{"report_id":"5fd66b19-cc95-4be8-a491-c7a10069dd0c","version":6,"status":"done","tags":[],"date":"2025-10-25T15:25:31Z","url":{"schema":"https","addr":"hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","fqdn":"hd.xmovix.net","domain":"xmovix.net","tld":"net"},"ip":{"addr":"104.21.75.42","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","fqdn":"hd.xmovix.net","domain":"xmovix.net","tld":"net"},"title":"Contact 5 (2025, HD) Porn Movie online"},"submit":{"url":{"schema":"https","addr":"hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","fqdn":"hd.xmovix.net","domain":"xmovix.net","tld":"net"},"ip":{"addr":"104.21.75.42","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-29T15:25:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":6,"urlquery":0,"analyzer":8}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-25T15:25:11Z","timestamp":1761405911,"ip_dst":{"addr":"172.18.0.22","port":50264,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"109.206.161.16","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"severity":"medium","alert":"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)","source":"{\"timestamp\":\"2025-10-25T15:25:11.448488+0000\",\"flow_id\":2182998394390213,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"109.206.161.16\",\"src_port\":443,\"dest_ip\":\"172.18.0.22\",\"dest_port\":50264,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2025194,\"rev\":3,\"signature\":\"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2018_01_09\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_16\"]}},\"tls\":{\"subject\":\"CN=vast.yomeno.xyz\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=R13\",\"serial\":\"06:A0:96:F4:C5:E0:09:5E:F3:5A:01:2E:11:95:EB:60:C7:38\",\"fingerprint\":\"c1:a0:ec:3e:36:cf:b7:db:9c:46:f0:8b:28:cb:f6:1b:e8:ed:7c:aa\",\"sni\":\"vast.yomeno.xyz\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-10-02T03:20:42\",\"notafter\":\"2025-12-31T03:20:41\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1080,\"bytes_toclient\":3466,\"start\":\"2025-10-25T15:25:11.378565+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-25T15:25:11Z","timestamp":1761405911,"ip_dst":{"addr":"172.18.0.22","port":50316,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"109.206.161.16","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"severity":"medium","alert":"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)","source":"{\"timestamp\":\"2025-10-25T15:25:11.453289+0000\",\"flow_id\":1547630997391570,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"109.206.161.16\",\"src_port\":443,\"dest_ip\":\"172.18.0.22\",\"dest_port\":50316,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2025194,\"rev\":3,\"signature\":\"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2018_01_09\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_16\"]}},\"tls\":{\"subject\":\"CN=vast.yomeno.xyz\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=R13\",\"serial\":\"06:A0:96:F4:C5:E0:09:5E:F3:5A:01:2E:11:95:EB:60:C7:38\",\"fingerprint\":\"c1:a0:ec:3e:36:cf:b7:db:9c:46:f0:8b:28:cb:f6:1b:e8:ed:7c:aa\",\"sni\":\"vast.yomeno.xyz\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-10-02T03:20:42\",\"notafter\":\"2025-12-31T03:20:41\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1080,\"bytes_toclient\":3466,\"start\":\"2025-10-25T15:25:11.379090+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-25T15:25:11Z","timestamp":1761405911,"ip_dst":{"addr":"172.18.0.22","port":50268,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"109.206.161.16","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"severity":"medium","alert":"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)","source":"{\"timestamp\":\"2025-10-25T15:25:11.457746+0000\",\"flow_id\":991578761447259,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"109.206.161.16\",\"src_port\":443,\"dest_ip\":\"172.18.0.22\",\"dest_port\":50268,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2025194,\"rev\":3,\"signature\":\"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2018_01_09\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_16\"]}},\"tls\":{\"subject\":\"CN=vast.yomeno.xyz\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=R13\",\"serial\":\"06:A0:96:F4:C5:E0:09:5E:F3:5A:01:2E:11:95:EB:60:C7:38\",\"fingerprint\":\"c1:a0:ec:3e:36:cf:b7:db:9c:46:f0:8b:28:cb:f6:1b:e8:ed:7c:aa\",\"sni\":\"vast.yomeno.xyz\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-10-02T03:20:42\",\"notafter\":\"2025-12-31T03:20:41\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1080,\"bytes_toclient\":3466,\"start\":\"2025-10-25T15:25:11.378715+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-25T15:25:11Z","timestamp":1761405911,"ip_dst":{"addr":"172.18.0.22","port":50300,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"109.206.161.16","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"severity":"medium","alert":"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)","source":"{\"timestamp\":\"2025-10-25T15:25:11.460065+0000\",\"flow_id\":1358433393035387,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"109.206.161.16\",\"src_port\":443,\"dest_ip\":\"172.18.0.22\",\"dest_port\":50300,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2025194,\"rev\":3,\"signature\":\"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2018_01_09\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_16\"]}},\"tls\":{\"subject\":\"CN=vast.yomeno.xyz\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=R13\",\"serial\":\"06:A0:96:F4:C5:E0:09:5E:F3:5A:01:2E:11:95:EB:60:C7:38\",\"fingerprint\":\"c1:a0:ec:3e:36:cf:b7:db:9c:46:f0:8b:28:cb:f6:1b:e8:ed:7c:aa\",\"sni\":\"vast.yomeno.xyz\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-10-02T03:20:42\",\"notafter\":\"2025-12-31T03:20:41\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1080,\"bytes_toclient\":3466,\"start\":\"2025-10-25T15:25:11.379003+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-25T15:25:11Z","timestamp":1761405911,"ip_dst":{"addr":"172.18.0.22","port":50290,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"109.206.161.16","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"severity":"medium","alert":"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)","source":"{\"timestamp\":\"2025-10-25T15:25:11.463535+0000\",\"flow_id\":1304230905759782,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"109.206.161.16\",\"src_port\":443,\"dest_ip\":\"172.18.0.22\",\"dest_port\":50290,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2025194,\"rev\":3,\"signature\":\"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2018_01_09\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_16\"]}},\"tls\":{\"subject\":\"CN=vast.yomeno.xyz\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=R13\",\"serial\":\"06:A0:96:F4:C5:E0:09:5E:F3:5A:01:2E:11:95:EB:60:C7:38\",\"fingerprint\":\"c1:a0:ec:3e:36:cf:b7:db:9c:46:f0:8b:28:cb:f6:1b:e8:ed:7c:aa\",\"sni\":\"vast.yomeno.xyz\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-10-02T03:20:42\",\"notafter\":\"2025-12-31T03:20:41\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1208,\"bytes_toclient\":3466,\"start\":\"2025-10-25T15:25:11.378918+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-25T15:25:11Z","timestamp":1761405911,"ip_dst":{"addr":"172.18.0.22","port":50278,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"109.206.161.16","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"severity":"medium","alert":"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)","source":"{\"timestamp\":\"2025-10-25T15:25:11.468458+0000\",\"flow_id\":556524344166326,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"109.206.161.16\",\"src_port\":443,\"dest_ip\":\"172.18.0.22\",\"dest_port\":50278,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2025194,\"rev\":3,\"signature\":\"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2018_01_09\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_16\"]}},\"tls\":{\"subject\":\"CN=vast.yomeno.xyz\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=R13\",\"serial\":\"06:A0:96:F4:C5:E0:09:5E:F3:5A:01:2E:11:95:EB:60:C7:38\",\"fingerprint\":\"c1:a0:ec:3e:36:cf:b7:db:9c:46:f0:8b:28:cb:f6:1b:e8:ed:7c:aa\",\"sni\":\"vast.yomeno.xyz\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-10-02T03:20:42\",\"notafter\":\"2025-12-31T03:20:41\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1080,\"bytes_toclient\":3466,\"start\":\"2025-10-25T15:25:11.378806+0000\"}}"}],"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"7bfe7b434b.058d79990c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"kts.bartcons.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"7ea02e2ab2.e55a2001b9.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"js.capndr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"storage.multstorage.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"hd.xmovix.net","ip":{"addr":"104.21.75.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-07-12","domain_rank":137707,"first_seen":"2025-08-19T14:44:18.962364Z","last_seen":"2025-09-30T21:49:20.750099Z","alert_count":0,"request_count":23,"received_data":838084,"sent_data":12826,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"js.wpshsdk.com","ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2021-06-04","domain_rank":343711,"first_seen":"2021-06-04T13:50:00Z","last_seen":"2025-10-21T17:09:43.316095Z","alert_count":0,"request_count":1,"received_data":32018,"sent_data":422,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"maucn.yomeno.xyz","ip":{"addr":"168.119.45.30","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2019-09-18","domain_rank":496641,"first_seen":"2025-02-19T17:43:39.713287Z","last_seen":"2025-10-22T03:07:08.291779Z","alert_count":0,"request_count":3,"received_data":966,"sent_data":1446,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"7bfe7b434b.058d79990c.com","ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2025-09-25","domain_rank":0,"first_seen":"2025-10-25T02:25:46.690623Z","last_seen":"2025-10-25T02:25:46.690623Z","alert_count":4,"request_count":4,"received_data":1004584,"sent_data":1882,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"mauc.yomeno.xyz","ip":{"addr":"168.119.45.30","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2019-09-18","domain_rank":265647,"first_seen":"2023-10-31T11:27:42Z","last_seen":"2025-10-24T15:33:39.56802Z","alert_count":0,"request_count":3,"received_data":966,"sent_data":9657,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ntvpforever.com","ip":{"addr":"116.202.204.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2021-11-18","domain_rank":18811,"first_seen":"2021-11-19T01:49:18Z","last_seen":"2025-10-20T07:48:48.196063Z","alert_count":0,"request_count":2,"received_data":693,"sent_data":1029,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"assets.ahmybid.net","ip":{"addr":"45.133.44.25","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-12-26","domain_rank":171628,"first_seen":"2024-12-28T14:10:32Z","last_seen":"2025-10-21T06:48:11.199685Z","alert_count":0,"request_count":2,"received_data":59110,"sent_data":866,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"vast.yomeno.xyz","ip":{"addr":"109.206.161.16","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2019-09-18","domain_rank":173278,"first_seen":"2019-12-12T11:10:55Z","last_seen":"2025-10-20T12:35:33.641495Z","alert_count":0,"request_count":12,"received_data":125997,"sent_data":7622,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.mildhide.pro","ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-10-24T08:51:24.300659Z","last_seen":"2025-10-24T08:51:24.300659Z","alert_count":0,"request_count":2,"received_data":208210,"sent_data":903,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fp.metricswpsh.com","ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2021-10-29","domain_rank":154722,"first_seen":"2022-04-22T11:20:32Z","last_seen":"2025-10-20T06:56:18.770833Z","alert_count":2,"request_count":2,"received_data":817,"sent_data":1050,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"7ea02e2ab2.e55a2001b9.com","ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2025-09-25","domain_rank":0,"first_seen":"2025-10-25T02:25:46.691687Z","last_seen":"2025-10-25T02:25:46.691687Z","alert_count":1,"request_count":1,"received_data":345,"sent_data":837,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"1000fapvids.com","ip":{"addr":"109.206.176.116","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2022-11-18","domain_rank":96605,"first_seen":"2022-11-18T15:29:05Z","last_seen":"2025-09-13T11:28:25.565655Z","alert_count":0,"request_count":2,"received_data":8238,"sent_data":1182,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.23.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"js.capndr.com","ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2021-08-30","domain_rank":156902,"first_seen":"2021-08-30T12:51:01Z","last_seen":"2025-10-20T23:08:16.832652Z","alert_count":1,"request_count":1,"received_data":399,"sent_data":414,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"storage.multstorage.com","ip":{"addr":"13.248.148.254","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2023-09-22","domain_rank":101055,"first_seen":"2023-09-22T12:56:00Z","last_seen":"2025-10-20T06:56:19.372418Z","alert_count":1,"request_count":1,"received_data":144,"sent_data":537,"comment":"","tags":null,"fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}]},{"fqdn":"accounts.google.com","ip":{"addr":"64.233.162.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":103,"first_seen":"2012-05-23T06:57:57Z","last_seen":"2025-10-19T22:32:41.177271Z","alert_count":0,"request_count":3,"received_data":6889,"sent_data":1782,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}]},{"fqdn":"js.canstrm.com","ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2021-08-30","domain_rank":494052,"first_seen":"2021-08-30T12:50:59Z","last_seen":"2025-10-23T21:17:17.478539Z","alert_count":0,"request_count":4,"received_data":794278,"sent_data":1732,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"nereserv.com","ip":{"addr":"116.202.204.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2020-12-21","domain_rank":17097,"first_seen":"2020-12-21T11:07:56Z","last_seen":"2025-10-20T07:03:26.913191Z","alert_count":2,"request_count":1,"received_data":322,"sent_data":605,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pointcontinentrtb.com","ip":{"addr":"148.251.254.38","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2024-10-14","domain_rank":16265,"first_seen":"2025-04-20T21:33:16.477453Z","last_seen":"2025-10-18T12:31:58.472145Z","alert_count":0,"request_count":1,"received_data":16026,"sent_data":1667,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"xmovix.net","ip":{"addr":"104.21.75.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-07-12","domain_rank":94943,"first_seen":"2022-02-07T17:50:07Z","last_seen":"2025-09-30T21:49:20.742558Z","alert_count":0,"request_count":1,"received_data":7885,"sent_data":525,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"static.bookmsg.com","ip":{"addr":"45.133.44.25","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2020-09-15","domain_rank":169473,"first_seen":"2020-11-24T14:56:32Z","last_seen":"2025-10-20T18:31:36.47704Z","alert_count":0,"request_count":2,"received_data":2251,"sent_data":979,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"video.sacdnssedge.com","ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2024-01-30","domain_rank":155152,"first_seen":"2024-01-31T13:27:57Z","last_seen":"2025-10-22T07:28:06.344533Z","alert_count":0,"request_count":6,"received_data":3712123,"sent_data":3248,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"toughvariation.com","ip":{"addr":"88.85.94.250","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2023-02-08","domain_rank":568590,"first_seen":"2023-02-08T14:16:17Z","last_seen":"2025-10-11T21:24:23.980007Z","alert_count":0,"request_count":2,"received_data":39571,"sent_data":1059,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"trk-web.com","ip":{"addr":"209.192.200.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-05-28","domain_rank":655274,"first_seen":"2025-08-22T23:16:14.988409Z","last_seen":"2025-10-23T15:44:48.23594Z","alert_count":0,"request_count":1,"received_data":146,"sent_data":633,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"kts.bartcons.com","ip":{"addr":"62.122.168.42","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2023-08-17","domain_rank":600141,"first_seen":"2023-08-18T11:18:38Z","last_seen":"2025-10-22T04:46:44.192906Z","alert_count":3,"request_count":3,"received_data":825,"sent_data":4973,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"awpya.com","ip":{"addr":"116.202.204.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2022-04-21","domain_rank":55378,"first_seen":"2022-04-21T16:31:53Z","last_seen":"2025-10-19T23:50:56.403928Z","alert_count":0,"request_count":4,"received_data":67540,"sent_data":10734,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ad.twinrdengine.com","ip":{"addr":"34.111.67.216","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2023-06-07","domain_rank":79586,"first_seen":"2024-01-20T17:03:24Z","last_seen":"2025-10-22T07:02:46.867047Z","alert_count":0,"request_count":3,"received_data":16072,"sent_data":1792,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]},{"fqdn":"go.forscprts.com","ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-13","domain_rank":168242,"first_seen":"2025-03-11T08:31:55.912898Z","last_seen":"2025-10-23T23:37:58.575765Z","alert_count":0,"request_count":6,"received_data":18998,"sent_data":4960,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-25T15:25:11Z","timestamp":1761405911,"ip_dst":{"addr":"172.18.0.22","port":50264,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"109.206.161.16","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"severity":"medium","alert":"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)","source":"{\"timestamp\":\"2025-10-25T15:25:11.448488+0000\",\"flow_id\":2182998394390213,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"109.206.161.16\",\"src_port\":443,\"dest_ip\":\"172.18.0.22\",\"dest_port\":50264,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2025194,\"rev\":3,\"signature\":\"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2018_01_09\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_16\"]}},\"tls\":{\"subject\":\"CN=vast.yomeno.xyz\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=R13\",\"serial\":\"06:A0:96:F4:C5:E0:09:5E:F3:5A:01:2E:11:95:EB:60:C7:38\",\"fingerprint\":\"c1:a0:ec:3e:36:cf:b7:db:9c:46:f0:8b:28:cb:f6:1b:e8:ed:7c:aa\",\"sni\":\"vast.yomeno.xyz\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-10-02T03:20:42\",\"notafter\":\"2025-12-31T03:20:41\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1080,\"bytes_toclient\":3466,\"start\":\"2025-10-25T15:25:11.378565+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-25T15:25:11Z","timestamp":1761405911,"ip_dst":{"addr":"172.18.0.22","port":50316,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"109.206.161.16","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"severity":"medium","alert":"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)","source":"{\"timestamp\":\"2025-10-25T15:25:11.453289+0000\",\"flow_id\":1547630997391570,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"109.206.161.16\",\"src_port\":443,\"dest_ip\":\"172.18.0.22\",\"dest_port\":50316,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2025194,\"rev\":3,\"signature\":\"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2018_01_09\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_16\"]}},\"tls\":{\"subject\":\"CN=vast.yomeno.xyz\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=R13\",\"serial\":\"06:A0:96:F4:C5:E0:09:5E:F3:5A:01:2E:11:95:EB:60:C7:38\",\"fingerprint\":\"c1:a0:ec:3e:36:cf:b7:db:9c:46:f0:8b:28:cb:f6:1b:e8:ed:7c:aa\",\"sni\":\"vast.yomeno.xyz\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-10-02T03:20:42\",\"notafter\":\"2025-12-31T03:20:41\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1080,\"bytes_toclient\":3466,\"start\":\"2025-10-25T15:25:11.379090+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-25T15:25:11Z","timestamp":1761405911,"ip_dst":{"addr":"172.18.0.22","port":50268,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"109.206.161.16","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"severity":"medium","alert":"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)","source":"{\"timestamp\":\"2025-10-25T15:25:11.457746+0000\",\"flow_id\":991578761447259,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"109.206.161.16\",\"src_port\":443,\"dest_ip\":\"172.18.0.22\",\"dest_port\":50268,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2025194,\"rev\":3,\"signature\":\"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2018_01_09\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_16\"]}},\"tls\":{\"subject\":\"CN=vast.yomeno.xyz\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=R13\",\"serial\":\"06:A0:96:F4:C5:E0:09:5E:F3:5A:01:2E:11:95:EB:60:C7:38\",\"fingerprint\":\"c1:a0:ec:3e:36:cf:b7:db:9c:46:f0:8b:28:cb:f6:1b:e8:ed:7c:aa\",\"sni\":\"vast.yomeno.xyz\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-10-02T03:20:42\",\"notafter\":\"2025-12-31T03:20:41\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1080,\"bytes_toclient\":3466,\"start\":\"2025-10-25T15:25:11.378715+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-25T15:25:11Z","timestamp":1761405911,"ip_dst":{"addr":"172.18.0.22","port":50300,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"109.206.161.16","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"severity":"medium","alert":"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)","source":"{\"timestamp\":\"2025-10-25T15:25:11.460065+0000\",\"flow_id\":1358433393035387,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"109.206.161.16\",\"src_port\":443,\"dest_ip\":\"172.18.0.22\",\"dest_port\":50300,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2025194,\"rev\":3,\"signature\":\"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2018_01_09\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_16\"]}},\"tls\":{\"subject\":\"CN=vast.yomeno.xyz\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=R13\",\"serial\":\"06:A0:96:F4:C5:E0:09:5E:F3:5A:01:2E:11:95:EB:60:C7:38\",\"fingerprint\":\"c1:a0:ec:3e:36:cf:b7:db:9c:46:f0:8b:28:cb:f6:1b:e8:ed:7c:aa\",\"sni\":\"vast.yomeno.xyz\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-10-02T03:20:42\",\"notafter\":\"2025-12-31T03:20:41\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1080,\"bytes_toclient\":3466,\"start\":\"2025-10-25T15:25:11.379003+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-25T15:25:11Z","timestamp":1761405911,"ip_dst":{"addr":"172.18.0.22","port":50290,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"109.206.161.16","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"severity":"medium","alert":"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)","source":"{\"timestamp\":\"2025-10-25T15:25:11.463535+0000\",\"flow_id\":1304230905759782,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"109.206.161.16\",\"src_port\":443,\"dest_ip\":\"172.18.0.22\",\"dest_port\":50290,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2025194,\"rev\":3,\"signature\":\"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2018_01_09\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_16\"]}},\"tls\":{\"subject\":\"CN=vast.yomeno.xyz\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=R13\",\"serial\":\"06:A0:96:F4:C5:E0:09:5E:F3:5A:01:2E:11:95:EB:60:C7:38\",\"fingerprint\":\"c1:a0:ec:3e:36:cf:b7:db:9c:46:f0:8b:28:cb:f6:1b:e8:ed:7c:aa\",\"sni\":\"vast.yomeno.xyz\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-10-02T03:20:42\",\"notafter\":\"2025-12-31T03:20:41\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1208,\"bytes_toclient\":3466,\"start\":\"2025-10-25T15:25:11.378918+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-25T15:25:11Z","timestamp":1761405911,"ip_dst":{"addr":"172.18.0.22","port":50278,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"109.206.161.16","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"severity":"medium","alert":"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)","source":"{\"timestamp\":\"2025-10-25T15:25:11.468458+0000\",\"flow_id\":556524344166326,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"109.206.161.16\",\"src_port\":443,\"dest_ip\":\"172.18.0.22\",\"dest_port\":50278,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2025194,\"rev\":3,\"signature\":\"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2018_01_09\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_16\"]}},\"tls\":{\"subject\":\"CN=vast.yomeno.xyz\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=R13\",\"serial\":\"06:A0:96:F4:C5:E0:09:5E:F3:5A:01:2E:11:95:EB:60:C7:38\",\"fingerprint\":\"c1:a0:ec:3e:36:cf:b7:db:9c:46:f0:8b:28:cb:f6:1b:e8:ed:7c:aa\",\"sni\":\"vast.yomeno.xyz\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-10-02T03:20:42\",\"notafter\":\"2025-12-31T03:20:41\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1080,\"bytes_toclient\":3466,\"start\":\"2025-10-25T15:25:11.378806+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"hd.xmovix.net/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"hd.xmovix.net","domain":"xmovix.net","tld":"net"},"ip":{"addr":"104.21.75.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-19T11:11:13.578524Z","times_seen":108038,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hd.xmovix.net/templates/XmovixHD/js/metrika.js","fqdn":"hd.xmovix.net","domain":"xmovix.net","tld":"net"},"ip":{"addr":"104.21.75.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"01291d906b6220224bbeccb9fa39156f","sha1":"ccb7fd67df4a269ac3361aac511e7152449ca9e9","sha256":"70e521f99f815ca5b8d4e02714ab9b54d7f2cf4df91afe18b73ff4090c6139df","sha512":"ea3316b04758f4d44db3a53f4ac4916c38fd69710c6dbc208b098733b4d3c875dd3fd49edc7a97939a9564dbd22298ac4fab472b0cdd5e536d0fd6109d79a8c3","ssdeep":"","tlshash":"f25165382a476538417be23eab2eb380727815672808d572f87d5f646fa1ef00176ecc","size":2964,"data":"","first_seen":"2025-09-30T21:49:22.163026Z","last_seen":"2026-02-12T03:34:09.524454Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hd.xmovix.net/engine/classes/min/index.php?f=engine/classes/js/jqueryui.js,engine/classes/js/dle_js.js,engine/classes/js/lazyload.js\u0026v=d4b43","fqdn":"hd.xmovix.net","domain":"xmovix.net","tld":"net"},"ip":{"addr":"104.21.75.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"821f663ede77d82a5bc8ae575a32ddb2","sha1":"3600503db050e76ef606f66d775f2da28f5ec124","sha256":"200d959a45082a8ff8e58ef10089ac6d5830ea116990a64dcf6fbb2061302a1b","sha512":"b26528ff4ffe711e541b5bc0cac0bce68f635d494ffd8ae43477d63e7580bf64c225810635d225724b71beed646fadb8d4a6bfedfb575e352fb08a645b322eb1","ssdeep":"1536:c05yNdkV1zLQlPe2Yw3kub7wwxFLn0IR0CoKdu33iiHiQJFiBAJYIykfnRZH3Yhu:gNs6iyu3yiHiQJF1J7y4hKutNdyo","tlshash":"dce3f888f35d351a46fb7265607f118e72395135a205885cf83ccad82eb9e2822b7f7d","size":156201,"data":"","first_seen":"2025-09-30T21:49:22.129457Z","last_seen":"2026-02-12T03:34:09.532346Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mildhide.pro/ecc874/49056a5b4d8b.js","fqdn":"www.mildhide.pro","domain":"mildhide.pro","tld":"pro"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee0352749528bec932fc0f62e9139581","sha1":"f447926bffed648ea4b563be7109219d2a337d62","sha256":"275f218fd25090f8d309b3f7819d0295a5655b9e2ad4033c3baa3a9c9cd4da09","sha512":"c569f866c8ae243fa806677a65feb3cf1786dd2b09ced9daf8630a891887b0c6355c387d8d775c3c69e9c9c52a1f63439f615111e72a3a4f9960598916a79fbb","ssdeep":"1536:rM+iZ3YOYuyx6PUQwRxcs8P3nhkQ8vL7T7Q6eGozzwVEnHzHRbPvR:OijxEQq3P5Enne9zkWHLb","tlshash":"57a33461350b64fd2ad0c1e7eb6b20886c295810e469cca1ecd1d7c7d6eb8e3429b5f7","size":103674,"data":"","first_seen":"2025-10-24T08:51:33.497553Z","last_seen":"2025-10-27T05:35:07.761275Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"7bfe7b434b.058d79990c.com/3b77b748fd23af620fed9fbdcc003fa0.js","fqdn":"7bfe7b434b.058d79990c.com","domain":"058d79990c.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"830105b76b7c59a0cb3a166d5515ea0e","sha1":"5d8fb2a3a41ad81ad56b06b6e6c2487593b9b728","sha256":"124a3ef9207187dfe609d1de18efa33b2e74460d3bd84b16579ef23937359702","sha512":"d034334fa538dbbc6811053953d8ff5d59212969c324bea5e4854681e3545a2047f0fab45b0de633afbe92f7ca014de79c48d68b22169e27aaa0001d07c89fd3","ssdeep":"3072:n4Z6mTX7Q5Q7Q7Xsvr8LDkpiBG3n5Sa+MFmswVYVC2SQpBUL:4Ym45Q7ykdV+AWEpBK","tlshash":"7b346dd1369078b00593c0afd4770201b2382609b52eb56cb6bddee66586dce237bf79","size":247532,"data":"","first_seen":"2025-10-23T10:57:14.860136Z","last_seen":"2025-10-27T08:33:06.793903Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpshsdk.com/npc/sdk/push.m.js?v=1","fqdn":"js.wpshsdk.com","domain":"wpshsdk.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d8575fbbf73a8ff30ff1938a43e664d0","sha1":"d2785dd9892fdadb8703f655b056b02dd1cb5b8d","sha256":"50c8fdcb3cc08967158d65ade7da8ac61718b8a1babc00e13b930367e571aedc","sha512":"8c16a650ae6509952a46206931e89d7ab016ce4f534770e2b9e5d2a4b7fc1c2394a2ed5c454f9fb6d6a99f6b423e2775956ce8ec9c88f686b940a450dfc72078","ssdeep":"768:CuKhVWPsJiRx8Useb6uvOdtkp6O4AQet1/:CuKHesJiXWpuvOdtkQLAf","tlshash":"2be21a88b381b2b4479720b2587f6742b336651a7403c540f367ebc0b869e9fd336b69","size":31631,"data":"","first_seen":"2025-09-01T17:49:28.814065Z","last_seen":"2026-02-06T10:34:46.272483Z","times_seen":1059,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","fqdn":"hd.xmovix.net","domain":"xmovix.net","tld":"net"},"ip":{"addr":"104.21.75.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"120e708fcac5f440a2f29f3a2384dbd5","sha1":"17806c2360f3fe26ccf71c5b90e81eb7eb37c892","sha256":"789862f431da167a7b2cf7da96a426a1e4a516711a0738b5f0e76aac08d8a610","sha512":"bd9cd9e2c40e5366bc85afabfaa62fb4f1a5af0504bd3ecb57017766b3c083a9522e19b17df32201669789552a8aef3c27deaa6fe8ec0ab80971d95f55d7a18e","ssdeep":"","tlshash":"09f0dca95e106f24f77aa12e25a8ed547f716e0772027106f3b09909cdd8f08f4b6a43","size":472,"data":"","first_seen":"2025-10-25T15:25:40.414396Z","last_seen":"2025-10-25T15:25:40.414396Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","fqdn":"hd.xmovix.net","domain":"xmovix.net","tld":"net"},"ip":{"addr":"104.21.75.