{"report_id":"60997992-b28a-4a39-973a-d307174d874d","version":6,"status":"done","tags":[],"date":"2026-03-31T14:21:39Z","url":{"schema":"https","addr":"www.d4ug.site/","fqdn":"www.d4ug.site","domain":"d4ug.site","tld":"site"},"ip":{"addr":"172.217.19.243","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.d4ug.site/","fqdn":"www.d4ug.site","domain":"d4ug.site","tld":"site"},"title":"D4UGAME — Premium Mods \u0026 AI Tools","dom":{"size":57953,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (901)","md5":"40f55f3bfa58a2bb1138820e81e5ca05","sha1":"c64b01b7908397efb620ec53442ef527325fa0d0","sha256":"be5843cb95e28a69e27da162763d74bd6637ce1e9c5090d040ab1dc366db920b","sha512":"521f52513d405458693257a54de48977e9103040c65622474fd44d1f80832c0266db1142d4997511a917a0496e975304337f8374942379cfe4990394599cc32c","ssdeep":"768:MU9RfnvDR9r4gx9dMZaxKfVopN6tDIOIl8j/u1k:JF4gx9dMZaxKfVopNFOIl8j/x","tlshash":"4743b470a1a061bb606bd4d6266a970fb9e2e61fce17860077fc8bd04fcbcd59d0750a","dom_hash":"domhashe7eadd5ba0414be103d93c469fb28dfb","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www.d4ug.site/","fqdn":"www.d4ug.site","domain":"d4ug.site","tld":"site"},"ip":{"addr":"172.217.19.243","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-05T14:21:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"www.d4ug.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"encrypted-tbn0.gstatic.com","ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2013-05-31T02:32:18Z","last_seen":"2026-03-25T15:48:41.595926Z","alert_count":0,"request_count":2,"received_data":15285,"sent_data":982,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-29T22:16:18.281815Z","alert_count":0,"request_count":4,"received_data":178656,"sent_data":2166,"comment":"","tags":null,"fingerprints":null},{"fqdn":"images.sftcdn.net","ip":{"addr":"151.101.193.55","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2008-09-15","domain_rank":461510,"first_seen":"2017-07-20T16:12:39Z","last_seen":"2026-03-25T03:23:07.577451Z","alert_count":0,"request_count":1,"received_data":14296,"sent_data":529,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-29T22:20:07.848058Z","alert_count":0,"request_count":1,"received_data":15551,"sent_data":503,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"i.postimg.cc","ip":{"addr":"45.43.142.101","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"domain_registered":"2016-06-11","domain_rank":103883,"first_seen":"2018-04-11T10:01:12Z","last_seen":"2026-03-25T23:54:41.11268Z","alert_count":0,"request_count":4,"received_data":253551,"sent_data":1853,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-03-29T22:32:58.732232Z","alert_count":0,"request_count":2,"received_data":254177,"sent_data":1015,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.d4ug.site","ip":{"addr":"216.58.201.179","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2025-07-08","domain_rank":0,"first_seen":"2025-09-01T23:14:03.087366Z","last_seen":"2025-09-01T23:14:03.087366Z","alert_count":3,"request_count":3,"received_data":43405,"sent_data":1334,"comment":"","tags":null,"fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}]},{"fqdn":"images-wixmp-ed30a86b8c4ca887773594c2.wixmp.com","ip":{"addr":"52.84.50.86","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2014-10-29","domain_rank":60123,"first_seen":"2018-10-30T08:20:57Z","last_seen":"2026-03-27T01:38:16.750104Z","alert_count":0,"request_count":1,"received_data":74419,"sent_data":624,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"m.media-amazon.com","ip":{"addr":"52.222.188.35","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2016-08-18","domain_rank":3022,"first_seen":"2017-01-30T05:27:40Z","last_seen":"2026-03-26T00:41:18.125254Z","alert_count":0,"request_count":1,"received_data":36431,"sent_data":450,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.d4ug.site/js/cookienotice.js","fqdn":"www.d4ug.site","domain":"d4ug.site","tld":"site"},"ip":{"addr":"216.58.201.179","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a705132a2174f88e196ec3610d68faa8","sha1":"3bad57a48d973a678fec600d45933010f6edc659","sha256":"068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568","sha512":"e947d33e0e9c5e6516f05e0ea696406e4e09b458f85021bc3a217071ae14879b2251e65aec5d1935ca9af2433d023356298321564e1a41119d41be7c2b2d36d5","ssdeep":"96:q54UPzHFcJZ7haKemb/m2GzrzCXAl/MStzo41Pm+YsttcVcbYhyjcso13EZDjiat:q5rPzHgxm2GzaXeMnuzYstyryPhZD9","tlshash":"4fd1630938a7127d125fa03fb6bf515ab66410238101db08786dfa785fd5f42a8e4ffa","size":6513,