{"report_id":"65c40e53-c689-451a-b714-a8e27e63f0fd","version":6,"status":"done","tags":[],"date":"2026-03-06T08:11:30Z","url":{"schema":"https","addr":"webcamly.online/?s=g_4570\u0026","fqdn":"webcamly.online","domain":"webcamly.online","tld":"online"},"ip":{"addr":"104.21.94.246","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"amourcandy.com/?a=2124735\u0026cr=64329\u0026lid=41176\u0026mh=QWdVZXNyRW9MSG9XRWdTV1Jsc2dFZ2FNTXlselp5emZNTWJ5ZndhLTM1ODc1\u0026mmid=3979\u0026p=0\u0026rf=uua\u0026rn=zc4ZodKUys4WmdeVEhG\u0026t=Pretty145s-3","fqdn":"amourcandy.com","domain":"amourcandy.com","tld":"com"},"title":"The most popular dating site of this month","dom":{"size":16071,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14780)","md5":"7f575f2d8890cc9217b1e57f30c0720d","sha1":"3c132e6ebc1c3b8c7d1dd38b1505209831c5be04","sha256":"9fc9da9341c7c6fd1479d7711c65191ec89b4772856a0297b2dd30d4a6f4042e","sha512":"29b8c45a00efbea31e36862d7a5bb93e65cd86e8651e8cb7b2a169156e5a37c4e153df990a4c4211dcde98597b6eafb8659756692dd877dd38337cd51dd47da6","ssdeep":"384:YX+U77Ndc8g45XxF517b9D1KcNBJcLcBCkgKCkV1CkmyvvbVO4K:zUU2D1KcjCYgpvqVnK","tlshash":"5372a5327792322f322742d4f1f7d7de2257c005d4970b86766b63aa4bc3956c523ac8","dom_hash":"domhashfe25aa60f0b6dee7c096b862cef5ce94","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"webcamly.online/?s=g_4570\u0026","fqdn":"webcamly.online","domain":"webcamly.online","tld":"online"},"ip":{"addr":"104.21.94.246","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-10T08:11:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"amourcandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"amourcandy.com","ip":{"addr":"172.67.216.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-01","domain_rank":0,"first_seen":"2026-01-18T23:07:08.836788Z","last_seen":"2026-02-22T15:50:39.058986Z","alert_count":9,"request_count":9,"received_data":366582,"sent_data":7398,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-01T22:18:12.522658Z","alert_count":0,"request_count":1,"received_data":2552,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-01T22:15:00.771016Z","alert_count":0,"request_count":1,"received_data":19615,"sent_data":558,"comment":"","tags":null,"fingerprints":null},{"fqdn":"webcamly.online","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-24","domain_rank":0,"first_seen":"2026-03-06T08:11:31.033126Z","last_seen":"2026-03-06T08:11:31.033127Z","alert_count":0,"request_count":1,"received_data":16640,"sent_data":494,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-03-01T22:48:56.265504Z","alert_count":0,"request_count":1,"received_data":87516,"sent_data":451,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"amourcandy.com/p.js?a=2124735\u0026cr=64329\u0026lid=41176\u0026mh=QWdVZXNyRW9MSG9XRWdTV1Jsc2dFZ2FNTXlselp5emZNTWJ5ZndhLTM1ODc1\u0026mmid=3979\u0026p=0\u0026rf=uua\u0026rn=zc4ZodKUys4WmdeVEhG\u0026t=Pretty145s-3","fqdn":"amourcandy.com","domain":"amourcandy.com","tld":"com"},"ip":{"addr":"172.67.216.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b14b15b27f4a3e20e1e2752e0c226d42","sha1":"a4766a5ba464eca19d35f1e09ac29876a83f8cea","sha256":"a3e06fb61fe3f605f6c5901448bc48adb7554a247391fcfa31de68758fe9acfa","sha512":"b012795374eb6eb76dba6119136e2d0e72b32775665a79d33995fd8a2a266bd8b16c9c8cc7ec5acf6f2185211afc538582e882b15451c790fe8ccde7ef88a7d7","ssdeep":"","tlshash":"86e0685e34e0007286b3f5324f2f5910363f114f304a4a463cee12906f6020e97cad84","size":379,"data":"","first_seen":"2026-02-26T21:23:40.601736Z","last_seen":"2026-03-21T15:30:39.315848Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.3.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-04T14:50:17.301576Z","times_seen":118203,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amourcandy.com/?utm_source=J2yUk0VsyPbfE\u0026utm_campaign=Pretty145s-3","fqdn":"amourcandy.com","domain":"amourcandy.com","tld":"com"},"ip":{"addr":"172.67.216.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a55bc61bb8cabacdc353356d20217fb1","sha1":"ecf7f3fc124c625be7890bb4536b6f89d4d76786","sha256":"a4a9b568a83a7f91eeed94a7c6587bb5d3bdf73d515d40c4402460dc046ab7a6","sha512":"1a4a80c29ca2501d6878ba3ab34407d4141b87f2f8eba3714f9331c33632355641a8e65f3c710cd79cb050c27f410acb3274df3a3b52e08da87cf7ed46f4b43f","ssdeep":"","tlshash":"898004d530c350345753135400571dc45434c47014544d44c440d4513c550345115c5c","size":38,"data":"","first_seen":"2023-04-11T21:09:18Z","last_seen":"2026-04-04T12:15:04.026512Z","times_seen":10296,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amourcandy.com/?utm_source=J2yUk0VsyPbfE\u0026utm_campaign=Pretty145s-3","fqdn":"amourcandy.com","domain":"amourcandy.com","tld":"com"},"ip":{"addr":"172.67.216.