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b00b3559406fe296098575be8bc67ce","sha1":"d2d7c22db28f4de21d7ef91df1f0ecb55421c734","sha256":"ee09f807d51b05892e59935a6dba56fc69f3ff7f774402aa34f7c06893bc77e2","sha512":"d83216055758bcb3a4a4da598b6bea366d21be0e3694ac4b89c5dd710c8fa376aabac08c0eea50499477c3f940c206de1be8eb1dbf03db7e866c2e3cbfd3c7c7","ssdeep":"","tlshash":"dff00559e5009f10e7b9e01f6d98ee052f71150333437101a2b05808ccccf14f5f9947","size":511,"data":"","first_seen":"2025-10-25T15:25:40.415511Z","last_seen":"2025-10-25T15:25:40.415511Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hd.xmovix.net/templates/XmovixHD/js/rika.js","fqdn":"hd.xmovix.net","domain":"xmovix.net","tld":"net"},"ip":{"addr":"104.21.75.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"360e422c8dcda1e486f1828a9a4f338f","sha1":"78b352359026d2e08c794f90fd322771b89881c5","sha256":"9daee0b179f9cce3913e76dc2971ba2764405eb381d92422ac2d2b08db33b194","sha512":"a9c98aac84b4e33caaad9e3b72c96258f43439b0633d37624df2e107e6d20065d5f21034cc9b5abb972ae1076c80d33272a51fa853178a6773442539c1a281a1","ssdeep":"1536:mrnkoD7uFiT8yf1MASbLavt9dSziFidJPL6m2EvOrx2Cu5M0pai53Z08A8/PRRMA:SnnileViOGF9mrx/0JZwSV","tlshash":"3693fac835dbb8190ba2a4ae137f300bb5296d943d6c7140e8b1c5f87d7436e90b7e68","size":96789,"data":"","first_seen":"2025-10-25T15:25:40.385853Z","last_seen":"2026-01-11T22:31:43.344475Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toughvariation.com/c.DQ9A6kbw2u5HluSlW/QT9HNCD_QOzrMoz-YX1rNJSK0N0CNvDfMEzLNYjxUL2k","fqdn":"toughvariation.com","domain":"toughvariation.com","tld":"com"},"ip":{"addr":"88.85.94.250","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"19ab6bf19295fea8d499b19eff699790","sha1":"68e3afa843c902a80743fa5bd57c728f62ca38c3","sha256":"e76b894e39ccf917157e6fe9898d1078ed1b7b5a35f6110c120787137a410ea8","sha512":"b0aa57daa84dd3fa6f3929b4b26355af097f2ab3fb72e36c68e792535c2a4a68a883775034395240dfadab29f5feadef4d10d67c444ebfbb027ac1e77e19af38","ssdeep":"768:QZhdZg7J02MLfTF9dFaQpp8JY29c6SboEBkleZ2YoOcLhgOPTgLg0oDEiG82ImAB:QZ1g7JQLqQpp8Jr9c6SboEBkleZ2qcL9","tlshash":"9b03c8c8b1c3642642eb507d713b7208b23a54655429f028bc39c8e5bc79e9f8677bbd","size":38267,"data":"","first_seen":"2025-10-25T15:25:40.391459Z","last_seen":"2025-10-25T15:25:40.391459Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.canstrm.com/vast-vpaid-player/main.js","fqdn":"js.canstrm.com","domain":"canstrm.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f996aa95c044a0f1cbc4097b2e81da5","sha1":"b35b9fbd34effa8bb1bd50f54b07d7e1e1a6068f","sha256":"28474aebb5144b6502c0822ba9e56c804e792f12bb717b152e49b0fc51ae9b6a","sha512":"73e940e1d07c9504f5630e62a69cb4a6bc7c13a52739cd3bf183e75f763085331f4bee625c9a0e2361666a3c2b8eb1bdd31d434e28f9cdd8d5de5808f61af807","ssdeep":"6144:fc2LH9F8sAvooiPQCCu2onfIqxLXCHT8rSgU8ACRr:fc2LH9F8sAvooiPQCCu2onfIqdXMt+","tlshash":"1f34299c72c2f07542e360b5803f110bb3392959a80d5550f669e9d6beb8e8e8237f7d","size":237122,"data":"","first_seen":"2025-10-25T15:25:40.393008Z","last_seen":"2025-10-25T15:25:40.393008Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","fqdn":"hd.xmovix.net","domain":"xmovix.net","tld":"net"},"ip":{"addr":"104.21.75.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"b0cdb0dc59957338379b16b91beebd40","sha1":"331349f0384269b51becd6894926ba00d0c7ebb4","sha256":"7921d54da224e7ce4b5999359cb4740e5c21e42a63e7f5bbc3ba0dd5c776db63","sha512":"5970f17cf84999ed30def85b1b4128060c2cf9e16b271d16ac625428e2523cdb239f6c2ea92b9440abc62e60a46c554a80f93744588a264129c77fcc2b4b0dbc","ssdeep":"","tlshash":"e0a024d4d4cc337433534700407533115310f351c4100040c14101103c0f0cfd4fd701","size":75,"data":"","first_seen":"2025-10-25T15:25:40.416538Z","last_seen":"2025-10-25T15:25:40.416538Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.canstrm.com/in-stream-ad-admanager/build.js","fqdn":"js.canstrm.com","domain":"canstrm.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fbb6d5c075343a7e5494250c4f336a5","sha1":"015612c3ba8e7bb034fc4f7fe07d7ce0706ef60c","sha256":"fce0b228f410a4e4ebcf5e3f7ab3064139c2e85017a87b35726d764f9b3c93a3","sha512":"87d085c7aab72f1591df0e40f95da5976cb4e59f5d9aaf1214d979c5ca43f5751bc35fd5d3b4f88c1d49067d72175ece9845ecf272caacc4454a41d6c538961b","ssdeep":"768:l65Z95bjPEtpLI5hXWe6lKxWAecVZWkEoLymP2i+d5ZIL3qwkONJIVxrnps28Lqt:iZ/b4t0hmlK5ZNx2rZiWONWGqljqsGGj","tlshash":"ac23c8c871d2f4b203a721a6c03f450bf23a6e957409a651e6a4e9e27c3559ec237f3d","size":46453,"data":"","first_seen":"2025-10-13T15:21:29.976711Z","last_seen":"2025-11-10T06:38:29.834639Z","times_seen":243,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"7bfe7b434b.058d79990c.com/b827ca605a47c2b95ebd40ed626f73b7.js","fqdn":"7bfe7b434b.058d79990c.com","domain":"058d79990c.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad95b65ecbcf789a8ccd2d54f165587a","sha1":"c8b4b9ba2510a3bcf5b7882ef299362b73526498","sha256":"c56828cfcd5217721a7c360d3c3e675da4a8fbcfaab123d4c1a7c1f1af830b40","sha512":"265ebb6e804700700b53ec25d37b2f88290b951f1a79b5547715cba26a58c78d030deaa217346178a517fc1f9a5d542c9507dceee2b629d589c5b6d16d313946","ssdeep":"12288:EiO6pTQUIfDchOHO68RPO2Si6EHlPUfQC+dKJTowRinDGQf7jbLExMLPW0hMs4hs:JONux6EHOJcFnagwxdRwl","tlshash":"d8d45b313290113870bfc8c6aa66278d336cf24be9174f55f96faaa583dbd54f625380","size":599459,"data":"","first_seen":"2025-10-23T10:57:14.90805Z","last_seen":"2025-10-27T08:33:06.75464Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1000fapvids.com/v.html?player_url=https%3A%2F%2Fjs.canstrm.com%2Fvast-vpaid-player%2Fmain.js","fqdn":"1000fapvids.com","domain":"1000fapvids.com","tld":"com"},"ip":{"addr":"109.206.176.116","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"b7f7988cab10217c4b054c9ce7608904","sha1":"ee11645e6c270b54b6183d6edaf5f2585eb61eb8","sha256":"59cadf9f9b6900b366bad45fe26efe1fda356bb7c6b605cafe9c9d9ef96a8d99","sha512":"baa45066d5e0672ea817c2e933f2c054b5752324526cf7036d1123329b23f85bc3f683d8d18c18175224d3aa4e8e037e13172eb0c85e98d3f5ecd1ca0c0e0f0e","ssdeep":"","tlshash":"1961b01d39f7102841a3f19a5f9f60103435f00335098e89fe4ceb155f5ae3ba66279e","size":3201,"data":"","first_seen":"2025-03-07T04:07:11.043307Z","last_seen":"2026-05-17T21:35:13.013614Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","fqdn":"hd.xmovix.net","domain":"xmovix.net","tld":"net"},"ip":{"addr":"104.21.75.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"7d8f79dc9e75a5b8d6af78573da5ec79","sha1":"16f6bb9da3ef2aee83a43f5785602da750a7b365","sha256":"3af2f502bfc29a5bd566a2af5377409cb5b0f81734a8d6f5dc7dc4f43d219c60","sha512":"475c9a3cb962cb0537ecd1138f3e48d9e169f63feba525bc43ca5b8d12b3bdff3b40a60c412d56c2c015159aca4bd273ad6aca0e3a1d73729d25e04d384a2b2a","ssdeep":"","tlshash":"bfa02454d4cc3374135347005035731313107351c4300040c34000103c1d04df4f5f01","size":74,"data":"","first_seen":"2025-10-25T15:25:40.418071Z","last_seen":"2025-10-25T15:25:40.418071Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hd.xmovix.net/templates/XmovixHD/ajax/fullstory.js","fqdn":"hd.xmovix.net","domain":"xmovix.net","tld":"net"},"ip":{"addr":"104.21.75.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"507e14ea7ec582969f45118e8f8e89b6","sha1":"c7a3830f4bff13f0f8177488a214c2782045f380","sha256":"d5de6927e6a3c450f489c8cbca339b8d0a80406e0bfa301fc54d39893172ffb3","sha512":"85070a11823b7744a7c5ceac9ccfb92a90b6917d784708ad18090fc970d858bfd6fc2cf9b66e14e8dece5b174ac8980f5c7eb3942aeadce62a762b4aa41f091c","ssdeep":"","tlshash":"580128a534b9ca58c976b2bdf74a4d01eb327967a301856238fc1fc03f315166194ea4","size":670,"data":"","first_seen":"2025-06-26T08:20:37.729463Z","last_seen":"2026-02-12T03:34:09.505544Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","fqdn":"hd.xmovix.net","domain":"xmovix.net","tld":"net"},"ip":{"addr":"104.21.75.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"cdb83b60c734f75b546b18a24b9a6148","sha1":"6338d29390815304db3f91623cd27896fb5a32b3","sha256":"28909d4ee3ebc4739e8c51488c86056283504d90e426da1fc7a962105e5db59a","sha512":"e121e4edf7d046973eab358f9a71dee0d9165638032748506f75a761f7ae7be67ad18680b178653b1e37c424c557b2459d53bb5257ff42728d3f8d0a69243851","ssdeep":"","tlshash":"01a002955caa71f813519a185a3627226314a95588051094c1504525384d48be5f5a56","size":58,"data":"","first_seen":"2023-04-13T14:51:46Z","last_seen":"2026-05-17T01:50:47.389372Z","times_seen":604,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hd.xmovix.net/templates/XmovixHD/ajax/magnificpopup.js","fqdn":"hd.xmovix.net","domain":"xmovix.net","tld":"net"},"ip":{"addr":"104.21.75.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ba5ebab31572c1896a5960f3a48b368","sha1":"b9141dd5938bef80bbae8624db7f1107bd428371","sha256":"b65a4d8a8593cbfcd3c31f828ea7f62756a969c510d6b8917d3d1688d0ee2df0","sha512":"25ff3e1a761378a4d2d140117c555980999713b83d10965a62a45539c023a52af497a6969b0f6b3fa1182c71952c42a0b77c736949914a89b98d8e5141062779","ssdeep":"384:z7gsUMAY6541hpzXKpGdyZ0yE5kh5/QCuOYqG:fgnNEDr9Vkh5ICW","tlshash":"4d42f890f5a67226c3fe75782b6f600d3672d953e6078c85b54c88982df8acc7162f6c","size":12971,"data":"","first_seen":"2025-09-28T21:55:02.149822Z","last_seen":"2026-05-10T03:48:56.685033Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","fqdn":"hd.xmovix.net","domain":"xmovix.net","tld":"net"},"ip":{"addr":"104.21.75.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6a319dd5ef82a6addf873878c4e3690","sha1":"cf3fd0c145f12b8dcb3948c033dd055e42f601ca","sha256":"d17633bfbcf09529c6928bfa0444f0819104fe8a42ee8ac9fcfc78f6e0a97970","sha512":"72d37b206d3a516d8160087784dd25cad93d2456af1083a8ade92957717129f8ee24ab372e06280bf9d7160baa2b32825689354693ad25fc35852fd1864927ff","ssdeep":"","tlshash":"76f0d46a59445f30f77ab00f6998ee547b712a0373036141d2a55c04cc88f14f5f598b","size":466,"data":"","first_seen":"2025-10-25T15:25:40.419852Z","last_seen":"2025-10-25T15:25:40.419852Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hd.xmovix.net/engine/classes/min/index.php?g=general\u0026v=d4b43","fqdn":"hd.xmovix.net","domain":"xmovix.net","tld":"net"},"ip":{"addr":"104.21.75.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"710458dd559c957714ac4a8e95357eb5","sha1":"f694238d616f579a0690001f37984af430c19963","sha256":"b409c14a10b4caad6b54844aa63a5faf748b83eecc2dd0d4fb1d913f8de55365","sha512":"282d65828a43bfe50fe0f9aea8bca3838ac1b5250e7c7c359c066e0428aa723f001d31c2463681b2ad6816a49a8571bf9f3ae29b2dc53adf1bbd7d5c4471322b","ssdeep":"1536:fYE1JVoiB9JqZdXXe2pD3PgoIiulrUn6Z6a4tfOR7WpfWBZPBJda4w9W3qG9a98N:u4J+rlfOhWpgCW6G9a98Hrp","tlshash":"3583c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","size":85582,"data":"","first_seen":"2023-03-07T01:03:07Z","last_seen":"2026-05-19T09:47:47.050039Z","times_seen":12088,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"7bfe7b434b.058d79990c.com/0ebcb703658e111af5aefc436fcde806.js","fqdn":"7bfe7b434b.058d79990c.com","domain":"058d79990c.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c90d1ef9543d7d56a6869ed4be6f7847","sha1":"6ff159593c9698ad541e6d3c149847b110c3deb6","sha256":"e7e748a324a548da8ce1ccc081a1339bf22142939106758ba1803fabafc42b2e","sha512":"8ac7ce5a0c7bc4daabb49051583a693f53e9d884f8deb32158c604abe682bfd2969dc1ac4e6ea8c50c0e63684ddd7424770fa0d7fbaf42c113e8118e981f0dbc","ssdeep":"1536:Z2c1pgoXEptQy9RixdpOkxQKf7YbK2Ec+tskajUOPVKIZujAB5R1pKKfVf3dnCjH:eRizplOK8mvDtsjbnujATLQ3+da","tlshash":"64e33ac9b2d2b47407e75099d43f1206f33a1a16b80c9058f6a6e9c17878ddb9237f7a","size":149592,"data":"","first_seen":"2025-10-20T14:02:56.309645Z","last_seen":"2025-11-06T12:09:31.49625Z","times_seen":392,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.canstrm.com/vast-vpaid-player/main.js","fqdn":"js.canstrm.com","domain":"canstrm.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f996aa95c044a0f1cbc4097b2e81da5","sha1":"b35b9fbd34effa8bb1bd50f54b07d7e1e1a6068f","sha256":"28474aebb5144b6502c0822ba9e56c804e792f12bb717b152e49b0fc51ae9b6a","sha512":"73e940e1d07c9504f5630e62a69cb4a6bc7c13a52739cd3bf183e75f763085331f4bee625c9a0e2361666a3c2b8eb1bdd31d434e28f9cdd8d5de5808f61af807","ssdeep":"6144:fc2LH9F8sAvooiPQCCu2onfIqxLXCHT8rSgU8ACRr:fc2LH9F8sAvooiPQCCu2onfIqdXMt+","tlshash":"1f34299c72c2f07542e360b5803f110bb3392959a80d5550f669e9d6beb8e8e8237f7d","size":237122,"data":"","first_seen":"2025-10-25T15:25:40.393008Z","last_seen":"2025-10-25T15:25:40.393008Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","fqdn":"hd.xmovix.net","domain":"xmovix.net","tld":"net"},"ip":{"addr":"104.21.75.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"dc1bc7b25e600810df9ec7273467eda7","sha1":"b89d11f81303d8366afa92e92b227e5b859f792e","sha256":"00235a11a4f0fa94f538a5f2cb6b0c322649262d0081687ec77703ca91918475","sha512":"57c59d7310c9c2de828578bce5030eb03c6eaac1ed69da5b26d51df63cdafc919c3a3051f2de1cf3125394985c0da6f5cb004968cf995e79122897bc0b91bfc3","ssdeep":"","tlshash":"93a022c23acaf0bc03008b0000332322b328c88a8c0a80a8c02000023c880cee0b8e03","size":72,"data":"","first_seen":"2023-05-07T23:13:58Z","last_seen":"2026-02-12T11:49:20.550476Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","fqdn":"hd.xmovix.net","domain":"xmovix.net","tld":"net"},"ip":{"addr":"104.21.75.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8ba08889f08f2720e9aa8065a1811a9","sha1":"4df215cc3e79ca5bfb774a4e0b078f4b1af494b9","sha256":"cf1bdf793a6b4b0b01d0abb87754769a610652718f0b29be642964fdb02f1787","sha512":"e1573721f26c1bd7e49dcb32d61cc6d07baac75fa77933e15ef38c7e5d57966ac345390187f6b402332fa2b2f164411302071168bbba1e800da68e2bc19d955f","ssdeep":"","tlshash":"df4130669e75a7e35012386634df249b7cf20179434ce12dec9ccb6425c8f2382a97dd","size":2298,"data":"","first_seen":"2025-10-25T15:25:40.423929Z","last_seen":"2025-10-25T15:25:40.423929Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hd.xmovix.net/templates/XmovixHD/js/libs-en.js","fqdn":"hd.xmovix.net","domain":"xmovix.net","tld":"net"},"ip":{"addr":"104.21.75.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc65fb36f4f8204e22f8a98111ae0653","sha1":"3a7ded2c75b7b2511a38187e4ec940cd1924225b","sha256":"63faf6569c220577560cd31e98c939725e5f31a0c2a3059ae7f8d184a249ea96","sha512":"c270a7d056c4d6e68810644051af6b6b4728beb81546a18fda4d6f62c5b8c461f07a77519d05112d1c3568c40cf7dcbb4e8749c4fa8100d83fda981288380368","ssdeep":"768:m5sdEpPyyd8r9g9BA70MFA0c3db3FzkSRInLGhep2lcwJeL+CkbQdc75COpUQuil:kVyyd8r9gDAAMFE3dGMxAcF4DO","tlshash":"fa53a44af3242d1a466b61a1553f120b723a281de506847db87ca6ed2e7d84d313ffbc","size":61044,"data":"","first_seen":"2025-09-30T21:49:22.172096Z","last_seen":"2026-01-11T22:31:43.368626Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.canstrm.com/pb/downloads/latest/clickadilla-vast.min.js","fqdn":"js.canstrm.com","domain":"canstrm.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a807f4f9dce88b30ba1ff01d75fe072f","sha1":"3795ce66f6cdd0ad1641d6a8c14ab1752bffa353","sha256":"433452c3b9382cad1ef08bc1360b7768b8b04b11de5004e6c4d3c37ac64d198f","sha512":"02c99e975a0b8527b552ceaefcf3ab6b72b314c6d17f0dbeb4472bce6e6d03c9597fe7747388a3730ccfaacc13f2d8e1c043952ffa5f978b2354f25b477d09f7","ssdeep":"6144:oc2LH9F8sAvooiPQCCu2onfIAp3ORBT7SQUrIbl/W48Y4:oc2LH9F8sAvooiPQCCu2onfIAFCE28Y4","tlshash":"6444189872c2f07542e3a0b5803f110bf33a295a680d5550f66dddd6beb898a8237f7d","size":272030,"data":"","first_seen":"2025-10-14T07:00:30.712117Z","last_seen":"2025-11-01T18:03:28.032355Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"static.bookmsg.com/creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790.webp","fqdn":"static.bookmsg.com","domain":"bookmsg.com","tld":"com"},"ip":{"addr":"45.133.44.25","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:11.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.bookmsg.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Sep 2025 02:32:15 GMT","end":"Fri, 26 Dec 2025 02:32:14 GMT"},"fingerprint":{"sha1":"69:D4:87:E8:98:FE:00:16:8C:D3:50:CF:9D:9C:90:39:E8:BA:25:24","sha256":"B7:66:1B:B1:4A:54:D5:C6:EB:8C:46:AC:AC:EE:34:E5:FD:C8:BD:42:18:97:40:49:28:DF:BC:31:42:43:04:50"}}},"request":{"raw":"GET /creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790.webp HTTP/1.1\r\nHost: static.bookmsg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 15:25:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1066\r\nserver: nginx/1.24.0\r\nlast-modified: Fri, 31 May 2024 10:56:43 GMT\r\netag: \"6659aceb-42a\"\r\nexpires: Sun, 25 Oct 2026 15:25:11 GMT\r\ncache-control: max-age=31536000\r\nx-cdn-host-id: DS5058\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1066,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x240, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2a11e13b2bd67bb9a6cb347d7c73df13","sha1":"b85460a33f9b229f42c08a6a94ae433a4d5c32ab","sha256":"1d0d6b5176d6a48b3042a107f929bbfcefd4a057273ac488bbb7f7affd909b56","sha512":"059dd018bbf13a669d73f07442288f165bc6b305afb0df955773a0efb7454b8204095196231179fab4cb625e189c7c735fe41dc5b67fb8666d584214277186e6","ssdeep":"","tlshash":"7511b56be46c4dfede41f0408dd80256f8324a5c8aaeaf39058bc7da4f584143a6f01a","first_seen":"2024-02-20T18:30:33Z","last_seen":"2026-05-19T09:03:32.029748Z","times_seen":11247,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":49,"dns":1,"connect":21,"send":0,"wait":19,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.forscprts.com/api/models/vast?action=sbSignupWithModelSoft\u0026campaignId=25bdc61ed3917811c8f3f36a1e6e0fb40a4bf9db56e01082448f446fc27cc57b\u0026campaignType=smartpop\u0026creativeId=848c9861daeb8c71077e63185fe70108f0fc581bfa4a1361d3aad7791cbd1e0d\u0026duration=00%3A00%3A30\u0026iterationId=1075275\u0026masterSmartpopId=2683\u0026memberId=0641fd45b5021542f8843f\u0026p1=60690\u0026p2=113256\u0026p3=101783\u0026ruleId=29\u0026skipOffset=00%3A00%3A05\u0026smartpopId=14005\u0026sourceId=100863\u0026tag=girls\u0026trafficType=preroll\u0026usePreroll=true\u0026userId=a29e4fa1023dd45be975c4ab2c3f63fc721842490735020a0d0703eb57f7300d\u0026variationId=34733\u0026videoType=ol","fqdn":"go.forscprts.com","domain":"forscprts.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1000fapvids.com/v.html?player_url=https%3A%2F%2Fjs.canstrm.com%2Fvast-vpaid-player%2Fmain.js","date":"2025-10-25T15:25:12.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.forscprts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 20:58:53 GMT","end":"Fri, 12 Dec 2025 21:19:55 GMT"},"fingerprint":{"sha1":"AD:2E:E6:89:40:EE:99:C2:2F:D5:3E:7F:72:5E:7A:8B:D9:8F:CF:F7","sha256":"40:2F:2D:5E:AB:0A:F5:22:4B:8E:CA:F1:13:FC:E5:AA:5D:30:90:AE:83:A7:8D:A8:17:49:54:0E:FA:65:A3:66"}}},"request":{"raw":"GET /api/models/vast?action=sbSignupWithModelSoft\u0026campaignId=25bdc61ed3917811c8f3f36a1e6e0fb40a4bf9db56e01082448f446fc27cc57b\u0026campaignType=smartpop\u0026creativeId=848c9861daeb8c71077e63185fe70108f0fc581bfa4a1361d3aad7791cbd1e0d\u0026duration=00%3A00%3A30\u0026iterationId=1075275\u0026masterSmartpopId=2683\u0026memberId=0641fd45b5021542f8843f\u0026p1=60690\u0026p2=113256\u0026p3=101783\u0026ruleId=29\u0026skipOffset=00%3A00%3A05\u0026smartpopId=14005\u0026sourceId=100863\u0026tag=girls\u0026trafficType=preroll\u0026usePreroll=true\u0026userId=a29e4fa1023dd45be975c4ab2c3f63fc721842490735020a0d0703eb57f7300d\u0026variationId=34733\u0026videoType=ol HTTP/1.1\r\nHost: go.forscprts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1000fapvids.com\r\nReferer: https://1000fapvids.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 25 Oct 2025 15:25:12 GMT\r\ncontent-type: text/xml; charset=utf-8\r\ncf-ray: 9942b9a86f802678-OSL\r\naccess-control-allow-origin: https://1000fapvids.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2278,"size_decoded":0,"mime_type":"text/xml; charset=utf-8","magic":"XML 1.0 document, ASCII text, with very long lines (2278), with no line terminators","md5":"8527dd932e626dadde7566ebf6a76d6c","sha1":"2ca24694c2ec616217ffdead822e422c21200949","sha256":"49279a336537a0d8151dd8160230bab5fcb2f308e1ff49558f8b6c82f04a9055","sha512":"b4ec78a00d5f03ffd3246381a86022b55237e7454a24a14d37c6a1e91e79e99b052ca10acb9f4867e05696de5d35102f65355143c6ae5287e4084e7130d8da58","ssdeep":"","tlshash":"7841967d5271bc3339c3d53e999460c611360a2fbac182f5e89d0c129d0d6ea6bf13ad","first_seen":"2025-10-25T15:25:40.357018Z","last_seen":"2025-10-25T15:25:40.357018Z","times_seen":1,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026dsh=S270863799%3A1761405912190888\u0026hl=en\u0026ifkv=ARESoU2BlBMQqWQo106pRUowMVFjEnE-93LjNjH7KqA4a7wN1YsPJOBxWcqpAY9i19biWtP59SirYA\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"64.233.162.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:12.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:32:25 GMT","end":"Wed, 24 Dec 2025 14:32:24 GMT"},"fingerprint":{"sha1":"3A:78:B2:96:D0:CD:A5:D3:08:6F:80:16:15:5C:10:CC:41:FE:1B:12","sha256":"D2:92:7D:D4:5D:78:BC:69:FC:32:73:D8:16:EF:3A:37:3A:0E:0C:2D:50:4F:FE:51:7E:F7:EA:93:56:B9:8C:1D"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026dsh=S270863799%3A1761405912190888\u0026hl=en\u0026ifkv=ARESoU2BlBMQqWQo106pRUowMVFjEnE-93LjNjH7KqA4a7wN1YsPJOBxWcqpAY9i19biWtP59SirYA\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 25 Oct 2025 15:25:12 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: script-src 'nonce--zCVN5CwoEtGUnktMP55qQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/recaptcha/enterprise.js https://www.gstatic.com/recaptcha/ https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.Mp9mjkH_buc.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-19T12:11:11.754429Z","times_seen":15436892,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"video.sacdnssedge.com/video/ol_f2c0d95da6924428aa30976d3b0b7e50.mp4","fqdn":"video.sacdnssedge.com","domain":"sacdnssedge.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://1000fapvids.com/v.html?player_url=https%3A%2F%2Fjs.canstrm.com%2Fvast-vpaid-player%2Fmain.js","date":"2025-10-25T15:25:13.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1894120159.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 11:23:17 GMT","end":"Mon, 01 Dec 2025 11:23:16 GMT"},"fingerprint":{"sha1":"6C:F0:E6:7B:64:17:10:A8:FA:BF:27:07:10:15:AF:6E:E6:98:D4:B0","sha256":"96:D2:44:B3:D4:D6:DE:C6:FD:A7:7F:68:CE:B6:6A:C0:5A:AF:0C:DD:A8:39:FC:80:62:ED:93:CA:F6:D7:27:72"}}},"request":{"raw":"GET /video/ol_f2c0d95da6924428aa30976d3b0b7e50.mp4 HTTP/1.1\r\nHost: video.sacdnssedge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=2359296-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1000fapvids.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Sat, 25 Oct 2025 15:25:13 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 58684\r\nvary: accept-encoding\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"ol_f2c0d95da6924428aa30976d3b0b7e50.mp4\"\r\netag: \"2786c0ed23bf9854c67ace1750d1c178\"\r\nexpires: Sat, 25 Oct 2025 16:21:08 GMT\r\nlast-modified: Sat, 25 Oct 2025 15:21:08 GMT\r\nx-amz-request-id: 5de9b9e4-9d7c-43ce-a499-03ac0bdcb419\r\ncache-control: max-age=7200\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncf-cache-status: HIT\r\nage: 1\r\ncf-ray: 9942b3b78a03d26c-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-77-nzt: EwwBX63NDQH37wAAAAwBuUwKDAH3BQAAAAwBT3/Y+AG3AAAAAA\r\nx-77-nzt-ray: 2a494a151c0b51dafeebfc68a74e1100\r\nx-77-cache: HIT\r\nx-77-age: 239\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 2359296-2417979/2417980\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":58684,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"7c6c087f67a2b0d34518064040d0a8d0","sha1":"c6531d798c5ff8768c4b610a3d437e54cc7db8cb","sha256":"f36c60102f54ec916474571834d9cfcc3e0ad0085953e45c53a01be3616751dc","sha512":"13fe03fa89ad26f9e342dc0866fb749431c62953bc44bc7d0522cc6780e1a3420500847b8876819aa48c854596f025d8b1ea9f2c095b1be0c4d36f43efae0501","ssdeep":"768:OKXrjiS5Nf48yWYmC1vAFfccKzud4oojH01hFHNFkLCXiXNEWxUSuGtzXKOC5ybu:vtyvmg1zDlctFM/F2CtKNZ","tlshash":"9743f5a2f7245107da921b3598e103207730ea713743474f8ad1b77eada73e6ae131e6","first_seen":"2025-10-25T15:25:40.358903Z","last_seen":"2025-10-25T15:25:40.358903Z","times_seen":1,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hd.xmovix.net/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"hd.xmovix.net","domain":"xmovix.net","tld":"net"},"ip":{"addr":"104.21.75.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:09.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmovix.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 08:17:46 GMT","end":"Fri, 09 Jan 2026 09:15:17 GMT"},"fingerprint":{"sha1":"E0:29:B4:15:7B:84:A8:8E:4C:6F:38:26:B6:4C:91:E7:EA:DC:4F:33","sha256":"70:A9:AF:CC:7A:C2:CB:AF:67:4D:A8:FD:F4:27:76:A8:F5:00:78:F0:1E:1D:F5:24:64:87:2B:97:BF:99:18:EE"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: hd.xmovix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html\r\nCookie: language=en; PHPSESSID=d8d876133430e02643de56ace62d60f4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Sat, 25 Oct 2025 16:13:09 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t2ij7s2o%2B%2FsawiiHZ7wzVLnF9wiaS3wdAxIoMlKoeN4JEZuiGl223k1VoWm5HrAobxqjSmSRFo4xsE%2B8hHfHUaEg3rWoC7w880MjIJU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 15:25:09 GMT\r\ncf-ray: 9942b993b996120a-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-19T11:11:13.578524Z","times_seen":108038,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpshsdk.com/npc/sdk/push.m.js?v=1","fqdn":"js.wpshsdk.com","domain":"wpshsdk.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:10.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.wpshsdk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Sep 2025 07:33:10 GMT","end":"Wed, 10 Dec 2025 07:33:09 GMT"},"fingerprint":{"sha1":"62:BE:F1:F7:0A:03:CE:F8:E5:4C:47:01:1E:E9:64:E1:C4:78:3D:D5","sha256":"86:3F:71:43:02:B9:19:61:1A:AC:16:D2:2F:36:03:1E:C1:C6:18:02:AB:1D:95:D6:DD:5A:5A:41:AD:83:D8:CB"}}},"request":{"raw":"GET /npc/sdk/push.m.js?v=1 HTTP/1.1\r\nHost: js.wpshsdk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 15:25:10 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Mon, 01 Sep 2025 08:26:08 GMT\r\netag: W/\"68b558a0-7b8f\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 25 Oct 2025 15:30:10 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1747\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31631,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31246), with no line terminators","md5":"d8575fbbf73a8ff30ff1938a43e664d0","sha1":"d2785dd9892fdadb8703f655b056b02dd1cb5b8d","sha256":"50c8fdcb3cc08967158d65ade7da8ac61718b8a1babc00e13b930367e571aedc","sha512":"8c16a650ae6509952a46206931e89d7ab016ce4f534770e2b9e5d2a4b7fc1c2394a2ed5c454f9fb6d6a99f6b423e2775956ce8ec9c88f686b940a450dfc72078","ssdeep":"768:CuKhVWPsJiRx8Useb6uvOdtkp6O4AQet1/:CuKHesJiXWpuvOdtkQLAf","tlshash":"2be21a88b381b2b4479720b2587f6742b336651a7403c540f367ebc0b869e9fd336b69","first_seen":"2025-09-01T17:49:28.814065Z","last_seen":"2026-02-06T10:34:46.272483Z","times_seen":1059,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":67,"dns":27,"connect":21,"send":0,"wait":21,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.canstrm.com/in-stream-ad-admanager/build.js","fqdn":"js.canstrm.com","domain":"canstrm.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:10.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.canstrm.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Sep 2025 08:33:52 GMT","end":"Tue, 09 Dec 2025 08:33:51 GMT"},"fingerprint":{"sha1":"77:E5:B7:94:76:6E:36:F8:B0:2C:2C:29:69:5D:3B:80:BD:22:15:EA","sha256":"6A:83:45:3C:74:3D:F0:5B:B7:0F:11:32:46:C3:A0:EB:34:79:D5:B8:F1:07:6C:8A:CE:83:D6:0F:42:E6:8B:F7"}}},"request":{"raw":"GET /in-stream-ad-admanager/build.js HTTP/1.1\r\nHost: js.canstrm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 15:25:10 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Mon, 13 Oct 2025 14:31:52 GMT\r\netag: W/\"68ed0d58-b575\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 25 Oct 2025 15:30:10 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46453,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (46387)","md5":"2fbb6d5c075343a7e5494250c4f336a5","sha1":"015612c3ba8e7bb034fc4f7fe07d7ce0706ef60c","sha256":"fce0b228f410a4e4ebcf5e3f7ab3064139c2e85017a87b35726d764f9b3c93a3","sha512":"87d085c7aab72f1591df0e40f95da5976cb4e59f5d9aaf1214d979c5ca43f5751bc35fd5d3b4f88c1d49067d72175ece9845ecf272caacc4454a41d6c538961b","ssdeep":"768:l65Z95bjPEtpLI5hXWe6lKxWAecVZWkEoLymP2i+d5ZIL3qwkONJIVxrnps28Lqt:iZ/b4t0hmlK5ZNx2rZiWONWGqljqsGGj","tlshash":"ac23c8c871d2f4b203a721a6c03f450bf23a6e957409a651e6a4e9e27c3559ec237f3d","first_seen":"2025-10-13T15:21:29.976711Z","last_seen":"2025-11-10T06:38:29.834639Z","times_seen":243,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":35,"connect":22,"send":0,"wait":21,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nereserv.com/in/dip?site=native-push\u0026wl=1\u0026event_id=41f3a5da-6618-4ed1-91fe-e752fa7a66ff\u0026subid=813874590\u0026sid=1000785442\u0026spot_id=1455920\u0026created_at=2025-10-25\u0026timezone=0\u0026ver=8.242.10\u0026is_native=1","fqdn":"nereserv.com","domain":"nereserv.com","tld":"com"},"ip":{"addr":"116.202.204.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:11.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 02:36:27 GMT","end":"Tue, 25 Nov 2025 02:36:26 GMT"},"fingerprint":{"sha1":"64:AC:96:73:4F:92:FF:85:D0:1E:15:16:DA:B2:A2:8F:FA:02:1D:05","sha256":"1B:3E:09:8B:67:DE:C9:73:00:B7:68:C4:8A:D7:17:4D:D5:19:A0:85:23:3B:65:9C:31:C6:FB:A5:8E:BA:22:83"}}},"request":{"raw":"GET /in/dip?site=native-push\u0026wl=1\u0026event_id=41f3a5da-6618-4ed1-91fe-e752fa7a66ff\u0026subid=813874590\u0026sid=1000785442\u0026spot_id=1455920\u0026created_at=2025-10-25\u0026timezone=0\u0026ver=8.242.10\u0026is_native=1 HTTP/1.1\r\nHost: nereserv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hd.xmovix.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Sat, 25 Oct 2025 15:25:11 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-19T12:11:11.754429Z","times_seen":15436892,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maucn.yomeno.xyz/in/dip?event_id=90390e69-bf07-4c28-94b3-bdc615fbd71d","fqdn":"maucn.yomeno.xyz","domain":"yomeno.xyz","tld":"xyz"},"ip":{"addr":"168.119.45.30","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:11.