"data":"","first_seen":"2023-03-07T01:02:24Z","last_seen":"2026-07-22T03:28:55.255891Z","times_seen":131608,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.d4ug.site/","fqdn":"www.d4ug.site","domain":"d4ug.site","tld":"site"},"ip":{"addr":"216.58.201.179","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"38ee2f6ddbe8a478e5795030e72ba35d","sha1":"d332319b04b273e3b9a93ffa22ba9036d59b8e99","sha256":"97d98978d5864e77cd83bd79a0d31ced40631a6134a154e8f049bcc20f49a319","sha512":"15610a3ce0ff69817776e355c350aebc006a7744a941c1258fe16a2e73445d964fd94885bd4b50bb2e9ea773a5f95bf1aa124fd90a3252ab2769d2870e5fbb95","ssdeep":"","tlshash":"20d02ef7f4d5ac218809a3200865e9083032e6feb3a08de094c0063a488a8ba9306fa0","size":275,"data":"","first_seen":"2023-03-07T01:02:24Z","last_seen":"2026-07-15T07:44:17.500893Z","times_seen":108173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.d4ug.site/","fqdn":"www.d4ug.site","domain":"d4ug.site","tld":"site"},"ip":{"addr":"216.58.201.179","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"439441a03c62367ec3966c588f483d8a","sha1":"afb6093b8e5a2fedc0349e56b7176a21743d65de","sha256":"52b290a9e788d96a73a78b0dca878b93c4075fdd914eaf8d48a821447b572a9d","sha512":"ea82fc3a21e2da7e059a91747f076da1b4b2c290e1e5f37ea71218043ca3d710bb3a5754edda1c66496d085bae177f1da373d5c557852ea7956ed36600b3a0e0","ssdeep":"192:LvMvFzj6GWip+fJpSksRGrGwgJgjVJuO/zyy5wx5+OxO980HVlcmAgKDnlRAjRAx:jMRjD7p+fJpSksUIQ5amAVDnlRAjRAmA","tlshash":"7942c55572705a3906b740f730bfa7a9b430643aac41c145bafdcc88afa3ed08a67d4c","size":12091,"data":"","first_seen":"2026-03-31T14:21:42.256532Z","last_seen":"2026-03-31T14:24:24.732936Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.d4ug.site/","fqdn":"www.d4ug.site","domain":"d4ug.site","tld":"site"},"ip":{"addr":"216.58.201.179","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7422fcfc6a91ec3c8bcf0fdc5f3215ad","sha1":"dd1a7f71b5367fb9d13a3ae6798c7fd0a4c37ef2","sha256":"620719ac57a503dc90e978186aaa9c5540094089b2dca79327b6833d58e011c7","sha512":"155620083064aaa723034d0433f8404d1169bdba5d602f8c820e8f9f4f018ae3ae3f0c08bacc5d0a7809cc583c290386efa94f114f88fdf38e8a2024383e9a7f","ssdeep":"","tlshash":"4f016d137508e31431a714347b8baa18fd2ac2561c95453f391cf9324f57a63ced6ae3","size":776,"data":"","first_seen":"2023-04-06T23:48:51Z","last_seen":"2026-06-06T23:36:19.547992Z","times_seen":4730,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcTj8M3noLAdY9u2IMY1mgaYLYBVKRdMJMv-Mw\u0026s","fqdn":"encrypted-tbn0.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.d4ug.site/","date":"2026-03-31T14:21:19.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /images?q=tbn:ANd9GcTj8M3noLAdY9u2IMY1mgaYLYBVKRdMJMv-Mw\u0026s HTTP/1.1\r\nHost: encrypted-tbn0.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.d4ug.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/images-tbn\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"images-tbn\"\r\nreport-to: {\"group\":\"images-tbn\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/images-tbn\"}]}\r\ncontent-length: 1622\r\ndate: Tue, 31 Mar 2026 14:21:19 GMT\r\nexpires: Wed, 31 Mar 2027 14:21:19 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 16 Jul 2025 21:41:21 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1622,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"c1746a06cb9b4fc3434e0bbe99ae25b6","sha1":"845ad8b35758bf8488cf4f4df8da44bf6737834d","sha256":"79c379b6ed761c481674c3db91c9feaac5c11155db6481c0f6bc50af0c9cde71","sha512":"063724d70976351d4279cb66555a495e62cf4bf0ae1422b66a7ce34d2e51904a49e2110b55eead4245ec026cc9141aa7d0297917d8eea1a8475578499d701af5","ssdeep":"","tlshash":"413129f2510904badf7c3f32d9a2e6037ca0b010d32864d358ec82a0d8bf203650a3dc","first_seen":"2026-03-31T14:21:42.241938Z","last_seen":"2026-03-31T14:24:24.710997Z","times_seen":2,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":72,"dns":40,"connect":21,"send":0,"wait":21,"receive":1,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.d4ug.site/","date":"2026-03-31T14:21:19.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.d4ug.