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d49e0c7a26667be84cf608333e412de","sha1":"2d9910a31f39948ea205f13b0563647d3e823e70","sha256":"8b438e12ef5f08e7623fff550521e505d709cf3357bcf0cc3571f3bfd542dab4","sha512":"0ac006a5f9924279374a99f985a478a438ca0eac90170b4bf3eeba512164d8ffd5f03aa7c10669f633b700cd3fc2cf8c51d6c3cfd3ffb8ff7d2219de6c46826d","ssdeep":"","tlshash":"8411f06c7452b0b428fb31a13a3bda497a332ce1444e1915a44a58ec3e79cadd123f5a","size":1069,"data":"","first_seen":"2024-06-17T16:38:04Z","last_seen":"2026-03-30T05:52:05.204683Z","times_seen":130,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amourcandy.com/?utm_source=J2yUk0VsyPbfE\u0026utm_campaign=Pretty145s-3","fqdn":"amourcandy.com","domain":"amourcandy.com","tld":"com"},"ip":{"addr":"172.67.216.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6c30cd9229cecb0a2491290206a3e325","sha1":"36f924d9dcd86efef162c32e2b5296092222dc6f","sha256":"2d81665476e2d9455479431528b6e0037e4e4315ac992f86876b7a074b1638c2","sha512":"528c4a5fe87598e1fcfba22d248bc8f0dbaf23400084afd1206a0d55c946ba373e4c802f68cafb5805aed3d10f3e4136df96d80da50c891b98f9ddb0d4e04b64","ssdeep":"","tlshash":"c2d02bb6506484b16e0573585c6840b6776c410322875608b9dd3257ab84462c6d9e22","size":250,"data":"","first_seen":"2026-03-06T08:11:35.005614Z","last_seen":"2026-03-06T08:11:35.005614Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"amourcandy.com/lstatic/93cd6ce3d3f3e53fa444a5b3a5ce384d/images/m3.jpg","fqdn":"amourcandy.com","domain":"amourcandy.com","tld":"com"},"ip":{"addr":"172.67.216.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amourcandy.com/?utm_source=J2yUk0VsyPbfE\u0026utm_campaign=Pretty145s-3","date":"2026-03-06T08:11:08.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amourcandy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 12:07:38 GMT","end":"Wed, 27 May 2026 13:06:11 GMT"},"fingerprint":{"sha1":"9F:6B:DC:41:20:C2:9D:BC:9C:CF:09:52:9B:1D:5B:95:3A:79:B6:E5","sha256":"CD:A7:A7:F5:67:BC:51:C4:80:1A:27:46:BE:09:13:F5:DA:E6:73:0B:57:A6:D6:D3:BF:82:D3:91:7E:79:64:78"}}},"request":{"raw":"GET /lstatic/93cd6ce3d3f3e53fa444a5b3a5ce384d/images/m3.jpg HTTP/1.1\r\nHost: amourcandy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amourcandy.com/?utm_source=J2yUk0VsyPbfE\u0026utm_campaign=Pretty145s-3\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: k=SFMyNTY.g3QAAAAHbQAAAARhdW5xdAAAAAFtAAAABTQxNzk4bQAAAApSclhacm1NV3FLbQAAAANoaWRtAAAAJ0FnVWVzckVvTEhvV0VnU1dSbHNnRWdhTU15bHpaeXpmTU1ieWZ3YW0AAAACaGxhAW0AAAAFc3ViXzFkAANuaWxtAAAABXN1Yl8yZAADbmlsbQAAAAd0cmFja2VybQAAAAxQcmV0dHkxNDVzLTNtAAAAA3VucW0AAAAMUFloZGJ2a0RaTHNh.2Tbpj06Nz06PU5BkNbVGM4trL-3PrgSXAI8XPhCohXQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 08:11:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 43555\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 16 Jan 2026 13:27:57 GMT\r\netag: \"696a3cdd-aa23\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\ncache-control: max-age=7200\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FbOksWkDa3w7PFDaS4t8qvGxfpcYa%2FhbPoTMz8tPgM9JMthrJm1dl8AVTTcg1xDFtMrxKkJgTU2GKWNZbbjnIWstAyzrS%2Bm4f6zaZP0L\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7fe3500d24c8c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43555,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=402, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=370], progressive, precision 8, 370x402, components 3","md5":"eac4d43b7755fa8fbe1beac2a644742b","sha1":"c263ece04e5424527ce32043e20004e5edb13dbb","sha256":"f1d49f8f1963de6acc4d2276592b7781a0a3d2ec0b46e63c9556848f03b7d09c","sha512":"97051dcd57c1f68c9ed4642de0f3506f092c1802ed5ff233284dea53b73ab446de54146c376b4e2cb1462eeb61235a7086f20f52c4bb6740bc3a30ce59c3c910","ssdeep":"768:jzL5R+fHgwv7+zL5R+fHgwYzlHf8ApkWEvcDReO3XKHYhwfiKomYob+5Hb9DXAbl:TqPrgqPrGlHL+WEvcNeO3/wf3olArpj","tlshash":"7413df277fa1fe74f6903735c4d9eb9763212d84a6636756384ca8703bb97f09c006a2","first_seen":"2024-06-17T16:38:04Z","last_seen":"2026-03-30T05:52:05.190453Z","times_seen":81,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"amourcandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amourcandy.com/?utm_source=J2yUk0VsyPbfE\u0026utm_campaign=Pretty145s-3","fqdn":"amourcandy.com","domain":"amourcandy.com","tld":"com"},"ip":{"addr":"172.67.216.