08-18T13:11:56Z","url":{"schema":"https","addr":"hesjustalittle-guy.com/","fqdn":"hesjustalittle-guy.com","domain":"hesjustalittle-guy.com","tld":"com"},"ip":{"addr":"172.67.142.81","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"hesjustalittle-guy.com/","fqdn":"hesjustalittle-guy.com","domain":"hesjustalittle-guy.com","tld":"com"},"title":"CREATURE CO."},"submit":{"url":{"schema":"https","addr":"hesjustalittle-guy.com/","fqdn":"hesjustalittle-guy.com","domain":"hesjustalittle-guy.com","tld":"com"},"ip":{"addr":"172.67.142.81","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-22T13:11:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"hesjustalittle-guy.com","ip":{"addr":"104.21.49.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-10","domain_rank":0,"first_seen":"2025-08-18T13:11:57.345678Z","last_seen":"2025-08-18T13:11:57.345678Z","alert_count":0,"request_count":10,"received_data":1464123,"sent_data":4373,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"hesjustalittleguy.com","ip":{"addr":"66.33.22.206","port":443,"asn":0,"as":"","country":"Canada","country_code":"CA"},"domain_registered":"2025-02-12","domain_rank":0,"first_seen":"2025-08-18T13:11:57.343786Z","last_seen":"2025-08-18T13:11:57.343786Z","alert_count":0,"request_count":1,"received_data":9549,"sent_data":420,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"qwei2odjc8tbmcs98e.com","ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-19","domain_rank":3781022,"first_seen":"2025-07-26T22:59:14.267996Z","last_seen":"2025-08-13T13:07:32.396409Z","alert_count":0,"request_count":6,"received_data":5037,"sent_data":4283,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-08-13T15:14:14.224423Z","alert_count":0,"request_count":1,"received_data":9639,"sent_data":519,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"hesjustalittle-guy.com/7qTBzPM561Ku.js","fqdn":"hesjustalittle-guy.com","domain":"hesjustalittle-guy.com","tld":"com"},"ip":{"addr":"104.21.49.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c192def5cf4a4817571425e70305021","sha1":"992832579234c105864222bd21a64a409ccda27b","sha256":"8cba7c1b4ef738be45489aa404d52092137ae0d79054e04ddc247c804a88644e","sha512":"89e9beb782f55b537bb792465d6775e0ee2959b338ffa85d4ffe69f7fa75ba36ff28aa39dd91235db102982406211b1b8d8dab19b02f384f3176e7430a5ced9e","ssdeep":"3072:4DyjBBxmiFyBxmiFmBxmiFgHBxmiFHOsf5KP/E3wa8ElrKK5UU3J9RMSAUcXTHOs:9bmiFybmiFmbmiFAbmiFiy8","tlshash":"98f35edf1542766e82244042fc7fea4ce4d854098fd08977ea9c74fbe97aca590e2372","size":169065,"data":"","first_seen":"2025-08-18T13:12:00.963817Z","last_seen":"2025-08-18T13:12:00.963817Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hesjustalittle-guy.com/","fqdn":"hesjustalittle-guy.com","domain":"hesjustalittle-guy.com","tld":"com"},"ip":{"addr":"104.21.49.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"19734643c21007c1b9a7e0c2166cbd14","sha1":"33dea3a081fcedb7b968f001988144d407650dae","sha256":"1c348890527b8f1bde23e70368883135e1024b438549be38850853bbba8a092a","sha512":"1b4b3bad895e91ad3f4225a3d1dd723f55f0bf9db1742ad65ff7bfd49b9e06e103f724384d66bd62ada827c406cfe3933c37306f190348aed7c109ecd78e839e","ssdeep":"3072:kDkjPri7vNlrp7ri7vNlrpzri7vNlrpplri7vNlrpCiWZ5KP/E3wkqQlrcK50UNU:dUBJUB9UBFUBro6","tlshash":"f6f3a29e1a53756c8360600afc7fd719d8d8ac0ec7949e77ea6c7076b8ba8d190e3170","size":158263,"data":"","first_seen":"2025-08-18T13:12:00.973605Z","last_seen":"2025-08-18T13:12:00.973605Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qwei2odjc8tbmcs98e.com/@v1/cdn/bundles/front-worker.js?t=29258711","fqdn":"qwei2odjc8tbmcs98e.com","domain":"qwei2odjc8tbmcs98e.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b7aa3440caa2c19041b3db0deeb12c2","sha1":"8693579beaccef86179d558bb0391361e6cf155f","sha256":"e6656881ae61ac17a24156c3464cada2abb7de7640893c79c3acaeb865a09329","sha512":"675e81507509bc00939011e2e55fa3150357e36a63574dc5ecb58e51914216358af876dceb376536b4d8a4ef236f9808ec35b747b0424e636917334801c1f881","ssdeep":"6144:Us6RCjrjOJMZOk6p1ZsJzO3fXegHhlhmVKACxn:R64fj0PWCvXegHzAGn","tlshash":"21748c917280617916634fda41bf094ab238f1206409896cf75cc8d32bb99dad9bff7c","size":339421,"data":"","first_seen":"2025-08-17T01:26:02.380967Z","last_seen":"2025-08-22T07:46:02.847828Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"hesjustalittle-guy.com/Consolas-Italic.ttf","fqdn":"hesjustalittle-guy.com","domain":"hesjustalittle-guy.com","tld":"com"},"ip":{"addr":"104.21.49.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hesjustalittle-guy.com/","date":"2025-08-18T13:11:34.