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 31 Mar 2026 14:21:19 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 150124\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"6421d693-24a6c\"\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 205614\r\nexpires: Sun, 21 Mar 2027 14:21:19 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4G45q4gJfjO%2BmmRMX0gA3Ih0MQzBy59IJRrrVdtcMX0QzgYDpMs%2BZ3nIOMOuFA0P6rPcqXxV8KTJbn5wyq2mU%2BgycGRbnQQWfjtUtuexr0b4%2Few9%2BTex08RBAovzCxNTLvQ5fqzj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: 9e4ffff399dd56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150124,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 150124, version 772.256","md5":"c64278386c2bbb5e293e11b94ca2f6d1","sha1":"6b99aa650bd12a36caa14e0127435d8f4cd3ba73","sha256":"7152a6933ee3d690ec2af3d09da9d701723d16aa3410a6d80f28ff8866f3b880","sha512":"0ccdc1515510d902c0b4a48b863c48bad86e1f766b1f9c890a64e28d91ee7c6d488241c531fc094d15b29c211da71e092587a987e24ee8e67ef8ea99c284e821","ssdeep":"3072:7sCbk7w0ZXdkN6iMjif3Lr7x7wAtf+D7gDk1feXDLnurWHqrNIuv5n0:7sCbkFZXdC7MaLr9w2mIY1feXXurWyNW","tlshash":"28e3123cf2c6d486735f5aeadb79636894fd0a2e74ecc67d26b982112048f828174d1d","first_seen":"2023-04-09T20:30:06Z","last_seen":"2026-07-22T03:31:38.208832Z","times_seen":42253,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":102,"dns":83,"connect":0,"send":0,"wait":12,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.d4ug.site/","date":"2026-03-31T14:21:19.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.d4ug.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 31 Mar 2026 02:01:43 GMT\r\nexpires: Wed, 31 Mar 2027 02:01:43 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nage: 44376\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-07-22T03:34:32.300009Z","times_seen":39706,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":227,"dns":0,"connect":7,"send":0,"wait":19,"receive":2,"ssl":146},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.sftcdn.net/images/t_app-icon-m/p/b3d17a4e-96bf-11e6-a0d8-00163ed833e7/3978925/gta-v-download-grand-theft-auto-v.jpg","fqdn":"images.sftcdn.net","domain":"sftcdn.net","tld":"net"},"ip":{"addr":"151.101.193.55","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.d4ug.site/","date":"2026-03-31T14:21:19.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sftcdn.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 01:08:11 GMT","end":"Mon, 01 Jun 2026 01:08:10 GMT"},"fingerprint":{"sha1":"9F:9C:95:F5:2F:EE:44:44:4D:A9:36:F9:21:7A:E4:C7:EB:E0:D4:DB","sha256":"EF:CA:37:CF:53:01:76:EF:80:D3:3C:0E:C3:C1:61:D2:63:EC:9D:E1:7F:5D:3C:15:D2:8F:AE:BE:D8:93:6C:2B"}}},"request":{"raw":"GET /images/t_app-icon-m/p/b3d17a4e-96bf-11e6-a0d8-00163ed833e7/3978925/gta-v-download-grand-theft-auto-v.jpg HTTP/1.1\r\nHost: images.sftcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.d4ug.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public,max-age=31536000\r\ncontent-type: image/avif\r\netag: \"5x7ZbeYEFa4QyuhSDd3cUFkXp2OiIe4mELeMH1RBET8\"\r\nexpires: Sat, 13 Jun 2026 02:09:44 GMT\r\nfastly-stats: io=1\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 31 Mar 2026 14:21:19 GMT\r\nage: 902931\r\nvary: Accept\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 13794\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":13794,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"84028079a25ffed5536fa08d107a46cf","sha1":"12556e6914756f72c4203b6182edd89a313dbdd0","sha256":"f681bc24ecdd43b8db94a24a32e141660409512d19aa6efca666e1961abb8a55","sha512":"68da0a09076bb470636761a5c9fafb67fa8eb09f42bfa60ffdd9510642ee2adec5bb31bb69b7bf0fd3ccd3de2a98ce9e21405a5c7fb161ff99337d014be652c1","ssdeep":"384:rqEawNAiMtJCIBwcIotQeG6YL4QiZJYbu3CYzazMxdq:LPNAiYJ5VtQd6YYZJyuDz+MC","tlshash":"4052be05a748dd52ea2861b0952f9aa9abc7f988200f4beb4b54b8603d30c42f6d2758","first_seen":"2025-01-04T02:57:46.203927Z","last_seen":"2026-07-20T20:43:02.87422Z","times_seen":15,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":108,"dns":40,"connect":27,"send":0,"wait":40,"receive":1,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcQLkVimc_sEMFV6SaBxCU0KFKkNqZTIsv18vw\u0026s","fqdn":"encrypted-tbn0.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.d4ug.site/","date":"2026-03-31T14:21:19.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /images?q=tbn:ANd9GcQLkVimc_sEMFV6SaBxCU0KFKkNqZTIsv18vw\u0026s HTTP/1.1\r\nHost: encrypted-tbn0.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.d4ug.