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-06T08:11:07.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amourcandy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 12:07:38 GMT","end":"Wed, 27 May 2026 13:06:11 GMT"},"fingerprint":{"sha1":"9F:6B:DC:41:20:C2:9D:BC:9C:CF:09:52:9B:1D:5B:95:3A:79:B6:E5","sha256":"CD:A7:A7:F5:67:BC:51:C4:80:1A:27:46:BE:09:13:F5:DA:E6:73:0B:57:A6:D6:D3:BF:82:D3:91:7E:79:64:78"}}},"request":{"raw":"GET /?utm_source=J2yUk0VsyPbfE\u0026utm_campaign=Pretty145s-3 HTTP/1.1\r\nHost: amourcandy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 08:11:07 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=0, private, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nset-cookie: k=SFMyNTY.g3QAAAAHbQAAAARhdW5xdAAAAAFtAAAABTQxNzk4bQAAAApSclhacm1NV3FLbQAAAANoaWRtAAAAJ0FnVWVzckVvTEhvV0VnU1dSbHNnRWdhTU15bHpaeXpmTU1ieWZ3YW0AAAACaGxkAANuaWxtAAAABXN1Yl8xZAADbmlsbQAAAAVzdWJfMmQAA25pbG0AAAAHdHJhY2tlcm0AAAAMUHJldHR5MTQ1cy0zbQAAAAN1bnFtAAAADFBZaGRidmtEWkxzYQ.daceZVzcypIozq12tk5hFGYeXgSTFSFUKNUW-Ejnjts; path=/; expires=Sat, 06 Mar 2027 08:11:07 GMT; max-age=31536000\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7BTsQsCAHDjdQ%2FpmEgyJuyxWfVr5fRX672k2kTBQ1tW0M6mu%2B21BySLOwvercjEelMpVieop9%2FzA%2BHu6ZIDJbyrHakVUPPLVhl9Cz2Yc\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d7fe34caf0c11c5-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]}],"data":{"size":15951,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14691)","md5":"0e43ee27f9920de3dd9a35ea83d0f06f","sha1":"4e552825dc0a9619d986a1ba8f3239c696bafc1f","sha256":"a74548aa3e617317fc8c920d188b59c088636124f1c854ec7ea0eb78d561f8f5","sha512":"9b288b3f3c3858b1aae9a80fcc92674e97d5d9d9c3bc26398afcbc131a9daa44c7f5b46fde5fc9e03abd3b289304468ee91ffc2b854f0eb4a9d75d159a9ad5af","ssdeep":"384:sX+U77Ndc8g45XxF517b9D1KcNaJcLc8CkgKCkV1Ckmyvv7VO48:/UU2D1KcwCYhpvyVn8","tlshash":"9062a4367791322f322742d4f1f7d7de2267c006d8970b86766b63aa4bc3955c623ac8","first_seen":"2026-03-06T08:11:34.980112Z","last_seen":"2026-03-06T08:11:34.980112Z","times_seen":1,"resource_available":true,"data":null}},"time_used":275,"timings":{"blocked":48,"dns":17,"connect":8,"send":0,"wait":178,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"amourcandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Montserrat\u0026subset=latin-ext","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amourcandy.com/?utm_source=J2yUk0VsyPbfE\u0026utm_campaign=Pretty145s-3","date":"2026-03-06T08:11:07.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css?family=Montserrat\u0026subset=latin-ext HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amourcandy.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 06 Mar 2026 08:11:08 GMT\r\ndate: Fri, 06 Mar 2026 08:11:08 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1866,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"bd8eb785552dd14048bc05a0caeb4e53","sha1":"2e4baf02179f4413cba26cab547282e82d40ea0c","sha256":"3e4fc43d2973ddc920952f6c69750e388386b105591ae0867b600561ab37a2af","sha512":"8108e1541230f771d159544bc4cb927706064f6e6423b17aecee27ccdd236eed61d950672ccc92fba4b8cc5eee479692b98aa3970e1f52168e8b96cd952ab0ba","ssdeep":"","tlshash":"26319b411216e900a7431cca23ce7d26ce8e626275a0c47abffd5ca8ade5c261735b6d","first_seen":"2025-09-05T00:54:05.746777Z","last_seen":"2026-04-04T13:20:31.260851Z","times_seen":14446,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":84,"dns":0,"connect":8,"send":0,"wait":19,"receive":0,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amourcandy.com/lstatic/93cd6ce3d3f3e53fa444a5b3a5ce384d/images/icon-times.svg","fqdn":"amourcandy.com","domain":"amourcandy.com","tld":"com"},"ip":{"addr":"172.67.216.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amourcandy.com/?utm_source=J2yUk0VsyPbfE\u0026utm_campaign=Pretty145s-3","date":"2026-03-06T08:11:07.