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hesjustalittle-guy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 15:15:50 GMT","end":"Sat, 08 Nov 2025 16:13:29 GMT"},"fingerprint":{"sha1":"93:0C:22:90:C2:40:1B:F0:76:69:57:3C:E6:17:2F:09:85:6E:64:AA","sha256":"E9:E0:71:92:88:FC:9D:7A:FF:EE:2E:F0:5A:1C:DA:25:89:74:1E:33:D9:BB:4A:DA:F6:97:AB:6C:8C:00:76:A0"}}},"request":{"raw":"GET /Consolas-Italic.ttf HTTP/1.1\r\nHost: hesjustalittle-guy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 13:11:34 GMT\r\ncontent-type: font/ttf\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Tue, 12 Aug 2025 19:29:03 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nmadVgHjCp8YLAzrEgJwb%2FT9P64Gma%2FXZedospp9610Ut3RLxoXZlNdSssqjjk%2B8900bkdRbUe3OV4psI%2FTcZNpVRpjSFoSrQQxEaV%2FzAn24nZ%2FilqA%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"199c8-63c300d82d7f9\"\r\ncontent-encoding: br\r\ncf-ray: 9711a86798316e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":104904,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 45 names, Unicode, � 2005 Microsoft Corporation. All Rights Reserved.Consolas is aimed for use in programming envir","md5":"b360019c4be43cd92e4c6078553e2b00","sha1":"274f5242b57da296cd3a01001385b8036730651a","sha256":"e1ad2ba2704547566fbd6f5b33e1edc82e0e10a23ec149ce8897af379b02be08","sha512":"8dc9259b1dc7a8615abb818e3a2ceb33e97eacbf1560521f45ccd4dea11612db0d0fc7043dda7c267dd2c3ad89b5e5d610253d4da65aca80a0dad2d628ea49f4","ssdeep":"3072:v4yEOXws0K0RAahq9AGQdZo9MciSXLXr3EVf3j4onLc8Cy/r:QeIp71ZodZoogr","tlshash":"95a37c9083979745fa3338b8e976d7e20b3bfe9227228b3b248c466d45563e4dc41379","first_seen":"2025-08-18T13:12:00.957334Z","last_seen":"2025-08-18T13:12:00.957334Z","times_seen":1,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hesjustalittleguy.com/img/apple-touch-icon.png","fqdn":"hesjustalittleguy.com","domain":"hesjustalittleguy.com","tld":"com"},"ip":{"addr":"66.33.22.206","port":443,"asn":0,"as":"","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hesjustalittle-guy.com/","date":"2025-08-18T13:11:34.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hesjustalittleguy.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 04:26:43 GMT","end":"Thu, 02 Oct 2025 04:26:42 GMT"},"fingerprint":{"sha1":"11:6F:42:89:40:F8:CD:30:55:72:99:55:CF:ED:E6:76:24:32:25:E1","sha256":"7A:22:4B:87:EB:68:30:84:27:16:DF:4B:DF:EA:54:CA:FA:8C:D1:13:BA:93:CB:B9:4F:0C:66:36:62:6A:77:B8"}}},"request":{"raw":"GET /img/apple-touch-icon.png HTTP/1.1\r\nHost: hesjustalittleguy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0\r\ncontent-type: image/png\r\ndate: Mon, 18 Aug 2025 13:11:34 GMT\r\netag: W/\"23a9-198b9bdd6b8\"\r\nlast-modified: Sun, 17 Aug 2025 20:34:43 GMT\r\nserver: railway-edge\r\nx-powered-by: Express\r\nx-railway-edge: railway/europe-west4-drams3a\r\nx-railway-request-id: cbdqZzg2Tmi88wQB0-QtfA\r\ncontent-length: 9129\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":9129,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"e4d53d25dce429896f04d1df145fe229","sha1":"b4643698c7e895cefa8d865a5e36a1d3938aa223","sha256":"048629d9acea9e296e436a29511315a1b912e0394f8be94583b282ff21aaacab","sha512":"008a6e303b3d2a36718db73508011ad001ebef2ea0536ea4bd7cd0b10a35fd256df4177e7180e7b241a39e34057965ad4371a1477f282d55fbf8b5dcbc0338d5","ssdeep":"192:BnWbW3gd5KXcSiILkyOO+iuQta879PSfQGjcSuz0Zil3wcy+EJ5WnpM:IbWwXKsSmyjtl9fnRA40jJia","tlshash":"c712bfd8815f242fe96a9b7433d1cc1e7c92351e17e523bb10a48d1d4cee0222073b98","first_seen":"2025-08-18T13:12:00.958853Z","last_seen":"2025-08-18T13:12:00.958853Z","times_seen":1,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":29,"connect":17,"send":0,"wait":309,"receive":1,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qwei2odjc8tbmcs98e.com/@v1/log/join","fqdn":"qwei2odjc8tbmcs98e.com","domain":"qwei2odjc8tbmcs98e.com","tld":"com"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hesjustalittle-guy.com/","date":"2025-08-18T13:11:34.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwei2odjc8tbmcs98e.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Jul 2025 19:44:07 GMT","end":"Fri, 17 Oct 2025 20:42:58 GMT"},"fingerprint":{"sha1":"6D:05:A3:83:C2:2D:EE:AA:67:C0:78:E7:95:1D:FE:D3:FC:07:16:74","sha256":"09:0B:28:99:2C:42:08:28:35:53:4F:8E:57:5B:22:2C:1B:5E:A7:3E:6C:62:A7:A2:A2:B0:78:C8:D5:2A:70:12"}}},"request":{"raw":"POST /@v1/log/join HTTP/1.1\r\nHost: qwei2odjc8tbmcs98e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nx-scale-referrer: hesjustalittle-guy.com\r\nauthorization: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjdXN0b21lcklkIjoiRTJRaGc2R1hUVCIsImdyb3VwX2lkIjo0MTYsImlhdCI6MTc1NTAxMTk2NX0.9EaNv_epxSA54RTrMQ8THpgkp5x59K-ZxL4TKIjpYd8\r\nx-device: 0:Windows:Firefox\r\nContent-Length: 2\r\nOrigin: https://hesjustalittle-guy.