{"report_id":"759a24c5-cd84-4708-97cd-db47664a2f7a","version":6,"status":"done","tags":[],"date":"2025-10-31T00:05:25Z","url":{"schema":"http","addr":"Fxggxt.com","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"fxggxt.com/","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"title":"FXGGXT - Free HD and Amateur Gay Porn Videos","dom":{"size":462,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (462), with no line terminators","md5":"c81adb777149a1c478293b62f9cc186b","sha1":"ee950e4c763504ec6153272a9e6ba2bd99dc7a2d","sha256":"615d37f94ee9019dc475604aa8e759e9757af5fdf346549b7bcd636bd8133da3","sha512":"b7fc7f055c6d48749f494cd6558ea56c884c4a30df151e56b881ff9a98cdb790cd1e8a6ef8fbf6cf9a014c7c8db4a318cf1f28567ef065145b141953666fcb8e","ssdeep":"","tlshash":"22f0dc7441213049ce73f045ecb08b0f6527d68d826949848f9a21fdd2cd0371d321dc","dom_hash":"domhashb0f30a90be2efee965fa7b4a05913ad9","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":"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"}},"submit":{"url":{"schema":"http","addr":"Fxggxt.com","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98","country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-05T00:05:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"playhubconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"stats.g.doubleclick.net","ip":{"addr":"142.250.147.155","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1996-01-16","domain_rank":958,"first_seen":"2012-07-01T17:13:23Z","last_seen":"2025-10-24T12:03:55.957185Z","alert_count":0,"request_count":1,"received_data":844,"sent_data":761,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.chaseherbalpasty.com","ip":{"addr":"94.242.247.20","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2024-05-17","domain_rank":0,"first_seen":"2025-10-14T08:06:13.480068Z","last_seen":"2025-10-29T14:31:15.778141Z","alert_count":0,"request_count":6,"received_data":5720184,"sent_data":3204,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"driverhugoverblown.com","ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-03-12","domain_rank":75021,"first_seen":"2025-03-30T06:27:07.780857Z","last_seen":"2025-10-25T16:51:53.694667Z","alert_count":0,"request_count":4,"received_data":163835,"sent_data":2924,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.google.no","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2025-10-26T22:13:53.528301Z","alert_count":0,"request_count":1,"received_data":580,"sent_data":1004,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fxggxt.com","ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-04-02","domain_rank":90839,"first_seen":"2021-04-27T16:01:46Z","last_seen":"2025-10-04T19:37:09.784694Z","alert_count":0,"request_count":136,"received_data":2949201,"sent_data":69119,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.164.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"bxSlider:4.2.15","description":"Add a respsonsive image slider to any website.","website":"https://bxslider.com/","common_platform_enumeration":"","icon":"bxSlider.png","categories":["Photo galleries","JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2025-10-26T22:14:00.009821Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":498,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"mc.yandex.com","ip":{"addr":"77.88.21.