{"report_id":"612a1b64-529d-4baa-8aa8-65e232cb2d4a","version":6,"status":"done","tags":[],"date":"2025-08-02T21:12:32Z","url":{"schema":"http","addr":"pornheed.com/","fqdn":"pornheed.com","domain":"pornheed.com","tld":"com"},"ip":{"addr":"172.67.69.213","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.pornheed.com/","fqdn":"www.pornheed.com","domain":"pornheed.com","tld":"com"},"title":"Pornheed - Porn Videos Us, Porno tube, Share, Search, Pornstars"},"submit":{"url":{"schema":"http","addr":"pornheed.com/","fqdn":"pornheed.com","domain":"pornheed.com","tld":"com"},"ip":{"addr":"172.67.69.213","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-06T21:12:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-02","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-02","alert":"Sinkholed","trigger":"abackdamstubborn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-02","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"abackdamstubborn.com","ip":{"addr":"192.243.59.20","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"domain_registered":"2025-04-06","domain_rank":0,"first_seen":"2025-04-19T16:50:39.272896Z","last_seen":"2025-07-20T23:04:35.769319Z","alert_count":1,"request_count":1,"received_data":106857,"sent_data":454,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":75,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-07-30T15:12:44.837685Z","alert_count":0,"request_count":1,"received_data":386338,"sent_data":437,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.pornheed.com","ip":{"addr":"104.26.14.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-06","domain_rank":0,"first_seen":"2013-12-17T13:22:18Z","last_seen":"2024-11-11T14:26:23.621837Z","alert_count":0,"request_count":2,"received_data":40456,"sent_data":1018,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"preferencenail.com","ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":0,"first_seen":"2025-07-08T12:55:47.271261Z","last_seen":"2025-07-29T18:30:25.502216Z","alert_count":1,"request_count":1,"received_data":85963,"sent_data":414,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pornheed.com","ip":{"addr":"104.26.14.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-06","domain_rank":967417,"first_seen":"2025-08-02T21:12:33.021539Z","last_seen":"2025-08-02T21:12:33.021539Z","alert_count":0,"request_count":1,"received_data":27129,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"i.pornheed.com","ip":{"addr":"104.26.14.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-06","domain_rank":0,"first_seen":"2015-02-06T10:08:46Z","last_seen":"2024-11-11T14:26:23.693593Z","alert_count":0,"request_count":6,"received_data":91444,"sent_data":2629,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"t.pornheed.com","ip":{"addr":"104.26.14.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-06","domain_rank":0,"first_seen":"2015-02-06T10:08:50Z","last_seen":"2024-11-11T14:26:23.698396Z","alert_count":0,"request_count":11,"received_data":92902,"sent_data":4815,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"weirdopt.com","ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":0,"first_seen":"2025-07-08T12:55:47.272157Z","last_seen":"2025-07-30T03:47:58.129946Z","alert_count":1,"request_count":1,"received_data":377,"sent_data":419,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"j.pornheed.com","ip":{"addr":"104.26.14.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-06","domain_rank":0,"first_seen":"2015-02-06T10:08:47Z","last_seen":"2024-11-11T14:26:23.999384Z","alert_count":0,"request_count":3,"received_data":115011,"sent_data":1269,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"professionaltrafficmonitor.com","ip":{"addr":"18.194.162.133","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2025-01-23","domain_rank":0,"first_seen":"2025-01-25T08:56:07.448138Z","last_seen":"2025-08-01T12:09:12.293272Z","alert_count":0,"request_count":1,"received_data":425,"sent_data":455,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.pornheed.com/","fqdn":"www.pornheed.com","domain":"pornheed.com","tld":"com"},"ip":{"addr":"104.26.14.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"56086590990341d341fe381f3586771a","sha1":"8c8f6293e527775ca8c8478ab53ecce337b24bc1","sha256":"721da74a7a6587354c3ae1fc4621476e376f8de792d000a53a01f86341f841f9","sha512":"fd5e6db8f5fddf3d75ad00a49c00d52a035b17dddba22b5c7d85add68ecf6f975d3dc1ba1af76f4bdacda2ab9f711c053094b12e1b4eac430f30915101d13adb","ssdeep":"","tlshash":"fac04cd70238b62b1ec5cfc6f109675fe61378c48686d9e08435a6b0acc44e2821b041","size":158,"data":"","first_seen":"2024-11-11T14:26:25.446841Z","last_seen":"2026-03-22T11:20:39.143333Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pornheed.com/","fqdn":"www.pornheed.com","domain":"pornheed.com","tld":"com"},"ip":{"addr":"104.26.14.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fdd0d42740ef5d2ab68a7b599011db56","sha1":"7792f3b8e28b01eb622452673685854b06dcc4aa","sha256":"e1150dd8e09daf2b299d72d90cc6def17377b0ce1d09376bb9aef2051a3b2040","sha512":"7b0e6808d7874a6b8d3a5f5eed73cd0a655fc4c40763c8756962e509c4d3e082a7f9d80bb08dd78d7fd7670c9f6a73780d94305d0dba2b8674e0b619b7564114","ssdeep":"","tlshash":"59b022acb2800f00c33002aa822002a0c02cac8288228080e8c280a208cb820c8b3082","size":116,"data":"","first_seen":"2024-11-11T14:26:25.449342Z","last_seen":"2026-03-22T11:20:39.140896Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j.pornheed.com/js/1.12.4.jquery.min.js","fqdn":"j.pornheed.com","domain":"pornheed.com","tld":"com"},"ip":{"addr":"104.26.14.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e8b7d96265599258e88bff700adff2a","sha1":"1a4d3936393fd3ec3470dbea7d428e053e07cef6","sha256":"3ae5d8b5a2806b811378107313b19f0b05baae4b2bbe85e19e9cd223391a0fe3","sha512":"308beaab22ca98974f663ede9320197e9c9072aba6a9a4f7763dfe76bb019b7c7aff5f6885a9ad007d4af262d4ba622ee84f571125752b75198d83df1ab5ea26","ssdeep":"1536:jYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJ5Fk/zkZ4HjL5o8srOaS9TwDhb7/Jp9P:y4J+03jL5TCOauTwDhFdnCVQNLa98HrF","tlshash":"5d93d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","size":97166,"data":"","first_seen":"2023-03-07T01:06:48Z","last_seen":"2026-05-07T11:03:20.524616Z","times_seen":2063,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pornheed.com/","fqdn":"www.pornheed.com","domain":"pornheed.com","tld":"com"},"ip":{"addr":"104.26.14.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1ca6af5e52cd97ad859360a6cd0fc89e","sha1":"3bf08fd3a9cb84c73c8955e78c79f88f5c4578e3","sha256":"7634d1f39bc3ab0962576f044d057efd654bc41c222f8da31fc684d87ba59a22","sha512":"ab73b8fa176e481726ea2cb98605a0a93167c1cdcc98c58bb8944280b9de94e23677b2b7fdd43151fb215d98b01563e0e50523c99bce2547b1495d994a76270a","ssdeep":"","tlshash":"09c02b8c25075cb001db17400f2fb500b002311094e01c31090573485620c23ab44814","size":139,"data":"","first_seen":"2025-08-02T21:12:37.540004Z","last_seen":"2026-03-22T11:20:39.145777Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-PX2PGH99PP","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3eb49126077013b783ef4a286d846ccc","sha1":"be84d570eefbf4d6d446349db969a472debcc70c","sha256":"f1295c8e8dab7d72d227f42b254e4062978ce08d7952801e9332e9cfaacfd8bb","sha512":"da0b7d03ede99457434e57e4a8c8b279eab91451ac1a9e47d6a26c56bc631cd15b0e11272847cc768602355c9a68ce33159d8f7887d963b251cb04446b76fb9e","ssdeep":"3072:MnKjmeWKA8xwym0Ro1Vlffz0le38JGXbrunAIH1EMHsNKlKZtcRWaWU5Fjt2Ywr0:Igvm0y4HnCKlo9aWU5Fh2nrxw24D","tlshash":"5f8419cd73c6746693a2b478503f018ba57b29a2f44cc899f189cce42e74a9a4177f7c","size":385337,"data":"","first_seen":"2025-08-02T21:12:37.51475Z","last_seen":"2025-08-02T21:12:37.51475Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85386,"data":"","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pornheed.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"www.pornheed.com","domain":"pornheed.com","tld":"com"},"ip":{"addr":"104.26.14.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-07T16:54:57.887644Z","times_seen":104000,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j.pornheed.com/js/js_v8.js","fqdn":"j.pornheed.com","domain":"pornheed.com","tld":"com"},"ip":{"addr":"104.26.14.