{"report_id":"692d91e3-ad28-40d4-a1ac-fdc7515727ad","version":6,"status":"done","tags":[],"date":"2026-02-13T23:12:59Z","url":{"schema":"https","addr":"christmas-wifmas.xyz/","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"christmas-wifmas.xyz/","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"title":"Just a moment...","dom":{"size":27504,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (27502), with no line terminators","md5":"265ca97ea6515289a18441a485c29590","sha1":"3f38cf61862dc9e82e5f5c3d4734e387b242a1dc","sha256":"893f63de59e08571872078f27bb3e13bfc2f31600ab568cc82889aa3687427a4","sha512":"35b89702c6bdff95d696703a9376bd00a9c24ccbeb9081dbc8c38f896d42be8d1c9892a07853722ea00d42c1e0a0e1f29043bbf9023fee3f75b927b0c5ad4ee4","ssdeep":"384:g+4FqvUWWOJoXMVr9vta3vEaIb/Jkq95G+aTTC0eAXV:GwLWuNa3vEaIb/JkiGfztV","tlshash":"aec2c7239e80172f315387ae7391f9c4a3346a018f15b277f65552b44f8e5ae2a7338a","dom_hash":"domhash8c10a45203c09de929526f976d972c03","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"christmas-wifmas.xyz/","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-20T23:12:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":11393,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2026-02-08T22:42:04.305696Z","alert_count":0,"request_count":1,"received_data":6936,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"christmas-wifmas.xyz","ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-25","domain_rank":0,"first_seen":"2026-02-13T12:40:31.567638Z","last_seen":"2026-02-13T12:40:31.567639Z","alert_count":0,"request_count":11,"received_data":447632,"sent_data":7090,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"christmas-wifmas.xyz/","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a8092a1a71721059bab5a2e6a05d71e1","sha1":"f7a925dda83acc3fd33801484ba7c38b994072ac","sha256":"f2b20f9bca4616968267fc31be5ff713e7ef73d2be80f75db56b1e7d22b9a78f","sha512":"a2738561d64a68b1dfbaca30255c27603f4bfcbdf368c1083f8bdff111f2e24034ff6b7ef29b8210c23ccfd19df02232ad6466511be1ed290f935846cc48a966","ssdeep":"3:N/BKL1XmzdUV:eL12m","tlshash":"e55504d0744031700711cc00d1511455d5551c0010551c0d707d0cd437305100114f44","size":1337359,"data":"","first_seen":"2026-02-13T23:13:15.260507Z","last_seen":"2026-02-13T23:13:15.260507Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"670ac5c876b034dbd0af06e9154b30e2","sha1":"88e3e76c3b7357b35f7cbf7d939a18e3b2a665e4","sha256":"7c3931efed76c5f14b9460c63103fef7fd1b862c58073b86cc9e52c42601322f","sha512":"82536fc1cb020acef39336c89b7e5b536878327458492d278ec0d719494b2debf4d603c98d0586e544feb8a602c38df3c16a670384f7e37dd9c5fec1b62d957c","ssdeep":"3:N/BKL1Xmzd:eL12B","tlshash":"445504d0744031700511d700d1501c55d045141010551c05705f0cd417304000034f44","size":1337359,"data":"","first_seen":"2026-02-13T23:13:15.261507Z","last_seen":"2026-02-13T23:13:15.261507Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"52a9c780b8ca556f30109df8aee3c783","sha1":"108bd27320166bb105d00fb9695f375a7f67d5cc","sha256":"a30e8018117c6fa4e1fe9972e4578e8d8c967c84d43b411b9f4327a354e15add","sha512":"e1b8a95d8bbbb06f051cc6e709a3789059b1e30dbb77cdbe06c941566c194c87895c01a8d2ec70bcfd261135719badbd8f7dc021040806a6ad02fb77fdc0408c","ssdeep":"3:N/BKL1Xmzd:eL12x","tlshash":"155504d0744131f05715c440d15014555045450530551c05705d0cd417300000014754","size":1337359,"data":"","first_seen":"2026-02-13T23:13:15.262409Z","last_seen":"2026-02-13T23:13:15.262409Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1ae76d20a20ccf9d946aa4aa6ffbeb10","sha1":"b2c927089fbdc52035187dd2400473b658d0d2f2","sha256":"8d1e43bc71ad30b2b530ebc92200e3b9dcac0ec38b65564bcf0c28bb0c6e0b5b","sha512":"79377bbfdd9a87590a6f24eb8fb892039e8150dad10fe973746111a488783b99db727dcfef7e6f93e6bc3b53727165ddb8c675f61334d72f446187c73ab9eb07","ssdeep":"3:N/BKL1XmzBRn:eL12Tn","tlshash":"cb5504f1744070704d13c404d350145d5005040010550c05747d0dd51f300000014740","size":1337359,"data":"","first_seen":"2026-02-13T23:13:15.263352Z","last_seen":"2026-02-13T23:13:15.263352Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9cd802ddcd161a30","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"600b770a812977a5f2616b29e3699e42","sha1":"de7138cb5094a9bbeb21d203156d2591b6ed3b28","sha256":"a3386342b938ba41ba28da4cdf6a97546eea19192ebfbfa8680cbc33b271697d","sha512":"a276da3b674a4ecb621bdca0ea3d0da426ec6cdf2a8160bfe31a5c9698e2c9e052d4027001f9b69efcc79d512395e039a3a76343a26195ae13a15a75d2b58c85","ssdeep":"3072:QHvOZtKwgMM+DUZ2SUdfnwId8Pep8zORiUO4tTcj87YU92aeZQrTRpOI0lNls7xS:yvOZtKwgfcTRT0lTrH","tlshash":"51f3ea4d3bdb74434122247431db616a731758843028386ef8509ee86df6b6cfeab7e9","size":164209,"data":"","first_seen":"2026-02-13T23:13:15.255974Z","last_seen":"2026-02-13T23:13:15.255974Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5aa19856e623a6f3b67756571bf192d6","sha1":"a2f39e28cf12cfc705e90dd38622c012f61ca45e","sha256":"ddad576e260428119a59b403d7dd53a34098ea4e9fb232a26dde8e5aec0f1125","sha512":"5565f898c35b918a3b67a23e1be5db4acda9bb061ce49dec016ed73b8fa4543b0a6832eac052e3f805d2889a2776fc652ff536bfd71fd37d54150995ca752b6c","ssdeep":"3:N/BKL1XmzwU:eL12cU","tlshash":"a75504d4744430704511c501f1501c5550051440105d0c05705d0cd417304010054740","size":1337359,"data":"","first_seen":"2026-02-13T23:13:15.264586Z","last_seen":"2026-02-13T23:13:15.264586Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4bde18c0510364c7aa699c625e3026d1","sha1":"93392d39645c78ff5b40b06229313e3e819fd0cb","sha256":"91edc57f232856d25054707e64474e75183150fdda2316b5ddf2b6301ff09dbb","sha512":"741c195923d16077b1d970184927c8d9c3712888bf35cce4cb3988e750519ea1abafc8adada25579af05bb6984209fa9e29a3a8bb159ebe0a32f5917237c6f84","ssdeep":"3:N/BKL1Xmzvd:eL12J","tlshash":"8c5504d0f44031700511c400d17014555055050030751c05705f0cd41f30000011574c","size":1337359,"data":"","first_seen":"2026-02-13T23:13:15.265696Z","last_seen":"2026-02-13T23:13:15.265696Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/?__cf_chl_rt_tk=Nc46OQE9BqlxxkqshZoex6V777GRcBgLC_MmBAWqhTE-1771024365-1.0.1.1-DmrpT2NtvlBCvFVEzbuELFLN7Jh43Z1eKtLneyaGW40","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-26T04:24:37.308582Z","times_seen":784183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9cd8032d0a7f32fa","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b05d333a354aef079ebbb8fcf41c9b16","sha1":"a41106b93ade683a3d29ad522d641cc51b2e5f33","sha256":"2ccf6f89b767550ce0df0d70da8c1ba88ee683fefa08e93c7135aae15b1f0739","sha512":"b1c0131564a65c17a8fd2ed55b133e9c8e662be9ef0f7750643d954e524a381a5867686eab1c1d41c5fb68a82c035ff48a7e8b72620d8d62d4a338e49397baa4","ssdeep":"3072:0SvTH4Vo2MM+DUZ2SUdfnwId8Pep8zORiUO4tTcj87YU92aeZQrTRpOI0lNls7xS:5vTH4Vo2fcTRT0lTrH","tlshash":"3bf3ea4d3bdb74434122247431db616a731758843028386ef8509ee86df6b6cfeab7e9","size":164209,"data":"","first_seen":"2026-02-13T23:13:15.253422Z","last_seen":"2026-02-13T23:13:15.253422Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/?