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 18 Aug 2025 13:11:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LO9R6ZSZY7ce4RaPWjVUJ6sOY7d6anCukORDoPsr7sAAvthoRfA0YZAssDiLQ34VhuEkTc4eiQgFGO1Aa8pp9E0JR1Z%2F1Y6gUwrEsILQ3Avol87RaGg%3D\"}]}\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\netag: W/\"20-llti1nxI8SZi+xVpiFYUSfGpvg8\"\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9711a86a5cd25621-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3b5b4d21f8c87c5e6534b5a1d9d4574a","sha1":"965b62d67c48f12662fb156988561449f1a9be0f","sha256":"24dcf0603597089c21d0ab963001064690004c39e72221981b7faf7a5edd5f25","sha512":"1218be959182a70f35f2eeaeadc640c721f546b6b46b48f21f9acb3dead02d478da0ac6855f6c55777fbf33486b967fad262e93a5da6327ac7517933f9663ba8","ssdeep":"","tlshash":"d18000000e00aca83bc20802b2832028aaf22a80808b20a2800c803a0b028e0c22ba0c","first_seen":"2025-07-26T22:59:19.534167Z","last_seen":"2025-10-13T01:44:36.478944Z","times_seen":529,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":213,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hesjustalittle-guy.com/bg.webm","fqdn":"hesjustalittle-guy.com","domain":"hesjustalittle-guy.com","tld":"com"},"ip":{"addr":"104.21.49.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://hesjustalittle-guy.com/","date":"2025-08-18T13:11:34.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hesjustalittle-guy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 15:15:50 GMT","end":"Sat, 08 Nov 2025 16:13:29 GMT"},"fingerprint":{"sha1":"93:0C:22:90:C2:40:1B:F0:76:69:57:3C:E6:17:2F:09:85:6E:64:AA","sha256":"E9:E0:71:92:88:FC:9D:7A:FF:EE:2E:F0:5A:1C:DA:25:89:74:1E:33:D9:BB:4A:DA:F6:97:AB:6C:8C:00:76:A0"}}},"request":{"raw":"GET /bg.webm HTTP/1.1\r\nHost: hesjustalittle-guy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Mon, 18 Aug 2025 13:11:34 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Tue, 12 Aug 2025 19:29:03 GMT\r\netag: \"fd338-63c300d837821\"\r\naccept-ranges: bytes\r\ncontent-length: 1037112\r\ncontent-type: video/webm\r\nage: 493\r\ncontent-range: bytes 0-1037111/1037112\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=koIBQOd9rSrhc6lJiSY2IO6WDgHqgl2pM7XY%2BLW13i1wZalhMM8EQNm3c7nUy5lZcKLWsK3U89h%2BrLwV7DNR%2Fe%2FHGGp1gWuc7R6aZYVhe0mAGEZChE0%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9711a8683b44902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1037112,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"a703466db79537833733b60d89a29b6a","sha1":"da60d909c27625a12e1955ebe011ca5c68d86305","sha256":"db95cb5ae5cfc4aea0705930b11afa1fad26f724819d21333ced52caa5da1cf1","sha512":"ba5e49a6742c845e543f1c1e3830112146ac8e42e1c377713aea7a03fd1df6f1787f376ea5b89e8dabbe5b05554d7dbad232159c359420786f2e93e6fc2c294f","ssdeep":"24576:sKDu5rf7cxH/F+oR16jmOzRKPDo1qQWhziPs3C2u0CC:05rjQfF+K1mAPE19Wh0s3CgCC","tlshash":"82252367f269bc94e9414fe3d8db2c48bbb318af9e242503cb415c22d85d332456b99f","first_seen":"2025-08-18T13:12:00.961078Z","last_seen":"2025-08-18T13:12:00.961078Z","times_seen":1,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hesjustalittle-guy.com/favicon.svg","fqdn":"hesjustalittle-guy.com","domain":"hesjustalittle-guy.com","tld":"com"},"ip":{"addr":"104.21.49.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hesjustalittle-guy.com/","date":"2025-08-18T13:11:34.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hesjustalittle-guy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 15:15:50 GMT","end":"Sat, 08 Nov 2025 16:13:29 GMT"},"fingerprint":{"sha1":"93:0C:22:90:C2:40:1B:F0:76:69:57:3C:E6:17:2F:09:85:6E:64:AA","sha256":"E9:E0:71:92:88:FC:9D:7A:FF:EE:2E:F0:5A:1C:DA:25:89:74:1E:33:D9:BB:4A:DA:F6:97:AB:6C:8C:00:76:A0"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: hesjustalittle-guy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 Aug 2025 13:11:34 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Tue, 12 Aug 2025 19:29:03 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6%2FxN76hVprZDSY3I%2BHCDEkHD%2BtEDhU5zFg2rHkfaGsE0jlUE2F%2Bb4WjZqfShOs%2BmrSLhRHHcgwXChmmsqHHB6oy0zBrXj0lHcAmTjUi%2BrUQVXUIOJtE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\netag: W/\"6d77-63c300d82e799\"\r\ncf-ray: 9711a8696c30902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28023,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2db0d232ed086a12133811324f24dd75","sha1":"f30de1c31d748c4045b4f35681a5afc8d6b7872a","sha256":"f57f5edf4a698d1b1066a603bde012dcd8d95f615517423d4d47812e133ba088","sha512":"a61b7a000c26397f2c91e72fab97df8f0d2bd8860b031a8b623fc61cc1fc7cb5caba4b6fad9657292959866826f217c1bb7159590180494e76b4734ba8cc9b70","ssdeep":"768:inRVnU6YAiD6MeqXOjtd69IyNSKMRxH0Ci9aWKcM/3G5COu:wRVqAIOjtg/SKMReSWK4COu","tlshash":"a3c2e13469bef3bc096ee041744c8c6e1a955cef8b9cf1e8b4815029d631e3a6c47b6c","first_seen":"2025-08-18T13:12:00.962181Z","last_seen":"2025-08-18T13:12:00.962181Z","times_seen":1,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qwei2odjc8tbmcs98e.com/@v1/log/join","fqdn":"qwei2odjc8tbmcs98e.com","domain":"qwei2odjc8tbmcs98e.com","tld":"com"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hesjustalittle-guy.com/","date":"2025-08-18T13:11:34.