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"1998-09-24","domain_rank":45494,"first_seen":"2014-03-01T13:57:52Z","last_seen":"2025-10-27T15:19:38.682273Z","alert_count":0,"request_count":4,"received_data":6193,"sent_data":4581,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"chaseherbalpasty.com","ip":{"addr":"94.242.247.20","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2024-05-17","domain_rank":21586,"first_seen":"2024-08-27T21:16:25Z","last_seen":"2025-10-28T15:28:18.895005Z","alert_count":0,"request_count":24,"received_data":1066713,"sent_data":15891,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"astronautlividlyreformer.com","ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-03-12","domain_rank":52164,"first_seen":"2025-05-27T10:02:11.901601Z","last_seen":"2025-10-24T08:59:33.676485Z","alert_count":0,"request_count":4,"received_data":163864,"sent_data":2946,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-10-26T22:13:34.663946Z","alert_count":0,"request_count":2,"received_data":822784,"sent_data":862,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"playhubconnect.com","ip":{"addr":"104.18.14.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-09-25","domain_rank":18094,"first_seen":"2024-10-01T12:19:44Z","last_seen":"2025-10-27T08:50:38.025849Z","alert_count":6,"request_count":6,"received_data":5552432,"sent_data":3090,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"cdn.pncloudfl.com","ip":{"addr":"172.66.165.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-04-20","domain_rank":95245,"first_seen":"2021-06-07T14:28:03Z","last_seen":"2025-10-28T03:01:50.463875Z","alert_count":0,"request_count":1,"received_data":56379,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22257,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2025-10-26T22:13:53.528089Z","alert_count":0,"request_count":1,"received_data":844,"sent_data":1035,"comment":"","tags":null,"fingerprints":null},{"fqdn":"dodgyfactoidprecut.com","ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-03-26","domain_rank":163697,"first_seen":"2025-04-22T06:41:45.467354Z","last_seen":"2025-10-27T17:51:56.538582Z","alert_count":0,"request_count":4,"received_data":198585,"sent_data":3962,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"mc.yandex.ru","ip":{"addr":"77.88.21.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"1997-09-23","domain_rank":16498,"first_seen":"2012-05-21T09:38:30Z","last_seen":"2025-10-29T15:43:58.850881Z","alert_count":0,"request_count":1,"received_data":243087,"sent_data":410,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"chaseherbalpasty.com/check.html","fqdn":"chaseherbalpasty.com","domain":"chaseherbalpasty.com","tld":"com"},"ip":{"addr":"94.242.247.20","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8f2e0cd22b41fa7c9212af0b11f449d3","sha1":"6c552632a2eeaa712496444594c3e8c68eadbbb0","sha256":"d7ca5af269e02e5109a61ef55df0196e2206204d6c742daba5a153defc097fda","sha512":"c90bb9984fc0b2a5374129cb10fc509e937ba565063e2530578430fb0329f8058c145c914de139fa166d8530cfff9799a8c78aa1ad2752d9ec72e24c0fed477c","ssdeep":"","tlshash":"d201685934f5684d5127b630255b22182d32a40325cbd94efb2cdb301f825a7eca8aef","size":762,"data":"","first_seen":"2025-03-07T08:34:13.499254Z","last_seen":"2026-03-04T07:06:03.173543Z","times_seen":7245,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