__cf_chl_rt_tk=w4DgL3GUSRvTh9Y.tUhuIuQCu8Vwz.FYNhe9xG0bXgI-1771024352-1.0.1.1-PWrauBOLgC06wywrjCLK1gBJMDl8lSHqs3wGeRFZvqk","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-26T04:24:37.308582Z","times_seen":784183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d550bc0ee0ea9b08b4bb5be087f4f864","sha1":"f7876dbe273391253865d48c0da45816a8ab7c92","sha256":"9ff687300b5926a9a1d4a30893ab79fab886ddf49fdf4b3a6b0865d752b88315","sha512":"5f77dafc8bc12511860be5a852e85684265da1951c5d7520dbf11363e675c51b1653e08a3cdff3d1846e3956981e2a1aef4879976671c9cc7595497d2b770764","ssdeep":"3:N/BKL1Xmzv:eL12D","tlshash":"ce5504d0f44030710d15c500d15014555005544011dd0c05705d0cd417304000014740","size":1337359,"data":"","first_seen":"2026-02-13T23:13:15.26742Z","last_seen":"2026-02-13T23:13:15.26742Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2f978877949c22c27bce66a7a89371fb","sha1":"bd530c58a737221a3bc99fb37dbd01b8347eeeeb","sha256":"e75ab444a669c6c92a85096d15ba6d3f565c1c1d077320ecd62228d53e14efe2","sha512":"926a920d56f1662a036df79533d90006232117f4d403cc088e9babda4797efc4f779163336dfe9ebe470f83316492ac877efe7f3e940f4cec1da558abe7d701f","ssdeep":"3:N/BKL1XmzDn:eL12vn","tlshash":"5e5504d0744430700531cd40d15014555405044450dd0c05705d0cf417310040014740","size":1337359,"data":"","first_seen":"2026-02-13T23:13:15.268834Z","last_seen":"2026-02-13T23:13:15.268834Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e443f9bb8c6734c8202e4e24bbf27077","sha1":"b57564ca4eda0511fc7339283d7805616d393d7e","sha256":"92e4b3e20a338380f27aec86892d2daaa2071ace80143e0c843d6cf9356f0536","sha512":"77bb25a83a27e34c8fd16af5ecfedcc73f38a659dad4293fafbefae0d4fc4a6db57f463a47416b8bf0545c1ec7abb547e7ac626914d397a5ce311dad490d2092","ssdeep":"3:N/BKL1XmzXS:eL12W","tlshash":"905504d07c4034700511c500f1d0145550454441105d4c05705d0cd417300000014740","size":1337359,"data":"","first_seen":"2026-02-13T23:13:15.270287Z","last_seen":"2026-02-13T23:13:15.270287Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3812a617b4ad8eaa98cf14845efd7a1c","sha1":"08dd08ff808262783344d4c51b1579f087344a6b","sha256":"884b26d4a8474c13e0908ca0bd4714d3437184910383f16424470ab60ec36530","sha512":"dbc91cb01890a5b1d82aae3732aeb710ad60fd75b3bc525b0ccd4a3c3856b7a50faa74f82b48a0b26ef438dccaf07320221c0e93be098f4378b5ea0cd09bc118","ssdeep":"96:RABfRxfbimS+4+CnIKN+lnfbCU4CRSYIcuKAYzueh8xmZ:q2GCIKNwfbC0RecThyqZ","tlshash":"3f912ce3d9530831a7f737da8177f310f6b922528d5019ab55b0d958a4afdcf014c6d8","size":4279,"data":"","first_seen":"2026-02-13T23:13:15.271589Z","last_seen":"2026-02-13T23:13:15.271589Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f07b69ac38f729b338415ed61748f584","sha1":"2281884f017349b055810a1d375050befd931119","sha256":"7bb2403490a342650fb5354805404123fc154fd8a00771c37a5cf318e8ed79b2","sha512":"f82bf9c45351ecca6ef6c56a10ac1f881820b091a38837c22d7587490e300af2c0b7c9f1159dc0a5694226401921322248735ec51817fad2a098899bdf1c35bb","ssdeep":"3:N/BKL1XmzMQ:eL12IQ","tlshash":"ba5504d0744431700513cc11d154145d50450400305f1c0570dd4cd41731000041c744","size":1337359,"data":"","first_seen":"2026-02-13T23:13:15.27306Z","last_seen":"2026-02-13T23:13:15.27306Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"14c6b16f11dd00176c1b982c21bef0e3","sha1":"a1fea169f13f5f75ba33bc7288db9bd6404080b7","sha256":"6f104ba897007240215b209c53d59d657570774df53e5f910a9dde800c77ee53","sha512":"2ef499b80bca4a31d800e9fa91d913c4052548bd103695004942038abeccfd5b05c47a8f70d6d4073639c488e21a37bbabd3ab9da70fdb8da420869b253ca638","ssdeep":"3:N/BKL1XmztUn:eL12ZUn","tlshash":"a95504d4754070740511cc00d150145d5105040050551c05705f1cd517301000414f40","size":1337359,"data":"","first_seen":"2026-02-13T23:13:15.2743Z","last_seen":"2026-02-13T23:13:15.2743Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"500475efff20c8b817b2f9c1fe80d455","sha1":"8d62db00548254fc1fe4c530cb3629e60009f68a","sha256":"fbcae16ae09eaeea823619184a45ff7287040777faf7dfa4b184c1cc935464ae","sha512":"a09c2e89c8f8d2030a8a33ce5bdb922ca1c9993f6380ef49eb0be2fcbfbbb316add818b5d052cf80f5b54a12b9edffc7f10a3021a0dfd8b56a378441d8f3b6d4","ssdeep":"3:N/BKL1XmzyT:eL12GT","tlshash":"d35500e2b88030b00e23cc00e2a028aea00a080220ab0c0ab0ee0cea2f38080002eb80","size":1337359,"data":"","first_seen":"2026-02-13T23:13:15.275494Z","last_seen":"2026-02-13T23:13:15.275494Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-26T04:24:37.308582Z","times_seen":784183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b6029e0449bce1c59e94799cae9b1e66","sha1":"36af2e079f6c83e9b873bdd8bad12ec8356714d3","sha256":"c739fb98f674d0a09d3eba0dc940e0db5d15cfc27c6cb08177239f9728940474","sha512":"d470173094dbe2d593b4e69e2161919c579b024663e39b09ba097ac01466aea727a3fd84301d6835ad0a52ce7d423ba61c65972c82dcff2233f5c321cffa305a","ssdeep":"3:N/BKL1XmzXQc:eL12F","tlshash":"ce5504d0744031700513cc44d15114d5514d040011571c05705d0cd437301000014f44","size":1337359,"data":"","first_seen":"2026-02-13T23:13:15.276908Z","last_seen":"2026-02-13T23:13:15.276908Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c0e6640663e8778820b6deae32410756","sha1":"811e21ca1e900fbaa470237bf71947a37cedb6c6","sha256":"ed4e0e3f86d53107508892fd738599bc10225712c3249ebadf7ed4df7ca4d122","sha512":"6acb3b69913fcb759debed66ff9ef640d8460f88ed63cd69c100eeb5c633d05757dbb4c2a8e76484f6b5e6c26b58ebdb4829149d6746bdbb915c40eb18e74603","ssdeep":"3:N/BKL1Xmz/b:eL12n","tlshash":"405504d0744031700531d400d150145d5057040010553c05707d0cdc37f00000114f44","size":1337359,"data":"","first_seen":"2026-02-13T23:13:15.278158Z","last_seen":"2026-02-13T23:13:15.278158Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"878edd90c4917c191cba09ed64a37668","sha1":"c792b4b7496c86b88190fa94d83038ecc62772ed","sha256":"499b2dba8dcba3bc818c289d9032b09f2dc52793372f1c32226c293d597215a2","sha512":"8c6c59cd160b0e10cf5019d73ab22e89e03026a3e5bf6a886dee29a6ef78733f4300ea0bf5484f7eb8ceb5214e014afb8ceb75a1d611bf858441cbadda894b80","ssdeep":"3:N/BKL1Xmz2:eL12q","tlshash":"de5504d07c4031701511c400d5d014555045141050771c05705f0cd437304000114745","size":1337359,"data":"","first_seen":"2026-02-13T23:13:15.279563Z","last_seen":"2026-02-13T23:13:15.279563Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"73bbcf0f4975d0709364ba5e087961f9","sha1":"1e47693361890019c1896ff81cf521e26735ea86","sha256":"d8fad500fd682ce401c5929402a0e3b6c575736e8714ddba5bab4ccd1f9c0239","sha512":"9383d381954c78712600efe3d43b2bb3a2235110c4b982371df0569284e1d7366bd93c92bac5d632faa69d1a6d66e25a863797e793a3579d1f5784d3a41972d4","ssdeep":"3:N/BKL1XmzqI:eL12mI","tlshash":"6a5504d0f44031700511c400d1501455d045050034571c05707d4cf41f70004001474c","size":1337359,"data":"","first_seen":"2026-02-13T23:13:15.28088Z","last_seen":"2026-02-13T23:13:15.28088Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1ab3bb276f33b82e3ccbda38eb99a83d","sha1":"0cc0b4ec7b01afedad93fcd4b076e99986127afa","sha256":"333e2b69fce5b747aaa8187810c2381d9d151df3610edd05f24402140af4ef25","sha512":"049e735f9cf09bb38eedd556e4fd26fea5573590cccde3f5354d2b0e2