{"report_id":"75644f86-a53b-409b-93af-d10d0508fd82","version":6,"status":"done","tags":[],"date":"2026-03-24T20:21:47Z","url":{"schema":"https","addr":"xxbum-twisex.com","fqdn":"xxbum-twisex.com","domain":"xxbum-twisex.com","tld":"com"},"ip":{"addr":"172.67.188.203","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"xxbum-twisex.com/","fqdn":"xxbum-twisex.com","domain":"xxbum-twisex.com","tld":"com"},"title":"Video_1714785 | xxBumShorts","dom":{"size":42180,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (42157), with no line terminators","md5":"15aad1f9ee76746b3f5fabe787499630","sha1":"7b0b80b25dff4d2c506ef6ab8a13125e745e27a7","sha256":"2a1dd41987d34a424ac4b98de659c9392a78d7b953c9691f4953408d9b93e113","sha512":"2bb10d1ad134468a784c3e4a6100c3810007451e3bba231541c065210ab77dea06815a942cb73ab13f50fc581c712f0dfe5c15ef469434ae872e56501e9d8692","ssdeep":"384:9Id+SbZxyWUGNdYZERQXxCtQlCgfeNTNST8+QH/6CqNCMOQzR/yk7sC9mXr6JZix:9alZxyWUOUfyz0n63VQiidM3c/O","tlshash":"18139631b208501e7037d2e4b892ef692299f347c50b6b98a9b53161cfcbde936716dc","dom_hash":"domhash091bf88385b0c910ba5b661518ef5ddc","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"xxbum-twisex.com","fqdn":"xxbum-twisex.com","domain":"xxbum-twisex.com","tld":"com"},"ip":{"addr":"172.67.188.203","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-28T20:21:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"xxbum-twisex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"xxbum-twisex.com","ip":{"addr":"172.67.188.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":27,"request_count":27,"received_data":2004135,"sent_data":12496,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":11393,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2026-03-22T23:04:52.317151Z","alert_count":0,"request_count":2,"received_data":103107,"sent_data":899,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"imasdk.googleapis.com","ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3922,"first_seen":"2014-02-25T09:02:53Z","last_seen":"2026-03-18T23:18:32.113518Z","alert_count":0,"request_count":1,"received_data":473586,"sent_data":431,"comment":"","tags":null,"fingerprints":null},{"fqdn":"xxmdias-cdn.b-cdn.net","ip":{"addr":"185.59.220.199","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"domain_registered":"2016-04-25","domain_rank":0,"first_seen":"2026-03-24T20:17:18.930607Z","last_seen":"2026-03-24T20:17:18.930607Z","alert_count":0,"request_count":23,"received_data":6258675,"sent_data":10982,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"xxbum-twisex.com/_nuxt/Bk8Q-iBq.js","fqdn":"xxbum-twisex.com","domain":"xxbum-twisex.com","tld":"com"},"ip":{"addr":"172.67.188.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"60c585050e2fb0f36d038b3f9f0f0ef9","sha1":"c768b4b8b64c029ef201d2b66d06e237ab5dee55","sha256":"3963460dc312c6b115f29832e39a9e5c69744156ad413e826ecec7b5bfff11c2","sha512":"d300c9617f2bdcac480aa8a2dd0f70e073e7d1cf5691c8886e16b771cc638172b1a96bf6a3bda29af2912096e8d3fe8ce9b8ab873a02660c78e71711f65faada","ssdeep":"192:b/OGLs0y0PtVnQS63D71PwFoYxCZsaPBcGoOpJswg5EiFyWol02O9k5aslT1UVwC:iGLVzPtVN63v1PeoYxqVP/oOpJswkEnm","tlshash":"b1221c55b521d33ac3f66450426d1040b1780fa5b191c8d6fcbc1e1b0baaef16b3faa9","size":10302,"data":"","first_seen":"2026-03-24T20:21:58.238834Z","last_seen":"2026-03-24T20:21:58.238834Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/sdkloader/ima3.js","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1a460edf1d12fc78a7bae3a98e0de1a","sha1":"8da5660ee2b7a1001560b2dc3431b68be33de5fb","sha256":"0e5c25ad05fa78c738415b36daf8101c04c8d20a5bd9f07fffce6cef03d4dc7c","sha512":"44f5e30bae0073307f851b605e1d184d0dde46141f2873c505d2e9ed4a075ef8da44dfa017bef60be1a1db449bca4ee4d77f636d13690d1ede0c37b52e334c91","ssdeep":"6144:6bEbmxldQmcmaP+8e0RQIiPefCyfZDVxPhR:4ammRxiNiZDVxPhR","tlshash":"31a4facdb6a674629363f4b5403f010fb23bb866f40888acb249d9e16e749495277f7c","size":472872,"data":"","first_seen":"2026-03-24T20:21:58.327759Z","last_seen":"2026-03-24T20:21:58.327759Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/api.js?render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1bb037e4c3bba2a7fade0a7e3085e2e","sha1":"51e63090852f95448e189369f032fec53ce5d264","sha256":"e4c4cdba4fc50a031a1148b252e402d55bc9bb8e268500d9d3870fcbe0eb5714","sha512":"ff8a6bb6ebe30c4dfa36e308f9bd30a14ab7c25e2b955bbada3885923d3e4764782ecee55392e84ddcd0a55ca9f6bfca89aa94d9da002cd35ff2cfce174dbd9b","ssdeep":"768:GCBnK2seMK9iaD4ukeNqH/wLDsSTVGFdMs2bHLgPYjTgZ2fX7+REkm87P5GsSATG:82s7K9iaDLkeNtLzSdMzVTgsb","tlshash":"54332a583156387267d980e5717b63437325693af94cc890e823dd2536acecad233fba","size":51125,"data":"","first_seen":"2026-02-27T06:39:43.979641Z","last_seen":"2026-07-08T03:12:01.044111Z","times_seen":55750,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxbum-twisex.com/","fqdn":"xxbum-twisex.com","domain":"xxbum-twisex.com","tld":"com"},"ip":{"addr":"172.67.188.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f2e8fccffc0fb45693c24a3bc47090d5","sha1":"9d27e3da927f485417eb412c6960da4fe3bc48ec","sha256":"f1ed3e151965f78ac872414bcce371db738bdc4bc4ed4a9670d1aa1f7fad840b","sha512":"3b5f49139cd2a36ae9af64e51f4e0f10699c4444d38a6f402938d9e2401dbefabcb3cf2327fbd6150326ebe452fa5ebaac41843df48c96e149bf0140647a205b","ssdeep":"","tlshash":"8441823bf20438ac6327090eb4c138454e4c1e5ab24e5b24fdea77bc24e376618b43ad","size":1879,"data":"","first_seen":"2026-03-24T20:21:58.340089Z","last_seen":"2026-03-24T20:21:58.340089Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxbum-twisex.com/_nuxt/OW8m93Sr.js","fqdn":"xxbum-twisex.com","domain":"xxbum-twisex.com","tld":"com"},"ip":{"addr":"172.67.188.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec472fe636cfe4933f10130c71690f73","sha1":"67b5cfb6fc14721cd653b32b7ba9453808431368","sha256":"ecf3ae0b9bd60ebf85f7c5ab3019c3f8faa1c4399fdad923c10424515ae1277e","sha512":"5502d957681b66572448c6ee1702b2f2ebe60367d9df1dc5d43c8af954902bde6688f943f6361f2cfdb5806cdca28895705d67905b1a6639987a83501ad84aef","ssdeep":"6144:mg7gN6gZsKLc39RqWaQ/iUkeqMVtzcypDfVh4Thjy/fagVPqhcNXz:mZLZtAtRq3UkeNtIqfr4ThjlKN","tlshash":"e27428e93186b06603f619e4507b1006f3392e54344dd4e4f2acddab3ea784a92b7f6d","size":348136,"data":"","first_seen":"2026-03-24T20:21:58.321672Z","last_seen":"2026-03-24T20:21:58.321672Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxbum-twisex.com/_nuxt/DjVT8uM0.js","fqdn":"xxbum-twisex.com","domain":"xxbum-twisex.com","tld":"com"},"ip":{"addr":"172.67.188.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"eaf4b251c3400eb326fa5486064ea94d","sha1":"e72cd2dd2c4065105c838328296f9846d7bda8ca","sha256":"e4318537b0d28a79b254e35b3a55c722cc4daedd8e021eeec6115a24ee8735f9","sha512":"51e1f8823f87308687cd9716efa52becf5791d4752607f143ccdb7c63e10793508136dcbbd66bedae37b7cf61d33a4e0b69b64116c23ab4fe711ca23928399bb","ssdeep":"","tlshash":"9ae0611e398a242615d051fd84abe11cc039e000333f9d50d07696c13ca6c6fc377d4e","size":386,"data":"","first_seen":"2026-03-24T20:21:58.277757Z","last_seen":"2026-03-24T20:21:58.277757Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxbum-twisex.com/_nuxt/Cp2x8l1r.js","fqdn":"xxbum-twisex.com","domain":"xxbum-twisex.com","tld":"com"},"ip":{"addr":"172.67.188.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"fe6c36baf036e49c4ab0e7b8285e5aed","sha1":"078790202aec109c31423e14676d40d3b0689568","sha256":"40fc0faac2e9b5601803d160346c3b89343bb2010fc2896bd80c3e5f833559eb","sha512":"f998520381f797e0260c6e14618ec9f5ad537c1812f3db9034b6107b40adf6d51e3dc1f80995b11470c83dd1bccd612346a07e3938034fca891dab9388250aa9","ssdeep":"12288:Shbg9Vak0rYQZJN4nM+/Jtczkeiu1k1fz+p6zgu+HLvjtKNGDDLXa2llduuZkEbO:Shbg9Vak0rYQZJN4nM+/Jtcgeiu1k1fp","tlshash":"5eb44bd932ea542787d09aca947546127339bd0a7408c0ecfe3ebddb2e16941b07af74","size":520984,"data":"","first_seen":"2026-03-03T17:53:10.371859Z","last_seen":"2026-06-20T13:42:42.936989Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"xxmdias-cdn.b-cdn.net/thumbs/171f598c3daa16050d4288447534ad0e.webp","fqdn":"xxmdias-cdn.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"185.59.220.199","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:27.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /thumbs/171f598c3daa16050d4288447534ad0e.webp HTTP/1.1\r\nHost: xxmdias-cdn.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xxbum-twisex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Mar 2026 20:21:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 69394\r\nserver: BunnyCDN-DE1-722\r\ncdn-pullzone: 5455748\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\nlast-modified: Mon, 23 Mar 2026 22:47:01 GMT\r\ncdn-storageserver: DE-1138\r\ncdn-fileserver: 994\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 206\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1047\r\ncdn-cachedat: 03/24/2026 20:08:33\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: aec573863e8e4f2899914156c1481815\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":69394,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x2272, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"45a6fd8e2d8e260c5a3d27fa031f199a","sha1":"dfce2b6401f8595c87f75f4c27b10cf039115f29","sha256":"73a84731cc54278724f81209f27fd94bb90e75b04e08523bc43aa9a97cabef3c","sha512":"42af0f8051cff19aa08de12666d70aa6197360ef3e4c51fe8adb3aa41d841ebb0adaf4bd320e84ea0eb86aae6c3197eba0a158c4f94e31b01e405dd05952a064","ssdeep":"1536:JTSI95SrZYwMQJ9Ce8mdMOI7cBZcLTqngqS1ZE0jU8:JTQGw3J02MR7YRgqSfE0jU8","tlshash":"c56302dcfb47c43a79a2c42917048a2a1f023696df7622777ed3598b7153bf46025b81","first_seen":"2026-03-24T20:21:58.222372Z","last_seen":"2026-03-24T20:24:58.588204Z","times_seen":2,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":99,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxmdias-cdn.b-cdn.net/thumbs/98af38b88493c157b8d3431598ce18bc.webp","fqdn":"xxmdias-cdn.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"185.59.220.199","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:27.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /thumbs/98af38b88493c157b8d3431598ce18bc.webp HTTP/1.1\r\nHost: xxmdias-cdn.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xxbum-twisex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Mar 2026 20:21:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 49558\r\nserver: BunnyCDN-DE1-722\r\ncdn-pullzone: 5455748\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\nlast-modified: Mon, 23 Mar 2026 22:43:08 GMT\r\ncdn-storageserver: DE-660\r\ncdn-fileserver: 1251\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 206\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 860\r\ncdn-cachedat: 03/24/2026 20:08:33\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: e6482cdcbf48ee87e04a0363c8dda509\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":49558,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x2282, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b2a52d16b1ef4a8393d71405f48cfda8","sha1":"25da55c148a0a4c2226442eabc37cb58ac672344","sha256":"a630b56121d35727a6062b974ab21536a1ace1c4516051f66ffb332f8ba849d5","sha512":"93603dd2d8fff20a24e08eff7b7f85967725f8f42bac3f0043961def32c33168a8282a01c7245eb56a82ab6ebbec96e971f08b9cedbd7a252986f6692f985704","ssdeep":"768:IrYvfWAIygv09pnjx8CNA/Bn5FtPrFRexYzDejxmdwYeM7ITz2ZVVYL9LlydkR:wYvfWAPgMvjxr2ZJjFRey3wAmEVsceR","tlshash":"f523cf05fb3afa48da042d7f0b34259deac315513d1771aca7f816e0a1fa08b376658e","first_seen":"2026-03-24T20:21:58.223804Z","last_seen":"2026-03-24T20:21:58.223804Z","times_seen":1,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":98,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxbum-twisex.com/_nuxt/Cp2x8l1r.js","fqdn":"xxbum-twisex.com","domain":"xxbum-twisex.com","tld":"com"},"ip":{"addr":"172.67.188.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:26.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxbum-twisex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:44:34 GMT","end":"Mon, 08 Jun 2026 06:44:33 GMT"},"fingerprint":{"sha1":"82:2C:62:75:CA:C2:D4:6C:A3:36:94:FA:1F:83:6A:88:C2:BC:BE:83","sha256":"21:40:60:7E:51:40:F7:17:C4:DF:51:78:27:CE:42:E8:08:88:10:B3:C0:BA:CF:27:B3:53:27:34:85:C5:95:3A"}}},"request":{"raw":"GET /_nuxt/Cp2x8l1r.js HTTP/1.1\r\nHost: xxbum-twisex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xxbum-twisex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 20:21:26 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 23 Mar 2026 15:50:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 24 Mar 2027 20:21:26 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69c16146-7f318\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CcFo0JIwsjiPGHV9izs8JDYqBKk58sFT1sUxvatgr48WkfHgNp3KLfF94ieBcOhY%2F11X5avHlclWq2DPNukj%2FbRbf5BbCVblnENZlQ21q5Q%3D\"}]}\r\ncf-ray: 9e1861d88ee8b09c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520984,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (45722)","md5":"fe6c36baf036e49c4ab0e7b8285e5aed","sha1":"078790202aec109c31423e14676d40d3b0689568","sha256":"40fc0faac2e9b5601803d160346c3b89343bb2010fc2896bd80c3e5f833559eb","sha512":"f998520381f797e0260c6e14618ec9f5ad537c1812f3db9034b6107b40adf6d51e3dc1f80995b11470c83dd1bccd612346a07e3938034fca891dab9388250aa9","ssdeep":"12288:Shbg9Vak0rYQZJN4nM+/Jtczkeiu1k1fz+p6zgu+HLvjtKNGDDLXa2llduuZkEbO:Shbg9Vak0rYQZJN4nM+/Jtcgeiu1k1fp","tlshash":"5eb44bd932ea542787d09aca947546127339bd0a7408c0ecfe3ebddb2e16941b07af74","first_seen":"2026-03-03T17:53:10.371859Z","last_seen":"2026-06-20T13:42:42.936989Z","times_seen":17,"resource_available":true,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":229,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"xxbum-twisex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxbum-twisex.com/icon-512x512.png","fqdn":"xxbum-twisex.com","domain":"xxbum-twisex.com","tld":"com"},"ip":{"addr":"172.67.188.