chaseherbalpasty.com/get/2018929?zoneid=2018929\u0026pid=__clb-2018929_1\u0026jp=_clpxcgyopzqqdtnfzoeqoc\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.627\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=Ord-7bcKmZpiyzUDVIIHN\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=kjTbye6aHR0cHM6Ly9meGdneHQuY29tLw\u0026afid=3493165573873152\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026dto=2\u0026pload=1961\u0026rlp=%5B0%2C91%2C298%2C159%2C2598%2C27804%2C4067%2C27455%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=3\u0026uf=0\u0026freq=0","fqdn":"chaseherbalpasty.com","domain":"chaseherbalpasty.com","tld":"com"},"ip":{"addr":"94.242.247.20","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"cee413ed2416d819e416b676dc5b98eb","sha1":"f184aa8d38086c91f71da666d0044d3f33a4d383","sha256":"5b1c796bb5eb7dbf8d3d94c413e3bad7c0eca66e9024da87ec8b8def0ccbc81f","sha512":"8c28420a5972d7c25ad88702ebb06f575ad0971e8504a3a9f20831691677385d2226ba42c0c9e536cbd0124c902ce6683967d46a3a3f00f6dec5343c052a41a6","ssdeep":"96:AlvSsdcoVaU3QiMvSsdcoVaU3QwvSsdcoVaU3QlvSsdcoVaU3QhreK8gWQ4Byo:AgoVatMoVatjoVatgoVatBekJo","tlshash":"a6a1d94ab03c981bbce01c6fb4c41e12b7232d43ad7e70f68d0a0642b094ef77995c65","size":5038,"data":"","first_seen":"2025-10-31T00:05:45.099742Z","last_seen":"2025-10-31T00:05:45.099742Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-8RMNSQMQGD","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"806d881ca94bcc8d9810c7497b903b60","sha1":"f7f8f47e0d9dbfabc9cdfa71b0e5d3d9ca210277","sha256":"5de83b438619774595a689d7d78e936fab753d36f6488c35f29d2a48eb4969ac","sha512":"555cbad26cc153adc86d3eb63d7b8cbd3acac4f0882276d02301390fc6ce7b83a94fdaaff33a6a72a529cdfcecfcbc088f5f1ea62be5e0c41d8780bb82197047","ssdeep":"6144:VBe5HIy2n8fud75KGq6A0RI6TLiYYg/FOY9ftLHAJ+aAMn/xS2GJa:rqHITiud75KGq6hvLiYlAJhh","tlshash":"ee94198e73c674269396f078503f118ba57b29e2b45cc896f189cce42d74a9a4237f7c","size":410798,"data":"","first_seen":"2025-10-31T00:05:45.036481Z","last_seen":"2025-10-31T00:05:45.036481Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"04473cc91cb8ceafcba745f2504f0e5e","sha1":"3026c2874e1f03c8264bd4a1ae566f21c54e4e05","sha256":"b995e8b9c6263248f088a48e3f052ceae54430ce9327f2120e70e57357926d75","sha512":"8e4daad4a95ea2fddd18195ccd21a8d2b4a8491f109a4963dcfb3e5d4567d81d90b734a18672f89109470dddb9fd4997b790feca6ed3b3c8c215fac07a13739f","ssdeep":"","tlshash":"39d0a7a92865883066a5014650b9e3d8276061906611a201c2d8cc1f5e11d9708b155c","size":217,"data":"","first_seen":"2025-10-31T00:05:45.141683Z","last_seen":"2025-10-31T00:05:45.141683Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chaseherbalpasty.com/lv/esnk/2018929/code.js","fqdn":"chaseherbalpasty.com","domain":"chaseherbalpasty.com","tld":"com"},"ip":{"addr":"94.242.247.20","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"306497460fec2db20fe2b3cd79f079e1","sha1":"4c43f979ec2d9a22f88be8bf22e2ac63a70ff80d","sha256":"42b65c6df1569e65be8f7229a81a9b80ac77b72c2026b312409c60c39752a9b2","sha512":"c4bcd18e96fbe257a8bc98215f92c8496c1ebf9000db12f245d4ebf401bbaaa894b1a1ae7f470c40343dc61581a7896cbb657ff4fccd3676799e24335553930b","ssdeep":"1536:lso8qPSdMQEZSO1CRC2vxtFKsN76U6x+ui++UzrS5jUNvJrzTmwN5FOmdF+j4QvS:lsjak4+ukU6WpdLH","tlshash":"e1f3768efa833c76c266b03fc93fd906963568f1964e8404f063d1f819e4715a636bb6","size":169175,"data":"","first