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"video.infrapu.sh","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 04:31:26 GMT","end":"Tue, 16 Dec 2025 04:31:25 GMT"},"fingerprint":{"sha1":"C7:94:FE:12:A0:82:08:E5:BC:D6:E8:81:29:B6:22:BE:0B:35:31:39","sha256":"81:D3:DB:37:60:2A:97:2D:FA:9B:16:4D:79:04:0E:95:4A:89:42:2B:EC:F9:15:FC:2E:2D:AB:DD:C6:A2:5C:72"}}},"request":{"raw":"GET /in/dip?event_id=90390e69-bf07-4c28-94b3-bdc615fbd71d HTTP/1.1\r\nHost: maucn.yomeno.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hd.xmovix.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Sat, 25 Oct 2025 15:25:11 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-19T12:11:11.754429Z","times_seen":15436892,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":63,"dns":1,"connect":24,"send":0,"wait":29,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.ahmybid.net/a6a28f15-237b-4708-8a9c-f12d4442bf82.jpg","fqdn":"assets.ahmybid.net","domain":"ahmybid.net","tld":"net"},"ip":{"addr":"45.133.44.25","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:11.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.ahmybid.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 02:34:06 GMT","end":"Tue, 20 Jan 2026 02:34:05 GMT"},"fingerprint":{"sha1":"8F:7F:00:3C:97:75:C7:07:55:FE:D5:8E:EA:64:4E:E6:3B:D6:AC:6C","sha256":"49:C1:19:E7:6B:AD:AA:FC:DC:2C:D3:0D:4E:EB:70:84:A1:61:FD:CC:08:92:42:ED:D6:E3:CE:72:11:3E:67:9C"}}},"request":{"raw":"GET /a6a28f15-237b-4708-8a9c-f12d4442bf82.jpg HTTP/1.1\r\nHost: assets.ahmybid.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 15:25:11 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15768\r\nserver: nginx/1.24.0\r\nlast-modified: Fri, 20 Dec 2024 12:31:53 GMT\r\netag: \"676563b9-3d98\"\r\ncache-control: public, max-age=315360000\r\nx-cdn-host-id: ah1742,DS5058\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15768,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x108, components 3","md5":"2e22068d6c028aae1484dcb188b0dbe9","sha1":"06166176ce916ec30e700a8ef14e2a4e0281a165","sha256":"cf28e006bd60694e75878484f862907a9d9c128d2daae08f098ad33aa08ef267","sha512":"45145af081276c9bc141403ac0319efcf202b92768863ae052d164e63c0e090d3b5ac2ede3316109469f7203f0154cec9e77d01ddbff49b38fbd2e1ba9aa805e","ssdeep":"384:HyfTep7svYXcGF5L5wEpTVJp5Peme8sl84fruMH4M:kQXcW5ZVJ7eLTlzrj4M","tlshash":"e062d0504c6205e7cf68bf0ba4d064a23ece2a27d584e966e904f848f1b2deac45ac4d","first_seen":"2025-08-11T01:48:06.622057Z","last_seen":"2025-12-29T02:51:31.481286Z","times_seen":451,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"video.sacdnssedge.com/video/ol_f2c0d95da6924428aa30976d3b0b7e50.mp4","fqdn":"video.sacdnssedge.com","domain":"sacdnssedge.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:12.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1894120159.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 11:23:17 GMT","end":"Mon, 01 Dec 2025 11:23:16 GMT"},"fingerprint":{"sha1":"6C:F0:E6:7B:64:17:10:A8:FA:BF:27:07:10:15:AF:6E:E6:98:D4:B0","sha256":"96:D2:44:B3:D4:D6:DE:C6:FD:A7:7F:68:CE:B6:6A:C0:5A:AF:0C:DD:A8:39:FC:80:62:ED:93:CA:F6:D7:27:72"}}},"request":{"raw":"GET /video/ol_f2c0d95da6924428aa30976d3b0b7e50.mp4 HTTP/1.1\r\nHost: video.sacdnssedge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=2359296-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Sat, 25 Oct 2025 15:25:12 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 58684\r\nvary: accept-encoding\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"ol_f2c0d95da6924428aa30976d3b0b7e50.mp4\"\r\netag: \"2786c0ed23bf9854c67ace1750d1c178\"\r\nexpires: Sat, 25 Oct 2025 16:21:08 GMT\r\nlast-modified: Sat, 25 Oct 2025 15:21:08 GMT\r\nx-amz-request-id: 5de9b9e4-9d7c-43ce-a499-03ac0bdcb419\r\ncache-control: max-age=7200\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncf-cache-status: HIT\r\nage: 1\r\ncf-ray: 9942b3b78a03d26c-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-77-nzt: EwwBX63NDQH37gAAAAwBuUwKDAH3BQAAAAwBT3/Y+AG3AAAAAA\r\nx-77-nzt-ray: 2a494a151c0b51dafdebfc68f3d5a936\r\nx-77-cache: HIT\r\nx-77-age: 238\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 2359296-2417979/2417980\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":58684,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"7c6c087f67a2b0d34518064040d0a8d0","sha1":"c6531d798c5ff8768c4b610a3d437e54cc7db8cb","sha256":"f36c60102f54ec916474571834d9cfcc3e0ad0085953e45c53a01be3616751dc","sha512":"13fe03fa89ad26f9e342dc0866fb749431c62953bc44bc7d0522cc6780e1a3420500847b8876819aa48c854596f025d8b1ea9f2c095b1be0c4d36f43efae0501","ssdeep":"768:OKXrjiS5Nf48yWYmC1vAFfccKzud4oojH01hFHNFkLCXiXNEWxUSuGtzXKOC5ybu:vtyvmg1zDlctFM/F2CtKNZ","tlshash":"9743f5a2f7245107da921b3598e103207730ea713743474f8ad1b77eada73e6ae131e6","first_seen":"2025-10-25T15:25:40.358903Z","last_seen":"2025-10-25T15:25:40.358903Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":1,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vast.yomeno.xyz/report?katds_ep=aG4Gbxl2e3nxNHI_CS7WWk2nXZrkkPgg1LDaAsqsVzbTxu5JBUNinz3Fi-CiBU5YZIQOU67Vbp4gfYXL8P8ADNgLhVnnnk9Z9uqUJ58S1WKRFfM1i_g23Ljx7hcgq6sLeHs4NJ7-fLaUvfuADl6-u9HSFkPkp2BuyGuBjoUSaKDh1wMCm6_kfFUnOaEkghtD4r6vPQStZi2d9rkNaKybfstaBmqfFHiKh3vixr23K1o7EXOOme4eIUwSMjbJ8V3zsUChHeDiG68sYxx0Z1grcNrVdsuYp-_0jVyuzg0DX5BrxXWMlYJOIvb1n20mdxQug9yFP55kdGI2RyigoCVttMcGo1HA4Bc4-tm3eozHosw9IS29IehC4BzwsNCN0k_adZJSqedr8N4roosDTBc77WDT4YS7lDNGoQQzPNC1GOi2XgO82U37ApUuys5Cq5Zq_HJl7ynXzCblfunVkPatuq7w6py-SMaNe1_w-is-h-TFmu1z6hNyMIkYcnA\u0026error=400","fqdn":"vast.yomeno.xyz","domain":"yomeno.xyz","tld":"xyz"},"ip":{"addr":"109.206.161.16","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1000fapvids.com/v.html?player_url=https%3A%2F%2Fjs.canstrm.com%2Fvast-vpaid-player%2Fmain.js","date":"2025-10-25T15:25:13.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"vast.yomeno.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 03:20:42 GMT","end":"Wed, 31 Dec 2025 03:20:41 GMT"},"fingerprint":{"sha1":"C1:A0:EC:3E:36:CF:B7:DB:9C:46:F0:8B:28:CB:F6:1B:E8:ED:7C:AA","sha256":"23:03:9D:AA:E7:64:11:E6:ED:B5:03:CB:DC:03:54:4F:DF:DD:5A:95:E2:68:64:09:57:1F:27:FA:72:64:91:5E"}}},"request":{"raw":"GET /report?katds_ep=aG4Gbxl2e3nxNHI_CS7WWk2nXZrkkPgg1LDaAsqsVzbTxu5JBUNinz3Fi-CiBU5YZIQOU67Vbp4gfYXL8P8ADNgLhVnnnk9Z9uqUJ58S1WKRFfM1i_g23Ljx7hcgq6sLeHs4NJ7-fLaUvfuADl6-u9HSFkPkp2BuyGuBjoUSaKDh1wMCm6_kfFUnOaEkghtD4r6vPQStZi2d9rkNaKybfstaBmqfFHiKh3vixr23K1o7EXOOme4eIUwSMjbJ8V3zsUChHeDiG68sYxx0Z1grcNrVdsuYp-_0jVyuzg0DX5BrxXWMlYJOIvb1n20mdxQug9yFP55kdGI2RyigoCVttMcGo1HA4Bc4-tm3eozHosw9IS29IehC4BzwsNCN0k_adZJSqedr8N4roosDTBc77WDT4YS7lDNGoQQzPNC1GOi2XgO82U37ApUuys5Cq5Zq_HJl7ynXzCblfunVkPatuq7w6py-SMaNe1_w-is-h-TFmu1z6hNyMIkYcnA\u0026error=400 HTTP/1.1\r\nHost: vast.yomeno.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1000fapvids.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1000fapvids.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.20.1\r\ndate: Sat, 25 Oct 2025 15:25:12 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nvary: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://1000fapvids.com\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-19T12:11:11.754429Z","times_seen":15436892,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mildhide.pro/ecc874/49056a5b4d8b.js","fqdn":"www.mildhide.pro","domain":"mildhide.pro","tld":"pro"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:10.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mildhide.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Oct 2025 07:05:13 GMT","end":"Thu, 22 Jan 2026 07:05:12 GMT"},"fingerprint":{"sha1":"F6:20:B8:48:EA:4A:BC:D6:96:0E:60:9E:CE:D3:ED:79:09:34:42:E1","sha256":"22:8A:AC:ED:DA:E3:41:E3:FD:0E:37:EF:84:9F:06:D6:4B:87:87:4C:25:5F:33:45:7E:63:54:78:EA:2C:49:F8"}}},"request":{"raw":"GET /ecc874/49056a5b4d8b.js HTTP/1.1\r\nHost: www.mildhide.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 15:25:10 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: Content-Type\r\ncache-control: max-age=172800\r\ncontent-encoding: gzip\r\nexpires: Mon, 27 Oct 2025 15:25:10 GMT\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":103674,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"ee0352749528bec932fc0f62e9139581","sha1":"f447926bffed648ea4b563be7109219d2a337d62","sha256":"275f218fd25090f8d309b3f7819d0295a5655b9e2ad4033c3baa3a9c9cd4da09","sha512":"c569f866c8ae243fa806677a65feb3cf1786dd2b09ced9daf8630a891887b0c6355c387d8d775c3c69e9c9c52a1f63439f615111e72a3a4f9960598916a79fbb","ssdeep":"1536:rM+iZ3YOYuyx6PUQwRxcs8P3nhkQ8vL7T7Q6eGozzwVEnHzHRbPvR:OijxEQq3P5Enne9zkWHLb","tlshash":"57a33461350b64fd2ad0c1e7eb6b20886c295810e469cca1ecd1d7c7d6eb8e3429b5f7","first_seen":"2025-10-24T08:51:33.497553Z","last_seen":"2025-10-27T05:35:07.761275Z","times_seen":41,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":88,"dns":37,"connect":19,"send":0,"wait":38,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vast.yomeno.xyz/vast","fqdn":"vast.yomeno.xyz","domain":"yomeno.xyz","tld":"xyz"},"ip":{"addr":"109.206.161.16","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:11.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"vast.yomeno.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 03:20:42 GMT","end":"Wed, 31 Dec 2025 03:20:41 GMT"},"fingerprint":{"sha1":"C1:A0:EC:3E:36:CF:B7:DB:9C:46:F0:8B:28:CB:F6:1B:E8:ED:7C:AA","sha256":"23:03:9D:AA:E7:64:11:E6:ED:B5:03:CB:DC:03:54:4F:DF:DD:5A:95:E2:68:64:09:57:1F:27:FA:72:64:91:5E"}}},"request":{"raw":"POST /vast HTTP/1.1\r\nHost: vast.yomeno.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 1865\r\nOrigin: https://hd.xmovix.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Sat, 25 Oct 2025 15:25:11 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding, *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://hd.xmovix.net\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3165,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"322cbabd11afb7c4164650ab09cb70f2","sha1":"8321488f611ea7e83e430c69ccbbaccc1a2cf45c","sha256":"a5022769e32cc57aee3132bb15d6e54a1cd02e522542d081cb62d45356211888","sha512":"4b695b47354f0f38141cebf79eda914f95e11d49a52cbe77f1034daeb979ac508173aa5a5ed6166431f342c7c381d3eebd760ff744586065d441b8092dfe4a48","ssdeep":"","tlshash":"83514473006c1ddd0ba471de2cc7ba88c5c6291ba7f92f9b91c59c7c416cd80439aba6","first_seen":"2025-10-25T15:25:40.363593Z","last_seen":"2025-10-25T15:25:40.363593Z","times_seen":1,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.forscprts.com/api/models/vast?action=sbSignupWithModelSoft\u0026campaignId=25bdc61ed3917811c8f3f36a1e6e0fb40a4bf9db56e01082448f446fc27cc57b\u0026campaignType=smartpop\u0026creativeId=848c9861daeb8c71077e63185fe70108f0fc581bfa4a1361d3aad7791cbd1e0d\u0026duration=00%3A00%3A30\u0026iterationId=1075275\u0026masterSmartpopId=2683\u0026memberId=0641fd45b4f9d390c01c65\u0026p1=60690\u0026p2=113256\u0026p3=101783\u0026ruleId=29\u0026skipOffset=00%3A00%3A05\u0026smartpopId=14005\u0026sourceId=100863\u0026tag=girls\u0026trafficType=preroll\u0026usePreroll=true\u0026userId=a29e4fa1023dd45be975c4ab2c3f63fc721842490735020a0d0703eb57f7300d\u0026variationId=34733\u0026videoType=ol","fqdn":"go.forscprts.com","domain":"forscprts.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1000fapvids.com/v.html?player_url=https%3A%2F%2Fjs.canstrm.com%2Fvast-vpaid-player%2Fmain.js","date":"2025-10-25T15:25:12.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.forscprts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 20:58:53 GMT","end":"Fri, 12 Dec 2025 21:19:55 GMT"},"fingerprint":{"sha1":"AD:2E:E6:89:40:EE:99:C2:2F:D5:3E:7F:72:5E:7A:8B:D9:8F:CF:F7","sha256":"40:2F:2D:5E:AB:0A:F5:22:4B:8E:CA:F1:13:FC:E5:AA:5D:30:90:AE:83:A7:8D:A8:17:49:54:0E:FA:65:A3:66"}}},"request":{"raw":"GET /api/models/vast?action=sbSignupWithModelSoft\u0026campaignId=25bdc61ed3917811c8f3f36a1e6e0fb40a4bf9db56e01082448f446fc27cc57b\u0026campaignType=smartpop\u0026creativeId=848c9861daeb8c71077e63185fe70108f0fc581bfa4a1361d3aad7791cbd1e0d\u0026duration=00%3A00%3A30\u0026iterationId=1075275\u0026masterSmartpopId=2683\u0026memberId=0641fd45b4f9d390c01c65\u0026p1=60690\u0026p2=113256\u0026p3=101783\u0026ruleId=29\u0026skipOffset=00%3A00%3A05\u0026smartpopId=14005\u0026sourceId=100863\u0026tag=girls\u0026trafficType=preroll\u0026usePreroll=true\u0026userId=a29e4fa1023dd45be975c4ab2c3f63fc721842490735020a0d0703eb57f7300d\u0026variationId=34733\u0026videoType=ol HTTP/1.1\r\nHost: go.forscprts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1000fapvids.com\r\nReferer: https://1000fapvids.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 25 Oct 2025 15:25:12 GMT\r\ncontent-type: text/xml; charset=utf-8\r\ncf-ray: 9942b9a84f592678-OSL\r\naccess-control-allow-origin: https://1000fapvids.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2278,"size_decoded":0,"mime_type":"text/xml; charset=utf-8","magic":"XML 1.0 document, ASCII text, with very long lines (2278), with no line terminators","md5":"a6ce197f24aa7e774d4dff0b0afe7ed8","sha1":"285aae3896a016f978fb30e4d7c6b13ea2fb9e94","sha256":"625052a11c8f20d9bc55ba00523c30238a218053778b8d8d7ee04e72aa3a4861","sha512":"7689754dd525c4716461fbb8d59750c017b50e0d8d3673419c6752a8bbaf3a76762cb269f35e415ebf650c56be07a867fd8a5baa83443d68b3736e3d1dabf0d2","ssdeep":"","tlshash":"7741627d5271ac3339c3e57e9994608612761a2f7ac182f5e88d4802890e2ea67b13ad","first_seen":"2025-10-25T15:25:40.364608Z","last_seen":"2025-10-25T15:25:40.364608Z","times_seen":1,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vast.yomeno.xyz/report?katds_ep=iufiKbMlVLnkepF9yjMTOYwwhxVY3LXpg0uJ55naEWlIni3WjELCy5kMML3ib7fgpLuOA_KK2kfKB3bBCB1V6ounLvRGoJVVp2Oh2OEelDvSMGLS2um-5s4ZtDHD87PlLXuZK8lZU57mjbtijkZ-tyA-m1_DhHQzUSRDZC4uJovVRg516SL2etTx75dzLBnQW8HS6v9VHxPgMrTjkkz_T62Jh3nCri_5MBYiwlRt9Ue8qv4gzsSg0W6YJMw3TlGItyacGo23w6E4PP3vEos70L2QMjw0YTJylK13KZKT6zjhMMlsVXTcog-PDzdBnML6gbNOmrTiKUahDVigXbcEpdXfIcK9u5Q4-kpQM6BxQr4m0966V3VmbDnWERkrfYhLCA1xyz4jY-wy8g7jaqgsNIuc45qycEd_lLqNTmWB-grO78d3G1gBwMH5j1aymiVcIwc-9i4GgFGFmAIHeDKS6-jtHntuPNCeBDeQ9shesJikKy9LQoqoedhQ2A\u0026error=400","fqdn":"vast.yomeno.xyz","domain":"yomeno.xyz","tld":"xyz"},"ip":{"addr":"109.206.161.16","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:13.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"vast.yomeno.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 03:20:42 GMT","end":"Wed, 31 Dec 2025 03:20:41 GMT"},"fingerprint":{"sha1":"C1:A0:EC:3E:36:CF:B7:DB:9C:46:F0:8B:28:CB:F6:1B:E8:ED:7C:AA","sha256":"23:03:9D:AA:E7:64:11:E6:ED:B5:03:CB:DC:03:54:4F:DF:DD:5A:95:E2:68:64:09:57:1F:27:FA:72:64:91:5E"}}},"request":{"raw":"GET /report?katds_ep=iufiKbMlVLnkepF9yjMTOYwwhxVY3LXpg0uJ55naEWlIni3WjELCy5kMML3ib7fgpLuOA_KK2kfKB3bBCB1V6ounLvRGoJVVp2Oh2OEelDvSMGLS2um-5s4ZtDHD87PlLXuZK8lZU57mjbtijkZ-tyA-m1_DhHQzUSRDZC4uJovVRg516SL2etTx75dzLBnQW8HS6v9VHxPgMrTjkkz_T62Jh3nCri_5MBYiwlRt9Ue8qv4gzsSg0W6YJMw3TlGItyacGo23w6E4PP3vEos70L2QMjw0YTJylK13KZKT6zjhMMlsVXTcog-PDzdBnML6gbNOmrTiKUahDVigXbcEpdXfIcK9u5Q4-kpQM6BxQr4m0966V3VmbDnWERkrfYhLCA1xyz4jY-wy8g7jaqgsNIuc45qycEd_lLqNTmWB-grO78d3G1gBwMH5j1aymiVcIwc-9i4GgFGFmAIHeDKS6-jtHntuPNCeBDeQ9shesJikKy9LQoqoedhQ2A\u0026error=400 HTTP/1.1\r\nHost: vast.yomeno.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hd.xmovix.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.20.1\r\ndate: Sat, 25 Oct 2025 15:25:12 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nvary: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://hd.xmovix.net\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-19T12:11:11.754429Z","times_seen":15436892,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hd.xmovix.net/engine/skins/flags/de.png","fqdn":"hd.xmovix.net","domain":"xmovix.net","tld":"net"},"ip":{"addr":"104.21.75.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:09.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmovix.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 08:17:46 GMT","end":"Fri, 09 Jan 2026 09:15:17 GMT"},"fingerprint":{"sha1":"E0:29:B4:15:7B:84:A8:8E:4C:6F:38:26:B6:4C:91:E7:EA:DC:4F:33","sha256":"70:A9:AF:CC:7A:C2:CB:AF:67:4D:A8:FD:F4:27:76:A8:F5:00:78:F0:1E:1D:F5:24:64:87:2B:97:BF:99:18:EE"}}},"request":{"raw":"GET /engine/skins/flags/de.png HTTP/1.1\r\nHost: hd.xmovix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html\r\nCookie: language=en; PHPSESSID=d8d876133430e02643de56ace62d60f4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 15:25:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 602\r\nlast-modified: Sat, 16 Jun 2007 06:57:04 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=38OguBPFSM0Ple%2Fw2QqUAW0S9gw7i0qIIlj27%2FniEQmIgpqv6Btn5eTcitm0MA%2FmMLFNRG2pFuaydAihByO3ijeQk7i%2FHYXtu0RfZSE%3D\"}]}\r\netag: \"467389c0-25a\"\r\naccept-ranges: bytes\r\nage: 2340\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9942b993a993120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":602,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"8a2ba86f3b7de7562445967e2c21843b","sha1":"3046cd0b51721f180c2dc75513fd4bfd316b45b5","sha256":"cc318f3be9ba75def2af54bd9d0fab4f3e316517de9bf138e40dee06d332602d","sha512":"bbfe0899d1e796e1635d12332d6e5ecc21c78c7073419b14236660d6524861ad078644a0de96c914a07988584105a4d503a7ba9f29480be720ce541ad7ebeb5f","ssdeep":"","tlshash":"8df002a8839266668e5b12f3c0031dd44dbb0db4573f3518622ba8be0b61e0263806f0","first_seen":"2023-05-02T00:49:29Z","last_seen":"2026-05-19T09:23:51.641337Z","times_seen":1326,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hd.xmovix.net/engine/modules/antibot/antibot.php","fqdn":"hd.xmovix.net","domain":"xmovix.net","tld":"net"},"ip":{"addr":"104.21.75.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:09.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmovix.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 08:17:46 GMT","end":"Fri, 09 Jan 2026 09:15:17 GMT"},"fingerprint":{"sha1":"E0:29:B4:15:7B:84:A8:8E:4C:6F:38:26:B6:4C:91:E7:EA:DC:4F:33","sha256":"70:A9:AF:CC:7A:C2:CB:AF:67:4D:A8:FD:F4:27:76:A8:F5:00:78:F0:1E:1D:F5:24:64:87:2B:97:BF:99:18:EE"}}},"request":{"raw":"GET /engine/modules/antibot/antibot.php HTTP/1.1\r\nHost: hd.xmovix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html\r\nCookie: language=en; PHPSESSID=d8d876133430e02643de56ace62d60f4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 15:25:09 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m6xWNJECU%2FC1dRFTrBtHJvjuBvUL8cOsLnJlI3y%2BKbbDubeTm77fl45x6WlhJ73JRjaUeFj96wxJrQXjJTI9pi8PIj%2FZpzSz8JIK6uU%3D\"}]}\r\nexpires: Mon, 26 Jul 1997 05:00:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncf-ray: 9942b993b995120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5447,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 160x80, components 3","md5":"9243da7211924c8604f89fe3a9d89a5b","sha1":"bec5a9f1458bc8d0104aa20266e27aeae0fc63d1","sha256":"a1b703b097610fdf4e6d660f41a61fdd79e0f47ea2aca1ac8c4d38bdaead4cb8","sha512":"2b0569863cd815f5070fa22a9effd4fa88ad4eda02edc2bef60f4e9a8fd92236f949769f85e433a45b20aa95f8dcb07ea490eece3a6f930fa59daf81c7e924be","ssdeep":"96:mEnlZ8l7hO8SQMJztcUunt5ukBiegDFrRS8/IXx4eY/PJvibEqdLSe:mAj8lVUDztruT1BiLDFR4x4nJviAqdLn","tlshash":"f5b19fb59bbb03e33641c5965f4d7ec2e2f0cf9a4ec0148b22f01055de11a846d4c385","first_seen":"2025-10-25T15:25:40.366217Z","last_seen":"2025-10-25T15:25:40.366217Z","times_seen":1,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toughvariation.com/YE2_xGpHZ.WI5J0-ZLGMFN0OY_TQ9RyScTm-lVkWPXTYN_jaMbWcId4-NfjgFhiiN_zkAl4mYnW-YpzqNrGsI_3uNv2wEx5-ZzjAJBmCM_TEIFwGMHj-QJyKOLTMM_5O","fqdn":"toughvariation.com","domain":"toughvariation.com","tld":"com"},"ip":{"addr":"88.85.94.250","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:10.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"toughvariation.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 23:31:17 GMT","end":"Fri, 12 Dec 2025 23:31:16 GMT"},"fingerprint":{"sha1":"4F:E2:F7:1C:B2:CD:34:A1:0E:5A:E3:22:6F:3F:71:54:03:11:9B:BD","sha256":"87:C3:8E:F9:BF:57:D1:AD:AD:1F:7E:CB:8D:79:D4:10:F1:9C:A8:F3:5E:B5:A2:11:AA:E4:79:6C:7C:82:CD:F7"}}},"request":{"raw":"POST /YE2_xGpHZ.WI5J0-ZLGMFN0OY_TQ9RyScTm-lVkWPXTYN_jaMbWcId4-NfjgFhiiN_zkAl4mYnW-YpzqNrGsI_3uNv2wEx5-ZzjAJBmCM_TEIFwGMHj-QJyKOLTMM_5O HTTP/1.1\r\nHost: toughvariation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 86\r\nOrigin: https://hd.xmovix.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Oct 2025 15:25:10 GMT\r\ncontent-length: 0\r\nexpires: Mon, 26 Jul 2011 05:00:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-19T12:11:11.754429Z","times_seen":15436892,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"64.233.162.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:12.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:35:37 GMT","end":"Wed, 24 Dec 2025 14:35:36 GMT"},"fingerprint":{"sha1":"45:9C:C5:B0:D8:76:3F:BA:4B:3A:7A:47:93:65:30:95:DD:92:AF:CB","sha256":"31:5E:7E:B1:E0:22:CE:95:3B:A8:33:71:E6:32:80:DE:88:EB:4F:25:93:F9:66:CE:01:A0:31:61:3F:B3:A9:52"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:dEvpiE3gN-zD4OdhmC_ghBnfoJOK3Q:rzCuCm7GThEZjsY6; Expires=Mon, 25-Oct-2027 15:25:12 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 25 Oct 2025 15:25:12 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S270863799:1761405912190888\u0026ifkv=ARESoU3csxPBs3DIz1dWV4Hiafailj9FeZCGB5ZMnIrpg1WwY3LNEmMdELO-mdTYVM0n84xn-QmD\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-opener-policy: unsafe-none\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncontent-security-policy: script-src 'nonce-CcgInmvAd7ALXqOSyJI6Cg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-19T12:11:11.754429Z","times_seen":15436892,"resource_available":true,"data":null}},"time_used":269,"timings":{"blocked":118,"dns":0,"connect":16,"send":0,"wait":30,"receive":0,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"7bfe7b434b.058d79990c.com/946ee3a91c8a598108866c7b09e3c969/57119?version_name=c\u0026domain=hd.xmovix.net","fqdn":"7bfe7b434b.058d79990c.com","domain":"058d79990c.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:10.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"7bfe7b434b.058d79990c.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 02:15:15 GMT","end":"Tue, 20 Jan 2026 02:15:14 GMT"},"fingerprint":{"sha1":"6F:F1:C1:4C:F3:BB:72:96:7F:E0:9B:E2:EF:16:0E:0A:28:79:18:62","sha256":"3A:F9:19:95:ED:B7:77:0D:47:07:5E:B3:9B:B2:48:05:B6:0C:E3:A8:06:5A:F3:F1:58:02:0E:E1:26:B2:A9:A9"}}},"request":{"raw":"GET /946ee3a91c8a598108866c7b09e3c969/57119?version_name=c\u0026domain=hd.xmovix.net HTTP/1.1\r\nHost: 7bfe7b434b.058d79990c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hd.xmovix.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 15:25:10 GMT\r\ncontent-type: application/json\r\nserver: nginx/1.18.0\r\ncache-control: max-age=300\r\nexpires: Sat, 25 Oct 2025 15:30:10 GMT\r\nx-cdn-host-id: AH1747\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6566,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"353b7438975e6ac3f3449f35b949ec9c","sha1":"923ee0eb8876e30dff3674c362e6e45604497828","sha256":"759a625a90ce4716eb327995c03e31f0d6e77c892e5feec860db9750666dd549","sha512":"365d5d1377378379c35760c327d74104eb7a6c672ed20334cccb304c11c681beb031cd329242caac417caa8aacafd7c7e1b73d2e563d5ef4b947bef15136d815","ssdeep":"192:Yhzj9YbxDsAbKb2lGUtjnS2OC8RZiAUtknS2OC8RZsvUtPnS2OC8RZa/FXjUU7JY:szubxDsAbKb2lGUtjnS2OC8RZiAUtknv","tlshash":"5ad178ba877058b5c2f117c69c0d7f8c51a92253a184a8d6e4fccc6c46dea6a17b601f","first_seen":"2025-10-25T15:25:40.367269Z","last_seen":"2025-10-25T15:25:40.367269Z","times_seen":1,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"7bfe7b434b.058d79990c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vast.yomeno.xyz/vast","fqdn":"vast.yomeno.xyz","domain":"yomeno.xyz","tld":"xyz"},"ip":{"addr":"109.206.161.16","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:11.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"vast.yomeno.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 03:20:42 GMT","end":"Wed, 31 Dec 2025 03:20:41 GMT"},"fingerprint":{"sha1":"C1:A0:EC:3E:36:CF:B7:DB:9C:46:F0:8B:28:CB:F6:1B:E8:ED:7C:AA","sha256":"23:03:9D:AA:E7:64:11:E6:ED:B5:03:CB:DC:03:54:4F:DF:DD:5A:95:E2:68:64:09:57:1F:27:FA:72:64:91:5E"}}},"request":{"raw":"OPTIONS /vast HTTP/1.1\r\nHost: vast.yomeno.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://hd.xmovix.net/\r\nOrigin: https://hd.xmovix.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.20.1\r\ndate: Sat, 25 Oct 2025 15:25:10 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://hd.xmovix.net\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-19T12:11:11.754429Z","times_seen":15436892,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":90,"dns":12,"connect":25,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"video.sacdnssedge.com/video/ol_f2c0d95da6924428aa30976d3b0b7e50.mp4","fqdn":"video.sacdnssedge.com","domain":"sacdnssedge.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://1000fapvids.com/v.html?player_url=https%3A%2F%2Fjs.canstrm.com%2Fvast-vpaid-player%2Fmain.js","date":"2025-10-25T15:25:12.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1894120159.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 11:23:17 GMT","end":"Mon, 01 Dec 2025 11:23:16 GMT"},"fingerprint":{"sha1":"6C:F0:E6:7B:64:17:10:A8:FA:BF:27:07:10:15:AF:6E:E6:98:D4:B0","sha256":"96:D2:44:B3:D4:D6:DE:C6:FD:A7:7F:68:CE:B6:6A:C0:5A:AF:0C:DD:A8:39:FC:80:62:ED:93:CA:F6:D7:27:72"}}},"request":{"raw":"GET /video/ol_f2c0d95da6924428aa30976d3b0b7e50.mp4 HTTP/1.1\r\nHost: video.sacdnssedge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1000fapvids.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Sat, 25 Oct 2025 15:25:12 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 2417980\r\nvary: accept-encoding\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"ol_f2c0d95da6924428aa30976d3b0b7e50.mp4\"\r\netag: \"2786c0ed23bf9854c67ace1750d1c178\"\r\nexpires: Sat, 25 Oct 2025 16:21:08 GMT\r\nlast-modified: Sat, 25 Oct 2025 15:21:08 GMT\r\nx-amz-request-id: 5de9b9e4-9d7c-43ce-a499-03ac0bdcb419\r\ncache-control: max-age=7200\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncf-cache-status: HIT\r\nage: 1\r\ncf-ray: 9942b3b78a03d26c-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-77-nzt: EwwBX63NDQH37gAAAAwBuUwKDAH3BQAAAAwBT3/Y+AG3AAAAAA\r\nx-77-nzt-ray: 2a494a151c0b51dafdebfc686d6d8c33\r\nx-77-cache: HIT\r\nx-77-age: 238\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 0-2417979/2417980\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1318903,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"6b75f9a8f9203e6762e32c3c894aa04b","sha1":"4df93dfd88a88597d79de4350206276da57ef78a","sha256":"d35f3f2eb2a962592c3773e9ea6632fcf73e9b29f22fa683dd06e20a0b12702b","sha512":"51ead7fa82e91a0dbdcec5e9a6bded56b7744eb448ec6246758fdad138d9a23abbfcd6d4a5461635627addec6e8f0f31deb5367581024eb23276f0786fd6f125","ssdeep":"24576:boiwycTexJWbHhqbBGQTRLpVZuVu8c1yM/k6:DKkGhqbBvTpZspsyM86","tlshash":"6c2533e30481613ddae8127e236f023569b73515c4974c07be85b106ef496a3fba3b7a","first_seen":"2025-10-25T15:25:40.368273Z","last_seen":"2025-10-25T15:25:40.368273Z","times_seen":1,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":179,"dns":71,"connect":3,"send":0,"wait":16,"receive":34,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"video.sacdnssedge.com/video/ol_f2c0d95da6924428aa30976d3b0b7e50.mp4","fqdn":"video.sacdnssedge.com","domain":"sacdnssedge.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://1000fapvids.com/v.html?player_url=https%3A%2F%2Fjs.canstrm.com%2Fvast-vpaid-player%2Fmain.js","date":"2025-10-25T15:25:13.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1894120159.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 11:23:17 GMT","end":"Mon, 01 Dec 2025 11:23:16 GMT"},"fingerprint":{"sha1":"6C:F0:E6:7B:64:17:10:A8:FA:BF:27:07:10:15:AF:6E:E6:98:D4:B0","sha256":"96:D2:44:B3:D4:D6:DE:C6:FD:A7:7F:68:CE:B6:6A:C0:5A:AF:0C:DD:A8:39:FC:80:62:ED:93:CA:F6:D7:27:72"}}},"request":{"raw":"GET /video/ol_f2c0d95da6924428aa30976d3b0b7e50.mp4 HTTP/1.1\r\nHost: video.sacdnssedge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=2359296-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1000fapvids.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Sat, 25 Oct 2025 15:25:13 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 58684\r\nvary: accept-encoding\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"ol_f2c0d95da6924428aa30976d3b0b7e50.mp4\"\r\netag: \"2786c0ed23bf9854c67ace1750d1c178\"\r\nexpires: Sat, 25 Oct 2025 16:21:08 GMT\r\nlast-modified: Sat, 25 Oct 2025 15:21:08 GMT\r\nx-amz-request-id: 5de9b9e4-9d7c-43ce-a499-03ac0bdcb419\r\ncache-control: max-age=7200\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncf-cache-status: HIT\r\nage: 1\r\ncf-ray: 9942b3b78a03d26c-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-77-nzt: EwwBX63NDQH37wAAAAwBuUwKDAH3BQAAAAwBT3/Y+AG3AAAAAA\r\nx-77-nzt-ray: 2a494a151c0b51dafeebfc68c0773b0c\r\nx-77-cache: HIT\r\nx-77-age: 239\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 2359296-2417979/2417980\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":58684,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"7c6c087f67a2b0d34518064040d0a8d0","sha1":"c6531d798c5ff8768c4b610a3d437e54cc7db8cb","sha256":"f36c60102f54ec916474571834d9cfcc3e0ad0085953e45c53a01be3616751dc","sha512":"13fe03fa89ad26f9e342dc0866fb749431c62953bc44bc7d0522cc6780e1a3420500847b8876819aa48c854596f025d8b1ea9f2c095b1be0c4d36f43efae0501","ssdeep":"768:OKXrjiS5Nf48yWYmC1vAFfccKzud4oojH01hFHNFkLCXiXNEWxUSuGtzXKOC5ybu:vtyvmg1zDlctFM/F2CtKNZ","tlshash":"9743f5a2f7245107da921b3598e103207730ea713743474f8ad1b77eada73e6ae131e6","first_seen":"2025-10-25T15:25:40.358903Z","last_seen":"2025-10-25T15:25:40.358903Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mauc.yomeno.xyz/video/error/?token=eyJhbGciOiJIUzI1NiJ9.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.00UyMTAn_l4_M5N21F56-7w2FwW6RZxta4Wb-aMxT8U\u0026hostname=auc-video-hz-4\u0026error=400\u0026go=1\u0026session_time=1\u0026playback=NULL\u0026build_version=1.2.21_c\u0026build_type=vast","fqdn":"mauc.yomeno.xyz","domain":"yomeno.xyz","tld":"xyz"},"ip":{"addr":"168.119.45.30","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1000fapvids.com/v.html?player_url=https%3A%2F%2Fjs.canstrm.com%2Fvast-vpaid-player%2Fmain.js","date":"2025-10-25T15:25:13.