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amourcandy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 12:07:38 GMT","end":"Wed, 27 May 2026 13:06:11 GMT"},"fingerprint":{"sha1":"9F:6B:DC:41:20:C2:9D:BC:9C:CF:09:52:9B:1D:5B:95:3A:79:B6:E5","sha256":"CD:A7:A7:F5:67:BC:51:C4:80:1A:27:46:BE:09:13:F5:DA:E6:73:0B:57:A6:D6:D3:BF:82:D3:91:7E:79:64:78"}}},"request":{"raw":"GET /lstatic/93cd6ce3d3f3e53fa444a5b3a5ce384d/images/icon-times.svg HTTP/1.1\r\nHost: amourcandy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amourcandy.com/?utm_source=J2yUk0VsyPbfE\u0026utm_campaign=Pretty145s-3\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: k=SFMyNTY.g3QAAAAHbQAAAARhdW5xdAAAAAFtAAAABTQxNzk4bQAAAApSclhacm1NV3FLbQAAAANoaWRtAAAAJ0FnVWVzckVvTEhvV0VnU1dSbHNnRWdhTU15bHpaeXpmTU1ieWZ3YW0AAAACaGxkAANuaWxtAAAABXN1Yl8xZAADbmlsbQAAAAVzdWJfMmQAA25pbG0AAAAHdHJhY2tlcm0AAAAMUHJldHR5MTQ1cy0zbQAAAAN1bnFtAAAADFBZaGRidmtEWkxzYQ.daceZVzcypIozq12tk5hFGYeXgSTFSFUKNUW-Ejnjts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 08:11:08 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jMC80q2lQxEEE7XAZ9a%2FxsdM9rraUAIVxcocVKfwDfAyrX3m9trka456hZxEboPcbL5%2B%2FG7rlyKqwuwBdy29QYY7OrLIPwba6xjDHsQb\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 16 Jan 2026 13:27:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncontent-encoding: br\r\ncache-control: max-age=7200\r\ncf-cache-status: REVALIDATED\r\netag: W/\"696a3cdd-16f\"\r\ncf-ray: 9d7fe34edd0bc8c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":367,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a2a4b1e2b8d1f10925db7d4a7f50bdb6","sha1":"872f8418577e94a19e1a697da9d13c5f339b9b62","sha256":"9415e6780f65f0a3630ef985b9bd8f0e404fce045cc15ef601c8ce5a9d97b111","sha512":"970d8d2efc18090899b3643b67bfc7905cb91a6a29f2e75d0cd18da6c48eb22d333369e2abb29ce8d3cf361ab484428d802126100e6f71648a5be8f876b63e46","ssdeep":"","tlshash":"86e04f74fd3c3d9a46069102967c7808321a20fa050f823d6ae35c28dd785db38bee6e","first_seen":"2024-06-17T16:38:04Z","last_seen":"2026-03-30T05:52:05.202855Z","times_seen":80,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"amourcandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amourcandy.com/lstatic/93cd6ce3d3f3e53fa444a5b3a5ce384d/images/m1.jpg","fqdn":"amourcandy.com","domain":"amourcandy.com","tld":"com"},"ip":{"addr":"172.67.216.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amourcandy.com/?utm_source=J2yUk0VsyPbfE\u0026utm_campaign=Pretty145s-3","date":"2026-03-06T08:11:08.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amourcandy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 12:07:38 GMT","end":"Wed, 27 May 2026 13:06:11 GMT"},"fingerprint":{"sha1":"9F:6B:DC:41:20:C2:9D:BC:9C:CF:09:52:9B:1D:5B:95:3A:79:B6:E5","sha256":"CD:A7:A7:F5:67:BC:51:C4:80:1A:27:46:BE:09:13:F5:DA:E6:73:0B:57:A6:D6:D3:BF:82:D3:91:7E:79:64:78"}}},"request":{"raw":"GET /lstatic/93cd6ce3d3f3e53fa444a5b3a5ce384d/images/m1.jpg HTTP/1.1\r\nHost: amourcandy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amourcandy.com/?utm_source=J2yUk0VsyPbfE\u0026utm_campaign=Pretty145s-3\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: k=SFMyNTY.g3QAAAAHbQAAAARhdW5xdAAAAAFtAAAABTQxNzk4bQAAAApSclhacm1NV3FLbQAAAANoaWRtAAAAJ0FnVWVzckVvTEhvV0VnU1dSbHNnRWdhTU15bHpaeXpmTU1ieWZ3YW0AAAACaGxhAW0AAAAFc3ViXzFkAANuaWxtAAAABXN1Yl8yZAADbmlsbQAAAAd0cmFja2VybQAAAAxQcmV0dHkxNDVzLTNtAAAAA3VucW0AAAAMUFloZGJ2a0RaTHNh.2Tbpj06Nz06PU5BkNbVGM4trL-3PrgSXAI8XPhCohXQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 08:11:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 38632\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 16 Jan 2026 13:27:57 GMT\r\netag: \"696a3cdd-96e8\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\ncache-control: max-age=7200\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RVfhUNPk73eETkjh5MgjugOMcT1jYjvh2JlzF6y%2F7qjqll13qrawOtrQ1%2F8Xy9plpJW9rCWk6TbDjaDpP2QxCRcscXhtJzC5Rh7EvGe%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7fe3500d22c8c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38632,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=402, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=370], progressive, precision 8, 370x402, components 3","md5":"98da173754c17a1ca0219ce79ba706df","sha1":"470527b454b599b4e1b77248a071812eb3e49e4b","sha256":"aaa9ffc42392b3bd78113b97013f859404beb56ca4024223f813ddd7a681dbc4","sha512":"b4ed399fa4897d342f09a88e766761c55887369592ad4a12083d596143e4c2d9398ba8ceba654c239df981f3d3e1220a8616bfdf266549ff2513026ae902f436","ssdeep":"768:DVHCzyogcq7QVHCzyogc9HWEfD2/rkJdFhJutuGKCQc4:pilrilBHWEfDurGdjJutZFQc4","tlshash":"7f03bf2cf390ad73f1d12fb920eac381b352ad6147a31353f94d35a93b799928f19642","first_seen":"2024-06-17T16:38:04Z","last_seen":"2026-03-30T05:52:05.194784Z","times_seen":81,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"amourcandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amourcandy.com/lstatic/93cd6ce3d3f3e53fa444a5b3a5ce384d/images/d1.jpg","fqdn":"amourcandy.com","domain":"amourcandy.com","tld":"com"},"ip":{"addr":"172.67.216.