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwei2odjc8tbmcs98e.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Jul 2025 19:44:07 GMT","end":"Fri, 17 Oct 2025 20:42:58 GMT"},"fingerprint":{"sha1":"6D:05:A3:83:C2:2D:EE:AA:67:C0:78:E7:95:1D:FE:D3:FC:07:16:74","sha256":"09:0B:28:99:2C:42:08:28:35:53:4F:8E:57:5B:22:2C:1B:5E:A7:3E:6C:62:A7:A2:A2:B0:78:C8:D5:2A:70:12"}}},"request":{"raw":"OPTIONS /@v1/log/join HTTP/1.1\r\nHost: qwei2odjc8tbmcs98e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,x-device,x-scale-referrer\r\nOrigin: https://hesjustalittle-guy.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 18 Aug 2025 13:11:34 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: authorization,content-type,x-device,x-scale-referrer\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cyMYQrKinYc1tFzcWnkpIc%2F7QMHKW%2Bb8PvxbBiyOGnt2%2BtnJ97mbne%2BoePvQ%2BYA%2BuAOCgIMqWv%2F%2BviZ6Fb%2BG7r7tYO91gx5JKzlYAoFt1UE0%2B%2ByOB3o%3D\"}]}\r\ncf-ray: 9711a869eda6ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T10:51:54.523378Z","times_seen":17870380,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":41,"dns":1,"connect":10,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hesjustalittle-guy.com/7qTBzPM561Ku.js","fqdn":"hesjustalittle-guy.com","domain":"hesjustalittle-guy.com","tld":"com"},"ip":{"addr":"104.21.49.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hesjustalittle-guy.com/","date":"2025-08-18T13:11:34.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hesjustalittle-guy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 15:15:50 GMT","end":"Sat, 08 Nov 2025 16:13:29 GMT"},"fingerprint":{"sha1":"93:0C:22:90:C2:40:1B:F0:76:69:57:3C:E6:17:2F:09:85:6E:64:AA","sha256":"E9:E0:71:92:88:FC:9D:7A:FF:EE:2E:F0:5A:1C:DA:25:89:74:1E:33:D9:BB:4A:DA:F6:97:AB:6C:8C:00:76:A0"}}},"request":{"raw":"GET /7qTBzPM561Ku.js HTTP/1.1\r\nHost: hesjustalittle-guy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 13:11:34 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 30464\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Tue, 12 Aug 2025 19:29:03 GMT\r\netag: \"29469-63c300d8383d9-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 493\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7bMZmExQnEqZ%2BvJKQILoskey%2FRJ2giyey%2BfVYc0WpkIqa7inZL25TH4WobVrV6zkRbkhLkaniGMwuyilvGrPvS%2B0T9xR2UMc7EA8lD7Tb5Om2SckfzY%3D\"}]}\r\ncf-ray: 9711a866be4d6e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":169065,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (63984)","md5":"8c192def5cf4a4817571425e70305021","sha1":"992832579234c105864222bd21a64a409ccda27b","sha256":"8cba7c1b4ef738be45489aa404d52092137ae0d79054e04ddc247c804a88644e","sha512":"89e9beb782f55b537bb792465d6775e0ee2959b338ffa85d4ffe69f7fa75ba36ff28aa39dd91235db102982406211b1b8d8dab19b02f384f3176e7430a5ced9e","ssdeep":"3072:4DyjBBxmiFyBxmiFmBxmiFgHBxmiFHOsf5KP/E3wa8ElrKK5UU3J9RMSAUcXTHOs:9bmiFybmiFmbmiFAbmiFiy8","tlshash":"98f35edf1542766e82244042fc7fea4ce4d854098fd08977ea9c74fbe97aca590e2372","first_seen":"2025-08-18T13:12:00.963817Z","last_seen":"2025-08-18T13:12:00.963817Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hesjustalittle-guy.com/wordmark.png","fqdn":"hesjustalittle-guy.com","domain":"hesjustalittle-guy.com","tld":"com"},"ip":{"addr":"104.21.49.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hesjustalittle-guy.com/","date":"2025-08-18T13:11:34.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hesjustalittle-guy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 15:15:50 GMT","end":"Sat, 08 Nov 2025 16:13:29 GMT"},"fingerprint":{"sha1":"93:0C:22:90:C2:40:1B:F0:76:69:57:3C:E6:17:2F:09:85:6E:64:AA","sha256":"E9:E0:71:92:88:FC:9D:7A:FF:EE:2E:F0:5A:1C:DA:25:89:74:1E:33:D9:BB:4A:DA:F6:97:AB:6C:8C:00:76:A0"}}},"request":{"raw":"GET /wordmark.png HTTP/1.1\r\nHost: hesjustalittle-guy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 13:11:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 46580\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Tue, 12 Aug 2025 19:29:03 GMT\r\netag: \"b5f4-63c300d831a61\"\r\naccept-ranges: bytes\r\nage: 494\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=98grhF1qDaPRrXaxfuvV%2Fjgj9Trplx492xrc3liyHcNzXdsmxPD8ggXxW0K3%2FC4JRHFNe3bSl7KsxGGNGZ0rTGtYf3BTdxk6zxFIZUZr%2FXsXbyH5LBw%3D\"}]}\r\ncf-ray: 9711a866be516e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46580,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 601 x 182, 8-bit