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/jpeg\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/images-tbn\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"images-tbn\"\r\nreport-to: {\"group\":\"images-tbn\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/images-tbn\"}]}\r\ncontent-length: 12053\r\ndate: Tue, 31 Mar 2026 14:21:19 GMT\r\nexpires: Wed, 31 Mar 2027 14:21:19 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 06 Jul 2021 14:27:06 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12053,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"e15ecda0efd9a51fadfaad6510a9228d","sha1":"a7a910e40156b976bdf84949649ed03cd5b19398","sha256":"2624b6b8ea65e9b50310dc286cb4429a24a5e0b7904a718242bbc228e7f73ab7","sha512":"101d9a6f5b6cab34011f15eb0dc71fdadc9fe8e3e71ae1cb4955338e71e4d1a61e757b1707521222eb54dcf6625f645b25e97c921e30b87667f1ca200f440be0","ssdeep":"192:J0y1YSwHq6oztHWmggBfKcaDpVsqwVpAMbBbojrPFVeo9UDxuXEQEtJuvul5/hda:zrhoBcFGpgVBtbsPFbUI2tCw5/h8","tlshash":"1d42d056fe1084269c44fc5826771b31e225cdb8a11a2ecb40206fcfe41eb2bd71f657","first_seen":"2026-03-31T14:21:42.245115Z","last_seen":"2026-03-31T14:24:24.711679Z","times_seen":2,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":32,"dns":36,"connect":7,"send":0,"wait":23,"receive":3,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.d4ug.site/","fqdn":"www.d4ug.site","domain":"d4ug.site","tld":"site"},"ip":{"addr":"216.58.201.179","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-31T14:21:17.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.d4ug.site","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 21:35:06 GMT","end":"Thu, 14 May 2026 22:25:58 GMT"},"fingerprint":{"sha1":"3C:08:EC:93:BD:B9:D1:39:6B:63:81:A6:0C:BA:39:F2:81:90:59:05","sha256":"92:83:05:D4:6A:A2:3F:0D:D1:0F:96:95:DE:B4:26:6F:53:B5:25:23:23:B8:2F:FB:2D:82:1B:32:4B:16:85:13"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.d4ug.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\nexpires: Tue, 31 Mar 2026 14:21:18 GMT\r\ndate: Tue, 31 Mar 2026 14:21:18 GMT\r\ncache-control: private, max-age=0\r\nlast-modified: Thu, 26 Mar 2026 00:13:26 GMT\r\netag: W/\"2f4a222750fc480f6a8a938c75d6a9a9859f0e1a6e11d4c9c50fd90a907fa7da\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 9154\r\nserver: GSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":31731,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (487)","md5":"b1017771906364070a69723a66a3e623","sha1":"4c4470f057ad2251bfe6da370b4619e8a844a3b6","sha256":"6fc7b3cb133b4c5bc3b5ef52f87feac211ad7a3abf7f2cbabd3b0f1242c6e654","sha512":"8c0aa1c520bc2f6115ed3363b3c7006b452b952394f21be5592a132ca47ccaf676b39547d025ea53cfe9c38310ee05f8033e85f826dd96a1b1eb8f8f887bf871","ssdeep":"384:iCC9nvBRDQpVGr0y7K6d3mX4DD5rTfaJKr520uj+qeMRjD7p+fJpSksUIQ5amAVy:iV9vfnvDZSVopN6tDIOIl8j4uq","tlshash":"fde208607160a23e7467d4e775daa39fb070e41bdd534384b9ec85a48fc3ee24a62e0d","first_seen":"2026-03-31T14:21:42.246005Z","last_seen":"2026-03-31T14:24:24.708619Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1096,"timings":{"blocked":445,"dns":214,"connect":7,"send":0,"wait":195,"receive":5,"ssl":227},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"www.d4ug.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Nunito:wght@600;700;800;900\u0026family=Inter:wght@400;500;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.d4ug.site/","date":"2026-03-31T14:21:18.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:40 GMT","end":"Mon, 01 Jun 2026 08:37:39 GMT"},"fingerprint":{"sha1":"5F:99:6E:26:2A:3A:DA:FF:7F:0D:EE:C5:8B:2A:01:AE:28:26:AD:C4","sha256":"2B:88:E7:79:70:E5:E9:DE:0E:A9:0A:B8:F1:F5:C6:D6:10:77:F0:C9:0F:E6:2A:13:A3:D6:08:F9:89:A3:60:E8"}}},"request":{"raw":"GET /css2?family=Nunito:wght@600;700;800;900\u0026family=Inter:wght@400;500;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.d4ug.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 31 Mar 2026 14:21:19 GMT\r\ndate: Tue, 31 Mar 2026 14:21:19 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14865,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"83f80d4128180ee6ee93c5b1207f5866","sha1":"3eb9f12c2ef3cabe21dd6cd9cd13e0fdc804aa9d","sha256":"ab738159d0ea39ae2ba790c3f35262e5ec87f3ce091e98afef854cd575aa1bd8","sha512":"f53b48c74e75d4f8753eaee78ab1e67964c1320ab05020d89b6e6048729121670bb1e3b8e7a91787bb56426ccf61b3a69cb214a458fbf4ba59e5e36a1e64c97a","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlWH0yXLkeLHbywkkdiHyy1RkoRHhyWic:vXuM0paDPe9hjcq","tlshash":"8462a891002be400ab831cc227cf7f3aad8e61556455c579affd4c88acebd671368b5e","first_seen":"2026-03-31T14:21:42.246913Z","last_seen":"2026-03-31T14:24:24.709712Z","times_seen":2,"resource_available":false,"data":null}},"time_used":601,"timings":{"blocked":282,"dns":97,"connect":21,"send":0,"wait":34,"receive":0,"ssl":162},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.d4ug.site/","date":"2026-03-31T14:21:18.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.d4ug.