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amourcandy.com/?utm_source=J2yUk0VsyPbfE\u0026utm_campaign=Pretty145s-3","date":"2026-03-06T08:11:08.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amourcandy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 12:07:38 GMT","end":"Wed, 27 May 2026 13:06:11 GMT"},"fingerprint":{"sha1":"9F:6B:DC:41:20:C2:9D:BC:9C:CF:09:52:9B:1D:5B:95:3A:79:B6:E5","sha256":"CD:A7:A7:F5:67:BC:51:C4:80:1A:27:46:BE:09:13:F5:DA:E6:73:0B:57:A6:D6:D3:BF:82:D3:91:7E:79:64:78"}}},"request":{"raw":"GET /lstatic/93cd6ce3d3f3e53fa444a5b3a5ce384d/images/d1.jpg HTTP/1.1\r\nHost: amourcandy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amourcandy.com/?utm_source=J2yUk0VsyPbfE\u0026utm_campaign=Pretty145s-3\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: k=SFMyNTY.g3QAAAAHbQAAAARhdW5xdAAAAAFtAAAABTQxNzk4bQAAAApSclhacm1NV3FLbQAAAANoaWRtAAAAJ0FnVWVzckVvTEhvV0VnU1dSbHNnRWdhTU15bHpaeXpmTU1ieWZ3YW0AAAACaGxhAW0AAAAFc3ViXzFkAANuaWxtAAAABXN1Yl8yZAADbmlsbQAAAAd0cmFja2VybQAAAAxQcmV0dHkxNDVzLTNtAAAAA3VucW0AAAAMUFloZGJ2a0RaTHNh.2Tbpj06Nz06PU5BkNbVGM4trL-3PrgSXAI8XPhCohXQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 08:11:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 221496\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 16 Jan 2026 13:27:57 GMT\r\netag: \"696a3cdd-36138\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\ncache-control: max-age=7200\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RFX1b%2BX2uwWtwR4xvZNrQSZKFzpfYlCXO%2BG2vS0PXEs0UEUWF05NItG1hQVp1xz0%2BpTYAIB2d%2Bl8dOJkJUR5IbtDGdN%2FgB%2Fejx37HwJX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7fe3500d25c8c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":221496,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1150x1184, components 3","md5":"0c1f94b6c996ac724bd834a228717647","sha1":"9d374e74d8f1743c2a6c47a48509ad8b1527d4ff","sha256":"2ee0adb82f24b20b70d1fccad04f0711a0ce145a1a1197d9f3a72a40116465f6","sha512":"a9db3cff181d1c86edd03066fa6ff4503544b7f61550d6679e40410cd2fa004ee19f10fcaf87a0140966656e43889c5bb68768a75a242131cfa4b68012c6919c","ssdeep":"6144:YEtRQ9k6dVF7Tuj4/sFhBGiPJStNwFhMAp5A9sowszlR64:JrwFHS4EXBGiPJStNshMApas1sxRF","tlshash":"e5242356bcc5c7f8e43137b5ccbd28342b6391826a5228125ee7918e70b0ad8f7d7653","first_seen":"2024-06-17T16:38:04Z","last_seen":"2026-03-30T05:52:05.191241Z","times_seen":81,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"amourcandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amourcandy.com/?utm_source=J2yUk0VsyPbfE\u0026utm_campaign=Pretty145s-3","date":"2026-03-06T08:11:08.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/montserrat/v31/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://amourcandy.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18780\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 18:08:04 GMT\r\nexpires: Thu, 04 Mar 2027 18:08:04 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:09:31 GMT\r\ncontent-type: font/woff2\r\nage: 136984\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18780,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18780, version 1.0","md5":"e7198b2dcb57c0193b0e9765353994ba","sha1":"6e2658ad73dda183d4fa2979809a73a0c29d21c9","sha256":"e66bcd2761ab6924b25ce70dafe10e57a39193c4fea1516730bd9cb5240af6c8","sha512":"01054290f69d0e4232687f67e5d2522f186f87fe833bd1b13016d0e79a1159c49e767a5c6e9c61f9b3fea0c27df2194011bf46d6f6c1ee46d1f4313ac1950f9c","ssdeep":"384:pJOL4DxNfzRV4g4Miv8HlK3z114ow92D4bH7CxPhdWS6UJ836u8K+ylyr:p5P8Mq8Hlqo92D4vOPhdWSL+qu8Kqr","tlshash":"ef82d0ec209846f9fc0a6e97dfc49bd522430cbd87166e3093ab0dc84b875a4d667693","first_seen":"2025-09-05T00:54:05.741935Z","last_seen":"2026-04-04T14:31:42.798335Z","times_seen":28704,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":93,"dns":1,"connect":21,"send":0,"wait":22,"receive":5,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amourcandy.com/favicon.ico","fqdn":"amourcandy.com","domain":"amourcandy.com","tld":"com"},"ip":{"addr":"172.67.216.