{"report_id":"5da19495-d230-4b34-9862-f1f695040d9d","version":0,"status":"done","tags":[],"date":"2026-09-22T20:59:38Z","url":{"schema":"http","addr":"escortbabylone-reviews.us/","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":0,"asn":14061,"as":"DigitalOcean, LLC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"escortbabylone-reviews.us/","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"title":"Escort Babylon: Reviews of Escorts","dom":{"size":23253,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"c07fa358e309abf9c633f578d012b46f","sha1":"8516a7e6e710011bf180903ecf159a0c73cf3afe","sha256":"eb798ed382fd32e7a9c6bce81c351430665ed85bceb40399e54d37a1b60297b5","sha512":"d342c940cab22d0e3d5860e0a70f518d6648608e4e4be172f23cd8f74a27121b0323d84f383756bffef0dd632ff8bc58806f4c268c359cf03a72cec50ba3e1d4","ssdeep":"384:WJ/MCwDUGpDCxVDhfDKx+oKHDLHmJcPkDZhBDt/d+IO5LYSWtW:WJ/ygw+/NkzKjLHmu8DZhRt/d+IQLYSz","tlshash":"29a2306545f210135043d5a07ff1aa0bee53ba0bce4b8a187aad46a86f97ec1cd7720c","dom_hash":"domhash4d4a98b06bd2456ec1099991a9a68a72","first_seen":"2026-09-22T20:58:42.750938Z","last_seen":"2026-09-22T20:59:55.619371Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"escortbabylone-reviews.us/","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":0,"asn":14061,"as":"DigitalOcean, LLC","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-27T20:59:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"escortbabylone-reviews.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"escortbabylone-reviews.us","ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":36,"request_count":36,"received_data":1372698,"sent_data":43820,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"escortbabylon.net","ip":{"addr":"172.66.152.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-08-23","domain_rank":2127,"first_seen":"2015-04-12T08:23:32Z","last_seen":"2026-09-22T20:57:18.108369Z","alert_count":0,"request_count":1,"received_data":36942,"sent_data":585,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.65.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-09-21T00:42:51.292364Z","alert_count":0,"request_count":1,"received_data":88174,"sent_data":498,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"escortbabylone-reviews.us/public/js/response.js","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b5ce9aa9bb6b3b28a64fa512fca366ca","sha1":"4a59eb493994929b9db23f56fb23a9fc5f79d8d8","sha256":"f6d5b1f87d072a32f9a82cb697267c7fb5a855895e256d0e6942e84862819a61","sha512":"c91c09a7dd1b4f55d614a322ce4faf41a1134a7aa49aadea197f0da2f6cc5fcffefd59bd10ba69597111985e95849e0f4e7477828284238bfb7ea27fbc064aff","ssdeep":"","tlshash":"52510d18adba11680b2f30fa6adf154474a1a0070f4cd855bd9ca2c45f4d93ca7a9fee","size":2463,"data":"","first_seen":"2025-08-31T17:25:54.119177Z","last_seen":"2026-09-22T21:09:05.032259Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/public/js/main.js","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb453c2c008ba26e0b7100ce3f113485","sha1":"379f090cda160ccedc8db757255c299a797208d2","sha256":"dc6fa935998ff30671b280a5bab773d1541ad251c4244268f1472bf7f112f9e0","sha512":"52a84254a9b8596fba13389aa4f18e603a68c8a52943b7ee647a4ef0107f0825aa5cc9f564eaf146629b461f273b0a32b37255eabe723f25f0fc9633389b2646","ssdeep":"384:IMD+m+5jHgv4CY0Svo/jqhZgIp4+RbPOXOqJini0iuibi/iKiPitiaiiUbFu:IM8CSUOvip/+6zKcD7u","tlshash":"b6822d48bce72165817b30be4fbb96047979342f0104de00bd4dded81fa4e5aaa667ce","size":18617,"data":"","first_seen":"2026-09-22T20:56:08.135371Z","last_seen":"2026-09-22T21:09:05.055798Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/public/js/analytics.js","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"575b5480531da4d14e7453e2016fe0bc","sha1":"e5c5f3134fe29e60b591c87ea85951f0aea36ee1","sha256":"de36e50194320a7d3ef1ace9bd34a875a8bd458b253c061979dd628e9bf49afd","sha512":"174e48f4fb2a7e7a0be1e16564f9ed2d0bbcc8b4af18cb89ad49cf42b1c3894c8f8e29ce673bc5d9bc8552f88d1d47294ee0e216402566a3f446f04aca24857a","ssdeep":"768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL","tlshash":"74330af9b7423466c3a271e4403f1007907aadd5f449d8e4b58ad6d46d38eab02fbf68","size":52916,"data":"","first_seen":"2023-06-16T11:16:31Z","last_seen":"2026-09-22T21:09:05.062767Z","times_seen":5610,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/public/js/review.js","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d3fc73850ef85e79953e31a66a007c2","sha1":"6b5d0b3fb0912066fde3669c0de81a6c03177314","sha256":"86ce47d112c4851e269bb5ecd4a5645e001b3631520afbc87395cbb3d773b0ac","sha512":"5b1ba8e7d40c4ae0cf02137658ad298100685b1adf7faab189d07fdfd532e81e90d8a36af9eb5516118a5496fb35fd153dbe340f73148acca23b5921d511bddb","ssdeep":"","tlshash":"b031c309f5b3135a117ff0b00d1fe7165964350b8d0a9e1a3d0d54dd6f0ed75a52a78c","size":1765,"data":"","first_seen":"2025-08-31T17:25:54.133947Z","last_seen":"2026-09-22T21:09:05.050042Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/public/js/tag_1.js","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"41728fcdd0c6b4e8878d0f7407a5113c","sha1":"875c285fe88c74419bced61a85561db580d6da3d","sha256":"c012d64866fd00046bee684ef67badc5ea0574ad9b24630d00710d91ef6e8dac","sha512":"6946cdf631252450fb153d79b20df442b378f999b0f5042850ae5784304cfc9fb931e052c7312bf3c5d060e4afe4d6063bd30ca0d530afafa4726dc46ebc0497","ssdeep":"3072:CqtzxahUfMm83qktbXXp1bCSjv/rMPDM87iHGhbUX+U+kFBs43d:vtzxaGa3jbXXfbCSjAr7iHspUhFBs6d","tlshash":"6834d6d972827466537334b4a03f004bb1beac96f14c8965f186e9d53e789ac9237f2c","size":239799,"data":"","first_seen":"2025-05-22T20:20:46.071389Z","last_seen":"2026-09-22T21:09:05.058708Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.65.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-09-23T01:58:01.358312Z","times_seen":196082,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/public/js/js.cookie.js","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"311734ecd9058fc16142f1b58f9355f9","sha1":"8e5ba26e4a6bf9d0aa2eda6606461aad7f8ce47c","sha256":"12f9241d114722606728a4b0c0dac78c9f095cc9d56f7da21eeee1f1bbf6c5a5","sha512":"0908e5e234024c4f72e436e57fede34b80afa0889221d34ce925ac2ff5f515271d301e563134c7387d4098d9804556ec834d9c204d1ddacd8c7adec80b54e6ac","ssdeep":"","tlshash":"8d714354bbcd334e06a732811f2b519de17cbe3128584cd9885996f42c70c37db5bd6a","size":3675,"data":"","first_seen":"2025-06-25T15:17:42.800293Z","last_seen":"2026-09-22T21:09:05.034547Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/public/js/moment.min.js","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c2def395d7e125976ea5faf56596aa9","sha1":"ce4fa351a2e62accf7fad77110fa4ddb09a324bf","sha256":"800c7773f0574b5b5573bd89af3cc8b0fc6bb368d6fbde8f7ccf97c30bdbf699","sha512":"99f359c7f8e7f6c752b9967e9d26bc70015b37d5c0ca9091efeb60cf375d6d1638bce6add4ac4f87a566596a0b5dabf897f6d13a72060311bbb6af5faa6577c2","ssdeep":"384:bPMjSZibdDdUlPnax4qAsLHQ34AHZMAOQUOBNeTjNplDec4McOyo4VGJbYW9X2b8:QIHtaSZ5MrQ8/5TwtW9XRizm6gamn","tlshash":"20f2b4893a56b4125b2212f144bf0907b23c98e5b44d4d29f189e8e83d7cc7d927bfb9","size":35415,"data":"","first_seen":"2023-03-07T01:10:50Z","last_seen":"2026-09-22T21:09:05.049143Z","times_seen":867,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/public/js/dust-full.min.js","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ddf5052f90290f6a77700854470b5e76","sha1":"102ea5891cc6bdf7a235b407ed906fa349cc5269","sha256":"7169a3248ce86a39c8a7c43bbc147cca5a70934b0ab805e12e3901a7e303d059","sha512":"52fe3766f086099866f4530c7341616fca1b60bef6fd25c37f25c4f51ce86991934a3842365daf2366d7780e50e29197a80443c0fc3b43beed5c0dda9fd22b7d","ssdeep":"384:by+VE825w49RBnUaimgDyf6FZQKKo28cT6CZQV949s7ENlYVEupN:F8bBnfBgefOZQRzvTPQVe9yC2EI","tlshash":"d203c6ca3a4df86a5397b8f8456b5017a3bccb91e44c8431f1c1e4e53d77baa8069f60","size":38697,"data":"","first_seen":"2025-06-25T15:17:42.785242Z","last_seen":"2026-09-22T21:09:05.070225Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/public/js/jquery-ui.min.js","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"777b80b520786cf6f0ce9c83401b2c87","sha1":"39c822c799bd6a0396f439fba4cf70b4ba6de91f","sha256":"86528b9b3691944f120890b52b0f33a146d4f01c40fbc911de0b1eb8a7cc8f10","sha512":"226b297ceac3452fe18c8a49032ecddd9697639bc22724e541cfb4110b94c05ab57cae0bc50eeb79c64d577ce9dd0dc032d97a4c32e81eb9ba87520a4a6a4351","ssdeep":"3072:+MxNddBFak8JUa3DpOujVJUc9X6gVppuzqPrI9fB8NJdFweKCbV:pNdIVvj3s9U/TK2","tlshash":"a744f84d72403a3295dfa265103b2a0ba237955da601809cb43ccedf9e7ce4571bbfb9","size":254921,"data":"","first_seen":"2023-03-07T13:49:17Z","last_seen":"2026-09-22T21:47:35.090943Z","times_seen":1468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/public/js/jquery-3.6.0.min.js","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-09-23T01:48:57.393257Z","times_seen":505353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f1fca02bda40e1bc09bce8618c1b341f","sha1":"1c203804f8c2631061f9eecfdc72ecee0f8e1b5a","sha256":"fe212ed54ad6c1eb58ffceb75c45c66e6e49e2beb71f956bbf19b4f539dcb2bc","sha512":"5836cd47bcd95ddeebb81247db9cab122c52cbbc2eaa464a632f8c13df688353a928e82edb32ee8f8d79df1e060ef8c9329773da43dc9fd54279cfeafa04af73","ssdeep":"","tlshash":"c7700080cb28280a0a208003800003a00028a802028a0822000a2c83020302000a8080","size":25,"data":"","first_seen":"2026-09-22T20:56:08.177536Z","last_seen":"2026-09-22T21:09:05.071937Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"81d0a825c1512ce251b33cd793891e0a","sha1":"668181a820e070e3ab1a1cfd2a0fe7385a85c951","sha256":"e4ecf1e2c408ace072f0f71416e8973be799791aca05edf120a4bde6130d87b7","sha512":"589ce8d93758e491e6a4d370c927034e20aee0206d19a42d08906a14b428a60b1fb55d5d23d222986f5a6d190587b99d79ec8ef8647aee6c6dcab295e003a7af","ssdeep":"","tlshash":"3411af952199874150b77766cc03d50d6133953439dee971e90cc39d0a86fa98c2f7cf","size":871,"data":"","first_seen":"2026-09-22T20:58:42.804706Z","last_seen":"2026-09-22T20:59:55.667155Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/public/js/tag.js","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cce3488b3498a315e1468c8f1a1986cd","sha1":"d973785c5f4347fb401e27f2838b1fe412d24308","sha256":"544b848f5827fd8c39c2618471fe8299138e366e220500982cc2d3d60f173e54","sha512":"69f89b5b8416d790a5d6bba31cbaa1fecdf0cc1628a09a50f8af9966c982d8ed6e725c4413d3217a8d6003d0f62c4bf7f6d7be687d6d0c6c2810d635259ca6b8","ssdeep":"","tlshash":"8111684e34f660a06aa3b0688b9f9608f17a2a0b3048cd047d4cd6d11f25c38998bffd","size":905,"data":"","first_seen":"2025-07-21T15:17:09.635398Z","last_seen":"2026-09-22T21:09:05.059216Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/public/js/custom-jquery.js","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ef0390223ec1b92f39c5daba0fa5701","sha1":"35f9671481c68101dfed40d223b2a569d37528d7","sha256":"20cdb9a64cbde17f380ed76632cfe84bdfb4f6dc8b972d31f9d604b7774bfcce","sha512":"2adbf2f9544164f991b16a6ec562b8e6e81a908ed4abd82d2a41c1598dbd10ed843d990502ec280efdcd3286fc0a2993066b0c6d0c50f8abb09e5eee43230840","ssdeep":"","tlshash":"6261ad59e5772210c43bb09cafcf6608a26752170057dd0abeac8dccff9619a42687fd","size":3269,"data":"","first_seen":"2025-06-25T15:17:42.80083Z","last_seen":"2026-09-22T21:09:05.053865Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"done","filename":"https://escortbabylone-reviews.us/","line_number":584,"column_number":10},{"level":"warn","text":"jQuery.Deferred exception: can't access property \"bind\", $.cookie is undefinedinitBackButtonLogic@https://escortbabylone-reviews.us/public/js/main.js:360:26\n@https://escortbabylone-reviews.us/public/js/main.js:305:9\ne@https://escortbabylone-reviews.us/public/js/jquery-3.6.0.min.js:2:30038\nDeferred/then/l/\u003c/t\u003c@https://escortbabylone-reviews.us/public/js/jquery-3.6.0.min.js:2:30340\nsetTimeout handler*Deferred/then/l/\u003c@https://escortbabylone-reviews.us/public/js/jquery-3.6.0.min.js:2:30549\nc@https://escortbabylone-reviews.us/public/js/jquery-3.6.0.min.js:2:28327\nfireWith@https://escortbabylone-reviews.us/public/js/jquery-3.6.0.min.js:2:29072\nfire@https://escortbabylone-reviews.us/public/js/jquery-3.6.0.min.js:2:29108\nc@https://escortbabylone-reviews.us/public/js/jquery-3.6.0.min.js:2:28327\nfireWith@https://escortbabylone-reviews.us/public/js/jquery-3.6.0.min.js:2:29072\nready@https://escortbabylone-reviews.us/public/js/jquery-3.6.0.min.js:2:32045\nB@https://escortbabylone-reviews.us/public/js/jquery-3.6.0.min.js:2:31824\nEventListener.handleEvent*@https://escortbabylone-reviews.us/public/js/jquery-3.6.0.min.js:2:32193\n@https://escortbabylone-reviews.us/public/js/jquery-3.6.0.min.js:2:220\n@https://escortbabylone-reviews.us/public/js/jquery-3.6.0.min.js:2:225\nmap[type:undefined]","filename":"https://escortbabylone-reviews.us/public/js/jquery-3.6.0.min.js","line_number":2,"column_number":31593}]},"http":[{"url":{"schema":"https","addr":"escortbabylone-reviews.us/public/js/review.js","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://escortbabylone-reviews.us/","date":"2026-09-22T20:59:06.331Z","timestamp":1790110746331,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"escortbabylone-reviews.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 15:13:40 GMT","end":"Thu, 17 Dec 2026 15:13:39 GMT"},"fingerprint":{"sha1":"6D:50:38:18:FE:30:CF:DB:F1:9A:D0:47:51:42:28:E1:B3:7B:F1:84","sha256":"E7:0C:BE:BB:5E:1A:6F:2C:92:25:7B:62:3F:59:A4:5E:82:55:25:3E:16:00:D8:27:ED:34:31:19:73:BD:6C:F0"}}},"request":{"raw":"GET /public/js/review.js HTTP/1.1\r\nHost: escortbabylone-reviews.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://escortbabylone-reviews.