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"65240f041c3ddde680f58884aeda511e","sha1":"aca091f432d1b124a71e6317b5aa0bc938358d4e","sha256":"2750c4ce804fcfe645ab24e9842d07904d862ad98e11047a6948cef3995bb9d2","sha512":"a78a6217888f5e4e7ec67c0a1b3a91ba7056f471154df83adf324bc7c7cbb80b73f5c7731d4e48dc9e0d4a6e2eaf2a57fe6b9e47d85313e67043d30bc4f49c64","ssdeep":"96:7dqdMoMeM/yVmze1NPWHUe2Ey3XlkmHloDmrGJesaU0TGnu0YJ/bO9GX:7dqdMZaWHXXy3XlkmHloDmrG3atauzJ5","tlshash":"f2c1634af545a63da0be767dc12f03195726c607a264d868e83544b03cb8f97f633ace","size":5689,"data":"","first_seen":"2024-11-11T14:26:25.378482Z","last_seen":"2025-10-29T18:18:56.66356Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"abackdamstubborn.com/60/6c/6c/606c6cb8de12eb3012209372e69d55ba.js","fqdn":"abackdamstubborn.com","domain":"abackdamstubborn.com","tld":"com"},"ip":{"addr":"192.243.59.20","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"introduction_type":"scriptElement","is_inline":false,"md5":"54dc440672b8719ace84d2881df5149d","sha1":"7a59cfacb0ee3d7e05df5611057ed3d021a3bf68","sha256":"e9247ecccdf8be6fff1654a08c2d5b12e16d46063c0d062d7d6517339affd4aa","sha512":"7cb3bb54e01836b358efa80dc0fca342c6e8e9493217c58c02ee003c803c45ecb34046960da346eee2b53b75a5b847f0bc645794ae9b260504ca0376db5a24f0","ssdeep":"1536:oeLCZFtd8r9m3Zh324NmUBKLR4PscDsTd+GN8tE9vSgzzsJsBp3iK+8ZkL:NLOdKgBKF40cDy8tMSghpSV","tlshash":"04a3d9c47b71f49d42d770bb233f691bf4ea8e12048ce95ce102fea82e6530aa57d954","size":106045,"data":"","first_seen":"2025-08-02T21:12:37.512761Z","last_seen":"2025-08-02T21:12:37.512761Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"i.pornheed.com/image/204.jpg","fqdn":"i.pornheed.com","domain":"pornheed.com","tld":"com"},"ip":{"addr":"104.26.14.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pornheed.com/","date":"2025-08-02T21:12:10.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornheed.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Jun 2025 08:21:50 GMT","end":"Sun, 07 Sep 2025 09:21:27 GMT"},"fingerprint":{"sha1":"32:27:F4:DE:1E:A6:59:E9:B1:93:3F:62:B6:AA:28:25:00:E9:E0:DD","sha256":"C4:93:14:EB:9C:32:3B:86:8C:02:4A:1A:8B:F0:75:5A:54:F8:0E:1A:D2:97:F0:F0:ED:0E:B1:8C:B8:C6:EE:27"}}},"request":{"raw":"GET /image/204.jpg HTTP/1.1\r\nHost: i.pornheed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pornheed.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 02 Aug 2025 21:12:10 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=vduNYG0QQ8OBBp3IJtyWi6uqweutwuwI%2FIf8O4Q%2BiDugNFqg97p41WX8SYjn2W%2Fj%2FeivqjLwZGQUhnV5MbLOpPjudJfT1cUMDykjbh7Ah3P7edkX460diY2ORKTEkmbZ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: degrade=85, origSize=16309\r\ncf-ray: 9690926abf1f0b49-OSL\r\nserver: cloudflare\r\netag: W/\"500fe001-3fb5\"\r\nexpires: Sat, 01 Aug 2026 20:42:03 GMT\r\nlast-modified: Wed, 25 Jul 2012 12:01:05 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 88207\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2905\u0026min_rtt=814\u0026rtt_var=1279\u0026sent=105\u0026recv=104\u0026lost=0\u0026retrans=0\u0026sent_bytes=47939\u0026recv_bytes=12362\u0026delivery_rate=865743\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=36142\u0026unsent_bytes=0\u0026cid=d25fa5a15979d12a\u0026ts=1232\u0026inflight_dur=38\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15827,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x246, components 3","md5":"c9f816d6161dc1aa7d9dee3b3a9d4363","sha1":"1f37cbf67db3641038ea3232f4f25c07ab9d79a4","sha256":"9dc3452b0ef4870d81c46f5a653c92fe3c95452e43e9e4bb2fe8df51ae74c1f0","sha512":"46b5ef3e0ffe9799881652a1fa82d4285e7db496daea0a55e97609e53d4adf508e099a5469380157a03b4e62aa2b22fd50f5c7069168e8b1f0101a4e4f30593c","ssdeep":"384:agc0yXD47kAj/DQ+JHm1gRc1+mODWAX/vDfIx5U+f:agiD+kAfRJHm1gy1X8vyz","tlshash":"5e62cf3436d9ccbfc984637683b4622b07b511bfb1dae1c07cc09a2b216d1676f625da","first_seen":"2025-08-02T21:12:37.494319Z","last_seen":"2025-08-02T21:12:37.494319Z","times_seen":1,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.pornheed.com/4/3222250.jpg","fqdn":"t.pornheed.com","domain":"pornheed.com","tld":"com"},"ip":{"addr":"104.26.14.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pornheed.com/","date":"2025-08-02T21:12:10.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornheed.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Jun 2025 08:21:50 GMT","end":"Sun, 07 Sep 2025 09:21:27 GMT"},"fingerprint":{"sha1":"32:27:F4:DE:1E:A6:59:E9:B1:93:3F:62:B6:AA:28:25:00:E9:E0:DD","sha256":"C4:93:14:EB:9C:32:3B:86:8C:02:4A:1A:8B:F0:75:5A:54:F8:0E:1A:D2:97:F0:F0:ED:0E:B1:8C:B8:C6:EE:27"}}},"request":{"raw":"GET /4/3222250.jpg HTTP/1.1\r\nHost: t.pornheed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pornheed.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 02 Aug 2025 21:12:10 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ROChptRy7KxdEF%2FPCnG2O0NZS1w%2F97IdZYUZd5a8elAw58NQI7nGVBB1ZaUIrIfWtezAPpUBmmthiqPHxe8G60piRSYqo3BPBPEjZ231ThCMTFi%2FOaSycJx3yAqItueQ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: degrade=85, origSize=43362\r\ncf-ray: 9690926aff290b49-OSL\r\nserver: cloudflare\r\netag: W/\"53d75102-a962\"\r\nexpires: Fri, 31 Jul 2026 07:06:13 GMT\r\nlast-modified: Tue, 29 Jul 2014 07:45:06 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 223557\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2730\u0026min_rtt=814\u0026rtt_var=1255\u0026sent=208\u0026recv=112\u0026lost=0\u0026retrans=0\u0026sent_bytes=171061\u0026recv_bytes=16154\u0026delivery_rate=3999306\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=36142\u0026unsent_bytes=0\u0026cid=d25fa5a15979d12a\u0026ts=1278\u0026inflight_dur=82\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10532,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x225, components 3","md5":"2bb8566b460452b7aa9e885e09fef3a1","sha1":"04c426d92ff638c43b7d08d85373aa1c15d1905a","sha256":"0a380d17bec3fbdfe110f66a109a56cd4a72a126b7e861e293bab4d808ca4c6e","sha512":"e83ca7313381a508f04aef101ca0a729f54540f822362d6db37ae8b95c89d9c069aa8730f0163f77081f96dfb3c0ea03d2c6a76f16c5bf25b91b65af260cb0c3","ssdeep":"192:sX8yKyT9qYJiQ14NxZH/sURLiuXrYPcKHiYoCt2EnJp6FV5HgCsq0RHxS8DA:g9BqQi1NqSYniZCt2ET6vxnsq0/zDA","tlshash":"dc22af071399d4a1d6e0f7369f4ca24661ac41e51b6defd8e3c0b249bfb905e0e05751","first_seen":"2025-08-02T21:12:37.496973Z","last_seen":"2025-08-02T21:12:37.496973Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.pornheed.com/33/3148020.jpg","fqdn":"t.pornheed.com","domain":"pornheed.com","tld":"com"},"ip":{"addr":"104.26.14.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pornheed.com/","date":"2025-08-02T21:12:10.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornheed.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Jun 2025 08:21:50 GMT","end":"Sun, 07 Sep 2025 09:21:27 GMT"},"fingerprint":{"sha1":"32:27:F4:DE:1E:A6:59:E9:B1:93:3F:62:B6:AA:28:25:00:E9:E0:DD","sha256":"C4:93:14:EB:9C:32:3B:86:8C:02:4A:1A:8B:F0:75:5A:54:F8:0E:1A:D2:97:F0:F0:ED:0E:B1:8C:B8:C6:EE:27"}}},"request":{"raw":"GET /33/3148020.jpg HTTP/1.1\r\nHost: t.pornheed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pornheed.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 02 Aug 2025 21:12:10 GMT\r\ncontent-type: image/webp\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=hnoRbZnFtys5bP0G8YT8%2FNa0o1Vwn7MqZdg3f9WpQCHfL5n3FFToiJ91q8vgFeUYO%2FpU17ytgaP54MOOy7%2BgekRAjzIdjB%2BpSe6hZXhY4%2BmHqpOT1y9abEmyw43m%2F5ug\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: qual=85, origFmt=jpeg, origSize=8211\r\ncontent-disposition: inline; filename=\"3148020.webp\"\r\netag: W/\"5e2836ff-2013\"\r\nexpires: Sun, 02 Aug 2026 14:46:05 GMT\r\nlast-modified: Wed, 22 Jan 2020 11:50:23 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 23165\r\ncf-ray: 9690926abf140b49-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2905\u0026min_rtt=814\u0026rtt_var=1279\u0026sent=113\u0026recv=104\u0026lost=0\u0026retrans=0\u0026sent_bytes=59139\u0026recv_bytes=12362\u0026delivery_rate=865743\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=36142\u0026unsent_bytes=0\u0026cid=d25fa5a15979d12a\u0026ts=1236\u0026inflight_dur=42\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7452,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"902c76c4f5d75ef885e812b82b7d9619","sha1":"5edec9d1b51087c17b96d5b0409890c3fe09b4a2","sha256":"8467f5775b872a452d965d28461292158fa053e9c81f91e8a0cb34c87540a3f7","sha512":"92109575a1cc965097eedf06fcb47c6a60406bf16aea9d7ddd4cd90111faf1423fe41b068658a02e8ed507d1977c887819cc9efbd4076edb1601503b5f39aed1","ssdeep":"96:6QvtFzLbfR+6EcxkztRxK0YODbAm1X/h6lIP6VwxmrWG6/XxVskclERQBsYGk2fD:6ibfR+WGztzK0rbz5XPtxEinc6YG1fD","tlshash":"1df1ae2a6f4a282b07598a4bf5f7f14fbe081f60ec2fe104c16e1ed699b65853d69012","first_seen":"2025-08-02T21:12:37.498299Z","last_seen":"2025-08-02T21:12:37.498299Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"weirdopt.com/ad/advertisers.js","fqdn":"weirdopt.com","domain":"weirdopt.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pornheed.com/","date":"2025-08-02T21:12:11.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"weirdopt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Jul 2025 15:18:37 GMT","end":"Mon, 29 Sep 2025 15:18:36 GMT"},"fingerprint":{"sha1":"1A:27:71:C0:8E:44:D4:6B:F5:AA:49:F0:F1:AF:E5:5F:30:23:A4:D4","sha256":"84:6C:2E:D6:ED:8A:2F:33:05:CC:E9:F2:24:E5:5C:E0:80:C2:04:2D:C3:21:06:64:E1:0D:14:81:A1:9A:00:1B"}}},"request":{"raw":"GET /ad/advertisers.js HTTP/1.1\r\nHost: weirdopt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pornheed.