colormap, non-interlaced","md5":"d2f3363ed988fa9fcff94b32400cfb30","sha1":"5aac67cb58224a6cedf6b2e1a29699af25c72401","sha256":"443c6f81e765b0350b3aa9752911b282ab1f56834dc89aad83a1efd390fe0086","sha512":"f01cb109c2905618c25c19752552cbf19dd360cf7b37180d3917ee94256cdd4dafe44a38eb9fb24e5fe74235431a3de23709e1937a63b50d8f6b1e30db1cf345","ssdeep":"768:W4z+BMSZwSLNkXYZdrNmQphbT2LUfLf9Lp4XA0kL1h7SahLSTkj2woV4x:JKBM30m+hbTSqJl4w1lLSTkyLw","tlshash":"5f2302cc5486d11118d11dea6ab4a96c8e3ffeacf4c1210605fc9be26a3f9c11c69f5b","first_seen":"2025-08-18T13:12:00.965035Z","last_seen":"2025-08-18T13:12:00.965035Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hesjustalittle-guy.com/white1.webm","fqdn":"hesjustalittle-guy.com","domain":"hesjustalittle-guy.com","tld":"com"},"ip":{"addr":"104.21.49.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://hesjustalittle-guy.com/","date":"2025-08-18T13:11:34.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hesjustalittle-guy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 15:15:50 GMT","end":"Sat, 08 Nov 2025 16:13:29 GMT"},"fingerprint":{"sha1":"93:0C:22:90:C2:40:1B:F0:76:69:57:3C:E6:17:2F:09:85:6E:64:AA","sha256":"E9:E0:71:92:88:FC:9D:7A:FF:EE:2E:F0:5A:1C:DA:25:89:74:1E:33:D9:BB:4A:DA:F6:97:AB:6C:8C:00:76:A0"}}},"request":{"raw":"GET /white1.webm HTTP/1.1\r\nHost: hesjustalittle-guy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Mon, 18 Aug 2025 13:11:34 GMT\r\ncontent-type: video/webm\r\ncontent-length: 3059\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Tue, 12 Aug 2025 19:29:03 GMT\r\netag: \"bf3-63c300d830ac1\"\r\naccept-ranges: bytes\r\nage: 493\r\ncontent-range: bytes 0-3058/3059\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bvZz92FPPYCuHXgxPlEiJhhLQSa25t1zVn6F%2F%2FbZILAq6DuVS1my0qH1f%2Fd8GNWf8z49pgWUDiyI2MUfOIINL1wphL83g1BQFkMkjenV2GOikbg59Ck%3D\"}]}\r\ncf-ray: 9711a867b88f6e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3059,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"58cef7ddf3696fa65fe5868fcf827f9e","sha1":"8c4e29cecf272065e9ff228a9eab9f40a49761a6","sha256":"bc92e983b2136169d55446527a929c24bc1039addadf5ccc4a1dc56aee0fc6d3","sha512":"9ffc3cdfd05bf603e889c664c192eeb290dfa98968e593d55cbedd75b6bc03f7f9b3dc3716bfe9ab62629f15acd1a703219f8bdba8400ba7a782a8ae999be64c","ssdeep":"","tlshash":"3051522084be79b0c114b27f729d9fe0d6839b5cc4b0751b42c3b8f678a709d7834a99","first_seen":"2025-05-14T10:10:16.379672Z","last_seen":"2025-08-18T13:12:00.966034Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hesjustalittle-guy.com/bg.mov","fqdn":"hesjustalittle-guy.com","domain":"hesjustalittle-guy.com","tld":"com"},"ip":{"addr":"104.21.49.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://hesjustalittle-guy.com/","date":"2025-08-18T13:11:34.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hesjustalittle-guy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 15:15:50 GMT","end":"Sat, 08 Nov 2025 16:13:29 GMT"},"fingerprint":{"sha1":"93:0C:22:90:C2:40:1B:F0:76:69:57:3C:E6:17:2F:09:85:6E:64:AA","sha256":"E9:E0:71:92:88:FC:9D:7A:FF:EE:2E:F0:5A:1C:DA:25:89:74:1E:33:D9:BB:4A:DA:F6:97:AB:6C:8C:00:76:A0"}}},"request":{"raw":"GET /bg.mov HTTP/1.1\r\nHost: hesjustalittle-guy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Mon, 18 Aug 2025 13:11:34 GMT\r\ncontent-type: video/quicktime\r\ncontent-length: 949964\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Tue, 12 Aug 2025 19:29:03 GMT\r\netag: \"e7ecc-63c300d833d89\"\r\naccept-ranges: bytes\r\ncontent-range: bytes 0-949963/949964\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SYrKFgJSAduXqS4zVrwyUfchVQO9SKCORe00wH61F5KyODXtR8goeK%2BQzi%2BpIaW8UGWxA2qkhCNVGHzAB3XECEiZ6HPZweFcGwEtzWhWLx8NooLMSlM%3D\"}]}\r\ncf-ray: 9711a867b8956e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43105,"size_decoded":0,"mime_type":"video/quicktime","magic":"ISO Media, Apple QuickTime movie, Apple QuickTime (.MOV/QT)","md5":"319ec655532209991a7d11f1eedc8fd5","sha1":"b2eae530f766acd0839143701bbb289a97e46f16","sha256":"c1751299f1d97c8051741b3cb717569c2e6e7bdce89a554db74a0044e939efc4","sha512":"b2742100fbdcd4a6df357595060768371eef6ffb2073bb3663310868df2a62c5d376d9588c31d47c22cfae735d898197be3214dfee919f6da3867361b642db26","ssdeep":"768:THdIttW0sFdNCbffXYfVy5Nc52FWYRR/F2XekBX+8/UIEoXbvH7:TuttWXFmf/Yc762FWYb/FNxIEW77","tlshash":"e313e050e7964092c9581272a2e96f5f73f6c2f4a98353bf02c5e53efaa33d04c27a40","first_seen":"2025-08-18T13:12:00.966599Z","last_seen":"2025-08-18T13:12:00.966599Z","times_seen":1,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hesjustalittle-guy.com/","date":"2025-08-18T13:11:34.