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ilc3NWhJdFRTdGphNmZEQzh2bVV6Rmc9PSIsInZhbHVlIjoiNmV0NkhEYis3bmdkcUlzczJxU3hBWDByaXM4Q1lHU3VGbnpkNkYvSmxmM1ZvWG1lQ1F5RFhkQkxlWU9xNnpLQ0U3RVVGcG1DZFBBUm1TQ2Y3ZmRDaGp6QVFobkMyK1RTV00wN2NWUU1UNWZsejFlVVp2RHpwZCtrNHRBN1cya0YiLCJtYWMiOiIyNWI2NTc0MGMyZDlkYTAxOGM0Mzg0ZTUzOGZjYmEwOGQxMzE2MTEzZjA3NzA0ZGQ5MDJlODI2ZDU4NDY5MmJiIiwidGFnIjoiIn0%3D; mega_app_session=eyJpdiI6Ii9vNURHS2xyRlRqZXVpUnBDU0puUWc9PSIsInZhbHVlIjoiOFFvN1VXQVBQWTFzSk9JV1g5VGVXbm1jcnFzZ0d1M2M3anc4dWFSNC9waXNYTExCcHB6eUMwRllQK1N4VnoyRDdDeEFQbWRGbnZUWFRWM1EzcEVFTElGN2ZkL0YvVnhrOWZWNmRETVd5dVFHK2sxUE5XR2R3NkMxRlJYaXBLZE8iLCJtYWMiOiJhNGFjMTgzYmM1MzRjODIyM2UwMmEzM2I2ZWFlZTA4ZWQxZDc1ZDgxZDg5MzNmYjA0YzBjMTdlMjA5OThiMzg4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 20:59:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Jun 2026 17:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a42afb2-6e5\"\r\nexpires: Thu, 22 Oct 2026 20:59:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1765,"size_decoded":994,"mime_type":"application/javascript","magic":"ASCII text","md5":"2d3fc73850ef85e79953e31a66a007c2","sha1":"6b5d0b3fb0912066fde3669c0de81a6c03177314","sha256":"86ce47d112c4851e269bb5ecd4a5645e001b3631520afbc87395cbb3d773b0ac","sha512":"5b1ba8e7d40c4ae0cf02137658ad298100685b1adf7faab189d07fdfd532e81e90d8a36af9eb5516118a5496fb35fd153dbe340f73148acca23b5921d511bddb","ssdeep":"","tlshash":"b031c309f5b3135a117ff0b00d1fe7165964350b8d0a9e1a3d0d54dd6f0ed75a52a78c","first_seen":"2025-08-31T17:25:54.133947Z","last_seen":"2026-09-22T21:09:05.050042Z","times_seen":10,"resource_available":true,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"escortbabylone-reviews.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/public/images/ebMainNavReviews3.png","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://escortbabylone-reviews.us/","date":"2026-09-22T20:59:06.354Z","timestamp":1790110746354,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"escortbabylone-reviews.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 15:13:40 GMT","end":"Thu, 17 Dec 2026 15:13:39 GMT"},"fingerprint":{"sha1":"6D:50:38:18:FE:30:CF:DB:F1:9A:D0:47:51:42:28:E1:B3:7B:F1:84","sha256":"E7:0C:BE:BB:5E:1A:6F:2C:92:25:7B:62:3F:59:A4:5E:82:55:25:3E:16:00:D8:27:ED:34:31:19:73:BD:6C:F0"}}},"request":{"raw":"GET /public/images/ebMainNavReviews3.png HTTP/1.1\r\nHost: escortbabylone-reviews.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://escortbabylone-reviews.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ilc3NWhJdFRTdGphNmZEQzh2bVV6Rmc9PSIsInZhbHVlIjoiNmV0NkhEYis3bmdkcUlzczJxU3hBWDByaXM4Q1lHU3VGbnpkNkYvSmxmM1ZvWG1lQ1F5RFhkQkxlWU9xNnpLQ0U3RVVGcG1DZFBBUm1TQ2Y3ZmRDaGp6QVFobkMyK1RTV00wN2NWUU1UNWZsejFlVVp2RHpwZCtrNHRBN1cya0YiLCJtYWMiOiIyNWI2NTc0MGMyZDlkYTAxOGM0Mzg0ZTUzOGZjYmEwOGQxMzE2MTEzZjA3NzA0ZGQ5MDJlODI2ZDU4NDY5MmJiIiwidGFnIjoiIn0%3D; mega_app_session=eyJpdiI6Ii9vNURHS2xyRlRqZXVpUnBDU0puUWc9PSIsInZhbHVlIjoiOFFvN1VXQVBQWTFzSk9JV1g5VGVXbm1jcnFzZ0d1M2M3anc4dWFSNC9waXNYTExCcHB6eUMwRllQK1N4VnoyRDdDeEFQbWRGbnZUWFRWM1EzcEVFTElGN2ZkL0YvVnhrOWZWNmRETVd5dVFHK2sxUE5XR2R3NkMxRlJYaXBLZE8iLCJtYWMiOiJhNGFjMTgzYmM1MzRjODIyM2UwMmEzM2I2ZWFlZTA4ZWQxZDc1ZDgxZDg5MzNmYjA0YzBjMTdlMjA5OThiMzg4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 20:59:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 7781\r\nlast-modified: Mon, 29 Jun 2026 17:47:30 GMT\r\netag: \"6a42afb2-1e65\"\r\nexpires: Thu, 22 Oct 2026 20:59:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7781,"size_decoded":8123,"mime_type":"image/png","magic":"PNG image data, 155 x 93, 8-bit/color RGBA, non-interlaced","md5":"15ba88d1a40b0f2b3b0f22e83861fba5","sha1":"d7f0b3408242c50debd10b08473d6dbbaba5d8f3","sha256":"d322913899150836fe56d5eb612d8a56c51738b7051a88e6eb2b25c2fa366566","sha512":"7dcae7d645399aaf5e05a783eef6ef77c681b00096c7b9c61aefdb9f90e456c0b982661f923002b62af1f2cf783bd097e1851c0d259758f8a59092727ba44cb7","ssdeep":"96:8kMph02YHrn3N0wTgWWC2VTisqvELCRYdefCQyk61pAve3mCml665j/btCr7NTi6:E+LtDW3TqvEL41LuIelpq7b6k4xsZq","tlshash":"9ff1ae4c7d11e20d13e5228228e154ae728b4815df98f7d22d924e1bbc71aaeb978cc7","first_seen":"2025-06-25T15:17:42.824805Z","last_seen":"2026-09-22T21:09:05.065635Z","times_seen":24,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":367,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"escortbabylone-reviews.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/public/css/bootstrap.min.css","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://escortbabylone-reviews.us/","date":"2026-09-22T20:59:06.076Z","timestamp":1790110746076,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"escortbabylone-reviews.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 15:13:40 GMT","end":"Thu, 17 Dec 2026 15:13:39 GMT"},"fingerprint":{"sha1":"6D:50:38:18:FE:30:CF:DB:F1:9A:D0:47:51:42:28:E1:B3:7B:F1:84","sha256":"E7:0C:BE:BB:5E:1A:6F:2C:92:25:7B:62:3F:59:A4:5E:82:55:25:3E:16:00:D8:27:ED:34:31:19:73:BD:6C:F0"}}},"request":{"raw":"GET /public/css/bootstrap.min.css HTTP/1.1\r\nHost: escortbabylone-reviews.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://escortbabylone-reviews.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ilc3NWhJdFRTdGphNmZEQzh2bVV6Rmc9PSIsInZhbHVlIjoiNmV0NkhEYis3bmdkcUlzczJxU3hBWDByaXM4Q1lHU3VGbnpkNkYvSmxmM1ZvWG1lQ1F5RFhkQkxlWU9xNnpLQ0U3RVVGcG1DZFBBUm1TQ2Y3ZmRDaGp6QVFobkMyK1RTV00wN2NWUU1UNWZsejFlVVp2RHpwZCtrNHRBN1cya0YiLCJtYWMiOiIyNWI2NTc0MGMyZDlkYTAxOGM0Mzg0ZTUzOGZjYmEwOGQxMzE2MTEzZjA3NzA0ZGQ5MDJlODI2ZDU4NDY5MmJiIiwidGFnIjoiIn0%3D; mega_app_session=eyJpdiI6Ii9vNURHS2xyRlRqZXVpUnBDU0puUWc9PSIsInZhbHVlIjoiOFFvN1VXQVBQWTFzSk9JV1g5VGVXbm1jcnFzZ0d1M2M3anc4dWFSNC9waXNYTExCcHB6eUMwRllQK1N4VnoyRDdDeEFQbWRGbnZUWFRWM1EzcEVFTElGN2ZkL0YvVnhrOWZWNmRETVd5dVFHK2sxUE5XR2R3NkMxRlJYaXBLZE8iLCJtYWMiOiJhNGFjMTgzYmM1MzRjODIyM2UwMmEzM2I2ZWFlZTA4ZWQxZDc1ZDgxZDg5MzNmYjA0YzBjMTdlMjA5OThiMzg4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 20:59:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 29 Jun 2026 17:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a42afb2-1d970\"\r\nexpires: Thu, 22 Oct 2026 20:59:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":121200,"size_decoded":24253,"mime_type":"text/css","magic":"ASCII text, with very long lines (65371)","md5":"ec3bb52a00e176a7181d454dffaea219","sha1":"6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68","sha256":"f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c","sha512":"e8c5daf01eae68ed7c1e277a6e544c7ad108a0fa877fb531d6d9f2210769b7da88e4e002c7b0be3b72154ebf7cbf01a795c8342ce2dad368bd6351e956195f8b","ssdeep":"768:Vy3Gxw/Vc/QWlJxtQOIuiHlq5mzI4X8OAduFKbv2ctg2Bd8JP7ecQVvH1FS:nw/a1fIuiHlq5mN8lDbNmPbh","tlshash":"2cc3c7a0f21031ea7333c55a75d0ed872219a153e56a4fb7f22f25d88f845ca1673f1a","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-09-23T00:44:52.531126Z","times_seen":75250,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"escortbabylone-reviews.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/public/images/ebMainNavPostsActive3.png","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://escortbabylone-reviews.us/","date":"2026-09-22T20:59:06.347Z","timestamp":1790110746347,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"escortbabylone-reviews.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 15:13:40 GMT","end":"Thu, 17 Dec 2026 15:13:39 GMT"},"fingerprint":{"sha1":"6D:50:38:18:FE:30:CF:DB:F1:9A:D0:47:51:42:28:E1:B3:7B:F1:84","sha256":"E7:0C:BE:BB:5E:1A:6F:2C:92:25:7B:62:3F:59:A4:5E:82:55:25:3E:16:00:D8:27:ED:34:31:19:73:BD:6C:F0"}}},"request":{"raw":"GET /public/images/ebMainNavPostsActive3.png HTTP/1.1\r\nHost: escortbabylone-reviews.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://escortbabylone-reviews.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ilc3NWhJdFRTdGphNmZEQzh2bVV6Rmc9PSIsInZhbHVlIjoiNmV0NkhEYis3bmdkcUlzczJxU3hBWDByaXM4Q1lHU3VGbnpkNkYvSmxmM1ZvWG1lQ1F5RFhkQkxlWU9xNnpLQ0U3RVVGcG1DZFBBUm1TQ2Y3ZmRDaGp6QVFobkMyK1RTV00wN2NWUU1UNWZsejFlVVp2RHpwZCtrNHRBN1cya0YiLCJtYWMiOiIyNWI2NTc0MGMyZDlkYTAxOGM0Mzg0ZTUzOGZjYmEwOGQxMzE2MTEzZjA3NzA0ZGQ5MDJlODI2ZDU4NDY5MmJiIiwidGFnIjoiIn0%3D; mega_app_session=eyJpdiI6Ii9vNURHS2xyRlRqZXVpUnBDU0puUWc9PSIsInZhbHVlIjoiOFFvN1VXQVBQWTFzSk9JV1g5VGVXbm1jcnFzZ0d1M2M3anc4dWFSNC9waXNYTExCcHB6eUMwRllQK1N4VnoyRDdDeEFQbWRGbnZUWFRWM1EzcEVFTElGN2ZkL0YvVnhrOWZWNmRETVd5dVFHK2sxUE5XR2R3NkMxRlJYaXBLZE8iLCJtYWMiOiJhNGFjMTgzYmM1MzRjODIyM2UwMmEzM2I2ZWFlZTA4ZWQxZDc1ZDgxZDg5MzNmYjA0YzBjMTdlMjA5OThiMzg4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 20:59:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 4502\r\nlast-modified: Mon, 29 Jun 2026 17:47:30 GMT\r\netag: \"6a42afb2-1196\"\r\nexpires: Thu, 22 Oct 2026 20:59:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4502,"size_decoded":4844,"mime_type":"image/png","magic":"PNG image data, 155 x 93, 8-bit/color RGBA, non-interlaced","md5":"0e71ffaeff464186f19b67bdb16cf50a","sha1":"7ccf5dace7b5fa3d117a81a59656dd295ef802bd","sha256":"c33dd78998d308bc020576627cdb40371f2dd1e9cdee2d9ca1aa36f1e4054f9f","sha512":"e2ea8226d04430d68e28eb5818699506bb860493b6e05d21aad154f45665903fa76a983273580dabf81841fd9474dc33a8f75c3509ab090d55932e3782455d7d","ssdeep":"96:o1zHtrwlHf4jJaLfiLJkRfZ+BJh0P9ghQS46lSXWWvwuoV:o1jtr0fg0eGQjh0Vs4+aE","tlshash":"e0916d84aff9df1820edfd23dab6d598af22dc509a2d8555362de8e1c42cdc7503a324","first_seen":"2025-06-25T15:17:42.81413Z","last_seen":"2026-09-22T21:09:05.059692Z","times_seen":25,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"escortbabylone-reviews.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/public/images/ebMainNavPosts3.png","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://escortbabylone-reviews.us/","date":"2026-09-22T20:59:06.348Z","timestamp":1790110746348,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"escortbabylone-reviews.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 15:13:40 GMT","end":"Thu, 17 Dec 2026 15:13:39 GMT"},"fingerprint":{"sha1":"6D:50:38:18:FE:30:CF:DB:F1:9A:D0:47:51:42:28:E1:B3:7B:F1:84","sha256":"E7:0C:BE:BB:5E:1A:6F:2C:92:25:7B:62:3F:59:A4:5E:82:55:25:3E:16:00:D8:27:ED:34:31:19:73:BD:6C:F0"}}},"request":{"raw":"GET /public/images/ebMainNavPosts3.png HTTP/1.1\r\nHost: escortbabylone-reviews.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://escortbabylone-reviews.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ilc3NWhJdFRTdGphNmZEQzh2bVV6Rmc9PSIsInZhbHVlIjoiNmV0NkhEYis3bmdkcUlzczJxU3hBWDByaXM4Q1lHU3VGbnpkNkYvSmxmM1ZvWG1lQ1F5RFhkQkxlWU9xNnpLQ0U3RVVGcG1DZFBBUm1TQ2Y3ZmRDaGp6QVFobkMyK1RTV00wN2NWUU1UNWZsejFlVVp2RHpwZCtrNHRBN1cya0YiLCJtYWMiOiIyNWI2NTc0MGMyZDlkYTAxOGM0Mzg0ZTUzOGZjYmEwOGQxMzE2MTEzZjA3NzA0ZGQ5MDJlODI2ZDU4NDY5MmJiIiwidGFnIjoiIn0%3D; mega_app_session=eyJpdiI6Ii9vNURHS2xyRlRqZXVpUnBDU0puUWc9PSIsInZhbHVlIjoiOFFvN1VXQVBQWTFzSk9JV1g5VGVXbm1jcnFzZ0d1M2M3anc4dWFSNC9waXNYTExCcHB6eUMwRllQK1N4VnoyRDdDeEFQbWRGbnZUWFRWM1EzcEVFTElGN2ZkL0YvVnhrOWZWNmRETVd5dVFHK2sxUE5XR2R3NkMxRlJYaXBLZE8iLCJtYWMiOiJhNGFjMTgzYmM1MzRjODIyM2UwMmEzM2I2ZWFlZTA4ZWQxZDc1ZDgxZDg5MzNmYjA0YzBjMTdlMjA5OThiMzg4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 20:59:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 10243\r\nlast-modified: Mon, 29 Jun 2026 17:47:30 GMT\r\netag: \"6a42afb2-2803\"\r\nexpires: Thu, 22 Oct 2026 20:59:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10243,"size_decoded":10586,"mime_type":"image/png","magic":"PNG image data, 155 x 93, 8-bit/color RGBA, non-interlaced","md5":"6c2241462f448c72063edbcdcf636e6d","sha1":"7d69fecd2dd0367e7baf5132c93518a507c67bc5","sha256":"29b939e778e8c6effffe9308547452da99adb9f6fa8ceb1dd1101531c3a9c24c","sha512":"796a380af9da1f72e3551f2f3690b1df2182443a3fd9a8f44c7ad618f7a933aaa62f34ba57abdd2c30f1cffcb3f6c9853c255b4337cb32cbd8d010b0d9023365","ssdeep":"192:xXYWTWmPOaJElV/nhtxnU7dR3OSUNNA04CUg9V56rt/7d9JCo5:xXYL+3OldtU7dR3MNp4CUo6rRt5","tlshash":"8c22bfc19e5df9a0dbed43aa50d6941bed443df0eec521f040f86e6439d06e128a69a2","first_seen":"2025-06-25T15:17:42.802238Z","last_seen":"2026-09-22T21:09:05.068724Z","times_seen":25,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":372,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"escortbabylone-reviews.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/public/images/ebMainNavInfoActive3.png","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://escortbabylone-reviews.us/","date":"2026-09-22T20:59:06.349Z","timestamp":1790110746349,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"escortbabylone-reviews.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 15:13:40 GMT","end":"Thu, 17 Dec 2026 15:13:39 GMT"},"fingerprint":{"sha1":"6D:50:38:18:FE:30:CF:DB:F1:9A:D0:47:51:42:28:E1:B3:7B:F1:84","sha256":"E7:0C:BE:BB:5E:1A:6F:2C:92:25:7B:62:3F:59:A4:5E:82:55:25:3E:16:00:D8:27:ED:34:31:19:73:BD:6C:F0"}}},"request":{"raw":"GET /public/images/ebMainNavInfoActive3.png HTTP/1.1\r\nHost: escortbabylone-reviews.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://escortbabylone-reviews.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ilc3NWhJdFRTdGphNmZEQzh2bVV6Rmc9PSIsInZhbHVlIjoiNmV0NkhEYis3bmdkcUlzczJxU3hBWDByaXM4Q1lHU3VGbnpkNkYvSmxmM1ZvWG1lQ1F5RFhkQkxlWU9xNnpLQ0U3RVVGcG1DZFBBUm1TQ2Y3ZmRDaGp6QVFobkMyK1RTV00wN2NWUU1UNWZsejFlVVp2RHpwZCtrNHRBN1cya0YiLCJtYWMiOiIyNWI2NTc0MGMyZDlkYTAxOGM0Mzg0ZTUzOGZjYmEwOGQxMzE2MTEzZjA3NzA0ZGQ5MDJlODI2ZDU4NDY5MmJiIiwidGFnIjoiIn0%3D; mega_app_session=eyJpdiI6Ii9vNURHS2xyRlRqZXVpUnBDU0puUWc9PSIsInZhbHVlIjoiOFFvN1VXQVBQWTFzSk9JV1g5VGVXbm1jcnFzZ0d1M2M3anc4dWFSNC9waXNYTExCcHB6eUMwRllQK1N4VnoyRDdDeEFQbWRGbnZUWFRWM1EzcEVFTElGN2ZkL0YvVnhrOWZWNmRETVd5dVFHK2sxUE5XR2R3NkMxRlJYaXBLZE8iLCJtYWMiOiJhNGFjMTgzYmM1MzRjODIyM2UwMmEzM2I2ZWFlZTA4ZWQxZDc1ZDgxZDg5MzNmYjA0YzBjMTdlMjA5OThiMzg4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 20:59:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 3178\r\nlast-modified: Mon, 29 Jun 2026 17:47:30 GMT\r\netag: \"6a42afb2-c6a\"\r\nexpires: Thu, 22 Oct 2026 20:59:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3178,"size_decoded":3519,"mime_type":"image/png","magic":"PNG image data, 155 x 93, 8-bit/color RGBA, non-interlaced","md5":"7949411e33ef47fee03a2da08cb399fd","sha1":"81db232e09578b163dbd897f05979804bf98793e","sha256":"7c783ee354165f48e69df1b835a97bef7d491727ffd239d1a87c45a6f579c1ae","sha512":"814a955050c28a4ded17aca3ca88916079b725f7d03eea6214dbdbe743bbc52e65dfd59d42f38b515e4dda228d952ba6238433cb4507a7f0b95696f05c49355f","ssdeep":"","tlshash":"3661180eeb656641d50c844328e9c06acd3ed5c0c9d0f12e299ae4aa27700e68c0dbdf","first_seen":"2025-06-25T15:17:42.786696Z","last_seen":"2026-09-22T21:09:05.056333Z","times_seen":24,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"escortbabylone-reviews.