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"video.infrapu.sh","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 04:31:26 GMT","end":"Tue, 16 Dec 2025 04:31:25 GMT"},"fingerprint":{"sha1":"C7:94:FE:12:A0:82:08:E5:BC:D6:E8:81:29:B6:22:BE:0B:35:31:39","sha256":"81:D3:DB:37:60:2A:97:2D:FA:9B:16:4D:79:04:0E:95:4A:89:42:2B:EC:F9:15:FC:2E:2D:AB:DD:C6:A2:5C:72"}}},"request":{"raw":"GET /video/error/?token=eyJhbGciOiJIUzI1NiJ9.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.00UyMTAn_l4_M5N21F56-7w2FwW6RZxta4Wb-aMxT8U\u0026hostname=auc-video-hz-4\u0026error=400\u0026go=1\u0026session_time=1\u0026playback=NULL\u0026build_version=1.2.21_c\u0026build_type=vast HTTP/1.1\r\nHost: mauc.yomeno.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1000fapvids.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1000fapvids.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Sat, 25 Oct 2025 15:25:13 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-19T12:11:11.754429Z","times_seen":15436892,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mildhide.pro/ecc874/49056a5b4d8b.js","fqdn":"www.mildhide.pro","domain":"mildhide.pro","tld":"pro"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:10.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mildhide.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Oct 2025 07:05:13 GMT","end":"Thu, 22 Jan 2026 07:05:12 GMT"},"fingerprint":{"sha1":"F6:20:B8:48:EA:4A:BC:D6:96:0E:60:9E:CE:D3:ED:79:09:34:42:E1","sha256":"22:8A:AC:ED:DA:E3:41:E3:FD:0E:37:EF:84:9F:06:D6:4B:87:87:4C:25:5F:33:45:7E:63:54:78:EA:2C:49:F8"}}},"request":{"raw":"GET /ecc874/49056a5b4d8b.js HTTP/1.1\r\nHost: www.mildhide.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: text/plain\r\nOrigin: https://hd.xmovix.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 15:25:10 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: Content-Type\r\ncache-control: max-age=172800\r\ncontent-encoding: gzip\r\nexpires: Mon, 27 Oct 2025 15:25:10 GMT\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":103674,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"ee0352749528bec932fc0f62e9139581","sha1":"f447926bffed648ea4b563be7109219d2a337d62","sha256":"275f218fd25090f8d309b3f7819d0295a5655b9e2ad4033c3baa3a9c9cd4da09","sha512":"c569f866c8ae243fa806677a65feb3cf1786dd2b09ced9daf8630a891887b0c6355c387d8d775c3c69e9c9c52a1f63439f615111e72a3a4f9960598916a79fbb","ssdeep":"1536:rM+iZ3YOYuyx6PUQwRxcs8P3nhkQ8vL7T7Q6eGozzwVEnHzHRbPvR:OijxEQq3P5Enne9zkWHLb","tlshash":"57a33461350b64fd2ad0c1e7eb6b20886c295810e469cca1ecd1d7c7d6eb8e3429b5f7","first_seen":"2025-10-24T08:51:33.497553Z","last_seen":"2025-10-27T05:35:07.761275Z","times_seen":41,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":88,"dns":40,"connect":19,"send":0,"wait":19,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vast.yomeno.xyz/vast","fqdn":"vast.yomeno.xyz","domain":"yomeno.xyz","tld":"xyz"},"ip":{"addr":"109.206.161.16","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:11.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"vast.yomeno.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 03:20:42 GMT","end":"Wed, 31 Dec 2025 03:20:41 GMT"},"fingerprint":{"sha1":"C1:A0:EC:3E:36:CF:B7:DB:9C:46:F0:8B:28:CB:F6:1B:E8:ED:7C:AA","sha256":"23:03:9D:AA:E7:64:11:E6:ED:B5:03:CB:DC:03:54:4F:DF:DD:5A:95:E2:68:64:09:57:1F:27:FA:72:64:91:5E"}}},"request":{"raw":"OPTIONS /vast HTTP/1.1\r\nHost: vast.yomeno.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://hd.xmovix.net/\r\nOrigin: https://hd.xmovix.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.20.1\r\ndate: Sat, 25 Oct 2025 15:25:10 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://hd.xmovix.net\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-19T12:11:11.754429Z","times_seen":15436892,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":92,"dns":18,"connect":25,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mauc.yomeno.xyz/video/error/?token=eyJhbGciOiJIUzI1NiJ9.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.If1Qd7EPM8_lFMEfbMLwEWWRrAx1U20Q-bqbHVuKe9s\u0026hostname=auc-video-hz-8\u0026error=400\u0026go=1\u0026session_time=1\u0026playback=NULL\u0026build_version=1.2.21_c\u0026build_type=vast","fqdn":"mauc.yomeno.xyz","domain":"yomeno.xyz","tld":"xyz"},"ip":{"addr":"168.119.45.30","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1000fapvids.com/v.html?player_url=https%3A%2F%2Fjs.canstrm.com%2Fvast-vpaid-player%2Fmain.js","date":"2025-10-25T15:25:13.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"video.infrapu.sh","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 04:31:26 GMT","end":"Tue, 16 Dec 2025 04:31:25 GMT"},"fingerprint":{"sha1":"C7:94:FE:12:A0:82:08:E5:BC:D6:E8:81:29:B6:22:BE:0B:35:31:39","sha256":"81:D3:DB:37:60:2A:97:2D:FA:9B:16:4D:79:04:0E:95:4A:89:42:2B:EC:F9:15:FC:2E:2D:AB:DD:C6:A2:5C:72"}}},"request":{"raw":"GET /video/error/?token=eyJhbGciOiJIUzI1NiJ9.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.If1Qd7EPM8_lFMEfbMLwEWWRrAx1U20Q-bqbHVuKe9s\u0026hostname=auc-video-hz-8\u0026error=400\u0026go=1\u0026session_time=1\u0026playback=NULL\u0026build_version=1.2.21_c\u0026build_type=vast HTTP/1.1\r\nHost: mauc.yomeno.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1000fapvids.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1000fapvids.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Sat, 25 Oct 2025 15:25:13 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-19T12:11:11.754429Z","times_seen":15436892,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hd.xmovix.net/templates/XmovixHD/ajax/fullstory.css","fqdn":"hd.xmovix.net","domain":"xmovix.net","tld":"net"},"ip":{"addr":"104.21.75.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:09.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmovix.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 08:17:46 GMT","end":"Fri, 09 Jan 2026 09:15:17 GMT"},"fingerprint":{"sha1":"E0:29:B4:15:7B:84:A8:8E:4C:6F:38:26:B6:4C:91:E7:EA:DC:4F:33","sha256":"70:A9:AF:CC:7A:C2:CB:AF:67:4D:A8:FD:F4:27:76:A8:F5:00:78:F0:1E:1D:F5:24:64:87:2B:97:BF:99:18:EE"}}},"request":{"raw":"GET /templates/XmovixHD/ajax/fullstory.css HTTP/1.1\r\nHost: hd.xmovix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html\r\nCookie: language=en; PHPSESSID=d8d876133430e02643de56ace62d60f4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 15:25:09 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Mon, 13 May 2024 14:49:28 GMT\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"66422878-2bb\"\r\nage: 601\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w6ndpq9X2PIO8EzzSDioaR9isatCQ%2BGbzw6vX2e6HYy2Bm3F4Id%2B2yVzHdOa9DqRLtiTj2niuLE2fzYRlZPbbRWhDJmttQ6P%2BBiI4qQ%3D\"}]}\r\ncf-ray: 9942b993a991120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":699,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"5895e609b6e675026c7232ca95bb4b8a","sha1":"72fdaa06889983642142abc8b3ff8ff8ecefbbbc","sha256":"b3a8cc6c1c494078bd144b9cd156a597bf49b737743ceeb92ea0a2f5e77ea35d","sha512":"877795d7af267e91000dfd07d6e292beac0cdc4e99bb1ddbce7876b16ba2a8647d96ed0505f207c8b8c0933f3f8c3e305b29b4e7c121b18f088f85d6e8bc7645","ssdeep":"","tlshash":"4a012b528579204f6209aad7f7356301aa9b00fdbd3413be74f4283673eb0749d3a44a","first_seen":"2025-09-30T21:49:22.178018Z","last_seen":"2026-02-12T03:34:09.513898Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hd.xmovix.net/engine/classes/min/index.php?g=general\u0026v=d4b43","fqdn":"hd.xmovix.net","domain":"xmovix.net","tld":"net"},"ip":{"addr":"104.21.75.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:09.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmovix.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 08:17:46 GMT","end":"Fri, 09 Jan 2026 09:15:17 GMT"},"fingerprint":{"sha1":"E0:29:B4:15:7B:84:A8:8E:4C:6F:38:26:B6:4C:91:E7:EA:DC:4F:33","sha256":"70:A9:AF:CC:7A:C2:CB:AF:67:4D:A8:FD:F4:27:76:A8:F5:00:78:F0:1E:1D:F5:24:64:87:2B:97:BF:99:18:EE"}}},"request":{"raw":"GET /engine/classes/min/index.php?g=general\u0026v=d4b43 HTTP/1.1\r\nHost: hd.xmovix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html\r\nCookie: language=en; PHPSESSID=d8d876133430e02643de56ace62d60f4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 15:25:09 GMT\r\ncontent-type: application/x-javascript; charset=utf-8\r\ncontent-length: 29779\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2aRiSvvqyxqjTFphhsAYwwJmtEWpNVf64vYFz9rI54HJEn3G6qaOoefEcz7BLc9UWmPt%2F8vuQE6nqhJZD2LMLdX4pK2dl1PeyVKfzKo%3D\"}]}\r\nexpires: Sun, 25 Oct 2026 15:25:09 GMT\r\nvary: Accept-Encoding\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 16 Mar 2023 10:38:22 GMT\r\netag: \"pub1678963102;gz\"\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9942b99469c5120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85582,"size_decoded":0,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32065), with CRLF line terminators","md5":"710458dd559c957714ac4a8e95357eb5","sha1":"f694238d616f579a0690001f37984af430c19963","sha256":"b409c14a10b4caad6b54844aa63a5faf748b83eecc2dd0d4fb1d913f8de55365","sha512":"282d65828a43bfe50fe0f9aea8bca3838ac1b5250e7c7c359c066e0428aa723f001d31c2463681b2ad6816a49a8571bf9f3ae29b2dc53adf1bbd7d5c4471322b","ssdeep":"1536:fYE1JVoiB9JqZdXXe2pD3PgoIiulrUn6Z6a4tfOR7WpfWBZPBJda4w9W3qG9a98N:u4J+rlfOhWpgCW6G9a98Hrp","tlshash":"3583c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","first_seen":"2023-03-07T01:03:07Z","last_seen":"2026-05-19T09:47:47.050039Z","times_seen":12088,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"7bfe7b434b.058d79990c.com/3b77b748fd23af620fed9fbdcc003fa0.js","fqdn":"7bfe7b434b.058d79990c.com","domain":"058d79990c.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:10.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"7bfe7b434b.058d79990c.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 02:15:15 GMT","end":"Tue, 20 Jan 2026 02:15:14 GMT"},"fingerprint":{"sha1":"6F:F1:C1:4C:F3:BB:72:96:7F:E0:9B:E2:EF:16:0E:0A:28:79:18:62","sha256":"3A:F9:19:95:ED:B7:77:0D:47:07:5E:B3:9B:B2:48:05:B6:0C:E3:A8:06:5A:F3:F1:58:02:0E:E1:26:B2:A9:A9"}}},"request":{"raw":"GET /3b77b748fd23af620fed9fbdcc003fa0.js HTTP/1.1\r\nHost: 7bfe7b434b.058d79990c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 15:25:10 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Thu, 23 Oct 2025 08:52:32 GMT\r\netag: W/\"68f9ecd0-3c6ec\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 25 Oct 2025 15:30:10 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1747\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":247532,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"830105b76b7c59a0cb3a166d5515ea0e","sha1":"5d8fb2a3a41ad81ad56b06b6e6c2487593b9b728","sha256":"124a3ef9207187dfe609d1de18efa33b2e74460d3bd84b16579ef23937359702","sha512":"d034334fa538dbbc6811053953d8ff5d59212969c324bea5e4854681e3545a2047f0fab45b0de633afbe92f7ca014de79c48d68b22169e27aaa0001d07c89fd3","ssdeep":"3072:n4Z6mTX7Q5Q7Q7Xsvr8LDkpiBG3n5Sa+MFmswVYVC2SQpBUL:4Ym45Q7ykdV+AWEpBK","tlshash":"7b346dd1369078b00593c0afd4770201b2382609b52eb56cb6bddee66586dce237bf79","first_seen":"2025-10-23T10:57:14.860136Z","last_seen":"2025-10-27T08:33:06.793903Z","times_seen":82,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"7bfe7b434b.058d79990c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"js.canstrm.com/pb/downloads/latest/clickadilla-vast.min.js","fqdn":"js.canstrm.com","domain":"canstrm.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:11.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.canstrm.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Sep 2025 08:33:52 GMT","end":"Tue, 09 Dec 2025 08:33:51 GMT"},"fingerprint":{"sha1":"77:E5:B7:94:76:6E:36:F8:B0:2C:2C:29:69:5D:3B:80:BD:22:15:EA","sha256":"6A:83:45:3C:74:3D:F0:5B:B7:0F:11:32:46:C3:A0:EB:34:79:D5:B8:F1:07:6C:8A:CE:83:D6:0F:42:E6:8B:F7"}}},"request":{"raw":"GET /pb/downloads/latest/clickadilla-vast.min.js HTTP/1.1\r\nHost: js.canstrm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 15:25:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Mon, 13 Oct 2025 14:31:52 GMT\r\netag: W/\"68ed0d58-4269e\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 25 Oct 2025 15:30:11 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":272030,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63842)","md5":"a807f4f9dce88b30ba1ff01d75fe072f","sha1":"3795ce66f6cdd0ad1641d6a8c14ab1752bffa353","sha256":"433452c3b9382cad1ef08bc1360b7768b8b04b11de5004e6c4d3c37ac64d198f","sha512":"02c99e975a0b8527b552ceaefcf3ab6b72b314c6d17f0dbeb4472bce6e6d03c9597fe7747388a3730ccfaacc13f2d8e1c043952ffa5f978b2354f25b477d09f7","ssdeep":"6144:oc2LH9F8sAvooiPQCCu2onfIAp3ORBT7SQUrIbl/W48Y4:oc2LH9F8sAvooiPQCCu2onfIAFCE28Y4","tlshash":"6444189872c2f07542e3a0b5803f110bf33a295a680d5550f66dddd6beb898a8237f7d","first_seen":"2025-10-14T07:00:30.712117Z","last_seen":"2025-11-01T18:03:28.032355Z","times_seen":17,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.forscprts.com/easy?campaignId=25bdc61ed3917811c8f3f36a1e6e0fb40a4bf9db56e01082448f446fc27cc57b\u0026userId=a29e4fa1023dd45be975c4ab2c3f63fc721842490735020a0d0703eb57f7300d\u0026memberId=0641fd45b4f9d390c01c65\u0026sourceId=100863\u0026p1=60690\u0026p2=113256\u0026p3=101783","fqdn":"go.forscprts.com","domain":"forscprts.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1000fapvids.com/v.html?player_url=https%3A%2F%2Fjs.canstrm.com%2Fvast-vpaid-player%2Fmain.js","date":"2025-10-25T15:25:12.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.forscprts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 20:58:53 GMT","end":"Fri, 12 Dec 2025 21:19:55 GMT"},"fingerprint":{"sha1":"AD:2E:E6:89:40:EE:99:C2:2F:D5:3E:7F:72:5E:7A:8B:D9:8F:CF:F7","sha256":"40:2F:2D:5E:AB:0A:F5:22:4B:8E:CA:F1:13:FC:E5:AA:5D:30:90:AE:83:A7:8D:A8:17:49:54:0E:FA:65:A3:66"}}},"request":{"raw":"GET /easy?campaignId=25bdc61ed3917811c8f3f36a1e6e0fb40a4bf9db56e01082448f446fc27cc57b\u0026userId=a29e4fa1023dd45be975c4ab2c3f63fc721842490735020a0d0703eb57f7300d\u0026memberId=0641fd45b4f9d390c01c65\u0026sourceId=100863\u0026p1=60690\u0026p2=113256\u0026p3=101783 HTTP/1.1\r\nHost: go.forscprts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1000fapvids.com/\r\nOrigin: https://1000fapvids.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sat, 25 Oct 2025 15:25:12 GMT\r\ncontent-length: 0\r\nlocation: https://go.forscprts.com/api/models/vast?action=sbSignupWithModelSoft\u0026campaignId=25bdc61ed3917811c8f3f36a1e6e0fb40a4bf9db56e01082448f446fc27cc57b\u0026campaignType=smartpop\u0026creativeId=848c9861daeb8c71077e63185fe70108f0fc581bfa4a1361d3aad7791cbd1e0d\u0026duration=00%3A00%3A30\u0026iterationId=1075275\u0026masterSmartpopId=2683\u0026memberId=0641fd45b4f9d390c01c65\u0026p1=60690\u0026p2=113256\u0026p3=101783\u0026ruleId=29\u0026skipOffset=00%3A00%3A05\u0026smartpopId=14005\u0026sourceId=100863\u0026tag=girls\u0026trafficType=preroll\u0026usePreroll=true\u0026userId=a29e4fa1023dd45be975c4ab2c3f63fc721842490735020a0d0703eb57f7300d\u0026variationId=34733\u0026videoType=ol\r\ncf-ray: 9942b9a8093b0b02-OSL\r\naccess-control-allow-origin: https://1000fapvids.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2278,"size_decoded":0,"mime_type":"text/xml; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-19T12:11:11.754429Z","times_seen":15436892,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hd.xmovix.net/templates/XmovixHD/ajax/magnificpopup.css","fqdn":"hd.xmovix.net","domain":"xmovix.net","tld":"net"},"ip":{"addr":"104.21.75.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:09.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmovix.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 08:17:46 GMT","end":"Fri, 09 Jan 2026 09:15:17 GMT"},"fingerprint":{"sha1":"E0:29:B4:15:7B:84:A8:8E:4C:6F:38:26:B6:4C:91:E7:EA:DC:4F:33","sha256":"70:A9:AF:CC:7A:C2:CB:AF:67:4D:A8:FD:F4:27:76:A8:F5:00:78:F0:1E:1D:F5:24:64:87:2B:97:BF:99:18:EE"}}},"request":{"raw":"GET /templates/XmovixHD/ajax/magnificpopup.css HTTP/1.1\r\nHost: hd.xmovix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html\r\nCookie: language=en; PHPSESSID=d8d876133430e02643de56ace62d60f4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 15:25:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 13 May 2024 14:49:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e8SdH0cqSpliu1%2FuAPUkFm28NDaiTJasMXc2Q5UnYdN42yb73Pah7X%2BlvqnpCROzUMrKd%2BYBykVrLaPoQqmB5Mrj7aM6ujtVdF7alTk%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"66422878-1b2d\"\r\ncontent-encoding: gzip\r\nage: 601\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 9942b993a992120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6957,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"cf71374be575e26cc425d68975d7f401","sha1":"f4c7f401181469fbb07af3fde8bd2fdccd43efcd","sha256":"5de3a311df1bdf62e22066a16e304fb6dc4de67278dfd4cc209cfaf557cc324a","sha512":"114cc5ced021c226c3d389628a8ce591890909ede565cdb2f9ed524e1fc48bc495eac5368acdd9addf45fda602dc1789990bc4548c1d3b6bd53d389edfe60296","ssdeep":"192:/B4yBQvRUOtX48eqfceXQ28oBmKMB4qJhByajBiq/ioB9ZBShuCTtrEXpS0it:JDQvRUOP8osL4qJXj9L/ic9/S4C8u","tlshash":"42e1f067fb61234ad113a7d8f7f39b359e161072a30b44affad22c09e2c854816763d9","first_seen":"2025-09-30T21:49:22.155918Z","last_seen":"2026-02-12T03:34:09.514676Z","times_seen":4,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hd.xmovix.net/templates/XmovixHD/images/poster.webp","fqdn":"hd.xmovix.net","domain":"xmovix.net","tld":"net"},"ip":{"addr":"104.21.75.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:09.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmovix.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 08:17:46 GMT","end":"Fri, 09 Jan 2026 09:15:17 GMT"},"fingerprint":{"sha1":"E0:29:B4:15:7B:84:A8:8E:4C:6F:38:26:B6:4C:91:E7:EA:DC:4F:33","sha256":"70:A9:AF:CC:7A:C2:CB:AF:67:4D:A8:FD:F4:27:76:A8:F5:00:78:F0:1E:1D:F5:24:64:87:2B:97:BF:99:18:EE"}}},"request":{"raw":"GET /templates/XmovixHD/images/poster.webp HTTP/1.1\r\nHost: hd.xmovix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/templates/XmovixHD/style/styles.css\r\nCookie: language=en; PHPSESSID=d8d876133430e02643de56ace62d60f4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 15:25:09 GMT\r\ncontent-length: 8584\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L0WlZmchM4G3sbhZbi8CRQpClhE1kaAMT985U5riAoz1KVWiA80Ql7ICEfMa%2BXnk71C6olIzOT9LhAG8Q4Uy%2BNUcNq3KqbDB58KNbU0%3D\"}]}\r\nlast-modified: Fri, 15 Mar 2024 14:00:50 GMT\r\netag: \"2188-613b36f70c880\"\r\naccept-ranges: bytes\r\nage: 601\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9942b99439bc120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8584,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x711, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7f44a3cfa0466aa16f727142557b2556","sha1":"ffdfd9a881981eab868eefc81517954e1e767a29","sha256":"28bf4fa8e8c5540f7f4f2f5a6013327a525850b6aac9154a313d4502b71eddb6","sha512":"f04a179489eaed1b42a3dbb29b3d7d994791e9f2ecc213adbe2d0c1d4271c5c2be8f6b848810cf0725bda1702ae54aedc6cadd8b29d19beb7c0e59e6f73a3e9e","ssdeep":"192:mAV08Fj5riAeBf3BZkAAAAu8ElFl1B2onQpwwyGNaxi5VE:qi5GJ5zluo3GNae","tlshash":"81025ce7bd1654aceed0273e3fe9b0142de74e4069164a2e5170a305dbd4ceb8b2c29d","first_seen":"2023-06-27T01:50:01Z","last_seen":"2026-01-11T22:31:43.374571Z","times_seen":6,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maucn.yomeno.xyz/in/dip?event_id=90390e69-bf07-4c28-94b3-bdc615fbd71d","fqdn":"maucn.yomeno.xyz","domain":"yomeno.xyz","tld":"xyz"},"ip":{"addr":"168.119.45.30","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:11.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"video.infrapu.sh","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 04:31:26 GMT","end":"Tue, 16 Dec 2025 04:31:25 GMT"},"fingerprint":{"sha1":"C7:94:FE:12:A0:82:08:E5:BC:D6:E8:81:29:B6:22:BE:0B:35:31:39","sha256":"81:D3:DB:37:60:2A:97:2D:FA:9B:16:4D:79:04:0E:95:4A:89:42:2B:EC:F9:15:FC:2E:2D:AB:DD:C6:A2:5C:72"}}},"request":{"raw":"GET /in/dip?event_id=90390e69-bf07-4c28-94b3-bdc615fbd71d HTTP/1.1\r\nHost: maucn.yomeno.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hd.xmovix.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Sat, 25 Oct 2025 15:25:11 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-19T12:11:11.754429Z","times_seen":15436892,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":61,"dns":1,"connect":25,"send":0,"wait":25,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pointcontinentrtb.com/v1/track/impression?data=eyJhbGciOiJIUzI1NiJ9.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.u10DnqvX9dXi90gFTjd1vINxUc3MzlgNE8RR70QlmbA\u0026sp=2.6999999999999996e-05","fqdn":"pointcontinentrtb.com","domain":"pointcontinentrtb.com","tld":"com"},"ip":{"addr":"148.251.254.38","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:11.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pointcontinentrtb.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 02:36:56 GMT","end":"Tue, 13 Jan 2026 02:36:55 GMT"},"fingerprint":{"sha1":"10:3C:6C:45:89:88:DF:E7:81:55:79:A9:7C:DC:2F:83:4A:46:54:F3","sha256":"40:9B:6D:FB:42:41:0E:7F:8E:6C:AD:17:0E:A1:BD:A6:42:50:01:8C:9B:DA:8A:6E:7E:D6:3F:B0:21:97:20:0C"}}},"request":{"raw":"GET /v1/track/impression?data=eyJhbGciOiJIUzI1NiJ9.eyJhbCI6ImVuLVVTIiwiYXQiOjE3NjE0MDU5MTEyNTUsImJ2IjoiMTM0LjAuMCIsImNyIjowLCJjcnMiOjAsImNyc2VnIjoidW5rbm93biIsImNzIjoiVzNzaWJDSTZNQ3dpZENJNkltNXZibVVpTENKa0lqb3dmVjA9IiwiY3RwIjpmYWxzZSwiY3UiOiJpcCt1YSIsImRwIjoiZGlyZWN0IiwiZHQiOjE3NjE0OTIzMTEyNTUsImVjcGEiOjAsImVyIjoiMzI0MDkyOTU1MDgzODI3NjkwMCIsImVzIjoiMTc5MTAiLCJpIjoiNzMxNDU1OTIwOjE4Njo3Njg3MjkxMzk4MDQ2NzM1MzE1OjgxMzQ3OjIxNTcyMjoxMzk1MTM4MjkzMTYyMzU4MzYwMzoxOTUxMDo6IiwiaWNzIjowLCJpcCI6IjkxLjkwLjQyLjE1NCIsImlwdjYiOiI6OiIsImp0aSI6ImM4MWQ5MjEyLTY1NWYtNDdmMC1iODE1LTQ0NGQ2NzA4NmVjYiIsInAiOjAuMDAwMDI3LCJwciI6ZmFsc2UsInJwIjowLjAwMDAyNjk5OTk5OTk5OTk5OTk5NiwicyI6ZmFsc2UsInNkIjotMSwic3AiOiJ7fSIsInQiOiJpbnBhZ2VfYWR1bHRfaHFfdjI6Y3BjIiwidHAiOjAuMDAxMzQ5NzQ4NjMxMTQwODEyNCwidHJpZCI6InRjYi1kc3AtaHotMTUiLCJ1IjoiaHR0cHM6Ly9hc3NldHMuYWhteWJpZC5uZXQvYTZhMjhmMTUtMjM3Yi00NzA4LThhOWMtZjEyZDQ0NDJiZjgyLmpwZyIsInVhIjoiTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NDsgcnY6MTM0LjApIEdlY2tvLzIwMTAwMTAxIEZpcmVmb3gvMTM0LjAiLCJ1aCI6IjZlZjVjOTg5YmU4OGNmZjU5YTY5NDQxZTU4NGM0YmNkIiwidWkiOiI3YjZkYWE1Ni00MWY0LTU2MjAtYmUzYy03ODZlODRkYjAyOTkiLCJ1ciI6IjE4NjppbnBhZ2VfYWR1bHRfaHFfdjI6NzMxNDU1OTIwOnRydWU6IiwidiI6IiIsInZmIjoiIn0.u10DnqvX9dXi90gFTjd1vINxUc3MzlgNE8RR70QlmbA\u0026sp=2.6999999999999996e-05 HTTP/1.1\r\nHost: pointcontinentrtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx/1.24.0\r\nDate: Sat, 25 Oct 2025 15:25:11 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 0\r\nConnection: keep-alive\r\nVary: Origin\r\nLocation: https://assets.ahmybid.net/a6a28f15-237b-4708-8a9c-f12d4442bf82.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15768,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-19T12:11:11.754429Z","times_seen":15436892,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":83,"dns":27,"connect":24,"send":0,"wait":24,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trk-web.com/win/ENEhxIY9m4ZTpWfDht2LHxp2kpitZ3hx1UUr7RA1zUq5UOvsNcbs9RQ0Hw9YrolV0mvdon_ymN5932WasApKqqlLlE4WFWbUDU-jF02qHZTEwn9sugjtFIDM9vXzuRJsob5Sc2ilHtQBpP8rkD5UlkgAIn6n-NTC75lrA79T_MeGBQ?aprice=0.6719999999999999\u0026amtw=${AUCTION_MIN_TO_WIN}\u0026e=600415\u0026advt=5","fqdn":"trk-web.com","domain":"trk-web.com","tld":"com"},"ip":{"addr":"209.192.200.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:11.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trk-web.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Oct 2025 14:14:27 GMT","end":"Mon, 05 Jan 2026 14:14:26 GMT"},"fingerprint":{"sha1":"36:49:BA:1F:E0:B7:7F:EF:BA:21:71:D0:1C:90:86:F3:C7:FF:4E:17","sha256":"9F:19:9A:16:2F:FE:36:E7:06:2A:D8:43:01:A0:F6:94:34:AF:B4:9C:AF:8B:EF:A5:99:E7:1D:98:6D:EE:C3:B4"}}},"request":{"raw":"GET /win/ENEhxIY9m4ZTpWfDht2LHxp2kpitZ3hx1UUr7RA1zUq5UOvsNcbs9RQ0Hw9YrolV0mvdon_ymN5932WasApKqqlLlE4WFWbUDU-jF02qHZTEwn9sugjtFIDM9vXzuRJsob5Sc2ilHtQBpP8rkD5UlkgAIn6n-NTC75lrA79T_MeGBQ?aprice=0.6719999999999999\u0026amtw=${AUCTION_MIN_TO_WIN}\u0026e=600415\u0026advt=5 HTTP/1.1\r\nHost: trk-web.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 25 Oct 2025 15:25:11 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-19T12:11:11.754429Z","times_seen":15436892,"resource_available":true,"data":null}},"time_used":683,"timings":{"blocked":277,"dns":0,"connect":126,"send":0,"wait":126,"receive":0,"ssl":151},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kts.bartcons.com/in/vmon/?title=SPREAD%20LEGS%20%2B%20SPANK%20WET%20PUSSY%20IN%20PANTIES\u0026system=SSP%20LINK%20Wrapper%2Ctwinrdengine%2Cstripcash.com\u0026type=vast\u0026mediafile=https%3A%2F%2Fvideo.sacdnssedge.com%2Fvideo%2Fol_f2c0d95da6924428aa30976d3b0b7e50.mp4\u0026click=https%3A%2F%2Fgo.forscprts.com%2F%3FabTest%3Dlandingvast_default260925%26abTestVariant%3Dlandingvast_default260925_default_52%26action%3DsbSignupWithModelSoft%26campaignId%3D25bdc61ed3917811c8f3f36a1e6e0fb40a4bf9db56e01082448f446fc27cc57b%26campaignType%3Dsmartpop%26creativeId%3D848c9861daeb8c71077e63185fe70108f0fc581bfa4a1361d3aad7791cbd1e0d%26iterationId%3D1075275%26landing%3DlandingVAST%26masterSmartpopId%3D2683%26memberId%3D0641fd45b5021542f8843f%26modelId%3D163955134%26onlineModels%3DAsian_Asami%26p1%3D60690%26p2%3D113256%26p3%3D101783%26referrer%3Dhttps%253A%252F%252F1000fapvids.com%252F%26ruleId%3D29%26segment%3Dhls-Asian_Asami-1%26smartpopId%3D14005%26sourceId%3D100863%26stripcashR%3D1%26tag%3Dgirls%26trafficType%3Dpreroll%26userId%3Da29e4fa1023dd45be975c4ab2c3f63fc721842490735020a0d0703eb57f7300d%26variationId%3D34733\u0026katds_ep=N8rErfuAgFiOqQUpAEtS1VRgFEi6MeyMRgtDbPivnx7ew9v268xH200IvenWdxxKTlpNEwPczpFh___Um-FP5-X0FQApjH9BkopUJIkj5yOnr9KJczz55UgUVj0gxSaaXzMwvDYh","fqdn":"kts.bartcons.com","domain":"bartcons.com","tld":"com"},"ip":{"addr":"62.122.168.42","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:12.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kts.bartcons.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Oct 2025 03:13:06 GMT","end":"Tue, 06 Jan 2026 03:13:05 GMT"},"fingerprint":{"sha1":"DA:BF:79:90:17:62:56:16:70:20:05:59:A0:3D:03:F1:FF:04:46:11","sha256":"C3:40:A4:D4:07:FB:03:20:94:50:01:29:38:94:4D:06:F3:76:FE:0F:19:CB:76:63:02:45:50:A7:F1:76:54:48"}}},"request":{"raw":"GET /in/vmon/?title=SPREAD%20LEGS%20%2B%20SPANK%20WET%20PUSSY%20IN%20PANTIES\u0026system=SSP%20LINK%20Wrapper%2Ctwinrdengine%2Cstripcash.com\u0026type=vast\u0026mediafile=https%3A%2F%2Fvideo.sacdnssedge.com%2Fvideo%2Fol_f2c0d95da6924428aa30976d3b0b7e50.mp4\u0026click=https%3A%2F%2Fgo.forscprts.com%2F%3FabTest%3Dlandingvast_default260925%26abTestVariant%3Dlandingvast_default260925_default_52%26action%3DsbSignupWithModelSoft%26campaignId%3D25bdc61ed3917811c8f3f36a1e6e0fb40a4bf9db56e01082448f446fc27cc57b%26campaignType%3Dsmartpop%26creativeId%3D848c9861daeb8c71077e63185fe70108f0fc581bfa4a1361d3aad7791cbd1e0d%26iterationId%3D1075275%26landing%3DlandingVAST%26masterSmartpopId%3D2683%26memberId%3D0641fd45b5021542f8843f%26modelId%3D163955134%26onlineModels%3DAsian_Asami%26p1%3D60690%26p2%3D113256%26p3%3D101783%26referrer%3Dhttps%253A%252F%252F1000fapvids.com%252F%26ruleId%3D29%26segment%3Dhls-Asian_Asami-1%26smartpopId%3D14005%26sourceId%3D100863%26stripcashR%3D1%26tag%3Dgirls%26trafficType%3Dpreroll%26userId%3Da29e4fa1023dd45be975c4ab2c3f63fc721842490735020a0d0703eb57f7300d%26variationId%3D34733\u0026katds_ep=N8rErfuAgFiOqQUpAEtS1VRgFEi6MeyMRgtDbPivnx7ew9v268xH200IvenWdxxKTlpNEwPczpFh___Um-FP5-X0FQApjH9BkopUJIkj5yOnr9KJczz55UgUVj0gxSaaXzMwvDYh HTTP/1.1\r\nHost: kts.bartcons.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hd.xmovix.net/\r\nOrigin: https://hd.xmovix.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.20.1\r\ndate: Sat, 25 Oct 2025 15:25:13 GMT\r\nvary: *\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://hd.xmovix.net\r\npragma: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-19T12:11:11.754429Z","times_seen":15436892,"resource_available":true,"data":null}},"time_used":497,"timings":{"blocked":212,"dns":0,"connect":25,"send":0,"wait":78,"receive":0,"ssl":178},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"kts.bartcons.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hd.xmovix.net/templates/XmovixHD/images/favicon.png","fqdn":"hd.xmovix.net","domain":"xmovix.net","tld":"net"},"ip":{"addr":"104.21.75.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:09.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmovix.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 08:17:46 GMT","end":"Fri, 09 Jan 2026 09:15:17 GMT"},"fingerprint":{"sha1":"E0:29:B4:15:7B:84:A8:8E:4C:6F:38:26:B6:4C:91:E7:EA:DC:4F:33","sha256":"70:A9:AF:CC:7A:C2:CB:AF:67:4D:A8:FD:F4:27:76:A8:F5:00:78:F0:1E:1D:F5:24:64:87:2B:97:BF:99:18:EE"}}},"request":{"raw":"GET /templates/XmovixHD/images/favicon.png HTTP/1.1\r\nHost: hd.xmovix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html\r\nCookie: language=en; PHPSESSID=d8d876133430e02643de56ace62d60f4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 15:25:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 8367\r\nlast-modified: Fri, 15 Mar 2024 14:00:50 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tYTGl7caAYOmwi8oyowDndVTuWFWYd%2FFPEhPPwZxxToDIPhRHopYRWDp9giuZti3tBB4LmTSX70CFJxz0KNz2e0RLvQUn3%2BW2qR6hmo%3D\"}]}\r\netag: \"65f45492-20af\"\r\naccept-ranges: bytes\r\nage: 2340\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9942b99579ea120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8367,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced","md5":"48ffb731fe113ba3d2d7f729e584f522","sha1":"46d089ad930b5d7fb108d8bc84bb0600c0cd1db2","sha256":"35c9e8e496df19a199636a1ca82fd2fae66f40f7278eaee0f2e650338f8c32aa","sha512":"63dea4cf2f35eb7283f60473257fa83f3a7fc189609435f5b6bcbf56bf65d53280898d003aee2017e27f07ece3b2497a2282a2a8eda1bb9cdb203eaed3292b89","ssdeep":"192:FKvBbvsRxZu1oRMQk1d1KAcEFwjDWE8WAiKOsAWeJQ7NZ7ovP:85ATZTMoA5wGE8WAiKODWeJAw","tlshash":"8302ae5be522f987c70cbb251ed020665e07c0ad874b5171af7c24a65b3f3bb4858a8a","first_seen":"2023-06-27T01:50:01Z","last_seen":"2026-02-12T03:34:09.500212Z","times_seen":9,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"7bfe7b434b.058d79990c.com/0ebcb703658e111af5aefc436fcde806.js","fqdn":"7bfe7b434b.058d79990c.com","domain":"058d79990c.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:10.