e1de70fda04319e0a6826064ace8bf9797bc9a9d2a646b4137335faf6b6d2482e9c5299","ssdeep":"3:N/BKL1XmzaX:eL12g","tlshash":"345500e0b880b0b00a22ca00e2a028aea20a080020ae0c0ab2ae0ce82b30200023cf80","size":1337359,"data":"","first_seen":"2026-02-13T23:13:15.282368Z","last_seen":"2026-02-13T23:13:15.282368Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"21a8447a0ed8cc79261f148289a6e895","sha1":"bcbccccd5b908f7b2f5879c4823bea2cb774b187","sha256":"9d76d4d7f8b8ee3a146282fe1c0d54eff2b69ca4e2255de7d24660d3c2898874","sha512":"1989e1c1b43760bc4bf55d34884fb1da955e98ea88b010a900ea15e173a03d442f3ae310eb43d19eee67dde04833f2bb8f4c06c8bdf2d20a5e62ebeec24e3f88","ssdeep":"3:N/BKL1Xmz2:eL12S","tlshash":"485504d0744430701531dd01d15014555005144010dd0c05705d0cd417330000014740","size":1337359,"data":"","first_seen":"2026-02-13T23:13:15.283773Z","last_seen":"2026-02-13T23:13:15.283773Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-26T04:24:37.308582Z","times_seen":784183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"dba31dceeb69806b16c8ac9fbef6568c","sha1":"29cb7cbecb82b323fb3e5264409d7a345c827db1","sha256":"ffbd0c94bb92217775d09a4cf3bcda7d4ec5d363412a24a0ff5ae85025961b3b","sha512":"9719451bacc27814ee95e9305367d2db495471fc6c231504bc7e340284fa143b3adf4f9560a4dbddcd1a85d23c0c6c2b06c5fd9371db7cae256d7c8604868b09","ssdeep":"3:N/BKL1Xmz3n:eL12bn","tlshash":"b25504d0744431700511cc40d15014555c450400105d1c45705d0cd417310000014744","size":1337359,"data":"","first_seen":"2026-02-13T23:13:15.300296Z","last_seen":"2026-02-13T23:13:15.300296Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b0a8ca747bbe4d556ffdd1c6580a4780","sha1":"a132025636a97206ff79187fe6d41dd30548715b","sha256":"dbf14f4a7dcd5de2e4bb76565e319d113c60484e56ce3488e3b1b5a1caf56237","sha512":"57048e878f2be3c94e3d184462972f38c75ea5935a5b94c5a072bff2e457afb5ac5e052bd26cd9b941a35bb2449d96c2c92ad62d3f4e23eef71c3b2288db1c7b","ssdeep":"3:N/BKL1XmzAVS:eL12r","tlshash":"2f5504d0744030f00515c501d154145550050440507d0c0d705d0cd417300140114f40","size":1337359,"data":"","first_seen":"2026-02-13T23:13:15.302678Z","last_seen":"2026-02-13T23:13:15.302678Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"51a7431a35b16ca4c594c9d8c4422154","sha1":"5db6e25a7be7b48f00ce4405d1b175e4651ada7a","sha256":"28a52bb92781d499e4b19ffb3e30ff28dabb3cd3590e7a63a0e9450ee7af4e15","sha512":"742aa74704fbef37e3ad6be4808b68ca9aaaef5e145fa1ff2c21ff7212cb201982c2352b0891375f7e7ddb35132ad37ba408b1ad87f60056b60033cfc38cd3db","ssdeep":"3:N/BKL1Xmz6UUn:eL12eUUn","tlshash":"fe5504d0744031700515d440d154145dd047050010553c05705d0cd417300000014744","size":1337359,"data":"","first_seen":"2026-02-13T23:13:15.304807Z","last_seen":"2026-02-13T23:13:15.304807Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"753fb89f6908bc13fe29e7425ca7bd92","sha1":"bad8f05564bb09e7f0dd5dec82caca81860743f6","sha256":"2a491f058c4534aefb893eb753c2e41c6c6f87356d993bb9e47869a3a9b8c634","sha512":"8b42a7d49b48907a3224b7f7f4d5d2c627b8469aaf10199757912858e5fedeefbc9623ecb77ad98daecf24ebe106fd46d9fab1635abc77a0a62037e6a1222bac","ssdeep":"3:N/BKL1Xmz5an:eL128","tlshash":"df5504d07c503171051dc400d15014555055044010551c05707d0cd417300000014f45","size":1337359,"data":"","first_seen":"2026-02-13T23:13:15.306731Z","last_seen":"2026-02-13T23:13:15.306731Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1bd962f921a02e15891daf925f32ce05","sha1":"40ff32a0d9e5cb68ee728021f2d273d5c6522cfe","sha256":"51e47bebc67d9e42de008aac7dd49e271a6ee9e4bb3e088351f42d3649c7bb8b","sha512":"185ac752f2746efd6323cc05c1c8a73eda25452d580618121fe973da1c1f2b9af8c1bb1e792cdef572eeb242091c14bb903537e11202896c3d3d832b9fbbab06","ssdeep":"3:N/BKL1Xmzm:eL12a","tlshash":"9f5504d0744031700d15d400d35014555045440110551c0d705f0cd417300000014744","size":1337359,"data":"","first_seen":"2026-02-13T23:13:15.308836Z","last_seen":"2026-02-13T23:13:15.308836Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9c75784fb5e1221e2189bade79d2cc3b","sha1":"3fb6d5a3402d3df36d2952d1b55f27d5b6307ff2","sha256":"2fc701e14f4f178fab7c5dfd03b77bda337a0dde3bbe0d813f4b326611dec098","sha512":"66be8dbff7d354c14b1e4a411cd49e76bad7b05f550569b47b59e6e401320f8eaa85643a17bdb3ec9f43950981a0b334d59f000c306193efda401d6d171a0d4e","ssdeep":"3:N/BKL1Xmzg9n:eL12+n","tlshash":"a55504d074403070451dc500d15034d550050540305d0c15705d4dd437300014114740","size":1337359,"data":"","first_seen":"2026-02-13T23:13:15.31109Z","last_seen":"2026-02-13T23:13:15.31109Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5f0fa22e4da0d6e2fd71d46e9f511402","sha1":"8e155cea6ceebecd428d5a3634a6e3908293c688","sha256":"726db300881149a110668d5f375e5b1c4d0e348f0f95dd8d0f6696528c1f6158","sha512":"ddbae7af2ab6b2ef93cb5542e5e109317a27434b412328e460071883b2d92f49aabfa511bae3a3010df8c06b5702f3382e887a6ea01f060e25b39f01b7b6c325","ssdeep":"3:N/BKL1Xmz3n:eL12Ln","tlshash":"c65500e3b88030b00b22ca00e2a028aae00a088020af0c0ab0ae0ce83f300020028b80","size":1337359,"data":"","first_seen":"2026-02-13T23:13:15.313387Z","last_seen":"2026-02-13T23:13:15.313387Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6895690492d6c89d0ebbfae65b310d94","sha1":"bf5bfd9e5f7d57a24e2c278f8bf6010fcc67e95a","sha256":"59140da302020b3ef5f1fd090499e89779ee4cbfa0882ce6f3dae0be758b9a5f","sha512":"19fa1f934a20680df7acdff588eec3d92cfe0273b92cebeaa2683ce2f64127ba1ca1963010e7cb8c0653fffc5665c97ba70286ebfa00a153ff5e76feb4185309","ssdeep":"3:N/BKL1Xmz+:eL12q","tlshash":"0b5504d1744030700751cd00d150145550054440105d0c05705d4cd41f300410114740","size":1337359,"data":"","first_seen":"2026-02-13T23:13:15.315394Z","last_seen":"2026-02-13T23:13:15.315394Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b9d57a74b58edef511418d8615042522","sha1":"a65586c63e4240f83cd648b72e257e3671b3e0a8","sha256":"e8ff7f2e0e9c5af1916e26de5cbd9bc998860a7dda45afec5576e5ee7ca7a3d3","sha512":"1dd6a11d238c5644aae3f8321bf595aeb46eff99d5073be7f9bd656485edca8b9de09ac2bdb8251ecc480b9786dbfaa8389a3b1cb0872801e3e602a7aaf81b4d","ssdeep":"3:N/BKL1XmzGQT:eL12rT","tlshash":"a65504d0745030700515d500d15014557005044010dd0c05705f0cd517300001114fc0","size":1337359,"data":"","first_seen":"2026-02-13T23:13:15.318389Z","last_seen":"2026-02-13T23:13:15.318389Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"58195b08bcbb9499ae1a4ee9e440c0b5","sha1":"a53fedbc7ba9aa7acac95a146638757944d6c134","sha256":"65bc64f6990c0c96657f527c2a2ac74a92d035520274714b18b3ee0f083193d9","sha512":"4807c893b1693705a550d2fb93dc684d74d837c61bb2a56b4b1af865f32205e37f1987287357750866384cfce80cef9a681d317efceb0e60fed21469e11d48cd","ssdeep":"3:N/BKL1Xmzkd:eL12gd","tlshash":"f15504d0744130700511c500d150145550054441105d1c05705d0cd417300500414f40","size":1337359,"data":"","first_seen":"2026-02-13T23:13:15.346898Z","last_seen":"2026-02-13T23:13:15.346898Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"71fbe04510b342b91b96f9fc4fa6e8ce","sha1":"3b5613826a4352790a81a154207c55c32a522baa","sha256":"1c9403ebdf9fdfc3ca320c50e6514e0842f9f1dec2f0aaaa79dbfdcfb5839c8