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:26.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxbum-twisex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:44:34 GMT","end":"Mon, 08 Jun 2026 06:44:33 GMT"},"fingerprint":{"sha1":"82:2C:62:75:CA:C2:D4:6C:A3:36:94:FA:1F:83:6A:88:C2:BC:BE:83","sha256":"21:40:60:7E:51:40:F7:17:C4:DF:51:78:27:CE:42:E8:08:88:10:B3:C0:BA:CF:27:B3:53:27:34:85:C5:95:3A"}}},"request":{"raw":"GET /icon-512x512.png HTTP/1.1\r\nHost: xxbum-twisex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xxbum-twisex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 20:21:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 84261\r\nlast-modified: Wed, 18 Mar 2026 19:48:04 GMT\r\netag: \"69bb0174-14925\"\r\ncache-control: no-store, max-age=0\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MKagOn7QigCu%2BNnrAGY8Cx7T4Q7lQUunww7ruRFg2T0%2BboDekTxrxpWKkHFdWFdC8cl37vWpLCj9tujkjpOFQDBHTCAbl0NVrsV4kVWe7ac%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9e1861daf81ab09c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84261,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"896386ccf07729e2a8612304ba2563a5","sha1":"1cd63d5d45d07d0e627944eb133b09b598401ead","sha256":"95148749f0b0e3bdc562b37baf5f087dd125df7b26f86b03a0b3bbbb2f53c7aa","sha512":"af3bd7ed9097279f7db36d69da3b3bfb07f4f01591ee4dd4bb086e9060e1ad3fcbea3c11df99826e72aabca854b47c75ab8dc5442f462e65548fd462e6d28234","ssdeep":"1536:FQK3fb0Z5cFQ6k4Lz81joYENi4Ebhj5eKrDRwpgSUAFijxfFiSv4orPEIq3KZRHR:FQK3fbOj6k4LzAjoRUjwKpMgSjijD13h","tlshash":"b283022ad603a8b3e97a2f7e84563fb4e3d44ec857454e826d50dda32ed821c34d4f1a","first_seen":"2026-03-24T20:17:23.778715Z","last_seen":"2026-03-24T20:21:58.226117Z","times_seen":2,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"xxbum-twisex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/ea2d291c0fdc/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:27.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 19:28:54 GMT","end":"Tue, 19 May 2026 20:28:50 GMT"},"fingerprint":{"sha1":"83:61:74:2B:F1:77:DF:F1:68:3A:D1:0B:F1:05:8B:A7:0C:B7:B3:C2","sha256":"AB:12:F8:E1:72:C8:68:10:80:3A:9F:9D:C6:84:76:A4:16:06:31:A9:10:4A:34:B0:5D:62:B4:80:3D:63:F3:C5"}}},"request":{"raw":"GET /turnstile/v0/g/ea2d291c0fdc/api.js HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xxbum-twisex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Mar 2026 20:21:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nlast-modified: Thu, 26 Feb 2026 16:26:08 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e1861dcdbf08be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51125,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (51124)","md5":"b1bb037e4c3bba2a7fade0a7e3085e2e","sha1":"51e63090852f95448e189369f032fec53ce5d264","sha256":"e4c4cdba4fc50a031a1148b252e402d55bc9bb8e268500d9d3870fcbe0eb5714","sha512":"ff8a6bb6ebe30c4dfa36e308f9bd30a14ab7c25e2b955bbada3885923d3e4764782ecee55392e84ddcd0a55ca9f6bfca89aa94d9da002cd35ff2cfce174dbd9b","ssdeep":"768:GCBnK2seMK9iaD4ukeNqH/wLDsSTVGFdMs2bHLgPYjTgZ2fX7+REkm87P5GsSATG:82s7K9iaDLkeNtLzSdMzVTgsb","tlshash":"54332a583156387267d980e5717b63437325693af94cc890e823dd2536acecad233fba","first_seen":"2026-02-27T06:39:43.979641Z","last_seen":"2026-07-08T03:12:01.044111Z","times_seen":55750,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxmdias-cdn.b-cdn.net/thumbs/e8524b18eb59f9420d2031ec073112d2.webp","fqdn":"xxmdias-cdn.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"185.59.220.199","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:27.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /thumbs/e8524b18eb59f9420d2031ec073112d2.webp HTTP/1.1\r\nHost: xxmdias-cdn.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xxbum-twisex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Mar 2026 20:21:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 114254\r\nserver: BunnyCDN-DE1-722\r\ncdn-pullzone: 5455748\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\nlast-modified: Mon, 23 Mar 2026 22:45:10 GMT\r\ncdn-storageserver: DE-1136\r\ncdn-fileserver: 1023\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 206\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1080\r\ncdn-cachedat: 03/24/2026 20:08:33\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 29c050fd2c7bf0152019fb1e6061cd12\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":114254,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"50a0414e830cc145ae1caf663806bb1e","sha1":"a982c5b10f1cf4c801abeb2c85a50d3ec138cff1","sha256":"b4b6f5fd6324f5bc411ad4cd8e42693fdf13d0d053b874161b4c78ebd42b1321","sha512":"15d1f4707ff2ea323b542f0b8c7d8bad64214e25abb8f09e1d6f0d99800e7c66a13776ea49862a22ced1a6ad5ab2ff7c693e342d47e6273b14d664fcff7f6584","ssdeep":"1536:HctWwMSb5F88gJPUV76VrgxZtP6uJIlcAUQ0/jgcx2dNrsQ1qb8i8gLU9nChACKB:HcFMGFtgiQVrgDt/kMQ081wbFYoYn","tlshash":"a1b312ba3153b0899afbee1970058c7c6c8582dcf9d9e02e2d21b5044e97d6beed7443","first_seen":"2026-03-24T20:21:58.228092Z","last_seen":"2026-03-24T20:21:58.228092Z","times_seen":1,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":98,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxmdias-cdn.b-cdn.net/thumbs/21ad1f3efa09eb75f6f63ec9bdc85541.webp","fqdn":"xxmdias-cdn.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"185.59.220.199","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:27.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /thumbs/21ad1f3efa09eb75f6f63ec9bdc85541.webp HTTP/1.1\r\nHost: xxmdias-cdn.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xxbum-twisex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Mar 2026 20:21:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 78612\r\nserver: BunnyCDN-DE1-722\r\ncdn-pullzone: 5455748\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\nlast-modified: Mon, 23 Mar 2026 22:42:42 GMT\r\ncdn-storageserver: DE-1136\r\ncdn-fileserver: 1002\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 206\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 860\r\ncdn-cachedat: 03/24/2026 20:08:33\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: cc82ab1625152d7b5c50721f91c965bb\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":78612,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x2170, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ed1020d5c630308810be8885913fa32a","sha1":"b26379d13b050b95cd32f4195d213a1fc32e1233","sha256":"b4d0bd1a471de73958dac4a636a968ca60d0c50945b71b71999e4d616c6a606b","sha512":"b1a6893a962d610fd223ffdb9662e452219d2bf66ddc6b5fea6a2a6b98b59c5e61f490b36a9def108b50b605ca9fafd45a92bc0bf7d12d5453d43ba22dc477d9","ssdeep":"1536:qhko2sBCr9sgVH9Vpd4nj2793krMOkSvaMK+d+MnO2q4TLPAY9baNj5R:qOo2LZsMHgnqx0qtMDYMObwp9badj","tlshash":"ae730219f3f9ea25fcd235a16bd4231f945ae2f5ad9a135412bc96c52f134d23113833","first_seen":"2026-03-24T20:21:58.229371Z","last_seen":"2026-03-24T20:21:58.229371Z","times_seen":1,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":98,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxmdias-cdn.b-cdn.net/thumbs/f6723e682a4e4b4329935725130c4837.webp","fqdn":"xxmdias-cdn.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"185.59.220.199","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:27.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /thumbs/f6723e682a4e4b4329935725130c4837.webp HTTP/1.1\r\nHost: xxmdias-cdn.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xxbum-twisex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Mar 2026 20:21:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 45342\r\nserver: BunnyCDN-DE1-722\r\ncdn-pullzone: 5455748\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\nlast-modified: Mon, 23 Mar 2026 22:42:39 GMT\r\ncdn-storageserver: DE-633\r\ncdn-fileserver: 696\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 206\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1333\r\ncdn-cachedat: 03/24/2026 20:08:33\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 709bb135a9ce8aa1335760e88dcfd76f\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":45342,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x1706, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c37deff0089a21e19e737d7da8b82118","sha1":"f4e698a4ac213ba1737a0960dc0b4661bd6e4b0f","sha256":"3d83a6c9c3d7c529712b8f26b56b5645ca5243f37e042ba00d529bd980f2aa4a","sha512":"36d9c0977c1ecd2a9983ada553a7795633a9f99fb7eb142f110a99f5a3dca9225c3c016b3ea4ce1506060aea1f087ed649c072b79f6e78d026d87a3cdac4d33a","ssdeep":"768:b9dR3yDE02PSWzt3HBpVb2cpCMVqkfSDDM9wYNFE9lEjZtqYrdIV0fJeSf3:xSz2PlRpVbpXVqGSDY9NNFE9lYbxrd88","tlshash":"0f13028288f62a30f8f9dfc35d01d6846587fbfa47cc1e6b625ac30769056a7099572c","first_seen":"2026-03-24T20:21:58.230955Z","last_seen":"2026-03-24T20:21:58.230955Z","times_seen":1,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":97,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxmdias-cdn.b-cdn.net/thumbs/b2425e168a7cdb0e79b68e218fb7cf17.webp","fqdn":"xxmdias-cdn.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"185.59.220.199","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:27.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /thumbs/b2425e168a7cdb0e79b68e218fb7cf17.webp HTTP/1.1\r\nHost: xxmdias-cdn.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xxbum-twisex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Mar 2026 20:21:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 28758\r\nserver: BunnyCDN-DE1-722\r\ncdn-pullzone: 5455748\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\nlast-modified: Mon, 23 Mar 2026 22:42:18 GMT\r\ncdn-storageserver: DE-634\r\ncdn-fileserver: 978\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 206\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1333\r\ncdn-cachedat: 03/24/2026 20:08:33\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 95e3aed1530ab7f6a321b01962afbb62\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":28758,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x716, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"92ad18c0037832d183addff3b30cbcc1","sha1":"73b33365402a2905b91ece9affbb3bb8aa36800b","sha256":"60bc03d6103548ff62eb57c344d94d32cd66618d76f8693d31c6c335721ab2b9","sha512":"1117d0655ee8102e94318d22af61d2cb289280ef40a07c362a283b1e6b9f451a9e15a85920db09d8adefe83b0770783976507c961103ac63df4ed848831f3f49","ssdeep":"768:eek+njbGI3V1wDdWXpZJm/hvKmaxk4g9tPTkuP:1Tp3LDpZk/hvKxk4gzrN","tlshash":"a9d2f153eba6c06779bb008274d589f80316587f0b923a7ee67c57738365e1162c3c07","first_seen":"2026-03-24T20:21:58.232376Z","last_seen":"2026-03-24T20:21:58.232376Z","times_seen":1,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":96,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxmdias-cdn.b-cdn.net/thumbs/ca7bad3343313d29bf5446db26392b9b.webp","fqdn":"xxmdias-cdn.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"185.59.220.199","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:27.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /thumbs/ca7bad3343313d29bf5446db26392b9b.webp HTTP/1.1\r\nHost: xxmdias-cdn.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xxbum-twisex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Mar 2026 20:21:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 55236\r\nserver: BunnyCDN-DE1-722\r\ncdn-pullzone: 5455748\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\nlast-modified: Mon, 23 Mar 2026 22:41:18 GMT\r\ncdn-storageserver: DE-660\r\ncdn-fileserver: 1214\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 206\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 865\r\ncdn-cachedat: 03/24/2026 20:08:33\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 5e6f3a5258300478eba9fb8d345f48dd\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":55236,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x2276, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1a2e63f38a8fd563db88f390ba0ffe2e","sha1":"fad90c605ea505c2fb20202ca8b7e2e65d818974","sha256":"3434e2ca90cd06eda88803b907adeb6be38eba4303ba8ffb3213661849aa05f3","sha512":"4eab1689f418a7dd17831858be4598875f7a873f27f2b0dff913df2ceec68c86d7e152243fd3e80b669fbacc2b24eb62cadf4b7e85945391fdad5b7e0922c589","ssdeep":"1536:vckxJsVEFd4F6nQ6pfkgYABiiHkYf4pV+OnkV+58:vrNgF6n5pfyAYslwYOkE8","tlshash":"b243022b8f1ded0ea9a77ab64342ee0d251a7f746515b546351c8e7af81783cb08c037","first_seen":"2026-03-24T20:21:58.236987Z","last_seen":"2026-03-24T20:21:58.236987Z","times_seen":1,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":96,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxbum-twisex.com/_nuxt/Bk8Q-iBq.js","fqdn":"xxbum-twisex.com","domain":"xxbum-twisex.com","tld":"com"},"ip":{"addr":"172.67.188.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:26.