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"7bfe7b434b.058d79990c.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 02:15:15 GMT","end":"Tue, 20 Jan 2026 02:15:14 GMT"},"fingerprint":{"sha1":"6F:F1:C1:4C:F3:BB:72:96:7F:E0:9B:E2:EF:16:0E:0A:28:79:18:62","sha256":"3A:F9:19:95:ED:B7:77:0D:47:07:5E:B3:9B:B2:48:05:B6:0C:E3:A8:06:5A:F3:F1:58:02:0E:E1:26:B2:A9:A9"}}},"request":{"raw":"GET /0ebcb703658e111af5aefc436fcde806.js HTTP/1.1\r\nHost: 7bfe7b434b.058d79990c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hd.xmovix.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 15:25:10 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Mon, 20 Oct 2025 10:58:05 GMT\r\netag: W/\"68f615bd-24858\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 25 Oct 2025 15:30:10 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1747\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":149592,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c90d1ef9543d7d56a6869ed4be6f7847","sha1":"6ff159593c9698ad541e6d3c149847b110c3deb6","sha256":"e7e748a324a548da8ce1ccc081a1339bf22142939106758ba1803fabafc42b2e","sha512":"8ac7ce5a0c7bc4daabb49051583a693f53e9d884f8deb32158c604abe682bfd2969dc1ac4e6ea8c50c0e63684ddd7424770fa0d7fbaf42c113e8118e981f0dbc","ssdeep":"1536:Z2c1pgoXEptQy9RixdpOkxQKf7YbK2Ec+tskajUOPVKIZujAB5R1pKKfVf3dnCjH:eRizplOK8mvDtsjbnujATLQ3+da","tlshash":"64e33ac9b2d2b47407e75099d43f1206f33a1a16b80c9058f6a6e9c17878ddb9237f7a","first_seen":"2025-10-20T14:02:56.309645Z","last_seen":"2025-11-06T12:09:31.49625Z","times_seen":392,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":121,"dns":71,"connect":21,"send":0,"wait":21,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"7bfe7b434b.058d79990c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"awpya.com/in/multy","fqdn":"awpya.com","domain":"awpya.com","tld":"com"},"ip":{"addr":"116.202.204.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:11.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 02:36:27 GMT","end":"Tue, 25 Nov 2025 02:36:26 GMT"},"fingerprint":{"sha1":"64:AC:96:73:4F:92:FF:85:D0:1E:15:16:DA:B2:A2:8F:FA:02:1D:05","sha256":"1B:3E:09:8B:67:DE:C9:73:00:B7:68:C4:8A:D7:17:4D:D5:19:A0:85:23:3B:65:9C:31:C6:FB:A5:8E:BA:22:83"}}},"request":{"raw":"POST /in/multy HTTP/1.1\r\nHost: awpya.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 2450\r\nOrigin: https://hd.xmovix.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Sat, 25 Oct 2025 15:25:11 GMT\r\ncontent-type: application/json\r\ncontent-length: 7194\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":66204,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4e852adedc3a3fa1cf6f859e499d191f","sha1":"12a21802c1e15fdda6531b950683557a49916d6a","sha256":"ce0d4b7ceb2246b9494ad21dec110edc4af3b080c03b3a30bb4f1ece35657f0b","sha512":"25ce5356ea59ca650338538a026b2aa1cfab6a1c776dc5617c86698b95c052035da29887cca892a9ee12a284c9450baff16ad7b8405a25e51eac1e9afde7acf7","ssdeep":"768:m+I3a+I3q+I3H+I35+I3XM+I3L+I3KlwC+GoYxGK:BEEb1AbTjl3J","tlshash":"d3536c810ca31e055cf3921f3319fb597684bb679fc089e8c6b0caa7999935f61d760c","first_seen":"2025-10-25T15:25:40.376393Z","last_seen":"2025-10-25T15:25:40.376393Z","times_seen":1,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.forscprts.com/easy?campaignId=25bdc61ed3917811c8f3f36a1e6e0fb40a4bf9db56e01082448f446fc27cc57b\u0026userId=a29e4fa1023dd45be975c4ab2c3f63fc721842490735020a0d0703eb57f7300d\u0026memberId=0641fd45b05137dea949fc\u0026sourceId=100863\u0026p1=60690\u0026p2=113256\u0026p3=101783","fqdn":"go.forscprts.com","domain":"forscprts.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:12.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.forscprts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 20:58:53 GMT","end":"Fri, 12 Dec 2025 21:19:55 GMT"},"fingerprint":{"sha1":"AD:2E:E6:89:40:EE:99:C2:2F:D5:3E:7F:72:5E:7A:8B:D9:8F:CF:F7","sha256":"40:2F:2D:5E:AB:0A:F5:22:4B:8E:CA:F1:13:FC:E5:AA:5D:30:90:AE:83:A7:8D:A8:17:49:54:0E:FA:65:A3:66"}}},"request":{"raw":"GET /easy?campaignId=25bdc61ed3917811c8f3f36a1e6e0fb40a4bf9db56e01082448f446fc27cc57b\u0026userId=a29e4fa1023dd45be975c4ab2c3f63fc721842490735020a0d0703eb57f7300d\u0026memberId=0641fd45b05137dea949fc\u0026sourceId=100863\u0026p1=60690\u0026p2=113256\u0026p3=101783 HTTP/1.1\r\nHost: go.forscprts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hd.xmovix.net/\r\nOrigin: https://hd.xmovix.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sat, 25 Oct 2025 15:25:12 GMT\r\ncontent-length: 0\r\nlocation: https://go.forscprts.com/api/models/vast?action=sbSignupWithModelSoft\u0026campaignId=25bdc61ed3917811c8f3f36a1e6e0fb40a4bf9db56e01082448f446fc27cc57b\u0026campaignType=smartpop\u0026creativeId=848c9861daeb8c71077e63185fe70108f0fc581bfa4a1361d3aad7791cbd1e0d\u0026duration=00%3A00%3A30\u0026iterationId=1075275\u0026masterSmartpopId=2683\u0026memberId=0641fd45b05137dea949fc\u0026p1=60690\u0026p2=113256\u0026p3=101783\u0026ruleId=29\u0026skipOffset=00%3A00%3A05\u0026smartpopId=14005\u0026sourceId=100863\u0026tag=girls\u0026trafficType=preroll\u0026usePreroll=true\u0026userId=a29e4fa1023dd45be975c4ab2c3f63fc721842490735020a0d0703eb57f7300d\u0026variationId=34733\u0026videoType=ol\r\ncf-ray: 9942b9a7287a0b02-OSL\r\naccess-control-allow-origin: https://hd.xmovix.net\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2274,"size_decoded":0,"mime_type":"text/xml; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-19T12:11:11.754429Z","times_seen":15436892,"resource_available":true,"data":null}},"time_used":284,"timings":{"blocked":112,"dns":86,"connect":1,"send":0,"wait":58,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hd.xmovix.net/templates/XmovixHD/js/metrika.js","fqdn":"hd.xmovix.net","domain":"xmovix.net","tld":"net"},"ip":{"addr":"104.21.75.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:09.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmovix.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 08:17:46 GMT","end":"Fri, 09 Jan 2026 09:15:17 GMT"},"fingerprint":{"sha1":"E0:29:B4:15:7B:84:A8:8E:4C:6F:38:26:B6:4C:91:E7:EA:DC:4F:33","sha256":"70:A9:AF:CC:7A:C2:CB:AF:67:4D:A8:FD:F4:27:76:A8:F5:00:78:F0:1E:1D:F5:24:64:87:2B:97:BF:99:18:EE"}}},"request":{"raw":"GET /templates/XmovixHD/js/metrika.js HTTP/1.1\r\nHost: hd.xmovix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html\r\nCookie: language=en; PHPSESSID=d8d876133430e02643de56ace62d60f4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 15:25:09 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nlast-modified: Fri, 15 Mar 2024 14:00:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2Z88rYL57YL7m%2BIKx8yiTfS1rpi2a1mXpOgreYf9BT67ajmHb0nVunucW97VJM%2Flq%2FO8iH6ked%2F%2FHfq68874sv%2BT45ljHaOgPzA4y6Y%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"65f45496-b94\"\r\ncontent-encoding: gzip\r\nage: 601\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-ray: 9942b99469c0120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2964,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (551)","md5":"01291d906b6220224bbeccb9fa39156f","sha1":"ccb7fd67df4a269ac3361aac511e7152449ca9e9","sha256":"70e521f99f815ca5b8d4e02714ab9b54d7f2cf4df91afe18b73ff4090c6139df","sha512":"ea3316b04758f4d44db3a53f4ac4916c38fd69710c6dbc208b098733b4d3c875dd3fd49edc7a97939a9564dbd22298ac4fab472b0cdd5e536d0fd6109d79a8c3","ssdeep":"","tlshash":"f25165382a476538417be23eab2eb380727815672808d572f87d5f646fa1ef00176ecc","first_seen":"2025-09-30T21:49:22.163026Z","last_seen":"2026-02-12T03:34:09.524454Z","times_seen":4,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hd.xmovix.net/templates/XmovixHD/js/libs-en.js","fqdn":"hd.xmovix.net","domain":"xmovix.net","tld":"net"},"ip":{"addr":"104.21.75.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:09.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmovix.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 08:17:46 GMT","end":"Fri, 09 Jan 2026 09:15:17 GMT"},"fingerprint":{"sha1":"E0:29:B4:15:7B:84:A8:8E:4C:6F:38:26:B6:4C:91:E7:EA:DC:4F:33","sha256":"70:A9:AF:CC:7A:C2:CB:AF:67:4D:A8:FD:F4:27:76:A8:F5:00:78:F0:1E:1D:F5:24:64:87:2B:97:BF:99:18:EE"}}},"request":{"raw":"GET /templates/XmovixHD/js/libs-en.js HTTP/1.1\r\nHost: hd.xmovix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html\r\nCookie: language=en; PHPSESSID=d8d876133430e02643de56ace62d60f4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 15:25:09 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nlast-modified: Fri, 15 Mar 2024 14:00:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=43maFIB4TAIbBtTIw7WvHGWnnyR07GkgJ6V%2BFmhkCVCn64Sl7ikl4ly5sZQvz3YA5SKoup%2BV3EyYOB%2Fv3KnhWFhmCXh%2FaqZzfcVkbkI%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"65f45494-ee74\"\r\ncontent-encoding: gzip\r\nage: 431\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-ray: 9942b99469c2120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61044,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32045)","md5":"fc65fb36f4f8204e22f8a98111ae0653","sha1":"3a7ded2c75b7b2511a38187e4ec940cd1924225b","sha256":"63faf6569c220577560cd31e98c939725e5f31a0c2a3059ae7f8d184a249ea96","sha512":"c270a7d056c4d6e68810644051af6b6b4728beb81546a18fda4d6f62c5b8c461f07a77519d05112d1c3568c40cf7dcbb4e8749c4fa8100d83fda981288380368","ssdeep":"768:m5sdEpPyyd8r9g9BA70MFA0c3db3FzkSRInLGhep2lcwJeL+CkbQdc75COpUQuil:kVyyd8r9gDAAMFE3dGMxAcF4DO","tlshash":"fa53a44af3242d1a466b61a1553f120b723a281de506847db87ca6ed2e7d84d313ffbc","first_seen":"2025-09-30T21:49:22.172096Z","last_seen":"2026-01-11T22:31:43.368626Z","times_seen":3,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vast.yomeno.xyz/vast","fqdn":"vast.yomeno.xyz","domain":"yomeno.xyz","tld":"xyz"},"ip":{"addr":"109.206.161.16","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:11.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"vast.yomeno.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 03:20:42 GMT","end":"Wed, 31 Dec 2025 03:20:41 GMT"},"fingerprint":{"sha1":"C1:A0:EC:3E:36:CF:B7:DB:9C:46:F0:8B:28:CB:F6:1B:E8:ED:7C:AA","sha256":"23:03:9D:AA:E7:64:11:E6:ED:B5:03:CB:DC:03:54:4F:DF:DD:5A:95:E2:68:64:09:57:1F:27:FA:72:64:91:5E"}}},"request":{"raw":"POST /vast HTTP/1.1\r\nHost: vast.yomeno.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 1864\r\nOrigin: https://hd.xmovix.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Sat, 25 Oct 2025 15:25:11 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding, *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://hd.xmovix.net\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3156,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"af134c9b05d68d0944312b4d56c475c7","sha1":"5702d00119d3e3c7d8d94ab950a45f8400702621","sha256":"197a62c80d198c6a1837bb72490f44ab0e30ecf07fad0f3ce4a23e1fc179865e","sha512":"50fd09dcbbfdc328ee3d2713816bd3a615ff5c6535637a1c542c907c70b9d63d337b5c39b999582dffb0a189b270735b94315a0436d02f6c1aa65b3bda1f3f9e","ssdeep":"","tlshash":"b55144a7005c69ca4bf862ef2dc3be84c5c6100babea7eae81c48c6c053d54447977b5","first_seen":"2025-10-25T15:25:40.379404Z","last_seen":"2025-10-25T15:25:40.379404Z","times_seen":1,"resource_available":false,"data":null}},"time_used":491,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":491,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.bookmsg.com/creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790_icon.webp","fqdn":"static.bookmsg.com","domain":"bookmsg.com","tld":"com"},"ip":{"addr":"45.133.44.25","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:11.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.bookmsg.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Sep 2025 02:32:15 GMT","end":"Fri, 26 Dec 2025 02:32:14 GMT"},"fingerprint":{"sha1":"69:D4:87:E8:98:FE:00:16:8C:D3:50:CF:9D:9C:90:39:E8:BA:25:24","sha256":"B7:66:1B:B1:4A:54:D5:C6:EB:8C:46:AC:AC:EE:34:E5:FD:C8:BD:42:18:97:40:49:28:DF:BC:31:42:43:04:50"}}},"request":{"raw":"GET /creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790_icon.webp HTTP/1.1\r\nHost: static.bookmsg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 15:25:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 486\r\nserver: nginx/1.24.0\r\nlast-modified: Fri, 31 May 2024 10:56:43 GMT\r\netag: \"6659aceb-1e6\"\r\nexpires: Sun, 25 Oct 2026 15:25:11 GMT\r\ncache-control: max-age=31536000\r\nx-cdn-host-id: DS5058\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":486,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ceeb4e8840c24621c0e0352b42b38a5b","sha1":"03cbceb0134a39267014595938705e2916580644","sha256":"50cb77ae9715629235f102dd53a68559df1b64416f71179dbb4aa942725790b3","sha512":"80d4128488580567597ba5eb65dbff2dd4a8efc625c64cac6a027a1bb5c229545206669f04a50a252b54f471bee4fdc892e6bfe8347a50dd216bba67bd671a03","ssdeep":"","tlshash":"9bf00544191cd36c2a3c607afd74eb74a4074aa459226017cce447b08956811e856c1c","first_seen":"2024-02-20T18:30:33Z","last_seen":"2026-05-19T09:03:32.018942Z","times_seen":11258,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":47,"dns":1,"connect":19,"send":0,"wait":20,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.ahmybid.net/c525a788-57c6-416f-ba51-b4deda4bf4b8.jpg","fqdn":"assets.ahmybid.net","domain":"ahmybid.net","tld":"net"},"ip":{"addr":"45.133.44.25","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:11.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.ahmybid.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 02:34:06 GMT","end":"Tue, 20 Jan 2026 02:34:05 GMT"},"fingerprint":{"sha1":"8F:7F:00:3C:97:75:C7:07:55:FE:D5:8E:EA:64:4E:E6:3B:D6:AC:6C","sha256":"49:C1:19:E7:6B:AD:AA:FC:DC:2C:D3:0D:4E:EB:70:84:A1:61:FD:CC:08:92:42:ED:D6:E3:CE:72:11:3E:67:9C"}}},"request":{"raw":"GET /c525a788-57c6-416f-ba51-b4deda4bf4b8.jpg HTTP/1.1\r\nHost: assets.ahmybid.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 15:25:11 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 42622\r\nserver: nginx/1.24.0\r\nlast-modified: Fri, 20 Dec 2024 12:34:20 GMT\r\netag: \"6765644c-a67e\"\r\ncache-control: public, max-age=315360000\r\nx-cdn-host-id: ah1742,DS5058\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42622,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 360x202, components 3","md5":"4b74ad5ccb083046112cffd63a4335e8","sha1":"673cca7b51ea6cc0f13c8371ead2822827d07d90","sha256":"4b91c0ff427adc8d7c749fbf845e339851b50bc36c15e1c0df9c1871f49d563b","sha512":"8a437f2d04b86c51e1c44a8cedd09c4b8c9b3bb2bc2fdeb0731f31152f0d21ec47138e9a55994c9bb09694950bc26da7c08bd2d2b25286e961df4b4fc0c76e42","ssdeep":"768:rjVYBbrQ7ay+W2bGXksBSPmoUWnW1L5xqV296CZvWYbNfeQdUxYaqnVM5:WEezSTBSHUWnW1v55fz5/n65","tlshash":"0b13f2d29bc1c0d26de644d702d4711c2f529283bde2979944b1b3bbff1058ebb55878","first_seen":"2025-08-11T16:28:38.282328Z","last_seen":"2025-12-21T08:14:57.666818Z","times_seen":127,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":86,"dns":40,"connect":19,"send":0,"wait":19,"receive":26,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vast.yomeno.xyz/report?katds_ep=Y3kihDkv2zRF-LFdLK3YlzGhMApOyjJWX-fvILyg8qG8qUxzQC5eZDPlQISY7Po7hUzvjHJn2IdZp8vSxyjWevOhpka4Dx3HPYOj-_dGBAzdTWhkcOyGAy-rGyCFwrBNW20ePNSzrE4c514WQ_G8AZxQx4ErSoY-1m2WoYun3XSDCjTEX2qdYyEY1kUxQ75P46oRDu7Q3oCMJ5EalWvhiu36VfggA6zsuh2ioOU0BbrDZQw5cgUCMmeteGcm_y_wrNvrrUG74k36r3TFDYQklvfSKcUrzM382iuNWUcmK8FBGNUyZ_RDXpSbk2IMMcJXIh3H-ElfeVxJxkYWDF0LsQ5q06nzEqNnD1UWrT3G2MzPRdZzP29xPrsA0_li8cJ6Oif4Y2nqkqbPY5vGnYkXtGrA2ya2-oTHeLdEbEkWUpXSAOwl6PGIptgX3vBQeV4CpDQycREhlCnY3OHfimtDKyHV_xWVqyTwBH1Jidapr1S2QN2-fCwSKfNeCA\u0026error=400","fqdn":"vast.yomeno.xyz","domain":"yomeno.xyz","tld":"xyz"},"ip":{"addr":"109.206.161.16","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1000fapvids.com/v.html?player_url=https%3A%2F%2Fjs.canstrm.com%2Fvast-vpaid-player%2Fmain.js","date":"2025-10-25T15:25:13.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"vast.yomeno.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 03:20:42 GMT","end":"Wed, 31 Dec 2025 03:20:41 GMT"},"fingerprint":{"sha1":"C1:A0:EC:3E:36:CF:B7:DB:9C:46:F0:8B:28:CB:F6:1B:E8:ED:7C:AA","sha256":"23:03:9D:AA:E7:64:11:E6:ED:B5:03:CB:DC:03:54:4F:DF:DD:5A:95:E2:68:64:09:57:1F:27:FA:72:64:91:5E"}}},"request":{"raw":"GET /report?katds_ep=Y3kihDkv2zRF-LFdLK3YlzGhMApOyjJWX-fvILyg8qG8qUxzQC5eZDPlQISY7Po7hUzvjHJn2IdZp8vSxyjWevOhpka4Dx3HPYOj-_dGBAzdTWhkcOyGAy-rGyCFwrBNW20ePNSzrE4c514WQ_G8AZxQx4ErSoY-1m2WoYun3XSDCjTEX2qdYyEY1kUxQ75P46oRDu7Q3oCMJ5EalWvhiu36VfggA6zsuh2ioOU0BbrDZQw5cgUCMmeteGcm_y_wrNvrrUG74k36r3TFDYQklvfSKcUrzM382iuNWUcmK8FBGNUyZ_RDXpSbk2IMMcJXIh3H-ElfeVxJxkYWDF0LsQ5q06nzEqNnD1UWrT3G2MzPRdZzP29xPrsA0_li8cJ6Oif4Y2nqkqbPY5vGnYkXtGrA2ya2-oTHeLdEbEkWUpXSAOwl6PGIptgX3vBQeV4CpDQycREhlCnY3OHfimtDKyHV_xWVqyTwBH1Jidapr1S2QN2-fCwSKfNeCA\u0026error=400 HTTP/1.1\r\nHost: vast.yomeno.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1000fapvids.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1000fapvids.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.20.1\r\ndate: Sat, 25 Oct 2025 15:25:12 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nvary: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://1000fapvids.com\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-19T12:11:11.754429Z","times_seen":15436892,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","fqdn":"hd.xmovix.net","domain":"xmovix.net","tld":"net"},"ip":{"addr":"104.21.75.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-25T15:25:08.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmovix.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 08:17:46 GMT","end":"Fri, 09 Jan 2026 09:15:17 GMT"},"fingerprint":{"sha1":"E0:29:B4:15:7B:84:A8:8E:4C:6F:38:26:B6:4C:91:E7:EA:DC:4F:33","sha256":"70:A9:AF:CC:7A:C2:CB:AF:67:4D:A8:FD:F4:27:76:A8:F5:00:78:F0:1E:1D:F5:24:64:87:2B:97:BF:99:18:EE"}}},"request":{"raw":"GET /en/movies/hd-720p/9416-contact-5.html HTTP/1.1\r\nHost: hd.xmovix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 15:25:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z%2FFsbi0t5vNK9g%2FMxkKVzq9MbIl8PqkvrDEL1GdxNBE0X0%2Fm5DgGBSf%2B5BNcQzTuzayxOwTTL6lvYfUpHT%2FSkrg2vZFMEU2crkqTDCI%3D\"}]}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: language=en; HttpOnly; Path=/; Domain=xmovix.net; Max-Age=31536000; Expires=Sun, 25 Oct 2026 15:25:08 GMT\nPHPSESSID=d8d876133430e02643de56ace62d60f4; HttpOnly; Path=/; Domain=xmovix.net\r\ncf-ray: 9942b9918c701a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":30217,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (25235)","md5":"13d06fc536b4c3ffbd3ceabcef4d6dd4","sha1":"e07650cf83ff75df0de4af2357f508dd4f889400","sha256":"78762b556b3fc12a44d590ad6dd70cf8c4dab8576c9ff81cad39a676ccc0c96a","sha512":"8d50af9e5516a1eb352dcc4c987a0e60f3753c7f64e34752b164a9fe54f595b98343bba9a12d17ae35420ecf2abce6ad15515dcc79307ec35573c19a578dfa8a","ssdeep":"768:Kn3qqunfn2GceX2EZ0lvicMR/3xt0BDDDbDpBve6Bvk1BvfuBv5UBv9mBvSzw4fC:b/2GSjMt3xt0BDDDbDhiw","tlshash":"87d2e7327141582b433791d868a0736ef6b7815fcb06cd08e2ec975f5fc1e98ecaa166","first_seen":"2025-10-25T15:25:40.381652Z","last_seen":"2025-10-25T15:25:40.381652Z","times_seen":1,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":55,"dns":34,"connect":1,"send":0,"wait":119,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hd.xmovix.net/templates/XmovixHD/ajax/magnificpopup.js","fqdn":"hd.xmovix.net","domain":"xmovix.net","tld":"net"},"ip":{"addr":"104.21.75.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:09.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmovix.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 08:17:46 GMT","end":"Fri, 09 Jan 2026 09:15:17 GMT"},"fingerprint":{"sha1":"E0:29:B4:15:7B:84:A8:8E:4C:6F:38:26:B6:4C:91:E7:EA:DC:4F:33","sha256":"70:A9:AF:CC:7A:C2:CB:AF:67:4D:A8:FD:F4:27:76:A8:F5:00:78:F0:1E:1D:F5:24:64:87:2B:97:BF:99:18:EE"}}},"request":{"raw":"GET /templates/XmovixHD/ajax/magnificpopup.js HTTP/1.1\r\nHost: hd.xmovix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html\r\nCookie: language=en; PHPSESSID=d8d876133430e02643de56ace62d60f4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 15:25:09 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nlast-modified: Mon, 13 May 2024 14:49:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rWzsxEMqaRfNcEEqsWjnDwe0bFDb2jmc4INEm1j6uV1hMrr%2FcM3VtRKHm5BPWDtXsgaVZcX0UKm9%2B%2BO5WpeAo6MELksI4iAxOyg7d%2Bo%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"66422886-32ab\"\r\ncontent-encoding: gzip\r\nage: 601\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-ray: 9942b99469c1120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12971,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (12883), with CRLF line terminators","md5":"2ba5ebab31572c1896a5960f3a48b368","sha1":"b9141dd5938bef80bbae8624db7f1107bd428371","sha256":"b65a4d8a8593cbfcd3c31f828ea7f62756a969c510d6b8917d3d1688d0ee2df0","sha512":"25ff3e1a761378a4d2d140117c555980999713b83d10965a62a45539c023a52af497a6969b0f6b3fa1182c71952c42a0b77c736949914a89b98d8e5141062779","ssdeep":"384:z7gsUMAY6541hpzXKpGdyZ0yE5kh5/QCuOYqG:fgnNEDr9Vkh5ICW","tlshash":"4d42f890f5a67226c3fe75782b6f600d3672d953e6078c85b54c88982df8acc7162f6c","first_seen":"2025-09-28T21:55:02.149822Z","last_seen":"2026-05-10T03:48:56.685033Z","times_seen":6,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=57119","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:11.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 02:47:45 GMT","end":"Thu, 13 Nov 2025 02:47:44 GMT"},"fingerprint":{"sha1":"F4:AD:2A:0D:F1:0A:AB:04:F2:6F:6F:72:39:99:7F:4B:E4:5B:2E:4C","sha256":"12:8C:54:04:9B:26:0A:7E:35:D0:23:72:4F:A8:FC:52:77:D0:9D:FA:F5:AC:FE:2F:D2:49:97:F4:24:B6:72:0A"}}},"request":{"raw":"POST /fp?tag_id=57119 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 1972\r\nOrigin: https://hd.xmovix.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Sat, 25 Oct 2025 15:25:10 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nContent-Length: 58\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://hd.xmovix.net\r\nSet-Cookie: id=10202338816065478696; Expires=Sun, 25 Oct 2026 15:25:10 GMT; Secure; SameSite=None\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c4efc1d6d16235d9433cd2565d887460","sha1":"22d069a5f536640e46122475c79db933e82d7f2e","sha256":"f0a6b8c736b7d8c5d3304a9ccd10d2114a0f25f2ba946cce62204df3384a131f","sha512":"af1cfe529f3173efdc7f4aff67355529095e775d8edb38d8a7c9565e09807aff470a465ffdf89ef6555f06cc88efa675823becc942896c63fa64a3140858f539","ssdeep":"","tlshash":"5ba00294c5c00e3c80200c3a73cf901628e4d304120217880ca66b5108822abe333c91","first_seen":"2025-07-26T17:44:43.174102Z","last_seen":"2026-05-19T09:03:32.021539Z","times_seen":6705,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":1,"connect":24,"send":0,"wait":25,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"7bfe7b434b.058d79990c.com/b827ca605a47c2b95ebd40ed626f73b7.js","fqdn":"7bfe7b434b.058d79990c.com","domain":"058d79990c.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:11.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"7bfe7b434b.058d79990c.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 02:15:15 GMT","end":"Tue, 20 Jan 2026 02:15:14 GMT"},"fingerprint":{"sha1":"6F:F1:C1:4C:F3:BB:72:96:7F:E0:9B:E2:EF:16:0E:0A:28:79:18:62","sha256":"3A:F9:19:95:ED:B7:77:0D:47:07:5E:B3:9B:B2:48:05:B6:0C:E3:A8:06:5A:F3:F1:58:02:0E:E1:26:B2:A9:A9"}}},"request":{"raw":"GET /b827ca605a47c2b95ebd40ed626f73b7.js HTTP/1.1\r\nHost: 7bfe7b434b.058d79990c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 15:25:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Thu, 23 Oct 2025 08:52:25 GMT\r\netag: W/\"68f9ecc9-925a3\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 25 Oct 2025 15:30:11 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1747\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":599459,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"ad95b65ecbcf789a8ccd2d54f165587a","sha1":"c8b4b9ba2510a3bcf5b7882ef299362b73526498","sha256":"c56828cfcd5217721a7c360d3c3e675da4a8fbcfaab123d4c1a7c1f1af830b40","sha512":"265ebb6e804700700b53ec25d37b2f88290b951f1a79b5547715cba26a58c78d030deaa217346178a517fc1f9a5d542c9507dceee2b629d589c5b6d16d313946","ssdeep":"12288:EiO6pTQUIfDchOHO68RPO2Si6EHlPUfQC+dKJTowRinDGQf7jbLExMLPW0hMs4hs:JONux6EHOJcFnagwxdRwl","tlshash":"d8d45b313290113870bfc8c6aa66278d336cf24be9174f55f96faaa583dbd54f625380","first_seen":"2025-10-23T10:57:14.90805Z","last_seen":"2025-10-27T08:33:06.75464Z","times_seen":79,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"7bfe7b434b.058d79990c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"awpya.com/in/multy","fqdn":"awpya.com","domain":"awpya.com","tld":"com"},"ip":{"addr":"116.202.204.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:11.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 02:36:27 GMT","end":"Tue, 25 Nov 2025 02:36:26 GMT"},"fingerprint":{"sha1":"64:AC:96:73:4F:92:FF:85:D0:1E:15:16:DA:B2:A2:8F:FA:02:1D:05","sha256":"1B:3E:09:8B:67:DE:C9:73:00:B7:68:C4:8A:D7:17:4D:D5:19:A0:85:23:3B:65:9C:31:C6:FB:A5:8E:BA:22:83"}}},"request":{"raw":"OPTIONS /in/multy HTTP/1.1\r\nHost: awpya.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://hd.xmovix.net/\r\nOrigin: https://hd.xmovix.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.24.0\r\ndate: Sat, 25 Oct 2025 15:25:11 GMT\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-19T12:11:11.754429Z","times_seen":15436892,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kts.bartcons.com/in/vmon/?title=SPREAD%20LEGS%20%2B%20SPANK%20WET%20PUSSY%20IN%20PANTIES\u0026system=SSP%20LINK%20Wrapper%2Ctwinrdengine%2Cstripcash.com\u0026type=vast\u0026mediafile=https%3A%2F%2Fvideo.sacdnssedge.com%2Fvideo%2Fol_f2c0d95da6924428aa30976d3b0b7e50.mp4\u0026click=https%3A%2F%2Fgo.forscprts.com%2F%3FabTest%3Dlandingvast_default260925%26abTestVariant%3Dlandingvast_default260925_default_87%26action%3DsbSignupWithModelSoft%26campaignId%3D25bdc61ed3917811c8f3f36a1e6e0fb40a4bf9db56e01082448f446fc27cc57b%26campaignType%3Dsmartpop%26creativeId%3D848c9861daeb8c71077e63185fe70108f0fc581bfa4a1361d3aad7791cbd1e0d%26iterationId%3D1075275%26landing%3DlandingVAST%26masterSmartpopId%3D2683%26memberId%3D0641fd45b05137dea949fc%26modelId%3D163955134%26onlineModels%3DAsian_Asami%26p1%3D60690%26p2%3D113256%26p3%3D101783%26referrer%3Dhttps%253A%252F%252Fhd.xmovix.net%252F%26ruleId%3D29%26segment%3Dhls-Asian_Asami-1%26smartpopId%3D14005%26sourceId%3D100863%26stripcashR%3D1%26tag%3Dgirls%26trafficType%3Dpreroll%26userId%3Da29e4fa1023dd45be975c4ab2c3f63fc721842490735020a0d0703eb57f7300d%26variationId%3D34733\u0026katds_ep=ycpwWaWYP0Q1_pQJX4JPpmzBOCXIylBqIYbmzNGVxw6Z7K4JP58cg6B74ofFEqtULPsyxjwd-Z431fv_MW6SirpDoEGvjSTiPw1qMIdnyUfE8Xhfx-8fyNXOEDpLQhvOEIbTygBDYw","fqdn":"kts.bartcons.com","domain":"bartcons.com","tld":"com"},"ip":{"addr":"62.122.168.42","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:12.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kts.bartcons.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Oct 2025 03:13:06 GMT","end":"Tue, 06 Jan 2026 03:13:05 GMT"},"fingerprint":{"sha1":"DA:BF:79:90:17:62:56:16:70:20:05:59:A0:3D:03:F1:FF:04:46:11","sha256":"C3:40:A4:D4:07:FB:03:20:94:50:01:29:38:94:4D:06:F3:76:FE:0F:19:CB:76:63:02:45:50:A7:F1:76:54:48"}}},"request":{"raw":"GET /in/vmon/?title=SPREAD%20LEGS%20%2B%20SPANK%20WET%20PUSSY%20IN%20PANTIES\u0026system=SSP%20LINK%20Wrapper%2Ctwinrdengine%2Cstripcash.com\u0026type=vast\u0026mediafile=https%3A%2F%2Fvideo.sacdnssedge.com%2Fvideo%2Fol_f2c0d95da6924428aa30976d3b0b7e50.mp4\u0026click=https%3A%2F%2Fgo.forscprts.com%2F%3FabTest%3Dlandingvast_default260925%26abTestVariant%3Dlandingvast_default260925_default_87%26action%3DsbSignupWithModelSoft%26campaignId%3D25bdc61ed3917811c8f3f36a1e6e0fb40a4bf9db56e01082448f446fc27cc57b%26campaignType%3Dsmartpop%26creativeId%3D848c9861daeb8c71077e63185fe70108f0fc581bfa4a1361d3aad7791cbd1e0d%26iterationId%3D1075275%26landing%3DlandingVAST%26masterSmartpopId%3D2683%26memberId%3D0641fd45b05137dea949fc%26modelId%3D163955134%26onlineModels%3DAsian_Asami%26p1%3D60690%26p2%3D113256%26p3%3D101783%26referrer%3Dhttps%253A%252F%252Fhd.xmovix.net%252F%26ruleId%3D29%26segment%3Dhls-Asian_Asami-1%26smartpopId%3D14005%26sourceId%3D100863%26stripcashR%3D1%26tag%3Dgirls%26trafficType%3Dpreroll%26userId%3Da29e4fa1023dd45be975c4ab2c3f63fc721842490735020a0d0703eb57f7300d%26variationId%3D34733\u0026katds_ep=ycpwWaWYP0Q1_pQJX4JPpmzBOCXIylBqIYbmzNGVxw6Z7K4JP58cg6B74ofFEqtULPsyxjwd-Z431fv_MW6SirpDoEGvjSTiPw1qMIdnyUfE8Xhfx-8fyNXOEDpLQhvOEIbTygBDYw HTTP/1.1\r\nHost: kts.bartcons.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hd.xmovix.net/\r\nOrigin: https://hd.xmovix.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.20.1\r\ndate: Sat, 25 Oct 2025 15:25:13 GMT\r\npragma: no-cache\r\nvary: *\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://hd.xmovix.net\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-19T12:11:11.754429Z","times_seen":15436892,"resource_available":true,"data":null}},"time_used":682,"timings":{"blocked":310,"dns":34,"connect":25,"send":0,"wait":56,"receive":0,"ssl":176},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"kts.bartcons.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mauc.yomeno.xyz/video/error/?token=eyJhbGciOiJIUzI1NiJ9.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.fux1FkcWRmYwu9tEiS5dF4rj5Tj-5LnnRFEhXANw1EE\u0026hostname=auc-video-hz-5\u0026error=400\u0026go=1\u0026session_time=3\u0026playback=start\u0026build_version=1.2.21_c\u0026build_type=vast","fqdn":"mauc.yomeno.xyz","domain":"yomeno.xyz","tld":"xyz"},"ip":{"addr":"168.119.45.30","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:13.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"video.infrapu.sh","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 04:31:26 GMT","end":"Tue, 16 Dec 2025 04:31:25 GMT"},"fingerprint":{"sha1":"C7:94:FE:12:A0:82:08:E5:BC:D6:E8:81:29:B6:22:BE:0B:35:31:39","sha256":"81:D3:DB:37:60:2A:97:2D:FA:9B:16:4D:79:04:0E:95:4A:89:42:2B:EC:F9:15:FC:2E:2D:AB:DD:C6:A2:5C:72"}}},"request":{"raw":"GET /video/error/?token=eyJhbGciOiJIUzI1NiJ9.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.fux1FkcWRmYwu9tEiS5dF4rj5Tj-5LnnRFEhXANw1EE\u0026hostname=auc-video-hz-5\u0026error=400\u0026go=1\u0026session_time=3\u0026playback=start\u0026build_version=1.2.21_c\u0026build_type=vast HTTP/1.1\r\nHost: mauc.yomeno.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hd.xmovix.