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amourcandy.com/?utm_source=J2yUk0VsyPbfE\u0026utm_campaign=Pretty145s-3","date":"2026-03-06T08:11:08.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amourcandy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 12:07:38 GMT","end":"Wed, 27 May 2026 13:06:11 GMT"},"fingerprint":{"sha1":"9F:6B:DC:41:20:C2:9D:BC:9C:CF:09:52:9B:1D:5B:95:3A:79:B6:E5","sha256":"CD:A7:A7:F5:67:BC:51:C4:80:1A:27:46:BE:09:13:F5:DA:E6:73:0B:57:A6:D6:D3:BF:82:D3:91:7E:79:64:78"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: amourcandy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amourcandy.com/?utm_source=J2yUk0VsyPbfE\u0026utm_campaign=Pretty145s-3\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: k=SFMyNTY.g3QAAAAHbQAAAARhdW5xdAAAAAFtAAAABTQxNzk4bQAAAApSclhacm1NV3FLbQAAAANoaWRtAAAAJ0FnVWVzckVvTEhvV0VnU1dSbHNnRWdhTU15bHpaeXpmTU1ieWZ3YW0AAAACaGxhAW0AAAAFc3ViXzFkAANuaWxtAAAABXN1Yl8yZAADbmlsbQAAAAd0cmFja2VybQAAAAxQcmV0dHkxNDVzLTNtAAAAA3VucW0AAAAMUFloZGJ2a0RaTHNh.2Tbpj06Nz06PU5BkNbVGM4trL-3PrgSXAI8XPhCohXQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 08:11:08 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6QtLr6ZZGpxkF6kLKWRASSQZVClLGpoj7ejgw6PmrUX%2BSJeuhx7yE6fgm9DNyXlpeL1ODtDW6CNn9qZxU7I5c%2FNWyafsUfkcys%2BhrmvW\"}]}\r\npriority: u=6,i=?0\r\nlast-modified: Fri, 06 Mar 2026 08:11:08 GMT\r\ncache-control: max-age=7200\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7fe351fd57c8c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9662,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel","md5":"844bcd9049695636748329894c8fbe89","sha1":"6fa53676d0d7ab6e7a2de59141504c5f720ed819","sha256":"eb258b448aade5657517a72596c2984ad989e8615291dac1a5798a5772e6b59f","sha512":"fa86dc380600d500c63138dd405a95d5e040b7f7215a394426400c6a03c537d92b0e1db5508ffe31382926e083e0b4b01e5ca9c7367f366c5700e43dae95cb69","ssdeep":"96:92znQLVQWhHqMAZ+8LHAUWC7Ie8/KbemKDNIrGhCQpSoxFbUfx9V5vDCwx5:szShKHZbg3aYmKhOrGDjbUfx9Vd55","tlshash":"361263cd8b6ee589dcac6532e82315f1148ddcb8fa4881c3566a3e0af13711c785b6ed","first_seen":"2023-05-11T09:36:29Z","last_seen":"2026-03-06T08:11:34.996108Z","times_seen":35,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"amourcandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webcamly.online/?s=g_4570\u0026","fqdn":"webcamly.online","domain":"webcamly.online","tld":"online"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-06T08:11:07.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webcamly.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 18:19:23 GMT","end":"Wed, 20 May 2026 19:18:01 GMT"},"fingerprint":{"sha1":"B0:C7:F3:C6:A3:77:DF:13:F8:CF:9A:21:96:B2:83:43:0E:9E:98:B3","sha256":"89:F5:B0:87:3F:36:B6:5E:98:1A:11:2C:1B:9A:DB:55:B6:E5:42:FB:BB:EF:6C:29:6C:21:C4:0A:AC:69:70:A4"}}},"request":{"raw":"GET /?s=g_4570\u0026 HTTP/1.1\r\nHost: webcamly.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 06 Mar 2026 08:11:07 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://amourcandy.com/?utm_source=J2yUk0VsyPbfE\u0026utm_campaign=Pretty145s-3\r\nserver: cloudflare\r\nset-cookie: visited=1; expires=Sun, 05-Apr-2026 07:26:05 GMT; Max-Age=2592000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yq8tzhQ%2FK3jO95KRLLiVtpSd7GELO%2BTfyFv7NrJQCca5ym%2F74GazjCRdgwo3ABnFYQxdeeOYdWyO0aTFUEHVpEJQTXjni6GYzQ9gxaegTA%3D%3D\"}]}\r\ncf-ray: 9d7fe34b7ee2be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15951,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":277,"timings":{"blocked":68,"dns":57,"connect":8,"send":0,"wait":121,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amourcandy.com/lstatic/93cd6ce3d3f3e53fa444a5b3a5ce384d/images/icon-heart.svg","fqdn":"amourcandy.com","domain":"amourcandy.com","tld":"com"},"ip":{"addr":"172.67.216.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amourcandy.com/?utm_source=J2yUk0VsyPbfE\u0026utm_campaign=Pretty145s-3","date":"2026-03-06T08:11:07.