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/public/images/ebMainNavInfo3.png","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://escortbabylone-reviews.us/","date":"2026-09-22T20:59:06.350Z","timestamp":1790110746350,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"escortbabylone-reviews.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 15:13:40 GMT","end":"Thu, 17 Dec 2026 15:13:39 GMT"},"fingerprint":{"sha1":"6D:50:38:18:FE:30:CF:DB:F1:9A:D0:47:51:42:28:E1:B3:7B:F1:84","sha256":"E7:0C:BE:BB:5E:1A:6F:2C:92:25:7B:62:3F:59:A4:5E:82:55:25:3E:16:00:D8:27:ED:34:31:19:73:BD:6C:F0"}}},"request":{"raw":"GET /public/images/ebMainNavInfo3.png HTTP/1.1\r\nHost: escortbabylone-reviews.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://escortbabylone-reviews.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ilc3NWhJdFRTdGphNmZEQzh2bVV6Rmc9PSIsInZhbHVlIjoiNmV0NkhEYis3bmdkcUlzczJxU3hBWDByaXM4Q1lHU3VGbnpkNkYvSmxmM1ZvWG1lQ1F5RFhkQkxlWU9xNnpLQ0U3RVVGcG1DZFBBUm1TQ2Y3ZmRDaGp6QVFobkMyK1RTV00wN2NWUU1UNWZsejFlVVp2RHpwZCtrNHRBN1cya0YiLCJtYWMiOiIyNWI2NTc0MGMyZDlkYTAxOGM0Mzg0ZTUzOGZjYmEwOGQxMzE2MTEzZjA3NzA0ZGQ5MDJlODI2ZDU4NDY5MmJiIiwidGFnIjoiIn0%3D; mega_app_session=eyJpdiI6Ii9vNURHS2xyRlRqZXVpUnBDU0puUWc9PSIsInZhbHVlIjoiOFFvN1VXQVBQWTFzSk9JV1g5VGVXbm1jcnFzZ0d1M2M3anc4dWFSNC9waXNYTExCcHB6eUMwRllQK1N4VnoyRDdDeEFQbWRGbnZUWFRWM1EzcEVFTElGN2ZkL0YvVnhrOWZWNmRETVd5dVFHK2sxUE5XR2R3NkMxRlJYaXBLZE8iLCJtYWMiOiJhNGFjMTgzYmM1MzRjODIyM2UwMmEzM2I2ZWFlZTA4ZWQxZDc1ZDgxZDg5MzNmYjA0YzBjMTdlMjA5OThiMzg4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 20:59:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 8233\r\nlast-modified: Mon, 29 Jun 2026 17:47:30 GMT\r\netag: \"6a42afb2-2029\"\r\nexpires: Thu, 22 Oct 2026 20:59:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8233,"size_decoded":8575,"mime_type":"image/png","magic":"PNG image data, 155 x 93, 8-bit/color RGBA, non-interlaced","md5":"05b78dde1ae47dd6136e9e32af3754e8","sha1":"8206cd4fc7b3219df99733bdfa64c0c8d23fbbbd","sha256":"85e5b82130868f3ff814d1f77b068c106a4bbaea118629da944487cd001e56bc","sha512":"4ac0993c722b613917ff540ca9116bae1471429464e6f6112d8bd21ee0ad2aba79a7ddca112fdcc3c6c844ca45242399ec264874d0b396d55eca9b105b49186a","ssdeep":"192:EHocGqJ2qFFqB81/LEAkYWjmFX23esIc3NdjoRo/je:PcFhTyO/LwdCFX23esh3NdkGq","tlshash":"41029fed5d5e4473408c6d93b1ff0637807a8cb48be9e1e269ad609942ba9e841744d3","first_seen":"2025-06-25T15:17:42.795131Z","last_seen":"2026-09-22T21:09:05.032845Z","times_seen":25,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"escortbabylone-reviews.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/public/images/cry2.png","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://escortbabylone-reviews.us/","date":"2026-09-22T20:59:06.364Z","timestamp":1790110746364,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"escortbabylone-reviews.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 15:13:40 GMT","end":"Thu, 17 Dec 2026 15:13:39 GMT"},"fingerprint":{"sha1":"6D:50:38:18:FE:30:CF:DB:F1:9A:D0:47:51:42:28:E1:B3:7B:F1:84","sha256":"E7:0C:BE:BB:5E:1A:6F:2C:92:25:7B:62:3F:59:A4:5E:82:55:25:3E:16:00:D8:27:ED:34:31:19:73:BD:6C:F0"}}},"request":{"raw":"GET /public/images/cry2.png HTTP/1.1\r\nHost: escortbabylone-reviews.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://escortbabylone-reviews.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ilc3NWhJdFRTdGphNmZEQzh2bVV6Rmc9PSIsInZhbHVlIjoiNmV0NkhEYis3bmdkcUlzczJxU3hBWDByaXM4Q1lHU3VGbnpkNkYvSmxmM1ZvWG1lQ1F5RFhkQkxlWU9xNnpLQ0U3RVVGcG1DZFBBUm1TQ2Y3ZmRDaGp6QVFobkMyK1RTV00wN2NWUU1UNWZsejFlVVp2RHpwZCtrNHRBN1cya0YiLCJtYWMiOiIyNWI2NTc0MGMyZDlkYTAxOGM0Mzg0ZTUzOGZjYmEwOGQxMzE2MTEzZjA3NzA0ZGQ5MDJlODI2ZDU4NDY5MmJiIiwidGFnIjoiIn0%3D; mega_app_session=eyJpdiI6Ii9vNURHS2xyRlRqZXVpUnBDU0puUWc9PSIsInZhbHVlIjoiOFFvN1VXQVBQWTFzSk9JV1g5VGVXbm1jcnFzZ0d1M2M3anc4dWFSNC9waXNYTExCcHB6eUMwRllQK1N4VnoyRDdDeEFQbWRGbnZUWFRWM1EzcEVFTElGN2ZkL0YvVnhrOWZWNmRETVd5dVFHK2sxUE5XR2R3NkMxRlJYaXBLZE8iLCJtYWMiOiJhNGFjMTgzYmM1MzRjODIyM2UwMmEzM2I2ZWFlZTA4ZWQxZDc1ZDgxZDg5MzNmYjA0YzBjMTdlMjA5OThiMzg4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 20:59:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 22731\r\nlast-modified: Mon, 29 Jun 2026 17:47:30 GMT\r\netag: \"6a42afb2-58cb\"\r\nexpires: Thu, 22 Oct 2026 20:59:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22731,"size_decoded":23074,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 480x480, components 3","md5":"e03474ad65ca61603eb0d4f290b809e4","sha1":"b4d6a30da643f7435f79e8284c2c57f572ddc8ed","sha256":"082fd9ccddb55cbefafabbfc76d5da7fd02985b2a37a905822da456426fc24b7","sha512":"6c124c47db9995195341f8e52051c10b7649f5ce18e334fa1dc29dcca5dfc1664857097084ce38430dc12b7e127d00a4b8f81792f2716d58ccf860883156c0e0","ssdeep":"384:IdoGu7vOYbdn9oigZ/7+2Nu48g25bt4FNzS9uXA/mKoOx4t9AjLjwOb2GTOYedH:4YGadnbrg21OPz7XA/dxbLjqGTOYWH","tlshash":"e8a2c0e5c6365476cb657ab80ce997fba3d8fd056a1d61c7c045e0b1a92d07028803ff","first_seen":"2026-09-22T20:56:08.144789Z","last_seen":"2026-09-22T21:09:05.067952Z","times_seen":9,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":359,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"escortbabylone-reviews.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/public/images/escortBabylon_favicon.ico","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://escortbabylone-reviews.us/","date":"2026-09-22T20:59:06.757Z","timestamp":1790110746757,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"escortbabylone-reviews.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 15:13:40 GMT","end":"Thu, 17 Dec 2026 15:13:39 GMT"},"fingerprint":{"sha1":"6D:50:38:18:FE:30:CF:DB:F1:9A:D0:47:51:42:28:E1:B3:7B:F1:84","sha256":"E7:0C:BE:BB:5E:1A:6F:2C:92:25:7B:62:3F:59:A4:5E:82:55:25:3E:16:00:D8:27:ED:34:31:19:73:BD:6C:F0"}}},"request":{"raw":"GET /public/images/escortBabylon_favicon.ico HTTP/1.1\r\nHost: escortbabylone-reviews.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://escortbabylone-reviews.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ilc3NWhJdFRTdGphNmZEQzh2bVV6Rmc9PSIsInZhbHVlIjoiNmV0NkhEYis3bmdkcUlzczJxU3hBWDByaXM4Q1lHU3VGbnpkNkYvSmxmM1ZvWG1lQ1F5RFhkQkxlWU9xNnpLQ0U3RVVGcG1DZFBBUm1TQ2Y3ZmRDaGp6QVFobkMyK1RTV00wN2NWUU1UNWZsejFlVVp2RHpwZCtrNHRBN1cya0YiLCJtYWMiOiIyNWI2NTc0MGMyZDlkYTAxOGM0Mzg0ZTUzOGZjYmEwOGQxMzE2MTEzZjA3NzA0ZGQ5MDJlODI2ZDU4NDY5MmJiIiwidGFnIjoiIn0%3D; mega_app_session=eyJpdiI6Ii9vNURHS2xyRlRqZXVpUnBDU0puUWc9PSIsInZhbHVlIjoiOFFvN1VXQVBQWTFzSk9JV1g5VGVXbm1jcnFzZ0d1M2M3anc4dWFSNC9waXNYTExCcHB6eUMwRllQK1N4VnoyRDdDeEFQbWRGbnZUWFRWM1EzcEVFTElGN2ZkL0YvVnhrOWZWNmRETVd5dVFHK2sxUE5XR2R3NkMxRlJYaXBLZE8iLCJtYWMiOiJhNGFjMTgzYmM1MzRjODIyM2UwMmEzM2I2ZWFlZTA4ZWQxZDc1ZDgxZDg5MzNmYjA0YzBjMTdlMjA5OThiMzg4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 20:59:06 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 41662\r\nlast-modified: Mon, 29 Jun 2026 17:47:30 GMT\r\netag: \"6a42afb2-a2be\"\r\nexpires: Thu, 22 Oct 2026 20:59:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41662,"size_decoded":42008,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 100x100, 32 bits/pixel","md5":"de95a75f637f259b8cad1861529482bd","sha1":"6e274828363feed614a6827537c09b9d7bc15628","sha256":"be192f69d6f2e073f22e5c07ba2e4e9b99f822ba4dc3e0be8c31bb376d8eb835","sha512":"91ae4be38f9605798be17227c3374a3e6a93d52196b211d5f41c53d8559282b8d66b502a725cceb54205cdea3e06cb0366aa535b8a928aa0e5657c4ec895aaed","ssdeep":"384:5n9W8vUQYkS7D5xXcbCX3VkR4sGo9ElYo924c+NkMjKjBDvke/iyxUgPP1lOVE4J:l9RUQj23JXFk7thQ24cczjKFDvkoLzG","tlshash":"4013c559aa00d117c3e00b71daa7db612231ee496b4e0f07305cfaae3d7337e6a2d556","first_seen":"2025-08-21T19:09:39.905665Z","last_seen":"2026-09-22T21:09:05.067324Z","times_seen":12,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"escortbabylone-reviews.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/public/js/jquery-ui.min.js","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://escortbabylone-reviews.us/","date":"2026-09-22T20:59:06.324Z","timestamp":1790110746324,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"escortbabylone-reviews.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 15:13:40 GMT","end":"Thu, 17 Dec 2026 15:13:39 GMT"},"fingerprint":{"sha1":"6D:50:38:18:FE:30:CF:DB:F1:9A:D0:47:51:42:28:E1:B3:7B:F1:84","sha256":"E7:0C:BE:BB:5E:1A:6F:2C:92:25:7B:62:3F:59:A4:5E:82:55:25:3E:16:00:D8:27:ED:34:31:19:73:BD:6C:F0"}}},"request":{"raw":"GET /public/js/jquery-ui.min.js HTTP/1.1\r\nHost: escortbabylone-reviews.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://escortbabylone-reviews.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ilc3NWhJdFRTdGphNmZEQzh2bVV6Rmc9PSIsInZhbHVlIjoiNmV0NkhEYis3bmdkcUlzczJxU3hBWDByaXM4Q1lHU3VGbnpkNkYvSmxmM1ZvWG1lQ1F5RFhkQkxlWU9xNnpLQ0U3RVVGcG1DZFBBUm1TQ2Y3ZmRDaGp6QVFobkMyK1RTV00wN2NWUU1UNWZsejFlVVp2RHpwZCtrNHRBN1cya0YiLCJtYWMiOiIyNWI2NTc0MGMyZDlkYTAxOGM0Mzg0ZTUzOGZjYmEwOGQxMzE2MTEzZjA3NzA0ZGQ5MDJlODI2ZDU4NDY5MmJiIiwidGFnIjoiIn0%3D; mega_app_session=eyJpdiI6Ii9vNURHS2xyRlRqZXVpUnBDU0puUWc9PSIsInZhbHVlIjoiOFFvN1VXQVBQWTFzSk9JV1g5VGVXbm1jcnFzZ0d1M2M3anc4dWFSNC9waXNYTExCcHB6eUMwRllQK1N4VnoyRDdDeEFQbWRGbnZUWFRWM1EzcEVFTElGN2ZkL0YvVnhrOWZWNmRETVd5dVFHK2sxUE5XR2R3NkMxRlJYaXBLZE8iLCJtYWMiOiJhNGFjMTgzYmM1MzRjODIyM2UwMmEzM2I2ZWFlZTA4ZWQxZDc1ZDgxZDg5MzNmYjA0YzBjMTdlMjA5OThiMzg4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 20:59:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Jun 2026 17:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a42afb2-3e3c9\"\r\nexpires: Thu, 22 Oct 2026 20:59:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":254921,"size_decoded":80347,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64399)","md5":"777b80b520786cf6f0ce9c83401b2c87","sha1":"39c822c799bd6a0396f439fba4cf70b4ba6de91f","sha256":"86528b9b3691944f120890b52b0f33a146d4f01c40fbc911de0b1eb8a7cc8f10","sha512":"226b297ceac3452fe18c8a49032ecddd9697639bc22724e541cfb4110b94c05ab57cae0bc50eeb79c64d577ce9dd0dc032d97a4c32e81eb9ba87520a4a6a4351","ssdeep":"3072:+MxNddBFak8JUa3DpOujVJUc9X6gVppuzqPrI9fB8NJdFweKCbV:pNdIVvj3s9U/TK2","tlshash":"a744f84d72403a3295dfa265103b2a0ba237955da601809cb43ccedf9e7ce4571bbfb9","first_seen":"2023-03-07T13:49:17Z","last_seen":"2026-09-22T21:47:35.090943Z","times_seen":1468,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"escortbabylone-reviews.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/public/css/style.css","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://escortbabylone-reviews.us/","date":"2026-09-22T20:59:06.078Z","timestamp":1790110746078,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"escortbabylone-reviews.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 15:13:40 GMT","end":"Thu, 17 Dec 2026 15:13:39 GMT"},"fingerprint":{"sha1":"6D:50:38:18:FE:30:CF:DB:F1:9A:D0:47:51:42:28:E1:B3:7B:F1:84","sha256":"E7:0C:BE:BB:5E:1A:6F:2C:92:25:7B:62:3F:59:A4:5E:82:55:25:3E:16:00:D8:27:ED:34:31:19:73:BD:6C:F0"}}},"request":{"raw":"GET /public/css/style.css HTTP/1.1\r\nHost: escortbabylone-reviews.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://escortbabylone-reviews.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ilc3NWhJdFRTdGphNmZEQzh2bVV6Rmc9PSIsInZhbHVlIjoiNmV0NkhEYis3bmdkcUlzczJxU3hBWDByaXM4Q1lHU3VGbnpkNkYvSmxmM1ZvWG1lQ1F5RFhkQkxlWU9xNnpLQ0U3RVVGcG1DZFBBUm1TQ2Y3ZmRDaGp6QVFobkMyK1RTV00wN2NWUU1UNWZsejFlVVp2RHpwZCtrNHRBN1cya0YiLCJtYWMiOiIyNWI2NTc0MGMyZDlkYTAxOGM0Mzg0ZTUzOGZjYmEwOGQxMzE2MTEzZjA3NzA0ZGQ5MDJlODI2ZDU4NDY5MmJiIiwidGFnIjoiIn0%3D; mega_app_session=eyJpdiI6Ii9vNURHS2xyRlRqZXVpUnBDU0puUWc9PSIsInZhbHVlIjoiOFFvN1VXQVBQWTFzSk9JV1g5VGVXbm1jcnFzZ0d1M2M3anc4dWFSNC9waXNYTExCcHB6eUMwRllQK1N4VnoyRDdDeEFQbWRGbnZUWFRWM1EzcEVFTElGN2ZkL0YvVnhrOWZWNmRETVd5dVFHK2sxUE5XR2R3NkMxRlJYaXBLZE8iLCJtYWMiOiJhNGFjMTgzYmM1MzRjODIyM2UwMmEzM2I2ZWFlZTA4ZWQxZDc1ZDgxZDg5MzNmYjA0YzBjMTdlMjA5OThiMzg4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 20:59:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 29 Jun 2026 17:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a42afb2-20695\"\r\nexpires: Thu, 22 Oct 2026 20:59:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":132757,"size_decoded":28060,"mime_type":"text/css","magic":"ASCII text","md5":"d05b1a280059b464bc16832336e7945e","sha1":"e51dba1a4f90040f0f34afe70ba3019c8a5c7a4b","sha256":"cf50e55955246512a89fac7391bdd804db51009a73351ef56c5d0568c0d4de06","sha512":"279b4b060408e50826ec17ff4a7d670ca846f6f821ef1b210f7e3e3cf5baab722b7eb4c9bad67c3d7418b892e877dadc030efdf5455d8f34b61c86c225126689","ssdeep":"3072:SUCnGbl5uuYewUvomEOrV5/UshZXmtJYBcw2rVUCxAnsxQ:SYblQuYewUvLnV5/UshZWDYBcw2rVUCC","tlshash":"dad3339a8ea31405f81bd4a87fb697c6b3394153490eca287be4725ccf455f680fa78c","first_seen":"2026-09-22T20:56:08.176521Z","last_seen":"2026-09-22T21:09:05.061205Z","times_seen":9,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"escortbabylone-reviews.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/public/js/dust-full.min.js","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://escortbabylone-reviews.us/","date":"2026-09-22T20:59:06.320Z","timestamp":1790110746320,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"escortbabylone-reviews.