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 14:21:18 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18752\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"6421d693-4940\"\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 57791\r\nexpires: Sun, 21 Mar 2027 14:21:18 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=167io56yU2giHYybQ2MEu0jAF2pFPIBmUeGJG4iYzLMqb2%2BJr5sDpRmaDgoLlV9wem8dCOgkz6%2FtJMB%2FArkri0zS54qnWmUvHLhpom%2BiQk%2FlkjFglnBQDRrR7ViSShqb6yeppSk%2F\"}]}\r\ncf-ray: 9e4ffff0ef7c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102025,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"ded1c367363e8b20bdc6a19b8350a737","sha1":"8c06d82739d14b094ff6d9036021a252bd1d985d","sha256":"1edb1725a9ea8ca4dcf2f5508cee183218aa1685e47c1b23056717f754f58ebf","sha512":"89e71d2e66ac925ec2564aa45cd43f647fd72e5bd664e2728fb632eed71e9e6a43d72a404a8ce9993fc4d223ed985201e3a66676d01cf5e341bc7d07fd9a6207","ssdeep":"1536:OwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuZprfZCl:S709gMGFiyPGuZpfZCl","tlshash":"2ea3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-04-06T15:05:25Z","last_seen":"2026-07-22T03:29:32.728234Z","times_seen":56514,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":102,"dns":86,"connect":1,"send":0,"wait":6,"receive":1,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.d4ug.site/js/cookienotice.js","fqdn":"www.d4ug.site","domain":"d4ug.site","tld":"site"},"ip":{"addr":"216.58.201.179","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.d4ug.site/","date":"2026-03-31T14:21:18.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.d4ug.site","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 21:35:06 GMT","end":"Thu, 14 May 2026 22:25:58 GMT"},"fingerprint":{"sha1":"3C:08:EC:93:BD:B9:D1:39:6B:63:81:A6:0C:BA:39:F2:81:90:59:05","sha256":"92:83:05:D4:6A:A2:3F:0D:D1:0F:96:95:DE:B4:26:6F:53:B5:25:23:23:B8:2F:FB:2D:82:1B:32:4B:16:85:13"}}},"request":{"raw":"GET /js/cookienotice.js HTTP/1.1\r\nHost: www.d4ug.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.d4ug.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 2026\r\ndate: Tue, 31 Mar 2026 14:21:18 GMT\r\nexpires: Tue, 07 Apr 2026 14:21:18 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Mon, 30 Mar 2026 14:53:00 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6513,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"a705132a2174f88e196ec3610d68faa8","sha1":"3bad57a48d973a678fec600d45933010f6edc659","sha256":"068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568","sha512":"e947d33e0e9c5e6516f05e0ea696406e4e09b458f85021bc3a217071ae14879b2251e65aec5d1935ca9af2433d023356298321564e1a41119d41be7c2b2d36d5","ssdeep":"96:q54UPzHFcJZ7haKemb/m2GzrzCXAl/MStzo41Pm+YsttcVcbYhyjcso13EZDjiat:q5rPzHgxm2GzaXeMnuzYstyryPhZD9","tlshash":"4fd1630938a7127d125fa03fb6bf515ab66410238101db08786dfa785fd5f42a8e4ffa","first_seen":"2023-03-07T01:02:24Z","last_seen":"2026-07-22T03:28:55.255891Z","times_seen":131608,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"www.d4ug.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/2S9ptC1m/game.png","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"45.43.142.101","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.d4ug.site/","date":"2026-03-31T14:21:18.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 07:05:38 GMT","end":"Thu, 14 May 2026 07:05:37 GMT"},"fingerprint":{"sha1":"0C:60:FC:7F:49:9C:E4:F1:E8:28:6F:D1:45:F4:24:E1:7A:D7:FE:79","sha256":"9C:DF:9E:CA:39:40:61:D1:0E:A6:F4:42:3F:FB:A1:4B:BF:82:59:98:C4:CA:4D:56:1F:BD:99:B9:9F:EA:19:D0"}}},"request":{"raw":"GET /2S9ptC1m/game.png HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.d4ug.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 31 Mar 2026 14:21:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 14444\r\nlast-modified: Sun, 15 Jun 2025 19:53:00 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14444,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"c3f671a12bf1963b28b280f0dab916f6","sha1":"a512b08ff9778093110ca78e6cff4c33fdae92c5","sha256":"078b381fe2fa00c230d19fdce7fb5f28f15e7d6a47d60ff03ce56af00ae7de2a","sha512":"f0f537a50b188153afa7a159e956f37136b43fd6a6af3f969583daf8058cdfc1fa6d0b18c80376673a6d2b10f7561544a96b1f86eccd4de9e983212f784bd478","ssdeep":"192:daEnMjtmA9Ao2ICdmFqnYQpL3JqLmDhn1eWQWdLVGQqhLOVVr58Y7KxlV2ZNpK+X:znMjv2rdm5utmmGWbGir74lUPafNjnxm","tlshash":"8152c07a87b4de898dd02acd7a7e2ad295f574fee4908ce465c642c03739834a441cfb","first_seen":"2026-03-31T14:21:42.249082Z","last_seen":"2026-03-31T14:24:24.715169Z","times_seen":2,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":166,"dns":97,"connect":25,"send":0,"wait":23,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.d4ug.site/","date":"2026-03-31T14:21:19.