e","sha512":"fc2b082f9a9622bcbd50ce5e57beeddd88c9889235fa7bce1063667c9038e54553a950811dc2f453e8397b27b027c68de599a4efd98ead4387544043dd1c11f1","ssdeep":"3:N/BKL1XmzPUn:eL12gn","tlshash":"425504d0f54031700d13cc00d150145553450c0414571c0570dd0cf4173000001147c4","size":1337359,"data":"","first_seen":"2026-02-13T23:13:15.34953Z","last_seen":"2026-02-13T23:13:15.34953Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"35a964154ad94f1f54fd570767ed0f7d","sha1":"3e2c26d7e780ae64feb3971547820e1f7a5fef69","sha256":"6839f5d56d3d76ac555f2528c09d6b202dd42f1c2c9529a4ddaf3b22ab2fd555","sha512":"5f9fdf1589fa0ac00b3824411396f0af3dd824f7b2d87bfae4fd9fd7064edabe010068a0820c5ab3f6f4496a4fe12735fc05ab16f6e6cb382d5d41144bc4d3f7","ssdeep":"3:N/BKL1XmzsW:eL12IW","tlshash":"ac5504d1744031700711c404f55014555045040010551c07707d0cd41730000001474c","size":1337359,"data":"","first_seen":"2026-02-13T23:13:15.352925Z","last_seen":"2026-02-13T23:13:15.352925Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"10475963170d34d9522a5aa003fd42d3","sha1":"33f1795f95edbf2c045c122c9a531b846974efec","sha256":"aeaf2eb04cc522e13934c66f9d6422aa7ed48be2c0c00c8a54a7a3501ba27bff","sha512":"6d3b92c8f4c0a8f9bb247afedca114bb8c54bfb2d6c4f6e9c417f0fb36f523ea93a71e07247010cd255e07247c45e39c8a1a8edb10050281fad9df6f6ea16e2f","ssdeep":"3:N/BKL1XmzNWW:eL127","tlshash":"d55504d07440f1701511c404d15014d550450c0450575c05705d0dd437300004034744","size":1337359,"data":"","first_seen":"2026-02-13T23:13:15.354713Z","last_seen":"2026-02-13T23:13:15.354713Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0ebab2c207785036799cf9d8961d66ca","sha1":"9ccea0cbf158d0f4001d807345ae0fc9e0f80203","sha256":"e3a6521c41e37e4e1900580beeb202adf895e8001246afa6695865ac41900ade","sha512":"05c569118555231940f3a1a63372eb2d4c6a3ac2243da56691b98c7da044180270af0ed81dba38e2eefc05b9b5ca2eda0e38d0cb86b242bfa1399e9e86a63903","ssdeep":"3:N/BKL1XmzGU:eL12CU","tlshash":"735504d0744031710511c450d15014555045040450551d05f05d4cd41770000c014744","size":1337359,"data":"","first_seen":"2026-02-13T23:13:15.356793Z","last_seen":"2026-02-13T23:13:15.356793Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d69c36aea4ffd8580a6ac77c05719385","sha1":"7d66a2983f53a2e64cc5611a29246b6f563f6f55","sha256":"51aeac56097ee4747ef0fc7224587a869841a4fde85d6ea475e67eafbc092e06","sha512":"711d608ca99356aee544bdd679eb8300839a4867b9395165b3100754110cbc43a677a8c73c86ad9fa8a01db7fec7437ca69cde4a6f9ec00f2a9089a4704e25d8","ssdeep":"3:N/BKL1XmzrQWn:eL123Dn","tlshash":"345500e0b88030b00a2aca00f2a03caaa00a0a8030ae0c0ab0ae0ee82b300200028b80","size":1337359,"data":"","first_seen":"2026-02-13T23:13:15.358725Z","last_seen":"2026-02-13T23:13:15.358725Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5a13d0a627fab986a9454d93caaa09ff","sha1":"d7db45769a4bf20f19568f6d70574ec5f71e501a","sha256":"fe029ce751c9e791dfcb416e5e2ee5b8a4f1fa071114464b8a1eeb1ebc7ff7c5","sha512":"f6f752d4a0556608edac0fd7972e51e3dac5229317e37200ae4187a8ec8e3ae59330ba92d90eb58162192888644b2140f126861ee31d0c2b91515cc4e2bd5468","ssdeep":"3:N/BKL1XmzM6:eL12l","tlshash":"d75504d07c4430f00511c500d350345570050544305d0c45705d4cd417300040014f40","size":1337359,"data":"","first_seen":"2026-02-13T23:13:15.360214Z","last_seen":"2026-02-13T23:13:15.360214Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"christmas-wifmas.xyz/cdn-cgi/challenge-platform/h/g/flow/ov1/446083495:1771020575:hCMgFuJwfWqepWlo1k0QxY-EVlNDKibEvGB1qOj7cQ0/9cd802ddcd161a30/.KxbWTN9dSFNYJoZD5nQnAHTUprehpHXzkksuK0BgFM-1771024352-1.2.1.1-zIOhI3e56bFV7ZbGalJX5peJV5ZMPaJOjxKudcI4CbCj.Yi0faUDE4i4M.XlH2XO","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://christmas-wifmas.xyz/","date":"2026-02-13T23:12:43.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"christmas-wifmas.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 06:03:48 GMT","end":"Wed, 25 Mar 2026 07:00:01 GMT"},"fingerprint":{"sha1":"3F:F5:23:B5:FF:82:F1:21:26:F5:AD:E4:22:77:33:B2:55:6C:8A:10","sha256":"58:FC:A7:EE:D0:F4:6F:8D:6B:20:4F:24:94:2B:C9:4C:07:7D:F4:89:B8:3E:16:DA:F5:8B:E4:C9:B2:FB:02:A1"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/flow/ov1/446083495:1771020575:hCMgFuJwfWqepWlo1k0QxY-EVlNDKibEvGB1qOj7cQ0/9cd802ddcd161a30/.KxbWTN9dSFNYJoZD5nQnAHTUprehpHXzkksuK0BgFM-1771024352-1.2.1.1-zIOhI3e56bFV7ZbGalJX5peJV5ZMPaJOjxKudcI4CbCj.Yi0faUDE4i4M.XlH2XO HTTP/1.1\r\nHost: christmas-wifmas.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://christmas-wifmas.xyz/\r\ncf-chl: .KxbWTN9dSFNYJoZD5nQnAHTUprehpHXzkksuK0BgFM-1771024352-1.2.1.1-zIOhI3e56bFV7ZbGalJX5peJV5ZMPaJOjxKudcI4CbCj.Yi0faUDE4i4M.XlH2XO\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2732\r\nOrigin: https://christmas-wifmas.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2732,"data":"s-xMvmTrNnSfCF$VsiM4REbpJL1cpNFCcN-IuM6akmM$OoobDu+Wi40f6gJTSHoT9lJzQF-745-vNvWWIWN5qOmVtdk+ZxT7$Ivt3r0JXRMbk9F7xaB3erZ15HvlWYoi$pQax-giH-nV5khpQogNdzhD-9BIPnO5jjlDEuFKEt4JHwD4$Red94pPwHLm+npHbj70BQlQAhf7DGfNpNhI3biFDF8ZnI4ldu$b685Ymla5BCQxZs4MPOFwYplVOJjFHA$vobQh8C7jDOpcQhJt4Cv8-98lmpM8yQvHbije9eL$6p+sQwGtoqoHf8mnnl+VfrIR9-YvkPQFsH$hGbXxZN5X7B6ZRkgNEY7jU491aBOwIldZwqeKNp0S7p8g5R41S5ooJ+FJugqMx63KSz$PZmOD3TBNq6M3q570pMdV9jDMuu4Zb$PgN0xuL0DOdjpOseBIU03X7Eo-ulNu14l4ELWyhvlH9VW4s0mKiSYX$QxE9bb9HMb+VY+XLLhs-CB$wgKAVf5BRTYjyfvBe0qvUEda8Hd0BtN-ZLgvBren0k8mwEdNjXPNY1uJ5QecBwr1WEsqxBcwpopyUunh3wSM+nPAlAD$BHjTWT5kh7o15s17ccnwO8h4KM745QNvJiYtpMqLHf1kuKAlNIEpbt6LZU-ROTt94k-$wdh4BluiWNwzybzjFIYMrKk1J$HIIIx7Fi6z+3Arqn-HOvm$Io63-nVh5n7DPSq7smBFRmurwZ3BrQ$VP1tOMv8F0jXWxthhHaOOatfZsjW7dfotIl03DmFxS1Iy$AXtCqSMpZtz$O8teVS$AitmKs0+XyzIWyKGtnIIhfXeEwoTHHJQ1YOyaBAXK-GE0qjVswnDELcSwsb9WUuw+SXO8xacidzoXhIwXBanj6rTr0oAlBbohEPvuocDfX4DCz1vOW467NbAN5eghdFkirVEt6QIMI7eZBbwR4N4KTg5LYqm6RicNzrn-WA91kqeHRb79I17Urf-tR$ysquY5rKPbDkepgXQM+XomQG4tbnit8SgaGo7ay0TnmzjZ9GYIy5s3XhS3+0nAMQacqb4Bvs5GaMJbIjAZkV1h7jpDVzXfmdcGJNlIwoJdxztIl3fEkgmTLMjIkFPtSP3tDqh60emKcXMri6ivHEA4egB4v$X3lE7nwQxKllzag5oGRSLCayCdohcDm8UjpAZYqmozaA0$W8uiD+VghChswPPXoQIhmbGmTsW5bEbhYJqe66+bKXQccPHh$$Ghml5UTDRg9m-GPnrTSuOPuyZ6EouwdydnWK+LbwlD4NUugJcskQABsjtuOjnMBfUDmVEUGLLu-Zspgi9gvvp4UFbKyvoLxX0ixonD3ASPVaXBIKnvZcEoagpIGlsUAxF0uT1p-cid5ZoGRbId8-BhMKbbwV-JuMeHm93DTDh3fmUB-kuBs4kowNzj-8qG7V4oD+U3dex47R060Z-G0b7wgC6fkuJpy$NjhrirURE$S5kttvr54fEBXe$+UZR-qaZH9GySha0f+loecdGPiY0QDVil$$awNRhkPUg64taEZn$cYVQWrt0Lgq5APaYm9qMQANNLETaQjCzurjAN6e19k$zKv7J0HulDntt1Z5Q6I+ZfMKcdBZ7dMSFRuOo3GYOZlK+XcbW3MFfvlI4mI+4Et4zkJMSo3bKi$FWpZAyLeAPIJkvW6DMBOCt4SVU$N3nf0PaNLOqv8UDoupaXS0Gs18EecGsQk-HuwZVs3KfUtIXeenF17XCDRrty0+avY5v-bXbwk9aPSbPpjZUyQB9Py96E3uHRnNulrmf$yJOxb3JgONvStLDVveK$Jjq5aSDMQAOMa-$m7lL35mE7E3j9NSYfFusmWXiVb1dnZT1eQWRla7aFGbH3ElAqaUQe71ehlxuBkpOzYV+0jYFlFv$kvuc0y79pzEWgroJAPSCat1P8c0dsV9wS+GsTKpISTDEXoc1h4hx3NGCRr5RpOrXvri44F30bec881oj6pMN1rrzqOxTPBTJIob-moCbTqqj4kfT8tiZ+78-Pvo+$UqJx1ebdUas5L3P+JEnr-Pe7mhicx4OVUSHmNYmQISCaFDKXMQ-YTbaWYJ1UkaYDOcQNBY$MKK+TC1U48CEjKM8++l-OjK-cuUvesELV+XvcVvs68rBoa59kTeWsXKpbyUR9FqGsnuuu06vSC3ckgFU6fiC41NLlS6QMoSMaeahRu9JtRZVffn+mThFFiP3BVLcnjaMt+Ir7$D83eMF6bvPA3u7i9$tuOTi35sQ8QaR-7X65tA8yUl6d+roJELC1+S5CqXCNwfxCjgFmFxURJOjZiyFpMRxA+etxklkaHUryfOuYOm69Iud+1$LJkiCr$EBdGfA6UnY+rNw4VphhowF$L0m1-dFyGvp6$3orv8DE60cKXc7Ys6Kje-ia7Bh-WeyPIgX6e+3nT6ZwXJhNU3xLeQVefbhqVGWtG+w1Is1URqH$W0RzaHSipewWMvd0MNtXyGc$OumCUWxV7c-dr4rn7HqIpz5mMVXw1DmgckEfPrmvN00AOEvNL7DVCkqRoE0FqsdwldRThXq6+ResQPqrJPztjEX9iiHPJRqqKJ8$iVc+kqffpb-43NuwFuAMf3hK8-1sWQtSjV-xBzpGOvqbt59TiS9P-LRDQO+hhpD7f7eQxxNxC953GkyoYQ71GQ5TJGtMyc0s77ND30nB-uh7NArNmZQFXfSTA61pR0VJNn1bDmy"}},"response":{"raw":"HTTP/3 