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Sat, 25 Oct 2025 15:25:13 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-19T12:11:11.754429Z","times_seen":15436892,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hd.xmovix.net/engine/skins/flags/ru.png","fqdn":"hd.xmovix.net","domain":"xmovix.net","tld":"net"},"ip":{"addr":"104.21.75.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:09.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmovix.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 08:17:46 GMT","end":"Fri, 09 Jan 2026 09:15:17 GMT"},"fingerprint":{"sha1":"E0:29:B4:15:7B:84:A8:8E:4C:6F:38:26:B6:4C:91:E7:EA:DC:4F:33","sha256":"70:A9:AF:CC:7A:C2:CB:AF:67:4D:A8:FD:F4:27:76:A8:F5:00:78:F0:1E:1D:F5:24:64:87:2B:97:BF:99:18:EE"}}},"request":{"raw":"GET /engine/skins/flags/ru.png HTTP/1.1\r\nHost: hd.xmovix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html\r\nCookie: language=en; PHPSESSID=d8d876133430e02643de56ace62d60f4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 15:25:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 487\r\nlast-modified: Sat, 16 Jun 2007 06:57:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TaBnqWE4WQ%2F%2Bd9fCcyH%2BWd8wmvcrmPqOql3%2FWzssR%2B05%2BP6Us9ej6wrWEiOA7fxlgsmqus71hY3lWqG%2BeRChahjJabg8te8Lq0xu0i0%3D\"}]}\r\netag: \"467389f0-1e7\"\r\naccept-ranges: bytes\r\nage: 431\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9942b993a994120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":487,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"5ddf50d1327e2ecc28a980e93b9f538a","sha1":"581fa9ecc609a1a07fca205b6c9751e8c28f1ebb","sha256":"1bdc7040f02e999a17f291b59767d4101adefa2d89775272ac7c66f37c710fff","sha512":"2375f58bfd0c3fe7b54258a6b222e285dbf4b4e30e87f76387ec5e1033906d0a04eb78481ee8c78460934f5c1de26007a6488d7857d59d8ca8b7b3fe31228f0d","ssdeep":"","tlshash":"a1f054ee2d01086d493cd918106b0fe1d45b0cb50ae64414d0dab2c43e2278fa8f8ac1","first_seen":"2023-05-02T00:49:29Z","last_seen":"2026-05-18T02:36:05.797639Z","times_seen":1065,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hd.xmovix.net/templates/XmovixHD/ajax/fullstory.js","fqdn":"hd.xmovix.net","domain":"xmovix.net","tld":"net"},"ip":{"addr":"104.21.75.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:09.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmovix.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 08:17:46 GMT","end":"Fri, 09 Jan 2026 09:15:17 GMT"},"fingerprint":{"sha1":"E0:29:B4:15:7B:84:A8:8E:4C:6F:38:26:B6:4C:91:E7:EA:DC:4F:33","sha256":"70:A9:AF:CC:7A:C2:CB:AF:67:4D:A8:FD:F4:27:76:A8:F5:00:78:F0:1E:1D:F5:24:64:87:2B:97:BF:99:18:EE"}}},"request":{"raw":"GET /templates/XmovixHD/ajax/fullstory.js HTTP/1.1\r\nHost: hd.xmovix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html\r\nCookie: language=en; PHPSESSID=d8d876133430e02643de56ace62d60f4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 15:25:09 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: accept-encoding\r\nlast-modified: Mon, 13 May 2024 14:49:32 GMT\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6642287c-29e\"\r\nage: 2340\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9w%2Fo0EFAdWxLw25FKuLVT9DUFy%2FekqRyLh9HnOKihP%2BEu5bDEYOtHl6zvdA3WIeP0NfnbEnj3BkecFPv%2FiqlhUbpdET0o67PaqkFQWY%3D\"}]}\r\ncf-ray: 9942b99469bf120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":670,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"507e14ea7ec582969f45118e8f8e89b6","sha1":"c7a3830f4bff13f0f8177488a214c2782045f380","sha256":"d5de6927e6a3c450f489c8cbca339b8d0a80406e0bfa301fc54d39893172ffb3","sha512":"85070a11823b7744a7c5ceac9ccfb92a90b6917d784708ad18090fc970d858bfd6fc2cf9b66e14e8dece5b174ac8980f5c7eb3942aeadce62a762b4aa41f091c","ssdeep":"","tlshash":"580128a534b9ca58c976b2bdf74a4d01eb327967a301856238fc1fc03f315166194ea4","first_seen":"2025-06-26T08:20:37.729463Z","last_seen":"2026-02-12T03:34:09.505544Z","times_seen":7,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hd.xmovix.net/templates/XmovixHD/js/rika.js","fqdn":"hd.xmovix.net","domain":"xmovix.net","tld":"net"},"ip":{"addr":"104.21.75.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:09.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmovix.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 08:17:46 GMT","end":"Fri, 09 Jan 2026 09:15:17 GMT"},"fingerprint":{"sha1":"E0:29:B4:15:7B:84:A8:8E:4C:6F:38:26:B6:4C:91:E7:EA:DC:4F:33","sha256":"70:A9:AF:CC:7A:C2:CB:AF:67:4D:A8:FD:F4:27:76:A8:F5:00:78:F0:1E:1D:F5:24:64:87:2B:97:BF:99:18:EE"}}},"request":{"raw":"GET /templates/XmovixHD/js/rika.js HTTP/1.1\r\nHost: hd.xmovix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html\r\nCookie: language=en; PHPSESSID=d8d876133430e02643de56ace62d60f4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 15:25:09 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nlast-modified: Thu, 18 Sep 2025 17:31:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r%2FT3b9q1ggF97hdoog1HeQjwADznGQXOvyUVwgZE%2FmzncKaEDZge6%2F%2FeNcVw3zQAJDXgKojst9phYBq2gFI%2BIIzG9cns%2FmaIQFLRk30%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"68cc4201-17a49\"\r\ncontent-encoding: gzip\r\nage: 427\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-ray: 9942b99469c3120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96841,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (58136)","md5":"360e422c8dcda1e486f1828a9a4f338f","sha1":"78b352359026d2e08c794f90fd322771b89881c5","sha256":"9daee0b179f9cce3913e76dc2971ba2764405eb381d92422ac2d2b08db33b194","sha512":"a9c98aac84b4e33caaad9e3b72c96258f43439b0633d37624df2e107e6d20065d5f21034cc9b5abb972ae1076c80d33272a51fa853178a6773442539c1a281a1","ssdeep":"1536:mrnkoD7uFiT8yf1MASbLavt9dSziFidJPL6m2EvOrx2Cu5M0pai53Z08A8/PRRMA:SnnileViOGF9mrx/0JZwSV","tlshash":"3693fac835dbb8190ba2a4ae137f300bb5296d943d6c7140e8b1c5f87d7436e90b7e68","first_seen":"2025-10-25T15:25:40.385853Z","last_seen":"2026-01-11T22:31:43.344475Z","times_seen":2,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hd.xmovix.net/templates/XmovixHD/images/touch-icon-ipad-retina.png","fqdn":"hd.xmovix.net","domain":"xmovix.net","tld":"net"},"ip":{"addr":"104.21.75.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:09.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmovix.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 08:17:46 GMT","end":"Fri, 09 Jan 2026 09:15:17 GMT"},"fingerprint":{"sha1":"E0:29:B4:15:7B:84:A8:8E:4C:6F:38:26:B6:4C:91:E7:EA:DC:4F:33","sha256":"70:A9:AF:CC:7A:C2:CB:AF:67:4D:A8:FD:F4:27:76:A8:F5:00:78:F0:1E:1D:F5:24:64:87:2B:97:BF:99:18:EE"}}},"request":{"raw":"GET /templates/XmovixHD/images/touch-icon-ipad-retina.png HTTP/1.1\r\nHost: hd.xmovix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html\r\nCookie: language=en; PHPSESSID=d8d876133430e02643de56ace62d60f4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 15:25:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 13743\r\nlast-modified: Fri, 15 Mar 2024 14:00:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aXiZKHk%2FiRvdFMEauVgNL5Fz1rY97WHcOpxCU4yCNUlpzhuw5EC%2FvsJik5VvIzMIEDYwcjTo2oAOCGSgdjbXKPKSAMaLPgKhgeUheK4%3D\"}]}\r\netag: \"65f45494-35af\"\r\naccept-ranges: bytes\r\nage: 430\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9942b99569e7120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13743,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 152 x 152, 8-bit/color RGBA, non-interlaced","md5":"4c28148ecedb7d3b99baec36d71cd9aa","sha1":"f7afb6d53768021f65512d264a2d96526c82d2c4","sha256":"2e0c101d87724d5c3763f2ea808973f6dfc3038f89d5c65d7966ba217aa48dd6","sha512":"f99f52f62fb18002f9723e251df9f14c5b941b2df166df5f16a6e6ea6b085cc9226005fb6e7bbead7c15ed8be2320059788ee0a3b65195e64c5ea60c0f3541af","ssdeep":"384:STPveYMMQdHItSfeshHgG/QON74KL1hMzL4wC:ALMMQdHKshH7Y874KJhKc","tlshash":"6252c0a7b4e8e44313cc0dcae0f159e098b465c08bef655300bfc901e55d6b94a4f8eb","first_seen":"2024-05-04T07:57:14Z","last_seen":"2026-02-12T03:34:09.499091Z","times_seen":6,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"7ea02e2ab2.e55a2001b9.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIxNTgwNDU1NTI1MjE2MDIxNTAwMCIsInRpbWV6b25lIjowLCJ2ZXIiOiIyLjM4LjciLCJ0YWdfaWQiOjU3MTE5LCJzY3JlZW5fcmVzb2x1dGlvbiI6IjEyODB4MTAyNCIsImFkYmxvY2siOjAsInRpbWV6b25lX29sc29uIjoiVVRDIiwidXRtX3NvdXJjZSI6IiIsInV0bV9tZWRpdW0iOiIiLCJ1dG1fY2FtcGFpZ24iOiIiLCJ1dG1fY29udGVudCI6IiIsIm1tIjowLCJpbml0X3N0YXJ0X2xhdGVuY3kiOjAuMzUsImlzX3YyIjowLCJpc192Ml9lbXB0eSI6MH0=","fqdn":"7ea02e2ab2.e55a2001b9.com","domain":"e55a2001b9.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:10.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"7ea02e2ab2.e55a2001b9.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 02:47:59 GMT","end":"Tue, 20 Jan 2026 02:47:58 GMT"},"fingerprint":{"sha1":"EF:D6:D4:8A:FB:5C:1A:6C:F8:E1:33:0B:D0:3C:7C:93:9B:C1:96:A8","sha256":"35:B1:DE:D4:49:9D:85:82:66:DE:FF:49:59:1F:B0:9C:12:01:9A:2F:59:DB:77:C7:87:0D:88:C0:75:87:C8:D2"}}},"request":{"raw":"GET /in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIxNTgwNDU1NTI1MjE2MDIxNTAwMCIsInRpbWV6b25lIjowLCJ2ZXIiOiIyLjM4LjciLCJ0YWdfaWQiOjU3MTE5LCJzY3JlZW5fcmVzb2x1dGlvbiI6IjEyODB4MTAyNCIsImFkYmxvY2siOjAsInRpbWV6b25lX29sc29uIjoiVVRDIiwidXRtX3NvdXJjZSI6IiIsInV0bV9tZWRpdW0iOiIiLCJ1dG1fY2FtcGFpZ24iOiIiLCJ1dG1fY29udGVudCI6IiIsIm1tIjowLCJpbml0X3N0YXJ0X2xhdGVuY3kiOjAuMzUsImlzX3YyIjowLCJpc192Ml9lbXB0eSI6MH0= HTTP/1.1\r\nHost: 7ea02e2ab2.e55a2001b9.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hd.xmovix.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 15:25:10 GMT\r\ncontent-length: 0\r\nserver: nginx/1.22.0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nx-cdn-host-id: AH1747\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-19T12:11:11.754429Z","times_seen":15436892,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":105,"dns":55,"connect":21,"send":0,"wait":33,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"7ea02e2ab2.e55a2001b9.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vast.yomeno.xyz/vast","fqdn":"vast.yomeno.xyz","domain":"yomeno.xyz","tld":"xyz"},"ip":{"addr":"109.206.161.16","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:11.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"vast.yomeno.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 03:20:42 GMT","end":"Wed, 31 Dec 2025 03:20:41 GMT"},"fingerprint":{"sha1":"C1:A0:EC:3E:36:CF:B7:DB:9C:46:F0:8B:28:CB:F6:1B:E8:ED:7C:AA","sha256":"23:03:9D:AA:E7:64:11:E6:ED:B5:03:CB:DC:03:54:4F:DF:DD:5A:95:E2:68:64:09:57:1F:27:FA:72:64:91:5E"}}},"request":{"raw":"POST /vast HTTP/1.1\r\nHost: vast.yomeno.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 1863\r\nOrigin: https://hd.xmovix.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Sat, 25 Oct 2025 15:25:11 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding, *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://hd.xmovix.net\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4009,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8fb0133b5f28b0daa3cd4ca3d0b2efeb","sha1":"12b4c880d25fe845f9641b6d38d82b0f420118aa","sha256":"bfcbefb6396ddea95c88637eea25dd3cfa67ed78568c4cb2666f7ba03e3d1c56","sha512":"bbb464f105a1159c708c61464f30572f203a0de6069a0babd1d8e87aafa9df673dadcda32bc3337116626f89c11e659ab588de95b6040e73604515dbea895a5b","ssdeep":"","tlshash":"18812ea304ac69964ff4248f2cd77a84c5d62117b6e93fee91d5ccac063d884439afd4","first_seen":"2025-10-25T15:25:40.388Z","last_seen":"2025-10-25T15:25:40.388Z","times_seen":1,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1000fapvids.com/v.html?player_url=https%3A%2F%2Fjs.canstrm.com%2Fvast-vpaid-player%2Fmain.js","fqdn":"1000fapvids.com","domain":"1000fapvids.com","tld":"com"},"ip":{"addr":"109.206.176.116","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:11.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"1000fapvids.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Sep 2025 03:08:41 GMT","end":"Wed, 03 Dec 2025 03:08:40 GMT"},"fingerprint":{"sha1":"7B:EA:67:6F:67:CC:D0:F5:BC:72:73:16:B9:60:B7:07:C2:50:DC:17","sha256":"56:A1:AE:7A:6F:1E:67:C9:AA:2F:DD:CF:4D:41:1E:0C:2F:BB:CE:B9:43:8C:78:7B:FE:44:37:3B:C4:11:79:51"}}},"request":{"raw":"GET /v.html?player_url=https%3A%2F%2Fjs.canstrm.com%2Fvast-vpaid-player%2Fmain.js HTTP/1.1\r\nHost: 1000fapvids.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.23.1\r\ndate: Sat, 25 Oct 2025 15:25:11 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Mon, 13 Oct 2025 14:31:52 GMT\r\netag: W/\"68ed0d58-e87\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 25 Oct 2025 15:27:42 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1747\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nx-nginx-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.23.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3719,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"977767d23eeee06e277bbb4abb3bacc5","sha1":"7af03f33e2381b3a39fbc43b1094ba409d988db1","sha256":"6bba572259db536ee739703a32132b2b5fd8f432b6ed7175100048acca4da7db","sha512":"8a7132719ecf0d862b40a325f37260a5c4a7a1a134c810d8488d905880f900cae1eebf73e0c611bd84bba5d5f68680619933b696e5cc1123cecd03b267bcd612","ssdeep":"","tlshash":"5771fe1d29f7102841a3f19a5f9f70243425f003310ace89fe4ceb555f8aa27a6a27dd","first_seen":"2024-12-30T21:09:29.33557Z","last_seen":"2026-05-17T21:35:12.89214Z","times_seen":35,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vast.yomeno.xyz/wrapper/m?katds_ep=6DgN1hMJ3sHWfP3ykKKL_1CF9Mz4V9bcjkXztcWNzkVas_HXXjMn74FGJUXw9SSkgDZ41PxVt5Dbj8WyQA","fqdn":"vast.yomeno.xyz","domain":"yomeno.xyz","tld":"xyz"},"ip":{"addr":"109.206.161.16","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1000fapvids.com/v.html?player_url=https%3A%2F%2Fjs.canstrm.com%2Fvast-vpaid-player%2Fmain.js","date":"2025-10-25T15:25:12.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"vast.yomeno.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 03:20:42 GMT","end":"Wed, 31 Dec 2025 03:20:41 GMT"},"fingerprint":{"sha1":"C1:A0:EC:3E:36:CF:B7:DB:9C:46:F0:8B:28:CB:F6:1B:E8:ED:7C:AA","sha256":"23:03:9D:AA:E7:64:11:E6:ED:B5:03:CB:DC:03:54:4F:DF:DD:5A:95:E2:68:64:09:57:1F:27:FA:72:64:91:5E"}}},"request":{"raw":"GET /wrapper/m?katds_ep=6DgN1hMJ3sHWfP3ykKKL_1CF9Mz4V9bcjkXztcWNzkVas_HXXjMn74FGJUXw9SSkgDZ41PxVt5Dbj8WyQA HTTP/1.1\r\nHost: vast.yomeno.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1000fapvids.com/\r\nOrigin: https://1000fapvids.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Sat, 25 Oct 2025 15:25:11 GMT\r\ncontent-type: text/xml;charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://1000fapvids.com\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36644,"size_decoded":0,"mime_type":"text/xml; charset=UTF-8","magic":"ASCII text, with very long lines (8507)","md5":"1f29d54b8e28c2b9e121dac2e1205dae","sha1":"b71628ace26be6ac1c7f70400931a423ed09d666","sha256":"8784cb50e59dfaebe7d355ea417bc170c6d91f3c84eb23d9e00a52a5baae0980","sha512":"80e6919b2cb917248607b4436672a07395c500c615bb68fbca02ee096d4ac5bdc141209570c7ff98e916ed4d7551d7c9e6ab0a31802639107fa8290ce0f01cd4","ssdeep":"768:gZw+ZwXZwGJZwFZwBZw5ZwmZwoZw0Zw+ZwoZw0:0wawJwGrw3wzwbwywsw4wawsw0","tlshash":"7cf2c8b60861177cfb25991c3cfd5e392b4a042698f018b5b6ee5c8c7b41e9fe4281bd","first_seen":"2025-10-25T15:25:40.389745Z","last_seen":"2025-10-25T15:25:40.389745Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hd.xmovix.net/templates/XmovixHD/images/flags/gb.png","fqdn":"hd.xmovix.net","domain":"xmovix.net","tld":"net"},"ip":{"addr":"104.21.75.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:09.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmovix.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 08:17:46 GMT","end":"Fri, 09 Jan 2026 09:15:17 GMT"},"fingerprint":{"sha1":"E0:29:B4:15:7B:84:A8:8E:4C:6F:38:26:B6:4C:91:E7:EA:DC:4F:33","sha256":"70:A9:AF:CC:7A:C2:CB:AF:67:4D:A8:FD:F4:27:76:A8:F5:00:78:F0:1E:1D:F5:24:64:87:2B:97:BF:99:18:EE"}}},"request":{"raw":"GET /templates/XmovixHD/images/flags/gb.png HTTP/1.1\r\nHost: hd.xmovix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/templates/XmovixHD/style/styles.css\r\nCookie: language=en; PHPSESSID=d8d876133430e02643de56ace62d60f4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 15:25:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 1767\r\nlast-modified: Fri, 15 Mar 2024 14:00:58 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GIC6AePVYbllh2AHZV1TRmxLKfp7kf97Q7RvlY4peRZc8AwdDyKdv26QhMH5DfHRNGm088iWXdft%2FOmb0qtakc53RrGh9Tj%2FTvmBMt0%3D\"}]}\r\netag: \"65f4549a-6e7\"\r\naccept-ranges: bytes\r\nage: 431\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9942b99439bb120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1767,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"ec7233b5c80e5db85f7733b2ec25203f","sha1":"d4c36fff06dc7d920b10eb13b58ea9cd9321b430","sha256":"347ee97a492f79675749d03533810ff899ee6a784b4e156f3e0a7613cdfb3d40","sha512":"89e59fa7fdef1f61485176467fd127acf55424aefcf78aca5c3944e59f0b802591587c9d90c4ff158f955b74798e933b41c84fd0d3842fa4600ec8b583c113b4","ssdeep":"","tlshash":"693109cf0b91610bd9cba7827ca71c17366659d422a7be1b4bda0dcc7f85c2ad004e38","first_seen":"2023-04-08T21:50:50Z","last_seen":"2026-05-19T09:23:51.541409Z","times_seen":6004,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toughvariation.com/c.DQ9A6kbw2u5HluSlW/QT9HNCD_QOzrMoz-YX1rNJSK0N0CNvDfMEzLNYjxUL2k","fqdn":"toughvariation.com","domain":"toughvariation.com","tld":"com"},"ip":{"addr":"88.85.94.250","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:10.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"toughvariation.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 23:31:17 GMT","end":"Fri, 12 Dec 2025 23:31:16 GMT"},"fingerprint":{"sha1":"4F:E2:F7:1C:B2:CD:34:A1:0E:5A:E3:22:6F:3F:71:54:03:11:9B:BD","sha256":"87:C3:8E:F9:BF:57:D1:AD:AD:1F:7E:CB:8D:79:D4:10:F1:9C:A8:F3:5E:B5:A2:11:AA:E4:79:6C:7C:82:CD:F7"}}},"request":{"raw":"GET /c.DQ9A6kbw2u5HluSlW/QT9HNCD_QOzrMoz-YX1rNJSK0N0CNvDfMEzLNYjxUL2k HTTP/1.1\r\nHost: toughvariation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Oct 2025 15:25:10 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nexpires: Mon, 26 Jul 2011 05:00:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-credentials: true\r\nlast-modified: Sat, 25 Oct 2025 15:25:10 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nset-cookie: uniqCookie=660d64c29acb7d2cb69b1e04774cc634; max-age=1763997910; path=/\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38267,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22794)","md5":"19ab6bf19295fea8d499b19eff699790","sha1":"68e3afa843c902a80743fa5bd57c728f62ca38c3","sha256":"e76b894e39ccf917157e6fe9898d1078ed1b7b5a35f6110c120787137a410ea8","sha512":"b0aa57daa84dd3fa6f3929b4b26355af097f2ab3fb72e36c68e792535c2a4a68a883775034395240dfadab29f5feadef4d10d67c444ebfbb027ac1e77e19af38","ssdeep":"768:QZhdZg7J02MLfTF9dFaQpp8JY29c6SboEBkleZ2YoOcLhgOPTgLg0oDEiG82ImAB:QZ1g7JQLqQpp8Jr9c6SboEBkleZ2qcL9","tlshash":"9b03c8c8b1c3642642eb507d713b7208b23a54655429f028bc39c8e5bc79e9f8677bbd","first_seen":"2025-10-25T15:25:40.391459Z","last_seen":"2025-10-25T15:25:40.391459Z","times_seen":1,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":116,"dns":57,"connect":17,"send":0,"wait":45,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ntvpforever.com/keywords","fqdn":"ntvpforever.com","domain":"ntvpforever.com","tld":"com"},"ip":{"addr":"116.202.204.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:10.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 02:36:27 GMT","end":"Tue, 25 Nov 2025 02:36:26 GMT"},"fingerprint":{"sha1":"64:AC:96:73:4F:92:FF:85:D0:1E:15:16:DA:B2:A2:8F:FA:02:1D:05","sha256":"1B:3E:09:8B:67:DE:C9:73:00:B7:68:C4:8A:D7:17:4D:D5:19:A0:85:23:3B:65:9C:31:C6:FB:A5:8E:BA:22:83"}}},"request":{"raw":"POST /keywords HTTP/1.1\r\nHost: ntvpforever.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 526\r\nOrigin: https://hd.xmovix.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Sat, 25 Oct 2025 15:25:10 GMT\r\ncontent-type: application/json\r\ncontent-length: 27\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1341fc8c623c978d6890cef9af52fd7f","sha1":"d3e8f82270fce2fc541127bed30e155bd42ef731","sha256":"7147a5c81dc941513f607ae0f438b518ba07a8517efc9d5b8afe5f2d8312635c","sha512":"8acec287827731162abca523d86b49137d70ebea027be47f18f9e1924a2e28efc5b4191061a5498c512d1ca7dbacd0142b2ba7822cd5c91c4ce396285233ff2a","ssdeep":"","tlshash":"ff80000830ca0c038c88b00032008a202008a2c2a002bceca0a2280083002802208c0c","first_seen":"2025-08-20T10:26:40.019594Z","last_seen":"2026-05-17T06:04:39.989263Z","times_seen":157,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"awpya.com/in/show/?tag_ab=c\u0026site_id=311455920\u0026adblock=0\u0026testab=0\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=hq\u0026pr=\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=0\u0026conditions=all,dch_ip,tz_offset\u0026ssp=3964\u0026page=https%3A%2F%2Fhd.xmovix.net%2Fen%2Fmovies%2Fhd-720p%2F9416-contact-5.html\u0026refdom=hd.xmovix.net\u0026auction_time=1761405911\u0026subid=813874590\u0026sid=1000785442\u0026tcid=0\u0026ver=8.242.10\u0026ver_c=\u0026spot_id=1455920\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2025-10-25\u0026iabcat=IAB25-3\u0026user_fp=3062215412326782139\u0026score=99.46655758417374\u0026kubik_score=99.47\u0026kaminari_bot_ip=1\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D813874590%26spot_id%3D1455920%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fhd.xmovix.net%252Fen%252Fmovies%252Fhd-720p%252F9416-contact-5.html%26idzone%3D0%26sid%3D1886\u0026is_cpm=0\u0026resp_type=\u0026crid=\u0026crtid=b0681ff5c1739e7f8bdbb8527f77d810\u0026url=https%3A%2F%2Frcdn-web.com%2Ft%2Fr.html%3Ft%3Dhttps%253A%252F%252Ffhvfd.com%252Fapi%252Fsubmit_form_request%253Fp%253D9c7b698d-28d7-400b-87e6-564a39bff3c4%2526ts%253D1761405911%2526z%253D8863325\u0026icons=GuV9_uhXKoItQ9pOu-bPnaB-bfj_5W288QqxYwNtOEeCbgK9i4GuFwXOHGPYGRuNfJcKniGjcNdEpNzxw9emKEdE-3oUGeMMXuqMLk_KspsL83pPd-PiYiUm9A1vXgdp74uRf7FU4aWWNYZlhLPc_PxsTYihtAWvxl7sOzJlboQG9sChuw\u0026ext_cid=0\u0026px_id=1331022417\u0026min_cpm=0.11461073322571151\u0026out_id=1\u0026campaign_type=lq-pop\u0026aid=4217\u0026cid=22320\u0026uniq=\u0026mid=3240929550838276900\u0026skin_id=71\u0026vertical_id=0\u0026skin_test=0\u0026from_cache=0\u0026ecpm=0.09067603749520607\u0026cpm=0.09067603749520607\u0026verify_hash=5196d851f5a6f2038109bb8010556efa\u0026verify_hash_v2=e984f2ec3aaa56c6d0e8ac45d091feed747a4440634296840fe112725f188f22\u0026is_native=2\u0026real_bid=0.000672\u0026original_bid_usd=0.000672\u0026original_bid=0.000672\u0026show_type=0\u0026exp=0\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=89,27,150,20,108,0,4\u0026need_redirect_show=0\u0026applied_features=coef_095,main-skins-settings,yf\u0026show_count=1\u0026expiration_timestamp=0\u0026image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FSG%2FSG_083be47dfc3e28c9a68305b76181a5033bc45790.webp\u0026site=native-push-adult\u0026price=0.000672\u0026hostname=auc-inpage-hz-2-c\u0026auc_type=1\u0026pop_type=1\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=\u0026pop_cpc=0.000000672\u0026ext_campaign_id_str=\u0026is_webview=0\u0026client_price=0\u0026direct_client_price=0\u0026priority=0\u0026client_payment_model=\u0026is_in_app=0\u0026auc_domain_type=basic\u0026script_type=antiadblock\u0026tma_wallet_balance=0\u0026processed_keywords=Adult%2CHD\u0026is_iframe=0\u0026traffic_category=adult\u0026iframe_click=0\u0026estimated_ctr=0.13493457960596142\u0026social_network=\u0026publisher_id=4883\u0026advanced_pub_id=1004644\u0026user_click_counter=1\u0026lv_id=0\u0026service_spot_id=0\u0026mediation_ecpm=0\u0026mediation_type=no_mediation\u0026entry_source=direct\u0026is_second_price=0\u0026payment_model=cpm\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=gamblingBlueMessage-view-b_r-body\u0026mlf=1\u0026mlc=1\u0026cpa=59204a22-0149-428a-8d20-005c94743b30\u0026prev_step_diff=495\u0026st=0.02","fqdn":"awpya.com","domain":"awpya.com","tld":"com"},"ip":{"addr":"116.202.204.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:11.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 02:36:27 GMT","end":"Tue, 25 Nov 2025 02:36:26 GMT"},"fingerprint":{"sha1":"64:AC:96:73:4F:92:FF:85:D0:1E:15:16:DA:B2:A2:8F:FA:02:1D:05","sha256":"1B:3E:09:8B:67:DE:C9:73:00:B7:68:C4:8A:D7:17:4D:D5:19:A0:85:23:3B:65:9C:31:C6:FB:A5:8E:BA:22:83"}}},"request":{"raw":"GET /in/show/?tag_ab=c\u0026site_id=311455920\u0026adblock=0\u0026testab=0\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=hq\u0026pr=\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=0\u0026conditions=all,dch_ip,tz_offset\u0026ssp=3964\u0026page=https%3A%2F%2Fhd.xmovix.net%2Fen%2Fmovies%2Fhd-720p%2F9416-contact-5.html\u0026refdom=hd.xmovix.net\u0026auction_time=1761405911\u0026subid=813874590\u0026sid=1000785442\u0026tcid=0\u0026ver=8.242.10\u0026ver_c=\u0026spot_id=1455920\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2025-10-25\u0026iabcat=IAB25-3\u0026user_fp=3062215412326782139\u0026score=99.46655758417374\u0026kubik_score=99.47\u0026kaminari_bot_ip=1\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D813874590%26spot_id%3D1455920%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fhd.xmovix.net%252Fen%252Fmovies%252Fhd-720p%252F9416-contact-5.html%26idzone%3D0%26sid%3D1886\u0026is_cpm=0\u0026resp_type=\u0026crid=\u0026crtid=b0681ff5c1739e7f8bdbb8527f77d810\u0026url=https%3A%2F%2Frcdn-web.com%2Ft%2Fr.html%3Ft%3Dhttps%253A%252F%252Ffhvfd.com%252Fapi%252Fsubmit_form_request%253Fp%253D9c7b698d-28d7-400b-87e6-564a39bff3c4%2526ts%253D1761405911%2526z%253D8863325\u0026icons=GuV9_uhXKoItQ9pOu-bPnaB-bfj_5W288QqxYwNtOEeCbgK9i4GuFwXOHGPYGRuNfJcKniGjcNdEpNzxw9emKEdE-3oUGeMMXuqMLk_KspsL83pPd-PiYiUm9A1vXgdp74uRf7FU4aWWNYZlhLPc_PxsTYihtAWvxl7sOzJlboQG9sChuw\u0026ext_cid=0\u0026px_id=1331022417\u0026min_cpm=0.11461073322571151\u0026out_id=1\u0026campaign_type=lq-pop\u0026aid=4217\u0026cid=22320\u0026uniq=\u0026mid=3240929550838276900\u0026skin_id=71\u0026vertical_id=0\u0026skin_test=0\u0026from_cache=0\u0026ecpm=0.09067603749520607\u0026cpm=0.09067603749520607\u0026verify_hash=5196d851f5a6f2038109bb8010556efa\u0026verify_hash_v2=e984f2ec3aaa56c6d0e8ac45d091feed747a4440634296840fe112725f188f22\u0026is_native=2\u0026real_bid=0.000672\u0026original_bid_usd=0.000672\u0026original_bid=0.000672\u0026show_type=0\u0026exp=0\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=89,27,150,20,108,0,4\u0026need_redirect_show=0\u0026applied_features=coef_095,main-skins-settings,yf\u0026show_count=1\u0026expiration_timestamp=0\u0026image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FSG%2FSG_083be47dfc3e28c9a68305b76181a5033bc45790.webp\u0026site=native-push-adult\u0026price=0.000672\u0026hostname=auc-inpage-hz-2-c\u0026auc_type=1\u0026pop_type=1\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=\u0026pop_cpc=0.000000672\u0026ext_campaign_id_str=\u0026is_webview=0\u0026client_price=0\u0026direct_client_price=0\u0026priority=0\u0026client_payment_model=\u0026is_in_app=0\u0026auc_domain_type=basic\u0026script_type=antiadblock\u0026tma_wallet_balance=0\u0026processed_keywords=Adult%2CHD\u0026is_iframe=0\u0026traffic_category=adult\u0026iframe_click=0\u0026estimated_ctr=0.13493457960596142\u0026social_network=\u0026publisher_id=4883\u0026advanced_pub_id=1004644\u0026user_click_counter=1\u0026lv_id=0\u0026service_spot_id=0\u0026mediation_ecpm=0\u0026mediation_type=no_mediation\u0026entry_source=direct\u0026is_second_price=0\u0026payment_model=cpm\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=gamblingBlueMessage-view-b_r-body\u0026mlf=1\u0026mlc=1\u0026cpa=59204a22-0149-428a-8d20-005c94743b30\u0026prev_step_diff=495\u0026st=0.02 HTTP/1.1\r\nHost: awpya.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Sat, 25 Oct 2025 15:25:11 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-19T12:11:11.754429Z","times_seen":15436892,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"awpya.com/in/show/?tag_ab=c\u0026site_id=311455920\u0026adblock=0\u0026testab=0\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=hq\u0026pr=\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=0\u0026conditions=all,dch_ip,tz_offset\u0026ssp=3964\u0026page=https%3A%2F%2Fhd.xmovix.net%2Fen%2Fmovies%2Fhd-720p%2F9416-contact-5.html\u0026refdom=hd.xmovix.net\u0026auction_time=1761405911\u0026subid=813874590\u0026sid=1000785442\u0026tcid=0\u0026ver=8.242.10\u0026ver_c=\u0026spot_id=1455920\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2025-10-25\u0026iabcat=IAB25-3\u0026user_fp=3062215412326782139\u0026score=99.46655758417374\u0026kubik_score=99.47\u0026kaminari_bot_ip=1\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D813874590%26spot_id%3D1455920%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fhd.xmovix.net%252Fen%252Fmovies%252Fhd-720p%252F9416-contact-5.html%26idzone%3D0%26sid%3D1886\u0026is_cpm=0\u0026resp_type=\u0026crid=215722\u0026crtid=47daa2de33a8a1088a04eea7be34b6aa\u0026url=https%3A%2F%2Fpointcontinentrtb.com%2Fv1%2Ftrack%2Fclick%3Fdata%3DeyJhbGciOiJIUzI1NiJ9.