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxbum-twisex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:44:34 GMT","end":"Mon, 08 Jun 2026 06:44:33 GMT"},"fingerprint":{"sha1":"82:2C:62:75:CA:C2:D4:6C:A3:36:94:FA:1F:83:6A:88:C2:BC:BE:83","sha256":"21:40:60:7E:51:40:F7:17:C4:DF:51:78:27:CE:42:E8:08:88:10:B3:C0:BA:CF:27:B3:53:27:34:85:C5:95:3A"}}},"request":{"raw":"GET /_nuxt/Bk8Q-iBq.js HTTP/1.1\r\nHost: xxbum-twisex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xxbum-twisex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 20:21:26 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 23 Mar 2026 15:50:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 24 Mar 2027 20:21:26 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69c16146-283e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nYzQuQCLoK%2Bo25%2BX2S%2FQBW9WVkHpmofKHB9YQikjTqfuV9NEMWR0eHqDUD8iCDPbDg3CQwb8teT0vyPbwOeW7OiDadahx3T9HacbMPu4WTY%3D\"}]}\r\ncf-ray: 9e1861d88ee5b09c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10302,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (10283)","md5":"60c585050e2fb0f36d038b3f9f0f0ef9","sha1":"c768b4b8b64c029ef201d2b66d06e237ab5dee55","sha256":"3963460dc312c6b115f29832e39a9e5c69744156ad413e826ecec7b5bfff11c2","sha512":"d300c9617f2bdcac480aa8a2dd0f70e073e7d1cf5691c8886e16b771cc638172b1a96bf6a3bda29af2912096e8d3fe8ce9b8ab873a02660c78e71711f65faada","ssdeep":"192:b/OGLs0y0PtVnQS63D71PwFoYxCZsaPBcGoOpJswg5EiFyWol02O9k5aslT1UVwC:iGLVzPtVN63v1PeoYxqVP/oOpJswkEnm","tlshash":"b1221c55b521d33ac3f66450426d1040b1780fa5b191c8d6fcbc1e1b0baaef16b3faa9","first_seen":"2026-03-24T20:21:58.238834Z","last_seen":"2026-03-24T20:21:58.238834Z","times_seen":1,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"xxbum-twisex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxbum-twisex.com/_payload.json?a1811157-3418-4aa8-a653-16145069d989","fqdn":"xxbum-twisex.com","domain":"xxbum-twisex.com","tld":"com"},"ip":{"addr":"172.67.188.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:26.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxbum-twisex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:44:34 GMT","end":"Mon, 08 Jun 2026 06:44:33 GMT"},"fingerprint":{"sha1":"82:2C:62:75:CA:C2:D4:6C:A3:36:94:FA:1F:83:6A:88:C2:BC:BE:83","sha256":"21:40:60:7E:51:40:F7:17:C4:DF:51:78:27:CE:42:E8:08:88:10:B3:C0:BA:CF:27:B3:53:27:34:85:C5:95:3A"}}},"request":{"raw":"GET /_payload.json?a1811157-3418-4aa8-a653-16145069d989 HTTP/1.1\r\nHost: xxbum-twisex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xxbum-twisex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 20:21:26 GMT\r\ncontent-type: application/json\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 23 Mar 2026 15:50:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-store, max-age=0\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69c16150-57\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bY%2Fb0b8qDvXOeFo7mR6mPibjt%2FaL9SoZK%2FWsC1%2BMTbUN9IFvHzMKo%2FzEetiF3n9AgDcJ4IwZN4KxBRewCdDpZIJheJ3befayywRbQxzNrxc%3D\"}]}\r\ncf-ray: 9e1861d89ef0b09c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c1ac668ae8f983d33b7201d71b4104e7","sha1":"8dd1b95d6785f36655f595359cd949a6febfe2a2","sha256":"3dbf127829e5665d07fc691430216d9b7fdfa398aa71a4b6901ef62fc30f7893","sha512":"a327eeba96f4e35976d6239fcc9b10bad216ac310b64fd5d8219cda70e01f43ae09ce71bf8e8a7c58fe13fec05765f45ed41ad60a93b0a14c90853e62140e005","ssdeep":"","tlshash":"75b012295a78208908410498c42a44c0c748123249dc01931361103e88d9c6b6404824","first_seen":"2026-03-24T20:21:58.241014Z","last_seen":"2026-03-24T20:21:58.241014Z","times_seen":1,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"xxbum-twisex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxbum-twisex.com/_i18n/bLczNgEr/en/messages.json","fqdn":"xxbum-twisex.com","domain":"xxbum-twisex.com","tld":"com"},"ip":{"addr":"172.67.188.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:26.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxbum-twisex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:44:34 GMT","end":"Mon, 08 Jun 2026 06:44:33 GMT"},"fingerprint":{"sha1":"82:2C:62:75:CA:C2:D4:6C:A3:36:94:FA:1F:83:6A:88:C2:BC:BE:83","sha256":"21:40:60:7E:51:40:F7:17:C4:DF:51:78:27:CE:42:E8:08:88:10:B3:C0:BA:CF:27:B3:53:27:34:85:C5:95:3A"}}},"request":{"raw":"GET /_i18n/bLczNgEr/en/messages.json HTTP/1.1\r\nHost: xxbum-twisex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xxbum-twisex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 20:21:26 GMT\r\ncontent-type: application/json\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 23 Mar 2026 15:50:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-store, max-age=0\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69c16150-2a7e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=shXZ0R5sUWy%2FUqoQ%2BvLsPfGH%2BYGXiNZ%2BBwFqfb%2FtJAmctcqOcyrWvapj8XsoAVoLEXQDz9IaZumJtUxDGmX7%2FG4VMSUqwQMdQoZ1Cs55OBQ%3D\"}]}\r\ncf-ray: 9e1861db4826b09c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10878,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"55a03bad2e48b45081194de4109b624f","sha1":"97f3da9b2a5a7a26a898059f62e50d64857060c0","sha256":"d586ae2048f326d448986aa68827c5c2111eb5fecbec9cb7f0d11da827cacbda","sha512":"52239590a20a428a83f3c358d228354f329463b808585085cc94bd4256996720524737ab1faa48cbb4118adb6c4113d1261a8beae2d2373f192a4ab8acb97e8c","ssdeep":"192:Xu4HLT4aIdumQdCsCTXtmzQrNAW9A76mfSh2JRw+5JWq5Plao/g9Nh3:XZ4lcTtgmcrNA8pGSB+5ga/g9j","tlshash":"37221a0b82594f364b4092d17887ea5575f8a19c97644c8dc8dec08c22daeeef36f6f4","first_seen":"2026-03-24T20:17:23.807384Z","last_seen":"2026-03-24T20:21:58.242581Z","times_seen":2,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"xxbum-twisex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxbum-twisex.com/api/country","fqdn":"xxbum-twisex.com","domain":"xxbum-twisex.com","tld":"com"},"ip":{"addr":"172.67.188.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:27.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxbum-twisex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:44:34 GMT","end":"Mon, 08 Jun 2026 06:44:33 GMT"},"fingerprint":{"sha1":"82:2C:62:75:CA:C2:D4:6C:A3:36:94:FA:1F:83:6A:88:C2:BC:BE:83","sha256":"21:40:60:7E:51:40:F7:17:C4:DF:51:78:27:CE:42:E8:08:88:10:B3:C0:BA:CF:27:B3:53:27:34:85:C5:95:3A"}}},"request":{"raw":"GET /api/country HTTP/1.1\r\nHost: xxbum-twisex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xxbum-twisex.com/\r\nCookie: i18n_redirected=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 20:21:27 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 13\r\nx-powered-by: Express\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\netag: W/\"d-AAtGBcjWrwUfXEmxYxb/R6K7sXY\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eXCCd5TEM8W3JnJEqTu3Zljj%2F%2FUmUkNbhPfHlZXGDawC0nZWQM2374jMdlylHWpUCmj94L5yZRgNyYaSRUfCh8qEZcFPLocKmesTSVGc4d8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9e1861dc685ab09c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":13,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4b7d3795fa4da9e0241fc03ca08f07a6","sha1":"000b4605c8d6af051f5c49b16316ff47a2bbb176","sha256":"a6b52300c704cfffa35c8b3cf180865c61502a572747148a1934dbf87c35f46a","sha512":"425380f3c23bd05068efd3ea3b94340c205f6004f8a816535c6f6c834fb04300657aed5297cc32a642266811b5d8bbeb50330c1ada9f92d4e72f7a78e11401ab","ssdeep":"","tlshash":"3f600000000c0c000003c000000f0000003fc00000c30000cc0c3330c00000c0000030","first_seen":"2023-08-07T21:01:17Z","last_seen":"2026-07-25T07:59:33.420958Z","times_seen":88,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"xxbum-twisex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxmdias-cdn.b-cdn.net/thumbs/866fcf400d1bef8fa0c80e004fb57342.webp","fqdn":"xxmdias-cdn.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"185.59.220.199","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:27.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /thumbs/866fcf400d1bef8fa0c80e004fb57342.webp HTTP/1.1\r\nHost: xxmdias-cdn.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xxbum-twisex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Mar 2026 20:21:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 38458\r\nserver: BunnyCDN-DE1-722\r\ncdn-pullzone: 5455748\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\nlast-modified: Mon, 23 Mar 2026 22:48:50 GMT\r\ncdn-storageserver: DE-634\r\ncdn-fileserver: 1209\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 206\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1077\r\ncdn-cachedat: 03/24/2026 20:08:33\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: e4fd46e7440322246fbd6bee5ad54baf\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":38458,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x1696, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5b8af25e839ba76b2c848af954c843f2","sha1":"e2a2313772fc57f08a139fdac7c0835952059c8a","sha256":"6dee1cb2407d44149c3df67aadef27778a6173afa2f67bfc7d42e9a763a0876c","sha512":"7aa9e7df5fa5103d15655828e445ffa956779f3129bdf66a2f6d27727b8bb4c64d984df69902be1028f49a89d9c76a2d5de626f86151e644077827b209649938","ssdeep":"768:gYHw47snAYJ/BsRNu4OBwWPv3aVuQ/vsSAEg/TzCy+GpW5S/Kx:fHgXTX3n3aCSGTzCLJICx","tlshash":"4903e18cd2fa3a7d85baabf1499db911c988294f5c9ea33e0c454cbec375446a0910fd","first_seen":"2026-03-24T20:21:58.244627Z","last_seen":"2026-03-24T20:24:58.640435Z","times_seen":2,"resource_available":false,"data":null}},"time_used":553,"timings":{"blocked":259,"dns":4,"connect":35,"send":0,"wait":33,"receive":2,"ssl":209},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxbum-twisex.com/api/videos/243547dc-ccaa-465c-9b46-0c3e91f17711/views","fqdn":"xxbum-twisex.com","domain":"xxbum-twisex.com","tld":"com"},"ip":{"addr":"172.67.188.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:27.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxbum-twisex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:44:34 GMT","end":"Mon, 08 Jun 2026 06:44:33 GMT"},"fingerprint":{"sha1":"82:2C:62:75:CA:C2:D4:6C:A3:36:94:FA:1F:83:6A:88:C2:BC:BE:83","sha256":"21:40:60:7E:51:40:F7:17:C4:DF:51:78:27:CE:42:E8:08:88:10:B3:C0:BA:CF:27:B3:53:27:34:85:C5:95:3A"}}},"request":{"raw":"PUT /api/videos/243547dc-ccaa-465c-9b46-0c3e91f17711/views HTTP/1.1\r\nHost: xxbum-twisex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xxbum-twisex.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xxbum-twisex.com/\r\nCookie: i18n_redirected=en; ip_checked=true\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"PUT"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 20:21:27 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 11\r\nx-powered-by: Express\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\netag: W/\"b-Ai2R8hgEarLmHKwesT1qcY913ys\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gfph9azmQOZCnvI%2FOyW7YuZvjlgHE7E0uZqJkkD9tYiDBLQlYbcU3uLSDE8imuUBIo95ByLYe20MCh4AZSWtOlBhGNY7zJsJ1vA99OYrpTs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9e1861df68f4b09c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"82380d1e263b6093f3c7535690fcdd75","sha1":"022d91f218046ab2e61cac1eb13d6a718f75df2b","sha256":"4062edaf750fb8074e7e83e0c9028c94e32468a8b6f1614774328ef045150f93","sha512":"180ea3cf6e7a00cb12ecff7ce095b8cef1921621de681a64e5e53e3efc0cf6053e557205f2bdb9b9d5af4de3d54c79d1c9b1c474b83897590c647b1e92d9c93a","ssdeep":"","tlshash":"2a500003000c0030c00003000300ff30000300300000000c000c3000033000c0003c03","first_seen":"2023-04-05T15:24:10Z","last_seen":"2026-07-26T20:42:08.517719Z","times_seen":16737,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"xxbum-twisex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxbum-twisex.com/_nuxt/builds/meta/a1811157-3418-4aa8-a653-16145069d989.json","fqdn":"xxbum-twisex.com","domain":"xxbum-twisex.com","tld":"com"},"ip":{"addr":"172.67.188.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:28.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxbum-twisex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:44:34 GMT","end":"Mon, 08 Jun 2026 06:44:33 GMT"},"fingerprint":{"sha1":"82:2C:62:75:CA:C2:D4:6C:A3:36:94:FA:1F:83:6A:88:C2:BC:BE:83","sha256":"21:40:60:7E:51:40:F7:17:C4:DF:51:78:27:CE:42:E8:08:88:10:B3:C0:BA:CF:27:B3:53:27:34:85:C5:95:3A"}}},"request":{"raw":"GET /_nuxt/builds/meta/a1811157-3418-4aa8-a653-16145069d989.json HTTP/1.1\r\nHost: xxbum-twisex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xxbum-twisex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: i18n_redirected=en; ip_checked=true\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 20:21:28 GMT\r\ncontent-type: application/json\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 23 Mar 2026 15:50:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 24 Mar 2027 20:21:28 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69c16154-377\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FX1sCCTTuklqjUxDHn4BpLlA6oNdOAJgeX19ut2GlTDGJQvLzdHftkg7mZwQkO3U6IWaKFz24vPQUBQ2SYGyP%2BODartsyfKvtugNX7BELZ4%3D\"}]}\r\ncf-ray: 9e1861e32a0cb09c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":887,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6d83916b85d5a1ea79cc719653ef5c5b","sha1":"7c0629f93f342fa7bdaadde6c2ab64520a3487eb","sha256":"e500547128ab02aa6d980b349e01fdfe7486bbf47728591e46e55a94101f1e09","sha512":"9464bdeead368c845320782af4859b8a3f5ee78f220f78bbe524df4d2238f0d908491e685e0a85fe7a00a1ab55d03b23878f18b7cea5af5c695950825e74c8bb","ssdeep":"","tlshash":"2511e546264d98a09860305339b9c38858d1bc2dfcca5fe698f9435c3aa38523342fe2","first_seen":"2026-03-24T20:21:58.250848Z","last_seen":"2026-03-24T20:21:58.250848Z","times_seen":1,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":59,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"xxbum-twisex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxbum-twisex.com/","fqdn":"xxbum-twisex.com","domain":"xxbum-twisex.com","tld":"com"},"ip":{"addr":"172.67.188.