_seen":"2025-10-31T00:05:44.996977Z","last_seen":"2025-10-31T00:05:44.996977Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/themes/retrotube/assets/js/lazyload.js?ver=1.0.0","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6dcca58db348f35d6eee39aadb7cd280","sha1":"0a513a0ebed60f4b0b4d69f7aaf519feaadbfaec","sha256":"2683c87843149db588b42abb7ef80b2815438fc44b368e1a855983f93ae431e4","sha512":"ee897cdc326f80eb18c74b3c42fe1b97b3b16c0be8f048a763cb33db134fa47dc2eb07bc1ba6cd8feb91385d791aa89a28816fd49217a57763dc54df1ef3693e","ssdeep":"96:IncwFK9HqOq0tioGJULBx7PYuyrr5VrcAeS1h3osyTaZ+1KZZ/p5k1QDSYRV9uR5:M9YH9qfJ2x7PYf5BcVSPfq+DkGDjP9u/","tlshash":"5fc15308b065b43f65777032523f130bb23a606778884494f6b4eae99ebc81e5923f7d","size":5755,"data":"","first_seen":"2023-03-07T12:12:33Z","last_seen":"2026-06-20T01:50:30.333181Z","times_seen":4006,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chaseherbalpasty.com/get/2018929?zoneid=2018929\u0026pid=__clb-2018929_2\u0026jp=_clntigmrjmhnxtkzaanupz\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.627\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=Ord-7bcKmZpiyzUDVIIHN\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=bZFV8qBaHR0cHM6Ly9meGdneHQuY29tLw\u0026afid=7996765201271808\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026dto=2\u0026pload=2231\u0026rlp=%5B0%2C91%2C298%2C159%2C2598%2C27804%2C4067%2C27455%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=3\u0026uf=0\u0026freq=0","fqdn":"chaseherbalpasty.com","domain":"chaseherbalpasty.com","tld":"com"},"ip":{"addr":"94.242.247.20","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a2d80cf13e466747c39806987e5a2c08","sha1":"d69c503738b884bf6d158a6bf6efc0add560bc28","sha256":"c027164d9ae1bf51ad35d84cf1ec66d669e93eb7b5ee18f44372f8e511e93f79","sha512":"af842acd47de4b74815cad4d03b536e02621b86d35d0ef391753de723c5312dbf67608b0f2e5da503122f6e75d43253d60bf23794200b48096e8fc1ce8eb560f","ssdeep":"96:Pvv1fXQZiNhLzl6me8GfXQZiNhLzl6meBIfXQZiNhLzl6meAfXQZiNhLzl6meuqh:PvRAi7l6HAi7l6PgAi7l6uAi7l6MotaW","tlshash":"2da10a157c0b25742c429c8c30b269df435ad2c24fda5b646b4ad8c5a72eefd283269b","size":5038,"data":"","first_seen":"2025-10-31T00:05:45.127788Z","last_seen":"2025-10-31T00:05:45.127788Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"90b8261faa2841c08890e62ec45d26ed","sha1":"c90519dd49492026c5e9e2b7a724867ae4ff2cfa","sha256":"de952ce7d6de5e74fb8a18e3b2b69625c16014d4a17a85ecb9e4aa79af41024f","sha512":"395ab0587c1afac5cca15e7d63b608071a6b0fcf2fa158d0fb5653acd79b351ac6f7aa587f0f4a82d1df77c309b8fb22bc088258bc817589e7c6542a6d81de9f","ssdeep":"192:FvoJIQyK+0YMv/a020iJCr4yxUD3QybK7UBpTOn/k1deK:FvolYv/ygguyzK","tlshash":"7f22198b7cccb588536b15b2483b20da1167ad8284489f56dea4fdf97e30354f9d6f40","size":10183,"data":"","first_seen":"2025-10-31T00:05:45.005858Z","last_seen":"2025-10-31T00:05:45.005858Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"astronautlividlyreformer.com/on.js","fqdn":"astronautlividlyreformer.com","domain":"astronautlividlyreformer.