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.d4ug.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 31 Mar 2026 02:01:49 GMT\r\nexpires: Wed, 31 Mar 2027 02:01:49 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 44370\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-22T03:26:56.25223Z","times_seen":241791,"resource_available":false,"data":null}},"time_used":374,"timings":{"blocked":184,"dns":63,"connect":7,"send":0,"wait":9,"receive":10,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/PJLLY7WD/capcut-pro-600x600.webp","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"45.43.142.101","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.d4ug.site/","date":"2026-03-31T14:21:19.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 07:05:38 GMT","end":"Thu, 14 May 2026 07:05:37 GMT"},"fingerprint":{"sha1":"0C:60:FC:7F:49:9C:E4:F1:E8:28:6F:D1:45:F4:24:E1:7A:D7:FE:79","sha256":"9C:DF:9E:CA:39:40:61:D1:0E:A6:F4:42:3F:FB:A1:4B:BF:82:59:98:C4:CA:4D:56:1F:BD:99:B9:9F:EA:19:D0"}}},"request":{"raw":"GET /PJLLY7WD/capcut-pro-600x600.webp HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.d4ug.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 31 Mar 2026 14:21:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7228\r\nlast-modified: Fri, 15 Aug 2025 14:55:59 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7228,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c6161344039354668955f4860a85f9a0","sha1":"7adb8bbbb0bb1c5826032d0e58e2c03e4d521e62","sha256":"008559253ed31cd4788d3aa7c13c29094bc0f03c5b5a90e9d0764a8c148d1aca","sha512":"4e6367dbb75251c515b2f7249a4110fd472d1ad289404f8daba47fea4a4b4d4155565322de2b6a97a3129467b105ffacfc59f76fa0c81ecd4562cc664ef23104","ssdeep":"192:gr5zqtuFjkWXLKr5QOHKbDEFH9PiyvxqWoZY4rgq:ieK/XcOOHoOn5eZbrg","tlshash":"efe15c8bc16e6a23b3afb51f363d3f428c0c4742cbe897096295c5934421b64be599b7","first_seen":"2026-03-31T14:21:42.250619Z","last_seen":"2026-03-31T14:24:24.729535Z","times_seen":2,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images-wixmp-ed30a86b8c4ca887773594c2.wixmp.com/i/302489cb-4ae3-4daa-94c0-13ac9961a9b8/dg434y2-fd1bf179-ea38-43d4-b3ad-10db3d0b32aa.png/v1/fill/w_256,h_256/forza_horizon_5_logo_icon_by_lucifer8055_dg434y2-fullview.png","fqdn":"images-wixmp-ed30a86b8c4ca887773594c2.wixmp.com","domain":"wixmp.com","tld":"com"},"ip":{"addr":"52.84.50.86","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.d4ug.site/","date":"2026-03-31T14:21:19.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wixmp.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 11:40:26 GMT","end":"Fri, 22 May 2026 11:40:25 GMT"},"fingerprint":{"sha1":"A6:D4:1C:FB:30:FC:54:63:5C:B2:0D:AF:85:FB:68:EA:53:EB:D1:5C","sha256":"9C:74:C7:DE:DB:01:A8:2B:07:04:37:23:13:2B:C9:7C:DE:73:30:9C:0A:BE:54:C4:04:C7:87:85:0A:85:B7:CA"}}},"request":{"raw":"GET /i/302489cb-4ae3-4daa-94c0-13ac9961a9b8/dg434y2-fd1bf179-ea38-43d4-b3ad-10db3d0b32aa.png/v1/fill/w_256,h_256/forza_horizon_5_logo_icon_by_lucifer8055_dg434y2-fullview.png HTTP/1.1\r\nHost: images-wixmp-ed30a86b8c4ca887773594c2.wixmp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.d4ug.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 73863\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-seen-by: image-manipulator-7f66b449c6-lbwtw\r\nx-wixmp-trace: projects/wix-media-infrastructure/traces/3BiHBmbF146Vonq4sh4BkN00IKd\r\ndate: Tue, 31 Mar 2026 13:47:17 GMT\r\nvia: 1.1 google, 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 4ddp80srYZnlHBHARVI8Js-4ncZ9MDQmyoP3P9141nfZuslKcBatRQ==\r\nage: 2042\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":73863,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"aa8989bf82f11fc9683c20c718bbf545","sha1":"bcbf8e9837d59ea2cd5f5efa080551e9b656f298","sha256":"e1bfb4d792dd6d04ef3e2d52af86e2c2ecbbedd7dd693cb2ffd0d09cc2b5fb71","sha512":"9046cf7da526817297406644891e77a8158158e0e35b9839741fe37ff34041220fbc8b6828f3bd3603e648afa6890793060ffdf92b5481e1c243fdaf27f0690f","ssdeep":"1536:kkpTuO5aYpZ3vq99kVNGhGyeRHbvlXSHzBiiYNcNLYkN1yA4RG:77ImZ3i99kDG7ooNidcRYo1yAD","tlshash":"117302a176380938c05a6775c0eadccc9b90a3477f83ca437e5b520279b6139fd64b9d","first_seen":"2026-03-31T14:21:42.251547Z","last_seen":"2026-03-31T14:24:24.716965Z","times_seen":2,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":164,"dns":132,"connect":7,"send":0,"wait":65,"receive":9,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/Dz0dwJXp/FORZA-HORIZON-4-IV-PC-FH4-NOWA-GRA-PELNA-WERSJA-STEAM-PL-AUTOMAT-BONUS.jpg","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"45.43.142.101","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.d4ug.site/","date":"2026-03-31T14:21:19.