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 15:13:40 GMT","end":"Thu, 17 Dec 2026 15:13:39 GMT"},"fingerprint":{"sha1":"6D:50:38:18:FE:30:CF:DB:F1:9A:D0:47:51:42:28:E1:B3:7B:F1:84","sha256":"E7:0C:BE:BB:5E:1A:6F:2C:92:25:7B:62:3F:59:A4:5E:82:55:25:3E:16:00:D8:27:ED:34:31:19:73:BD:6C:F0"}}},"request":{"raw":"GET /public/js/dust-full.min.js HTTP/1.1\r\nHost: escortbabylone-reviews.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://escortbabylone-reviews.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ilc3NWhJdFRTdGphNmZEQzh2bVV6Rmc9PSIsInZhbHVlIjoiNmV0NkhEYis3bmdkcUlzczJxU3hBWDByaXM4Q1lHU3VGbnpkNkYvSmxmM1ZvWG1lQ1F5RFhkQkxlWU9xNnpLQ0U3RVVGcG1DZFBBUm1TQ2Y3ZmRDaGp6QVFobkMyK1RTV00wN2NWUU1UNWZsejFlVVp2RHpwZCtrNHRBN1cya0YiLCJtYWMiOiIyNWI2NTc0MGMyZDlkYTAxOGM0Mzg0ZTUzOGZjYmEwOGQxMzE2MTEzZjA3NzA0ZGQ5MDJlODI2ZDU4NDY5MmJiIiwidGFnIjoiIn0%3D; mega_app_session=eyJpdiI6Ii9vNURHS2xyRlRqZXVpUnBDU0puUWc9PSIsInZhbHVlIjoiOFFvN1VXQVBQWTFzSk9JV1g5VGVXbm1jcnFzZ0d1M2M3anc4dWFSNC9waXNYTExCcHB6eUMwRllQK1N4VnoyRDdDeEFQbWRGbnZUWFRWM1EzcEVFTElGN2ZkL0YvVnhrOWZWNmRETVd5dVFHK2sxUE5XR2R3NkMxRlJYaXBLZE8iLCJtYWMiOiJhNGFjMTgzYmM1MzRjODIyM2UwMmEzM2I2ZWFlZTA4ZWQxZDc1ZDgxZDg5MzNmYjA0YzBjMTdlMjA5OThiMzg4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 20:59:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Jun 2026 17:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a42afb2-9729\"\r\nexpires: Thu, 22 Oct 2026 20:59:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38697,"size_decoded":12221,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32007)","md5":"ddf5052f90290f6a77700854470b5e76","sha1":"102ea5891cc6bdf7a235b407ed906fa349cc5269","sha256":"7169a3248ce86a39c8a7c43bbc147cca5a70934b0ab805e12e3901a7e303d059","sha512":"52fe3766f086099866f4530c7341616fca1b60bef6fd25c37f25c4f51ce86991934a3842365daf2366d7780e50e29197a80443c0fc3b43beed5c0dda9fd22b7d","ssdeep":"384:by+VE825w49RBnUaimgDyf6FZQKKo28cT6CZQV949s7ENlYVEupN:F8bBnfBgefOZQRzvTPQVe9yC2EI","tlshash":"d203c6ca3a4df86a5397b8f8456b5017a3bccb91e44c8431f1c1e4e53d77baa8069f60","first_seen":"2025-06-25T15:17:42.785242Z","last_seen":"2026-09-22T21:09:05.070225Z","times_seen":24,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"escortbabylone-reviews.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/public/images/cry1.png","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://escortbabylone-reviews.us/","date":"2026-09-22T20:59:06.362Z","timestamp":1790110746362,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"escortbabylone-reviews.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 15:13:40 GMT","end":"Thu, 17 Dec 2026 15:13:39 GMT"},"fingerprint":{"sha1":"6D:50:38:18:FE:30:CF:DB:F1:9A:D0:47:51:42:28:E1:B3:7B:F1:84","sha256":"E7:0C:BE:BB:5E:1A:6F:2C:92:25:7B:62:3F:59:A4:5E:82:55:25:3E:16:00:D8:27:ED:34:31:19:73:BD:6C:F0"}}},"request":{"raw":"GET /public/images/cry1.png HTTP/1.1\r\nHost: escortbabylone-reviews.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://escortbabylone-reviews.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ilc3NWhJdFRTdGphNmZEQzh2bVV6Rmc9PSIsInZhbHVlIjoiNmV0NkhEYis3bmdkcUlzczJxU3hBWDByaXM4Q1lHU3VGbnpkNkYvSmxmM1ZvWG1lQ1F5RFhkQkxlWU9xNnpLQ0U3RVVGcG1DZFBBUm1TQ2Y3ZmRDaGp6QVFobkMyK1RTV00wN2NWUU1UNWZsejFlVVp2RHpwZCtrNHRBN1cya0YiLCJtYWMiOiIyNWI2NTc0MGMyZDlkYTAxOGM0Mzg0ZTUzOGZjYmEwOGQxMzE2MTEzZjA3NzA0ZGQ5MDJlODI2ZDU4NDY5MmJiIiwidGFnIjoiIn0%3D; mega_app_session=eyJpdiI6Ii9vNURHS2xyRlRqZXVpUnBDU0puUWc9PSIsInZhbHVlIjoiOFFvN1VXQVBQWTFzSk9JV1g5VGVXbm1jcnFzZ0d1M2M3anc4dWFSNC9waXNYTExCcHB6eUMwRllQK1N4VnoyRDdDeEFQbWRGbnZUWFRWM1EzcEVFTElGN2ZkL0YvVnhrOWZWNmRETVd5dVFHK2sxUE5XR2R3NkMxRlJYaXBLZE8iLCJtYWMiOiJhNGFjMTgzYmM1MzRjODIyM2UwMmEzM2I2ZWFlZTA4ZWQxZDc1ZDgxZDg5MzNmYjA0YzBjMTdlMjA5OThiMzg4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 20:59:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 32828\r\nlast-modified: Mon, 29 Jun 2026 17:47:30 GMT\r\netag: \"6a42afb2-803c\"\r\nexpires: Thu, 22 Oct 2026 20:59:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32828,"size_decoded":33171,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x640, components 3","md5":"1fee36d7e645eb3e5e5f5a5d3260f1be","sha1":"5caba219df0f49da18971b583addca29db227595","sha256":"faecedb9eff1b66a8c90e7b56ce2f7251a0bc8b0b5c351dfb41a017c93c6eb2c","sha512":"c9db018abcd249768315450ce7377393621a4e4d8c410539284291ec056018c598f7c617fd053958e5b159572454d9346714f0d51221b44d4e4abcc470a375f8","ssdeep":"768:7jSd1K9+LHPTQrV3gGH+B/2a9CXEAKzxfNIsaAT:7UogGH+clEAwxNIsaA","tlshash":"ace2cf9926626006df98f7791c23811f13b7ee1d22ce389be74ac1e4906c4b84ca4dec","first_seen":"2026-09-22T20:56:08.147538Z","last_seen":"2026-09-22T21:09:05.060743Z","times_seen":9,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":361,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"escortbabylone-reviews.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/public/js/response.js","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://escortbabylone-reviews.us/","date":"2026-09-22T20:59:06.333Z","timestamp":1790110746333,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"escortbabylone-reviews.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 15:13:40 GMT","end":"Thu, 17 Dec 2026 15:13:39 GMT"},"fingerprint":{"sha1":"6D:50:38:18:FE:30:CF:DB:F1:9A:D0:47:51:42:28:E1:B3:7B:F1:84","sha256":"E7:0C:BE:BB:5E:1A:6F:2C:92:25:7B:62:3F:59:A4:5E:82:55:25:3E:16:00:D8:27:ED:34:31:19:73:BD:6C:F0"}}},"request":{"raw":"GET /public/js/response.js HTTP/1.1\r\nHost: escortbabylone-reviews.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://escortbabylone-reviews.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ilc3NWhJdFRTdGphNmZEQzh2bVV6Rmc9PSIsInZhbHVlIjoiNmV0NkhEYis3bmdkcUlzczJxU3hBWDByaXM4Q1lHU3VGbnpkNkYvSmxmM1ZvWG1lQ1F5RFhkQkxlWU9xNnpLQ0U3RVVGcG1DZFBBUm1TQ2Y3ZmRDaGp6QVFobkMyK1RTV00wN2NWUU1UNWZsejFlVVp2RHpwZCtrNHRBN1cya0YiLCJtYWMiOiIyNWI2NTc0MGMyZDlkYTAxOGM0Mzg0ZTUzOGZjYmEwOGQxMzE2MTEzZjA3NzA0ZGQ5MDJlODI2ZDU4NDY5MmJiIiwidGFnIjoiIn0%3D; mega_app_session=eyJpdiI6Ii9vNURHS2xyRlRqZXVpUnBDU0puUWc9PSIsInZhbHVlIjoiOFFvN1VXQVBQWTFzSk9JV1g5VGVXbm1jcnFzZ0d1M2M3anc4dWFSNC9waXNYTExCcHB6eUMwRllQK1N4VnoyRDdDeEFQbWRGbnZUWFRWM1EzcEVFTElGN2ZkL0YvVnhrOWZWNmRETVd5dVFHK2sxUE5XR2R3NkMxRlJYaXBLZE8iLCJtYWMiOiJhNGFjMTgzYmM1MzRjODIyM2UwMmEzM2I2ZWFlZTA4ZWQxZDc1ZDgxZDg5MzNmYjA0YzBjMTdlMjA5OThiMzg4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 20:59:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Jun 2026 17:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a42afb2-99f\"\r\nexpires: Thu, 22 Oct 2026 20:59:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2463,"size_decoded":1243,"mime_type":"application/javascript","magic":"ASCII text","md5":"b5ce9aa9bb6b3b28a64fa512fca366ca","sha1":"4a59eb493994929b9db23f56fb23a9fc5f79d8d8","sha256":"f6d5b1f87d072a32f9a82cb697267c7fb5a855895e256d0e6942e84862819a61","sha512":"c91c09a7dd1b4f55d614a322ce4faf41a1134a7aa49aadea197f0da2f6cc5fcffefd59bd10ba69597111985e95849e0f4e7477828284238bfb7ea27fbc064aff","ssdeep":"","tlshash":"52510d18adba11680b2f30fa6adf154474a1a0070f4cd855bd9ca2c45f4d93ca7a9fee","first_seen":"2025-08-31T17:25:54.119177Z","last_seen":"2026-09-22T21:09:05.032259Z","times_seen":10,"resource_available":true,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"escortbabylone-reviews.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/public/js/main.js","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://escortbabylone-reviews.us/","date":"2026-09-22T20:59:06.334Z","timestamp":1790110746334,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"escortbabylone-reviews.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 15:13:40 GMT","end":"Thu, 17 Dec 2026 15:13:39 GMT"},"fingerprint":{"sha1":"6D:50:38:18:FE:30:CF:DB:F1:9A:D0:47:51:42:28:E1:B3:7B:F1:84","sha256":"E7:0C:BE:BB:5E:1A:6F:2C:92:25:7B:62:3F:59:A4:5E:82:55:25:3E:16:00:D8:27:ED:34:31:19:73:BD:6C:F0"}}},"request":{"raw":"GET /public/js/main.js HTTP/1.1\r\nHost: escortbabylone-reviews.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://escortbabylone-reviews.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ilc3NWhJdFRTdGphNmZEQzh2bVV6Rmc9PSIsInZhbHVlIjoiNmV0NkhEYis3bmdkcUlzczJxU3hBWDByaXM4Q1lHU3VGbnpkNkYvSmxmM1ZvWG1lQ1F5RFhkQkxlWU9xNnpLQ0U3RVVGcG1DZFBBUm1TQ2Y3ZmRDaGp6QVFobkMyK1RTV00wN2NWUU1UNWZsejFlVVp2RHpwZCtrNHRBN1cya0YiLCJtYWMiOiIyNWI2NTc0MGMyZDlkYTAxOGM0Mzg0ZTUzOGZjYmEwOGQxMzE2MTEzZjA3NzA0ZGQ5MDJlODI2ZDU4NDY5MmJiIiwidGFnIjoiIn0%3D; mega_app_session=eyJpdiI6Ii9vNURHS2xyRlRqZXVpUnBDU0puUWc9PSIsInZhbHVlIjoiOFFvN1VXQVBQWTFzSk9JV1g5VGVXbm1jcnFzZ0d1M2M3anc4dWFSNC9waXNYTExCcHB6eUMwRllQK1N4VnoyRDdDeEFQbWRGbnZUWFRWM1EzcEVFTElGN2ZkL0YvVnhrOWZWNmRETVd5dVFHK2sxUE5XR2R3NkMxRlJYaXBLZE8iLCJtYWMiOiJhNGFjMTgzYmM1MzRjODIyM2UwMmEzM2I2ZWFlZTA4ZWQxZDc1ZDgxZDg5MzNmYjA0YzBjMTdlMjA5OThiMzg4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 20:59:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Jun 2026 17:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a42afb2-48b9\"\r\nexpires: Thu, 22 Oct 2026 20:59:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18617,"size_decoded":5154,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"bb453c2c008ba26e0b7100ce3f113485","sha1":"379f090cda160ccedc8db757255c299a797208d2","sha256":"dc6fa935998ff30671b280a5bab773d1541ad251c4244268f1472bf7f112f9e0","sha512":"52a84254a9b8596fba13389aa4f18e603a68c8a52943b7ee647a4ef0107f0825aa5cc9f564eaf146629b461f273b0a32b37255eabe723f25f0fc9633389b2646","ssdeep":"384:IMD+m+5jHgv4CY0Svo/jqhZgIp4+RbPOXOqJini0iuibi/iKiPitiaiiUbFu:IM8CSUOvip/+6zKcD7u","tlshash":"b6822d48bce72165817b30be4fbb96047979342f0104de00bd4dded81fa4e5aaa667ce","first_seen":"2026-09-22T20:56:08.135371Z","last_seen":"2026-09-22T21:09:05.055798Z","times_seen":9,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"escortbabylone-reviews.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/public/images/ebBackToLc2.png","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://escortbabylone-reviews.us/","date":"2026-09-22T20:59:06.367Z","timestamp":1790110746367,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"escortbabylone-reviews.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 15:13:40 GMT","end":"Thu, 17 Dec 2026 15:13:39 GMT"},"fingerprint":{"sha1":"6D:50:38:18:FE:30:CF:DB:F1:9A:D0:47:51:42:28:E1:B3:7B:F1:84","sha256":"E7:0C:BE:BB:5E:1A:6F:2C:92:25:7B:62:3F:59:A4:5E:82:55:25:3E:16:00:D8:27:ED:34:31:19:73:BD:6C:F0"}}},"request":{"raw":"GET /public/images/ebBackToLc2.png HTTP/1.1\r\nHost: escortbabylone-reviews.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://escortbabylone-reviews.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ilc3NWhJdFRTdGphNmZEQzh2bVV6Rmc9PSIsInZhbHVlIjoiNmV0NkhEYis3bmdkcUlzczJxU3hBWDByaXM4Q1lHU3VGbnpkNkYvSmxmM1ZvWG1lQ1F5RFhkQkxlWU9xNnpLQ0U3RVVGcG1DZFBBUm1TQ2Y3ZmRDaGp6QVFobkMyK1RTV00wN2NWUU1UNWZsejFlVVp2RHpwZCtrNHRBN1cya0YiLCJtYWMiOiIyNWI2NTc0MGMyZDlkYTAxOGM0Mzg0ZTUzOGZjYmEwOGQxMzE2MTEzZjA3NzA0ZGQ5MDJlODI2ZDU4NDY5MmJiIiwidGFnIjoiIn0%3D; mega_app_session=eyJpdiI6Ii9vNURHS2xyRlRqZXVpUnBDU0puUWc9PSIsInZhbHVlIjoiOFFvN1VXQVBQWTFzSk9JV1g5VGVXbm1jcnFzZ0d1M2M3anc4dWFSNC9waXNYTExCcHB6eUMwRllQK1N4VnoyRDdDeEFQbWRGbnZUWFRWM1EzcEVFTElGN2ZkL0YvVnhrOWZWNmRETVd5dVFHK2sxUE5XR2R3NkMxRlJYaXBLZE8iLCJtYWMiOiJhNGFjMTgzYmM1MzRjODIyM2UwMmEzM2I2ZWFlZTA4ZWQxZDc1ZDgxZDg5MzNmYjA0YzBjMTdlMjA5OThiMzg4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 20:59:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 8324\r\nlast-modified: Mon, 29 Jun 2026 17:47:30 GMT\r\netag: \"6a42afb2-2084\"\r\nexpires: Thu, 22 Oct 2026 20:59:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8324,"size_decoded":8666,"mime_type":"image/png","magic":"PNG image data, 105 x 105, 8-bit/color RGBA, non-interlaced","md5":"1300744e00a6d60c828e8e6f9b968ace","sha1":"99a7f5372e130259169c46de4f71865b1beefc86","sha256":"d645b9e022550e0fa28e123e33938497d6f430378cf5f4531d07b9bc73a80f17","sha512":"4e4ad44616ddcdbd354472d72830972240d1fe9d2cfe65970ff73056b3ffe014ae2f315d123df45e4d399ed2fb796eea7427dff431e04bc5221d7306ddb6900d","ssdeep":"192:jc41/PAPyZC342+yS54BSFeP1L3jKHHYemlfGmjtH:JooC3Kv9FGL3jgHqjB","tlshash":"26029fee65a0f446d0c078b7b6f492bb9869199083c0a5cff5eeec3bd48037415a51ee","first_seen":"2025-06-25T15:17:42.802937Z","last_seen":"2026-09-22T21:09:05.052032Z","times_seen":24,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":356,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"escortbabylone-reviews.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/public/images/ebMainNavPostsCommentsActive3.png","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://escortbabylone-reviews.us/","date":"2026-09-22T20:59:06.357Z","timestamp":1790110746357,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"escortbabylone-reviews.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 15:13:40 GMT","end":"Thu, 17 Dec 2026 15:13:39 GMT"},"fingerprint":{"sha1":"6D:50:38:18:FE:30:CF:DB:F1:9A:D0:47:51:42:28:E1:B3:7B:F1:84","sha256":"E7:0C:BE:BB:5E:1A:6F:2C:92:25:7B:62:3F:59:A4:5E:82:55:25:3E:16:00:D8:27:ED:34:31:19:73:BD:6C:F0"}}},"request":{"raw":"GET /public/images/ebMainNavPostsCommentsActive3.png HTTP/1.1\r\nHost: escortbabylone-reviews.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://escortbabylone-reviews.