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 02 Aug 2025 21:12:11 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 0\r\nConnection: keep-alive\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 436c381e88e292bc00f5927275481854\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-07T16:57:31.852553Z","times_seen":14796918,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":80,"dns":1,"connect":35,"send":0,"wait":19,"receive":1,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-02","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j.pornheed.com/js/1.12.4.jquery.min.js","fqdn":"j.pornheed.com","domain":"pornheed.com","tld":"com"},"ip":{"addr":"104.26.14.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pornheed.com/","date":"2025-08-02T21:12:10.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornheed.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Jun 2025 08:21:50 GMT","end":"Sun, 07 Sep 2025 09:21:27 GMT"},"fingerprint":{"sha1":"32:27:F4:DE:1E:A6:59:E9:B1:93:3F:62:B6:AA:28:25:00:E9:E0:DD","sha256":"C4:93:14:EB:9C:32:3B:86:8C:02:4A:1A:8B:F0:75:5A:54:F8:0E:1A:D2:97:F0:F0:ED:0E:B1:8C:B8:C6:EE:27"}}},"request":{"raw":"GET /js/1.12.4.jquery.min.js HTTP/1.1\r\nHost: j.pornheed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pornheed.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 02 Aug 2025 21:12:10 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=e2r01CpKSAoJRefQkyZfXWaAalRGWVXHwMit6pvtuTLfYycg4o3%2BG5FsM5isSRaihLDl3se6lE1Yl%2B1vdsx%2FEjFYsWxoNzKYRcehEHJjlHwjlnBMEWA8V%2B95PQytovMB\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 14 Feb 2023 02:37:31 GMT\r\netag: W/\"63eaf3eb-17b8e\"\r\nexpires: Fri, 31 Jul 2026 06:11:05 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nage: 226865\r\ncontent-encoding: br\r\ncf-ray: 9690926a7f060b49-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2739\u0026min_rtt=814\u0026rtt_var=1262\u0026sent=80\u0026recv=97\u0026lost=0\u0026retrans=0\u0026sent_bytes=20840\u0026recv_bytes=6497\u0026delivery_rate=643469\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=18071\u0026unsent_bytes=0\u0026cid=d25fa5a15979d12a\u0026ts=1207\u0026inflight_dur=13\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97166,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32077), with CRLF line terminators","md5":"0e8b7d96265599258e88bff700adff2a","sha1":"1a4d3936393fd3ec3470dbea7d428e053e07cef6","sha256":"3ae5d8b5a2806b811378107313b19f0b05baae4b2bbe85e19e9cd223391a0fe3","sha512":"308beaab22ca98974f663ede9320197e9c9072aba6a9a4f7763dfe76bb019b7c7aff5f6885a9ad007d4af262d4ba622ee84f571125752b75198d83df1ab5ea26","ssdeep":"1536:jYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJ5Fk/zkZ4HjL5o8srOaS9TwDhb7/Jp9P:y4J+03jL5TCOauTwDhFdnCVQNLa98HrF","tlshash":"5d93d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","first_seen":"2023-03-07T01:06:48Z","last_seen":"2026-05-07T11:03:20.524616Z","times_seen":2063,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.pornheed.com/4/3060020.jpg","fqdn":"t.pornheed.com","domain":"pornheed.com","tld":"com"},"ip":{"addr":"104.26.14.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pornheed.com/","date":"2025-08-02T21:12:10.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornheed.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Jun 2025 08:21:50 GMT","end":"Sun, 07 Sep 2025 09:21:27 GMT"},"fingerprint":{"sha1":"32:27:F4:DE:1E:A6:59:E9:B1:93:3F:62:B6:AA:28:25:00:E9:E0:DD","sha256":"C4:93:14:EB:9C:32:3B:86:8C:02:4A:1A:8B:F0:75:5A:54:F8:0E:1A:D2:97:F0:F0:ED:0E:B1:8C:B8:C6:EE:27"}}},"request":{"raw":"GET /4/3060020.jpg HTTP/1.1\r\nHost: t.pornheed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pornheed.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 02 Aug 2025 21:12:10 GMT\r\ncontent-type: image/webp\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=KgD4LGmFFVvLDi%2BWLdnqDmQGXu%2BHRfDzBU%2FQnAn5t6DiOb1NgFtyOJjKS3j%2B2FPReuD8ZoI8CC1Buif2rBkfIUz7sB7jVvVMKD0fc9ErxiDEpOHf88aEeO1kChINOMi0\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: qual=85, origFmt=jpeg, origSize=11175\r\ncontent-disposition: inline; filename=\"3060020.webp\"\r\netag: W/\"52cc3d23-2ba7\"\r\nexpires: Sat, 01 Aug 2026 05:47:15 GMT\r\nlast-modified: Tue, 07 Jan 2014 17:45:07 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 141895\r\ncf-ray: 9690926abf0d0b49-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2905\u0026min_rtt=814\u0026rtt_var=1279\u0026sent=116\u0026recv=104\u0026lost=0\u0026retrans=0\u0026sent_bytes=62557\u0026recv_bytes=12362\u0026delivery_rate=865743\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=36142\u0026unsent_bytes=0\u0026cid=d25fa5a15979d12a\u0026ts=1238\u0026inflight_dur=44\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1980,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 150x112, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"82f83f6d87ff31f59c12deec87d81455","sha1":"c1e7754741a9feb108103a028e00443eb3d12739","sha256":"7efc1a6fee34182023fa5c7a63a68efe503e1cf6bf287b7445e750972909fb15","sha512":"bd3f59230c16f1b7aba59b9cac5fbfba62b79015b976e75437f9c54be2f416016841fbb628c066e620b468f0e31862889ec513feab123109cb2f29a8de49b663","ssdeep":"","tlshash":"fb410abe58a6ac4270e48c65794ca89663a2913868201fe04f814deca9bd341d382a7e","first_seen":"2025-08-02T21:12:37.501247Z","last_seen":"2025-08-02T21:12:37.501247Z","times_seen":1,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j.pornheed.com/js/js_v8.js","fqdn":"j.pornheed.com","domain":"pornheed.com","tld":"com"},"ip":{"addr":"104.26.14.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pornheed.com/","date":"2025-08-02T21:12:10.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornheed.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Jun 2025 08:21:50 GMT","end":"Sun, 07 Sep 2025 09:21:27 GMT"},"fingerprint":{"sha1":"32:27:F4:DE:1E:A6:59:E9:B1:93:3F:62:B6:AA:28:25:00:E9:E0:DD","sha256":"C4:93:14:EB:9C:32:3B:86:8C:02:4A:1A:8B:F0:75:5A:54:F8:0E:1A:D2:97:F0:F0:ED:0E:B1:8C:B8:C6:EE:27"}}},"request":{"raw":"GET /js/js_v8.js HTTP/1.1\r\nHost: j.pornheed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pornheed.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 02 Aug 2025 21:12:10 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=I5HGx%2BxRl97qqz9sNa5BUXC%2BwivuCpy5BQk%2BeugIDfCB3I2qqRfpXJRaBmonWKE%2BE62IgaKjDaiashjBDoP%2B41HsaUvO%2FdtFDsJ%2F26kcm08JDeixEg%2FIURb8PcF9uKVZ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Sat, 26 Oct 2024 07:22:20 GMT\r\netag: W/\"671c98ac-1639\"\r\nexpires: Fri, 31 Jul 2026 06:11:05 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nage: 226865\r\ncontent-encoding: br\r\ncf-ray: 9690926a7f070b49-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2739\u0026min_rtt=814\u0026rtt_var=1262\u0026sent=85\u0026recv=97\u0026lost=0\u0026retrans=0\u0026sent_bytes=26311\u0026recv_bytes=6497\u0026delivery_rate=643469\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=18071\u0026unsent_bytes=0\u0026cid=d25fa5a15979d12a\u0026ts=1211\u0026inflight_dur=16\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5689,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3000), with CRLF line terminators","md5":"65240f041c3ddde680f58884aeda511e","sha1":"aca091f432d1b124a71e6317b5aa0bc938358d4e","sha256":"2750c4ce804fcfe645ab24e9842d07904d862ad98e11047a6948cef3995bb9d2","sha512":"a78a6217888f5e4e7ec67c0a1b3a91ba7056f471154df83adf324bc7c7cbb80b73f5c7731d4e48dc9e0d4a6e2eaf2a57fe6b9e47d85313e67043d30bc4f49c64","ssdeep":"96:7dqdMoMeM/yVmze1NPWHUe2Ey3XlkmHloDmrGJesaU0TGnu0YJ/bO9GX:7dqdMZaWHXXy3XlkmHloDmrG3atauzJ5","tlshash":"f2c1634af545a63da0be767dc12f03195726c607a264d868e83544b03cb8f97f633ace","first_seen":"2024-11-11T14:26:25.378482Z","last_seen":"2025-10-29T18:18:56.66356Z","times_seen":4,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.pornheed.com/33/3133923.jpg","fqdn":"t.pornheed.com","domain":"pornheed.com","tld":"com"},"ip":{"addr":"104.26.14.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pornheed.com/","date":"2025-08-02T21:12:10.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornheed.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Jun 2025 08:21:50 GMT","end":"Sun, 07 Sep 2025 09:21:27 GMT"},"fingerprint":{"sha1":"32:27:F4:DE:1E:A6:59:E9:B1:93:3F:62:B6:AA:28:25:00:E9:E0:DD","sha256":"C4:93:14:EB:9C:32:3B:86:8C:02:4A:1A:8B:F0:75:5A:54:F8:0E:1A:D2:97:F0:F0:ED:0E:B1:8C:B8:C6:EE:27"}}},"request":{"raw":"GET /33/3133923.jpg HTTP/1.1\r\nHost: t.pornheed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pornheed.