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\ncontent-security-policy-report-only: script-src 'unsafe-inline';report-uri https://csp.withgoogle.com/csp/script-inclusions/bcfae741e379a885f2ab2cf83ebe6d32\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 18 Aug 2025 13:11:34 GMT\r\ndate: Mon, 18 Aug 2025 13:11:34 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8795,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"fcc7337bdb7e062b31a0ac4cda15300e","sha1":"a5bcb7bd4e54fb9ef7ed36e30a813a5d75fb5551","sha256":"d4c121b4b1065679f9c0c0c517ddde1532004adccb4fd00404c42e684a73974b","sha512":"9a30e3113b47ea77dde949070ba7848492f32a9fa5481c233302eeafdd0820bcc56a8477ee1c6d3f079accbecc0d0c88ebdc7dd95b5a1835520e37e4b4e9ee15","ssdeep":"192:vyEfyZy6yG3gyLyZVyV77xd6n3UQjH+yZwyqFy/yauyVukS3mp6b8:vtfcHjg8cicOgwFFWWRd+","tlshash":"1302fe91052b9104ea471cc927cf7e369e8e62a67481d17d7ffe2cd9acead22132471c","first_seen":"2025-06-01T07:54:44.821026Z","last_seen":"2025-09-04T14:12:36.317208Z","times_seen":160,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":185,"dns":0,"connect":20,"send":0,"wait":37,"receive":0,"ssl":162},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qwei2odjc8tbmcs98e.com/@v1/services/connector?referrer=hesjustalittle-guy.com","fqdn":"qwei2odjc8tbmcs98e.com","domain":"qwei2odjc8tbmcs98e.com","tld":"com"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hesjustalittle-guy.com/","date":"2025-08-18T13:11:34.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwei2odjc8tbmcs98e.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Jul 2025 19:44:07 GMT","end":"Fri, 17 Oct 2025 20:42:58 GMT"},"fingerprint":{"sha1":"6D:05:A3:83:C2:2D:EE:AA:67:C0:78:E7:95:1D:FE:D3:FC:07:16:74","sha256":"09:0B:28:99:2C:42:08:28:35:53:4F:8E:57:5B:22:2C:1B:5E:A7:3E:6C:62:A7:A2:A2:B0:78:C8:D5:2A:70:12"}}},"request":{"raw":"GET /@v1/services/connector?referrer=hesjustalittle-guy.com HTTP/1.1\r\nHost: qwei2odjc8tbmcs98e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjdXN0b21lcklkIjoiRTJRaGc2R1hUVCIsImdyb3VwX2lkIjo0MTYsImlhdCI6MTc1NTAxMTk2NX0.9EaNv_epxSA54RTrMQ8THpgkp5x59K-ZxL4TKIjpYd8\r\nX-Direction-Safe: 1755522694758\r\nX-Scale-Referrer: hesjustalittle-guy.com\r\nX-Auth-Key: GlxZPwsFJ2kC2Sut8nQIaIkEf8sBGfHQjnKpeCJ7GVo%3D\r\nOrigin: https://hesjustalittle-guy.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 18 Aug 2025 13:11:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MWQ1sr7%2BasmB5rFg63nh8qM0zZpXXjHTuoa9mhOQJgMPC%2F6p3zdFow8oW5zzM0TuaShZYhKDqHOjBS%2BUMWUbwOYnTPtnxSmpW3TvndtOEUC0qEx2ncA%3D\"}]}\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\netag: W/\"15e-196ml93GrXfm0rm9TQJuZah8YtU\"\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9711a86abd1a5621-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":350,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8c14eba5eb60e931fd153511688d1e67","sha1":"d7dea697ddc6ad77e6d2b9bd4d026e65a87c62d5","sha256":"d148e50b20b3b7f80fb4176a47cf93144f13587fb2f87c59ba0c2d985aaf7d36","sha512":"3cd6c6be9acab8fe35cb7ef8bf05289f6ef47c634fac10dc6158aba7b1816d96b23cbd21eeb7c787f5dcc03cb8ae93eac2bcd8cc37c579e15e62c595cec254ee","ssdeep":"","tlshash":"7ce068203b9817a91a8c10a25464c904416e940cc495c9d07997882560ca8bb78d7de3","first_seen":"2025-08-18T13:12:00.968243Z","last_seen":"2025-08-18T13:12:00.968243Z","times_seen":1,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hesjustalittle-guy.com/","fqdn":"hesjustalittle-guy.com","domain":"hesjustalittle-guy.com","tld":"com"},"ip":{"addr":"104.21.49.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-18T13:11:33.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hesjustalittle-guy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 15:15:50 GMT","end":"Sat, 08 Nov 2025 16:13:29 GMT"},"fingerprint":{"sha1":"93:0C:22:90:C2:40:1B:F0:76:69:57:3C:E6:17:2F:09:85:6E:64:AA","sha256":"E9:E0:71:92:88:FC:9D:7A:FF:EE:2E:F0:5A:1C:DA:25:89:74:1E:33:D9:BB:4A:DA:F6:97:AB:6C:8C:00:76:A0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hesjustalittle-guy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 13:11:34 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Tue, 12 Aug 2025 19:29:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MhyjAvjB75RWflzkKg7BoscYnlwx4rCNaHPeMFs6lEqS4Q29yfXbdIePGEp2oA9ylbkAaJmLe1laIyZ12YhXPe%2FH1odI1h%2FdSnjTyeXsco6BGqWQP1M%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9711a8657b006e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13677,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"df8c1f81599dab6ece35903da848760e","sha1":"79a22ef8d1a0bf7f12a564213fb5e04265a8eeca","sha256":"eb939dc1cc643c7412cbe951d50ae453088ff63e01dafd92e00c9a4504fbef27","sha512":"9b04252010d73fe33dc7d966d2bfeb064ac5f2234c1fce6c43e6ca371276ccc44c2f3907a35d2be92d6a032b2d1cf2d40d9868180ce627972585656b0f24f1b0","ssdeep":"192:JRDUPt3bQt91qb6NcLc+2WTAzH9QsF9SqEVeONA+2B1PoWC8Y4+JPH3oNwUxHcu+:JRD+trQtRzC6SD0Do5fFM0","tlshash":"7452639a4ae70008a403d2a87ff787085338d007966bcc7c7bde6659df863e99197789","first_seen":"2025-08-18T13:12:00.969387Z","last_seen":"2025-08-18T13:12:00.969387Z","times_seen":1,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":31,"dns":5,"connect":8,"send":0,"wait":53,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hesjustalittle-guy.com/x.png","fqdn":"hesjustalittle-guy.com","domain":"hesjustalittle-guy.com","tld":"com"},"ip":{"addr":"104.21.49.