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 07:05:38 GMT","end":"Thu, 14 May 2026 07:05:37 GMT"},"fingerprint":{"sha1":"0C:60:FC:7F:49:9C:E4:F1:E8:28:6F:D1:45:F4:24:E1:7A:D7:FE:79","sha256":"9C:DF:9E:CA:39:40:61:D1:0E:A6:F4:42:3F:FB:A1:4B:BF:82:59:98:C4:CA:4D:56:1F:BD:99:B9:9F:EA:19:D0"}}},"request":{"raw":"GET /Dz0dwJXp/FORZA-HORIZON-4-IV-PC-FH4-NOWA-GRA-PELNA-WERSJA-STEAM-PL-AUTOMAT-BONUS.jpg HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.d4ug.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 31 Mar 2026 14:21:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 179133\r\nlast-modified: Wed, 05 Nov 2025 00:55:16 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":179133,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 800x800, components 3","md5":"c6b2e656926550f4caf16521aea4d578","sha1":"77d2140dfb56eeb6134da40b5487378f2ee4dddc","sha256":"8e3bceb39155d5089650242bf80f41a709e3d504e7eb2b008c2dfc43dd5e8671","sha512":"4ee83f171b676db1b4bb51a3fe797529764c3300d94d503c8d857115974ed9c894c90c2af2ebc327dd0aa8b1916a6c0cdc2aee72c81e8b1fec785daba7d690d2","ssdeep":"3072:+YGjwNWtWPOf/CGihP+bt6RmWWEHQqNtQvzw5Dijk8qtUQlp7/G6phup4YqYPN:+hwNW//2P1RHQqNKrwuNqtUQlpzSqC","tlshash":"21041263085cb8787d2ddbbad8285e963192e5c0f18317e7edcba581d83d8067e0d678","first_seen":"2026-03-31T14:21:42.252972Z","last_seen":"2026-03-31T14:24:24.717612Z","times_seen":2,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.d4ug.site/favicon.ico","fqdn":"www.d4ug.site","domain":"d4ug.site","tld":"site"},"ip":{"addr":"216.58.201.179","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.d4ug.site/","date":"2026-03-31T14:21:19.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.d4ug.site","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 21:35:06 GMT","end":"Thu, 14 May 2026 22:25:58 GMT"},"fingerprint":{"sha1":"3C:08:EC:93:BD:B9:D1:39:6B:63:81:A6:0C:BA:39:F2:81:90:59:05","sha256":"92:83:05:D4:6A:A2:3F:0D:D1:0F:96:95:DE:B4:26:6F:53:B5:25:23:23:B8:2F:FB:2D:82:1B:32:4B:16:85:13"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.d4ug.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.d4ug.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/x-icon; charset=UTF-8\r\nexpires: Tue, 31 Mar 2026 14:21:19 GMT\r\ndate: Tue, 31 Mar 2026 14:21:19 GMT\r\ncache-control: private, max-age=86400\r\nlast-modified: Thu, 26 Mar 2026 00:13:26 GMT\r\netag: W/\"2f4a222750fc480f6a8a938c75d6a9a9859f0e1a6e11d4c9c50fd90a907fa7da\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 412\r\nserver: GSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":3638,"size_decoded":0,"mime_type":"image/x-icon; charset=UTF-8","magic":"MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel","md5":"59a0c7b6e4848ccdabcea0636efda02b","sha1":"30ef5c54b8bbc3487ea2b4c45cd11ea2932e4340","sha256":"a1495da3cf3db37bf105a12658636ff628fee7b73975b9200049af7747e60b1f","sha512":"bcfebb2ca5af53031c636d5485125a1405ca8414d0bc8a5d34dd3b3feb4c7425be02cf4848867d91cf6d021d08630294f47bdc69d6cd04a1051972735b0f04d4","ssdeep":"","tlshash":"5671c80736c29f79c4d082fa159ec674136766eb281b061b3e85f65a3d88135f911ac0","first_seen":"2023-04-05T07:39:22Z","last_seen":"2026-07-22T03:28:55.244744Z","times_seen":105577,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"www.d4ug.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.d4ug.site/","date":"2026-03-31T14:21:19.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.d4ug.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 31 Mar 2026 02:01:43 GMT\r\nexpires: Wed, 31 Mar 2027 02:01:43 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nage: 44376\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-07-22T03:34:32.300009Z","times_seen":39706,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":258,"dns":74,"connect":23,"send":0,"wait":20,"receive":3,"ssl":138},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.d4ug.site/","date":"2026-03-31T14:21:19.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.d4ug.