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 02 Aug 2025 21:12:10 GMT\r\ncontent-type: image/webp\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=nqEVU36Y5zH9vnfYWbHrcvg%2BKWMdMezklkcF%2Fe7o%2F6Fuf8Mq0T7bMOyaOFmHVDhvEG90n%2F3LL2qG%2FRgcaCjG5AQgVR6uFrLlng2DB4FPYs6OTWxpNoGMo1bvCDdBEo%2Fo\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: qual=85, origFmt=jpeg, origSize=9810\r\ncontent-disposition: inline; filename=\"3133923.webp\"\r\netag: W/\"5e28370e-2652\"\r\nexpires: Sun, 02 Aug 2026 09:19:27 GMT\r\nlast-modified: Wed, 22 Jan 2020 11:50:38 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 42763\r\ncf-ray: 9690926abf150b49-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2905\u0026min_rtt=814\u0026rtt_var=1279\u0026sent=116\u0026recv=104\u0026lost=0\u0026retrans=0\u0026sent_bytes=62557\u0026recv_bytes=12362\u0026delivery_rate=865743\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=36142\u0026unsent_bytes=0\u0026cid=d25fa5a15979d12a\u0026ts=1241\u0026inflight_dur=44\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8872,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7325e40b5c1ddefb775d9a3575ab2d45","sha1":"bc57d8596ee7ab78a738a6ec9eae84b42b812191","sha256":"2dca8784b52150d695ba62f17e55e0c47649ff3600b3a5f7ea3651b50b01a406","sha512":"3487f4faf1fdb1c09439ca9a3c3d8c8fc7f69a8d6aeca86bebe3ed0c64954edf0487baf7fcd22474c90cfef4e3b1d74534f90eed1fd89a36a51328a66faabe3f","ssdeep":"192:vuvk2geYyTDntD73958wtJzIvounGZD+nFLbJYLUIqLlp1MG:mvk2GyTLpf8ezKounGp4i4FRp1MG","tlshash":"8202be01e0a08428abfb8887fbcade312f8b9a479449d8428b2515a389130b5a7d8453","first_seen":"2025-08-02T21:12:37.505149Z","last_seen":"2025-08-02T21:12:37.505149Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.pornheed.com/33/3353067.jpg","fqdn":"t.pornheed.com","domain":"pornheed.com","tld":"com"},"ip":{"addr":"104.26.14.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pornheed.com/","date":"2025-08-02T21:12:10.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornheed.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Jun 2025 08:21:50 GMT","end":"Sun, 07 Sep 2025 09:21:27 GMT"},"fingerprint":{"sha1":"32:27:F4:DE:1E:A6:59:E9:B1:93:3F:62:B6:AA:28:25:00:E9:E0:DD","sha256":"C4:93:14:EB:9C:32:3B:86:8C:02:4A:1A:8B:F0:75:5A:54:F8:0E:1A:D2:97:F0:F0:ED:0E:B1:8C:B8:C6:EE:27"}}},"request":{"raw":"GET /33/3353067.jpg HTTP/1.1\r\nHost: t.pornheed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pornheed.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 02 Aug 2025 21:12:10 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=01Cwq%2FrE5VQo%2FhR8mTV93C6qDiDaQO8UFBgVr8pfKXOTQ81VBdQenkA10wZdWrV%2FFVc6bZOJ63eDO8W%2BvOsTKtPXMiU5Zw%2FsARO2JAjAFAlIC1Sr6N3Emsok4A2%2BdJ%2Bz\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origSize=8229, status=webp_bigger\r\ncf-ray: 9690926abf1c0b49-OSL\r\nserver: cloudflare\r\netag: W/\"5e2836b2-2025\"\r\nexpires: Sun, 02 Aug 2026 09:19:27 GMT\r\nlast-modified: Wed, 22 Jan 2020 11:49:06 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 42763\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2905\u0026min_rtt=814\u0026rtt_var=1279\u0026sent=116\u0026recv=104\u0026lost=0\u0026retrans=0\u0026sent_bytes=62557\u0026recv_bytes=12362\u0026delivery_rate=865743\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=36142\u0026unsent_bytes=0\u0026cid=d25fa5a15979d12a\u0026ts=1238\u0026inflight_dur=44\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7737,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 32x27, segment length 16, progressive, precision 8, 300x200, components 3","md5":"2cb5b4dee6eb5ed68b67479dce4791bb","sha1":"05fd0f9597a4bd1e8c3d78768a4fa2bac33d6f26","sha256":"36f9d0daec0aef91395cf27103450f8d21a5c7be5045f3a1f1aa09e77bf62698","sha512":"4cac367182c19d3420f2663f543df1cf225bb4e72961c89f94ac8fb78ddfdc64495cd250885d72cee29e080b7e4bbc04919289a2752423d1bedd0adc3e92fea8","ssdeep":"192:kwZUvOMLeUcpLrfPveEhr+eXOXl/iRJxOZEXt+1QKuw/RJ:zUx8XvHweepiRq/JuwZJ","tlshash":"c9f17d5dd303d6b5fb76925cbc78540825173a88dee4aebf3ad3311199aa014a3df4a0","first_seen":"2025-08-02T21:12:37.507218Z","last_seen":"2025-08-02T21:12:37.507218Z","times_seen":1,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.pornheed.com/33/2864929.jpg","fqdn":"t.pornheed.com","domain":"pornheed.com","tld":"com"},"ip":{"addr":"104.26.14.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pornheed.com/","date":"2025-08-02T21:12:10.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornheed.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Jun 2025 08:21:50 GMT","end":"Sun, 07 Sep 2025 09:21:27 GMT"},"fingerprint":{"sha1":"32:27:F4:DE:1E:A6:59:E9:B1:93:3F:62:B6:AA:28:25:00:E9:E0:DD","sha256":"C4:93:14:EB:9C:32:3B:86:8C:02:4A:1A:8B:F0:75:5A:54:F8:0E:1A:D2:97:F0:F0:ED:0E:B1:8C:B8:C6:EE:27"}}},"request":{"raw":"GET /33/2864929.jpg HTTP/1.1\r\nHost: t.pornheed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pornheed.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 02 Aug 2025 21:12:10 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LoI5jueWQmjgR80EuW0TLzzr8mjb4HK82JwUbqYJmdJkk2ZqLjuDo7VQvJdzIObC%2FhCKxRZ8OLBbVl3NtmsGdmjb9hVctcqynrZdC%2FLUwc%2FNdf6ooGLEyNvdy9ugIbxD\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: degrade=85, origSize=15098\r\ncf-ray: 9690926aff2c0b49-OSL\r\nserver: cloudflare\r\netag: W/\"5e5a6947-3afa\"\r\nexpires: Fri, 31 Jul 2026 07:06:13 GMT\r\nlast-modified: Sat, 29 Feb 2020 13:38:15 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 223557\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2938\u0026min_rtt=814\u0026rtt_var=1117\u0026sent=169\u0026recv=111\u0026lost=0\u0026retrans=0\u0026sent_bytes=124378\u0026recv_bytes=16107\u0026delivery_rate=2247537\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=36142\u0026unsent_bytes=0\u0026cid=d25fa5a15979d12a\u0026ts=1268\u0026inflight_dur=73\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10798,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x200, components 3","md5":"4f0545144d5e5d368081e9bdf78d4cc9","sha1":"fd7f6b46de0295c4efb44733f5c0a90ed9e2e896","sha256":"5089e46b633f3571a3719ab62cd98dfe506838175f18eb58e049a02c491e21e4","sha512":"87c33cab23bf33633bdc830667f35e878bc25ea038aece511525046f2e2f1fee700d6920df8282efd8a01e9ab1e41456333294cd1cc4fb30bd3ca57b934167c8","ssdeep":"192:Blx1VFKu7umexSbUU5embMEDfTihqI1/yBw1YW5ZjI6J/GfTxHof25I/Z:BNVEu7umESrvihv1KBTW5ZU6JufTxAfZ","tlshash":"4122b04c1a86f0d1f15d637ca5e90b1526a9f44264ce8f340993fe7717fc193a6c9271","first_seen":"2025-08-02T21:12:37.50899Z","last_seen":"2025-08-02T21:12:37.50899Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.pornheed.com/33/3330112.jpg","fqdn":"t.pornheed.com","domain":"pornheed.com","tld":"com"},"ip":{"addr":"104.26.14.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pornheed.com/","date":"2025-08-02T21:12:10.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornheed.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Jun 2025 08:21:50 GMT","end":"Sun, 07 Sep 2025 09:21:27 GMT"},"fingerprint":{"sha1":"32:27:F4:DE:1E:A6:59:E9:B1:93:3F:62:B6:AA:28:25:00:E9:E0:DD","sha256":"C4:93:14:EB:9C:32:3B:86:8C:02:4A:1A:8B:F0:75:5A:54:F8:0E:1A:D2:97:F0:F0:ED:0E:B1:8C:B8:C6:EE:27"}}},"request":{"raw":"GET /33/3330112.jpg HTTP/1.1\r\nHost: t.pornheed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pornheed.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 02 Aug 2025 21:12:10 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Yzg1Rx%2BuXc1vUAP%2Bni6qBJ%2BUD1UYu3%2Bzr%2F2ZyhdOssuFE8leESpPYWYTR48dTtHp95%2BubojShcuEvAqYeAX698fZspTrB4LNNzJRbulwoWROjsB2rdgexxdUmwssdybn\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: degrade=85, origSize=34286\r\ncf-ray: 9690926aff2e0b49-OSL\r\nserver: cloudflare\r\netag: W/\"5e2836c6-85ee\"\r\nexpires: Fri, 31 Jul 2026 07:06:12 GMT\r\nlast-modified: Wed, 22 Jan 2020 11:49:26 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 223557\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2938\u0026min_rtt=814\u0026rtt_var=1117\u0026sent=178\u0026recv=111\u0026lost=0\u0026retrans=0\u0026sent_bytes=134919\u0026recv_bytes=16107\u0026delivery_rate=2247537\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=36142\u0026unsent_bytes=0\u0026cid=d25fa5a15979d12a\u0026ts=1270\u0026inflight_dur=75\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7411,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x225, components 3","md5":"a00cfcba43b810b1d62233f4676a13eb","sha1":"fe17e220eb05b59363b789cf448e5fd8e6deb03b","sha256":"c7800d37486caf5e03e401bc5f4a34bce4e9c3b4158c7f7cb95fb4be2a8a1de3","sha512":"97c3730439b94debe895d3258cb6ef608892c16bbe5a7af2f6b966c54a0d3828b26655b38470da71f4e35152221a75f7c901a646e8c9e1047cd8a05617ea5588","ssdeep":"192:Ph7gZg98w6KsJL+qSyhArsgqaHAOF/UcFti:PmZg9P6+qScAQ6FzFU","tlshash":"ede18dfebfd99643f2ce5d7692f8df1e194be5d7800656a88b990c1d3a990c00a412d8","first_seen":"2025-08-02T21:12:37.510956Z","last_seen":"2025-08-02T21:12:37.510956Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"abackdamstubborn.com/60/6c/6c/606c6cb8de12eb3012209372e69d55ba.js","fqdn":"abackdamstubborn.com","domain":"abackdamstubborn.com","tld":"com"},"ip":{"addr":"192.243.59.20","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pornheed.com/","date":"2025-08-02T21:12:11.