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amourcandy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 12:07:38 GMT","end":"Wed, 27 May 2026 13:06:11 GMT"},"fingerprint":{"sha1":"9F:6B:DC:41:20:C2:9D:BC:9C:CF:09:52:9B:1D:5B:95:3A:79:B6:E5","sha256":"CD:A7:A7:F5:67:BC:51:C4:80:1A:27:46:BE:09:13:F5:DA:E6:73:0B:57:A6:D6:D3:BF:82:D3:91:7E:79:64:78"}}},"request":{"raw":"GET /lstatic/93cd6ce3d3f3e53fa444a5b3a5ce384d/images/icon-heart.svg HTTP/1.1\r\nHost: amourcandy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amourcandy.com/?utm_source=J2yUk0VsyPbfE\u0026utm_campaign=Pretty145s-3\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: k=SFMyNTY.g3QAAAAHbQAAAARhdW5xdAAAAAFtAAAABTQxNzk4bQAAAApSclhacm1NV3FLbQAAAANoaWRtAAAAJ0FnVWVzckVvTEhvV0VnU1dSbHNnRWdhTU15bHpaeXpmTU1ieWZ3YW0AAAACaGxkAANuaWxtAAAABXN1Yl8xZAADbmlsbQAAAAVzdWJfMmQAA25pbG0AAAAHdHJhY2tlcm0AAAAMUHJldHR5MTQ1cy0zbQAAAAN1bnFtAAAADFBZaGRidmtEWkxzYQ.daceZVzcypIozq12tk5hFGYeXgSTFSFUKNUW-Ejnjts\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 08:11:08 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CjE5rnnXItvwcGLBTezVjObXrCJba%2BPmLagWVp44m%2FfL66vOywH9GJfwpMId0GATFFTMPNKqSIMO5GSeOFyyyKUWBaEoyb30O7zATs7E\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 16 Jan 2026 13:27:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncontent-encoding: br\r\ncache-control: max-age=7200\r\ncf-cache-status: REVALIDATED\r\netag: W/\"696a3cdd-14c\"\r\ncf-ray: 9d7fe34edd0cc8c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":332,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0cd2ded575effb4f7aab28b40de135c8","sha1":"277620acd69566ccee7667873b237d395e2ed27f","sha256":"1ae789e9e48b310740b1aaa0e9d1ccc7478cd01343f14dc8c94421a24c9531ea","sha512":"6cabef3f848032958b326458bfb5fbe91fcbebcee9d2f6b1e1c8671f8a5ba66729e5980c8cff81f24b0eebde13e619dbb0a4223fac13e05e6be6558cb97252df","ssdeep":"","tlshash":"d0e0204afd4c626ccdd55321d25c727d52179150025203ba13d9467463570fa56d1c58","first_seen":"2024-06-17T16:38:04Z","last_seen":"2026-03-30T05:52:05.193373Z","times_seen":80,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"amourcandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amourcandy.com/p.js?a=2124735\u0026cr=64329\u0026lid=41176\u0026mh=QWdVZXNyRW9MSG9XRWdTV1Jsc2dFZ2FNTXlselp5emZNTWJ5ZndhLTM1ODc1\u0026mmid=3979\u0026p=0\u0026rf=uua\u0026rn=zc4ZodKUys4WmdeVEhG\u0026t=Pretty145s-3","fqdn":"amourcandy.com","domain":"amourcandy.com","tld":"com"},"ip":{"addr":"172.67.216.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amourcandy.com/?utm_source=J2yUk0VsyPbfE\u0026utm_campaign=Pretty145s-3","date":"2026-03-06T08:11:07.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amourcandy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 12:07:38 GMT","end":"Wed, 27 May 2026 13:06:11 GMT"},"fingerprint":{"sha1":"9F:6B:DC:41:20:C2:9D:BC:9C:CF:09:52:9B:1D:5B:95:3A:79:B6:E5","sha256":"CD:A7:A7:F5:67:BC:51:C4:80:1A:27:46:BE:09:13:F5:DA:E6:73:0B:57:A6:D6:D3:BF:82:D3:91:7E:79:64:78"}}},"request":{"raw":"GET /p.js?a=2124735\u0026cr=64329\u0026lid=41176\u0026mh=QWdVZXNyRW9MSG9XRWdTV1Jsc2dFZ2FNTXlselp5emZNTWJ5ZndhLTM1ODc1\u0026mmid=3979\u0026p=0\u0026rf=uua\u0026rn=zc4ZodKUys4WmdeVEhG\u0026t=Pretty145s-3 HTTP/1.1\r\nHost: amourcandy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amourcandy.com/?utm_source=J2yUk0VsyPbfE\u0026utm_campaign=Pretty145s-3\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: k=SFMyNTY.g3QAAAAHbQAAAARhdW5xdAAAAAFtAAAABTQxNzk4bQAAAApSclhacm1NV3FLbQAAAANoaWRtAAAAJ0FnVWVzckVvTEhvV0VnU1dSbHNnRWdhTU15bHpaeXpmTU1ieWZ3YW0AAAACaGxkAANuaWxtAAAABXN1Yl8xZAADbmlsbQAAAAVzdWJfMmQAA25pbG0AAAAHdHJhY2tlcm0AAAAMUHJldHR5MTQ1cy0zbQAAAAN1bnFtAAAADFBZaGRidmtEWkxzYQ.daceZVzcypIozq12tk5hFGYeXgSTFSFUKNUW-Ejnjts\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 08:11:08 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t3g%2BI9Vubi7AL0dTIjGbvoFZiCoqnx9Fa3Gg2VMg0T3HrVvdRtVG%2BVv%2B8uDKlOw1jk2ZNriYzi9LYmay2%2BGn0kPhiURcxwyWnjHKpGvf\"}]}\r\npriority: u=3,i=?0\r\ncache-control: max-age=0, private, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nset-cookie: k=SFMyNTY.g3QAAAAHbQAAAARhdW5xdAAAAAFtAAAABTQxNzk4bQAAAApSclhacm1NV3FLbQAAAANoaWRtAAAAJ0FnVWVzckVvTEhvV0VnU1dSbHNnRWdhTU15bHpaeXpmTU1ieWZ3YW0AAAACaGxhAW0AAAAFc3ViXzFkAANuaWxtAAAABXN1Yl8yZAADbmlsbQAAAAd0cmFja2VybQAAAAxQcmV0dHkxNDVzLTNtAAAAA3VucW0AAAAMUFloZGJ2a0RaTHNh.2Tbpj06Nz06PU5BkNbVGM4trL-3PrgSXAI8XPhCohXQ; path=/; expires=Sat, 06 Mar 2027 08:11:08 GMT; max-age=31536000\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7fe34edd0dc8c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"b14b15b27f4a3e20e1e2752e0c226d42","sha1":"a4766a5ba464eca19d35f1e09ac29876a83f8cea","sha256":"a3e06fb61fe3f605f6c5901448bc48adb7554a247391fcfa31de68758fe9acfa","sha512":"b012795374eb6eb76dba6119136e2d0e72b32775665a79d33995fd8a2a266bd8b16c9c8cc7ec5acf6f2185211afc538582e882b15451c790fe8ccde7ef88a7d7","ssdeep":"","tlshash":"86e0685e34e0007286b3f5324f2f5910363f114f304a4a463cee12906f6020e97cad84","first_seen":"2026-02-26T21:23:40.601736Z","last_seen":"2026-03-21T15:30:39.315848Z","times_seen":4,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"amourcandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.3.