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce9a055ef3be68028027854e6f4ee75b","sha1":"dc8716fa1320e220e260e7ad34e2eb3bba95be04","sha256":"aae99139dcd5abda531bea2c2b797940f64fa0cdf8194aaca8a2635f3fff19cf","sha512":"2f77ce62eaa63e5d506acaf57a5d40e68a958fad288d3a9a57523cf6fea0c537f8bd392568524508247427b215d9f9e53dd7fb402d0da625069897b274a622b7","ssdeep":"1536:MnTw9cCrkxGxkVNrTmdU16cT9TRdyuQDr9wLGHYSpryNDCz2PG1DLZG3bUpP+8i:Mk9cCnxkV1m7cT5xKrKLGjpGeDLk3F","tlshash":"cce3a49d67cb20350303a029cc3f5627a9355ddba89dc590d9bfc1cce8b560bd12abe9","size":156076,"data":"","first_seen":"2025-10-30T16:20:15.292553Z","last_seen":"2025-11-05T13:40:53.471314Z","times_seen":121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6489eb6b5e63797a7f145d2c4bf4b426","sha1":"701080e46a79a43eff88edad37a60a0252ce93b1","sha256":"c0045adc1ee13ce403ba2c68f914327bce66948a5bba874633dbec69d7be8744","sha512":"8e9f2c975f3d672299add3e434d272e77da0e7d1f55b8ee4061eacbb0d4bd484c9a60b19f28fe07d72335532995bcf96f4ae7dcdafbe6c505587b971d35c710c","ssdeep":"","tlshash":"c6f00e982cd884284333012527bb9248703969292c0eed28f50cc4812f99ea808bb90c","size":509,"data":"","first_seen":"2025-10-31T00:05:45.143183Z","last_seen":"2026-06-11T05:03:54.569837Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/themes/retrotube/assets/js/jquery.touchSwipe.min.js?ver=1.6.18","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4cd5ea35543390c5fc4e9def651ab721","sha1":"d360aa74dff157fcefda69336ecf420f04940f98","sha256":"9167cb37ed21405ef9556646b83789a2099c15398f5cea867470df1e81752e17","sha512":"d666a51729862abb8d23b0cca5d5ade738c08df2a23fbabb55be95f2a1fbef60255bda850cb36457e70bb2706067f9cee620169c9166f5e9f29a48af470d4fab","ssdeep":"384:lrKvSC3FheMYNzktJlro8aVfPxodAuyalYleh++PFoAS4TSPE9MfA+0UUTK7:gqC36LkJcjPxodAl8DiPE9/+0UKK7","tlshash":"da9294c5bb053d53e9ff12f64157170ba2368eed050e10289839efc629314b1a6efb69","size":20430,"data":"","first_seen":"2023-03-07T01:15:16Z","last_seen":"2026-06-20T01:50:30.347143Z","times_seen":5207,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"58ed288ecb7a896330e8392f48ae6d92","sha1":"87f68dde45666e4027c8cb374604396836ae74b6","sha256":"7581444217876202e258bebc7c72366814fa063868c1c3251d87adda52c2a203","sha512":"e4fa62fa749799ab1711934460f2c559619db63055e18618030fd076dc18d1e70371fb22e9ff081768d320700229bb107211de0550db1ce2ddaf015926d8c657","ssdeep":"192:RiaSKkC50YFJ46aMQ0ie3XQ0gOyCwnWRUDJQybdkvzfQve8yX:RzAYFqd0mCw6a+tUGJX","tlshash":"d6221a8b7c8cb94c07935ae2483f24da116aad82c444ad21de94e5f4be30759f9dbf90","size":10148,"data":"","first_seen":"2025-10-30T23:19:58.288563Z","last_seen":"2025-10-31T00:05:45.000864Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"c44b9abea5de6c283354510afc76bae6","sha1":"34d2cb8c817d519e1384533f0d12467c8d24c2fb","sha256":"dc6a628011f129ac22f89f3911ed7e557442ef0338d866823f4b2e26b59f5810","sha512":"ebb81d007581e1d923462bdefa12e2e744577c6b887afeb9d1d491b3c397cef6cee41ef255060c72cab8e121615dc14c4fda9a5d4602bd671369dff396a2cd64","ssdeep":"","tlshash":"ad50003c0c00000f00000300f0000f00000000000000c003030c0000000f000000000c","size":10,"data":"","first_seen":"2025-10-31T00:05:45.144388Z","last_seen":"2025-11-25T23:20:14.821331Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chaseherbalpasty.com/lv/esnk/2018929/code.js","fqdn":"chaseherbalpasty.com","domain":"chaseherbalpasty.com","tld":"com"},"ip":{"addr":"94.242.247.20","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"306497460fec2db20fe2b3cd79f079e1","sha1":"4c43f979ec2d9a22f88be8bf22e2ac63a70ff80d","sha256":"42b65c6df1569e65be8f7229a81a9b80ac77b72c2026b312409c60c39752a9b2","sha512":"c4bcd18e96fbe257a8bc98215f92c8496c1ebf9000db12f245d4ebf401bbaaa894b1a1ae7f470c40343