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"abackdamstubborn.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Jun 2025 20:32:12 GMT","end":"Wed, 03 Sep 2025 20:32:11 GMT"},"fingerprint":{"sha1":"F0:6C:95:73:61:2D:43:8F:85:D5:1B:57:27:DE:DF:F5:AD:39:8C:A1","sha256":"EA:BC:2C:AC:D4:20:BB:55:7D:2A:99:83:24:48:F8:38:5B:2C:CB:6B:FC:71:A3:B8:DF:AB:EA:D4:66:38:82:5B"}}},"request":{"raw":"GET /60/6c/6c/606c6cb8de12eb3012209372e69d55ba.js HTTP/1.1\r\nHost: abackdamstubborn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pornheed.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Sat, 02 Aug 2025 21:12:11 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 32683\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nHost: abackdamstubborn.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 2ec9a9789833c01e55f7f3682ff3abb8\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":106045,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"54dc440672b8719ace84d2881df5149d","sha1":"7a59cfacb0ee3d7e05df5611057ed3d021a3bf68","sha256":"e9247ecccdf8be6fff1654a08c2d5b12e16d46063c0d062d7d6517339affd4aa","sha512":"7cb3bb54e01836b358efa80dc0fca342c6e8e9493217c58c02ee003c803c45ecb34046960da346eee2b53b75a5b847f0bc645794ae9b260504ca0376db5a24f0","ssdeep":"1536:oeLCZFtd8r9m3Zh324NmUBKLR4PscDsTd+GN8tE9vSgzzsJsBp3iK+8ZkL:NLOdKgBKF40cDy8tMSghpSV","tlshash":"04a3d9c47b71f49d42d770bb233f691bf4ea8e12048ce95ce102fea82e6530aa57d954","first_seen":"2025-08-02T21:12:37.512761Z","last_seen":"2025-08-02T21:12:37.512761Z","times_seen":1,"resource_available":true,"data":null}},"time_used":825,"timings":{"blocked":309,"dns":27,"connect":92,"send":0,"wait":108,"receive":94,"ssl":193},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-02","alert":"Sinkholed","trigger":"abackdamstubborn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-PX2PGH99PP","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pornheed.com/","date":"2025-08-02T21:12:11.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"A2:8A:24:AD:51:7D:A4:62:BB:34:6F:C9:21:A1:B9:E1:2D:A6:0E:C1","sha256":"9F:B9:94:8F:84:D3:44:71:A7:81:72:C8:80:4D:14:02:E3:E0:30:0C:F1:17:27:83:00:82:D9:C3:68:D3:B3:AF"}}},"request":{"raw":"GET /gtag/js?id=G-PX2PGH99PP HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pornheed.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 02 Aug 2025 21:12:11 GMT\r\nexpires: Sat, 02 Aug 2025 21:12:11 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1099:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1099:0\r\nreport-to: {\"group\":\"ascgcycc:1099:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1099:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 131268\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":385337,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"3eb49126077013b783ef4a286d846ccc","sha1":"be84d570eefbf4d6d446349db969a472debcc70c","sha256":"f1295c8e8dab7d72d227f42b254e4062978ce08d7952801e9332e9cfaacfd8bb","sha512":"da0b7d03ede99457434e57e4a8c8b279eab91451ac1a9e47d6a26c56bc631cd15b0e11272847cc768602355c9a68ce33159d8f7887d963b251cb04446b76fb9e","ssdeep":"3072:MnKjmeWKA8xwym0Ro1Vlffz0le38JGXbrunAIH1EMHsNKlKZtcRWaWU5Fjt2Ywr0:Igvm0y4HnCKlo9aWU5Fh2nrxw24D","tlshash":"5f8419cd73c6746693a2b478503f018ba57b29a2f44cc899f189cce42e74a9a4177f7c","first_seen":"2025-08-02T21:12:37.51475Z","last_seen":"2025-08-02T21:12:37.51475Z","times_seen":1,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":92,"dns":1,"connect":21,"send":0,"wait":42,"receive":60,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.pornheed.com/pornheed_sprite_v4.svg","fqdn":"i.pornheed.com","domain":"pornheed.com","tld":"com"},"ip":{"addr":"104.26.14.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pornheed.com/","date":"2025-08-02T21:12:10.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornheed.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Jun 2025 08:21:50 GMT","end":"Sun, 07 Sep 2025 09:21:27 GMT"},"fingerprint":{"sha1":"32:27:F4:DE:1E:A6:59:E9:B1:93:3F:62:B6:AA:28:25:00:E9:E0:DD","sha256":"C4:93:14:EB:9C:32:3B:86:8C:02:4A:1A:8B:F0:75:5A:54:F8:0E:1A:D2:97:F0:F0:ED:0E:B1:8C:B8:C6:EE:27"}}},"request":{"raw":"GET /pornheed_sprite_v4.svg HTTP/1.1\r\nHost: i.pornheed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pornheed.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 02 Aug 2025 21:12:10 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=cX6mThHNrB6M2QqOA371gdKTNuVpa%2F7%2BDbKvJ7hvEjxf%2Beyt2HEKExQlqtOnNKyJeuxwklIJCrS9nfp7UzF6EN0o5CFisVXYZg2ikS1Z0Gejnyz5I7oGqsdg2cPqteYq\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 04 Oct 2023 13:03:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"651d62b2-6d5d\"\r\nexpires: Fri, 31 Jul 2026 06:25:18 GMT\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 226012\r\ncf-ray: 9690926a7f050b49-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2739\u0026min_rtt=814\u0026rtt_var=1262\u0026sent=71\u0026recv=97\u0026lost=0\u0026retrans=0\u0026sent_bytes=8240\u0026recv_bytes=6497\u0026delivery_rate=643469\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=18071\u0026unsent_bytes=0\u0026cid=d25fa5a15979d12a\u0026ts=1205\u0026inflight_dur=11\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27997,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d9fa16866e19d528778f83635b3da44e","sha1":"4492c79694dae6d73a3ab1a820b69ce988c125c1","sha256":"38d6403a4a32cca7b8a45ab9969f5b07c9b7fddd46516fbee4fb5faa97905c32","sha512":"33f6eb5cd6bc3d196b7e93d37c7bc86864aedd70231f445ae3d8364bbea56a171360d2ea2b9fda3cfe4d2dc166072621e52ac66b4550968d61eb2bf10dd681ff","ssdeep":"768:OIqMpMU9W4CF21SzvxchnXJQTizUYOeLiT:OZ28zxuzVOee","tlshash":"99c27b2997f444b0919e72bc6cf20c87251114e75741bcc4b9aeb804eb36fe937b8ac9","first_seen":"2024-11-11T14:26:25.422808Z","last_seen":"2026-03-22T11:20:39.126322Z","times_seen":5,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pornheed.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"www.pornheed.com","domain":"pornheed.com","tld":"com"},"ip":{"addr":"104.26.14.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pornheed.com/","date":"2025-08-02T21:12:10.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornheed.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Jun 2025 08:21:50 GMT","end":"Sun, 07 Sep 2025 09:21:27 GMT"},"fingerprint":{"sha1":"32:27:F4:DE:1E:A6:59:E9:B1:93:3F:62:B6:AA:28:25:00:E9:E0:DD","sha256":"C4:93:14:EB:9C:32:3B:86:8C:02:4A:1A:8B:F0:75:5A:54:F8:0E:1A:D2:97:F0:F0:ED:0E:B1:8C:B8:C6:EE:27"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: www.pornheed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pornheed.com/\r\nCookie: PHPSESSID=vhdk2g8l9o70lph59u9blfvj72; show_popunder=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 02 Aug 2025 21:12:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 31 Jul 2025 17:06:34 GMT\r\ncache-control: max-age=172800, public\r\ncontent-encoding: gzip\r\netag: W/\"688ba29a-302c\"\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=QxSnA4sdMD2ptGDd9oMtInguniT9%2BTO31vSkcbWm%2FlK9HXOkWny5pH%2Bt%2FqjKppoA2cK%2FUCOuJ4rY9aSV%2BvErtU8VTD5ClI7KFmOfeerylSuDFOREiDCypltIOdOs%2F%2Ft1c3Q%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9690926aff2d0b49-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nexpires: Mon, 04 Aug 2025 21:12:10 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-07T16:54:57.887644Z","times_seen":104000,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.pornheed.com/33/1962298.jpg","fqdn":"t.pornheed.com","domain":"pornheed.com","tld":"com"},"ip":{"addr":"104.26.14.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pornheed.com/","date":"2025-08-02T21:12:10.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornheed.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Jun 2025 08:21:50 GMT","end":"Sun, 07 Sep 2025 09:21:27 GMT"},"fingerprint":{"sha1":"32:27:F4:DE:1E:A6:59:E9:B1:93:3F:62:B6:AA:28:25:00:E9:E0:DD","sha256":"C4:93:14:EB:9C:32:3B:86:8C:02:4A:1A:8B:F0:75:5A:54:F8:0E:1A:D2:97:F0:F0:ED:0E:B1:8C:B8:C6:EE:27"}}},"request":{"raw":"GET /33/1962298.jpg HTTP/1.1\r\nHost: t.pornheed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pornheed.