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-24T20:21:25.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxbum-twisex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:44:34 GMT","end":"Mon, 08 Jun 2026 06:44:33 GMT"},"fingerprint":{"sha1":"82:2C:62:75:CA:C2:D4:6C:A3:36:94:FA:1F:83:6A:88:C2:BC:BE:83","sha256":"21:40:60:7E:51:40:F7:17:C4:DF:51:78:27:CE:42:E8:08:88:10:B3:C0:BA:CF:27:B3:53:27:34:85:C5:95:3A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xxbum-twisex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Mar 2026 20:21:25 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Mon, 23 Mar 2026 15:50:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-store, max-age=0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fBieoC%2BF2K%2ByTOW8irpWD8YsaiHgktJ2Kg5Apljhgt4EBPiTunpryvBpIrw8sydtQtWqTVdDDqkZetQf9HyylHfZeNQ%2BvBsK9csEyafQiWs%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9e1861d3abb096b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}],"data":{"size":31646,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (31634), with no line terminators","md5":"c4fb595edc09508f7d91fdcf7f140b41","sha1":"3de5a0398a7924b4c0d885ea6d6855e425c00445","sha256":"890889966b967f97f81da0be3a39c08bb8caa03c77325f6c97ba2ce025d6a80f","sha512":"1044e88c33a1db2420b142530caf58cb7ab03d618936e993456c093f49a258dc4524f26bd7630a03a62222370e209f7c8cd4b958bcc94539985b673bcb0183df","ssdeep":"384:aId+SbZxyWUGNdYZERQXxCtQlCgfeNTNST8+QH/6CqNCMOQzR/yk7sC9mXr6JZiY:aalZxyWUOUfyzYn6P/23c/O","tlshash":"0ee2b531b60c541db03bc7a5b4919b9a225cf313c69b3f98b6b17135cfcb5e62632688","first_seen":"2026-03-24T20:21:58.259963Z","last_seen":"2026-03-24T20:21:58.259963Z","times_seen":1,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":69,"dns":42,"connect":8,"send":0,"wait":159,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"xxbum-twisex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxbum-twisex.com/_nuxt/index.m9wjW9is.css","fqdn":"xxbum-twisex.com","domain":"xxbum-twisex.com","tld":"com"},"ip":{"addr":"172.67.188.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:26.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxbum-twisex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:44:34 GMT","end":"Mon, 08 Jun 2026 06:44:33 GMT"},"fingerprint":{"sha1":"82:2C:62:75:CA:C2:D4:6C:A3:36:94:FA:1F:83:6A:88:C2:BC:BE:83","sha256":"21:40:60:7E:51:40:F7:17:C4:DF:51:78:27:CE:42:E8:08:88:10:B3:C0:BA:CF:27:B3:53:27:34:85:C5:95:3A"}}},"request":{"raw":"GET /_nuxt/index.m9wjW9is.css HTTP/1.1\r\nHost: xxbum-twisex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xxbum-twisex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 20:21:26 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Mon, 23 Mar 2026 15:50:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 24 Mar 2027 20:21:26 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69c16146-1f83\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f8m8ykLmZYrV0UrMK1Im%2FSYWulxgLqc%2BH4N%2BwZuXz0bOuhQ5sAKD8H3hIebkqUTejotGrkE7l75mZuKJYbu9uyebaUIe4TgPkGlc1Cvjivw%3D\"}]}\r\ncf-ray: 9e1861d91f3db09c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8067,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8066)","md5":"2ee55b3274960f123c9c6f13497064f6","sha1":"5df00d443e9fa4a624dfa8f4cb9557c427543bb5","sha256":"381eb7e8a871131c6e6f41f6f9ecba30d726725bb17e25791972c4e225aec70b","sha512":"2d9e9892df36fcaffcdc6f3563fbfdca1bab4aa4f9d83930561454a2c5d84f3fc48c7102dd0b31519174ec79bf91c008c6e0cbfb60df76408212d3bd30e1150b","ssdeep":"192:g9i9i6E9P92919z93k9f9a9j9g9S9h94N95N909B9Uj99cv9ct9hD9h69ub9gj9Q:gYZERQXxCtQlCgfeNTNST8+QH/6CqNCv","tlshash":"9af10f313308602db43be675b492c68e2b9de717d9163b5e96a07630cb8f5db2a351cc","first_seen":"2026-03-24T20:21:58.261413Z","last_seen":"2026-03-24T20:21:58.261413Z","times_seen":1,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"xxbum-twisex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxbum-twisex.com/_nuxt/Cp2x8l1r.js","fqdn":"xxbum-twisex.com","domain":"xxbum-twisex.com","tld":"com"},"ip":{"addr":"172.67.188.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:26.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxbum-twisex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:44:34 GMT","end":"Mon, 08 Jun 2026 06:44:33 GMT"},"fingerprint":{"sha1":"82:2C:62:75:CA:C2:D4:6C:A3:36:94:FA:1F:83:6A:88:C2:BC:BE:83","sha256":"21:40:60:7E:51:40:F7:17:C4:DF:51:78:27:CE:42:E8:08:88:10:B3:C0:BA:CF:27:B3:53:27:34:85:C5:95:3A"}}},"request":{"raw":"GET /_nuxt/Cp2x8l1r.js HTTP/1.1\r\nHost: xxbum-twisex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xxbum-twisex.com/_nuxt/Bk8Q-iBq.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 20:21:26 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 23 Mar 2026 15:50:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 24 Mar 2027 20:21:26 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"69c16146-7f318\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gZRcF4CH8olgOUAJBK40pf4MIkmlwP61hPqKgNjMJvKL8JSxAI4uZcji%2Bi7oW6D1J8mp4iC1mPvVXD9r4gMgObCYjzjwNchuxC2XhEE43NQ%3D\"}]}\r\ncf-ray: 9e1861da4801b09c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520984,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (45722)","md5":"fe6c36baf036e49c4ab0e7b8285e5aed","sha1":"078790202aec109c31423e14676d40d3b0689568","sha256":"40fc0faac2e9b5601803d160346c3b89343bb2010fc2896bd80c3e5f833559eb","sha512":"f998520381f797e0260c6e14618ec9f5ad537c1812f3db9034b6107b40adf6d51e3dc1f80995b11470c83dd1bccd612346a07e3938034fca891dab9388250aa9","ssdeep":"12288:Shbg9Vak0rYQZJN4nM+/Jtczkeiu1k1fz+p6zgu+HLvjtKNGDDLXa2llduuZkEbO:Shbg9Vak0rYQZJN4nM+/Jtcgeiu1k1fp","tlshash":"5eb44bd932ea542787d09aca947546127339bd0a7408c0ecfe3ebddb2e16941b07af74","first_seen":"2026-03-03T17:53:10.371859Z","last_seen":"2026-06-20T13:42:42.936989Z","times_seen":17,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"xxbum-twisex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxbum-twisex.com/api/widgets/floating?project=all","fqdn":"xxbum-twisex.com","domain":"xxbum-twisex.com","tld":"com"},"ip":{"addr":"172.67.188.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:27.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxbum-twisex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:44:34 GMT","end":"Mon, 08 Jun 2026 06:44:33 GMT"},"fingerprint":{"sha1":"82:2C:62:75:CA:C2:D4:6C:A3:36:94:FA:1F:83:6A:88:C2:BC:BE:83","sha256":"21:40:60:7E:51:40:F7:17:C4:DF:51:78:27:CE:42:E8:08:88:10:B3:C0:BA:CF:27:B3:53:27:34:85:C5:95:3A"}}},"request":{"raw":"GET /api/widgets/floating?project=all HTTP/1.1\r\nHost: xxbum-twisex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xxbum-twisex.com/\r\nCookie: i18n_redirected=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 20:21:27 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 12\r\nx-powered-by: Express\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\netag: W/\"c-F6g7sByJuuOcYYkgTnzj94yg+ZE\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A9P0Tl%2BkqEpHYmP2f8XvWpY3Kxa%2BW803vmxmlvx1C8EexbS5xZZbQqvN%2BTOIlz2%2BBsi7dB67%2FQHkYZ%2Fg%2FPNWgymSMiJt7OBYHKbwuHZSNZA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9e1861dc6859b09c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"52f30c97cbacaf796aed3ba46af9737b","sha1":"17a83bb01c89bae39c6189204e7ce3f78ca0f991","sha256":"eef46741adfc3a9f76294d3b78f37a45f113092ac9d44ee77c7a038a88ff09a1","sha512":"c1e3a691fa1d6e38afaa0305b697aec0204c864850878ad3cff2b1c5743af488547755e7bdf54dbc978192ac0baecdeab30aa0a21f6c82afdb69ef13a6aadcf6","ssdeep":"","tlshash":"2c6000003003000033003000cc0c0c0000c00000c33030300c000cc303000030cf000c","first_seen":"2023-04-05T18:52:02Z","last_seen":"2026-07-26T18:27:39.54182Z","times_seen":2181,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"xxbum-twisex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxmdias-cdn.b-cdn.net/thumbs/14a6d2152c92ec3cc3895d2b79ecff50.webp","fqdn":"xxmdias-cdn.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"185.59.220.199","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:27.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /thumbs/14a6d2152c92ec3cc3895d2b79ecff50.webp HTTP/1.1\r\nHost: xxmdias-cdn.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xxbum-twisex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Mar 2026 20:21:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 39602\r\nserver: BunnyCDN-DE1-722\r\ncdn-pullzone: 5455748\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\nlast-modified: Mon, 23 Mar 2026 22:45:22 GMT\r\ncdn-storageserver: DE-661\r\ncdn-fileserver: 1260\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 206\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1076\r\ncdn-cachedat: 03/24/2026 20:08:33\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: c06258b5f1f7b24d561be8d62748b4a8\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":39602,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x2276, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7041eb820aabb83f2c814ea31997e944","sha1":"9a1120659b9c874b9ebc6667530bbf114f6873e0","sha256":"d3685401270c640388c6af512f979aee22c0b8b7c756d7f4499c4a4bedae637d","sha512":"3e3663a6598129e7d6a207cc8c3f41e80faa5a5d6f68185d89f954a6c8a0df022349716ece2b5beff666544e3c5db1958a40a021e338cf1e5fb6dbc13f653be2","ssdeep":"768:ngBLzvUgikprzSN0QAiHLz6X09I2jfj/2UfXCf194nl56/VyJNg7hYkvyN:ngBHikpyGmLzjI2jfj/bfan4l8gS+k6N","tlshash":"4703f1f33507f5f6042ca80e5da046eafe4f6ac9cf38915b7c2068276d0adeeb516145","first_seen":"2026-03-24T20:21:58.263616Z","last_seen":"2026-03-24T20:21:58.263616Z","times_seen":1,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":96,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxmdias-cdn.b-cdn.net/thumbs/c5a88df707b26c9f7fd38381a3d9b4a1.webp","fqdn":"xxmdias-cdn.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"185.59.220.199","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:27.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /thumbs/c5a88df707b26c9f7fd38381a3d9b4a1.webp HTTP/1.1\r\nHost: xxmdias-cdn.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xxbum-twisex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Mar 2026 20:21:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 218150\r\nserver: BunnyCDN-DE1-722\r\ncdn-pullzone: 5455748\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\nlast-modified: Mon, 23 Mar 2026 22:43:59 GMT\r\ncdn-storageserver: DE-1140\r\ncdn-fileserver: 986\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 206\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 865\r\ncdn-cachedat: 03/24/2026 20:08:33\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: fed2b34593e9752a2d006c845540e3cd\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":218150,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x2276, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0131a3ba846c309df732e26ae6410936","sha1":"b8b11298ed762468ff62e96c9641fa62f99af28b","sha256":"720384ea995434e82af4e358ea067252db9185fc1372501e83b730678b2581d3","sha512":"187f45ff7a75a92f975ac6d0aae0a9901185bbd6bcdbf4ff007523954c54eef95b60408b51e7e53c26d6af98c80393fed208eedf204d97ba51d12c26255de709","ssdeep":"3072:a3oM/zAKxijulJakBZq0M8lhla45XHjRpRnLV1l8i09cKh6l5aNGt9p9e6Bw7DST:6BVbakvDnv4WyNGt8C0u+A","tlshash":"25242363779cc0a6d7fd214cc42ffc6cb965e2c8b5848d94504b6e6a780ce519f282e7","first_seen":"2026-03-24T20:21:58.264715Z","last_seen":"2026-03-24T20:21:58.264715Z","times_seen":1,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":99,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxmdias-cdn.b-cdn.net/hls/e8218b98d75878fd4f6042d8b2e84fdd/index.m3u8","fqdn":"xxmdias-cdn.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"185.59.220.199","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:27.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /hls/e8218b98d75878fd4f6042d8b2e84fdd/index.m3u8 HTTP/1.1\r\nHost: xxmdias-cdn.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xxbum-twisex.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xxbum-twisex.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Mar 2026 20:21:27 GMT\r\ncontent-type: application/vnd.apple.mpegurl\r\nserver: BunnyCDN-DE1-722\r\ncdn-pullzone: 5455748\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"69c1c361-103\"\r\nlast-modified: Mon, 23 Mar 2026 22:49:05 GMT\r\ncdn-storageserver: DE-1139\r\ncdn-fileserver: 1124\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 864\r\ncdn-cachedat: 03/24/2026 20:21:27\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 8d701f621ccad88914e281fde2bd46a7\r\ncdn-cache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":259,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"260a7f60675817cfb0a30642f8eaeeac","sha1":"91bbb4cabeec0e362bd781f90ca1fef41e5953ec","sha256":"c491e3e5c3ed6246e30d40d5c3ee95ffe1fb18f3f50f42ce909599aa5dc13178","sha512":"9aeb51166696d0a6fe1daad661858eebde6f88a1dbb96453c948bb1b88cf24c3132dcc9b292977cc9f218595c188caf43fb031419c42638a882262463abd4e82","ssdeep":"","tlshash":"b8d06706a79e794cc85d4ea68146ad9273b37c7a0dec65d250a12b8119e36da33cc621","first_seen":"2026-03-24T20:21:58.265769Z","last_seen":"2026-03-24T20:21:58.265769Z","times_seen":1,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":56,"dns":1,"connect":23,"send":0,"wait":45,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxbum-twisex.com/_nuxt/entry.B8VZLqiY.css","fqdn":"xxbum-twisex.com","domain":"xxbum-twisex.com","tld":"com"},"ip":{"addr":"172.67.188.