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 31 Mar 2026 02:01:49 GMT\r\nexpires: Wed, 31 Mar 2027 02:01:49 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 44370\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-22T03:26:56.25223Z","times_seen":241791,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":238,"dns":0,"connect":23,"send":0,"wait":8,"receive":9,"ssl":134},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.media-amazon.com/images/I/51rttY7a+9L.png","fqdn":"m.media-amazon.com","domain":"media-amazon.com","tld":"com"},"ip":{"addr":"52.222.188.35","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.d4ug.site/","date":"2026-03-31T14:21:19.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images-na.ssl-images-amazon.com","organization":""},"issuer":{"commonName":"DigiCert Global CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Thu, 18 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"52:0D:CF:DE:F2:93:23:20:46:F0:30:29:8B:56:72:A6:26:4E:DB:F7","sha256":"CA:0E:B9:BB:95:AF:A5:13:88:90:C9:A7:04:E6:C5:06:D6:F0:58:F3:82:35:C7:CF:F9:EA:8C:42:A0:0A:7F:5C"}}},"request":{"raw":"GET /images/I/51rttY7a+9L.png HTTP/1.1\r\nHost: m.media-amazon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.d4ug.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 35315\r\ndate: Wed, 10 Sep 2025 12:09:45 GMT\r\naccept-ranges: bytes\r\nserver: Server\r\nx-amz-ir-id: 98d05a08-6ff6-40ae-94e6-f735ab8bb118\r\ncache-control: max-age=630720000,public\r\nlast-modified: Mon, 20 Jul 2015 08:49:18 GMT\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: https://www.amazon.in, https://www.amazon.com\r\nedge-cache-tag: x-cache-559,/images/I/51rttY7a+9L\r\nexpires: Fri, 14 Jul 2045 06:18:39 GMT\r\nsurrogate-key: x-cache-559 /images/I/51rttY7a+9L\r\nx-nginx-cache-status: HIT\r\nvia: 1.1 42f63300fbd68ad2da1e182d0d6d6948.cloudfront.net (CloudFront)\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 17460694\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"OSL50-P3\",cdn-rid;desc=\"WPy14TireJMs7nPUC6LGfGi2-gl5LFpJ0mXCm-q6LvvjV--fKbiLrw==\",cdn-hit-layer;desc=\"EDGE\",cdn-downstream-fbl;dur=3,provider;desc=\"cf\"\r\naccept-ch: Sec-CH-UA-Form-Factors, Sec-CH-Viewport-Width, Sec-CH-Width, Sec-CH-Viewport-Height, Sec-CH-DPR, ECT\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: WPy14TireJMs7nPUC6LGfGi2-gl5LFpJ0mXCm-q6LvvjV--fKbiLrw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":35315,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"cb65e80c61f2e534ca47d11cd78fc5fd","sha1":"acf02b56a5c627b07330b63e4111064c14ea357c","sha256":"95ac73eca26fc383b57663a9b0a31b810e4827adf4278bed076341167c8d0288","sha512":"7177f53e3ed872b5d498b17eef1ffaeef228bbe6322b8b794375b048b966e2ccf90617f6c3b481a5e2cd168414a39869d00186a7f31513e64e88c5bb36406d11","ssdeep":"768:oECKONv9U6CiBUUZgrScyM8KrBzsyu0nfDN:osONvC6CiBNYX9NrBzHuoZ","tlshash":"d9f29e39fcf0bff8a52838361fd151026d2b86c3e580ae94b18d5d371f14ba98c1b65a","first_seen":"2023-05-20T19:45:30Z","last_seen":"2026-06-02T09:06:11.448179Z","times_seen":44,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":169,"dns":133,"connect":4,"send":0,"wait":5,"receive":1,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/bv4kgq6V/images-2025-09-21T190832-462.jpg","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"45.43.142.101","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.d4ug.site/","date":"2026-03-31T14:21:19.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 07:05:38 GMT","end":"Thu, 14 May 2026 07:05:37 GMT"},"fingerprint":{"sha1":"0C:60:FC:7F:49:9C:E4:F1:E8:28:6F:D1:45:F4:24:E1:7A:D7:FE:79","sha256":"9C:DF:9E:CA:39:40:61:D1:0E:A6:F4:42:3F:FB:A1:4B:BF:82:59:98:C4:CA:4D:56:1F:BD:99:B9:9F:EA:19:D0"}}},"request":{"raw":"GET /bv4kgq6V/images-2025-09-21T190832-462.jpg HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.d4ug.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 31 Mar 2026 14:21:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 51275\r\nlast-modified: Wed, 05 Nov 2025 02:44:22 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":51275,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 554x554, components 3","md5":"f399141d7ed11a3e9041e6af67d0bdfa","sha1":"efc0ea5f4095420b353c50aa5dc661f8c3e9bd6b","sha256":"d162c5ef47273e8b1fa0b724c5d86484f56bc74817100dc3261b6f6c6f9cfea8","sha512":"82333a5b634a65115ebfcbdf64aec30ac17b6dc560bd673d6b7b7e0ae27fc1e2fa82b636cda250482ba2be2256e8c814a3e1917f8594f9036db742ecd556fcf5","ssdeep":"768:tmY+G4dUyaCGyVB/uImM7XRuH0ZGnoYKMyRZUHsF9TObz+xWSIXDONqUb4VocpvY:t7F4dzaCvjFls0ZMQ2MXF0PXyNP4lOJ","tlshash":"fe33f212a8f74896ac48c53633e019d3c55b59a8700fc1f81edd4ddbf9693749f692c8","first_seen":"2026-03-31T14:21:42.255095Z","last_seen":"2026-03-31T14:24:24.713613Z","times_seen":2,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