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ilc3NWhJdFRTdGphNmZEQzh2bVV6Rmc9PSIsInZhbHVlIjoiNmV0NkhEYis3bmdkcUlzczJxU3hBWDByaXM4Q1lHU3VGbnpkNkYvSmxmM1ZvWG1lQ1F5RFhkQkxlWU9xNnpLQ0U3RVVGcG1DZFBBUm1TQ2Y3ZmRDaGp6QVFobkMyK1RTV00wN2NWUU1UNWZsejFlVVp2RHpwZCtrNHRBN1cya0YiLCJtYWMiOiIyNWI2NTc0MGMyZDlkYTAxOGM0Mzg0ZTUzOGZjYmEwOGQxMzE2MTEzZjA3NzA0ZGQ5MDJlODI2ZDU4NDY5MmJiIiwidGFnIjoiIn0%3D; mega_app_session=eyJpdiI6Ii9vNURHS2xyRlRqZXVpUnBDU0puUWc9PSIsInZhbHVlIjoiOFFvN1VXQVBQWTFzSk9JV1g5VGVXbm1jcnFzZ0d1M2M3anc4dWFSNC9waXNYTExCcHB6eUMwRllQK1N4VnoyRDdDeEFQbWRGbnZUWFRWM1EzcEVFTElGN2ZkL0YvVnhrOWZWNmRETVd5dVFHK2sxUE5XR2R3NkMxRlJYaXBLZE8iLCJtYWMiOiJhNGFjMTgzYmM1MzRjODIyM2UwMmEzM2I2ZWFlZTA4ZWQxZDc1ZDgxZDg5MzNmYjA0YzBjMTdlMjA5OThiMzg4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 20:59:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 3017\r\nlast-modified: Mon, 29 Jun 2026 17:47:30 GMT\r\netag: \"6a42afb2-bc9\"\r\nexpires: Thu, 22 Oct 2026 20:59:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3017,"size_decoded":3358,"mime_type":"image/png","magic":"PNG image data, 155 x 93, 8-bit/color RGBA, non-interlaced","md5":"0c3289bed89e4faa2e303ba259089427","sha1":"372017771e86798d1289e76c2e75d832c9904112","sha256":"23b244a645bd3ac76a64d749dde04ee6476a0a7681c30c2cbe7e618e181805ff","sha512":"2471dc2b7aae302f6105fc365131e17bc6a25a1bfaf820edaef1df846853cd98712626d3f9d1af801b4289efa6e6ae537e831e3f21b0aaf3186dbdfb3db9166f","ssdeep":"","tlshash":"87514c4fa6c2f1816350df4622fdb5275736d54465c2f7d56a1bd81f00306b2192e1af","first_seen":"2025-06-25T15:17:42.792718Z","last_seen":"2026-09-22T21:09:05.064081Z","times_seen":24,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"escortbabylone-reviews.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-22T20:59:03.857Z","timestamp":1790110743857,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"escortbabylone-reviews.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 15:13:40 GMT","end":"Thu, 17 Dec 2026 15:13:39 GMT"},"fingerprint":{"sha1":"6D:50:38:18:FE:30:CF:DB:F1:9A:D0:47:51:42:28:E1:B3:7B:F1:84","sha256":"E7:0C:BE:BB:5E:1A:6F:2C:92:25:7B:62:3F:59:A4:5E:82:55:25:3E:16:00:D8:27:ED:34:31:19:73:BD:6C:F0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: escortbabylone-reviews.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Tue, 22 Sep 2026 20:59:05 GMT\r\nset-cookie: XSRF-TOKEN=eyJpdiI6Ilc3NWhJdFRTdGphNmZEQzh2bVV6Rmc9PSIsInZhbHVlIjoiNmV0NkhEYis3bmdkcUlzczJxU3hBWDByaXM4Q1lHU3VGbnpkNkYvSmxmM1ZvWG1lQ1F5RFhkQkxlWU9xNnpLQ0U3RVVGcG1DZFBBUm1TQ2Y3ZmRDaGp6QVFobkMyK1RTV00wN2NWUU1UNWZsejFlVVp2RHpwZCtrNHRBN1cya0YiLCJtYWMiOiIyNWI2NTc0MGMyZDlkYTAxOGM0Mzg0ZTUzOGZjYmEwOGQxMzE2MTEzZjA3NzA0ZGQ5MDJlODI2ZDU4NDY5MmJiIiwidGFnIjoiIn0%3D; expires=Tue, 22 Sep 2026 22:59:05 GMT; Max-Age=7200; path=/; secure; samesite=lax\nmega_app_session=eyJpdiI6Ii9vNURHS2xyRlRqZXVpUnBDU0puUWc9PSIsInZhbHVlIjoiOFFvN1VXQVBQWTFzSk9JV1g5VGVXbm1jcnFzZ0d1M2M3anc4dWFSNC9waXNYTExCcHB6eUMwRllQK1N4VnoyRDdDeEFQbWRGbnZUWFRWM1EzcEVFTElGN2ZkL0YvVnhrOWZWNmRETVd5dVFHK2sxUE5XR2R3NkMxRlJYaXBLZE8iLCJtYWMiOiJhNGFjMTgzYmM1MzRjODIyM2UwMmEzM2I2ZWFlZTA4ZWQxZDc1ZDgxZDg5MzNmYjA0YzBjMTdlMjA5OThiMzg4IiwidGFnIjoiIn0%3D; expires=Tue, 22 Sep 2026 22:59:05 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6Ilc3NWhJdFRTdGphNmZEQzh2bVV6Rmc9PSIsInZhbHVlIjoiNmV0NkhEYis3bmdkcUlzczJxU3hBWDByaXM4Q1lHU3VGbnpkNkYvSmxmM1ZvWG1lQ1F5RFhkQkxlWU9xNnpLQ0U3RVVGcG1DZFBBUm1TQ2Y3ZmRDaGp6QVFobkMyK1RTV00wN2NWUU1UNWZsejFlVVp2RHpwZCtrNHRBN1cya0YiLCJtYWMiOiIyNWI2NTc0MGMyZDlkYTAxOGM0Mzg0ZTUzOGZjYmEwOGQxMzE2MTEzZjA3NzA0ZGQ5MDJlODI2ZDU4NDY5MmJiIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-09-22T22:59:05Z","raw_expires":"Tue, 22 Sep 2026 22:59:05 GMT","max_age":7200,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"XSRF-TOKEN=eyJpdiI6Ilc3NWhJdFRTdGphNmZEQzh2bVV6Rmc9PSIsInZhbHVlIjoiNmV0NkhEYis3bmdkcUlzczJxU3hBWDByaXM4Q1lHU3VGbnpkNkYvSmxmM1ZvWG1lQ1F5RFhkQkxlWU9xNnpLQ0U3RVVGcG1DZFBBUm1TQ2Y3ZmRDaGp6QVFobkMyK1RTV00wN2NWUU1UNWZsejFlVVp2RHpwZCtrNHRBN1cya0YiLCJtYWMiOiIyNWI2NTc0MGMyZDlkYTAxOGM0Mzg0ZTUzOGZjYmEwOGQxMzE2MTEzZjA3NzA0ZGQ5MDJlODI2ZDU4NDY5MmJiIiwidGFnIjoiIn0%3D; expires=Tue, 22 Sep 2026 22:59:05 GMT; Max-Age=7200; path=/; secure; samesite=lax"},{"name":"mega_app_session","value":"eyJpdiI6Ii9vNURHS2xyRlRqZXVpUnBDU0puUWc9PSIsInZhbHVlIjoiOFFvN1VXQVBQWTFzSk9JV1g5VGVXbm1jcnFzZ0d1M2M3anc4dWFSNC9waXNYTExCcHB6eUMwRllQK1N4VnoyRDdDeEFQbWRGbnZUWFRWM1EzcEVFTElGN2ZkL0YvVnhrOWZWNmRETVd5dVFHK2sxUE5XR2R3NkMxRlJYaXBLZE8iLCJtYWMiOiJhNGFjMTgzYmM1MzRjODIyM2UwMmEzM2I2ZWFlZTA4ZWQxZDc1ZDgxZDg5MzNmYjA0YzBjMTdlMjA5OThiMzg4IiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-09-22T22:59:05Z","raw_expires":"Tue, 22 Sep 2026 22:59:05 GMT","max_age":7200,"secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"mega_app_session=eyJpdiI6Ii9vNURHS2xyRlRqZXVpUnBDU0puUWc9PSIsInZhbHVlIjoiOFFvN1VXQVBQWTFzSk9JV1g5VGVXbm1jcnFzZ0d1M2M3anc4dWFSNC9waXNYTExCcHB6eUMwRllQK1N4VnoyRDdDeEFQbWRGbnZUWFRWM1EzcEVFTElGN2ZkL0YvVnhrOWZWNmRETVd5dVFHK2sxUE5XR2R3NkMxRlJYaXBLZE8iLCJtYWMiOiJhNGFjMTgzYmM1MzRjODIyM2UwMmEzM2I2ZWFlZTA4ZWQxZDc1ZDgxZDg5MzNmYjA0YzBjMTdlMjA5OThiMzg4IiwidGFnIjoiIn0%3D; expires=Tue, 22 Sep 2026 22:59:05 GMT; Max-Age=7200; path=/; httponly; samesite=lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":23542,"size_decoded":6082,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"60ed3e75fa46c1e441843e5e6d91a559","sha1":"ccb544f1465a9619d1f54ca04ff4e91ed734dce4","sha256":"bcd3640a877eded99aa4624f1f5455dae18b4d22feb9c5d50f07e78aa9760809","sha512":"fccb87c31ad809ab03572590444fee19a2dd6ea47f93bfeee88f343de902bb06915159aa239274faa1ee582a3c32d67bf8f5c1a7223af6d2b150287270e71370","ssdeep":"384:4G/MqwDRpDvVDTfD7x+oKHDLHmJcPkDZhBDt/d+IO5LYSWt0:4G/InR/BzKjLHmu8DZhRt/d+IQLYSWt0","tlshash":"2db2306545f610135043e5a07ef1ae0bee53ba0bce4b8a147aad46e86f97ec1cd7720c","first_seen":"2026-09-22T20:58:42.753706Z","last_seen":"2026-09-22T20:59:55.64241Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2019,"timings":{"blocked":-1,"dns":22,"connect":108,"send":0,"wait":1777,"receive":0,"ssl":112},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"escortbabylone-reviews.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/public/css/main.css","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://escortbabylone-reviews.us/","date":"2026-09-22T20:59:06.084Z","timestamp":1790110746084,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"escortbabylone-reviews.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 15:13:40 GMT","end":"Thu, 17 Dec 2026 15:13:39 GMT"},"fingerprint":{"sha1":"6D:50:38:18:FE:30:CF:DB:F1:9A:D0:47:51:42:28:E1:B3:7B:F1:84","sha256":"E7:0C:BE:BB:5E:1A:6F:2C:92:25:7B:62:3F:59:A4:5E:82:55:25:3E:16:00:D8:27:ED:34:31:19:73:BD:6C:F0"}}},"request":{"raw":"GET /public/css/main.css HTTP/1.1\r\nHost: escortbabylone-reviews.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://escortbabylone-reviews.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ilc3NWhJdFRTdGphNmZEQzh2bVV6Rmc9PSIsInZhbHVlIjoiNmV0NkhEYis3bmdkcUlzczJxU3hBWDByaXM4Q1lHU3VGbnpkNkYvSmxmM1ZvWG1lQ1F5RFhkQkxlWU9xNnpLQ0U3RVVGcG1DZFBBUm1TQ2Y3ZmRDaGp6QVFobkMyK1RTV00wN2NWUU1UNWZsejFlVVp2RHpwZCtrNHRBN1cya0YiLCJtYWMiOiIyNWI2NTc0MGMyZDlkYTAxOGM0Mzg0ZTUzOGZjYmEwOGQxMzE2MTEzZjA3NzA0ZGQ5MDJlODI2ZDU4NDY5MmJiIiwidGFnIjoiIn0%3D; mega_app_session=eyJpdiI6Ii9vNURHS2xyRlRqZXVpUnBDU0puUWc9PSIsInZhbHVlIjoiOFFvN1VXQVBQWTFzSk9JV1g5VGVXbm1jcnFzZ0d1M2M3anc4dWFSNC9waXNYTExCcHB6eUMwRllQK1N4VnoyRDdDeEFQbWRGbnZUWFRWM1EzcEVFTElGN2ZkL0YvVnhrOWZWNmRETVd5dVFHK2sxUE5XR2R3NkMxRlJYaXBLZE8iLCJtYWMiOiJhNGFjMTgzYmM1MzRjODIyM2UwMmEzM2I2ZWFlZTA4ZWQxZDc1ZDgxZDg5MzNmYjA0YzBjMTdlMjA5OThiMzg4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 20:59:06 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\netag: W/\"6aad62d9-e3b8\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58296,"size_decoded":44893,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (56756)","md5":"cbb42513032d6c09e496731ac16c20a9","sha1":"c92f38a701aad58408451d24dd4c47b05f158cf0","sha256":"d189695b2f3bb92369881f2428fa861dca9d9a94c638d9bdc4e2fa747d6f315b","sha512":"3d76f1018afceaba7cbb4083f4a5b5758966ec2aa5d5c6b07d72361782809f7ed4bd34ed9e0c4154d01a2db7192155de8251e5a834dd90b8d9823d916e1b7285","ssdeep":"768:cHJYDDQHVZHIs91TXESJBjgBSp00yCqJ3Z+IYM3WiesRQiULO0bpD9tcNQEfdom2:cmDD6oeFUycwpk06hWp1b99c7VM","tlshash":"8443021803de40a2cd8978d9426f2f3d842a1863da1c94bd1f5b6df4ca0d8a4767f1e9","first_seen":"2024-11-25T13:26:01.204756Z","last_seen":"2026-09-23T01:09:02.691603Z","times_seen":14966,"resource_available":true,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"escortbabylone-reviews.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/public/js/analytics.js","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://escortbabylone-reviews.us/","date":"2026-09-22T20:59:06.086Z","timestamp":1790110746086,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"escortbabylone-reviews.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 15:13:40 GMT","end":"Thu, 17 Dec 2026 15:13:39 GMT"},"fingerprint":{"sha1":"6D:50:38:18:FE:30:CF:DB:F1:9A:D0:47:51:42:28:E1:B3:7B:F1:84","sha256":"E7:0C:BE:BB:5E:1A:6F:2C:92:25:7B:62:3F:59:A4:5E:82:55:25:3E:16:00:D8:27:ED:34:31:19:73:BD:6C:F0"}}},"request":{"raw":"GET /public/js/analytics.js HTTP/1.1\r\nHost: escortbabylone-reviews.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://escortbabylone-reviews.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ilc3NWhJdFRTdGphNmZEQzh2bVV6Rmc9PSIsInZhbHVlIjoiNmV0NkhEYis3bmdkcUlzczJxU3hBWDByaXM4Q1lHU3VGbnpkNkYvSmxmM1ZvWG1lQ1F5RFhkQkxlWU9xNnpLQ0U3RVVGcG1DZFBBUm1TQ2Y3ZmRDaGp6QVFobkMyK1RTV00wN2NWUU1UNWZsejFlVVp2RHpwZCtrNHRBN1cya0YiLCJtYWMiOiIyNWI2NTc0MGMyZDlkYTAxOGM0Mzg0ZTUzOGZjYmEwOGQxMzE2MTEzZjA3NzA0ZGQ5MDJlODI2ZDU4NDY5MmJiIiwidGFnIjoiIn0%3D; mega_app_session=eyJpdiI6Ii9vNURHS2xyRlRqZXVpUnBDU0puUWc9PSIsInZhbHVlIjoiOFFvN1VXQVBQWTFzSk9JV1g5VGVXbm1jcnFzZ0d1M2M3anc4dWFSNC9waXNYTExCcHB6eUMwRllQK1N4VnoyRDdDeEFQbWRGbnZUWFRWM1EzcEVFTElGN2ZkL0YvVnhrOWZWNmRETVd5dVFHK2sxUE5XR2R3NkMxRlJYaXBLZE8iLCJtYWMiOiJhNGFjMTgzYmM1MzRjODIyM2UwMmEzM2I2ZWFlZTA4ZWQxZDc1ZDgxZDg5MzNmYjA0YzBjMTdlMjA5OThiMzg4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 20:59:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Jun 2026 17:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a42afb2-ceb4\"\r\nexpires: Thu, 22 Oct 2026 20:59:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":52916,"size_decoded":23401,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2343)","md5":"575b5480531da4d14e7453e2016fe0bc","sha1":"e5c5f3134fe29e60b591c87ea85951f0aea36ee1","sha256":"de36e50194320a7d3ef1ace9bd34a875a8bd458b253c061979dd628e9bf49afd","sha512":"174e48f4fb2a7e7a0be1e16564f9ed2d0bbcc8b4af18cb89ad49cf42b1c3894c8f8e29ce673bc5d9bc8552f88d1d47294ee0e216402566a3f446f04aca24857a","ssdeep":"768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL","tlshash":"74330af9b7423466c3a271e4403f1007907aadd5f449d8e4b58ad6d46d38eab02fbf68","first_seen":"2023-06-16T11:16:31Z","last_seen":"2026-09-22T21:09:05.062767Z","times_seen":5610,"resource_available":true,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":420,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"escortbabylone-reviews.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/public/js/tag_1.js","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://escortbabylone-reviews.us/","date":"2026-09-22T20:59:06.087Z","timestamp":1790110746087,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"escortbabylone-reviews.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 15:13:40 GMT","end":"Thu, 17 Dec 2026 15:13:39 GMT"},"fingerprint":{"sha1":"6D:50:38:18:FE:30:CF:DB:F1:9A:D0:47:51:42:28:E1:B3:7B:F1:84","sha256":"E7:0C:BE:BB:5E:1A:6F:2C:92:25:7B:62:3F:59:A4:5E:82:55:25:3E:16:00:D8:27:ED:34:31:19:73:BD:6C:F0"}}},"request":{"raw":"GET /public/js/tag_1.js HTTP/1.1\r\nHost: escortbabylone-reviews.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://escortbabylone-reviews.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ilc3NWhJdFRTdGphNmZEQzh2bVV6Rmc9PSIsInZhbHVlIjoiNmV0NkhEYis3bmdkcUlzczJxU3hBWDByaXM4Q1lHU3VGbnpkNkYvSmxmM1ZvWG1lQ1F5RFhkQkxlWU9xNnpLQ0U3RVVGcG1DZFBBUm1TQ2Y3ZmRDaGp6QVFobkMyK1RTV00wN2NWUU1UNWZsejFlVVp2RHpwZCtrNHRBN1cya0YiLCJtYWMiOiIyNWI2NTc0MGMyZDlkYTAxOGM0Mzg0ZTUzOGZjYmEwOGQxMzE2MTEzZjA3NzA0ZGQ5MDJlODI2ZDU4NDY5MmJiIiwidGFnIjoiIn0%3D; mega_app_session=eyJpdiI6Ii9vNURHS2xyRlRqZXVpUnBDU0puUWc9PSIsInZhbHVlIjoiOFFvN1VXQVBQWTFzSk9JV1g5VGVXbm1jcnFzZ0d1M2M3anc4dWFSNC9waXNYTExCcHB6eUMwRllQK1N4VnoyRDdDeEFQbWRGbnZUWFRWM1EzcEVFTElGN2ZkL0YvVnhrOWZWNmRETVd5dVFHK2sxUE5XR2R3NkMxRlJYaXBLZE8iLCJtYWMiOiJhNGFjMTgzYmM1MzRjODIyM2UwMmEzM2I2ZWFlZTA4ZWQxZDc1ZDgxZDg5MzNmYjA0YzBjMTdlMjA5OThiMzg4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 20:59:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Jun 2026 17:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a42afb2-3a8ba\"\r\nexpires: Thu, 22 Oct 2026 20:59:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":239802,"size_decoded":102390,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (676)","md5":"41728fcdd0c6b4e8878d0f7407a5113c","sha1":"875c285fe88c74419bced61a85561db580d6da3d","sha256":"c012d64866fd00046bee684ef67badc5ea0574ad9b24630d00710d91ef6e8dac","sha512":"6946cdf631252450fb153d79b20df442b378f999b0f5042850ae5784304cfc9fb931e052c7312bf3c5d060e4afe4d6063bd30ca0d530afafa4726dc46ebc0497","ssdeep":"3072:CqtzxahUfMm83qktbXXp1bCSjv/rMPDM87iHGhbUX+U+kFBs43d:vtzxaGa3jbXXfbCSjAr7iHspUhFBs6d","tlshash":"6834d6d972827466537334b4a03f004bb1beac96f14c8965f186e9d53e789ac9237f2c","first_seen":"2025-05-22T20:20:46.071389Z","last_seen":"2026-09-22T21:09:05.058708Z","times_seen":13,"resource_available":true,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":419,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"escortbabylone-reviews.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/public/js/jquery-3.6.0.min.js","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://escortbabylone-reviews.us/","date":"2026-09-22T20:59:06.330Z","timestamp":1790110746330,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"escortbabylone-reviews.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 15:13:40 GMT","end":"Thu, 17 Dec 2026 15:13:39 GMT"},"fingerprint":{"sha1":"6D:50:38:18:FE:30:CF:DB:F1:9A:D0:47:51:42:28:E1:B3:7B:F1:84","sha256":"E7:0C:BE:BB:5E:1A:6F:2C:92:25:7B:62:3F:59:A4:5E:82:55:25:3E:16:00:D8:27:ED:34:31:19:73:BD:6C:F0"}}},"request":{"raw":"GET /public/js/jquery-3.6.0.min.js HTTP/1.1\r\nHost: escortbabylone-reviews.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://escortbabylone-reviews.