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:26.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxbum-twisex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:44:34 GMT","end":"Mon, 08 Jun 2026 06:44:33 GMT"},"fingerprint":{"sha1":"82:2C:62:75:CA:C2:D4:6C:A3:36:94:FA:1F:83:6A:88:C2:BC:BE:83","sha256":"21:40:60:7E:51:40:F7:17:C4:DF:51:78:27:CE:42:E8:08:88:10:B3:C0:BA:CF:27:B3:53:27:34:85:C5:95:3A"}}},"request":{"raw":"GET /_nuxt/entry.B8VZLqiY.css HTTP/1.1\r\nHost: xxbum-twisex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xxbum-twisex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 20:21:26 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Mon, 23 Mar 2026 15:50:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 24 Mar 2027 20:21:26 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69c16146-dd99\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fDddNuDkH5%2B5mn8a2BN1En7pIGNs%2Fb4ysOK9%2BYLUcEH%2Fxuwqf2Ua%2BQgP5XqSZoLg8GSAUFDJ4o5IQ%2B6KLzoXWnNhWyySrsyBKe%2F7WK9%2BqcQ%3D\"}]}\r\ncf-ray: 9e1861d5dde5b09c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56729,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (56721)","md5":"c367ec2691eff4fabb8298404f4b926b","sha1":"e234ce3355a347de8751ccdea9da3c8511acbcf5","sha256":"ee445315949cfe9db9282c3dee3c33cc49fb3c32815dcfbb5f6b33b07248f440","sha512":"fc0e5f868b0a9822c2405e6ca4b5f7d13e8bd4ec05e7b33356d8412f70b3c3141ec413bccf4b5acbe452445feada6010f0aac0a7ee2c33b1ee602b75d9cc6a0e","ssdeep":"384:YIVFKTAnp90A5DhPbX3gYVDO5+7D6Sdykn0Cc+nY9WO39AYTNi+SbZxyWUV:YIVDJ51bXz57YCc+nY9WOm+ilZxyWUV","tlshash":"32439531b108612db03bd6e4b8e09bde7228e113d2634bdcf6a5b179c9c75a71a36748","first_seen":"2026-03-24T20:21:58.270008Z","last_seen":"2026-03-24T20:21:58.270008Z","times_seen":1,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"xxbum-twisex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxbum-twisex.com/api/videos?page=1\u0026pageSize=20\u0026category=twisex","fqdn":"xxbum-twisex.com","domain":"xxbum-twisex.com","tld":"com"},"ip":{"addr":"172.67.188.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:27.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxbum-twisex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:44:34 GMT","end":"Mon, 08 Jun 2026 06:44:33 GMT"},"fingerprint":{"sha1":"82:2C:62:75:CA:C2:D4:6C:A3:36:94:FA:1F:83:6A:88:C2:BC:BE:83","sha256":"21:40:60:7E:51:40:F7:17:C4:DF:51:78:27:CE:42:E8:08:88:10:B3:C0:BA:CF:27:B3:53:27:34:85:C5:95:3A"}}},"request":{"raw":"GET /api/videos?page=1\u0026pageSize=20\u0026category=twisex HTTP/1.1\r\nHost: xxbum-twisex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xxbum-twisex.com/\r\nCookie: i18n_redirected=en; ip_checked=true\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 20:21:27 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hROK%2BeObm%2FXJfh5vw10z3xN7nSmKUruW60X5%2FGY6P60t80AIBnP5aHD6ps7lvgWBs1AaJfSzSMWpdNecnA9UjGmRLvMySgmVUT%2B3XoAzKPA%3D\"}]}\r\nx-powered-by: Express\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\netag: W/\"2e46-ndZpQ5pwzIqdPrPdX8tIgRxuZSs\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9e1861ddb889b09c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11846,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2f1f362b0f20aa4e62f17655a0e72a6f","sha1":"9dd669439a70cc8a9d3eb3dd5fcb48811c6e652b","sha256":"01d352adf3140799e2cc885a9b7603864a1c2bcaf494fde572c8829842775ac0","sha512":"097201107512bfc95b3c59ea4e9bba9101644ec8355e7f8bdfe6a75d814e638cf91c4d2edfe18673378d2e5f9fc24c55a60b5a8172d6a465ec4ff2f360fcbfaf","ssdeep":"192:Xw6TaxVVWjiRt4u6IQGWU1bsJtFUaq71zyMskyJHKMT5IU+LuddlwW9oQe9:XjeJJvrQVIw/+HAMdmnuGdKFL9","tlshash":"0832e0b6a3e8051a3b65b68b9d477c96899e352f6c43adc9fdb0cd0d40f85b08e4d01a","first_seen":"2026-03-24T20:21:58.27133Z","last_seen":"2026-03-24T20:21:58.27133Z","times_seen":1,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"xxbum-twisex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxmdias-cdn.b-cdn.net/thumbs/420e0b3d0adbcf787bdab160fc8c2ca7.webp","fqdn":"xxmdias-cdn.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"185.59.220.199","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:27.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /thumbs/420e0b3d0adbcf787bdab160fc8c2ca7.webp HTTP/1.1\r\nHost: xxmdias-cdn.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xxbum-twisex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Mar 2026 20:21:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 74972\r\nserver: BunnyCDN-DE1-722\r\ncdn-pullzone: 5455748\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\nlast-modified: Mon, 23 Mar 2026 22:47:59 GMT\r\ncdn-storageserver: DE-757\r\ncdn-fileserver: 1257\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 206\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1047\r\ncdn-cachedat: 03/24/2026 20:08:33\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 75abd2a602f1fd79fb45f1443725b68c\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":74972,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x1280, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"079b411d18b3fd5e0bb2e8156ecbf47a","sha1":"9ff9037241fa4ada7079a6c693df686f509f0fd0","sha256":"828a67f020d6831f121ab7ac3b69ef02451f7d29f49ffa2e06c2daa0fb0dedfa","sha512":"4169ecbf5d528702670920c593a4c3fa773c762a40b210aa368baa3d5aaf48824c840b41a36084d0e88cc63000848e06bd8f0e5e39c07459e29673727be6a76c","ssdeep":"1536:EV1ZSt3rGHD0tffViPZtWHvcLZvWS3WUJse3M9E1u/GN0:Z3rGj0tVeZ2UdVxWV/c0","tlshash":"8a7302297311c53a94a4c488e28cd3673179c93fd8f0db3f07aa85d7369d934d69a326","first_seen":"2026-03-24T20:21:58.273485Z","last_seen":"2026-03-24T20:24:58.657834Z","times_seen":2,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":80,"dns":0,"connect":0,"send":0,"wait":69,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxmdias-cdn.b-cdn.net/hls/e8218b98d75878fd4f6042d8b2e84fdd/index0.ts","fqdn":"xxmdias-cdn.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"185.59.220.199","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:27.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /hls/e8218b98d75878fd4f6042d8b2e84fdd/index0.ts HTTP/1.1\r\nHost: xxmdias-cdn.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xxbum-twisex.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xxbum-twisex.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Mar 2026 20:21:27 GMT\r\ncontent-type: video/mp2t\r\ncontent-length: 2950284\r\nserver: BunnyCDN-DE1-722\r\ncdn-pullzone: 5455748\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 23 Mar 2026 22:49:05 GMT\r\ncdn-storageserver: DE-768\r\ncdn-fileserver: 1124\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 206\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1333\r\ncdn-cachedat: 03/24/2026 20:08:33\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 68d28decccd3c3304fa1fd64bbd032f0\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2950284,"size_decoded":0,"mime_type":"video/mp2t","magic":"data","md5":"d434b1833e55f0527ea4f2d5625a1750","sha1":"0671049423c56d59f8f7e458de4074b173218623","sha256":"0b8f1bfcb6a8c28952ddff4bb81df3d79e161dee9ac13c0d5e80ce594359c77c","sha512":"f0859aa2f032f0bb1c005c3d4168c8ce2080bea52b57f3bec6cbc1f5b730b55093f0fe50479c538c545095afd9e6ac0862604bf4f9cd09006e683e72d9271d4c","ssdeep":"24576:0BOvjDAujsrXrwAPN1nzYldAjex9RONnfEudPmEco/Lo:0OvAOs70APN1n0lf9RmE8Pho","tlshash":"ff25236d6ba02e975a500ad2514cdafbe3319d400f88af6722def71ef2fc2d5d048259","first_seen":"2026-03-24T20:21:58.276257Z","last_seen":"2026-03-24T20:21:58.276257Z","times_seen":1,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":260,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxbum-twisex.com/_nuxt/DjVT8uM0.js","fqdn":"xxbum-twisex.com","domain":"xxbum-twisex.com","tld":"com"},"ip":{"addr":"172.67.188.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:26.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxbum-twisex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:44:34 GMT","end":"Mon, 08 Jun 2026 06:44:33 GMT"},"fingerprint":{"sha1":"82:2C:62:75:CA:C2:D4:6C:A3:36:94:FA:1F:83:6A:88:C2:BC:BE:83","sha256":"21:40:60:7E:51:40:F7:17:C4:DF:51:78:27:CE:42:E8:08:88:10:B3:C0:BA:CF:27:B3:53:27:34:85:C5:95:3A"}}},"request":{"raw":"GET /_nuxt/DjVT8uM0.js HTTP/1.1\r\nHost: xxbum-twisex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xxbum-twisex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 20:21:26 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 23 Mar 2026 15:50:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 24 Mar 2027 20:21:26 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69c16146-182\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BsBsN1Hjv9a6sVCtENlVRMEy%2FjAu%2Faz9e23Y0iQHqQZf4z%2BcUKC6inIjE6X0o%2BlSBUR9bXTohqO%2FFTKYapAT8y8BwNVZdX2O2Lz4%2Bqt4dgw%3D\"}]}\r\ncf-ray: 9e1861d88ee9b09c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":386,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (385)","md5":"eaf4b251c3400eb326fa5486064ea94d","sha1":"e72cd2dd2c4065105c838328296f9846d7bda8ca","sha256":"e4318537b0d28a79b254e35b3a55c722cc4daedd8e021eeec6115a24ee8735f9","sha512":"51e1f8823f87308687cd9716efa52becf5791d4752607f143ccdb7c63e10793508136dcbbd66bedae37b7cf61d33a4e0b69b64116c23ab4fe711ca23928399bb","ssdeep":"","tlshash":"9ae0611e398a242615d051fd84abe11cc039e000333f9d50d07696c13ca6c6fc377d4e","first_seen":"2026-03-24T20:21:58.277757Z","last_seen":"2026-03-24T20:21:58.277757Z","times_seen":1,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"xxbum-twisex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxbum-twisex.com/_nuxt/Bk8Q-iBq.js","fqdn":"xxbum-twisex.com","domain":"xxbum-twisex.com","tld":"com"},"ip":{"addr":"172.67.188.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:26.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxbum-twisex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:44:34 GMT","end":"Mon, 08 Jun 2026 06:44:33 GMT"},"fingerprint":{"sha1":"82:2C:62:75:CA:C2:D4:6C:A3:36:94:FA:1F:83:6A:88:C2:BC:BE:83","sha256":"21:40:60:7E:51:40:F7:17:C4:DF:51:78:27:CE:42:E8:08:88:10:B3:C0:BA:CF:27:B3:53:27:34:85:C5:95:3A"}}},"request":{"raw":"GET /_nuxt/Bk8Q-iBq.js HTTP/1.1\r\nHost: xxbum-twisex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xxbum-twisex.com/_nuxt/OW8m93Sr.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 20:21:26 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 23 Mar 2026 15:50:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 24 Mar 2027 20:21:26 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"69c16146-283e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c2J6L7dBLJrY6w%2FuafH7MaHI0TbTpNHcX7sokXQDFfq5JWJ9YmMwulptgOeKGurj1kA7WKroWfALEmBlRGe9wC7%2FUiVFB1uDbz1DPVIVQKs%3D\"}]}\r\ncf-ray: 9e1861da1fe7b09c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10302,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (10283)","md5":"60c585050e2fb0f36d038b3f9f0f0ef9","sha1":"c768b4b8b64c029ef201d2b66d06e237ab5dee55","sha256":"3963460dc312c6b115f29832e39a9e5c69744156ad413e826ecec7b5bfff11c2","sha512":"d300c9617f2bdcac480aa8a2dd0f70e073e7d1cf5691c8886e16b771cc638172b1a96bf6a3bda29af2912096e8d3fe8ce9b8ab873a02660c78e71711f65faada","ssdeep":"192:b/OGLs0y0PtVnQS63D71PwFoYxCZsaPBcGoOpJswg5EiFyWol02O9k5aslT1UVwC:iGLVzPtVN63v1PeoYxqVP/oOpJswkEnm","tlshash":"b1221c55b521d33ac3f66450426d1040b1780fa5b191c8d6fcbc1e1b0baaef16b3faa9","first_seen":"2026-03-24T20:21:58.238834Z","last_seen":"2026-03-24T20:21:58.238834Z","times_seen":1,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"xxbum-twisex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxbum-twisex.com/api/short/active?project=twisex","fqdn":"xxbum-twisex.com","domain":"xxbum-twisex.com","tld":"com"},"ip":{"addr":"172.67.188.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:27.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxbum-twisex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:44:34 GMT","end":"Mon, 08 Jun 2026 06:44:33 GMT"},"fingerprint":{"sha1":"82:2C:62:75:CA:C2:D4:6C:A3:36:94:FA:1F:83:6A:88:C2:BC:BE:83","sha256":"21:40:60:7E:51:40:F7:17:C4:DF:51:78:27:CE:42:E8:08:88:10:B3:C0:BA:CF:27:B3:53:27:34:85:C5:95:3A"}}},"request":{"raw":"GET /api/short/active?project=twisex HTTP/1.1\r\nHost: xxbum-twisex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xxbum-twisex.com/\r\nCookie: i18n_redirected=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 20:21:27 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WOjGSPkT2%2BAln%2FnV6X18BeYyVZfVvgTQYAvrp8gmjOx%2B3WYmgouos%2BaGBBsCdJDIEaXcobQpmw2F1yj63cY9zUJq3c0bCdaq7qnU8FnDUN4%3D\"}]}\r\nx-powered-by: Express\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\netag: W/\"171-MC3Zux6lBx9+s59LgYoEMZ7SM98\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9e1861dc6854b09c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":369,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"27e95675ec05b62751f35b9b506579da","sha1":"302dd9bb1ea5071f7eb39f4b818a04319ed233df","sha256":"f9a9d94445c980c6abb1f4c70b5021be6761a6aab8e8152c360b289eaa164ffa","sha512":"24b0c799eb25f2566a28ffba67b344ce4b506bf81c727b90a8710588d238cf37fb96fb546288005f7143c511d84613137252f23bedc8e4a4d39e37bd2061471e","ssdeep":"","tlshash":"06e0f8f24763b2211951268ab8b6bfc0a06a389b288198c1be30cc0c812cae30f0480b","first_seen":"2026-03-24T20:17:23.788617Z","last_seen":"2026-03-24T20:22:40.230316Z","times_seen":3,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"xxbum-twisex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxbum-twisex.com/api/widgets/floating?project=twisex","fqdn":"xxbum-twisex.com","domain":"xxbum-twisex.com","tld":"com"},"ip":{"addr":"172.67.188.