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.UiltCCAhFC1iKVW11N8wMRzH6Oz-lB8zQ7J4aKFnUtg%26sp%3D2.6999999999999996e-05%26skin_id%3D71\u0026icons=l4lICyeIO-uXb5j8T_nJtg-eNwhwi5oTtU5uuC8Perz21hPOHDN8f89ENRxAWBy5utCu-kh5aPcsmi6gyCdWPkbAz-Qc4bZqng0Dcb1Gl_RdHzKOzHW_hrU0GMYd4NrcQZvRHxndc1Q9zezwuTzhxazvQlj2oT39hpf4lfAeLcjVxYQlUzi2U2v5yZ44-1rl3R4Q5ZskKU0sjrVqgv4RU9UoccxpEQG2lMiVbox3RUBwYICr5z3C0sCWtXUoSz9bh4FAc5b8-7Vfyeh9W0Nh1J4jT_6BE4mQnS73fLhRDN4PDllmRKxH1EVy7AarYtydNL4vUKSID-DyV6riAoMML7xfnG8d7_Bs43Hf_h7GWLTkdJmXtxRQki9StfEslvhru4mRWyDRndNc1k08afTGibyRm4JhTEU2Gt5vYHUp7lIz0wsJYHdEjB2LLEtxA5w7jEMkfNxauKeOMSIZ2BCC-g100StF42YcppUwSpJOIxRanvVEZitHwfn-BjGqCzartOygNfEKPNsNltSkcOIBkQteXyfYLA9kEJoxabGRc2k212gAPHGEpwVMprrqcgyk2yl9q7ctqo_32xL0CqHV1CNhrx1-bG25lbBYLaKyZsyTLr9N_YSnM5ulhdAHrfT0GS6zkkGl-H4yMA1hfm9gpriWAf7hJT1Wuuv0hybGKe1Fh3oz5CGBA5wm1ucnv98eVlmvxsieY1T5BE6F7mV76bCXbZjppHqbXTAG8zsNqcaVNIV1H0lj-u0ShKVaz3wQD-YlpzUTz_nyQXH0X9zWsRMztylqB1akDHc7sTzsqUUtV-p4X8dKs-nknCQmkOoQwEdnIgPAeDbbRiTFF3W7St2nd7v2jMoFiSzh_n0rI3VbkaYiJ_VXX68dDfQFqMhisSWtPZj_PyksgY1zi2EP2BAm4Yhx-fAlz_LFyuVLa2ajoSpkFzdhDW3bxZP1clueK9VXDe1y_YTLKX-1phlKXI-8v0ZwkMpn_BVuQdo6_ZFq2MS6gJ7rhPmHZmWXLC5M_UamOIbH_07HEGb-NibEKNS57Qf4oDRfO-K4pXF-ZRuRI96n4lJWFMIUBy9jt4aGb1totr-_TxpZlMyWt6URtXTfaLPsk5AChURVmBqDANm3CL8SK3J12eRNfHNvVUpevvA-Ny_BI49P1lfvqw3z73yVggQJTik0sjcDxcKC8X63xk46vm6bZ1x5CYpd3mH7U4ZPPXEqWg0pslJOYtDFiuXKalt35zBZDbvnuvttto8iUX1C_CY82NfbqP7P9Tw-Is5N-zaBbOeYUoMYUpPD4z90OF2q3jlDnPIVy_77Ux3em8m6UrplFdHLlOHFhzBRNB3AXE624kbr5WYtbxF4JKfMZa89FxQbd_oI41f6GFrOPF12pb7ZYqwwVLrMj_PDvpX9Z42VAeUOFnSl1Oc9iJBqwoyUgGIGQ_yAUKQnr-oOzmcX6_dOZiiayedYRpp98i0Um5u55i03HMgI-kqnBMRIqg2keTMHKF_LirqghdY46Z2IjepRomjwkBG6tjD5BO0FKLBNboqJ-8ToK-P7PtYyW0bKDCc8eRYALrKttUORcBrhvfes1tHk7PKhI_wx9UD3YAWsDT4NjqHeS3lvkg9BB2SBvKgcTAFAZdqrBXGQXimmV8gL9eIDnXb4jRgIFt3EWaCkKr5fT7O9TOBbVa08xMLxAySi5Zrmw4D0rKHFt0FaYVTwsOpGessvxk_nbsCZ51Cyuz1TJKmxs6amrg8HJcgqU03qfWyA_3S8XKefBzcgzjkGVSOafrr0\u0026ext_cid=81347\u0026px_id=731455920\u0026min_cpm=0.007361697721223138\u0026out_id=0\u0026campaign_type=hq\u0026aid=3296\u0026cid=17910\u0026uniq=\u0026mid=3240929550838276900\u0026skin_id=71\u0026vertical_id=4\u0026skin_test=0\u0026from_cache=0\u0026ecpm=0.0002241375054108406\u0026cpm=0.0002340128546387067\u0026verify_hash=27928c4967b0f8e50c5e29e03a18c581\u0026verify_hash_v2=4ec8f1687ab5213b2d1e862801d21ae5c4b0784a09353877928734a41c87a574\u0026is_native=1\u0026real_bid=2.5860599219799085e-05\u0026original_bid_usd=0.000026999999999999996\u0026original_bid=2.6999999999999996e-05\u0026show_type=0\u0026exp=0\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=4,90,98,70,148\u0026need_redirect_show=0\u0026applied_features=main-skins-settings,yf,coef_095\u0026show_count=1\u0026expiration_timestamp=1761492311\u0026image_url=https%3A%2F%2Fassets.ahmybid.net%2Fc525a788-57c6-416f-ba51-b4deda4bf4b8.jpg\u0026site=native-push-adult\u0026price=0.000026999999999999996\u0026hostname=auc-inpage-hz-2-c\u0026auc_type=1\u0026pop_type=1\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=\u0026pop_cpc=0.000000026999999999999994\u0026ext_campaign_id_str=81347\u0026is_webview=0\u0026client_price=0.00002586059921979909\u0026direct_client_price=0\u0026priority=0\u0026client_payment_model=cpc\u0026is_in_app=0\u0026auc_domain_type=basic\u0026script_type=antiadblock\u0026tma_wallet_balance=0\u0026processed_keywords=Adult%2CHD\u0026is_iframe=0\u0026traffic_category=adult\u0026iframe_click=0\u0026estimated_ctr=0.008667142764396545\u0026social_network=\u0026publisher_id=4883\u0026advanced_pub_id=734883\u0026user_click_counter=1\u0026lv_id=8\u0026service_spot_id=0\u0026mediation_ecpm=0\u0026mediation_type=no_mediation\u0026entry_source=direct\u0026is_second_price=0\u0026payment_model=cpc\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=gamblingBlueMessage-view-b_r-body\u0026cpa=b99e0efe-493c-4e1e-84c8-468e2b1cd91f\u0026prev_step_diff=495\u0026st=0.02","fqdn":"awpya.com","domain":"awpya.com","tld":"com"},"ip":{"addr":"116.202.204.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:11.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 02:36:27 GMT","end":"Tue, 25 Nov 2025 02:36:26 GMT"},"fingerprint":{"sha1":"64:AC:96:73:4F:92:FF:85:D0:1E:15:16:DA:B2:A2:8F:FA:02:1D:05","sha256":"1B:3E:09:8B:67:DE:C9:73:00:B7:68:C4:8A:D7:17:4D:D5:19:A0:85:23:3B:65:9C:31:C6:FB:A5:8E:BA:22:83"}}},"request":{"raw":"GET /in/show/?tag_ab=c\u0026site_id=311455920\u0026adblock=0\u0026testab=0\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=hq\u0026pr=\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=0\u0026conditions=all,dch_ip,tz_offset\u0026ssp=3964\u0026page=https%3A%2F%2Fhd.xmovix.net%2Fen%2Fmovies%2Fhd-720p%2F9416-contact-5.html\u0026refdom=hd.xmovix.net\u0026auction_time=1761405911\u0026subid=813874590\u0026sid=1000785442\u0026tcid=0\u0026ver=8.242.10\u0026ver_c=\u0026spot_id=1455920\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2025-10-25\u0026iabcat=IAB25-3\u0026user_fp=3062215412326782139\u0026score=99.46655758417374\u0026kubik_score=99.47\u0026kaminari_bot_ip=1\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D813874590%26spot_id%3D1455920%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fhd.xmovix.net%252Fen%252Fmovies%252Fhd-720p%252F9416-contact-5.html%26idzone%3D0%26sid%3D1886\u0026is_cpm=0\u0026resp_type=\u0026crid=215722\u0026crtid=47daa2de33a8a1088a04eea7be34b6aa\u0026url=https%3A%2F%2Fpointcontinentrtb.com%2Fv1%2Ftrack%2Fclick%3Fdata%3DeyJhbGciOiJIUzI1NiJ9.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.UiltCCAhFC1iKVW11N8wMRzH6Oz-lB8zQ7J4aKFnUtg%26sp%3D2.6999999999999996e-05%26skin_id%3D71\u0026icons=l4lICyeIO-uXb5j8T_nJtg-eNwhwi5oTtU5uuC8Perz21hPOHDN8f89ENRxAWBy5utCu-kh5aPcsmi6gyCdWPkbAz-Qc4bZqng0Dcb1Gl_RdHzKOzHW_hrU0GMYd4NrcQZvRHxndc1Q9zezwuTzhxazvQlj2oT39hpf4lfAeLcjVxYQlUzi2U2v5yZ44-1rl3R4Q5ZskKU0sjrVqgv4RU9UoccxpEQG2lMiVbox3RUBwYICr5z3C0sCWtXUoSz9bh4FAc5b8-7Vfyeh9W0Nh1J4jT_6BE4mQnS73fLhRDN4PDllmRKxH1EVy7AarYtydNL4vUKSID-DyV6riAoMML7xfnG8d7_Bs43Hf_h7GWLTkdJmXtxRQki9StfEslvhru4mRWyDRndNc1k08afTGibyRm4JhTEU2Gt5vYHUp7lIz0wsJYHdEjB2LLEtxA5w7jEMkfNxauKeOMSIZ2BCC-g100StF42YcppUwSpJOIxRanvVEZitHwfn-BjGqCzartOygNfEKPNsNltSkcOIBkQteXyfYLA9kEJoxabGRc2k212gAPHGEpwVMprrqcgyk2yl9q7ctqo_32xL0CqHV1CNhrx1-bG25lbBYLaKyZsyTLr9N_YSnM5ulhdAHrfT0GS6zkkGl-H4yMA1hfm9gpriWAf7hJT1Wuuv0hybGKe1Fh3oz5CGBA5wm1ucnv98eVlmvxsieY1T5BE6F7mV76bCXbZjppHqbXTAG8zsNqcaVNIV1H0lj-u0ShKVaz3wQD-YlpzUTz_nyQXH0X9zWsRMztylqB1akDHc7sTzsqUUtV-p4X8dKs-nknCQmkOoQwEdnIgPAeDbbRiTFF3W7St2nd7v2jMoFiSzh_n0rI3VbkaYiJ_VXX68dDfQFqMhisSWtPZj_PyksgY1zi2EP2BAm4Yhx-fAlz_LFyuVLa2ajoSpkFzdhDW3bxZP1clueK9VXDe1y_YTLKX-1phlKXI-8v0ZwkMpn_BVuQdo6_ZFq2MS6gJ7rhPmHZmWXLC5M_UamOIbH_07HEGb-NibEKNS57Qf4oDRfO-K4pXF-ZRuRI96n4lJWFMIUBy9jt4aGb1totr-_TxpZlMyWt6URtXTfaLPsk5AChURVmBqDANm3CL8SK3J12eRNfHNvVUpevvA-Ny_BI49P1lfvqw3z73yVggQJTik0sjcDxcKC8X63xk46vm6bZ1x5CYpd3mH7U4ZPPXEqWg0pslJOYtDFiuXKalt35zBZDbvnuvttto8iUX1C_CY82NfbqP7P9Tw-Is5N-zaBbOeYUoMYUpPD4z90OF2q3jlDnPIVy_77Ux3em8m6UrplFdHLlOHFhzBRNB3AXE624kbr5WYtbxF4JKfMZa89FxQbd_oI41f6GFrOPF12pb7ZYqwwVLrMj_PDvpX9Z42VAeUOFnSl1Oc9iJBqwoyUgGIGQ_yAUKQnr-oOzmcX6_dOZiiayedYRpp98i0Um5u55i03HMgI-kqnBMRIqg2keTMHKF_LirqghdY46Z2IjepRomjwkBG6tjD5BO0FKLBNboqJ-8ToK-P7PtYyW0bKDCc8eRYALrKttUORcBrhvfes1tHk7PKhI_wx9UD3YAWsDT4NjqHeS3lvkg9BB2SBvKgcTAFAZdqrBXGQXimmV8gL9eIDnXb4jRgIFt3EWaCkKr5fT7O9TOBbVa08xMLxAySi5Zrmw4D0rKHFt0FaYVTwsOpGessvxk_nbsCZ51Cyuz1TJKmxs6amrg8HJcgqU03qfWyA_3S8XKefBzcgzjkGVSOafrr0\u0026ext_cid=81347\u0026px_id=731455920\u0026min_cpm=0.007361697721223138\u0026out_id=0\u0026campaign_type=hq\u0026aid=3296\u0026cid=17910\u0026uniq=\u0026mid=3240929550838276900\u0026skin_id=71\u0026vertical_id=4\u0026skin_test=0\u0026from_cache=0\u0026ecpm=0.0002241375054108406\u0026cpm=0.0002340128546387067\u0026verify_hash=27928c4967b0f8e50c5e29e03a18c581\u0026verify_hash_v2=4ec8f1687ab5213b2d1e862801d21ae5c4b0784a09353877928734a41c87a574\u0026is_native=1\u0026real_bid=2.5860599219799085e-05\u0026original_bid_usd=0.000026999999999999996\u0026original_bid=2.6999999999999996e-05\u0026show_type=0\u0026exp=0\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=4,90,98,70,148\u0026need_redirect_show=0\u0026applied_features=main-skins-settings,yf,coef_095\u0026show_count=1\u0026expiration_timestamp=1761492311\u0026image_url=https%3A%2F%2Fassets.ahmybid.net%2Fc525a788-57c6-416f-ba51-b4deda4bf4b8.jpg\u0026site=native-push-adult\u0026price=0.000026999999999999996\u0026hostname=auc-inpage-hz-2-c\u0026auc_type=1\u0026pop_type=1\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=\u0026pop_cpc=0.000000026999999999999994\u0026ext_campaign_id_str=81347\u0026is_webview=0\u0026client_price=0.00002586059921979909\u0026direct_client_price=0\u0026priority=0\u0026client_payment_model=cpc\u0026is_in_app=0\u0026auc_domain_type=basic\u0026script_type=antiadblock\u0026tma_wallet_balance=0\u0026processed_keywords=Adult%2CHD\u0026is_iframe=0\u0026traffic_category=adult\u0026iframe_click=0\u0026estimated_ctr=0.008667142764396545\u0026social_network=\u0026publisher_id=4883\u0026advanced_pub_id=734883\u0026user_click_counter=1\u0026lv_id=8\u0026service_spot_id=0\u0026mediation_ecpm=0\u0026mediation_type=no_mediation\u0026entry_source=direct\u0026is_second_price=0\u0026payment_model=cpc\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=gamblingBlueMessage-view-b_r-body\u0026cpa=b99e0efe-493c-4e1e-84c8-468e2b1cd91f\u0026prev_step_diff=495\u0026st=0.02 HTTP/1.1\r\nHost: awpya.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Sat, 25 Oct 2025 15:25:11 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-19T12:11:11.754429Z","times_seen":15436892,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1000fapvids.com/v.html?player_url=https%3A%2F%2Fjs.canstrm.com%2Fvast-vpaid-player%2Fmain.js","fqdn":"1000fapvids.com","domain":"1000fapvids.com","tld":"com"},"ip":{"addr":"109.206.176.116","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:11.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"1000fapvids.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Sep 2025 03:08:41 GMT","end":"Wed, 03 Dec 2025 03:08:40 GMT"},"fingerprint":{"sha1":"7B:EA:67:6F:67:CC:D0:F5:BC:72:73:16:B9:60:B7:07:C2:50:DC:17","sha256":"56:A1:AE:7A:6F:1E:67:C9:AA:2F:DD:CF:4D:41:1E:0C:2F:BB:CE:B9:43:8C:78:7B:FE:44:37:3B:C4:11:79:51"}}},"request":{"raw":"GET /v.html?player_url=https%3A%2F%2Fjs.canstrm.com%2Fvast-vpaid-player%2Fmain.js HTTP/1.1\r\nHost: 1000fapvids.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.23.1\r\ndate: Sat, 25 Oct 2025 15:25:11 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Mon, 13 Oct 2025 14:31:52 GMT\r\netag: W/\"68ed0d58-e87\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 25 Oct 2025 15:27:42 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1747\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nx-nginx-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.23.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3719,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"977767d23eeee06e277bbb4abb3bacc5","sha1":"7af03f33e2381b3a39fbc43b1094ba409d988db1","sha256":"6bba572259db536ee739703a32132b2b5fd8f432b6ed7175100048acca4da7db","sha512":"8a7132719ecf0d862b40a325f37260a5c4a7a1a134c810d8488d905880f900cae1eebf73e0c611bd84bba5d5f68680619933b696e5cc1123cecd03b267bcd612","ssdeep":"","tlshash":"5771fe1d29f7102841a3f19a5f9f70243425f003310ace89fe4ceb555f8aa27a6a27dd","first_seen":"2024-12-30T21:09:29.33557Z","last_seen":"2026-05-17T21:35:12.89214Z","times_seen":35,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":95,"dns":22,"connect":21,"send":0,"wait":21,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.canstrm.com/vast-vpaid-player/main.js","fqdn":"js.canstrm.com","domain":"canstrm.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1000fapvids.com/v.html?player_url=https%3A%2F%2Fjs.canstrm.com%2Fvast-vpaid-player%2Fmain.js","date":"2025-10-25T15:25:12.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.canstrm.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Sep 2025 08:33:52 GMT","end":"Tue, 09 Dec 2025 08:33:51 GMT"},"fingerprint":{"sha1":"77:E5:B7:94:76:6E:36:F8:B0:2C:2C:29:69:5D:3B:80:BD:22:15:EA","sha256":"6A:83:45:3C:74:3D:F0:5B:B7:0F:11:32:46:C3:A0:EB:34:79:D5:B8:F1:07:6C:8A:CE:83:D6:0F:42:E6:8B:F7"}}},"request":{"raw":"GET /vast-vpaid-player/main.js HTTP/1.1\r\nHost: js.canstrm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1000fapvids.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 15:25:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Mon, 13 Oct 2025 14:31:52 GMT\r\netag: W/\"68ed0d58-39e42\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 25 Oct 2025 15:30:12 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":237122,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63843)","md5":"9f996aa95c044a0f1cbc4097b2e81da5","sha1":"b35b9fbd34effa8bb1bd50f54b07d7e1e1a6068f","sha256":"28474aebb5144b6502c0822ba9e56c804e792f12bb717b152e49b0fc51ae9b6a","sha512":"73e940e1d07c9504f5630e62a69cb4a6bc7c13a52739cd3bf183e75f763085331f4bee625c9a0e2361666a3c2b8eb1bdd31d434e28f9cdd8d5de5808f61af807","ssdeep":"6144:fc2LH9F8sAvooiPQCCu2onfIqxLXCHT8rSgU8ACRr:fc2LH9F8sAvooiPQCCu2onfIqdXMt+","tlshash":"1f34299c72c2f07542e360b5803f110bb3392959a80d5550f669e9d6beb8e8e8237f7d","first_seen":"2025-10-25T15:25:40.393008Z","last_seen":"2025-10-25T15:25:40.393008Z","times_seen":1,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hd.xmovix.net/engine/classes/min/index.php?f=engine/classes/js/jqueryui.js,engine/classes/js/dle_js.js,engine/classes/js/lazyload.js\u0026v=d4b43","fqdn":"hd.xmovix.net","domain":"xmovix.net","tld":"net"},"ip":{"addr":"104.21.75.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:09.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmovix.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 08:17:46 GMT","end":"Fri, 09 Jan 2026 09:15:17 GMT"},"fingerprint":{"sha1":"E0:29:B4:15:7B:84:A8:8E:4C:6F:38:26:B6:4C:91:E7:EA:DC:4F:33","sha256":"70:A9:AF:CC:7A:C2:CB:AF:67:4D:A8:FD:F4:27:76:A8:F5:00:78:F0:1E:1D:F5:24:64:87:2B:97:BF:99:18:EE"}}},"request":{"raw":"GET /engine/classes/min/index.php?f=engine/classes/js/jqueryui.js,engine/classes/js/dle_js.js,engine/classes/js/lazyload.js\u0026v=d4b43 HTTP/1.1\r\nHost: hd.xmovix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html\r\nCookie: language=en; PHPSESSID=d8d876133430e02643de56ace62d60f4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 15:25:09 GMT\r\ncontent-type: application/x-javascript; charset=utf-8\r\ncontent-length: 40056\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Urjzfxiyfb2Y8DrjQMpu2%2FkYrDYBViPn6zjErkJKqO3vRsLlRgVRCkSU7oN8Rh9Mxwi15rOiGUstkh79JerMlF7RCleM7dmaAKyts0s%3D\"}]}\r\nexpires: Sun, 25 Oct 2026 15:25:09 GMT\r\nvary: Accept-Encoding\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nlast-modified: Sat, 02 Nov 2024 17:07:00 GMT\r\netag: \"pub1730567220;gz\"\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9942b99469c4120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156201,"size_decoded":0,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (18446), with CRLF line terminators","md5":"821f663ede77d82a5bc8ae575a32ddb2","sha1":"3600503db050e76ef606f66d775f2da28f5ec124","sha256":"200d959a45082a8ff8e58ef10089ac6d5830ea116990a64dcf6fbb2061302a1b","sha512":"b26528ff4ffe711e541b5bc0cac0bce68f635d494ffd8ae43477d63e7580bf64c225810635d225724b71beed646fadb8d4a6bfedfb575e352fb08a645b322eb1","ssdeep":"1536:c05yNdkV1zLQlPe2Yw3kub7wwxFLn0IR0CoKdu33iiHiQJFiBAJYIykfnRZH3Yhu:gNs6iyu3yiHiQJF1J7y4hKutNdyo","tlshash":"dce3f888f35d351a46fb7265607f118e72395135a205885cf83ccad82eb9e2822b7f7d","first_seen":"2025-09-30T21:49:22.129457Z","last_seen":"2026-02-12T03:34:09.532346Z","times_seen":4,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hd.xmovix.net/templates/XmovixHD/fonts/fontawesome-webfont.woff2?v=4.5.0","fqdn":"hd.xmovix.net","domain":"xmovix.net","tld":"net"},"ip":{"addr":"104.21.75.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:09.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmovix.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 08:17:46 GMT","end":"Fri, 09 Jan 2026 09:15:17 GMT"},"fingerprint":{"sha1":"E0:29:B4:15:7B:84:A8:8E:4C:6F:38:26:B6:4C:91:E7:EA:DC:4F:33","sha256":"70:A9:AF:CC:7A:C2:CB:AF:67:4D:A8:FD:F4:27:76:A8:F5:00:78:F0:1E:1D:F5:24:64:87:2B:97:BF:99:18:EE"}}},"request":{"raw":"GET /templates/XmovixHD/fonts/fontawesome-webfont.woff2?v=4.5.0 HTTP/1.1\r\nHost: hd.xmovix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/templates/XmovixHD/style/engine.css\r\nCookie: language=en; PHPSESSID=d8d876133430e02643de56ace62d60f4\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 15:25:09 GMT\r\ncontent-length: 66624\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FlJ90kywZcXOrWS7r3k%2Fq8SQZRydBEvvHMtc9TROmRdq2F8yVclXi9Uzr%2BlO%2BwErcDIlfE9zxoW1lHOyGrYoyjCW2vYsK6RizmAhQA8%3D\"}]}\r\nlast-modified: Fri, 15 Mar 2024 14:00:48 GMT\r\netag: \"10440-613b36f524400\"\r\naccept-ranges: bytes\r\nage: 601\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9942b99489c9120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66624,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 66624, version 4.262","md5":"db812d8a70a4e88e888744c1c9a27e89","sha1":"638c652d623280a58144f93e7b552c66d1667a11","sha256":"ff82aeed6b9bb6701696c84d1b223d2e682eb78c89117a438ce6cfea8c498995","sha512":"17222f02957b3335849e3fe277b17c21c4aaf0c76cd3da01a4ca39c035629695d29645913865b78e097066492f9cee5618af5159560363d2723bed7c3b9cf2a8","ssdeep":"1536:P7P0ehdxE792JHJ2qrz+MoCpeUtsG9eDeh9Zw+ZyqJ:PPlYw1re8Lsqh7MqJ","tlshash":"ae5302303406ab26ecdf0e8776b888f2b4da91d37b5f22c753aa84115dc91d5d94ca3e","first_seen":"2023-04-05T13:28:44Z","last_seen":"2026-05-19T11:14:39.161379Z","times_seen":30038,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.twinrdengine.com/adraw?zone=01JWTWYH5SHM14BTC5QXYFVM8P\u0026subid=521529346a1440234390\u0026kw=contact,5,(2025,hd),porn,movie,online,porn,movie,contact,5,watch,online,nearly,four,hours,of,","fqdn":"ad.twinrdengine.com","domain":"twinrdengine.com","tld":"com"},"ip":{"addr":"34.111.67.216","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:11.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad.twinrdengine.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 Aug 2025 01:00:18 GMT","end":"Sat, 29 Nov 2025 01:56:13 GMT"},"fingerprint":{"sha1":"1F:1D:97:E3:94:C0:3D:60:4A:4D:9F:3D:6E:0B:58:91:87:CF:3B:5D","sha256":"95:97:BE:B3:B2:08:B9:BB:49:A2:52:7D:BE:80:FB:FA:42:90:DC:15:FE:32:8E:85:DE:F2:22:A0:53:86:06:8F"}}},"request":{"raw":"GET /adraw?zone=01JWTWYH5SHM14BTC5QXYFVM8P\u0026subid=521529346a1440234390\u0026kw=contact,5,(2025,hd),porn,movie,online,porn,movie,contact,5,watch,online,nearly,four,hours,of, HTTP/1.1\r\nHost: ad.twinrdengine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hd.xmovix.net/\r\nOrigin: https://hd.xmovix.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nvary: origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://hd.xmovix.net\r\ncontent-type: text/xml\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\ndate: Sat, 25 Oct 2025 15:25:11 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":5044,"size_decoded":0,"mime_type":"text/xml","magic":"XML 1.0 document, ASCII text, with very long lines (1421)","md5":"546e401d6375d6c4e28361578fc4d9ff","sha1":"e7515a6dbb855933126a870caf169bbb32365aba","sha256":"7aae9ae9c40f79f28c2fc1b1062306565f44e43e4617be094828861463759b5a","sha512":"9ee47d68fa979446224f93769638d1d1351501c2c64ea2322bc919fa8594f6f2596c4e1f97fe20a58760a1f5343c609b53cb102c53900000be4c062caa75feb6","ssdeep":"96:xQ0FS/FdmBkpvkkufdMQ0FS/FdmBkpv8Q0FS/FdmBkpvR:xQn/+q8kuiQn/+qkQn/+qZ","tlshash":"1ba1db7b06f16ab79ee34595fd89da7e277312239e4001f0f78e2441db10848969bf49","first_seen":"2025-10-25T15:25:40.395851Z","last_seen":"2025-10-25T15:25:40.395851Z","times_seen":1,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":132,"dns":14,"connect":13,"send":0,"wait":49,"receive":0,"ssl":101},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.canstrm.com/vast-vpaid-player/main.js","fqdn":"js.canstrm.com","domain":"canstrm.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1000fapvids.com/v.html?player_url=https%3A%2F%2Fjs.canstrm.com%2Fvast-vpaid-player%2Fmain.js","date":"2025-10-25T15:25:12.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.canstrm.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Sep 2025 08:33:52 GMT","end":"Tue, 09 Dec 2025 08:33:51 GMT"},"fingerprint":{"sha1":"77:E5:B7:94:76:6E:36:F8:B0:2C:2C:29:69:5D:3B:80:BD:22:15:EA","sha256":"6A:83:45:3C:74:3D:F0:5B:B7:0F:11:32:46:C3:A0:EB:34:79:D5:B8:F1:07:6C:8A:CE:83:D6:0F:42:E6:8B:F7"}}},"request":{"raw":"GET /vast-vpaid-player/main.js HTTP/1.1\r\nHost: js.canstrm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1000fapvids.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 15:25:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Mon, 13 Oct 2025 14:31:52 GMT\r\netag: W/\"68ed0d58-39e42\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 25 Oct 2025 15:30:12 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":237122,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63843)","md5":"9f996aa95c044a0f1cbc4097b2e81da5","sha1":"b35b9fbd34effa8bb1bd50f54b07d7e1e1a6068f","sha256":"28474aebb5144b6502c0822ba9e56c804e792f12bb717b152e49b0fc51ae9b6a","sha512":"73e940e1d07c9504f5630e62a69cb4a6bc7c13a52739cd3bf183e75f763085331f4bee625c9a0e2361666a3c2b8eb1bdd31d434e28f9cdd8d5de5808f61af807","ssdeep":"6144:fc2LH9F8sAvooiPQCCu2onfIqxLXCHT8rSgU8ACRr:fc2LH9F8sAvooiPQCCu2onfIqdXMt+","tlshash":"1f34299c72c2f07542e360b5803f110bb3392959a80d5550f669e9d6beb8e8e8237f7d","first_seen":"2025-10-25T15:25:40.393008Z","last_seen":"2025-10-25T15:25:40.393008Z","times_seen":1,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.forscprts.com/easy?campaignId=25bdc61ed3917811c8f3f36a1e6e0fb40a4bf9db56e01082448f446fc27cc57b\u0026userId=a29e4fa1023dd45be975c4ab2c3f63fc721842490735020a0d0703eb57f7300d\u0026memberId=0641fd45b5021542f8843f\u0026sourceId=100863\u0026p1=60690\u0026p2=113256\u0026p3=101783","fqdn":"go.forscprts.com","domain":"forscprts.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1000fapvids.com/v.html?player_url=https%3A%2F%2Fjs.canstrm.com%2Fvast-vpaid-player%2Fmain.js","date":"2025-10-25T15:25:12.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.forscprts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 20:58:53 GMT","end":"Fri, 12 Dec 2025 21:19:55 GMT"},"fingerprint":{"sha1":"AD:2E:E6:89:40:EE:99:C2:2F:D5:3E:7F:72:5E:7A:8B:D9:8F:CF:F7","sha256":"40:2F:2D:5E:AB:0A:F5:22:4B:8E:CA:F1:13:FC:E5:AA:5D:30:90:AE:83:A7:8D:A8:17:49:54:0E:FA:65:A3:66"}}},"request":{"raw":"GET /easy?campaignId=25bdc61ed3917811c8f3f36a1e6e0fb40a4bf9db56e01082448f446fc27cc57b\u0026userId=a29e4fa1023dd45be975c4ab2c3f63fc721842490735020a0d0703eb57f7300d\u0026memberId=0641fd45b5021542f8843f\u0026sourceId=100863\u0026p1=60690\u0026p2=113256\u0026p3=101783 HTTP/1.1\r\nHost: go.forscprts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1000fapvids.com/\r\nOrigin: https://1000fapvids.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sat, 25 Oct 2025 15:25:12 GMT\r\ncontent-length: 0\r\nlocation: https://go.forscprts.com/api/models/vast?action=sbSignupWithModelSoft\u0026campaignId=25bdc61ed3917811c8f3f36a1e6e0fb40a4bf9db56e01082448f446fc27cc57b\u0026campaignType=smartpop\u0026creativeId=848c9861daeb8c71077e63185fe70108f0fc581bfa4a1361d3aad7791cbd1e0d\u0026duration=00%3A00%3A30\u0026iterationId=1075275\u0026masterSmartpopId=2683\u0026memberId=0641fd45b5021542f8843f\u0026p1=60690\u0026p2=113256\u0026p3=101783\u0026ruleId=29\u0026skipOffset=00%3A00%3A05\u0026smartpopId=14005\u0026sourceId=100863\u0026tag=girls\u0026trafficType=preroll\u0026usePreroll=true\u0026userId=a29e4fa1023dd45be975c4ab2c3f63fc721842490735020a0d0703eb57f7300d\u0026variationId=34733\u0026videoType=ol\r\ncf-ray: 9942b9a809440b02-OSL\r\naccess-control-allow-origin: https://1000fapvids.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2278,"size_decoded":0,"mime_type":"text/xml; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-19T12:11:11.754429Z","times_seen":15436892,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kts.bartcons.com/in/vmon/?title=SPREAD%20LEGS%20%2B%20SPANK%20WET%20PUSSY%20IN%20PANTIES\u0026system=SSP%20LINK%20Wrapper%2Ctwinrdengine%2Cstripcash.com\u0026type=vast\u0026mediafile=https%3A%2F%2Fvideo.sacdnssedge.com%2Fvideo%2Fol_f2c0d95da6924428aa30976d3b0b7e50.mp4\u0026click=https%3A%2F%2Fgo.forscprts.com%2F%3FabTest%3Dlandingvast_default260925%26abTestVariant%3Dlandingvast_default260925_default_30%26action%3DsbSignupWithModelSoft%26campaignId%3D25bdc61ed3917811c8f3f36a1e6e0fb40a4bf9db56e01082448f446fc27cc57b%26campaignType%3Dsmartpop%26creativeId%3D848c9861daeb8c71077e63185fe70108f0fc581bfa4a1361d3aad7791cbd1e0d%26iterationId%3D1075275%26landing%3DlandingVAST%26masterSmartpopId%3D2683%26memberId%3D0641fd45b4f9d390c01c65%26modelId%3D163955134%26onlineModels%3DAsian_Asami%26p1%3D60690%26p2%3D113256%26p3%3D101783%26referrer%3Dhttps%253A%252F%252F1000fapvids.com%252F%26ruleId%3D29%26segment%3Dhls-Asian_Asami-1%26smartpopId%3D14005%26sourceId%3D100863%26stripcashR%3D1%26tag%3Dgirls%26trafficType%3Dpreroll%26userId%3Da29e4fa1023dd45be975c4ab2c3f63fc721842490735020a0d0703eb57f7300d%26variationId%3D34733\u0026katds_ep=QMqpzBsMQoi6VImAJRcayjJLWLf93QrUByGWstw8GpKI42bCUMT6iIf-mE0Pv8ETRr4ZWdNgZB9IaAOTtKNflxbRycQpxNf5odQsaacfrI2VhSCzU3D1wWm96glCGoey13Zi8AKk5w","fqdn":"kts.bartcons.com","domain":"bartcons.com","tld":"com"},"ip":{"addr":"62.122.168.42","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:12.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kts.bartcons.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Oct 2025 03:13:06 GMT","end":"Tue, 06 Jan 2026 03:13:05 GMT"},"fingerprint":{"sha1":"DA:BF:79:90:17:62:56:16:70:20:05:59:A0:3D:03:F1:FF:04:46:11","sha256":"C3:40:A4:D4:07:FB:03:20:94:50:01:29:38:94:4D:06:F3:76:FE:0F:19:CB:76:63:02:45:50:A7:F1:76:54:48"}}},"request":{"raw":"GET /in/vmon/?title=SPREAD%20LEGS%20%2B%20SPANK%20WET%20PUSSY%20IN%20PANTIES\u0026system=SSP%20LINK%20Wrapper%2Ctwinrdengine%2Cstripcash.com\u0026type=vast\u0026mediafile=https%3A%2F%2Fvideo.sacdnssedge.com%2Fvideo%2Fol_f2c0d95da6924428aa30976d3b0b7e50.mp4\u0026click=https%3A%2F%2Fgo.forscprts.com%2F%3FabTest%3Dlandingvast_default260925%26abTestVariant%3Dlandingvast_default260925_default_30%26action%3DsbSignupWithModelSoft%26campaignId%3D25bdc61ed3917811c8f3f36a1e6e0fb40a4bf9db56e01082448f446fc27cc57b%26campaignType%3Dsmartpop%26creativeId%3D848c9861daeb8c71077e63185fe70108f0fc581bfa4a1361d3aad7791cbd1e0d%26iterationId%3D1075275%26landing%3DlandingVAST%26masterSmartpopId%3D2683%26memberId%3D0641fd45b4f9d390c01c65%26modelId%3D163955134%26onlineModels%3DAsian_Asami%26p1%3D60690%26p2%3D113256%26p3%3D101783%26referrer%3Dhttps%253A%252F%252F1000fapvids.com%252F%26ruleId%3D29%26segment%3Dhls-Asian_Asami-1%26smartpopId%3D14005%26sourceId%3D100863%26stripcashR%3D1%26tag%3Dgirls%26trafficType%3Dpreroll%26userId%3Da29e4fa1023dd45be975c4ab2c3f63fc721842490735020a0d0703eb57f7300d%26variationId%3D34733\u0026katds_ep=QMqpzBsMQoi6VImAJRcayjJLWLf93QrUByGWstw8GpKI42bCUMT6iIf-mE0Pv8ETRr4ZWdNgZB9IaAOTtKNflxbRycQpxNf5odQsaacfrI2VhSCzU3D1wWm96glCGoey13Zi8AKk5w HTTP/1.1\r\nHost: kts.bartcons.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hd.xmovix.net/\r\nOrigin: https://hd.xmovix.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.20.1\r\ndate: Sat, 25 Oct 2025 15:25:13 GMT\r\nvary: *\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://hd.xmovix.net\r\npragma: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-19T12:11:11.754429Z","times_seen":15436892,"resource_available":true,"data":null}},"time_used":520,"timings":{"blocked":234,"dns":4,"connect":21,"send":0,"wait":78,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"kts.bartcons.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hd.xmovix.net/templates/XmovixHD/style/styles.css","fqdn":"hd.xmovix.net","domain":"xmovix.net","tld":"net"},"ip":{"addr":"104.21.75.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:09.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmovix.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 08:17:46 GMT","end":"Fri, 09 Jan 2026 09:15:17 GMT"},"fingerprint":{"sha1":"E0:29:B4:15:7B:84:A8:8E:4C:6F:38:26:B6:4C:91:E7:EA:DC:4F:33","sha256":"70:A9:AF:CC:7A:C2:CB:AF:67:4D:A8:FD:F4:27:76:A8:F5:00:78:F0:1E:1D:F5:24:64:87:2B:97:BF:99:18:EE"}}},"request":{"raw":"GET /templates/XmovixHD/style/styles.css HTTP/1.1\r\nHost: hd.xmovix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html\r\nCookie: language=en; PHPSESSID=d8d876133430e02643de56ace62d60f4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 15:25:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Dec 2024 14:56:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wLLAPr70xFQWeNxwM2ukrBvapx8qz4ZYDk81tFfgiB1r9eB4q3I%2BwGlvLjRIGfsT9LnQMhMcm20sy7VPPgGzMWDqK4nTOihSiYip5HM%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"6764340f-ff9d\"\r\ncontent-encoding: gzip\r\nage: 601\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 9942b993998f120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65437,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (421)","md5":"95b10be84a62987dffd4cad49ad3fb41","sha1":"be7fad79a9450c92522190f35c2b4dea57859045","sha256":"7ed2b6d854ffd78801083b967173e69c064fef0d5300c2e7dc87f60934eeaea7","sha512":"3887d607789cf5b01aa3f8ae2e9bfd7f01b3edb0f0aa5e1ec2375330c22820597945ab66ac042a7d94cbeafb95641c726c6044a88fd61825fa2b4cf328738417","ssdeep":"1536:BErUqdMR1chgFgFAk8fjkzOCio2sMQ4UywY31JS60mumKc8ilkce9wlEY:1P+m","tlshash":"43539821e7113109f02be1a67dd2db9a73288013e6071bfde9b63864d68f8d815377da","first_seen":"2025-09-30T21:49:22.131814Z","last_seen":"2026-02-12T03:34:09.503941Z","times_seen":4,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hd.xmovix.net/templates/XmovixHD/images/login.png","fqdn":"hd.xmovix.net","domain":"xmovix.net","tld":"net"},"ip":{"addr":"104.21.75.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:09.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmovix.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 08:17:46 GMT","end":"Fri, 09 Jan 2026 09:15:17 GMT"},"fingerprint":{"sha1":"E0:29:B4:15:7B:84:A8:8E:4C:6F:38:26:B6:4C:91:E7:EA:DC:4F:33","sha256":"70:A9:AF:CC:7A:C2:CB:AF:67:4D:A8:FD:F4:27:76:A8:F5:00:78:F0:1E:1D:F5:24:64:87:2B:97:BF:99:18:EE"}}},"request":{"raw":"GET /templates/XmovixHD/images/login.png HTTP/1.1\r\nHost: hd.xmovix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/templates/XmovixHD/style/styles.css\r\nCookie: language=en; PHPSESSID=d8d876133430e02643de56ace62d60f4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 15:25:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 459\r\nlast-modified: Fri, 15 Mar 2024 14:00:50 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eDHZNj64Dhv%2Bg0yfilU7%2B6QeHF157F6Ppaf2uWRiQocjOmq%2F2SfsjqbYzdqQteLAZEUy1ZARE3NATGCkQDvBqrI31FCL8ydFZah0aTw%3D\"}]}\r\netag: \"65f45492-1cb\"\r\naccept-ranges: bytes\r\nage: 2340\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9942b99419b5120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":459,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"ab1dfbbd582f2cf112a4da2ce28f7ee5","sha1":"4c0b97dc5077edcb09bd0c261305681aa6118247","sha256":"eb84bcd433f5534ad24bb294851fe36429947cec0c51d92be964ae929f84f2fc","sha512":"183f3469572eb062d5fc97bb5932616a08132f5124e1048868082cd2c2ba0401fe1b6ed41c38959d2b163326f1d17d10e9b23f10492ec28ca9bfd65c3a323b18","ssdeep":"","tlshash":"13f054d235badc5cd81d1137236808c40c33173443d10e5ee234e9339bea40db4a83b0","first_seen":"2023-06-27T01:50:01Z","last_seen":"2026-02-12T03:34:09.51571Z","times_seen":27,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hd.xmovix.net/templates/XmovixHD/fonts/Roboto.woff","fqdn":"hd.xmovix.net","domain":"xmovix.net","tld":"net"},"ip":{"addr":"104.21.75.