200 OK\r\ncf-chl-out: 2qIS8Out3u2Qv3nGlGFweBwgcq0xzFdiMOmxpmwLCAhIaoRisXUSbnqBewVCPAvuVs/2yJHALtWS04fNOeQKkIP3Uz2l7iS2Pc+SSZ+Z1GU=$y8DkWR85aWIyQItY0FEZzA==\r\ncontent-type: text/html; charset=UTF-8\r\ncf-chl-out-s: EbaIvUaWpV2Pw4y4zPdnrP3C4L+1nl9r61l0/3/TZbYR9KB9Ovj8LlKybMPoY2w6hHtub4zl700xOWX2WuHVK/D0Q5MgCQZkvKrw4wgENgpFlhIHRn+B0/qMMX66OUgeXlqF67HHfLnAI3fphEcsGAtP3lGC7UL3CfvM5yO5ZNDCUaYvNiUTYjDn/MIIdqvH/drc6+lHOjBi1nKPu7T/8AmbMXriyxqCm1OvOqwYHbmYM+ex74esJUnwOFR3UZ7autNiAuReRc84eIBC6MCJwDBGLDmkXYn5GBI1s6cRWbk0bht/MPALRINGagAF91HTckmWRh2gO2EX+KzZ50apYgneg9b6OqrnzyfPOnFQDB7QiNLh6G11cfCiDFK2PrZeA8KI5CJrelc1isS/E4VUPfVNmcbN2Q+vUHa7l1Km6+wrfkGW8isvPzZIFnmeDaQol1DT6gRDG9TwaoYyQMHtwQ==$Ah6vB9JAzeW4QsVL/4Kc8Q==\r\ncontent-encoding: br\r\ntiming-allow-origin: https://christmas-wifmas.xyz\r\ndate: Fri, 13 Feb 2026 23:12:43 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9cd80320284832fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3084,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (3084), with no line terminators","md5":"5c90d512e88508c54c0b5f2f15a2c2c8","sha1":"5726949f97df19131bc25960a706354cd956f2b5","sha256":"0151a79bbf276d0ca420013e8ab269f40e1918e5d9681238caa3f2085094bed0","sha512":"87ef0417dc664fdcd3d8458542d2853e7ed3cff08011963e8d42d4d73933530fcca40ad56871e05e94f529bf4ecb0e35bf3aaad828e6e04b5c27b749e4a79227","ssdeep":"","tlshash":"88515d7085a5792e1b830255eac13191deca770d68cf347a0e903a7b21377f4081d220","first_seen":"2026-02-13T23:13:15.252476Z","last_seen":"2026-02-13T23:13:15.252476Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9cd8032d0a7f32fa","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://christmas-wifmas.xyz/","date":"2026-02-13T23:12:45.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"christmas-wifmas.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 06:03:48 GMT","end":"Wed, 25 Mar 2026 07:00:01 GMT"},"fingerprint":{"sha1":"3F:F5:23:B5:FF:82:F1:21:26:F5:AD:E4:22:77:33:B2:55:6C:8A:10","sha256":"58:FC:A7:EE:D0:F4:6F:8D:6B:20:4F:24:94:2B:C9:4C:07:7D:F4:89:B8:3E:16:DA:F5:8B:E4:C9:B2:FB:02:A1"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9cd8032d0a7f32fa HTTP/1.1\r\nHost: christmas-wifmas.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://christmas-wifmas.xyz/?__cf_chl_rt_tk=Nc46OQE9BqlxxkqshZoex6V777GRcBgLC_MmBAWqhTE-1771024365-1.0.1.1-DmrpT2NtvlBCvFVEzbuELFLN7Jh43Z1eKtLneyaGW40\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncontent-encoding: br\r\ndate: Fri, 13 Feb 2026 23:12:45 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9cd8032d9ac932fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":164209,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b05d333a354aef079ebbb8fcf41c9b16","sha1":"a41106b93ade683a3d29ad522d641cc51b2e5f33","sha256":"2ccf6f89b767550ce0df0d70da8c1ba88ee683fefa08e93c7135aae15b1f0739","sha512":"b1c0131564a65c17a8fd2ed55b133e9c8e662be9ef0f7750643d954e524a381a5867686eab1c1d41c5fb68a82c035ff48a7e8b72620d8d62d4a338e49397baa4","ssdeep":"3072:0SvTH4Vo2MM+DUZ2SUdfnwId8Pep8zORiUO4tTcj87YU92aeZQrTRpOI0lNls7xS:5vTH4Vo2fcTRT0lTrH","tlshash":"3bf3ea4d3bdb74434122247431db616a731758843028386ef8509ee86df6b6cfeab7e9","first_seen":"2026-02-13T23:13:15.253422Z","last_seen":"2026-02-13T23:13:15.253422Z","times_seen":1,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/favicon.ico","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://christmas-wifmas.xyz/","date":"2026-02-13T23:12:45.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"christmas-wifmas.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 06:03:48 GMT","end":"Wed, 25 Mar 2026 07:00:01 GMT"},"fingerprint":{"sha1":"3F:F5:23:B5:FF:82:F1:21:26:F5:AD:E4:22:77:33:B2:55:6C:8A:10","sha256":"58:FC:A7:EE:D0:F4:6F:8D:6B:20:4F:24:94:2B:C9:4C:07:7D:F4:89:B8:3E:16:DA:F5:8B:E4:C9:B2:FB:02:A1"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: christmas-wifmas.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://christmas-wifmas.xyz/?__cf_chl_rt_tk=Nc46OQE9BqlxxkqshZoex6V777GRcBgLC_MmBAWqhTE-1771024365-1.0.1.1-DmrpT2NtvlBCvFVEzbuELFLN7Jh43Z1eKtLneyaGW40\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 23:12:45 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Thu, 25 Dec 2025 06:32:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 12\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uyfcMRXPfGEQHQUFDlLuCsQ0IZfzu8r5NMqgNKGW8XOqsZDVS2QPMGqVQn7L0LAlLcqX0D1mYQGEWAoUuDcPzh1MmbxA%2FbIsI1oPgNkP%2BGMml5p6\"}]}\r\npriority: u=6,i=?0\r\ncf-ray: 9cd8032dbad732fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13932,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7b7e8569454b62416129154930028a5a","sha1":"8832a9d858e1a5a8156b07d3a2c5a5a663285cc1","sha256":"47013ba3a42fc0e98f65d0b724bb28e43ab3364a549cce1960b93c97446855a7","sha512":"67620c53a403f584d49749b6ae76feee06c690c3fde4061d1931933b68d971890348b0a6237bb1141d13d1ef817f067920701936c7ee3b5dff0fa3d4ba17ae3e","ssdeep":"384:RVMJoeVtk3A1gAkHM36gMaAGaKfxy4+FFu1nUaBbMOTMmjH2li:RVMJoeVtk3A1gAkHM36gMaAGaCxF+FFE","tlshash":"f452219a56d31201b447f0b52ba74b1b26b6d903e88fcc2c37ad5248cf55de4ca9336c","first_seen":"2026-02-13T12:40:42.342208Z","last_seen":"2026-02-13T23:13:15.254279Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/cdn-cgi/challenge-platform/h/g/flow/ov1/446083495:1771020575:hCMgFuJwfWqepWlo1k0QxY-EVlNDKibEvGB1qOj7cQ0/9cd8032d0a7f32fa/.vY00rVzvToIaclyUUdktkINVIzngH5JSlLDo9U.vyA-1771024365-1.2.1.1-X4hvPWAyED4m7DuIVPGkKRcMJ5epRtie4h_Rks.3hEVjCk3c4XDn6uwvo6IzUmnA","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://christmas-wifmas.xyz/","date":"2026-02-13T23:12:45.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"christmas-wifmas.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 06:03:48 GMT","end":"Wed, 25 Mar 2026 07:00:01 GMT"},"fingerprint":{"sha1":"3F:F5:23:B5:FF:82:F1:21:26:F5:AD:E4:22:77:33:B2:55:6C:8A:10","sha256":"58:FC:A7:EE:D0:F4:6F:8D:6B:20:4F:24:94:2B:C9:4C:07:7D:F4:89:B8:3E:16:DA:F5:8B:E4:C9:B2:FB:02:A1"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/flow/ov1/446083495:1771020575:hCMgFuJwfWqepWlo1k0QxY-EVlNDKibEvGB1qOj7cQ0/9cd8032d0a7f32fa/.vY00rVzvToIaclyUUdktkINVIzngH5JSlLDo9U.vyA-1771024365-1.2.1.1-X4hvPWAyED4m7DuIVPGkKRcMJ5epRtie4h_Rks.3hEVjCk3c4XDn6uwvo6IzUmnA HTTP/1.1\r\nHost: christmas-wifmas.