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:27.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxbum-twisex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:44:34 GMT","end":"Mon, 08 Jun 2026 06:44:33 GMT"},"fingerprint":{"sha1":"82:2C:62:75:CA:C2:D4:6C:A3:36:94:FA:1F:83:6A:88:C2:BC:BE:83","sha256":"21:40:60:7E:51:40:F7:17:C4:DF:51:78:27:CE:42:E8:08:88:10:B3:C0:BA:CF:27:B3:53:27:34:85:C5:95:3A"}}},"request":{"raw":"GET /api/widgets/floating?project=twisex HTTP/1.1\r\nHost: xxbum-twisex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xxbum-twisex.com/\r\nCookie: i18n_redirected=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 20:21:27 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 12\r\nx-powered-by: Express\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\netag: W/\"c-F6g7sByJuuOcYYkgTnzj94yg+ZE\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pVwv78XGbLeaCHQ%2BWjvZQzb2y3SXzTpvsuV7OvIwLC9wMt8zxDLoNx6PH7LBIdH6c6raBQ7qoUsEY%2BdqvmcMV4CVPgPCdfMcqPZaelG4yIw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9e1861dc6858b09c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"52f30c97cbacaf796aed3ba46af9737b","sha1":"17a83bb01c89bae39c6189204e7ce3f78ca0f991","sha256":"eef46741adfc3a9f76294d3b78f37a45f113092ac9d44ee77c7a038a88ff09a1","sha512":"c1e3a691fa1d6e38afaa0305b697aec0204c864850878ad3cff2b1c5743af488547755e7bdf54dbc978192ac0baecdeab30aa0a21f6c82afdb69ef13a6aadcf6","ssdeep":"","tlshash":"2c6000003003000033003000cc0c0c0000c00000c33030300c000cc303000030cf000c","first_seen":"2023-04-05T18:52:02Z","last_seen":"2026-07-26T18:27:39.54182Z","times_seen":2181,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"xxbum-twisex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxbum-twisex.com/api/widgets/preroll?project=twisex","fqdn":"xxbum-twisex.com","domain":"xxbum-twisex.com","tld":"com"},"ip":{"addr":"172.67.188.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:27.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxbum-twisex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:44:34 GMT","end":"Mon, 08 Jun 2026 06:44:33 GMT"},"fingerprint":{"sha1":"82:2C:62:75:CA:C2:D4:6C:A3:36:94:FA:1F:83:6A:88:C2:BC:BE:83","sha256":"21:40:60:7E:51:40:F7:17:C4:DF:51:78:27:CE:42:E8:08:88:10:B3:C0:BA:CF:27:B3:53:27:34:85:C5:95:3A"}}},"request":{"raw":"GET /api/widgets/preroll?project=twisex HTTP/1.1\r\nHost: xxbum-twisex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xxbum-twisex.com/\r\nCookie: i18n_redirected=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 20:21:27 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 12\r\nx-powered-by: Express\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\netag: W/\"c-F6g7sByJuuOcYYkgTnzj94yg+ZE\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kQ8cwjW3RP1Wt%2FWPuF4ZCnXZVE1FY0JGQLYfu6Ee6hmQ9wB6Srb1XnyMsOQqzSp9yHkU%2BpL%2BLFOOpIqyJkifm1t4VvVzX7%2Fj%2BjwtPBqROYQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9e1861dd487bb09c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"52f30c97cbacaf796aed3ba46af9737b","sha1":"17a83bb01c89bae39c6189204e7ce3f78ca0f991","sha256":"eef46741adfc3a9f76294d3b78f37a45f113092ac9d44ee77c7a038a88ff09a1","sha512":"c1e3a691fa1d6e38afaa0305b697aec0204c864850878ad3cff2b1c5743af488547755e7bdf54dbc978192ac0baecdeab30aa0a21f6c82afdb69ef13a6aadcf6","ssdeep":"","tlshash":"2c6000003003000033003000cc0c0c0000c00000c33030300c000cc303000030cf000c","first_seen":"2023-04-05T18:52:02Z","last_seen":"2026-07-26T18:27:39.54182Z","times_seen":2181,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"xxbum-twisex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxbum-twisex.com/?t=1774383687257","fqdn":"xxbum-twisex.com","domain":"xxbum-twisex.com","tld":"com"},"ip":{"addr":"172.67.188.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:27.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxbum-twisex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:44:34 GMT","end":"Mon, 08 Jun 2026 06:44:33 GMT"},"fingerprint":{"sha1":"82:2C:62:75:CA:C2:D4:6C:A3:36:94:FA:1F:83:6A:88:C2:BC:BE:83","sha256":"21:40:60:7E:51:40:F7:17:C4:DF:51:78:27:CE:42:E8:08:88:10:B3:C0:BA:CF:27:B3:53:27:34:85:C5:95:3A"}}},"request":{"raw":"HEAD /?t=1774383687257 HTTP/1.1\r\nHost: xxbum-twisex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xxbum-twisex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: i18n_redirected=en; ip_checked=true\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 20:21:27 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 23 Mar 2026 15:50:40 GMT\r\ncontent-encoding: br\r\ncache-control: no-store, max-age=0\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z8FuNGsoEzeBiPIf7TdTpAcVWktINreMmSbvUjDeFu%2FGR7TNenDv19E3Oh2k9VqBJ%2FKcI83GWiopNyjyf3YDEYcEx1vjBs5Sl7c7QU8kTVo%3D\"}]}\r\ncf-ray: 9e1861dd687db09c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T22:51:02.582672Z","times_seen":17551384,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"xxbum-twisex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxmdias-cdn.b-cdn.net/thumbs/3855b66d1fab0c41a1287ceaaf3c3d69.webp","fqdn":"xxmdias-cdn.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"185.59.220.199","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:27.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /thumbs/3855b66d1fab0c41a1287ceaaf3c3d69.webp HTTP/1.1\r\nHost: xxmdias-cdn.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xxbum-twisex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Mar 2026 20:21:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19592\r\nserver: BunnyCDN-DE1-722\r\ncdn-pullzone: 5455748\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\nlast-modified: Mon, 23 Mar 2026 22:48:36 GMT\r\ncdn-storageserver: DE-1138\r\ncdn-fileserver: 1248\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 206\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1053\r\ncdn-cachedat: 03/24/2026 20:08:33\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 19bd06504a9f3e8ef133179bdf362563\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":19592,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x728, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"23616fcd54d232eebf2ffe31ebbabd53","sha1":"1869da7416f40a9262adc95c29d282b5d27fa54b","sha256":"f3b95e71703ca2542205abde1c3efa62d7ce9496b99a0c748b564ccb1ca6ac46","sha512":"404fb5571b2f6d2fe05aabfcacaac98914ac4f7721ed66d2419ae6ff868528b6ff24dd3bdcc4e4b4f79547511821adfd63d4dac87f0fefcc8ad07648f2f84f63","ssdeep":"384:DE5xdVZpOJvQksXPA54NMEElTxa6MgIIYqkIobCtgdYwtLQNaXlLH+C:QDiQksXPULa6MgIxrUwzXlLH+C","tlshash":"cc92e1c1a50c65198b7f253cf7c88329b700d575d691b73b1c4b28a8c476a418bbfa6f","first_seen":"2026-03-24T20:21:58.289068Z","last_seen":"2026-03-24T20:24:58.640877Z","times_seen":2,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":135,"dns":11,"connect":35,"send":0,"wait":59,"receive":18,"ssl":129},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxmdias-cdn.b-cdn.net/thumbs/626fc538bc521fe88a6396eeeb54f104.webp","fqdn":"xxmdias-cdn.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"185.59.220.199","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:27.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /thumbs/626fc538bc521fe88a6396eeeb54f104.webp HTTP/1.1\r\nHost: xxmdias-cdn.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xxbum-twisex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Mar 2026 20:21:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19212\r\nserver: BunnyCDN-DE1-722\r\ncdn-pullzone: 5455748\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\nlast-modified: Mon, 23 Mar 2026 22:48:17 GMT\r\ncdn-storageserver: DE-757\r\ncdn-fileserver: 1254\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 206\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1334\r\ncdn-cachedat: 03/24/2026 20:08:33\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 9ea6e89211a3b72317ef4963b7728bc8\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":19212,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"23ca5ee2fad803855525aa383e995399","sha1":"9349671adb871b7d313f78ded856971d6877e00c","sha256":"65b4128bba564eb8f925d11e16319e41101e9061e053ea5e0cafc5d690d499e5","sha512":"814fedf01f3de63e481df99d37dfe59b5896ea747ca8d2ee47384982abfd3bae9a49a65500a643c3facc9f5284240283666b87224ba9ccfd47cb7c6650cca9b1","ssdeep":"384:YQjkKdlPIpJekQjy66hhgbHvboR1mWPzn1XRMtb4l7aQ:lkKEe9jyMcR1mjEV","tlshash":"e582e0923eed5c8589c2ad7209b9ef24509f3362b816970eb152cefc4c90ee1352047e","first_seen":"2026-03-24T20:21:58.291403Z","last_seen":"2026-03-24T20:24:58.657109Z","times_seen":2,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":98,"dns":13,"connect":35,"send":0,"wait":91,"receive":11,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxbum-twisex.com/_payload.json?a1811157-3418-4aa8-a653-16145069d989","fqdn":"xxbum-twisex.com","domain":"xxbum-twisex.com","tld":"com"},"ip":{"addr":"172.67.188.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:26.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxbum-twisex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:44:34 GMT","end":"Mon, 08 Jun 2026 06:44:33 GMT"},"fingerprint":{"sha1":"82:2C:62:75:CA:C2:D4:6C:A3:36:94:FA:1F:83:6A:88:C2:BC:BE:83","sha256":"21:40:60:7E:51:40:F7:17:C4:DF:51:78:27:CE:42:E8:08:88:10:B3:C0:BA:CF:27:B3:53:27:34:85:C5:95:3A"}}},"request":{"raw":"GET /_payload.json?a1811157-3418-4aa8-a653-16145069d989 HTTP/1.1\r\nHost: xxbum-twisex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xxbum-twisex.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 20:21:26 GMT\r\ncontent-type: application/json\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 23 Mar 2026 15:50:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-store, max-age=0\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69c16150-57\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xfhnt0eg79n9tlEaUBRJKrZerPRRiXBWsUtTNJhAsMRGfvtrRyomZVHtAZOh%2FwO7JyhJ8iQI4nv%2FQpfpfhnUGzdcsdMSZPj14gqzVX9ItaU%3D\"}]}\r\ncf-ray: 9e1861d5dde6b09c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c1ac668ae8f983d33b7201d71b4104e7","sha1":"8dd1b95d6785f36655f595359cd949a6febfe2a2","sha256":"3dbf127829e5665d07fc691430216d9b7fdfa398aa71a4b6901ef62fc30f7893","sha512":"a327eeba96f4e35976d6239fcc9b10bad216ac310b64fd5d8219cda70e01f43ae09ce71bf8e8a7c58fe13fec05765f45ed41ad60a93b0a14c90853e62140e005","ssdeep":"","tlshash":"75b012295a78208908410498c42a44c0c748123249dc01931361103e88d9c6b6404824","first_seen":"2026-03-24T20:21:58.241014Z","last_seen":"2026-03-24T20:21:58.241014Z","times_seen":1,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"xxbum-twisex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxbum-twisex.com/_nuxt/DjVT8uM0.js","fqdn":"xxbum-twisex.com","domain":"xxbum-twisex.com","tld":"com"},"ip":{"addr":"172.67.188.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:26.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxbum-twisex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:44:34 GMT","end":"Mon, 08 Jun 2026 06:44:33 GMT"},"fingerprint":{"sha1":"82:2C:62:75:CA:C2:D4:6C:A3:36:94:FA:1F:83:6A:88:C2:BC:BE:83","sha256":"21:40:60:7E:51:40:F7:17:C4:DF:51:78:27:CE:42:E8:08:88:10:B3:C0:BA:CF:27:B3:53:27:34:85:C5:95:3A"}}},"request":{"raw":"GET /_nuxt/DjVT8uM0.js HTTP/1.1\r\nHost: xxbum-twisex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xxbum-twisex.com/_nuxt/Bk8Q-iBq.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 20:21:26 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 23 Mar 2026 15:50:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 24 Mar 2027 20:21:26 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"69c16146-182\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ldv7jpxm0uU126O%2F7rihtjDfth3IuGa2huZmjGZ7xIbbln2d9aWka9w2OAYqS%2BpWr5atK0dJOgVuSOHBEB%2FA5Yu8e7mSIQqSgcmPo1VYA4Y%3D\"}]}\r\ncf-ray: 9e1861da4802b09c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":386,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (385)","md5":"eaf4b251c3400eb326fa5486064ea94d","sha1":"e72cd2dd2c4065105c838328296f9846d7bda8ca","sha256":"e4318537b0d28a79b254e35b3a55c722cc4daedd8e021eeec6115a24ee8735f9","sha512":"51e1f8823f87308687cd9716efa52becf5791d4752607f143ccdb7c63e10793508136dcbbd66bedae37b7cf61d33a4e0b69b64116c23ab4fe711ca23928399bb","ssdeep":"","tlshash":"9ae0611e398a242615d051fd84abe11cc039e000333f9d50d07696c13ca6c6fc377d4e","first_seen":"2026-03-24T20:21:58.277757Z","last_seen":"2026-03-24T20:21:58.277757Z","times_seen":1,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"xxbum-twisex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxbum-twisex.com/api/widgets/mainPopup","fqdn":"xxbum-twisex.com","domain":"xxbum-twisex.com","tld":"com"},"ip":{"addr":"172.67.188.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:27.