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hesjustalittle-guy.com/","date":"2025-08-18T13:11:34.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hesjustalittle-guy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 15:15:50 GMT","end":"Sat, 08 Nov 2025 16:13:29 GMT"},"fingerprint":{"sha1":"93:0C:22:90:C2:40:1B:F0:76:69:57:3C:E6:17:2F:09:85:6E:64:AA","sha256":"E9:E0:71:92:88:FC:9D:7A:FF:EE:2E:F0:5A:1C:DA:25:89:74:1E:33:D9:BB:4A:DA:F6:97:AB:6C:8C:00:76:A0"}}},"request":{"raw":"GET /x.png HTTP/1.1\r\nHost: hesjustalittle-guy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 13:11:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 7108\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Tue, 12 Aug 2025 19:29:03 GMT\r\netag: \"1bc4-63c300d831e49\"\r\naccept-ranges: bytes\r\nage: 493\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EwuFNytKQMwzYYUUuOWVM0aitzYUtYswm7IRxhIXmbJIKx9hR%2FdcM38UB%2Fp0Xz3EyERpvtXLltrT2mhyLN2W7A9KsHfO%2BJ%2BmM9yHRm%2FwELwz5CTJib4%3D\"}]}\r\ncf-ray: 9711a866be556e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7108,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 601, 8-bit colormap, non-interlaced","md5":"247169b3c8fc17a1a84d366b9b43171c","sha1":"7402dda1710ad4bf1f0df6660846c9707178961c","sha256":"b6a6e3290248830ba9903e01add19d635a2ddd65ff483227e2870c8e65589d86","sha512":"96c1d4365520dcf834c9602b71dd899b6b0f144fc1ef8f9881f6c5e46a01ae9786e76d60dda41b1ccda197eb199e52ddf96cb45e9141d0a9a942d0fbb8b809a5","ssdeep":"192:RpuO/aL4DvSqEgCDFTiYcSESdyJU8hpDAK9rBjBlYPL:zusaLxqEgOiYcSTKNpBLjBlYT","tlshash":"36e1af06e351e973d8ad4337bfe2eff2127623dde64660a148a1bb4b7c4664a4025836","first_seen":"2025-08-18T13:12:00.970408Z","last_seen":"2025-08-18T13:12:00.970408Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hesjustalittle-guy.com/insta.png","fqdn":"hesjustalittle-guy.com","domain":"hesjustalittle-guy.com","tld":"com"},"ip":{"addr":"104.21.49.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hesjustalittle-guy.com/","date":"2025-08-18T13:11:34.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hesjustalittle-guy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 15:15:50 GMT","end":"Sat, 08 Nov 2025 16:13:29 GMT"},"fingerprint":{"sha1":"93:0C:22:90:C2:40:1B:F0:76:69:57:3C:E6:17:2F:09:85:6E:64:AA","sha256":"E9:E0:71:92:88:FC:9D:7A:FF:EE:2E:F0:5A:1C:DA:25:89:74:1E:33:D9:BB:4A:DA:F6:97:AB:6C:8C:00:76:A0"}}},"request":{"raw":"GET /insta.png HTTP/1.1\r\nHost: hesjustalittle-guy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 13:11:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 4182\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Tue, 12 Aug 2025 19:29:03 GMT\r\netag: \"1056-63c300d82fb21\"\r\naccept-ranges: bytes\r\nage: 493\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EfIWlOb9GZhvC%2Fg8mTTtqNQKNQ0r6UhuewqxU0LLU15c2rPy3vBoFvz8dQXPXlUAhjCgubNHxJTUdyHQyAMCdIO4eTdQBktNv%2BuKB5s6OVgdg5WMFG4%3D\"}]}\r\ncf-ray: 9711a866be586e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4182,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit colormap, non-interlaced","md5":"1c4f8e33e12ad89d9ff782f09c6de04e","sha1":"0f46286c93f7063aa1c2350901e1eb6587a7a37d","sha256":"745a14674c4fa22ca63f3938e750e5ab05891b3819fe5e5ec40358361a9445b8","sha512":"7ed73f45952253faf9359ee6e1b269fac77bd239fb219effc541c547df84e24bfff4400bfd3c86ad026703db4008dd61a986bb2b28df4486db35fc76c3a2fec5","ssdeep":"96:XgH5lgXpvSH9wSEYpnID0p6YVabul22rQtnmfFse7:XgH5WXd/SEYpIgpFVynuFT7","tlshash":"09818ec3e38607d3ccc019b25ef0d856f6e18ead2264f2c1865db460d327dd99b856d0","first_seen":"2025-08-18T13:12:00.971514Z","last_seen":"2025-08-18T13:12:00.971514Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qwei2odjc8tbmcs98e.com/@v1/services/temp-link/create?referrer=hesjustalittle-guy.com","fqdn":"qwei2odjc8tbmcs98e.com","domain":"qwei2odjc8tbmcs98e.com","tld":"com"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hesjustalittle-guy.com/","date":"2025-08-18T13:11:34.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwei2odjc8tbmcs98e.