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://christmas-wifmas.xyz/\r\ncf-chl: .vY00rVzvToIaclyUUdktkINVIzngH5JSlLDo9U.vyA-1771024365-1.2.1.1-X4hvPWAyED4m7DuIVPGkKRcMJ5epRtie4h_Rks.3hEVjCk3c4XDn6uwvo6IzUmnA\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1986\r\nOrigin: https://christmas-wifmas.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1986,"data":"pPmeVrzoRwXfBQr5Pi+pQI+nZDdRL$1Wt39$xqrS$xaRMnUYJCBpQ4fuuTPeCLx6L8xZNXic671K963TZMCqXwQCfv98CHkGM3DRAQEliEzbZ+zkGCI7X+oHnkiASe9c0DCVzwLixcTpxQFA-t$jrW5Gxp+CaalMPHIKjodU9xv58MEmyWs0+JauM+x7S0mWaanPeTVjHGb9dgGeOVzMvEThMqD6xBDU9TJvbMHBvLAu6gvKdR18uigssP-pjsnbWWhNQm1teHhsuWnl$NdQImqmm1$ds4DYRTNDjYR3630JBqADiZ6RP8c$cI-ilugeLZRWQttpOnHz13sEILdCN05viqAOIKcayeBtis0H9i$Ib8v1qcmM4RpIGDzXabBP+5CCBOSUJCkULyAAXPoz8m3yC1n9Z+wToyzGeBwqdXPURcnTX71dsovqedBE5KUa59jTVbdP5ErrTC37z+bEvjtnJt7H7c5vOPOJEbk5lXlBDuD-J39QpKNafNrxNuKeuaKCkgXk-OBCsDhh4Y1A+kDNMK$$7rVDYcOUZ1iR5+ThmF6iEHeI-neoJhEBNnDPdL0ilSx4xtqBBP0ZZPro8nuwEar9ElIYuPvWTFJ$AGCHOt+xhk4mEhYzQ497Yo4JB5Zo18EhYMwaazgac1AiygLH6AGML5CaB9B0g4mXstR$QpazMQVCSOzrR-9-fLeOuH9J8MSASYIEhhP+5qPR7RCXBHUSDotR09plphuXvN5soJqdJPAflWCMRhMlETMqkHr3Grg4wSSmKksHXovK+sdsvEdrZU+-d7STqbNlKiahrL7olR-q$mSj7cXOvlz5qFbWOiOkTJkwSc7d3cHW4PemhHuTnEKhwDOq7Of5++9el6L1fQbhrSpwSzh+dpGThc4XnrpaMlcXmdo6RqWgVhgyhuLX$EOvVRgAiQLLoNjJhbuTSNTHazVrdqXLzwKJh7dDA4TCiNXPtScfB1GFdXs+dLmbji5Ls19eICDOWvntoJfoPfGTlQw0WfblvslTROaE9$E6Njj4UqFjm7X4ei8RArvnWoDWc$us56V4PwYsQTSKC38C3GnVbOiUpgbey8cKBzesY8OiZn61EKBWOEvC5+vuSMC0M0$F4aHafIRVXIY+fo9UmFut5lj9vpxRfGCdVEDgm0vR0XBgilsTj1aXNVUVWBY0C6v1RlL1ogXgeowNgUNI$+MPOikKmRJfXWzZq3l$tsYGnmCG8CnN1Tnr7A-r3Y00VXoS3oSaPcKC-Tdm0KurZD9digm$+gp8U--IbMvc1XaFSjedLvntiVtPcbzrzdekVxI3z+KxszSMcG+MUplumt4VP9PZb7Xp5CD-m86KyhVAcIBwaIpHRZl7E3uC-tVgx99FyhIkNiNkq$gP7KyGoOuNkNXOi7pZB0FIdEW-sloqMGSSoMp$fmmiEqy4GxWCVeRkwUljXIwXB9njNiK9uHYv0bzdZbWzGCwGz0pmuz$J8XrZ3cjm11dtlihZnsQQfZ5CFsW+LnI5933yc5Gt89Ee-$yP056EsV34zkZ7ncNHg+f3NPiUCPQbIKD8NSQRXbimaJWr1ti5tA05+DtkTj$uoKInm7fJpWruMz50kj8AeAZUuwZ58FZ8jyVzh0b7cQlJVN$7RBQXHm6oN$ttFngj4+pEseB0OH-UlvfpSjHV7$51hUSm4wrdKGSycNwR0gIVO+JnhDQFZ1Si8iYoeqFbLsLbliO3suRe-uwFxMjQGkb55c$QQy6tMXK9+8na1qaLrgd9FL-NRxzoY$7KYRSrxr-46xKlhgT0n4p+kmnO7g9xtP7bVYOmZPOBm9a-0tQd7Nq1P6df6PfKF91RvwahFd5AzkXS79ovcTZ3NhmQMndov5s7JnfrKY7HIxbZ+bF6SUsFqZ$8jZdrqn93B39YIRSDxs3KPjz4hmvAotF4ywFbCwaVNPlrDu0j$PyGctp8ahzahCtLvNoxBuFTC7n61KedHQj6lt"}},"response":{"raw":"HTTP/3 200 OK\r\ncf-chl-gen: B8eq/pZEoPT/qWOCLtEVb5GGRydfycSuzF4DnecaeQY=$wHFcJuI/53Woa3kRWhhFrw==\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: br\r\ntiming-allow-origin: https://christmas-wifmas.xyz\r\ndate: Fri, 13 Feb 2026 23:12:45 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9cd8032f2b1632fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18368,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (18368), with no line terminators","md5":"84aa1c2c632e1028529015f4332d6d00","sha1":"c9e7fa0e5c781420d052c8c9992b8a0c82efe8eb","sha256":"ecb952851a429f72e64bcc0b6941becdd02a856fcdde6fafd7343d9672cc341c","sha512":"4d66627b7cda0ea3391922da9f47abd0735c7ef7e3818075f3ea1111c0103c1e871040176db1257b8a2f9510cb57184b6cdd894af7129a37d1756a27b2c0b7f1","ssdeep":"384:fI8vw7uxm/03n/qBLbuB9EfF8UvUy1M3ngYFkHlAIgiIO:fpX/Clu9uM3gmElAMIO","tlshash":"4582cf4f34eff55f28e7332f038288f55eaa83150798a57cd1a953690889e117b24ef5","first_seen":"2026-02-13T23:13:15.2552Z","last_seen":"2026-02-13T23:13:15.2552Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9cd802ddcd161a30","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://christmas-wifmas.xyz/","date":"2026-02-13T23:12:33.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"christmas-wifmas.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 06:03:48 GMT","end":"Wed, 25 Mar 2026 07:00:01 GMT"},"fingerprint":{"sha1":"3F:F5:23:B5:FF:82:F1:21:26:F5:AD:E4:22:77:33:B2:55:6C:8A:10","sha256":"58:FC:A7:EE:D0:F4:6F:8D:6B:20:4F:24:94:2B:C9:4C:07:7D:F4:89:B8:3E:16:DA:F5:8B:E4:C9:B2:FB:02:A1"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9cd802ddcd161a30 HTTP/1.1\r\nHost: christmas-wifmas.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://christmas-wifmas.xyz/?__cf_chl_rt_tk=w4DgL3GUSRvTh9Y.tUhuIuQCu8Vwz.FYNhe9xG0bXgI-1771024352-1.0.1.1-PWrauBOLgC06wywrjCLK1gBJMDl8lSHqs3wGeRFZvqk\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncontent-encoding: br\r\ndate: Fri, 13 Feb 2026 23:12:33 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9cd802df0af032fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":164209,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"600b770a812977a5f2616b29e3699e42","sha1":"de7138cb5094a9bbeb21d203156d2591b6ed3b28","sha256":"a3386342b938ba41ba28da4cdf6a97546eea19192ebfbfa8680cbc33b271697d","sha512":"a276da3b674a4ecb621bdca0ea3d0da426ec6cdf2a8160bfe31a5c9698e2c9e052d4027001f9b69efcc79d512395e039a3a76343a26195ae13a15a75d2b58c85","ssdeep":"3072:QHvOZtKwgMM+DUZ2SUdfnwId8Pep8zORiUO4tTcj87YU92aeZQrTRpOI0lNls7xS:yvOZtKwgfcTRT0lTrH","tlshash":"51f3ea4d3bdb74434122247431db616a731758843028386ef8509ee86df6b6cfeab7e9","first_seen":"2026-02-13T23:13:15.255974Z","last_seen":"2026-02-13T23:13:15.255974Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/favicon.ico","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://christmas-wifmas.xyz/","date":"2026-02-13T23:12:33.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"christmas-wifmas.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 06:03:48 GMT","end":"Wed, 25 Mar 2026 07:00:01 GMT"},"fingerprint":{"sha1":"3F:F5:23:B5:FF:82:F1:21:26:F5:AD:E4:22:77:33:B2:55:6C:8A:10","sha256":"58:FC:A7:EE:D0:F4:6F:8D:6B:20:4F:24:94:2B:C9:4C:07:7D:F4:89:B8:3E:16:DA:F5:8B:E4:C9:B2:FB:02:A1"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: christmas-wifmas.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://christmas-wifmas.xyz/?__cf_chl_rt_tk=w4DgL3GUSRvTh9Y.tUhuIuQCu8Vwz.FYNhe9xG0bXgI-1771024352-1.0.1.1-PWrauBOLgC06wywrjCLK1gBJMDl8lSHqs3wGeRFZvqk\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 23:12:33 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Thu, 25 Dec 2025 06:32:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xrn4YlV4xomvYSA561V3aLT6l9%2BRTGAkOUrYPk8IItvsy78saaI83qU%2BwEZFF9oks3qutpcZkkMYFEnoaTM78b9fiqy91jYv%2F1EBNprJDVDHhyur\"}]}\r\npriority: u=6,i=?0\r\ncf-ray: 9cd802df3afb32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13932,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7b7e8569454b62416129154930028a5a","sha1":"8832a9d858e1a5a8156b07d3a2c5a5a663285cc1","sha256":"47013ba3a42fc0e98f65d0b724bb28e43ab3364a549cce1960b93c97446855a7","sha512":"67620c53a403f584d49749b6ae76feee06c690c3fde4061d1931933b68d971890348b0a6237bb1141d13d1ef817f067920701936c7ee3b5dff0fa3d4ba17ae3e","ssdeep":"384:RVMJoeVtk3A1gAkHM36gMaAGaKfxy4+FFu1nUaBbMOTMmjH2li:RVMJoeVtk3A1gAkHM36gMaAGaCxF+FFE","tlshash":"f452219a56d31201b447f0b52ba74b1b26b6d903e88fcc2c37ad5248cf55de4ca9336c","first_seen":"2026-02-13T12:40:42.342208Z","last_seen":"2026-02-13T23:13:15.254279Z","times_seen":2,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/favicon.ico","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://christmas-wifmas.xyz/","date":"2026-02-13T23:12:33.