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amourcandy.com/?utm_source=J2yUk0VsyPbfE\u0026utm_campaign=Pretty145s-3","date":"2026-03-06T08:11:07.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.3.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amourcandy.com/\r\nOrigin: https://amourcandy.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-1538f\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 06 Mar 2026 08:11:08 GMT\r\nage: 386214\r\nx-served-by: cache-lga13622-LGA, cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 65, 9534\r\nx-timer: S1772784668.062562,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30288\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":86927,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-04T14:50:17.301576Z","times_seen":118203,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":62,"dns":0,"connect":26,"send":0,"wait":27,"receive":9,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amourcandy.com/lstatic/93cd6ce3d3f3e53fa444a5b3a5ce384d/images/m2.jpg","fqdn":"amourcandy.com","domain":"amourcandy.com","tld":"com"},"ip":{"addr":"172.67.216.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amourcandy.com/?utm_source=J2yUk0VsyPbfE\u0026utm_campaign=Pretty145s-3","date":"2026-03-06T08:11:08.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amourcandy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 12:07:38 GMT","end":"Wed, 27 May 2026 13:06:11 GMT"},"fingerprint":{"sha1":"9F:6B:DC:41:20:C2:9D:BC:9C:CF:09:52:9B:1D:5B:95:3A:79:B6:E5","sha256":"CD:A7:A7:F5:67:BC:51:C4:80:1A:27:46:BE:09:13:F5:DA:E6:73:0B:57:A6:D6:D3:BF:82:D3:91:7E:79:64:78"}}},"request":{"raw":"GET /lstatic/93cd6ce3d3f3e53fa444a5b3a5ce384d/images/m2.jpg HTTP/1.1\r\nHost: amourcandy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amourcandy.com/?utm_source=J2yUk0VsyPbfE\u0026utm_campaign=Pretty145s-3\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: k=SFMyNTY.g3QAAAAHbQAAAARhdW5xdAAAAAFtAAAABTQxNzk4bQAAAApSclhacm1NV3FLbQAAAANoaWRtAAAAJ0FnVWVzckVvTEhvV0VnU1dSbHNnRWdhTU15bHpaeXpmTU1ieWZ3YW0AAAACaGxhAW0AAAAFc3ViXzFkAANuaWxtAAAABXN1Yl8yZAADbmlsbQAAAAd0cmFja2VybQAAAAxQcmV0dHkxNDVzLTNtAAAAA3VucW0AAAAMUFloZGJ2a0RaTHNh.2Tbpj06Nz06PU5BkNbVGM4trL-3PrgSXAI8XPhCohXQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 08:11:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27725\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 16 Jan 2026 13:27:57 GMT\r\netag: \"696a3cdd-6c4d\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\ncache-control: max-age=7200\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gjeoIRje7J3XEB6cj0k5Mg3dIJIko4w7r2sc%2B3k40%2Bf0ISfYj%2BJWncBVDcfRhfVg4nyoKGwIJVCoQINt3LtlOLAoE4qhfsfL0xg0x6pY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7fe3500d23c8c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27725,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=402, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=370], progressive, precision 8, 370x402, components 3","md5":"98f2371361f5a6ae398d0e021cdfa3aa","sha1":"0bd8430844be565ac2848969afa2f094721fc952","sha256":"c1d2e232f11ee57b1e72629670c302dc703f50ba944ed19f3d7f79ef5d46c324","sha512":"86d6b9d2dffa33383d2354fb37659be2e5a84544dddb09bfc5c35d9fee280c6dc875439a5f1d01a0c01dc85ad1c70ce77c90241e1ff4ad633acd135d7ae499c5","ssdeep":"384:EXSo8gT7iT2nSXSo8gKntVw2WEMGET4u96C+LZt8iY8ToPrb/vzKG1BaraVww:ECBgT7dSCBgKjWEqH96CiXY42X91Barm","tlshash":"cfc29d1567c49d95f9f266b698d4eb431312ed288aa32b9778dc389037f23e2de1c701","first_seen":"2024-06-17T16:38:04Z","last_seen":"2026-03-30T05:52:05.189645Z","times_seen":81,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"amourcandy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}