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxbum-twisex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:44:34 GMT","end":"Mon, 08 Jun 2026 06:44:33 GMT"},"fingerprint":{"sha1":"82:2C:62:75:CA:C2:D4:6C:A3:36:94:FA:1F:83:6A:88:C2:BC:BE:83","sha256":"21:40:60:7E:51:40:F7:17:C4:DF:51:78:27:CE:42:E8:08:88:10:B3:C0:BA:CF:27:B3:53:27:34:85:C5:95:3A"}}},"request":{"raw":"GET /api/widgets/mainPopup HTTP/1.1\r\nHost: xxbum-twisex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xxbum-twisex.com/\r\nCookie: i18n_redirected=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 20:21:27 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 12\r\nx-powered-by: Express\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\netag: W/\"c-F6g7sByJuuOcYYkgTnzj94yg+ZE\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XUm0TRuuAze2479qg9svLmz5985u6qbX7AQVcxEkd%2B6CufYR7Miuv04jZUI1Yj2jPATE9oSJYRAUOjyX2BAp1p5yUaazPnuxAdv80ad1fxc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9e1861dc6857b09c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":12,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"52f30c97cbacaf796aed3ba46af9737b","sha1":"17a83bb01c89bae39c6189204e7ce3f78ca0f991","sha256":"eef46741adfc3a9f76294d3b78f37a45f113092ac9d44ee77c7a038a88ff09a1","sha512":"c1e3a691fa1d6e38afaa0305b697aec0204c864850878ad3cff2b1c5743af488547755e7bdf54dbc978192ac0baecdeab30aa0a21f6c82afdb69ef13a6aadcf6","ssdeep":"","tlshash":"2c6000003003000033003000cc0c0c0000c00000c33030300c000cc303000030cf000c","first_seen":"2023-04-05T18:52:02Z","last_seen":"2026-07-26T18:27:39.54182Z","times_seen":2181,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"xxbum-twisex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxmdias-cdn.b-cdn.net/thumbs/e8218b98d75878fd4f6042d8b2e84fdd.webp","fqdn":"xxmdias-cdn.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"185.59.220.199","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:27.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /thumbs/e8218b98d75878fd4f6042d8b2e84fdd.webp HTTP/1.1\r\nHost: xxmdias-cdn.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xxbum-twisex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Mar 2026 20:21:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 45000\r\nserver: BunnyCDN-DE1-722\r\ncdn-pullzone: 5455748\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\nlast-modified: Mon, 23 Mar 2026 22:49:07 GMT\r\ncdn-storageserver: DE-679\r\ncdn-fileserver: 1253\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 206\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1077\r\ncdn-cachedat: 03/24/2026 20:08:33\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 2c5a2587315f26791da76ea877cb52b3\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":45000,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x1280, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7b811ab376fcbd696cc3827344e3ee7e","sha1":"6c28df134514d1fa3b165d85ea22eabcc46464e4","sha256":"cb315d3c683813ef846cb54826f215018a900adf4f6c88f4a51b6b6c285fb084","sha512":"03a0e1bac7a87c658ed7ee8f62133480da9ef606c05180861f595811b5b28950975c51d25eb211c01d76d3fbfd9637fbf7177303db17a9db7549d98e24287cea","ssdeep":"768:VLixwlFk7mWbiV1smTBR1yEepjiGKxlMaDQ4hrqLArfsXIe0pxB29N6kZOcbfsdt:Vuulam5V1smTBRGpbKnZtQaQBkdeK","tlshash":"c213f1982666e70e26ec59d14f845f420ad0de4f62e8b67b4b445fa8e1181eecff5c30","first_seen":"2026-03-24T20:21:58.293634Z","last_seen":"2026-03-24T20:24:58.655017Z","times_seen":2,"resource_available":false,"data":null}},"time_used":374,"timings":{"blocked":156,"dns":20,"connect":35,"send":0,"wait":25,"receive":35,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxmdias-cdn.b-cdn.net/thumbs/f845e15080820a755e99af1edd298b90.webp","fqdn":"xxmdias-cdn.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"185.59.220.199","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:27.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /thumbs/f845e15080820a755e99af1edd298b90.webp HTTP/1.1\r\nHost: xxmdias-cdn.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xxbum-twisex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Mar 2026 20:21:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 43778\r\nserver: BunnyCDN-DE1-722\r\ncdn-pullzone: 5455748\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\nlast-modified: Mon, 23 Mar 2026 22:48:48 GMT\r\ncdn-storageserver: DE-1141\r\ncdn-fileserver: 1247\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 206\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1079\r\ncdn-cachedat: 03/24/2026 20:08:33\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: d0074f06096630c8df9fd62ae2a87927\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":43778,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x1916, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c1c09276497644904bae2cb96c75ef85","sha1":"324f45ddbbf4aba1bbc1c07a1e3cc0cabcbf1e15","sha256":"46b9cc72895f8782e68e6c2d94b71d2dcbbf1f9f1aa31aa0ce27080683c74743","sha512":"049b127716db2bf63d203245727efc0da9881f544863831d058966d9db537fbdd9b27dac5bd325326848a5b3f90e1631c13a5d10d04a9047091ab661980b1fba","ssdeep":"768:K2gsx+Fb0pvMyt+dcJEyWFMS2rgS1XUBYOwEKBLzx0wQgyOwiLTTZJpupayVppoq:K2gswCpvt+cJCZS1XUCEUxGzOw2TZHbc","tlshash":"0413010f163a56918b5a2400eafd4c72c67e8c9e1daadd114f32ebbca3f2d40106271d","first_seen":"2026-03-24T20:21:58.295592Z","last_seen":"2026-03-24T20:24:58.656437Z","times_seen":2,"resource_available":false,"data":null}},"time_used":439,"timings":{"blocked":177,"dns":5,"connect":35,"send":0,"wait":63,"receive":18,"ssl":128},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxmdias-cdn.b-cdn.net/thumbs/802566d16e2070e3763c784aaed04d2d.webp","fqdn":"xxmdias-cdn.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"185.59.220.199","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:27.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /thumbs/802566d16e2070e3763c784aaed04d2d.webp HTTP/1.1\r\nHost: xxmdias-cdn.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xxbum-twisex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Mar 2026 20:21:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 31668\r\nserver: BunnyCDN-DE1-722\r\ncdn-pullzone: 5455748\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\nlast-modified: Mon, 23 Mar 2026 22:48:07 GMT\r\ncdn-storageserver: DE-1141\r\ncdn-fileserver: 1116\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 206\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1334\r\ncdn-cachedat: 03/24/2026 20:08:33\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: fdb0e9d30c7e9c58033b02bfbec2fdda\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":31668,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x1672, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5962c2db7d93a5fd7731d08bc41cbd7a","sha1":"0e242fa45bc034d295a1757d9025ef2dfa8da8a5","sha256":"9579f32ae709ec41a1a81156ac4f9af944d0e4c9ad90bf4b238c78e7b2940199","sha512":"9a31947a6c3d3e0933599819198e28218167a9fef85af31f278a8fffc2f3ed8e9803df687547a7c8a154a239ffadb3cf1c69110d4fd9e35cd33e3a5dd5982c3f","ssdeep":"768:0oPAzk5PbD979gy+F9qjRVsIf7Z9kw8aiyjJh+e46N:0oP1hbD9+y+F9ybZ7Aw7V","tlshash":"a9e2f1d3bd637617f6308f70a1e90ba57a982a1e10a0d26e62bcc12f610f3de6903355","first_seen":"2026-03-24T20:21:58.297716Z","last_seen":"2026-03-24T20:24:58.611719Z","times_seen":2,"resource_available":false,"data":null}},"time_used":431,"timings":{"blocked":168,"dns":1,"connect":41,"send":0,"wait":38,"receive":3,"ssl":166},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxmdias-cdn.b-cdn.net/thumbs/09823e5783dbbea78827815db2da3949.webp","fqdn":"xxmdias-cdn.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"185.59.220.199","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:27.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /thumbs/09823e5783dbbea78827815db2da3949.webp HTTP/1.1\r\nHost: xxmdias-cdn.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xxbum-twisex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Mar 2026 20:21:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 32916\r\nserver: BunnyCDN-DE1-722\r\ncdn-pullzone: 5455748\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\nlast-modified: Mon, 23 Mar 2026 22:47:42 GMT\r\ncdn-storageserver: DE-635\r\ncdn-fileserver: 1214\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 206\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1078\r\ncdn-cachedat: 03/24/2026 20:08:33\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 89b0b095963457015e5aa1a19a821894\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":32916,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x722, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1a1846f877abb7408609cd7ad338fe32","sha1":"12f1dea69fd87049632bc1fab5a47330bddfa071","sha256":"8a4c89c7f668c2040c46fe8786e6f5655a51e45d203819f6c13385ceb14ba452","sha512":"9a9a83cdb647f5698f1ee4e32a9a8b19e0c470accc1b95a6854eda5bd442300c38fd7174b9f5527d4f645ca26280dce72125fbc022e79c5b81e15149aafc8869","ssdeep":"768:OF40CKtQZTOapr/f4iP3U5HNk7/G1FYJjMWkXBYK3:OF4pCQZ6kEHNk7/myJjHkXBYo","tlshash":"0ce2f1aa6b8743d8058895c85976d374c2d8bb7831e4882edd8ee53d13bf0ca675c135","first_seen":"2026-03-24T20:21:58.300415Z","last_seen":"2026-03-24T20:24:58.626942Z","times_seen":2,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":77,"dns":0,"connect":0,"send":0,"wait":91,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxmdias-cdn.b-cdn.net/thumbs/8cbe5fbc858773f17e0f4c5b766eabef.webp","fqdn":"xxmdias-cdn.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"185.59.220.199","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:27.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /thumbs/8cbe5fbc858773f17e0f4c5b766eabef.webp HTTP/1.1\r\nHost: xxmdias-cdn.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xxbum-twisex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Mar 2026 20:21:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 62592\r\nserver: BunnyCDN-DE1-722\r\ncdn-pullzone: 5455748\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\nlast-modified: Mon, 23 Mar 2026 22:47:01 GMT\r\ncdn-storageserver: DE-679\r\ncdn-fileserver: 1249\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 206\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1077\r\ncdn-cachedat: 03/24/2026 20:08:33\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: c4a02e015b23251befc4a57e133f7fea\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":62592,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"59ece79160918dd67a363861e288c0a3","sha1":"f070c486b901bb5c92e6b38454763811cf6ea19f","sha256":"ffaf92f2ea6c8af5a916d641d02177ccddbcbf711f2186c0ae26de3423ccbb7e","sha512":"0f91394e85c5a614035927842fcaf522192482f0996f4233c61dec04fa4a0da6e7be208ff564d3338ea42a431cf1a29f65e92d0275ab8554485396e28949d4e4","ssdeep":"1536:tFhdf/mf6Mm2sqpysV7XYCsy+oqIdCPZX0Qegu3hl:tFff/6m2shs9vsFIdJLR","tlshash":"b753029120a63a7cf717cfe270036e975290c09d281e7645f905eaaf6971ddcd88d3a3","first_seen":"2026-03-24T20:21:58.305714Z","last_seen":"2026-03-24T20:24:58.644024Z","times_seen":2,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":75,"dns":0,"connect":0,"send":0,"wait":99,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxbum-twisex.com/api/site-links","fqdn":"xxbum-twisex.com","domain":"xxbum-twisex.com","tld":"com"},"ip":{"addr":"172.67.188.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:27.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxbum-twisex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:44:34 GMT","end":"Mon, 08 Jun 2026 06:44:33 GMT"},"fingerprint":{"sha1":"82:2C:62:75:CA:C2:D4:6C:A3:36:94:FA:1F:83:6A:88:C2:BC:BE:83","sha256":"21:40:60:7E:51:40:F7:17:C4:DF:51:78:27:CE:42:E8:08:88:10:B3:C0:BA:CF:27:B3:53:27:34:85:C5:95:3A"}}},"request":{"raw":"GET /api/site-links HTTP/1.1\r\nHost: xxbum-twisex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xxbum-twisex.com/\r\nCookie: i18n_redirected=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 20:21:27 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nldqnRodxBNyQSQbcSHnwUE%2BoJ1A4jm%2FgL1Td4oHgVh7HMxFBFPRpuIQYysW%2FONpMmntcODGLKzmzroODQ%2Be51CrMo1i9JJLbU%2FSldXEEm0%3D\"}]}\r\nx-powered-by: Express\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\netag: W/\"248-e0VsqoDijnXxWAFnVX1Vzt4SDO4\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9e1861dc5853b09c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":584,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"48d6e8d8d8d9796aff4b954450383548","sha1":"7b456caa80e28e75f1580167557d55cede120cee","sha256":"15bb16a5ea0edaea7038b4a317331866c04964679d39ddfd098f6078bc03afde","sha512":"810a6b919663701eb04cbb1dc2484c309e39d39a96a50c0b1758b2069195321fcbb34ae3a4777fc7c9baa2a1cd3edf52d3727d5b4068c99336e93c4e5c7f82ae","ssdeep":"","tlshash":"67f046f7e7ea77302658a8934063bc99b28c740d7a869dd1f3a04d1c20089a70f0f197","first_seen":"2026-03-24T20:17:23.813228Z","last_seen":"2026-03-24T20:24:58.599771Z","times_seen":5,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"xxbum-twisex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxmdias-cdn.b-cdn.net/thumbs/c61c69a7654ff0a5d2fb7f16dd9dcc33.webp","fqdn":"xxmdias-cdn.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"185.59.220.199","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:27.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /thumbs/c61c69a7654ff0a5d2fb7f16dd9dcc33.webp HTTP/1.1\r\nHost: xxmdias-cdn.