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 02 Aug 2025 21:12:10 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=BN0gZZkL01ehYJuCOHyX%2BD3x6HyW7v7jf49iOUbUNV0DdWj%2FwZLkJMSwA%2F2SvG9esWfVosDrPNOxUdjci2sEBrD2OxelWre5kPW%2BQC1%2F8ipwCNPeyZeNjmEYw%2FFLNyUR\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origSize=6343\r\ncf-ray: 9690926abf1b0b49-OSL\r\nserver: cloudflare\r\netag: W/\"5e283757-18c7\"\r\nexpires: Sat, 01 Aug 2026 20:42:03 GMT\r\nlast-modified: Wed, 22 Jan 2020 11:51:51 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 88207\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2905\u0026min_rtt=814\u0026rtt_var=1279\u0026sent=111\u0026recv=104\u0026lost=0\u0026retrans=0\u0026sent_bytes=56339\u0026recv_bytes=12362\u0026delivery_rate=865743\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=36142\u0026unsent_bytes=0\u0026cid=d25fa5a15979d12a\u0026ts=1236\u0026inflight_dur=41\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5954,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 526x591, segment length 16, progressive, precision 8, 300x200, components 3","md5":"7db07dca282c7ed95d36a5e6a3f25ee4","sha1":"8f0fcc0636fe011e364343128cb241d47aebc060","sha256":"cabe910f51ad47e9bb8d2decfe2454bf2afd1761659ab3cb6fd41c2aed2fc159","sha512":"c2d30318c576d1449aca8d2e4db8cad0ef15853dfc2b45a7c9b112081be8e3144d09263db6878fbda35c8e52cae6cb1dbb117a163e81d30c58fffbd439fc5513","ssdeep":"96:0mkou8eTuTg21OW0anv6LMfG7YAI8zDG0xkwPcgt2A8xuo8g+l26H:01b8ekgLnm7GNDzxk8fJCKd26H","tlshash":"dec19e748281cc73e54e93b21ea45d0e8b3bbd155308ad615008a43ad66873b7d3b721","first_seen":"2025-08-02T21:12:37.519542Z","last_seen":"2025-08-02T21:12:37.519542Z","times_seen":1,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.pornheed.com/33/3224906.jpg","fqdn":"t.pornheed.com","domain":"pornheed.com","tld":"com"},"ip":{"addr":"104.26.14.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pornheed.com/","date":"2025-08-02T21:12:10.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornheed.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Jun 2025 08:21:50 GMT","end":"Sun, 07 Sep 2025 09:21:27 GMT"},"fingerprint":{"sha1":"32:27:F4:DE:1E:A6:59:E9:B1:93:3F:62:B6:AA:28:25:00:E9:E0:DD","sha256":"C4:93:14:EB:9C:32:3B:86:8C:02:4A:1A:8B:F0:75:5A:54:F8:0E:1A:D2:97:F0:F0:ED:0E:B1:8C:B8:C6:EE:27"}}},"request":{"raw":"GET /33/3224906.jpg HTTP/1.1\r\nHost: t.pornheed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pornheed.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 02 Aug 2025 21:12:10 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=nORnomRQ0y04oogBAlYTRDuUkSKP7scBlyOGFxd5ZAbSphIuxzCpGwrBAvcGgjIvVCeYWRZ0YSkcIqRmof6e%2FkYrjHKLNqUJThN5pXJrWtLiV55mNfoiOEWloWvgzNEA\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origSize=8276\r\ncf-ray: 9690926aff2b0b49-OSL\r\nserver: cloudflare\r\netag: W/\"5e2836f7-2054\"\r\nexpires: Fri, 31 Jul 2026 07:06:12 GMT\r\nlast-modified: Wed, 22 Jan 2020 11:50:15 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 223558\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2938\u0026min_rtt=814\u0026rtt_var=1117\u0026sent=173\u0026recv=111\u0026lost=0\u0026retrans=0\u0026sent_bytes=129170\u0026recv_bytes=16107\u0026delivery_rate=2247537\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=36142\u0026unsent_bytes=0\u0026cid=d25fa5a15979d12a\u0026ts=1269\u0026inflight_dur=74\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7840,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 32x27, segment length 16, progressive, precision 8, 300x200, components 3","md5":"43bffc3b577b4e66917679b51ca02c3b","sha1":"35f17940b0ce8a9dca605b4567c8799a87b0933f","sha256":"408197c9538f2b0cca27ba68069ad5559185afadac17620a60a3cfdf2f9b9795","sha512":"602056df529b491a70b50fc366ce680a068f0bfa327f073a0086f0598bf862c0ce1274b145ef5b542d9b773f17daf9b77a016e13c24c681da9cf64ce513bcd7e","ssdeep":"192:OrB+JssK8Hk/TAG6LGWgI5B/AmrWrEIQG+JmZr4Q/v8:hJssLHSTG7gI5+mr/JG+Jml/0","tlshash":"50f1ae903ec3f987abccd476c3961161a1a7aa579f72173001d57b281d632411a57b3c","first_seen":"2025-08-02T21:12:37.521382Z","last_seen":"2025-08-02T21:12:37.521382Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.pornheed.com/logo_i.png","fqdn":"i.pornheed.com","domain":"pornheed.com","tld":"com"},"ip":{"addr":"104.26.14.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pornheed.com/","date":"2025-08-02T21:12:11.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornheed.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Jun 2025 08:21:50 GMT","end":"Sun, 07 Sep 2025 09:21:27 GMT"},"fingerprint":{"sha1":"32:27:F4:DE:1E:A6:59:E9:B1:93:3F:62:B6:AA:28:25:00:E9:E0:DD","sha256":"C4:93:14:EB:9C:32:3B:86:8C:02:4A:1A:8B:F0:75:5A:54:F8:0E:1A:D2:97:F0:F0:ED:0E:B1:8C:B8:C6:EE:27"}}},"request":{"raw":"GET /logo_i.png HTTP/1.1\r\nHost: i.pornheed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pornheed.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 02 Aug 2025 21:12:11 GMT\r\ncontent-type: image/png\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=5V7DQxUxGXFVcz6DMc9K1Kjigj5QYrNhaCq3b4c4fWGklmeHm0qhcpVW0FyznqsnHi9tDqL1AmBp7lX5PnKHuZ2wvC7JgOX4iug8%2BVMEEHwqQkCEMpJwmAitOF%2Fb0hUa\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origSize=2262\r\netag: W/\"5e6be5c0-8d6\"\r\nexpires: Sun, 02 Aug 2026 13:45:16 GMT\r\nlast-modified: Fri, 13 Mar 2020 19:57:52 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 26815\r\ncf-ray: 9690926faf5e0b49-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=888\u0026min_rtt=440\u0026rtt_var=404\u0026sent=494\u0026recv=171\u0026lost=0\u0026retrans=0\u0026sent_bytes=533056\u0026recv_bytes=19397\u0026delivery_rate=14829906\u0026ss_exit_cwnd=36142\u0026ss_exit_reason=2\u0026cwnd=29695\u0026unsent_bytes=0\u0026cid=d25fa5a15979d12a\u0026ts=2016\u0026inflight_dur=209\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1838,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit colormap, non-interlaced","md5":"8b8b8c78f78153e981c173100ce1415d","sha1":"031da95b8a803e69b7d0c5fa54c68a3751b8b19a","sha256":"1c2f7c3401c53e6023d6282a0f65062a3a472e1982b7e1a38681006572b3357b","sha512":"aad36612eebf7bf2753f39e7b54a5db690d8bc276041ff1aa0b7d05656e16b5d40a5bd41c7b1d47c23743ae0e985a584065e40d3e542c5fc347297391c5bb5af","ssdeep":"","tlshash":"eb31f9ca5c43dca479c97434b1574d10d82c1e6409abb77e471187250d7d3ae219bacd","first_seen":"2025-08-02T21:12:37.523181Z","last_seen":"2025-10-29T18:18:56.654157Z","times_seen":3,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"professionaltrafficmonitor.com/stats","fqdn":"professionaltrafficmonitor.com","domain":"professionaltrafficmonitor.com","tld":"com"},"ip":{"addr":"18.194.162.133","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.pornheed.com/","date":"2025-08-02T21:12:11.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Thu, 30 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6","sha256":"49:03:4C:2C:1B:23:D8:D6:CB:AE:F0:54:61:99:C2:20:F4:FF:87:5E:0B:72:B1:6B:D8:AB:21:49:2D:F2:EC:4A"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: professionaltrafficmonitor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.pornheed.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pornheed.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 Aug 2025 21:12:11 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://www.pornheed.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=e0b75d42-ae50-469f-866d-d3779d87e9b3:2:1; expires=Tue, 31 Jul 2035 21:12:11 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"c6d07f587625dcd4c3aabdcd8221cf08","sha1":"71391cf320e23c2a3fc4785b6715c2805e34f324","sha256":"56754f49357458c7e5ec838d29f0e5963816a81879ca84bd6bf1c6b1734da7de","sha512":"2d05083344cf363988310127d56306492e8145116512b9022e211a4b235222865981defe93a985ba112be34a417fafa76edaea0e925e3f62f23478139f45d7f3","ssdeep":"","tlshash":"289004f71570c14401504575410473545040f734cfc401055555f3314501d701d50143","first_seen":"2025-08-02T21:12:37.524663Z","last_seen":"2025-08-02T21:12:37.524663Z","times_seen":1,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":96,"dns":16,"connect":23,"send":0,"wait":21,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.pornheed.com/33/219420.jpg","fqdn":"t.pornheed.com","domain":"pornheed.com","tld":"com"},"ip":{"addr":"104.26.14.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pornheed.com/","date":"2025-08-02T21:12:10.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornheed.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Jun 2025 08:21:50 GMT","end":"Sun, 07 Sep 2025 09:21:27 GMT"},"fingerprint":{"sha1":"32:27:F4:DE:1E:A6:59:E9:B1:93:3F:62:B6:AA:28:25:00:E9:E0:DD","sha256":"C4:93:14:EB:9C:32:3B:86:8C:02:4A:1A:8B:F0:75:5A:54:F8:0E:1A:D2:97:F0:F0:ED:0E:B1:8C:B8:C6:EE:27"}}},"request":{"raw":"GET /33/219420.jpg HTTP/1.1\r\nHost: t.pornheed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pornheed.