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"christmas-wifmas.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 06:03:48 GMT","end":"Wed, 25 Mar 2026 07:00:01 GMT"},"fingerprint":{"sha1":"3F:F5:23:B5:FF:82:F1:21:26:F5:AD:E4:22:77:33:B2:55:6C:8A:10","sha256":"58:FC:A7:EE:D0:F4:6F:8D:6B:20:4F:24:94:2B:C9:4C:07:7D:F4:89:B8:3E:16:DA:F5:8B:E4:C9:B2:FB:02:A1"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: christmas-wifmas.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://christmas-wifmas.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 23:12:33 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Thu, 25 Dec 2025 06:32:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 0\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CFpK7prTr%2FaG8aWlYdmU%2FL%2Bjo8toHDJVmis7vfm5wQvxpwSlpAqyOiE9qrbQF%2BB8xlyZo1evCKYz8lHb45AcFJeHsfUJsFNIkix7t%2FpIn1RFn7oD\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd802df6b0832fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13932,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7b7e8569454b62416129154930028a5a","sha1":"8832a9d858e1a5a8156b07d3a2c5a5a663285cc1","sha256":"47013ba3a42fc0e98f65d0b724bb28e43ab3364a549cce1960b93c97446855a7","sha512":"67620c53a403f584d49749b6ae76feee06c690c3fde4061d1931933b68d971890348b0a6237bb1141d13d1ef817f067920701936c7ee3b5dff0fa3d4ba17ae3e","ssdeep":"384:RVMJoeVtk3A1gAkHM36gMaAGaKfxy4+FFu1nUaBbMOTMmjH2li:RVMJoeVtk3A1gAkHM36gMaAGaCxF+FFE","tlshash":"f452219a56d31201b447f0b52ba74b1b26b6d903e88fcc2c37ad5248cf55de4ca9336c","first_seen":"2026-02-13T12:40:42.342208Z","last_seen":"2026-02-13T23:13:15.254279Z","times_seen":2,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/60138c04e6b2/api.js?onload=sOTSZ8\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://christmas-wifmas.xyz/","date":"2026-02-13T23:12:33.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"GET /turnstile/v0/g/60138c04e6b2/api.js?onload=sOTSZ8\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://christmas-wifmas.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Fri, 13 Feb 2026 23:12:42 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6500\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nreferrer-policy: same-origin\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nproxy-status: Cloudflare-Proxy;error=http_response_incomplete\r\ncf-ray: 9cd802dfa8f8783d-OSL\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6500,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (396)","md5":"7c2fab3c38bcc48c882acedddafd3188","sha1":"04c682b67be5ddfafe6c320bc8f71e09c052145e","sha256":"d0ca9ee393db6cd9fddb1899db687c9125999bcf632ed9ded362ab585dfdbe4a","sha512":"20c3c18597880b728c1962c2fad179133dc43f2cb4062fd546fb776abbe1add477859274f23700233155c61025bbb3d6a4133494fc17f0f9e78ef5131588e533","ssdeep":"96:1j9jwIjYjRzDK/D9KULWG4Fh8/24FZx6G4Fp+ykKmEkmniDA7RLl5aQxP:1j9jhjYjpK/BWeMlVEnU71lEeP","tlshash":"87d14571b1f512b610a382923695fb1a79e0c613cbef5494b3ddc6632fdee81a903194","first_seen":"2026-02-13T23:13:15.256848Z","last_seen":"2026-02-13T23:13:15.256848Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9735,"timings":{"blocked":17,"dns":1,"connect":1,"send":0,"wait":9697,"receive":1,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-13T23:12:45.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"christmas-wifmas.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 06:03:48 GMT","end":"Wed, 25 Mar 2026 07:00:01 GMT"},"fingerprint":{"sha1":"3F:F5:23:B5:FF:82:F1:21:26:F5:AD:E4:22:77:33:B2:55:6C:8A:10","sha256":"58:FC:A7:EE:D0:F4:6F:8D:6B:20:4F:24:94:2B:C9:4C:07:7D:F4:89:B8:3E:16:DA:F5:8B:E4:C9:B2:FB:02:A1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: christmas-wifmas.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ndate: Fri, 13 Feb 2026 23:12:45 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Rho1RTONw8XMrIjopXLLEa2B7GtyXYfYT4rsi4bjxSlmhyVywsMxvk5wUXm3X4vxfdi%2BXZffeuAfuII0Vz%2FN5CgckjhywgCfZn%2FZE6mOICsfrcySidZByPhDsV2YrkZAYPvsphJhwA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncontent-encoding: br\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"9cd8032d0a7f32fa\", cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1475\u0026min_rtt=831\u0026rtt_var=674\u0026sent=99\u0026recv=43\u0026lost=0\u0026retrans=0\u0026sent_bytes=89389\u0026recv_bytes=9568\u0026delivery_rate=11986248\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=38603\u0026unsent_bytes=0\u0026cid=33a8fd10003ed4a3\u0026ts=12701\u0026inflight_dur=42\u0026x=62\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncf-ray: 9cd8032d0a7f32fa-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6281,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (6281), with no line terminators","md5":"cef37f087650ec6a90cb58df977a7322","sha1":"dae675d33bf86b7d8bf645601b32f0adf45a3144","sha256":"5f0fde947e510587bfaefc463d7adcc9bed696df8bec71e8640b85b1616c50a5","sha512":"1d2224b83a0e75eaad838021c45c2e78fc28ccd97041efb0f3a5e36084dea04b055f511ccb25c0412cdd1f88286b4b1b5a7cf0015eb0530dad57243cf0a34fa9","ssdeep":"96:PNybXZtIEb0EFW87IABfRxfbimS+4+CnIKN+lnfbCU4CRSYIcuKAYzueh8xmw:PNadBv2GCIKNwfbC0RecThyqw","tlshash":"a8d13bb3e9520036b3f75beb407ab314e154a241cb0049abe5b0da9c95dfe8f01496d8","first_seen":"2026-02-13T23:13:15.257721Z","last_seen":"2026-02-13T23:13:15.257721Z","times_seen":1,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/favicon.ico","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://christmas-wifmas.xyz/","date":"2026-02-13T23:12:45.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"christmas-wifmas.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 06:03:48 GMT","end":"Wed, 25 Mar 2026 07:00:01 GMT"},"fingerprint":{"sha1":"3F:F5:23:B5:FF:82:F1:21:26:F5:AD:E4:22:77:33:B2:55:6C:8A:10","sha256":"58:FC:A7:EE:D0:F4:6F:8D:6B:20:4F:24:94:2B:C9:4C:07:7D:F4:89:B8:3E:16:DA:F5:8B:E4:C9:B2:FB:02:A1"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: christmas-wifmas.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://christmas-wifmas.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 23:12:45 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Thu, 25 Dec 2025 06:32:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 12\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pqo3Wou7J%2BUC9UnN4L3RnIbxaD1%2B4Glkbq75WJeu4%2FSRbW%2F%2F%2FsxL3nnLn8soFfophZ5opoif9zhjh74yenrDm9N9MX6tXDDmoZjPLrP%2F%2F48%2B1QO8\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd8032e0ae432fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13932,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7b7e8569454b62416129154930028a5a","sha1":"8832a9d858e1a5a8156b07d3a2c5a5a663285cc1","sha256":"47013ba3a42fc0e98f65d0b724bb28e43ab3364a549cce1960b93c97446855a7","sha512":"67620c53a403f584d49749b6ae76feee06c690c3fde4061d1931933b68d971890348b0a6237bb1141d13d1ef817f067920701936c7ee3b5dff0fa3d4ba17ae3e","ssdeep":"384:RVMJoeVtk3A1gAkHM36gMaAGaKfxy4+FFu1nUaBbMOTMmjH2li:RVMJoeVtk3A1gAkHM36gMaAGaCxF+FFE","tlshash":"f452219a56d31201b447f0b52ba74b1b26b6d903e88fcc2c37ad5248cf55de4ca9336c","first_seen":"2026-02-13T12:40:42.342208Z","last_seen":"2026-02-13T23:13:15.254279Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-13T23:12:32.