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:09.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmovix.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 08:17:46 GMT","end":"Fri, 09 Jan 2026 09:15:17 GMT"},"fingerprint":{"sha1":"E0:29:B4:15:7B:84:A8:8E:4C:6F:38:26:B6:4C:91:E7:EA:DC:4F:33","sha256":"70:A9:AF:CC:7A:C2:CB:AF:67:4D:A8:FD:F4:27:76:A8:F5:00:78:F0:1E:1D:F5:24:64:87:2B:97:BF:99:18:EE"}}},"request":{"raw":"GET /templates/XmovixHD/fonts/Roboto.woff HTTP/1.1\r\nHost: hd.xmovix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/templates/XmovixHD/style/styles.css\r\nCookie: language=en; PHPSESSID=d8d876133430e02643de56ace62d60f4\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 15:25:09 GMT\r\ncontent-type: application/font-woff\r\ncontent-length: 93388\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lF%2BkY6bLy0MeOh%2FYFfgEcdjqZtpXNsV%2FSWevRDZj4DQzdaKyy6SjJGhFQh8rBAC5gV2kC8XIaqvqPJqTjcmRv%2BVjcvo1BHRxuzY2jv4%3D\"}]}\r\nlast-modified: Fri, 15 Mar 2024 14:00:48 GMT\r\netag: \"16ccc-613b36f524400\"\r\naccept-ranges: bytes\r\nage: 601\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9942b99479c6120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93388,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 93388, version 0.0","md5":"94dac78eee406a8c8f0406b69b85ac2b","sha1":"e9e77fc073e302b714e30698276fad6adaf179cd","sha256":"18ab5ae448dcec1f31abbbaa7dce8dcb1d890479f1bc4670a89c95f10063cf3e","sha512":"ce66be3046a71d53f78cca307c08c36341045ecbaca317a5cd90ad9f749158f213901208e73361223be4ff50c0c34dd172a015116bb16c753476843ea97b7adc","ssdeep":"1536:hPsAKi/Zo1QIvgyHUOhuCnN1XQh8CZuZGSu475n58Dj+ARY3niXdWowsO:BsVi/SpvrHgCXpquo475n5uj+AR8nwdc","tlshash":"29930286d3c7b47a3e1e037d994692ca12b184a3a86d489fbd1bc24898c6b0dfc5d265","first_seen":"2023-04-06T20:46:16Z","last_seen":"2026-05-19T03:03:45.291932Z","times_seen":1710,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ntvpforever.com/keywords","fqdn":"ntvpforever.com","domain":"ntvpforever.com","tld":"com"},"ip":{"addr":"116.202.204.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:10.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 02:36:27 GMT","end":"Tue, 25 Nov 2025 02:36:26 GMT"},"fingerprint":{"sha1":"64:AC:96:73:4F:92:FF:85:D0:1E:15:16:DA:B2:A2:8F:FA:02:1D:05","sha256":"1B:3E:09:8B:67:DE:C9:73:00:B7:68:C4:8A:D7:17:4D:D5:19:A0:85:23:3B:65:9C:31:C6:FB:A5:8E:BA:22:83"}}},"request":{"raw":"OPTIONS /keywords HTTP/1.1\r\nHost: ntvpforever.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://hd.xmovix.net/\r\nOrigin: https://hd.xmovix.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.24.0\r\ndate: Sat, 25 Oct 2025 15:25:10 GMT\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-19T12:11:11.754429Z","times_seen":15436892,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":60,"dns":14,"connect":25,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.forscprts.com/api/models/vast?action=sbSignupWithModelSoft\u0026campaignId=25bdc61ed3917811c8f3f36a1e6e0fb40a4bf9db56e01082448f446fc27cc57b\u0026campaignType=smartpop\u0026creativeId=848c9861daeb8c71077e63185fe70108f0fc581bfa4a1361d3aad7791cbd1e0d\u0026duration=00%3A00%3A30\u0026iterationId=1075275\u0026masterSmartpopId=2683\u0026memberId=0641fd45b05137dea949fc\u0026p1=60690\u0026p2=113256\u0026p3=101783\u0026ruleId=29\u0026skipOffset=00%3A00%3A05\u0026smartpopId=14005\u0026sourceId=100863\u0026tag=girls\u0026trafficType=preroll\u0026usePreroll=true\u0026userId=a29e4fa1023dd45be975c4ab2c3f63fc721842490735020a0d0703eb57f7300d\u0026variationId=34733\u0026videoType=ol","fqdn":"go.forscprts.com","domain":"forscprts.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:12.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.forscprts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 20:58:53 GMT","end":"Fri, 12 Dec 2025 21:19:55 GMT"},"fingerprint":{"sha1":"AD:2E:E6:89:40:EE:99:C2:2F:D5:3E:7F:72:5E:7A:8B:D9:8F:CF:F7","sha256":"40:2F:2D:5E:AB:0A:F5:22:4B:8E:CA:F1:13:FC:E5:AA:5D:30:90:AE:83:A7:8D:A8:17:49:54:0E:FA:65:A3:66"}}},"request":{"raw":"GET /api/models/vast?action=sbSignupWithModelSoft\u0026campaignId=25bdc61ed3917811c8f3f36a1e6e0fb40a4bf9db56e01082448f446fc27cc57b\u0026campaignType=smartpop\u0026creativeId=848c9861daeb8c71077e63185fe70108f0fc581bfa4a1361d3aad7791cbd1e0d\u0026duration=00%3A00%3A30\u0026iterationId=1075275\u0026masterSmartpopId=2683\u0026memberId=0641fd45b05137dea949fc\u0026p1=60690\u0026p2=113256\u0026p3=101783\u0026ruleId=29\u0026skipOffset=00%3A00%3A05\u0026smartpopId=14005\u0026sourceId=100863\u0026tag=girls\u0026trafficType=preroll\u0026usePreroll=true\u0026userId=a29e4fa1023dd45be975c4ab2c3f63fc721842490735020a0d0703eb57f7300d\u0026variationId=34733\u0026videoType=ol HTTP/1.1\r\nHost: go.forscprts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hd.xmovix.net\r\nReferer: https://hd.xmovix.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 15:25:12 GMT\r\ncontent-type: text/xml; charset=utf-8\r\ncf-ray: 9942b9a798c10b02-OSL\r\naccess-control-allow-origin: https://hd.xmovix.net\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2274,"size_decoded":0,"mime_type":"text/xml; charset=utf-8","magic":"XML 1.0 document, ASCII text, with very long lines (2274), with no line terminators","md5":"ac13b864574be29b4f7265362d16854e","sha1":"08296e5ff139785f0cd96c2561df5b1b8316abc7","sha256":"d3f921db7025534bd5bd075dce3cec17011966ee0fa8f2e28b1ef9388d6c0ac7","sha512":"cea053902619c45805b7d30df07c1487e59d66526e363e9b8d93f45d56349c3744479d724afb1f96c41f8cfb4836971fa754b0d766caa0b84bbdbd64eac36b72","ssdeep":"","tlshash":"a84195bd6231ac333ac3e47e989460c9153a0a2f7ec182f5e94d1d42991d6da67f03ad","first_seen":"2025-10-25T15:25:40.401541Z","last_seen":"2025-10-25T15:25:40.401541Z","times_seen":1,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S270863799:1761405912190888\u0026ifkv=ARESoU3csxPBs3DIz1dWV4Hiafailj9FeZCGB5ZMnIrpg1WwY3LNEmMdELO-mdTYVM0n84xn-QmD","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"64.233.162.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:12.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:32:25 GMT","end":"Wed, 24 Dec 2025 14:32:24 GMT"},"fingerprint":{"sha1":"3A:78:B2:96:D0:CD:A5:D3:08:6F:80:16:15:5C:10:CC:41:FE:1B:12","sha256":"D2:92:7D:D4:5D:78:BC:69:FC:32:73:D8:16:EF:3A:37:3A:0E:0C:2D:50:4F:FE:51:7E:F7:EA:93:56:B9:8C:1D"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://m.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S270863799:1761405912190888\u0026ifkv=ARESoU3csxPBs3DIz1dWV4Hiafailj9FeZCGB5ZMnIrpg1WwY3LNEmMdELO-mdTYVM0n84xn-QmD HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:TpWZ38vU73XB-sQKVECXa8w3ER7zrw:sHGel2TUFGFLxVSa;Path=/;Expires=Mon, 25-Oct-2027 15:25:12 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 25 Oct 2025 15:25:12 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026dsh=S270863799%3A1761405912190888\u0026hl=en\u0026ifkv=ARESoU2BlBMQqWQo106pRUowMVFjEnE-93LjNjH7KqA4a7wN1YsPJOBxWcqpAY9i19biWtP59SirYA\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: script-src 'nonce-jyxyVBO5s7lhsdJddKchSw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 416\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-19T12:11:11.754429Z","times_seen":15436892,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"video.sacdnssedge.com/video/ol_f2c0d95da6924428aa30976d3b0b7e50.mp4","fqdn":"video.sacdnssedge.com","domain":"sacdnssedge.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://1000fapvids.com/v.html?player_url=https%3A%2F%2Fjs.canstrm.com%2Fvast-vpaid-player%2Fmain.js","date":"2025-10-25T15:25:12.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1894120159.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 11:23:17 GMT","end":"Mon, 01 Dec 2025 11:23:16 GMT"},"fingerprint":{"sha1":"6C:F0:E6:7B:64:17:10:A8:FA:BF:27:07:10:15:AF:6E:E6:98:D4:B0","sha256":"96:D2:44:B3:D4:D6:DE:C6:FD:A7:7F:68:CE:B6:6A:C0:5A:AF:0C:DD:A8:39:FC:80:62:ED:93:CA:F6:D7:27:72"}}},"request":{"raw":"GET /video/ol_f2c0d95da6924428aa30976d3b0b7e50.mp4 HTTP/1.1\r\nHost: video.sacdnssedge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1000fapvids.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Sat, 25 Oct 2025 15:25:12 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 2417980\r\nvary: accept-encoding\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"ol_f2c0d95da6924428aa30976d3b0b7e50.mp4\"\r\netag: \"2786c0ed23bf9854c67ace1750d1c178\"\r\nexpires: Sat, 25 Oct 2025 16:21:08 GMT\r\nlast-modified: Sat, 25 Oct 2025 15:21:08 GMT\r\nx-amz-request-id: 5de9b9e4-9d7c-43ce-a499-03ac0bdcb419\r\ncache-control: max-age=7200\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncf-cache-status: HIT\r\nage: 1\r\ncf-ray: 9942b3b78a03d26c-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-77-nzt: EwwBX63NDQH37gAAAAwBuUwKDAH3BQAAAAwBT3/Y+AG3AAAAAA\r\nx-77-nzt-ray: 2a494a151c0b51dafdebfc68aaa70a37\r\nx-77-cache: HIT\r\nx-77-age: 238\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 0-2417979/2417980\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1376256,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"6b75f9a8f9203e6762e32c3c894aa04b","sha1":"4df93dfd88a88597d79de4350206276da57ef78a","sha256":"d35f3f2eb2a962592c3773e9ea6632fcf73e9b29f22fa683dd06e20a0b12702b","sha512":"51ead7fa82e91a0dbdcec5e9a6bded56b7744eb448ec6246758fdad138d9a23abbfcd6d4a5461635627addec6e8f0f31deb5367581024eb23276f0786fd6f125","ssdeep":"24576:boiwycTexJWbHhqbBGQTRLpVZuVu8c1yM/k6:DKkGhqbBvTpZspsyM86","tlshash":"6c2533e30481613ddae8127e236f023569b73515c4974c07be85b106ef496a3fba3b7a","first_seen":"2025-10-25T15:25:40.368273Z","last_seen":"2025-10-25T15:25:40.368273Z","times_seen":1,"resource_available":false,"data":null}},"time_used":474,"timings":{"blocked":234,"dns":68,"connect":6,"send":0,"wait":2,"receive":0,"ssl":151},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"video.sacdnssedge.com/video/ol_f2c0d95da6924428aa30976d3b0b7e50.mp4","fqdn":"video.sacdnssedge.com","domain":"sacdnssedge.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:12.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1894120159.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 11:23:17 GMT","end":"Mon, 01 Dec 2025 11:23:16 GMT"},"fingerprint":{"sha1":"6C:F0:E6:7B:64:17:10:A8:FA:BF:27:07:10:15:AF:6E:E6:98:D4:B0","sha256":"96:D2:44:B3:D4:D6:DE:C6:FD:A7:7F:68:CE:B6:6A:C0:5A:AF:0C:DD:A8:39:FC:80:62:ED:93:CA:F6:D7:27:72"}}},"request":{"raw":"GET /video/ol_f2c0d95da6924428aa30976d3b0b7e50.mp4 HTTP/1.1\r\nHost: video.sacdnssedge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Sat, 25 Oct 2025 15:25:12 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 2417980\r\nvary: accept-encoding\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"ol_f2c0d95da6924428aa30976d3b0b7e50.mp4\"\r\netag: \"2786c0ed23bf9854c67ace1750d1c178\"\r\nexpires: Sat, 25 Oct 2025 16:21:08 GMT\r\nlast-modified: Sat, 25 Oct 2025 15:21:08 GMT\r\nx-amz-request-id: 5de9b9e4-9d7c-43ce-a499-03ac0bdcb419\r\ncache-control: max-age=7200\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncf-cache-status: HIT\r\nage: 1\r\ncf-ray: 9942b3b78a03d26c-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-77-nzt: EwwBX63NDQH37gAAAAwBuUwKDAH3BQAAAAwBT3/Y+AG3AAAAAA\r\nx-77-nzt-ray: 2a494a151c0b51dafdebfc686852702f\r\nx-77-cache: HIT\r\nx-77-age: 238\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 0-2417979/2417980\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":835566,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"8b8f80b94b2abc7af4c2c9177673a273","sha1":"b0ca8178e3c64c484ad1dd6bb231a50e1050db59","sha256":"34e485e66d44f510cc02dfb19761b54f2922bc48d2b0044edf13183f66f974be","sha512":"fe7de8519cb6dea3d64869d2c29042c8176fe66e6c04bd678839fa3677ebdf5660a846e39788b62d06c25c07dcceb27870bced922e3e3e3e92b818e8c6408ac9","ssdeep":"12288:boi5miDnpMv0/WextOsSXFgOBHq4qi3DsBnGlOMczRLpVZ1g5mashMdEV:boiwycTexJWbHhqbBGQTRLpVZuVuV","tlshash":"550533f31080643cd9e942aa636f01396eb538054ca74c4bba45b505ef497b2fd63bbe","first_seen":"2025-10-25T15:25:40.40254Z","last_seen":"2025-10-25T15:25:40.40254Z","times_seen":1,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":88,"dns":48,"connect":1,"send":0,"wait":5,"receive":62,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hd.xmovix.net/templates/XmovixHD/style/engine.css","fqdn":"hd.xmovix.net","domain":"xmovix.net","tld":"net"},"ip":{"addr":"104.21.75.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:09.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmovix.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 08:17:46 GMT","end":"Fri, 09 Jan 2026 09:15:17 GMT"},"fingerprint":{"sha1":"E0:29:B4:15:7B:84:A8:8E:4C:6F:38:26:B6:4C:91:E7:EA:DC:4F:33","sha256":"70:A9:AF:CC:7A:C2:CB:AF:67:4D:A8:FD:F4:27:76:A8:F5:00:78:F0:1E:1D:F5:24:64:87:2B:97:BF:99:18:EE"}}},"request":{"raw":"GET /templates/XmovixHD/style/engine.css HTTP/1.1\r\nHost: hd.xmovix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html\r\nCookie: language=en; PHPSESSID=d8d876133430e02643de56ace62d60f4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 15:25:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 15 Mar 2024 14:19:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V7bfZqUrb4uKKG9wO5LdsUO%2FmavE7oeGFh%2FYfAzMuJ3kJ%2F3TGN9vkoIjhwSltbCDvVfmtsL4%2BsC7zeOsf78If2O1n08hyb5EsrTDcYI%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"65f458e6-1616b\"\r\ncontent-encoding: gzip\r\nage: 2340\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 9942b993a990120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90475,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13473)","md5":"71ceb8c3618457b9d809100f6e0ffa58","sha1":"8a88764cb01b5a1701e59f646e17239bb95c05a9","sha256":"65b11de85e67841ba8a605de528ec36c7be93083cde4c633cad85ae8fcf44eb4","sha512":"4fcc6db57c0baf7a80a833d909a4f9c967025e32900058081a93a5e1f627c7cde26c4e425d75055f833e6493ce2eb9d8433508752f7a6e7721b23112bde48798","ssdeep":"1536:v+CagcUDSFmcGoPenL5LcYOmyCnwlta4u1SqjxHPaKRJuqClrnl+Uf8l7l:vP0PendmmXwT0J7CFl+28l5","tlshash":"0b9374b5e20d11c5b336c08bff81b3a83e79f32fd6410da8f51e285c99c525512a6bad","first_seen":"2025-09-30T21:49:22.130714Z","last_seen":"2026-02-12T03:34:09.504739Z","times_seen":4,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmovix.net/uploads/posts/2025-01/thumbs/contact-5.webp","fqdn":"xmovix.net","domain":"xmovix.net","tld":"net"},"ip":{"addr":"104.21.75.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:09.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmovix.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 08:17:46 GMT","end":"Fri, 09 Jan 2026 09:15:17 GMT"},"fingerprint":{"sha1":"E0:29:B4:15:7B:84:A8:8E:4C:6F:38:26:B6:4C:91:E7:EA:DC:4F:33","sha256":"70:A9:AF:CC:7A:C2:CB:AF:67:4D:A8:FD:F4:27:76:A8:F5:00:78:F0:1E:1D:F5:24:64:87:2B:97:BF:99:18:EE"}}},"request":{"raw":"GET /uploads/posts/2025-01/thumbs/contact-5.webp HTTP/1.1\r\nHost: xmovix.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/\r\nCookie: language=en; PHPSESSID=d8d876133430e02643de56ace62d60f4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 25 Oct 2025 15:25:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7144\r\nlast-modified: Sun, 05 Jan 2025 19:41:36 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mxhj4bb%2BWCZ9EzqJLpzb45apBWfOuyrMj%2FRSynhjU3S6t9eK%2Bg4r60gTgwfSB%2BCosArkkp1bLLi2eDpC0NbmtOiMAO8UhnCvcAc%3D\"}]}\r\netag: \"677ae070-1be8\"\r\nexpires: Sun, 23 Nov 2025 15:38:52 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nage: 85576\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9942b993d9ab120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7144,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x280, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a61c0ff3fec59be845441668e8600251","sha1":"77bcaba528582887a01a8d14e661d60d7fea0859","sha256":"a7e56dcded4441f87e6a2886c3a213dc5ce0fb1b208d74b890f7ae492c1563e6","sha512":"9f44b23d03318e2f2d192a7fe79eb92519fe468133199cfb96d94371d2663b7d77a2ef4ebf79a9d55ce10a09a7fb5665a01f807fd206b4e3d93b257c622158a7","ssdeep":"192:XcQ7MorO4O6qvy65hvBj5g/wOmhpUl4XXvUEAUvuYF:sQYSmvy6TtQmh8cGYF","tlshash":"ace1bfe22af04fee1cdd7939e469340477d8b3d51b04c78079b503b1694ea88b9ad12f","first_seen":"2025-10-25T15:25:40.405465Z","last_seen":"2025-10-25T15:25:40.405465Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=57119","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:10.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 02:47:45 GMT","end":"Thu, 13 Nov 2025 02:47:44 GMT"},"fingerprint":{"sha1":"F4:AD:2A:0D:F1:0A:AB:04:F2:6F:6F:72:39:99:7F:4B:E4:5B:2E:4C","sha256":"12:8C:54:04:9B:26:0A:7E:35:D0:23:72:4F:A8:FC:52:77:D0:9D:FA:F5:AC:FE:2F:D2:49:97:F4:24:B6:72:0A"}}},"request":{"raw":"OPTIONS /fp?tag_id=57119 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://hd.xmovix.net/\r\nOrigin: https://hd.xmovix.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.20.1\r\nDate: Sat, 25 Oct 2025 15:25:10 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nAccess-Control-Allow-Origin: https://hd.xmovix.net\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-19T12:11:11.754429Z","times_seen":15436892,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":1,"connect":25,"send":0,"wait":24,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vast.yomeno.xyz/wrapper/m?katds_ep=zR-yKrB4af582pv6-y5fuHP2cR5WNvAEIllru1rby5AZdVk_1AZxVfh_fBq_08qbYy0NCUWuGlb_Php8-A","fqdn":"vast.yomeno.xyz","domain":"yomeno.xyz","tld":"xyz"},"ip":{"addr":"109.206.161.16","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:11.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"vast.yomeno.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 03:20:42 GMT","end":"Wed, 31 Dec 2025 03:20:41 GMT"},"fingerprint":{"sha1":"C1:A0:EC:3E:36:CF:B7:DB:9C:46:F0:8B:28:CB:F6:1B:E8:ED:7C:AA","sha256":"23:03:9D:AA:E7:64:11:E6:ED:B5:03:CB:DC:03:54:4F:DF:DD:5A:95:E2:68:64:09:57:1F:27:FA:72:64:91:5E"}}},"request":{"raw":"GET /wrapper/m?katds_ep=zR-yKrB4af582pv6-y5fuHP2cR5WNvAEIllru1rby5AZdVk_1AZxVfh_fBq_08qbYy0NCUWuGlb_Php8-A HTTP/1.1\r\nHost: vast.yomeno.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hd.xmovix.net/\r\nOrigin: https://hd.xmovix.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Sat, 25 Oct 2025 15:25:11 GMT\r\ncontent-type: text/xml;charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://hd.xmovix.net\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36859,"size_decoded":0,"mime_type":"text/xml; charset=UTF-8","magic":"ASCII text, with very long lines (8561)","md5":"ab7b6f8464e40f7a44491e21033f9b1e","sha1":"5179455ad1ce65ebfbd3963174db1b3e232b38a2","sha256":"9e868679052823bd337130bdcb50e6de635a82fd2bce0da5e835863e76d97e20","sha512":"f11f6dec1dfdbbe2d62cd7853563d3ae8d0016bfca9668fdb227beee216acd131dff919782e67906103d52572a1644593015331f92502bcf371cbfdbe9f3db86","ssdeep":"768:4oSdmoSdRoSdWZoSdUoSdroSdToSdeoSdYoSdcoSd2oSdYoSdS43:4oSdmoSdRoSdaoSdUoSdroSdToSdeoSV","tlshash":"99f2d9f604692bbcb751d4287dad9f3e270a04f624b10851b9de5c89af43a8fd4580be","first_seen":"2025-10-25T15:25:40.409902Z","last_seen":"2025-10-25T15:25:40.409902Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vast.yomeno.xyz/wrapper/m?katds_ep=RbKLELeupXm8rx-Q09lhBuCUiqdWOLqA-2OiNUl1OJRvP33ay3TUSbvIVZcQtM9m9IE86Kp1v9MfZhg3yw","fqdn":"vast.yomeno.xyz","domain":"yomeno.xyz","tld":"xyz"},"ip":{"addr":"109.206.161.16","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1000fapvids.com/v.html?player_url=https%3A%2F%2Fjs.canstrm.com%2Fvast-vpaid-player%2Fmain.js","date":"2025-10-25T15:25:12.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"vast.yomeno.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 03:20:42 GMT","end":"Wed, 31 Dec 2025 03:20:41 GMT"},"fingerprint":{"sha1":"C1:A0:EC:3E:36:CF:B7:DB:9C:46:F0:8B:28:CB:F6:1B:E8:ED:7C:AA","sha256":"23:03:9D:AA:E7:64:11:E6:ED:B5:03:CB:DC:03:54:4F:DF:DD:5A:95:E2:68:64:09:57:1F:27:FA:72:64:91:5E"}}},"request":{"raw":"GET /wrapper/m?katds_ep=RbKLELeupXm8rx-Q09lhBuCUiqdWOLqA-2OiNUl1OJRvP33ay3TUSbvIVZcQtM9m9IE86Kp1v9MfZhg3yw HTTP/1.1\r\nHost: vast.yomeno.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1000fapvids.com/\r\nOrigin: https://1000fapvids.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Sat, 25 Oct 2025 15:25:11 GMT\r\ncontent-type: text/xml;charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://1000fapvids.com\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36648,"size_decoded":0,"mime_type":"text/xml; charset=UTF-8","magic":"ASCII text, with very long lines (8507)","md5":"033634bcf2997465d6cb0b4ebae7af95","sha1":"4abbb2bf4f1e1a416d7110674f6f1ebceca5ae1e","sha256":"3222ca70b898071140c5476d5ad5a5846a14fff5d8bbb0e2ade4d8f4200af0d1","sha512":"347b83b29832ed72a1f4600db4d9732a593f3343750d6766eb308fa059c0a09bcc1c68aeffcd28e1881347083ac0a35f4c1ea62e87b20684ed151320f0791c51","ssdeep":"768:KZewZeVZeY51ZeVZevZenZe4ZeyZeeZewZeyZea:WeEeHesneHexeZe8eue6eEeuea","tlshash":"2af2d8b6086127bcfb65991c3cfd5e382b0a047658f018b1b5ef5c8c6b52e9fe0181ad","first_seen":"2025-10-25T15:25:40.411007Z","last_seen":"2025-10-25T15:25:40.411007Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.twinrdengine.com/adraw?zone=01JWTWYH5SHM14BTC5QXYFVM8P\u0026subid=1863745515a1440234390\u0026kw=contact,5,(2025,hd),porn,movie,online,porn,movie,contact,5,watch,online,nearly,four,hours,of,","fqdn":"ad.twinrdengine.com","domain":"twinrdengine.com","tld":"com"},"ip":{"addr":"34.111.67.216","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1000fapvids.com/v.html?player_url=https%3A%2F%2Fjs.canstrm.com%2Fvast-vpaid-player%2Fmain.js","date":"2025-10-25T15:25:12.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad.twinrdengine.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 Aug 2025 01:00:18 GMT","end":"Sat, 29 Nov 2025 01:56:13 GMT"},"fingerprint":{"sha1":"1F:1D:97:E3:94:C0:3D:60:4A:4D:9F:3D:6E:0B:58:91:87:CF:3B:5D","sha256":"95:97:BE:B3:B2:08:B9:BB:49:A2:52:7D:BE:80:FB:FA:42:90:DC:15:FE:32:8E:85:DE:F2:22:A0:53:86:06:8F"}}},"request":{"raw":"GET /adraw?zone=01JWTWYH5SHM14BTC5QXYFVM8P\u0026subid=1863745515a1440234390\u0026kw=contact,5,(2025,hd),porn,movie,online,porn,movie,contact,5,watch,online,nearly,four,hours,of, HTTP/1.1\r\nHost: ad.twinrdengine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1000fapvids.com/\r\nOrigin: https://1000fapvids.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nvary: origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://1000fapvids.com\r\ncontent-type: text/xml\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\ndate: Sat, 25 Oct 2025 15:25:12 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":5068,"size_decoded":0,"mime_type":"text/xml","magic":"XML 1.0 document, ASCII text, with very long lines (1429)","md5":"abd5adcfc2a0a6a86c46cad395974002","sha1":"b05a20924c8aa8039b6b0b43132756b634ca2b95","sha256":"5bac5a7333fcf23ea4adbe2f9c2cbb96261fbdc742986aa70a641f43ca22ddf5","sha512":"a04eaa4630d39e21530ca210e12eb4eb280f2286424122318aa1e07059b2bafc7a0333ea4a99fc031d75ae0238a5a229e132b17e4f6950a122e941bcb3eb7ef8","ssdeep":"96:azYQ0Eqjwq/qDvTkVWdDYQ0Eqjwq/qDvoYQ0Eqjwq/qDvs:azYQj0/4bkOYQj0/4gYQj0/4E","tlshash":"bca10ad30be59e4f58930e40a3a86d972b72225f4ee119e0fdcd91c397e29c95f0ac49","first_seen":"2025-10-25T15:25:40.412143Z","last_seen":"2025-10-25T15:25:40.412143Z","times_seen":1,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.twinrdengine.com/adraw?zone=01JWTWYH5SHM14BTC5QXYFVM8P\u0026subid=1472131129a1440234390\u0026kw=contact,5,(2025,hd),porn,movie,online,porn,movie,contact,5,watch,online,nearly,four,hours,of,","fqdn":"ad.twinrdengine.com","domain":"twinrdengine.com","tld":"com"},"ip":{"addr":"34.111.67.216","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1000fapvids.com/v.html?player_url=https%3A%2F%2Fjs.canstrm.com%2Fvast-vpaid-player%2Fmain.js","date":"2025-10-25T15:25:12.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad.twinrdengine.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 Aug 2025 01:00:18 GMT","end":"Sat, 29 Nov 2025 01:56:13 GMT"},"fingerprint":{"sha1":"1F:1D:97:E3:94:C0:3D:60:4A:4D:9F:3D:6E:0B:58:91:87:CF:3B:5D","sha256":"95:97:BE:B3:B2:08:B9:BB:49:A2:52:7D:BE:80:FB:FA:42:90:DC:15:FE:32:8E:85:DE:F2:22:A0:53:86:06:8F"}}},"request":{"raw":"GET /adraw?zone=01JWTWYH5SHM14BTC5QXYFVM8P\u0026subid=1472131129a1440234390\u0026kw=contact,5,(2025,hd),porn,movie,online,porn,movie,contact,5,watch,online,nearly,four,hours,of, HTTP/1.1\r\nHost: ad.twinrdengine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1000fapvids.com/\r\nOrigin: https://1000fapvids.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nvary: origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://1000fapvids.com\r\ncontent-type: text/xml\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\ndate: Sat, 25 Oct 2025 15:25:12 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":5050,"size_decoded":0,"mime_type":"text/xml","magic":"XML 1.0 document, ASCII text, with very long lines (1423)","md5":"519ffbb701cc7256cca0b0372b67523d","sha1":"759432a4128e42715bbd5d1893f3d3f5a99f8481","sha256":"53967823333348be9ac6cdce91c5db9081db1b27e24333b6978c9540e89a50bc","sha512":"c7e7b0a17bee7afbd22d68d22457ba7a70d64734abdf2b3450d9ab74747fec413b55e839267856b9ce8f000bea6442bb99c18cb75e5b1b7275776f6d6e166737","ssdeep":"96:HxkW+SQEdmpXvikJdcxkW+SQEdmpXv4VxkW+SQEdmpXvn:KYEtakNYEtPYEtv","tlshash":"cda1087a5af2b6f6fd824920fd5a9608576112bb0dc8c183b66d5042ef4cdb44c4fb5c","first_seen":"2025-10-25T15:25:40.413279Z","last_seen":"2025-10-25T15:25:40.413279Z","times_seen":1,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.capndr.com/advertising.js","fqdn":"js.capndr.com","domain":"capndr.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:10.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.capndr.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Oct 2025 02:32:03 GMT","end":"Sun, 11 Jan 2026 02:32:02 GMT"},"fingerprint":{"sha1":"4F:91:E2:5E:A1:B1:4D:7F:49:01:1E:73:C6:07:EB:0A:BE:44:4C:44","sha256":"7B:0D:8E:03:0E:6E:23:65:30:3D:E8:FC:0C:E7:66:46:E2:5B:7F:FA:FD:D2:FF:61:4C:A4:18:08:24:70:51:6B"}}},"request":{"raw":"GET /advertising.js HTTP/1.1\r\nHost: js.capndr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 25 Oct 2025 15:25:10 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 0\r\nserver: nginx/1.18.0\r\nlast-modified: Fri, 14 Jul 2023 08:23:25 GMT\r\netag: \"64b105fd-0\"\r\nexpires: Sat, 25 Oct 2025 15:30:10 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-19T12:11:11.754429Z","times_seen":15436892,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":62,"dns":14,"connect":21,"send":0,"wait":21,"receive":1,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"js.capndr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.multstorage.com/log/count.html","fqdn":"storage.multstorage.com","domain":"multstorage.com","tld":"com"},"ip":{"addr":"13.248.148.254","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:10.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.multstorage.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Sep 2025 02:54:50 GMT","end":"Mon, 22 Dec 2025 02:54:49 GMT"},"fingerprint":{"sha1":"A7:F0:92:B0:60:17:0F:89:16:0D:51:27:DB:FE:C6:A0:D9:39:15:0F","sha256":"D8:BB:7C:8D:91:E4:6A:95:F9:86:5F:70:CE:DE:E9:AA:14:7C:0B:84:56:FC:96:09:E6:62:FD:5E:68:8E:E2:11"}}},"request":{"raw":"GET /log/count.html HTTP/1.1\r\nHost: storage.multstorage.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 410 Gone\r\nalt-svc: h3=\":50944\"; ma=2592000\r\nserver: Caddy\r\ncontent-length: 0\r\ndate: Sat, 25 Oct 2025 15:25:10 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"410","status_text":"Gone","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-19T12:11:11.754429Z","times_seen":15436892,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":110,"dns":53,"connect":1,"send":0,"wait":21,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"storage.multstorage.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maucn.yomeno.xyz/in/dip?event_id=90390e69-bf07-4c28-94b3-bdc615fbd71d","fqdn":"maucn.yomeno.xyz","domain":"yomeno.xyz","tld":"xyz"},"ip":{"addr":"168.119.45.30","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:11.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"video.infrapu.sh","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 04:31:26 GMT","end":"Tue, 16 Dec 2025 04:31:25 GMT"},"fingerprint":{"sha1":"C7:94:FE:12:A0:82:08:E5:BC:D6:E8:81:29:B6:22:BE:0B:35:31:39","sha256":"81:D3:DB:37:60:2A:97:2D:FA:9B:16:4D:79:04:0E:95:4A:89:42:2B:EC:F9:15:FC:2E:2D:AB:DD:C6:A2:5C:72"}}},"request":{"raw":"GET /in/dip?event_id=90390e69-bf07-4c28-94b3-bdc615fbd71d HTTP/1.1\r\nHost: maucn.yomeno.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hd.xmovix.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hd.xmovix.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Sat, 25 Oct 2025 15:25:11 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-19T12:11:11.754429Z","times_seen":15436892,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":59,"dns":0,"connect":25,"send":0,"wait":26,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vast.yomeno.xyz/vast","fqdn":"vast.yomeno.xyz","domain":"yomeno.xyz","tld":"xyz"},"ip":{"addr":"109.206.161.16","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hd.xmovix.net/en/movies/hd-720p/9416-contact-5.html","date":"2025-10-25T15:25:11.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"vast.yomeno.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 03:20:42 GMT","end":"Wed, 31 Dec 2025 03:20:41 GMT"},"fingerprint":{"sha1":"C1:A0:EC:3E:36:CF:B7:DB:9C:46:F0:8B:28:CB:F6:1B:E8:ED:7C:AA","sha256":"23:03:9D:AA:E7:64:11:E6:ED:B5:03:CB:DC:03:54:4F:DF:DD:5A:95:E2:68:64:09:57:1F:27:FA:72:64:91:5E"}}},"request":{"raw":"OPTIONS /vast HTTP/1.1\r\nHost: vast.yomeno.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://hd.xmovix.net/\r\nOrigin: https://hd.xmovix.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.20.1\r\ndate: Sat, 25 Oct 2025 15:25:10 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://hd.xmovix.net\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-19T12:11:11.754429Z","times_seen":15436892,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":88,"dns":21,"connect":21,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}