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 02 Aug 2025 21:12:10 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Xa1SjT%2B95oe%2FjPTSdJwuzld7fyQaXTeHY6eAk5hEAJC4SZ02vKcnbkVcRhXfryPMnNuqJdlOrS%2FqBmCy%2F1bjMCINkewxVzUlCCPS2GtnGrMfduVB3ARZC8x45ndsFnMP\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: degrade=85, origSize=8510\r\ncf-ray: 9690926abf130b49-OSL\r\nserver: cloudflare\r\netag: W/\"5e28377f-213e\"\r\nexpires: Fri, 31 Jul 2026 07:06:13 GMT\r\nlast-modified: Wed, 22 Jan 2020 11:52:31 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 223557\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2905\u0026min_rtt=814\u0026rtt_var=1279\u0026sent=109\u0026recv=104\u0026lost=0\u0026retrans=0\u0026sent_bytes=53539\u0026recv_bytes=12362\u0026delivery_rate=865743\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=36142\u0026unsent_bytes=0\u0026cid=d25fa5a15979d12a\u0026ts=1235\u0026inflight_dur=40\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6891,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x200, components 3","md5":"30d1a9f0d665db6f113f773a2e46c0fc","sha1":"25a3186062760f27368ba48b7a5bccb6ba320f9e","sha256":"93cbd58702c41c5e0323c63cbaa57b52b01e4a370a1ff80e67a2e91d600cb716","sha512":"43a0e4022a2b514cbc147dc0713843f85a04a3921fe88fc5c5b57fa689d887875561a8d1706de7990e83d39f695061199adf1fdd43fa70954fdb79e4bc0d304d","ssdeep":"192:QaihZBIjdUk0fIj5JDraOS9Tn9O0ilX1D:UpIjamDrCTn9piZ1D","tlshash":"cbe190aa5b451c3fd108c03551d93f70266bfe64607d9c2520094e118677dcbd9d2359","first_seen":"2025-08-02T21:12:37.526199Z","last_seen":"2025-08-02T21:12:37.526199Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.pornheed.com/33/3325506.jpg","fqdn":"t.pornheed.com","domain":"pornheed.com","tld":"com"},"ip":{"addr":"104.26.14.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pornheed.com/","date":"2025-08-02T21:12:10.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornheed.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Jun 2025 08:21:50 GMT","end":"Sun, 07 Sep 2025 09:21:27 GMT"},"fingerprint":{"sha1":"32:27:F4:DE:1E:A6:59:E9:B1:93:3F:62:B6:AA:28:25:00:E9:E0:DD","sha256":"C4:93:14:EB:9C:32:3B:86:8C:02:4A:1A:8B:F0:75:5A:54:F8:0E:1A:D2:97:F0:F0:ED:0E:B1:8C:B8:C6:EE:27"}}},"request":{"raw":"GET /33/3325506.jpg HTTP/1.1\r\nHost: t.pornheed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pornheed.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 02 Aug 2025 21:12:10 GMT\r\ncontent-type: image/webp\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=H7ohzytYKs2iOy1ZLzzA0MF%2BZBD6x7rdK%2BI1ZXHffbHHyDwLYWFlAY4z65ff6YjhfKwJe5WxQ7kNXSCJkQ37s3YRtk4UTOOzsLDzsPrV7oZ83kGt%2BjA830pWxIN5leqY\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: qual=85, origFmt=jpeg, origSize=17287\r\ncontent-disposition: inline; filename=\"3325506.webp\"\r\netag: W/\"5e2836c9-4387\"\r\nexpires: Sun, 02 Aug 2026 09:19:27 GMT\r\nlast-modified: Wed, 22 Jan 2020 11:49:29 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 42763\r\ncf-ray: 9690926abf180b49-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2810\u0026min_rtt=814\u0026rtt_var=1149\u0026sent=142\u0026recv=107\u0026lost=0\u0026retrans=0\u0026sent_bytes=91029\u0026recv_bytes=13947\u0026delivery_rate=1671504\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=36142\u0026unsent_bytes=0\u0026cid=d25fa5a15979d12a\u0026ts=1255\u0026inflight_dur=60\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5922,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 178x134, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a4dcd888ecb7557d155812f5029979fb","sha1":"5dcaebf2b9ad49d3c57a87d179c3450a295aaa8c","sha256":"21f11b7a74de3cbc822f039e4321fb217f0d0a00b8e366e743d32e06d8452e53","sha512":"6368c3972c465197e180b310a8f0b5d91b87645850d262868102867d05603ee98fda61dd2eadd5fddf840f994f55aaf99654844abc57be530cfa71a80c20b86a","ssdeep":"96:81B835hjiKjZLObEgh3x7BCyhku5WKqKbXP1wrOKTcspuRUOgGemX8Zp7fl/pyAv:8b8zjZLOPx8yCu5zFwdcsNOgtmM/7flb","tlshash":"f4c1bef637ba20e7eac14ad8e3d70627760303f8244800ec60ad5cd1aff0de28811e09","first_seen":"2025-08-02T21:12:37.527529Z","last_seen":"2025-08-02T21:12:37.527529Z","times_seen":1,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.pornheed.com/image/224.jpg","fqdn":"i.pornheed.com","domain":"pornheed.com","tld":"com"},"ip":{"addr":"104.26.14.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pornheed.com/","date":"2025-08-02T21:12:10.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornheed.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Jun 2025 08:21:50 GMT","end":"Sun, 07 Sep 2025 09:21:27 GMT"},"fingerprint":{"sha1":"32:27:F4:DE:1E:A6:59:E9:B1:93:3F:62:B6:AA:28:25:00:E9:E0:DD","sha256":"C4:93:14:EB:9C:32:3B:86:8C:02:4A:1A:8B:F0:75:5A:54:F8:0E:1A:D2:97:F0:F0:ED:0E:B1:8C:B8:C6:EE:27"}}},"request":{"raw":"GET /image/224.jpg HTTP/1.1\r\nHost: i.pornheed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pornheed.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 02 Aug 2025 21:12:10 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=sSpWDxviHbClrhIT0Muf3tUNsoL5b7eOQ6CLS5EO7VykXU%2F7oSwpG14vbUK4%2F1LttkfeYM9i0vDrSsbHK5YURb1deGFpFDU2YiBWMggvcKkGzp3U0YEDBNkCH70ws3Qy\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origSize=15022\r\ncf-ray: 9690926abf1e0b49-OSL\r\nserver: cloudflare\r\netag: W/\"500fe001-3aae\"\r\nexpires: Fri, 31 Jul 2026 07:06:12 GMT\r\nlast-modified: Wed, 25 Jul 2012 12:01:05 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 223558\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2905\u0026min_rtt=814\u0026rtt_var=1279\u0026sent=105\u0026recv=104\u0026lost=0\u0026retrans=0\u0026sent_bytes=47939\u0026recv_bytes=12362\u0026delivery_rate=865743\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=36142\u0026unsent_bytes=0\u0026cid=d25fa5a15979d12a\u0026ts=1234\u0026inflight_dur=38\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14752,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 300x268, components 3","md5":"f770bed423b0c67a4179751a2486d8ed","sha1":"02b0ef6e48c7d8ffd7cdacbffd414ad7671930b1","sha256":"e8086b983fd0f6c799cf278587486a45a4f5c2893bd2fa61515d041092f42b3c","sha512":"62d83b8015a9039599520560c87ce9a7481f2ae63683beef4183b3ca6740eb7e8eb0d89cdbc44d141ca9498ca56d5c014a52bbe4b59d80d8691fe2e315f9880a","ssdeep":"384:RD8Y3HfbUYh60IxcEsH/YBQQfQsus7fxo5Ncu8I:tvTUY1I0Aa/srxqH","tlshash":"f462d0ee0b44ca29f058ce6694ea01015e784fc14a767b54b695c098cfbdb81cdece6e","first_seen":"2025-08-02T21:12:37.52878Z","last_seen":"2025-08-02T21:12:37.52878Z","times_seen":1,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pornheed.com/","date":"2025-08-02T21:12:11.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Jul 2025 15:11:38 GMT","end":"Mon, 29 Sep 2025 15:11:37 GMT"},"fingerprint":{"sha1":"F9:52:70:4B:81:A8:F8:39:E6:E7:96:8F:EA:FE:17:FD:96:C5:32:E3","sha256":"D8:C9:87:B5:89:5E:D4:F4:8D:FD:98:3C:31:39:42:67:D3:20:27:14:A9:AD:F2:AB:97:A4:48:0F:94:F0:FF:A2"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pornheed.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 02 Aug 2025 21:12:11 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 28254\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 42f27e11685ad7ebc8a48d5411a65574\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85386,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":80,"dns":2,"connect":35,"send":0,"wait":52,"receive":18,"ssl":42},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-02","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.pornheed.com/image/152.jpg","fqdn":"i.pornheed.com","domain":"pornheed.com","tld":"com"},"ip":{"addr":"104.26.14.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pornheed.com/","date":"2025-08-02T21:12:10.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornheed.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Jun 2025 08:21:50 GMT","end":"Sun, 07 Sep 2025 09:21:27 GMT"},"fingerprint":{"sha1":"32:27:F4:DE:1E:A6:59:E9:B1:93:3F:62:B6:AA:28:25:00:E9:E0:DD","sha256":"C4:93:14:EB:9C:32:3B:86:8C:02:4A:1A:8B:F0:75:5A:54:F8:0E:1A:D2:97:F0:F0:ED:0E:B1:8C:B8:C6:EE:27"}}},"request":{"raw":"GET /image/152.jpg HTTP/1.1\r\nHost: i.pornheed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pornheed.