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Jul 2025 19:44:07 GMT","end":"Fri, 17 Oct 2025 20:42:58 GMT"},"fingerprint":{"sha1":"6D:05:A3:83:C2:2D:EE:AA:67:C0:78:E7:95:1D:FE:D3:FC:07:16:74","sha256":"09:0B:28:99:2C:42:08:28:35:53:4F:8E:57:5B:22:2C:1B:5E:A7:3E:6C:62:A7:A2:A2:B0:78:C8:D5:2A:70:12"}}},"request":{"raw":"OPTIONS /@v1/services/temp-link/create?referrer=hesjustalittle-guy.com HTTP/1.1\r\nHost: qwei2odjc8tbmcs98e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,x-auth-key,x-auth-key-v2,x-direction-safe,x-scale-referrer\r\nOrigin: https://hesjustalittle-guy.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 18 Aug 2025 13:11:34 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: authorization,content-type,x-auth-key,x-auth-key-v2,x-direction-safe,x-scale-referrer\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=exjkB1QHy3jGV1d%2BS57C86Yero%2FRiBU%2FP4%2FlsnVcfprj8ikVSFFnQ9WAfis1MjsoePw3VDUwq1MNJ98YFpY%2BgyukYdGaEQTDbBrD4sBmvC7sm8iNJII%3D\"}]}\r\ncf-ray: 9711a86a3e50ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T10:51:54.523378Z","times_seen":17870380,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qwei2odjc8tbmcs98e.com/@v1/services/temp-link/create?referrer=hesjustalittle-guy.com","fqdn":"qwei2odjc8tbmcs98e.com","domain":"qwei2odjc8tbmcs98e.com","tld":"com"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hesjustalittle-guy.com/","date":"2025-08-18T13:11:34.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwei2odjc8tbmcs98e.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Jul 2025 19:44:07 GMT","end":"Fri, 17 Oct 2025 20:42:58 GMT"},"fingerprint":{"sha1":"6D:05:A3:83:C2:2D:EE:AA:67:C0:78:E7:95:1D:FE:D3:FC:07:16:74","sha256":"09:0B:28:99:2C:42:08:28:35:53:4F:8E:57:5B:22:2C:1B:5E:A7:3E:6C:62:A7:A2:A2:B0:78:C8:D5:2A:70:12"}}},"request":{"raw":"POST /@v1/services/temp-link/create?referrer=hesjustalittle-guy.com HTTP/1.1\r\nHost: qwei2odjc8tbmcs98e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nAuthorization: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjdXN0b21lcklkIjoiRTJRaGc2R1hUVCIsImdyb3VwX2lkIjo0MTYsImlhdCI6MTc1NTAxMTk2NX0.9EaNv_epxSA54RTrMQ8THpgkp5x59K-ZxL4TKIjpYd8\r\nX-Direction-Safe: 1755522694730\r\nX-Scale-Referrer: hesjustalittle-guy.com\r\nX-Auth-Key: 4RXYuL8ltBB2xWd8lZl3rGSAVYaZ%2FCt4S97hlD6V9lY%3D\r\nX-Auth-Key-V2: egJ3RFacdv%2Fm%2BqSPNWk1braaSiloxI76xLj1qEIlnSc%3D\r\nContent-Length: 2029\r\nOrigin: https://hesjustalittle-guy.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 18 Aug 2025 13:11:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=keACUs91dY6nVLhycANo3u6woZBUm7fSiY4MGd2SROtUr9OVrNzx2IpAE8JoCzTDZxVTb9FybF53R1BR%2F1zpqLhP3Npd933xFJmZjG0svuwhgrPoakI%3D\"}]}\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\netag: W/\"250-B3T/ArpmGWYp7fr5Krk+I22a6aM\"\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9711a86a9cf85621-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":592,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0afbb00071e3f8cafdfa133ceed0b464","sha1":"0774ff02ba66196629edfaf92ab93e236d9ae9a3","sha256":"2a96f7c0d54b9940841017e27f4e4cb804a8185c913f950e0a793c76f0d7ae29","sha512":"71b8e831db70a1890453706c105c4f5742cd260a741e719d8e5f6a4321c902c1f30a60641ccbf4027e81acdee8f1f001a5cf23bebb4aafbf4e661fa40be8732c","ssdeep":"","tlshash":"11f04706093866b8444c726c65dc8155155e93451d49f1a129b4baaa2c95a14b11bf18","first_seen":"2025-08-18T13:12:00.972618Z","last_seen":"2025-08-18T13:12:00.972618Z","times_seen":1,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qwei2odjc8tbmcs98e.com/@v1/services/connector?referrer=hesjustalittle-guy.com","fqdn":"qwei2odjc8tbmcs98e.com","domain":"qwei2odjc8tbmcs98e.com","tld":"com"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hesjustalittle-guy.com/","date":"2025-08-18T13:11:34.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwei2odjc8tbmcs98e.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Jul 2025 19:44:07 GMT","end":"Fri, 17 Oct 2025 20:42:58 GMT"},"fingerprint":{"sha1":"6D:05:A3:83:C2:2D:EE:AA:67:C0:78:E7:95:1D:FE:D3:FC:07:16:74","sha256":"09:0B:28:99:2C:42:08:28:35:53:4F:8E:57:5B:22:2C:1B:5E:A7:3E:6C:62:A7:A2:A2:B0:78:C8:D5:2A:70:12"}}},"request":{"raw":"OPTIONS /@v1/services/connector?referrer=hesjustalittle-guy.com HTTP/1.1\r\nHost: qwei2odjc8tbmcs98e.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,x-auth-key,x-direction-safe,x-scale-referrer\r\nOrigin: https://hesjustalittle-guy.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Mon, 18 Aug 2025 13:11:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xfRjiX%2F27SaNotp4UcTwl4w1HfhCPY1uqE62oGl0jSZmyCQnwhIqdczbzLJRL8To%2B7yvmL9W6FY97wRDpFisKJ5LOjlVJlMmNIbOkXMuXsvMb5gK878%3D\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: authorization,x-auth-key,x-direction-safe,x-scale-referrer\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9711a86a7ce45621-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T10:51:54.523378Z","times_seen":17870380,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}