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ilc3NWhJdFRTdGphNmZEQzh2bVV6Rmc9PSIsInZhbHVlIjoiNmV0NkhEYis3bmdkcUlzczJxU3hBWDByaXM4Q1lHU3VGbnpkNkYvSmxmM1ZvWG1lQ1F5RFhkQkxlWU9xNnpLQ0U3RVVGcG1DZFBBUm1TQ2Y3ZmRDaGp6QVFobkMyK1RTV00wN2NWUU1UNWZsejFlVVp2RHpwZCtrNHRBN1cya0YiLCJtYWMiOiIyNWI2NTc0MGMyZDlkYTAxOGM0Mzg0ZTUzOGZjYmEwOGQxMzE2MTEzZjA3NzA0ZGQ5MDJlODI2ZDU4NDY5MmJiIiwidGFnIjoiIn0%3D; mega_app_session=eyJpdiI6Ii9vNURHS2xyRlRqZXVpUnBDU0puUWc9PSIsInZhbHVlIjoiOFFvN1VXQVBQWTFzSk9JV1g5VGVXbm1jcnFzZ0d1M2M3anc4dWFSNC9waXNYTExCcHB6eUMwRllQK1N4VnoyRDdDeEFQbWRGbnZUWFRWM1EzcEVFTElGN2ZkL0YvVnhrOWZWNmRETVd5dVFHK2sxUE5XR2R3NkMxRlJYaXBLZE8iLCJtYWMiOiJhNGFjMTgzYmM1MzRjODIyM2UwMmEzM2I2ZWFlZTA4ZWQxZDc1ZDgxZDg5MzNmYjA0YzBjMTdlMjA5OThiMzg4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 20:59:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Jun 2026 17:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a42afb2-15d9d\"\r\nexpires: Thu, 22 Oct 2026 20:59:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89501,"size_decoded":35139,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-09-23T01:48:57.393257Z","times_seen":505353,"resource_available":true,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"escortbabylone-reviews.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/public/images/ebMainNavPictures3.png","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://escortbabylone-reviews.us/","date":"2026-09-22T20:59:06.352Z","timestamp":1790110746352,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"escortbabylone-reviews.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 15:13:40 GMT","end":"Thu, 17 Dec 2026 15:13:39 GMT"},"fingerprint":{"sha1":"6D:50:38:18:FE:30:CF:DB:F1:9A:D0:47:51:42:28:E1:B3:7B:F1:84","sha256":"E7:0C:BE:BB:5E:1A:6F:2C:92:25:7B:62:3F:59:A4:5E:82:55:25:3E:16:00:D8:27:ED:34:31:19:73:BD:6C:F0"}}},"request":{"raw":"GET /public/images/ebMainNavPictures3.png HTTP/1.1\r\nHost: escortbabylone-reviews.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://escortbabylone-reviews.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ilc3NWhJdFRTdGphNmZEQzh2bVV6Rmc9PSIsInZhbHVlIjoiNmV0NkhEYis3bmdkcUlzczJxU3hBWDByaXM4Q1lHU3VGbnpkNkYvSmxmM1ZvWG1lQ1F5RFhkQkxlWU9xNnpLQ0U3RVVGcG1DZFBBUm1TQ2Y3ZmRDaGp6QVFobkMyK1RTV00wN2NWUU1UNWZsejFlVVp2RHpwZCtrNHRBN1cya0YiLCJtYWMiOiIyNWI2NTc0MGMyZDlkYTAxOGM0Mzg0ZTUzOGZjYmEwOGQxMzE2MTEzZjA3NzA0ZGQ5MDJlODI2ZDU4NDY5MmJiIiwidGFnIjoiIn0%3D; mega_app_session=eyJpdiI6Ii9vNURHS2xyRlRqZXVpUnBDU0puUWc9PSIsInZhbHVlIjoiOFFvN1VXQVBQWTFzSk9JV1g5VGVXbm1jcnFzZ0d1M2M3anc4dWFSNC9waXNYTExCcHB6eUMwRllQK1N4VnoyRDdDeEFQbWRGbnZUWFRWM1EzcEVFTElGN2ZkL0YvVnhrOWZWNmRETVd5dVFHK2sxUE5XR2R3NkMxRlJYaXBLZE8iLCJtYWMiOiJhNGFjMTgzYmM1MzRjODIyM2UwMmEzM2I2ZWFlZTA4ZWQxZDc1ZDgxZDg5MzNmYjA0YzBjMTdlMjA5OThiMzg4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 20:59:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 7547\r\nlast-modified: Mon, 29 Jun 2026 17:47:30 GMT\r\netag: \"6a42afb2-1d7b\"\r\nexpires: Thu, 22 Oct 2026 20:59:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7547,"size_decoded":7889,"mime_type":"image/png","magic":"PNG image data, 155 x 93, 8-bit/color RGBA, non-interlaced","md5":"2daafea3c28190df17e68393fe2d9fcf","sha1":"57816ef9ec41b565aa6d0ca4ac5000dec70f519f","sha256":"cc17c961ccb3f74bf9ac0d4b3ce72700fc30eb217b547850f19f6aa7afcd0cf8","sha512":"c54c961162bbd40ad81dac1d1bde714a67afee6e4cfe54b8cca611f39bf2a4ee910708e4626760053b7aa988fb4d52bf376d54b5458e23d584d8870cd0f7b1a6","ssdeep":"192:Er8RHYSg0UigW50ZO8YufH2akV6LgD+ALSQUWur:zhTg3Y2HI6LgY","tlshash":"70f19f5ffe115588e12f884b53f9c0aeeb56ed80192d86951c7744234bb85fab400857","first_seen":"2025-06-25T15:17:42.78605Z","last_seen":"2026-09-22T21:09:05.057603Z","times_seen":25,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":369,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"escortbabylone-reviews.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/public/images/ebMainHeaderReviews.png","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://escortbabylone-reviews.us/","date":"2026-09-22T20:59:06.360Z","timestamp":1790110746360,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"escortbabylone-reviews.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 15:13:40 GMT","end":"Thu, 17 Dec 2026 15:13:39 GMT"},"fingerprint":{"sha1":"6D:50:38:18:FE:30:CF:DB:F1:9A:D0:47:51:42:28:E1:B3:7B:F1:84","sha256":"E7:0C:BE:BB:5E:1A:6F:2C:92:25:7B:62:3F:59:A4:5E:82:55:25:3E:16:00:D8:27:ED:34:31:19:73:BD:6C:F0"}}},"request":{"raw":"GET /public/images/ebMainHeaderReviews.png HTTP/1.1\r\nHost: escortbabylone-reviews.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://escortbabylone-reviews.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ilc3NWhJdFRTdGphNmZEQzh2bVV6Rmc9PSIsInZhbHVlIjoiNmV0NkhEYis3bmdkcUlzczJxU3hBWDByaXM4Q1lHU3VGbnpkNkYvSmxmM1ZvWG1lQ1F5RFhkQkxlWU9xNnpLQ0U3RVVGcG1DZFBBUm1TQ2Y3ZmRDaGp6QVFobkMyK1RTV00wN2NWUU1UNWZsejFlVVp2RHpwZCtrNHRBN1cya0YiLCJtYWMiOiIyNWI2NTc0MGMyZDlkYTAxOGM0Mzg0ZTUzOGZjYmEwOGQxMzE2MTEzZjA3NzA0ZGQ5MDJlODI2ZDU4NDY5MmJiIiwidGFnIjoiIn0%3D; mega_app_session=eyJpdiI6Ii9vNURHS2xyRlRqZXVpUnBDU0puUWc9PSIsInZhbHVlIjoiOFFvN1VXQVBQWTFzSk9JV1g5VGVXbm1jcnFzZ0d1M2M3anc4dWFSNC9waXNYTExCcHB6eUMwRllQK1N4VnoyRDdDeEFQbWRGbnZUWFRWM1EzcEVFTElGN2ZkL0YvVnhrOWZWNmRETVd5dVFHK2sxUE5XR2R3NkMxRlJYaXBLZE8iLCJtYWMiOiJhNGFjMTgzYmM1MzRjODIyM2UwMmEzM2I2ZWFlZTA4ZWQxZDc1ZDgxZDg5MzNmYjA0YzBjMTdlMjA5OThiMzg4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 20:59:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 9365\r\nlast-modified: Mon, 29 Jun 2026 17:47:30 GMT\r\netag: \"6a42afb2-2495\"\r\nexpires: Thu, 22 Oct 2026 20:59:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9365,"size_decoded":9707,"mime_type":"image/png","magic":"PNG image data, 525 x 120, 8-bit/color RGBA, non-interlaced","md5":"28b4bff63068b94812cd4629c705e5fd","sha1":"7b08d1324fefcff72efc90b1291004436120fa88","sha256":"68860692a513e97620b13b0714d1d93c23f25148a9178533bcb5247a60e16fe4","sha512":"ecfb4f7ca088747057ed9e1029889d3bc700022da844df46deae5e7ca794f144e08f5a86e32a9d3803b28b2564043b3d0665334d70feaa9c6deb6cbab81ea7b8","ssdeep":"192:g6g7Tp/L9epNjKN4jjY1iqQhwBIHgd3By6I1CxcIGEWX:Hg7V/0djsYwBIHSiCa","tlshash":"6d12a01ad4e1ba304251f9a892d6f7fb3b2717a485e43389e28c850afc294f1351c096","first_seen":"2025-07-21T15:17:09.618191Z","last_seen":"2026-09-22T21:09:05.066573Z","times_seen":14,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":363,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"escortbabylone-reviews.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/public/js/js.cookie.js","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://escortbabylone-reviews.us/","date":"2026-09-22T20:59:06.315Z","timestamp":1790110746315,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"escortbabylone-reviews.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 15:13:40 GMT","end":"Thu, 17 Dec 2026 15:13:39 GMT"},"fingerprint":{"sha1":"6D:50:38:18:FE:30:CF:DB:F1:9A:D0:47:51:42:28:E1:B3:7B:F1:84","sha256":"E7:0C:BE:BB:5E:1A:6F:2C:92:25:7B:62:3F:59:A4:5E:82:55:25:3E:16:00:D8:27:ED:34:31:19:73:BD:6C:F0"}}},"request":{"raw":"GET /public/js/js.cookie.js HTTP/1.1\r\nHost: escortbabylone-reviews.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://escortbabylone-reviews.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ilc3NWhJdFRTdGphNmZEQzh2bVV6Rmc9PSIsInZhbHVlIjoiNmV0NkhEYis3bmdkcUlzczJxU3hBWDByaXM4Q1lHU3VGbnpkNkYvSmxmM1ZvWG1lQ1F5RFhkQkxlWU9xNnpLQ0U3RVVGcG1DZFBBUm1TQ2Y3ZmRDaGp6QVFobkMyK1RTV00wN2NWUU1UNWZsejFlVVp2RHpwZCtrNHRBN1cya0YiLCJtYWMiOiIyNWI2NTc0MGMyZDlkYTAxOGM0Mzg0ZTUzOGZjYmEwOGQxMzE2MTEzZjA3NzA0ZGQ5MDJlODI2ZDU4NDY5MmJiIiwidGFnIjoiIn0%3D; mega_app_session=eyJpdiI6Ii9vNURHS2xyRlRqZXVpUnBDU0puUWc9PSIsInZhbHVlIjoiOFFvN1VXQVBQWTFzSk9JV1g5VGVXbm1jcnFzZ0d1M2M3anc4dWFSNC9waXNYTExCcHB6eUMwRllQK1N4VnoyRDdDeEFQbWRGbnZUWFRWM1EzcEVFTElGN2ZkL0YvVnhrOWZWNmRETVd5dVFHK2sxUE5XR2R3NkMxRlJYaXBLZE8iLCJtYWMiOiJhNGFjMTgzYmM1MzRjODIyM2UwMmEzM2I2ZWFlZTA4ZWQxZDc1ZDgxZDg5MzNmYjA0YzBjMTdlMjA5OThiMzg4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 20:59:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Jun 2026 17:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a42afb2-e5b\"\r\nexpires: Thu, 22 Oct 2026 20:59:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3675,"size_decoded":1979,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"311734ecd9058fc16142f1b58f9355f9","sha1":"8e5ba26e4a6bf9d0aa2eda6606461aad7f8ce47c","sha256":"12f9241d114722606728a4b0c0dac78c9f095cc9d56f7da21eeee1f1bbf6c5a5","sha512":"0908e5e234024c4f72e436e57fede34b80afa0889221d34ce925ac2ff5f515271d301e563134c7387d4098d9804556ec834d9c204d1ddacd8c7adec80b54e6ac","ssdeep":"","tlshash":"8d714354bbcd334e06a732811f2b519de17cbe3128584cd9885996f42c70c37db5bd6a","first_seen":"2025-06-25T15:17:42.800293Z","last_seen":"2026-09-22T21:09:05.034547Z","times_seen":24,"resource_available":true,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"escortbabylone-reviews.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/public/js/tag.js","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://escortbabylone-reviews.us/","date":"2026-09-22T20:59:06.325Z","timestamp":1790110746325,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"escortbabylone-reviews.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 15:13:40 GMT","end":"Thu, 17 Dec 2026 15:13:39 GMT"},"fingerprint":{"sha1":"6D:50:38:18:FE:30:CF:DB:F1:9A:D0:47:51:42:28:E1:B3:7B:F1:84","sha256":"E7:0C:BE:BB:5E:1A:6F:2C:92:25:7B:62:3F:59:A4:5E:82:55:25:3E:16:00:D8:27:ED:34:31:19:73:BD:6C:F0"}}},"request":{"raw":"GET /public/js/tag.js HTTP/1.1\r\nHost: escortbabylone-reviews.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://escortbabylone-reviews.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ilc3NWhJdFRTdGphNmZEQzh2bVV6Rmc9PSIsInZhbHVlIjoiNmV0NkhEYis3bmdkcUlzczJxU3hBWDByaXM4Q1lHU3VGbnpkNkYvSmxmM1ZvWG1lQ1F5RFhkQkxlWU9xNnpLQ0U3RVVGcG1DZFBBUm1TQ2Y3ZmRDaGp6QVFobkMyK1RTV00wN2NWUU1UNWZsejFlVVp2RHpwZCtrNHRBN1cya0YiLCJtYWMiOiIyNWI2NTc0MGMyZDlkYTAxOGM0Mzg0ZTUzOGZjYmEwOGQxMzE2MTEzZjA3NzA0ZGQ5MDJlODI2ZDU4NDY5MmJiIiwidGFnIjoiIn0%3D; mega_app_session=eyJpdiI6Ii9vNURHS2xyRlRqZXVpUnBDU0puUWc9PSIsInZhbHVlIjoiOFFvN1VXQVBQWTFzSk9JV1g5VGVXbm1jcnFzZ0d1M2M3anc4dWFSNC9waXNYTExCcHB6eUMwRllQK1N4VnoyRDdDeEFQbWRGbnZUWFRWM1EzcEVFTElGN2ZkL0YvVnhrOWZWNmRETVd5dVFHK2sxUE5XR2R3NkMxRlJYaXBLZE8iLCJtYWMiOiJhNGFjMTgzYmM1MzRjODIyM2UwMmEzM2I2ZWFlZTA4ZWQxZDc1ZDgxZDg5MzNmYjA0YzBjMTdlMjA5OThiMzg4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 20:59:06 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 905\r\nlast-modified: Mon, 29 Jun 2026 17:47:30 GMT\r\netag: \"6a42afb2-389\"\r\nexpires: Thu, 22 Oct 2026 20:59:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":905,"size_decoded":1258,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"cce3488b3498a315e1468c8f1a1986cd","sha1":"d973785c5f4347fb401e27f2838b1fe412d24308","sha256":"544b848f5827fd8c39c2618471fe8299138e366e220500982cc2d3d60f173e54","sha512":"69f89b5b8416d790a5d6bba31cbaa1fecdf0cc1628a09a50f8af9966c982d8ed6e725c4413d3217a8d6003d0f62c4bf7f6d7be687d6d0c6c2810d635259ca6b8","ssdeep":"","tlshash":"8111684e34f660a06aa3b0688b9f9608f17a2a0b3048cd047d4cd6d11f25c38998bffd","first_seen":"2025-07-21T15:17:09.635398Z","last_seen":"2026-09-22T21:09:05.059216Z","times_seen":19,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"escortbabylone-reviews.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/public/images/ebMainLogo.png","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://escortbabylone-reviews.us/","date":"2026-09-22T20:59:06.346Z","timestamp":1790110746346,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"escortbabylone-reviews.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 15:13:40 GMT","end":"Thu, 17 Dec 2026 15:13:39 GMT"},"fingerprint":{"sha1":"6D:50:38:18:FE:30:CF:DB:F1:9A:D0:47:51:42:28:E1:B3:7B:F1:84","sha256":"E7:0C:BE:BB:5E:1A:6F:2C:92:25:7B:62:3F:59:A4:5E:82:55:25:3E:16:00:D8:27:ED:34:31:19:73:BD:6C:F0"}}},"request":{"raw":"GET /public/images/ebMainLogo.png HTTP/1.1\r\nHost: escortbabylone-reviews.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://escortbabylone-reviews.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ilc3NWhJdFRTdGphNmZEQzh2bVV6Rmc9PSIsInZhbHVlIjoiNmV0NkhEYis3bmdkcUlzczJxU3hBWDByaXM4Q1lHU3VGbnpkNkYvSmxmM1ZvWG1lQ1F5RFhkQkxlWU9xNnpLQ0U3RVVGcG1DZFBBUm1TQ2Y3ZmRDaGp6QVFobkMyK1RTV00wN2NWUU1UNWZsejFlVVp2RHpwZCtrNHRBN1cya0YiLCJtYWMiOiIyNWI2NTc0MGMyZDlkYTAxOGM0Mzg0ZTUzOGZjYmEwOGQxMzE2MTEzZjA3NzA0ZGQ5MDJlODI2ZDU4NDY5MmJiIiwidGFnIjoiIn0%3D; mega_app_session=eyJpdiI6Ii9vNURHS2xyRlRqZXVpUnBDU0puUWc9PSIsInZhbHVlIjoiOFFvN1VXQVBQWTFzSk9JV1g5VGVXbm1jcnFzZ0d1M2M3anc4dWFSNC9waXNYTExCcHB6eUMwRllQK1N4VnoyRDdDeEFQbWRGbnZUWFRWM1EzcEVFTElGN2ZkL0YvVnhrOWZWNmRETVd5dVFHK2sxUE5XR2R3NkMxRlJYaXBLZE8iLCJtYWMiOiJhNGFjMTgzYmM1MzRjODIyM2UwMmEzM2I2ZWFlZTA4ZWQxZDc1ZDgxZDg5MzNmYjA0YzBjMTdlMjA5OThiMzg4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 20:59:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 38371\r\nlast-modified: Mon, 29 Jun 2026 17:47:30 GMT\r\netag: \"6a42afb2-95e3\"\r\nexpires: Thu, 22 Oct 2026 20:59:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38371,"size_decoded":38714,"mime_type":"image/png","magic":"PNG image data, 775 x 96, 8-bit/color RGBA, non-interlaced","md5":"674ecdc77575f0eb993c0214929bb584","sha1":"6bd1de0b0030ca7e9d6fc02e9ca14c3558448399","sha256":"a4e7881d47abbad3cf955980a53e01620b9a2bdaacf1738beae88236f3cfe84f","sha512":"2473116733b3b2e87f296106a4a447ef86918bfe3339534b5c919893f23b4bb74e10dbb762baca9fef4bd65e00bae7da7418cfff4ed3b6e50f8753a052cb3cec","ssdeep":"768:NN/ujLLIaN8S4vIACUMNIMeRgHrbThgx5KM7HFpkV+7sptzoe+QF50qQP/Ms:HmjVlmXSIdRgHax530+7sDzNq/9","tlshash":"6f03f24ba16556be95f86f733d31b824820320093fe2dfbcfa5bb49654e10236a6497c","first_seen":"2025-06-25T15:17:42.790591Z","last_seen":"2026-09-22T21:09:05.063524Z","times_seen":25,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"escortbabylone-reviews.