dc61581a7896cbb657ff4fccd3676799e24335553930b","ssdeep":"1536:lso8qPSdMQEZSO1CRC2vxtFKsN76U6x+ui++UzrS5jUNvJrzTmwN5FOmdF+j4QvS:lsjak4+ukU6WpdLH","tlshash":"e1f3768efa833c76c266b03fc93fd906963568f1964e8404f063d1f819e4715a636bb6","size":169175,"data":"","first_seen":"2025-10-31T00:05:44.996977Z","last_seen":"2025-10-31T00:05:44.996977Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"79b04ce1dcd1a39a6500dfa4038278ca","sha1":"1e0f771567f9c4c5ded161193fbc7e3c1df5abbf","sha256":"f6b0ba34efc5de6b7ea24d8a0259c5fe22522f9874d1c63df1240d62b27b1a76","sha512":"97695ee31b85934a9e03fcd63aa152cbce400a224b06b47bb4528c8053a46c94a2bb815353dcf4a75e3585e620ec833e3bd2af39c10bbcdc7d12f83e4cbf00aa","ssdeep":"","tlshash":"c3c02b8c210a8c7041e727018b3ff600f0013204d4d17932480963044d20e03d744824","size":149,"data":"","first_seen":"2025-02-10T21:56:42.075249Z","last_seen":"2026-06-11T05:03:54.563661Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/themes/retrotube/assets/js/navigation.js?ver=1.0.0","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eca10535dd65f4979e3b3ad3ec8e02c2","sha1":"54c38c3bf24825e407741ef0e316f678a5b580db","sha256":"802bc6725fd37d15aa9d599fa3f921fca0d4c585162c7b23da8ccd6f3ded751d","sha512":"680521331d53bb6b47390979cbb907f78607dc713d99405ea8664d401b8e9e3106bca7111c1142d8abb4a5d71a7957998ada61407432f084648bba32ed8e1d27","ssdeep":"96:wqduIPMiXjA1L1AWeyQqECAvBvRgY31rr/qBvHsMTFsPFxLdY0fdKI:wktP/W1Henqxy1R31/iRHsIFiFPBkI","tlshash":"7c91318aff88217b71b7326a697f61ed373844339a085c22f874d1a03d9446406bafdd","size":4500,"data":"","first_seen":"2023-03-07T01:26:46Z","last_seen":"2026-06-20T01:50:30.306328Z","times_seen":3955,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chaseherbalpasty.com/get/2018929?zoneid=2018929\u0026pid=__clb-2018929_4\u0026jp=_clnzoygucnnyeciyssjapy\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.627\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=Ord-7bcKmZpiyzUDVIIHN\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=NFrraDqaHR0cHM6Ly9meGdneHQuY29tLw\u0026afid=4619065480723968\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026dto=2\u0026pload=2396\u0026rlp=%5B0%2C91%2C298%2C159%2C2598%2C27804%2C4067%2C27455%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=3\u0026uf=0\u0026freq=0","fqdn":"chaseherbalpasty.com","domain":"chaseherbalpasty.com","tld":"com"},"ip":{"addr":"94.242.247.20","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"01f4f056aaded1a4f72b6eb86ccdb82b","sha1":"8cd48cc18e128ced3d7792b5268ae5c5d5f722f5","sha256":"d427ce7619e5c12502ab3917c31ce6481aa9b2d8ce969f27469628944338aee4","sha512":"d5d33ea32cf5efe2fbfe56ff02c800a61c36c5bd54fd3e2429930d87c7a42972c5583febc0fb4a9ce6756e70230b397326a17212560a4bb6df7f8cdaea5c57a5","ssdeep":"96:PfPImxN/+ABJrxN/+ABOxN/+ABQxN/+ABuNc9u9mr9M5F0Co:PfPImxEmrxEBxE9xESgA+5xo","tlshash":"86a1076424d64fdbe97450c79234ec41bec72bf8bb27694c872e46ab1b0d219b0b49d1","size":5038,"data":"","first_seen":"2025-10-31T00:05:45.029673Z","last_seen":"2025-10-31T00:05:45.029673Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"driverhugoverblown.com/on.js","fqdn":"driverhugoverblown.com","domain":"driverhugoverblown.