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xxbum-twisex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Mar 2026 20:21:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 39686\r\nserver: BunnyCDN-DE1-722\r\ncdn-pullzone: 5455748\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\nlast-modified: Mon, 23 Mar 2026 22:44:35 GMT\r\ncdn-storageserver: DE-1142\r\ncdn-fileserver: 1241\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 206\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1081\r\ncdn-cachedat: 03/24/2026 20:08:33\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 80777d54d14754af7de3a16050c089b9\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":39686,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1964cb69b4630c85afe17cccf8f3757c","sha1":"de67ea802300f540564bc20cf280321d4f747fa0","sha256":"8d51a872d133ddcc033ed069152bf48468a88cb6a1e9e7d0f9691ad21fb80bad","sha512":"c34b0b7f9939d801fd736cc23096f14874b543ac2a99ba7aa0ee8038b18b85272c3ff2df1f07ab1938779c0aa1008ad5e066d2073e81bdf9be84e056910f6719","ssdeep":"768:KZ5+1qMXOfEIfdU3GlOGQPyYnjkNJw2ON6jH0EYzvj3Wz5HRMVn:kgEE0YGlObnUTOYCr3+xw","tlshash":"2503f1e74326f5cc6508f2cc4a287ba4c114e32b869d9615b2843b776f73483abd5787","first_seen":"2026-03-24T20:21:58.312616Z","last_seen":"2026-03-24T20:21:58.312616Z","times_seen":1,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":98,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxmdias-cdn.b-cdn.net/hls/e8218b98d75878fd4f6042d8b2e84fdd/index1.ts","fqdn":"xxmdias-cdn.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"185.59.220.199","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:28.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /hls/e8218b98d75878fd4f6042d8b2e84fdd/index1.ts HTTP/1.1\r\nHost: xxmdias-cdn.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xxbum-twisex.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xxbum-twisex.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Mar 2026 20:21:28 GMT\r\ncontent-type: video/mp2t\r\ncontent-length: 2130040\r\nserver: BunnyCDN-DE1-722\r\ncdn-pullzone: 5455748\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 23 Mar 2026 22:49:05 GMT\r\ncdn-storageserver: DE-635\r\ncdn-fileserver: 1214\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 206\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1077\r\ncdn-cachedat: 03/24/2026 20:08:36\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 9dfcffa28d63b141670a08c88a1f1264\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2130040,"size_decoded":0,"mime_type":"video/mp2t","magic":"data","md5":"ddd7b6848a43db83d837e1778fb9d076","sha1":"d2602b36a61ff3af50e70f7660f739eaac4fd468","sha256":"8f7b5fd552233f61fdde7f279f989864cc2d68ff64ad9e868ec8cfa10884eb55","sha512":"775a6f69ab4bab40974e07cf357545cdfc03d187755e5baaed879248fe10a83cf88faeb503bfbdb716fe88f07e75f9a07f5eb8934801bf1ef95980d0acdbd7ea","ssdeep":"24576:T4rgHlzEMuzqFgfHKx2FfMLJoEU4PbsCaUMZ2WuvrcahCD/cfXRCQxHc:0OzEMiOCCFoZIhaUMpuvrYjc53Hc","tlshash":"ad252328f3c56d9a9c4253835390d7e6e6304c184e892bbb1819f30efbfa5d5e871a71","first_seen":"2026-03-24T20:21:58.317437Z","last_seen":"2026-03-24T20:21:58.317437Z","times_seen":1,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxbum-twisex.com/_nuxt/OW8m93Sr.js","fqdn":"xxbum-twisex.com","domain":"xxbum-twisex.com","tld":"com"},"ip":{"addr":"172.67.188.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:26.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxbum-twisex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:44:34 GMT","end":"Mon, 08 Jun 2026 06:44:33 GMT"},"fingerprint":{"sha1":"82:2C:62:75:CA:C2:D4:6C:A3:36:94:FA:1F:83:6A:88:C2:BC:BE:83","sha256":"21:40:60:7E:51:40:F7:17:C4:DF:51:78:27:CE:42:E8:08:88:10:B3:C0:BA:CF:27:B3:53:27:34:85:C5:95:3A"}}},"request":{"raw":"GET /_nuxt/OW8m93Sr.js HTTP/1.1\r\nHost: xxbum-twisex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xxbum-twisex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 20:21:26 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 23 Mar 2026 15:50:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 24 Mar 2027 20:21:26 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69c16146-54fe8\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jczE9oMRw4yWK1mpRt7vaMHn3d1IsTKiVwcDx6qhlnF1nMuLPdMgn4kxSSm9bNx1pTWWgn7KoCsvP7Ik6OhUMb6NQss8jnLCsr5aNbnCk24%3D\"}]}\r\ncf-ray: 9e1861d5dde7b09c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":348136,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32398)","md5":"ec472fe636cfe4933f10130c71690f73","sha1":"67b5cfb6fc14721cd653b32b7ba9453808431368","sha256":"ecf3ae0b9bd60ebf85f7c5ab3019c3f8faa1c4399fdad923c10424515ae1277e","sha512":"5502d957681b66572448c6ee1702b2f2ebe60367d9df1dc5d43c8af954902bde6688f943f6361f2cfdb5806cdca28895705d67905b1a6639987a83501ad84aef","ssdeep":"6144:mg7gN6gZsKLc39RqWaQ/iUkeqMVtzcypDfVh4Thjy/fagVPqhcNXz:mZLZtAtRq3UkeNtIqfr4ThjlKN","tlshash":"e27428e93186b06603f619e4507b1006f3392e54344dd4e4f2acddab3ea784a92b7f6d","first_seen":"2026-03-24T20:21:58.321672Z","last_seen":"2026-03-24T20:21:58.321672Z","times_seen":1,"resource_available":true,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":189,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"xxbum-twisex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxbum-twisex.com/_nuxt/OW8m93Sr.js","fqdn":"xxbum-twisex.com","domain":"xxbum-twisex.com","tld":"com"},"ip":{"addr":"172.67.188.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:26.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxbum-twisex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:44:34 GMT","end":"Mon, 08 Jun 2026 06:44:33 GMT"},"fingerprint":{"sha1":"82:2C:62:75:CA:C2:D4:6C:A3:36:94:FA:1F:83:6A:88:C2:BC:BE:83","sha256":"21:40:60:7E:51:40:F7:17:C4:DF:51:78:27:CE:42:E8:08:88:10:B3:C0:BA:CF:27:B3:53:27:34:85:C5:95:3A"}}},"request":{"raw":"GET /_nuxt/OW8m93Sr.js HTTP/1.1\r\nHost: xxbum-twisex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xxbum-twisex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 20:21:26 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 23 Mar 2026 15:50:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 24 Mar 2027 20:21:26 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"69c16146-54fe8\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lZNev8Uk69FotBdZRRb37R97C9Br8TCxQRMq4WhnQ75hiQDNOlOOiwMfz3sH6sug%2Bccwzc5TzAmPpEWaR3mSawp5yAcz83aUtErnLezMNFU%3D\"}]}\r\ncf-ray: 9e1861d88ee4b09c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":348136,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32398)","md5":"ec472fe636cfe4933f10130c71690f73","sha1":"67b5cfb6fc14721cd653b32b7ba9453808431368","sha256":"ecf3ae0b9bd60ebf85f7c5ab3019c3f8faa1c4399fdad923c10424515ae1277e","sha512":"5502d957681b66572448c6ee1702b2f2ebe60367d9df1dc5d43c8af954902bde6688f943f6361f2cfdb5806cdca28895705d67905b1a6639987a83501ad84aef","ssdeep":"6144:mg7gN6gZsKLc39RqWaQ/iUkeqMVtzcypDfVh4Thjy/fagVPqhcNXz:mZLZtAtRq3UkeNtIqfr4ThjlKN","tlshash":"e27428e93186b06603f619e4507b1006f3392e54344dd4e4f2acddab3ea784a92b7f6d","first_seen":"2026-03-24T20:21:58.321672Z","last_seen":"2026-03-24T20:21:58.321672Z","times_seen":1,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"xxbum-twisex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/sdkloader/ima3.js","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:26.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"63:D1:AE:99:1E:49:D7:6C:71:F3:BA:F5:BA:47:74:1E:EB:90:E7:D6","sha256":"69:90:BB:9D:82:60:82:88:FF:CE:F6:B3:3D:DD:B5:B5:FB:F0:56:17:FD:FA:0D:BC:9C:5B:83:51:98:0D:2F:CF"}}},"request":{"raw":"GET /js/sdkloader/ima3.js HTTP/1.1\r\nHost: imasdk.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xxbum-twisex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ndate: Tue, 24 Mar 2026 20:21:26 GMT\r\nexpires: Tue, 24 Mar 2026 20:21:26 GMT\r\ncache-control: private, max-age=900, stale-while-revalidate=3600\r\ncontent-type: text/javascript; charset=UTF-8\r\netag: 1038985279017227158\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: br\r\nserver: cafe\r\ncontent-length: 148291\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":472872,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2969)","md5":"d1a460edf1d12fc78a7bae3a98e0de1a","sha1":"8da5660ee2b7a1001560b2dc3431b68be33de5fb","sha256":"0e5c25ad05fa78c738415b36daf8101c04c8d20a5bd9f07fffce6cef03d4dc7c","sha512":"44f5e30bae0073307f851b605e1d184d0dde46141f2873c505d2e9ed4a075ef8da44dfa017bef60be1a1db449bca4ee4d77f636d13690d1ede0c37b52e334c91","ssdeep":"6144:6bEbmxldQmcmaP+8e0RQIiPefCyfZDVxPhR:4ammRxiNiZDVxPhR","tlshash":"31a4facdb6a674629363f4b5403f010fb23bb866f40888acb249d9e16e749495277f7c","first_seen":"2026-03-24T20:21:58.327759Z","last_seen":"2026-03-24T20:21:58.327759Z","times_seen":1,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":98,"dns":5,"connect":7,"send":0,"wait":42,"receive":32,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxbum-twisex.com/icon-192x192.png","fqdn":"xxbum-twisex.com","domain":"xxbum-twisex.com","tld":"com"},"ip":{"addr":"172.67.188.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:26.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxbum-twisex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 06:44:34 GMT","end":"Mon, 08 Jun 2026 06:44:33 GMT"},"fingerprint":{"sha1":"82:2C:62:75:CA:C2:D4:6C:A3:36:94:FA:1F:83:6A:88:C2:BC:BE:83","sha256":"21:40:60:7E:51:40:F7:17:C4:DF:51:78:27:CE:42:E8:08:88:10:B3:C0:BA:CF:27:B3:53:27:34:85:C5:95:3A"}}},"request":{"raw":"GET /icon-192x192.png HTTP/1.1\r\nHost: xxbum-twisex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xxbum-twisex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 20:21:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 18378\r\nlast-modified: Wed, 18 Mar 2026 19:48:06 GMT\r\netag: \"69bb0176-47ca\"\r\ncache-control: no-store, max-age=0\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FTukkgepeiva1lstZiQxaJicDpEgRPFFIzYkCUpfw8cZ15yJXHb2y8OwWJrE9wmP%2BLtLMcLyiM5QytmfeWbaPv781sxlMkZUlKhSPSlfiK8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9e1861daf81bb09c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18378,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"0b0f238e778202b46c50b74a4a79fe33","sha1":"152208ca9c4e2f5386c4c970e5d0e563996837b8","sha256":"1a55415176e535ed250dc3392e46371983ea63a813c1cc49f1673cc8ff53e3e8","sha512":"89842f5a3cba11937e7280d33ec62eed3c945e90e1a41c3c9e1d95d2bc25794e3448e60d8bf6fb803f1e64032def6dfbb0137540bb76ac675a9de3ef4909fb1c","ssdeep":"384:XRmCOV1LOfPzdyUROUrsJnbdYK8xkIMS9QeE+P0X2L6BoM+ueO5pP:Xwv1LOTd7R2mpvMSeeEC0m+OIe0","tlshash":"df82d1a163a74e3db95530ee1713ea40b93584e1921d9438a2bac7af965070e133f44f","first_seen":"2026-03-24T20:17:23.798992Z","last_seen":"2026-03-24T20:21:58.330535Z","times_seen":2,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"xxbum-twisex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/api.js?render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:27.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 19:28:54 GMT","end":"Tue, 19 May 2026 20:28:50 GMT"},"fingerprint":{"sha1":"83:61:74:2B:F1:77:DF:F1:68:3A:D1:0B:F1:05:8B:A7:0C:B7:B3:C2","sha256":"AB:12:F8:E1:72:C8:68:10:80:3A:9F:9D:C6:84:76:A4:16:06:31:A9:10:4A:34:B0:5D:62:B4:80:3D:63:F3:C5"}}},"request":{"raw":"GET /turnstile/v0/api.js?render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xxbum-twisex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 24 Mar 2026 20:21:27 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public\r\ncross-origin-resource-policy: cross-origin\r\nlocation: /turnstile/v0/g/ea2d291c0fdc/api.js\r\nserver: cloudflare\r\ncf-ray: 9e1861dc999f5cf6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51125,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T22:51:02.582672Z","times_seen":17551384,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":29,"dns":1,"connect":8,"send":0,"wait":13,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxmdias-cdn.b-cdn.net/thumbs/c1ddf9ee95f2c2ff3ba394756cf36368.webp","fqdn":"xxmdias-cdn.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"185.59.220.199","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xxbum-twisex.com/","date":"2026-03-24T20:21:27.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /thumbs/c1ddf9ee95f2c2ff3ba394756cf36368.webp HTTP/1.1\r\nHost: xxmdias-cdn.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xxbum-twisex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Mar 2026 20:21:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 50036\r\nserver: BunnyCDN-DE1-722\r\ncdn-pullzone: 5455748\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\nlast-modified: Mon, 23 Mar 2026 22:46:53 GMT\r\ncdn-storageserver: DE-757\r\ncdn-fileserver: 1241\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 206\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 752\r\ncdn-cachedat: 03/24/2026 20:08:33\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 8bd29051e4564ad0c113c889a71683fa\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":50036,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9daab23027d38d94c72166a43f3bfcc0","sha1":"a00faa74e8d88b238b5199579cc31b405dfcb719","sha256":"df29625ed135788972e4b9c65e06e3e80b844fd88cac1c1a6a7f7ce104ee8bc6","sha512":"44e3281cd50857e05d91b285b4e545a503408bf8de4d3fd6486be8308062ed446e8d765beb51efea9a41308fe559e15582137d7843d31d16b87c9cf2f4e35809","ssdeep":"1536:cY4mCs0IdmH2yreBcPH9Oc2yzX5wUq1qEuz:cDLzI/yPdmo/qi","tlshash":"2023f1c939d7cb4433a5aa23de27852b413ce08e5857643d3e81bc9acbf9c55da1231d","first_seen":"2026-03-24T20:21:58.332753Z","last_seen":"2026-03-24T20:21:58.332753Z","times_seen":1,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":43,"dns":0,"connect":0,"send":0,"wait":98,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}