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/public/images/ebMainNavPicturesActive3.png","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://escortbabylone-reviews.us/","date":"2026-09-22T20:59:06.351Z","timestamp":1790110746351,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"escortbabylone-reviews.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 15:13:40 GMT","end":"Thu, 17 Dec 2026 15:13:39 GMT"},"fingerprint":{"sha1":"6D:50:38:18:FE:30:CF:DB:F1:9A:D0:47:51:42:28:E1:B3:7B:F1:84","sha256":"E7:0C:BE:BB:5E:1A:6F:2C:92:25:7B:62:3F:59:A4:5E:82:55:25:3E:16:00:D8:27:ED:34:31:19:73:BD:6C:F0"}}},"request":{"raw":"GET /public/images/ebMainNavPicturesActive3.png HTTP/1.1\r\nHost: escortbabylone-reviews.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://escortbabylone-reviews.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ilc3NWhJdFRTdGphNmZEQzh2bVV6Rmc9PSIsInZhbHVlIjoiNmV0NkhEYis3bmdkcUlzczJxU3hBWDByaXM4Q1lHU3VGbnpkNkYvSmxmM1ZvWG1lQ1F5RFhkQkxlWU9xNnpLQ0U3RVVGcG1DZFBBUm1TQ2Y3ZmRDaGp6QVFobkMyK1RTV00wN2NWUU1UNWZsejFlVVp2RHpwZCtrNHRBN1cya0YiLCJtYWMiOiIyNWI2NTc0MGMyZDlkYTAxOGM0Mzg0ZTUzOGZjYmEwOGQxMzE2MTEzZjA3NzA0ZGQ5MDJlODI2ZDU4NDY5MmJiIiwidGFnIjoiIn0%3D; mega_app_session=eyJpdiI6Ii9vNURHS2xyRlRqZXVpUnBDU0puUWc9PSIsInZhbHVlIjoiOFFvN1VXQVBQWTFzSk9JV1g5VGVXbm1jcnFzZ0d1M2M3anc4dWFSNC9waXNYTExCcHB6eUMwRllQK1N4VnoyRDdDeEFQbWRGbnZUWFRWM1EzcEVFTElGN2ZkL0YvVnhrOWZWNmRETVd5dVFHK2sxUE5XR2R3NkMxRlJYaXBLZE8iLCJtYWMiOiJhNGFjMTgzYmM1MzRjODIyM2UwMmEzM2I2ZWFlZTA4ZWQxZDc1ZDgxZDg5MzNmYjA0YzBjMTdlMjA5OThiMzg4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 20:59:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 2706\r\nlast-modified: Mon, 29 Jun 2026 17:47:30 GMT\r\netag: \"6a42afb2-a92\"\r\nexpires: Thu, 22 Oct 2026 20:59:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2706,"size_decoded":3047,"mime_type":"image/png","magic":"PNG image data, 155 x 93, 8-bit/color RGBA, non-interlaced","md5":"056e9e143f871e7b8e90d8bf7d690ac6","sha1":"ccb49c0d0c352bee81b848c04f652c0a9622fecf","sha256":"f0e98c21b9c4331646a56aeb96fded4b135967afcce7a7d34b5f0950376afa4c","sha512":"cbf87e66e174016d43e28bcdee22850dacf703ca0c56cd86b7802c57da1d35d91164eae63fda1fdced956bc05198f4d0f13b07889881318f7f209ebc7f15f943","ssdeep":"","tlshash":"e9512c4df5207001a80cfeab23ea92195d1b9d40b7c9fea5f9cbe80744700b1ac5d6af","first_seen":"2025-06-25T15:17:42.814929Z","last_seen":"2026-09-22T21:09:05.056901Z","times_seen":25,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":370,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"escortbabylone-reviews.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/public/images/ebMainNavPostsComments3.png","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://escortbabylone-reviews.us/","date":"2026-09-22T20:59:06.358Z","timestamp":1790110746358,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"escortbabylone-reviews.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 15:13:40 GMT","end":"Thu, 17 Dec 2026 15:13:39 GMT"},"fingerprint":{"sha1":"6D:50:38:18:FE:30:CF:DB:F1:9A:D0:47:51:42:28:E1:B3:7B:F1:84","sha256":"E7:0C:BE:BB:5E:1A:6F:2C:92:25:7B:62:3F:59:A4:5E:82:55:25:3E:16:00:D8:27:ED:34:31:19:73:BD:6C:F0"}}},"request":{"raw":"GET /public/images/ebMainNavPostsComments3.png HTTP/1.1\r\nHost: escortbabylone-reviews.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://escortbabylone-reviews.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ilc3NWhJdFRTdGphNmZEQzh2bVV6Rmc9PSIsInZhbHVlIjoiNmV0NkhEYis3bmdkcUlzczJxU3hBWDByaXM4Q1lHU3VGbnpkNkYvSmxmM1ZvWG1lQ1F5RFhkQkxlWU9xNnpLQ0U3RVVGcG1DZFBBUm1TQ2Y3ZmRDaGp6QVFobkMyK1RTV00wN2NWUU1UNWZsejFlVVp2RHpwZCtrNHRBN1cya0YiLCJtYWMiOiIyNWI2NTc0MGMyZDlkYTAxOGM0Mzg0ZTUzOGZjYmEwOGQxMzE2MTEzZjA3NzA0ZGQ5MDJlODI2ZDU4NDY5MmJiIiwidGFnIjoiIn0%3D; mega_app_session=eyJpdiI6Ii9vNURHS2xyRlRqZXVpUnBDU0puUWc9PSIsInZhbHVlIjoiOFFvN1VXQVBQWTFzSk9JV1g5VGVXbm1jcnFzZ0d1M2M3anc4dWFSNC9waXNYTExCcHB6eUMwRllQK1N4VnoyRDdDeEFQbWRGbnZUWFRWM1EzcEVFTElGN2ZkL0YvVnhrOWZWNmRETVd5dVFHK2sxUE5XR2R3NkMxRlJYaXBLZE8iLCJtYWMiOiJhNGFjMTgzYmM1MzRjODIyM2UwMmEzM2I2ZWFlZTA4ZWQxZDc1ZDgxZDg5MzNmYjA0YzBjMTdlMjA5OThiMzg4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 20:59:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 8146\r\nlast-modified: Mon, 29 Jun 2026 17:47:30 GMT\r\netag: \"6a42afb2-1fd2\"\r\nexpires: Thu, 22 Oct 2026 20:59:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8146,"size_decoded":8488,"mime_type":"image/png","magic":"PNG image data, 155 x 93, 8-bit/color RGBA, non-interlaced","md5":"1682c47bc50c3025f80e4c9aa276f87b","sha1":"1bae3791c490dbb14745506b9d1dda831f2fc3e2","sha256":"4d1b190e8de7d112955a84374b52377686f116ee645e42ffe6d06561c2748d35","sha512":"abf6be3b483807a84ec37ce133af34140970b41482b664ff1a7df1cf19de4750edd0fcb2eff5011f9df8f8b9f5be860382bd014718806a1ed2fa1bf43a82311b","ssdeep":"192:Eea3bE1ELtvltWSuMYbtnakg6t9FsvJ0Na33SH6:ja3w6Lt/uM8ak3trk33v","tlshash":"cef19eab62949c050bfda8c73dabec13990abd5055ca95c8c8cb4b0249324a9cd27ddb","first_seen":"2025-06-25T15:17:42.805211Z","last_seen":"2026-09-22T21:09:05.061694Z","times_seen":23,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":364,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"escortbabylone-reviews.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylon.net/images/ebReviewsBlurbRedTop.png?v=1764924836","fqdn":"escortbabylon.net","domain":"escortbabylon.net","tld":"net"},"ip":{"addr":"172.66.152.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://escortbabylone-reviews.us/","date":"2026-09-22T20:59:06.366Z","timestamp":1790110746366,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"escortbabylon.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Sep 2026 06:32:10 GMT","end":"Wed, 16 Dec 2026 07:31:55 GMT"},"fingerprint":{"sha1":"81:50:C6:AC:63:69:BC:9D:BC:9E:12:44:C2:EB:B9:62:D6:A7:06:FC","sha256":"84:AC:9A:42:F5:90:2E:83:93:63:59:EC:D1:12:4A:3C:E4:5C:9B:0E:59:0A:48:BF:0B:0D:26:2F:6C:8B:74:56"}}},"request":{"raw":"GET /images/ebReviewsBlurbRedTop.png?v=1764924836 HTTP/1.1\r\nHost: escortbabylon.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://escortbabylone-reviews.us/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 22 Sep 2026 20:59:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 36258\r\nserver: cloudflare\r\nlast-modified: Wed, 29 Jul 2026 15:27:06 GMT\r\netag: \"6a6a1bca-8da2\"\r\naccept-ranges: bytes\r\nx-envoy-upstream-service-time: 2\r\nage: 226\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=zq8C1sNIwxyNEv8LK.ZAuYiKlcOSmUO2T6eDGVg38eE-1790110746.3927853-1.0.1.1-9HsocXR1XlxxiSEDMJHhEuV0_ResaZXEgXIdSpVHbdlaX54zA7SOE5yuJxofvZYFsHx72FzaAQnnu7jN4DnSfzvjSKm_cRTdJW.huz7TauHsDeziOv3DCf8V.O1JQZUU; HttpOnly; SameSite=None; Secure; Path=/; Domain=escortbabylon.net; Expires=Tue, 22 Sep 2026 21:29:06 GMT\r\ncf-ray: a3f43b44fd1a568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"zq8C1sNIwxyNEv8LK.ZAuYiKlcOSmUO2T6eDGVg38eE-1790110746.3927853-1.0.1.1-9HsocXR1XlxxiSEDMJHhEuV0_ResaZXEgXIdSpVHbdlaX54zA7SOE5yuJxofvZYFsHx72FzaAQnnu7jN4DnSfzvjSKm_cRTdJW.huz7TauHsDeziOv3DCf8V.O1JQZUU","quoted":false,"path":"/","domain":"escortbabylon.net","expires":"2026-09-22T21:29:06Z","raw_expires":"Tue, 22 Sep 2026 21:29:06 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=zq8C1sNIwxyNEv8LK.ZAuYiKlcOSmUO2T6eDGVg38eE-1790110746.3927853-1.0.1.1-9HsocXR1XlxxiSEDMJHhEuV0_ResaZXEgXIdSpVHbdlaX54zA7SOE5yuJxofvZYFsHx72FzaAQnnu7jN4DnSfzvjSKm_cRTdJW.huz7TauHsDeziOv3DCf8V.O1JQZUU; HttpOnly; SameSite=None; Secure; Path=/; Domain=escortbabylon.net; Expires=Tue, 22 Sep 2026 21:29:06 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":36258,"size_decoded":36942,"mime_type":"image/png","magic":"PNG image data, 777 x 275, 8-bit/color RGBA, non-interlaced","md5":"3ea090b4bcd4d051b8ed6c02c7d07b15","sha1":"8477e5ad5e9170f25f848fd0055dfe80b3f7a98d","sha256":"09b6560e00216b8ca6be31f86de02b49f8a117b20a98e28f4307a79b3a8a1aff","sha512":"aeab1b63a391620c8c58720b26c1aee39a607ad3c573b50084c0c181223bee2e5d81ea81f9c89c4433683821562c5b4f89f15ce68f993600121a43faf3a416aa","ssdeep":"768:pEHod/Fj2BGOJPpaDQd4iqTpL62psYJvuv6/DM:p4dG2acd4iqL6ksYxS2M","tlshash":"90f2d1b596004a29c8ac91f0799b8b114f7b2dcc8b18519c7ff9cc860e877b9ac2cd41","first_seen":"2025-11-02T16:20:08.866923Z","last_seen":"2026-09-22T21:09:05.062208Z","times_seen":11,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":4,"connect":5,"send":0,"wait":28,"receive":1,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/public/js/moment.min.js","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://escortbabylone-reviews.us/","date":"2026-09-22T20:59:06.317Z","timestamp":1790110746317,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"escortbabylone-reviews.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 15:13:40 GMT","end":"Thu, 17 Dec 2026 15:13:39 GMT"},"fingerprint":{"sha1":"6D:50:38:18:FE:30:CF:DB:F1:9A:D0:47:51:42:28:E1:B3:7B:F1:84","sha256":"E7:0C:BE:BB:5E:1A:6F:2C:92:25:7B:62:3F:59:A4:5E:82:55:25:3E:16:00:D8:27:ED:34:31:19:73:BD:6C:F0"}}},"request":{"raw":"GET /public/js/moment.min.js HTTP/1.1\r\nHost: escortbabylone-reviews.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://escortbabylone-reviews.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ilc3NWhJdFRTdGphNmZEQzh2bVV6Rmc9PSIsInZhbHVlIjoiNmV0NkhEYis3bmdkcUlzczJxU3hBWDByaXM4Q1lHU3VGbnpkNkYvSmxmM1ZvWG1lQ1F5RFhkQkxlWU9xNnpLQ0U3RVVGcG1DZFBBUm1TQ2Y3ZmRDaGp6QVFobkMyK1RTV00wN2NWUU1UNWZsejFlVVp2RHpwZCtrNHRBN1cya0YiLCJtYWMiOiIyNWI2NTc0MGMyZDlkYTAxOGM0Mzg0ZTUzOGZjYmEwOGQxMzE2MTEzZjA3NzA0ZGQ5MDJlODI2ZDU4NDY5MmJiIiwidGFnIjoiIn0%3D; mega_app_session=eyJpdiI6Ii9vNURHS2xyRlRqZXVpUnBDU0puUWc9PSIsInZhbHVlIjoiOFFvN1VXQVBQWTFzSk9JV1g5VGVXbm1jcnFzZ0d1M2M3anc4dWFSNC9waXNYTExCcHB6eUMwRllQK1N4VnoyRDdDeEFQbWRGbnZUWFRWM1EzcEVFTElGN2ZkL0YvVnhrOWZWNmRETVd5dVFHK2sxUE5XR2R3NkMxRlJYaXBLZE8iLCJtYWMiOiJhNGFjMTgzYmM1MzRjODIyM2UwMmEzM2I2ZWFlZTA4ZWQxZDc1ZDgxZDg5MzNmYjA0YzBjMTdlMjA5OThiMzg4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 20:59:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Jun 2026 17:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a42afb2-8a57\"\r\nexpires: Thu, 22 Oct 2026 20:59:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35415,"size_decoded":14217,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32010)","md5":"8c2def395d7e125976ea5faf56596aa9","sha1":"ce4fa351a2e62accf7fad77110fa4ddb09a324bf","sha256":"800c7773f0574b5b5573bd89af3cc8b0fc6bb368d6fbde8f7ccf97c30bdbf699","sha512":"99f359c7f8e7f6c752b9967e9d26bc70015b37d5c0ca9091efeb60cf375d6d1638bce6add4ac4f87a566596a0b5dabf897f6d13a72060311bbb6af5faa6577c2","ssdeep":"384:bPMjSZibdDdUlPnax4qAsLHQ34AHZMAOQUOBNeTjNplDec4McOyo4VGJbYW9X2b8:QIHtaSZ5MrQ8/5TwtW9XRizm6gamn","tlshash":"20f2b4893a56b4125b2212f144bf0907b23c98e5b44d4d29f189e8e83d7cc7d927bfb9","first_seen":"2023-03-07T01:10:50Z","last_seen":"2026-09-22T21:09:05.049143Z","times_seen":867,"resource_available":true,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"escortbabylone-reviews.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/public/js/custom-jquery.js","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://escortbabylone-reviews.us/","date":"2026-09-22T20:59:06.322Z","timestamp":1790110746322,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"escortbabylone-reviews.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 15:13:40 GMT","end":"Thu, 17 Dec 2026 15:13:39 GMT"},"fingerprint":{"sha1":"6D:50:38:18:FE:30:CF:DB:F1:9A:D0:47:51:42:28:E1:B3:7B:F1:84","sha256":"E7:0C:BE:BB:5E:1A:6F:2C:92:25:7B:62:3F:59:A4:5E:82:55:25:3E:16:00:D8:27:ED:34:31:19:73:BD:6C:F0"}}},"request":{"raw":"GET /public/js/custom-jquery.js HTTP/1.1\r\nHost: escortbabylone-reviews.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://escortbabylone-reviews.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ilc3NWhJdFRTdGphNmZEQzh2bVV6Rmc9PSIsInZhbHVlIjoiNmV0NkhEYis3bmdkcUlzczJxU3hBWDByaXM4Q1lHU3VGbnpkNkYvSmxmM1ZvWG1lQ1F5RFhkQkxlWU9xNnpLQ0U3RVVGcG1DZFBBUm1TQ2Y3ZmRDaGp6QVFobkMyK1RTV00wN2NWUU1UNWZsejFlVVp2RHpwZCtrNHRBN1cya0YiLCJtYWMiOiIyNWI2NTc0MGMyZDlkYTAxOGM0Mzg0ZTUzOGZjYmEwOGQxMzE2MTEzZjA3NzA0ZGQ5MDJlODI2ZDU4NDY5MmJiIiwidGFnIjoiIn0%3D; mega_app_session=eyJpdiI6Ii9vNURHS2xyRlRqZXVpUnBDU0puUWc9PSIsInZhbHVlIjoiOFFvN1VXQVBQWTFzSk9JV1g5VGVXbm1jcnFzZ0d1M2M3anc4dWFSNC9waXNYTExCcHB6eUMwRllQK1N4VnoyRDdDeEFQbWRGbnZUWFRWM1EzcEVFTElGN2ZkL0YvVnhrOWZWNmRETVd5dVFHK2sxUE5XR2R3NkMxRlJYaXBLZE8iLCJtYWMiOiJhNGFjMTgzYmM1MzRjODIyM2UwMmEzM2I2ZWFlZTA4ZWQxZDc1ZDgxZDg5MzNmYjA0YzBjMTdlMjA5OThiMzg4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 20:59:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Jun 2026 17:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a42afb2-cc5\"\r\nexpires: Thu, 22 Oct 2026 20:59:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3269,"size_decoded":1286,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"2ef0390223ec1b92f39c5daba0fa5701","sha1":"35f9671481c68101dfed40d223b2a569d37528d7","sha256":"20cdb9a64cbde17f380ed76632cfe84bdfb4f6dc8b972d31f9d604b7774bfcce","sha512":"2adbf2f9544164f991b16a6ec562b8e6e81a908ed4abd82d2a41c1598dbd10ed843d990502ec280efdcd3286fc0a2993066b0c6d0c50f8abb09e5eee43230840","ssdeep":"","tlshash":"6261ad59e5772210c43bb09cafcf6608a26752170057dd0abeac8dccff9619a42687fd","first_seen":"2025-06-25T15:17:42.80083Z","last_seen":"2026-09-22T21:09:05.053865Z","times_seen":23,"resource_available":true,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"escortbabylone-reviews.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/public/images/ebMainNavReviewsActive3.png","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://escortbabylone-reviews.us/","date":"2026-09-22T20:59:06.353Z","timestamp":1790110746353,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"escortbabylone-reviews.