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"christmas-wifmas.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 06:03:48 GMT","end":"Wed, 25 Mar 2026 07:00:01 GMT"},"fingerprint":{"sha1":"3F:F5:23:B5:FF:82:F1:21:26:F5:AD:E4:22:77:33:B2:55:6C:8A:10","sha256":"58:FC:A7:EE:D0:F4:6F:8D:6B:20:4F:24:94:2B:C9:4C:07:7D:F4:89:B8:3E:16:DA:F5:8B:E4:C9:B2:FB:02:A1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: christmas-wifmas.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Fri, 13 Feb 2026 23:12:32 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ifQ2VqzWFAtQeclCbmjKI3njVzdc870ohHgB3IJSlmseEFVcIC2OznUZzgwT%2BSYqhdfjztCxn3jNdFmI3G3my7Uj8mdEvpYtNCGbHtfwrAVI38DB8f%2FE2amEaM%2Bi6gyk2XDRgX%2Bu7w%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9cd802ddcd161a30-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: chlray;desc=\"9cd802ddcd161a30\", cfL4;desc=\"?proto=TCP\u0026rtt=548\u0026min_rtt=491\u0026rtt_var=122\u0026sent=6\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=3226\u0026recv_bytes=1129\u0026delivery_rate=7180165\u0026cwnd=253\u0026unsent_bytes=0\u0026cid=a0a96e153bbc6c5c\u0026ts=46\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7198,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (7198), with no line terminators","md5":"5b3d7ce7084d750e598bab992b90dd1a","sha1":"a1c0ec721774bbb1d37eebf60b87c48a437cc9ac","sha256":"55c0902a038d2e5f1cbee2a90f581fc9aad47fdecec8aeb7bdebc29dd82e17f0","sha512":"5fae3e3b0f4d3821a97c1866c6d089f8887594eb3f6c3ec0a1594a3ae238b6ad2a7a8f8db7e10c744151b424421ed24a72ae43a5fdb8ce2b1cbc5e1f088080e4","ssdeep":"96:PNybXZtIEb0EFW87I9BknvU2LMD6TWUM92tpQokVWaHv/uCUg7LoiryELbv72YzD:PNadB+B+M2LtVDkVWaXuPwo9ELz77yLw","tlshash":"4ce18e939b7092269bab4fe2447b73705322700ae7419609f4a18e4ec3dbd4b8a1f691","first_seen":"2026-02-13T23:13:15.258622Z","last_seen":"2026-02-13T23:13:15.258622Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":105,"dns":84,"connect":1,"send":0,"wait":26,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christmas-wifmas.xyz/cdn-cgi/challenge-platform/h/g/flow/ov1/446083495:1771020575:hCMgFuJwfWqepWlo1k0QxY-EVlNDKibEvGB1qOj7cQ0/9cd802ddcd161a30/.KxbWTN9dSFNYJoZD5nQnAHTUprehpHXzkksuK0BgFM-1771024352-1.2.1.1-zIOhI3e56bFV7ZbGalJX5peJV5ZMPaJOjxKudcI4CbCj.Yi0faUDE4i4M.XlH2XO","fqdn":"christmas-wifmas.xyz","domain":"christmas-wifmas.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://christmas-wifmas.xyz/","date":"2026-02-13T23:12:33.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"christmas-wifmas.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 06:03:48 GMT","end":"Wed, 25 Mar 2026 07:00:01 GMT"},"fingerprint":{"sha1":"3F:F5:23:B5:FF:82:F1:21:26:F5:AD:E4:22:77:33:B2:55:6C:8A:10","sha256":"58:FC:A7:EE:D0:F4:6F:8D:6B:20:4F:24:94:2B:C9:4C:07:7D:F4:89:B8:3E:16:DA:F5:8B:E4:C9:B2:FB:02:A1"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/flow/ov1/446083495:1771020575:hCMgFuJwfWqepWlo1k0QxY-EVlNDKibEvGB1qOj7cQ0/9cd802ddcd161a30/.KxbWTN9dSFNYJoZD5nQnAHTUprehpHXzkksuK0BgFM-1771024352-1.2.1.1-zIOhI3e56bFV7ZbGalJX5peJV5ZMPaJOjxKudcI4CbCj.Yi0faUDE4i4M.XlH2XO HTTP/1.1\r\nHost: christmas-wifmas.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://christmas-wifmas.xyz/\r\ncf-chl: .KxbWTN9dSFNYJoZD5nQnAHTUprehpHXzkksuK0BgFM-1771024352-1.2.1.1-zIOhI3e56bFV7ZbGalJX5peJV5ZMPaJOjxKudcI4CbCj.Yi0faUDE4i4M.XlH2XO\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1964\r\nOrigin: https://christmas-wifmas.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1964,"data":"s-xMvmTrNnSfCF$VsiM4REbpJL1cpNFCcN-IuM6akmM$OoobDu+Wi40f6gJTSHoT9lJzQF-745-vNvWWIWN5qOmVtdk+ZxT7$Ivt3r0JXRMbk9F7xaB3erZ15HvlWYoi$pQax-giH-nV5khpQogNdzhD-9BIPnO5jjlDEuFKEt45m+P$lCsUdLXUOUOLwHcrWHMBQQIdoHgSUma-CcqUUBxMNWoQFLFM36wnb6qoTywSf6G3oRA+vM6Kwwf3ryIojj9JPGx+s053x$XvZmG3udwCl8M6EdO7fv667fAxbJS1v$FO47vxPQrXSbjQzzNOu0KqNrLWS9s3+ugKCDyVaU6tKjBo+hLDCnT6CCvWzCtfdi3CB$q-wse+BKSOvd3viRbUktgs47I+j0cjya566GlBeQelUPQ6mmWgSM4XVhT-Q1Xh3Fp8t6ui6kuYU15CeWs87U$nN-wf8TpMdDmTSKZDNMR0VbRbmV1L3iFFAZTYDuqxXWUlK75kIeVJCYaI8uNGjb1E$TdsRsrzGURssXgapTniTYqv4e8maEWPZYssizIKS9xFaLHt$-dtVu9hyJmftB6OZGpUp+AV14Z-uD9xLIXiXJagJkmSe9Wlp4uv6nc++BycMON71fwYPvCQpCrY9POSIo4hn4ac4fgD5e6xeJirTjzLWW4DSZ$wgDd576-skKj$fdOmLIvWO5gAqwKDC8MaZq17q$K0UJ9tPSN5dpnQh6v0XjIcP4DFGMD8NmIai-pYNQ3KOIGgaRAkED6gGiw6B06YBT7cJLPyFhWu$LFvprgMugY0KloOiXR0s6thGQSte3vlOY6zYdKeZYUXP7Ywgu7MmdXZXVqudR-PSmVQYmwaegC+tnrO50oYcX1DiEXJlpA5RdWayhSCrcAR1QOVntxj6M0SYtRwiSA9jy$Kdt0SysrSLQay-3pqzjLkLFECrVeosQo691eM1UNAbIIsUWJTSuPK+H3aCspNQmtq--JJHgUQLcbWlC94-E$J37QIvONDl-D99uT5qasDM3GIGI++aURlditAJ-KKDqJiuU4FN5siuzJHqJkEBDwERTOx6L6cewejS6jj8zZWXeaFJ6R0+UVsfWhWwdhbAzgLcHL5gV6QXg5dZEenX+oTS$HV7E3SX6KtdXeZX71ksbVXAoFxRtfsA56e1yk6oM30thHU80v-lq$jj7IVpEHrl+OQ1G8cZvkKIzkQ7h+$1c-vIyeMcNC+8DXTwoVz53vFM0USPz-nscZdtOdlG46JFTL$9JTC8FUU7ES56vfxZIJU4-CNu3BlXn+Nkg1q3HBJUd4CE9V7cZ4dmuBTF0uSZv8LrgQYxyGubLIe9kESqoP9EYFAP8wF3q$ZX$u4hl7idsXznxi3iPYEJXnw04K1nTcXZj+fCG4Ne-WTukxiCL4NgomiKv$qMlVTH$JjHqttQhEwqjiUI6t$wqbUbTwzo9JL16bdMxUlJzQdfDqTBr7li+9G1bzbSHNL+Ey$78yKQX-9WY9mHButCRZ0iVvT9pKUjUNf7+YssRN-iwKjpDj43+KRCD-giO6w9d-dBQjp$$7Csh3aUh8$zTq0xn8DO8d0pDzprCK0LnWiu$itPSI7-OC$O7nBL+FTfHQ5ysfU3Dud6ootB18rtGovcRTIGwueG4jIdWf3ey4oGA$IxuKOstuInvaObK1pN$0zuabqf356Ye3JjPYmPBrhJ0HWLj0buLZJvBFQ$5xxu1yevk41DgsdvBZm00ePo6-Qr0MvDZevSEshJwcPqmk+3HzDIOg6l8CNu18x6y8k9pwI51BBeedg140+LTTkjQ9N0EGVtzocviDDKrA$4wri1KGfOA3PzDZzOIsZqC9HIYW4xKaLJ0su6yMHCkOY6WDmF9BTS-ZQFXLwu8wmI6$kJ3HzPFLF6t8pO5tPaJd-TXPpoVUVacMVopXAs8vjDvwKMGpQj5ilDmJuIZKpWsQp"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: 5UESy8cboQh7df3W/GUmEtF2+h++fCsJ32arRDqlJQY=$+YJqQC58AtAkkji4K2aa7Q==\r\ncontent-encoding: br\r\ntiming-allow-origin: https://christmas-wifmas.xyz\r\ndate: Fri, 13 Feb 2026 23:12:33 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9cd802e0ab4b32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18380,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (18380), with no line terminators","md5":"5b7320613e66f6dceb909a1192711e95","sha1":"f728a11f83bb8259eaddf3ad853876cfcb0f4b72","sha256":"24d95fadfc6bd508c9171934fa35dd57ebf3179cfad474525d36ec0ed64e90b0","sha512":"7d2e13341801b838979a8237e47cba1ee60cc0ac3c142b7a463f5cd6b19a419e813601ded588538717d56a9ca35936344283a1950b2258682aa042c7a4f0d650","ssdeep":"384:ukBndUvK9XzQYZ+osHqbsvyIA1iboAJ0OP4G731vqcbf:PpdUdYZXsHksvA8gtGrJ9j","tlshash":"4a82f1dd178cff4956cc207e94a74b217ab0addbcc707a62eec4962bc41129a5ec7078","first_seen":"2026-02-13T23:13:15.259511Z","last_seen":"2026-02-13T23:13:15.259511Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}