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 02 Aug 2025 21:12:10 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=yrecJVV3nLMoB1obWtn8WGzcOpiz2mCkbp8rJNwC94R7gB7auyKBcuo1nLw4rAmf6tVKxQLq2DCpWGUJOx3oUlQP4P6tfEP7gYAR7fgM13ATrNJ5sLaVg60cvBS11A6K\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: degrade=85, origSize=34219\r\ncf-ray: 9690926abf1d0b49-OSL\r\nserver: cloudflare\r\netag: W/\"500fe000-85ab\"\r\nexpires: Fri, 31 Jul 2026 07:06:12 GMT\r\nlast-modified: Wed, 25 Jul 2012 12:01:04 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 223558\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2905\u0026min_rtt=814\u0026rtt_var=1279\u0026sent=101\u0026recv=104\u0026lost=0\u0026retrans=0\u0026sent_bytes=42339\u0026recv_bytes=12362\u0026delivery_rate=865743\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=36142\u0026unsent_bytes=0\u0026cid=d25fa5a15979d12a\u0026ts=1230\u0026inflight_dur=36\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8496,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 159x234, components 3","md5":"546b0e11cee2711ac1b905bda93222a4","sha1":"1bf5ab62012d0c709379871cbde0a7c2635400ac","sha256":"b1880808d0309963dae4eb13d03afe03049b026f362239e30f45d53855cae41a","sha512":"6d93713736d3be49093bcc08214a72401aefbfd93fad1829eedf78c5a9641e1c2d29f982756fa59d49ed6ab56a715e6440ab1fa4d6afc95b21d608f22d89ae08","ssdeep":"192:+jxR36eV4ezkCUOLXbfgT/pcOwvt1jdL0vQBz5bA:axgq4ZsLXbfgPwvt1Np2","tlshash":"fb02af08636ac9338896623174780e88fa05dfca25d5d8f31ae42e12deb6453777516c","first_seen":"2025-08-02T21:12:37.531347Z","last_seen":"2025-08-02T21:12:37.531347Z","times_seen":1,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornheed.com/","fqdn":"pornheed.com","domain":"pornheed.com","tld":"com"},"ip":{"addr":"104.26.14.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-02T21:12:09.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornheed.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Jun 2025 08:21:50 GMT","end":"Sun, 07 Sep 2025 09:21:27 GMT"},"fingerprint":{"sha1":"32:27:F4:DE:1E:A6:59:E9:B1:93:3F:62:B6:AA:28:25:00:E9:E0:DD","sha256":"C4:93:14:EB:9C:32:3B:86:8C:02:4A:1A:8B:F0:75:5A:54:F8:0E:1A:D2:97:F0:F0:ED:0E:B1:8C:B8:C6:EE:27"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: pornheed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 02 Aug 2025 21:12:09 GMT\r\ncontent-type: text/html\r\nlocation: https://www.pornheed.com/\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NSl%2BJCuPbr84FrzJ67mdH%2FOlfA9VTNDROkn7vnEDcni%2B7paEnCX%2Fla0OIXI4pbLN%2BED7LEQZZ0rft5BrhBAx3z6xkG978UWguw%3D%3D\"}]}\r\ncf-ray: 969092622ca356bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26575,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-07T16:57:31.852553Z","times_seen":14796918,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":38,"dns":2,"connect":2,"send":0,"wait":148,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pornheed.com/","fqdn":"www.pornheed.com","domain":"pornheed.com","tld":"com"},"ip":{"addr":"104.26.14.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-02T21:12:09.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornheed.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Jun 2025 08:21:50 GMT","end":"Sun, 07 Sep 2025 09:21:27 GMT"},"fingerprint":{"sha1":"32:27:F4:DE:1E:A6:59:E9:B1:93:3F:62:B6:AA:28:25:00:E9:E0:DD","sha256":"C4:93:14:EB:9C:32:3B:86:8C:02:4A:1A:8B:F0:75:5A:54:F8:0E:1A:D2:97:F0:F0:ED:0E:B1:8C:B8:C6:EE:27"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.pornheed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 Aug 2025 21:12:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xiozACI50aAtJJ0KLxiN47ey3BS85m7Fj6XakS3xvC%2F0yyRNZ%2BCMMxF9zieQ3VRkbdRs8etHKGBu6FMuNjqkQhapfxWHnGsOUO6IPhE%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: PHPSESSID=vhdk2g8l9o70lph59u9blfvj72; Path=/\nshow_popunder=1; Max-Age=5; Expires=Sat, 02 Aug 2025 21:12:14 GMT\r\ncf-ray: 969092632e0656bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":26575,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20922), with CR line terminators","md5":"7ba7474bd8ec998f1345a31408545d64","sha1":"ff3c3acedbc2b7afcc71c5060144966cafa900a8","sha256":"8d0bfe5824b1e45e5ab9c5f2a976ff44d648ffc01e392efe8e8a19185dc576cb","sha512":"87df76014ea2e57d3f2d5c187edeb0280a95457503b0d4d414e05ff99e1f6b32133411d8c2ad4586130d49edeaa6f845b786cbb4d9e5e6f3b3cdddeea4df529a","ssdeep":"768:QoaCE/UY8KpbYdTMI7HDPDIzbQcXXzv4EAlXpIpPasZU1MMGl2FcMteFrHDLurp/:xKa7H0Tdjaym","tlshash":"7bc2b63207891a3fca7e87d93b50335cd563a2aac3724d12ba6c33c64989dd5d82e54b","first_seen":"2025-08-02T21:12:37.532946Z","last_seen":"2025-08-02T21:12:37.532946Z","times_seen":1,"resource_available":false,"data":null}},"time_used":868,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":857,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j.pornheed.com/style_v6.css","fqdn":"j.pornheed.com","domain":"pornheed.com","tld":"com"},"ip":{"addr":"104.26.14.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.pornheed.com/","date":"2025-08-02T21:12:10.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornheed.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Jun 2025 08:21:50 GMT","end":"Sun, 07 Sep 2025 09:21:27 GMT"},"fingerprint":{"sha1":"32:27:F4:DE:1E:A6:59:E9:B1:93:3F:62:B6:AA:28:25:00:E9:E0:DD","sha256":"C4:93:14:EB:9C:32:3B:86:8C:02:4A:1A:8B:F0:75:5A:54:F8:0E:1A:D2:97:F0:F0:ED:0E:B1:8C:B8:C6:EE:27"}}},"request":{"raw":"GET /style_v6.css HTTP/1.1\r\nHost: j.pornheed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pornheed.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 02 Aug 2025 21:12:10 GMT\r\ncontent-type: text/css\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=1HMBUIWSjn%2FFnz3qX%2F%2FaxUVcWhiupZfuzxAOep46eEELqOGah%2BeH5Ror6QCw08R92tONPl34YNOWj3AK0%2FruYbFUu6gNZ4FmzXe5MyBZxmqn7AEzP61wOlOGrpJPR%2BIe\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Thu, 23 Jan 2025 08:27:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6791fd85-23d5\"\r\nexpires: Fri, 31 Jul 2026 06:11:05 GMT\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 226865\r\ncf-ray: 9690926a7f080b49-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2739\u0026min_rtt=814\u0026rtt_var=1262\u0026sent=85\u0026recv=97\u0026lost=0\u0026retrans=0\u0026sent_bytes=26311\u0026recv_bytes=6497\u0026delivery_rate=643469\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=18071\u0026unsent_bytes=0\u0026cid=d25fa5a15979d12a\u0026ts=1213\u0026inflight_dur=16\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9173,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"f5446b6b54c61f78199a11a5917ae7d8","sha1":"d48bcae000adfc777c8216725839db9fc20088a9","sha256":"8724b37db91ac66fc2363101228d926dde9a8990e7bb3a8613d35f927594399e","sha512":"5803fbd87356ef384b1bad6c5bb0dda011c0060f362644702a88a166f13fffacc8f2bf1f8855cc394bfa56e2ed217c3a41783bcdc44389516b4bcfed8b098bda","ssdeep":"192:MTfrDTFJGXDpRMIkS0pbrcMI09ux+LImS9hXVBkIVVKjI5yL8q6cwa3:OFepe6x+LIvHfkIVVKjIOB6cwa3","tlshash":"231223329661202cf53bd6a3fd9367cc7a7dc05bb7130a6ae569b371c0c24a71625bc8","first_seen":"2025-08-02T21:12:37.534209Z","last_seen":"2025-10-29T18:18:56.662574Z","times_seen":3,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.pornheed.com/image/4734.jpg","fqdn":"i.pornheed.com","domain":"pornheed.com","tld":"com"},"ip":{"addr":"104.26.14.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pornheed.com/","date":"2025-08-02T21:12:10.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornheed.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Jun 2025 08:21:50 GMT","end":"Sun, 07 Sep 2025 09:21:27 GMT"},"fingerprint":{"sha1":"32:27:F4:DE:1E:A6:59:E9:B1:93:3F:62:B6:AA:28:25:00:E9:E0:DD","sha256":"C4:93:14:EB:9C:32:3B:86:8C:02:4A:1A:8B:F0:75:5A:54:F8:0E:1A:D2:97:F0:F0:ED:0E:B1:8C:B8:C6:EE:27"}}},"request":{"raw":"GET /image/4734.jpg HTTP/1.1\r\nHost: i.pornheed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pornheed.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 02 Aug 2025 21:12:10 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=uBLRdhYxbB5C7hPTZ5pfqeLJybGev%2FGtOaeT00X2pWsSHUO1I6lwyr5DFgL1riNRxoFvhWWEeopYnm9CfNemZcOYyD0svpTrqeJZVZyiL7zYcpWwRnEtbBG6No6mNVtF\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: degrade=85, origSize=17014, status=webp_bigger\r\ncf-ray: 9690926aef200b49-OSL\r\nserver: cloudflare\r\netag: W/\"5019b477-4276\"\r\nexpires: Sun, 02 Aug 2026 09:19:27 GMT\r\nlast-modified: Wed, 01 Aug 2012 22:57:59 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 42763\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2730\u0026min_rtt=814\u0026rtt_var=1255\u0026sent=190\u0026recv=112\u0026lost=0\u0026retrans=0\u0026sent_bytes=150865\u0026recv_bytes=16154\u0026delivery_rate=3999306\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=36142\u0026unsent_bytes=0\u0026cid=d25fa5a15979d12a\u0026ts=1274\u0026inflight_dur=79\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16439,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 200x317, components 3","md5":"a1c8f64d58bf2572e63ce9922b92c974","sha1":"944779d07d4307245b4d462fd59334fff788d005","sha256":"9cc1b4422fd2b5d5365fa83fce82e2548065d10bdef3d1a69ea8e5528c6d2f70","sha512":"becd5c1c592b3f7a27928077391736b66d754d3a49269ed7778f812207eb9e9f75ff2a9b96710e6edd2adbc1f820958650127e3baa271c1f08073e819edd3979","ssdeep":"384:UMY9nlZDpxDOBrY2+Q0yN7Qk9PbNncuNiXd8AmKWvHIc9tI:cZDpxCBrY5wfPRcuN8msWXI","tlshash":"3772d08bad7ad20e7e4612299ffb1ffc79258cc7a41415e22678b2270edd1e600d2d34","first_seen":"2025-08-02T21:12:37.535233Z","last_seen":"2025-08-02T21:12:37.535233Z","times_seen":1,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}