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 15:13:40 GMT","end":"Thu, 17 Dec 2026 15:13:39 GMT"},"fingerprint":{"sha1":"6D:50:38:18:FE:30:CF:DB:F1:9A:D0:47:51:42:28:E1:B3:7B:F1:84","sha256":"E7:0C:BE:BB:5E:1A:6F:2C:92:25:7B:62:3F:59:A4:5E:82:55:25:3E:16:00:D8:27:ED:34:31:19:73:BD:6C:F0"}}},"request":{"raw":"GET /public/images/ebMainNavReviewsActive3.png HTTP/1.1\r\nHost: escortbabylone-reviews.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://escortbabylone-reviews.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ilc3NWhJdFRTdGphNmZEQzh2bVV6Rmc9PSIsInZhbHVlIjoiNmV0NkhEYis3bmdkcUlzczJxU3hBWDByaXM4Q1lHU3VGbnpkNkYvSmxmM1ZvWG1lQ1F5RFhkQkxlWU9xNnpLQ0U3RVVGcG1DZFBBUm1TQ2Y3ZmRDaGp6QVFobkMyK1RTV00wN2NWUU1UNWZsejFlVVp2RHpwZCtrNHRBN1cya0YiLCJtYWMiOiIyNWI2NTc0MGMyZDlkYTAxOGM0Mzg0ZTUzOGZjYmEwOGQxMzE2MTEzZjA3NzA0ZGQ5MDJlODI2ZDU4NDY5MmJiIiwidGFnIjoiIn0%3D; mega_app_session=eyJpdiI6Ii9vNURHS2xyRlRqZXVpUnBDU0puUWc9PSIsInZhbHVlIjoiOFFvN1VXQVBQWTFzSk9JV1g5VGVXbm1jcnFzZ0d1M2M3anc4dWFSNC9waXNYTExCcHB6eUMwRllQK1N4VnoyRDdDeEFQbWRGbnZUWFRWM1EzcEVFTElGN2ZkL0YvVnhrOWZWNmRETVd5dVFHK2sxUE5XR2R3NkMxRlJYaXBLZE8iLCJtYWMiOiJhNGFjMTgzYmM1MzRjODIyM2UwMmEzM2I2ZWFlZTA4ZWQxZDc1ZDgxZDg5MzNmYjA0YzBjMTdlMjA5OThiMzg4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 20:59:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 2967\r\nlast-modified: Mon, 29 Jun 2026 17:47:30 GMT\r\netag: \"6a42afb2-b97\"\r\nexpires: Thu, 22 Oct 2026 20:59:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2967,"size_decoded":3308,"mime_type":"image/png","magic":"PNG image data, 155 x 93, 8-bit/color RGBA, non-interlaced","md5":"994949d9ce6f76315a91a7b9f6b1eb07","sha1":"df32e244b8d50545df50027b8d0b727f0609f604","sha256":"978c669caec6d685d34b2e2b95c37bfce1119fac8adedb1a36643d968a0c3034","sha512":"06379da90240ec9d04e5a81dbb20c14bd7e7068ae6cadf7ef62f0c502f8992f43fe8a691bbbab7a0bdbc74dcad3463d4cc449128bb301a3032cf450eb469449b","ssdeep":"","tlshash":"d6511a4dda85bdc3d9ca9d012aea030a792f964066e5fba430dec4064d701bb6529cd3","first_seen":"2025-06-25T15:17:42.787377Z","last_seen":"2026-09-22T21:09:05.060053Z","times_seen":24,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"escortbabylone-reviews.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/public/images/ebMeter100.png","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://escortbabylone-reviews.us/","date":"2026-09-22T20:59:06.359Z","timestamp":1790110746359,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"escortbabylone-reviews.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 15:13:40 GMT","end":"Thu, 17 Dec 2026 15:13:39 GMT"},"fingerprint":{"sha1":"6D:50:38:18:FE:30:CF:DB:F1:9A:D0:47:51:42:28:E1:B3:7B:F1:84","sha256":"E7:0C:BE:BB:5E:1A:6F:2C:92:25:7B:62:3F:59:A4:5E:82:55:25:3E:16:00:D8:27:ED:34:31:19:73:BD:6C:F0"}}},"request":{"raw":"GET /public/images/ebMeter100.png HTTP/1.1\r\nHost: escortbabylone-reviews.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://escortbabylone-reviews.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ilc3NWhJdFRTdGphNmZEQzh2bVV6Rmc9PSIsInZhbHVlIjoiNmV0NkhEYis3bmdkcUlzczJxU3hBWDByaXM4Q1lHU3VGbnpkNkYvSmxmM1ZvWG1lQ1F5RFhkQkxlWU9xNnpLQ0U3RVVGcG1DZFBBUm1TQ2Y3ZmRDaGp6QVFobkMyK1RTV00wN2NWUU1UNWZsejFlVVp2RHpwZCtrNHRBN1cya0YiLCJtYWMiOiIyNWI2NTc0MGMyZDlkYTAxOGM0Mzg0ZTUzOGZjYmEwOGQxMzE2MTEzZjA3NzA0ZGQ5MDJlODI2ZDU4NDY5MmJiIiwidGFnIjoiIn0%3D; mega_app_session=eyJpdiI6Ii9vNURHS2xyRlRqZXVpUnBDU0puUWc9PSIsInZhbHVlIjoiOFFvN1VXQVBQWTFzSk9JV1g5VGVXbm1jcnFzZ0d1M2M3anc4dWFSNC9waXNYTExCcHB6eUMwRllQK1N4VnoyRDdDeEFQbWRGbnZUWFRWM1EzcEVFTElGN2ZkL0YvVnhrOWZWNmRETVd5dVFHK2sxUE5XR2R3NkMxRlJYaXBLZE8iLCJtYWMiOiJhNGFjMTgzYmM1MzRjODIyM2UwMmEzM2I2ZWFlZTA4ZWQxZDc1ZDgxZDg5MzNmYjA0YzBjMTdlMjA5OThiMzg4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 20:59:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 35015\r\nlast-modified: Mon, 29 Jun 2026 17:47:30 GMT\r\netag: \"6a42afb2-88c7\"\r\nexpires: Thu, 22 Oct 2026 20:59:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35015,"size_decoded":35358,"mime_type":"image/png","magic":"PNG image data, 203 x 202, 8-bit/color RGBA, non-interlaced","md5":"80a97e87aaaf4a3f1997a079b261dc26","sha1":"73249be82bc3fc4adb9f6376d7d17817d13ea39c","sha256":"ff3270a775e790281c1ec506c8b84cc75f77e550d8761ae3da99b2d7ce6ce700","sha512":"7c9aa4575e726f948aad4cf524db748176a9bc5b3fb0321f9bdbb2057f701937917ca094e1599cd717851a7d3c4f3e7fd54875075aa5a72575a9844aa4fc9648","ssdeep":"768:dDy6AyLR8DsUwmrsfuZVZj2DhQ9irFaZmHoSuVKU:dW9yL+jolQ9SuYU","tlshash":"dcf2e118d645f596b03df482e2e132309b53e3904ef1b0867a878c799fb8ad1ddea043","first_seen":"2025-07-21T15:17:09.677637Z","last_seen":"2026-09-22T21:09:05.033377Z","times_seen":12,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":363,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"escortbabylone-reviews.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/public/images/topOrangeCurve.png","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://escortbabylone-reviews.us/","date":"2026-09-22T20:59:06.361Z","timestamp":1790110746361,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"escortbabylone-reviews.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 15:13:40 GMT","end":"Thu, 17 Dec 2026 15:13:39 GMT"},"fingerprint":{"sha1":"6D:50:38:18:FE:30:CF:DB:F1:9A:D0:47:51:42:28:E1:B3:7B:F1:84","sha256":"E7:0C:BE:BB:5E:1A:6F:2C:92:25:7B:62:3F:59:A4:5E:82:55:25:3E:16:00:D8:27:ED:34:31:19:73:BD:6C:F0"}}},"request":{"raw":"GET /public/images/topOrangeCurve.png HTTP/1.1\r\nHost: escortbabylone-reviews.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://escortbabylone-reviews.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ilc3NWhJdFRTdGphNmZEQzh2bVV6Rmc9PSIsInZhbHVlIjoiNmV0NkhEYis3bmdkcUlzczJxU3hBWDByaXM4Q1lHU3VGbnpkNkYvSmxmM1ZvWG1lQ1F5RFhkQkxlWU9xNnpLQ0U3RVVGcG1DZFBBUm1TQ2Y3ZmRDaGp6QVFobkMyK1RTV00wN2NWUU1UNWZsejFlVVp2RHpwZCtrNHRBN1cya0YiLCJtYWMiOiIyNWI2NTc0MGMyZDlkYTAxOGM0Mzg0ZTUzOGZjYmEwOGQxMzE2MTEzZjA3NzA0ZGQ5MDJlODI2ZDU4NDY5MmJiIiwidGFnIjoiIn0%3D; mega_app_session=eyJpdiI6Ii9vNURHS2xyRlRqZXVpUnBDU0puUWc9PSIsInZhbHVlIjoiOFFvN1VXQVBQWTFzSk9JV1g5VGVXbm1jcnFzZ0d1M2M3anc4dWFSNC9waXNYTExCcHB6eUMwRllQK1N4VnoyRDdDeEFQbWRGbnZUWFRWM1EzcEVFTElGN2ZkL0YvVnhrOWZWNmRETVd5dVFHK2sxUE5XR2R3NkMxRlJYaXBLZE8iLCJtYWMiOiJhNGFjMTgzYmM1MzRjODIyM2UwMmEzM2I2ZWFlZTA4ZWQxZDc1ZDgxZDg5MzNmYjA0YzBjMTdlMjA5OThiMzg4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 20:59:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 1797\r\nlast-modified: Mon, 29 Jun 2026 17:47:30 GMT\r\netag: \"6a42afb2-705\"\r\nexpires: Thu, 22 Oct 2026 20:59:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1797,"size_decoded":2138,"mime_type":"image/png","magic":"PNG image data, 760 x 31, 8-bit/color RGBA, non-interlaced","md5":"1ae7cde8f505da44916ada39a22189c8","sha1":"c13ce0868defaad5f2a8ac4d2251e5c349cee6d7","sha256":"3f8dc6cb091972608af6e12b08bb2a45d60c2ae340f500fe83ee05ef3a781dec","sha512":"724d29c9f3f5052039b0934159afe5c87f384d16b4baa0411c4cae7782a6d94f8ec01363ea0b084a48a1c70d7e23a7eab8a3a09f93b3f181444b706bb9b9b0db","ssdeep":"","tlshash":"d231e9c9e840b800864cfca314fb6013ae1bad40c9e0b5716dcdd4074b795f49a690d7","first_seen":"2025-06-25T15:17:42.815608Z","last_seen":"2026-09-22T21:09:05.065016Z","times_seen":24,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":362,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"escortbabylone-reviews.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/public/images/cry3.png","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://escortbabylone-reviews.us/","date":"2026-09-22T20:59:06.365Z","timestamp":1790110746365,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"escortbabylone-reviews.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 15:13:40 GMT","end":"Thu, 17 Dec 2026 15:13:39 GMT"},"fingerprint":{"sha1":"6D:50:38:18:FE:30:CF:DB:F1:9A:D0:47:51:42:28:E1:B3:7B:F1:84","sha256":"E7:0C:BE:BB:5E:1A:6F:2C:92:25:7B:62:3F:59:A4:5E:82:55:25:3E:16:00:D8:27:ED:34:31:19:73:BD:6C:F0"}}},"request":{"raw":"GET /public/images/cry3.png HTTP/1.1\r\nHost: escortbabylone-reviews.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://escortbabylone-reviews.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ilc3NWhJdFRTdGphNmZEQzh2bVV6Rmc9PSIsInZhbHVlIjoiNmV0NkhEYis3bmdkcUlzczJxU3hBWDByaXM4Q1lHU3VGbnpkNkYvSmxmM1ZvWG1lQ1F5RFhkQkxlWU9xNnpLQ0U3RVVGcG1DZFBBUm1TQ2Y3ZmRDaGp6QVFobkMyK1RTV00wN2NWUU1UNWZsejFlVVp2RHpwZCtrNHRBN1cya0YiLCJtYWMiOiIyNWI2NTc0MGMyZDlkYTAxOGM0Mzg0ZTUzOGZjYmEwOGQxMzE2MTEzZjA3NzA0ZGQ5MDJlODI2ZDU4NDY5MmJiIiwidGFnIjoiIn0%3D; mega_app_session=eyJpdiI6Ii9vNURHS2xyRlRqZXVpUnBDU0puUWc9PSIsInZhbHVlIjoiOFFvN1VXQVBQWTFzSk9JV1g5VGVXbm1jcnFzZ0d1M2M3anc4dWFSNC9waXNYTExCcHB6eUMwRllQK1N4VnoyRDdDeEFQbWRGbnZUWFRWM1EzcEVFTElGN2ZkL0YvVnhrOWZWNmRETVd5dVFHK2sxUE5XR2R3NkMxRlJYaXBLZE8iLCJtYWMiOiJhNGFjMTgzYmM1MzRjODIyM2UwMmEzM2I2ZWFlZTA4ZWQxZDc1ZDgxZDg5MzNmYjA0YzBjMTdlMjA5OThiMzg4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 20:59:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 26049\r\nlast-modified: Mon, 29 Jun 2026 17:47:30 GMT\r\netag: \"6a42afb2-65c1\"\r\nexpires: Thu, 22 Oct 2026 20:59:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26049,"size_decoded":26392,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 480x480, components 3","md5":"82b79349833fc44509fe5498276dcedf","sha1":"3a3c1ed3838a2dcbae3d08fdaa9e497a0472a3a7","sha256":"221b11ca8114e7ed7f2ff1930ed4ce7f9620376a4a5a1b15feb36ee6c15e0b8c","sha512":"07172077b72ad77112d1844576fc56c36379d22f0c327a4e0de457c8b889b43301b039936eadcd36f4160458eeb027d41dc3e15b031556f32b970ddc2d7db886","ssdeep":"768:5WlLmtxDiWdYHlgrS1C713FBd512eS3W7cj:ZviRHyrSwFX512Tx","tlshash":"3ec2e10be42449d4db497a7208a133ce9768bd1e978f3447f211c1f9202d47a0d1a7fe","first_seen":"2026-09-22T20:56:08.151541Z","last_seen":"2026-09-22T21:09:05.05131Z","times_seen":9,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":358,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"escortbabylone-reviews.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"escortbabylone-reviews.us/public/css/panels.css","fqdn":"escortbabylone-reviews.us","domain":"escortbabylone-reviews.us","tld":"us"},"ip":{"addr":"104.248.238.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://escortbabylone-reviews.us/","date":"2026-09-22T20:59:06.083Z","timestamp":1790110746083,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"escortbabylone-reviews.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 15:13:40 GMT","end":"Thu, 17 Dec 2026 15:13:39 GMT"},"fingerprint":{"sha1":"6D:50:38:18:FE:30:CF:DB:F1:9A:D0:47:51:42:28:E1:B3:7B:F1:84","sha256":"E7:0C:BE:BB:5E:1A:6F:2C:92:25:7B:62:3F:59:A4:5E:82:55:25:3E:16:00:D8:27:ED:34:31:19:73:BD:6C:F0"}}},"request":{"raw":"GET /public/css/panels.css HTTP/1.1\r\nHost: escortbabylone-reviews.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://escortbabylone-reviews.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ilc3NWhJdFRTdGphNmZEQzh2bVV6Rmc9PSIsInZhbHVlIjoiNmV0NkhEYis3bmdkcUlzczJxU3hBWDByaXM4Q1lHU3VGbnpkNkYvSmxmM1ZvWG1lQ1F5RFhkQkxlWU9xNnpLQ0U3RVVGcG1DZFBBUm1TQ2Y3ZmRDaGp6QVFobkMyK1RTV00wN2NWUU1UNWZsejFlVVp2RHpwZCtrNHRBN1cya0YiLCJtYWMiOiIyNWI2NTc0MGMyZDlkYTAxOGM0Mzg0ZTUzOGZjYmEwOGQxMzE2MTEzZjA3NzA0ZGQ5MDJlODI2ZDU4NDY5MmJiIiwidGFnIjoiIn0%3D; mega_app_session=eyJpdiI6Ii9vNURHS2xyRlRqZXVpUnBDU0puUWc9PSIsInZhbHVlIjoiOFFvN1VXQVBQWTFzSk9JV1g5VGVXbm1jcnFzZ0d1M2M3anc4dWFSNC9waXNYTExCcHB6eUMwRllQK1N4VnoyRDdDeEFQbWRGbnZUWFRWM1EzcEVFTElGN2ZkL0YvVnhrOWZWNmRETVd5dVFHK2sxUE5XR2R3NkMxRlJYaXBLZE8iLCJtYWMiOiJhNGFjMTgzYmM1MzRjODIyM2UwMmEzM2I2ZWFlZTA4ZWQxZDc1ZDgxZDg5MzNmYjA0YzBjMTdlMjA5OThiMzg4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 22 Sep 2026 20:59:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 29 Jun 2026 17:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a42afb2-1c8c\"\r\nexpires: Thu, 22 Oct 2026 20:59:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7308,"size_decoded":2544,"mime_type":"text/css","magic":"ASCII text","md5":"8d5acb5dc90a73ef1b54d4792a85f31a","sha1":"39b62fc43cbe52ba6865ce808219f767b1f1069d","sha256":"50321a85ef6c5060c572006c89bcbb9e02025a80ad49f5bed9eda4c5cc259003","sha512":"c200340efaad480e0a8c5b60a7112dd2006a603c0f61f3707887f7a51fe78541296caa7914124d6e9045b94d69210c89ef7d8b1d0b1ac5da32b0463d2799d5b1","ssdeep":"96:o68YjoyrTPoyMWaRzDHxSG8TAv0QP69WN9pdn1HM3jsLDbNiDseDFMCnLer4FFq2:o6zrtMWalM/FkJEGl7Cip5G3kDh5Y","tlshash":"84e160235e513849f21ea0d9fd51fa641b0f21976e8d0f25b5e03c1df2880ec397a96e","first_seen":"2025-07-21T15:17:09.686764Z","last_seen":"2026-09-22T21:09:05.053303Z","times_seen":11,"resource_available":true,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"escortbabylone-reviews.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.65.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://escortbabylone-reviews.us/","date":"2026-09-22T20:59:06.313Z","timestamp":1790110746313,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.7.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://escortbabylone-reviews.us\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://escortbabylone-reviews.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-155ed\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 22 Sep 2026 20:59:06 GMT\r\nage: 897988\r\nx-served-by: cache-lga21978-LGA, cache-bma-essb1270032-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 585496, 76667\r\nx-timer: S1790110746.348333,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30336\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":87533,"size_decoded":30977,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-09-23T01:58:01.358312Z","times_seen":196082,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":9,"receive":3,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