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce9a055ef3be68028027854e6f4ee75b","sha1":"dc8716fa1320e220e260e7ad34e2eb3bba95be04","sha256":"aae99139dcd5abda531bea2c2b797940f64fa0cdf8194aaca8a2635f3fff19cf","sha512":"2f77ce62eaa63e5d506acaf57a5d40e68a958fad288d3a9a57523cf6fea0c537f8bd392568524508247427b215d9f9e53dd7fb402d0da625069897b274a622b7","ssdeep":"1536:MnTw9cCrkxGxkVNrTmdU16cT9TRdyuQDr9wLGHYSpryNDCz2PG1DLZG3bUpP+8i:Mk9cCnxkV1m7cT5xKrKLGjpGeDLk3F","tlshash":"cce3a49d67cb20350303a029cc3f5627a9355ddba89dc590d9bfc1cce8b560bd12abe9","size":156076,"data":"","first_seen":"2025-10-30T16:20:15.292553Z","last_seen":"2025-11-05T13:40:53.471314Z","times_seen":121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"abe11ed8d20141c6b0af334b959a205d","sha1":"982cc0715e5e9c9959846818109927ac6ed17525","sha256":"09a96a3c153f2640421e02fcaa3153ed1370fe8898d49eaa45f29485d51ad6b8","sha512":"5153080374743fc6cae140330448490e2be0ae052743b38b60a9aed6ada70a9f48d57b80e5012f056cc57a32ea60dbef7a52abf0a8ea85bd9bdbc1fb1d754b7a","ssdeep":"","tlshash":"94500033c00000000000c000000c03000000c0000c33000000000030c300c330300000","size":11,"data":"","first_seen":"2025-10-31T00:05:45.147828Z","last_seen":"2025-11-25T23:20:14.819021Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dodgyfactoidprecut.com/in.js","fqdn":"dodgyfactoidprecut.com","domain":"dodgyfactoidprecut.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"00e7e7069f4023e01917a2ee5952093a","sha1":"8315530716c59c35b399fe2b1623a5c10345d9e0","sha256":"b255f5c1ba16ed93f82842e5a6100c511066c1a5bfb93ff4aaf5f4f9cbbc0fc6","sha512":"4f3aa2a6fa5953a09b8833b36813185ba943a35e2610d9b439dcd9439745ee8e7adaba8e2c86c804d6e005204a341f191f277cbfac794c770689c9f9b702d074","ssdeep":"3072:4wX1hsNb5+ZvKKlx3ooZG6eJ0MgEyjFauheW:Jq5OvtlxooZG6wuheW","tlshash":"2104829deeb4603d519ed51bb82e0939ba35dbcba09d84008c63f1c43b67946d131baf","size":188574,"data":"","first_seen":"2025-10-30T15:40:40.913524Z","last_seen":"2025-11-05T14:17:52.627817Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chaseherbalpasty.com/lv/esnk/2018929/code.js","fqdn":"chaseherbalpasty.com","domain":"chaseherbalpasty.com","tld":"com"},"ip":{"addr":"94.242.247.20","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"306497460fec2db20fe2b3cd79f079e1","sha1":"4c43f979ec2d9a22f88be8bf22e2ac63a70ff80d","sha256":"42b65c6df1569e65be8f7229a81a9b80ac77b72c2026b312409c60c39752a9b2","sha512":"c4bcd18e96fbe257a8bc98215f92c8496c1ebf9000db12f245d4ebf401bbaaa894b1a1ae7f470c40343dc61581a7896cbb657ff4fccd3676799e24335553930b","ssdeep":"1536:lso8qPSdMQEZSO1CRC2vxtFKsN76U6x+ui++UzrS5jUNvJrzTmwN5FOmdF+j4QvS:lsjak4+ukU6WpdLH","tlshash":"e1f3768efa833c76c266b03fc93fd906963568f1964e8404f063d1f819e4715a636bb6","size":169175,"data":"","first_seen":"2025-10-31T00:05:44.996977Z","last_seen":"2025-10-31T00:05:44.996977Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"astronautlividlyreformer.com/check.html","fqdn":"astronautlividlyreformer.com","domain":"astronautlividlyreformer.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8f2e0cd22b41fa7c9212af0b11f449d3","sha1":"6c552632a2eeaa712496444594c3e8c68eadbbb0","sha256":"d7ca5af269e02e5109a61ef55df0196e2206204d6c742daba5a153defc097fda","sha512":"c90bb9984fc0b2a5374129cb10fc509e937ba565063e2530578430fb0329f8058c145c914de139fa166d8530cfff9799a8c78aa1ad2752d9ec72e24c0fed477c","ssdeep":"","tlshash":"d201685934f5684d5127b630255b22182d32a40325cbd94efb2cdb301f825a7eca8aef","size":762,"data":"","first_seen":"2025-03-07T08:34:13.499254Z","last_seen":"2026-03-04T07:06:03.173543Z","times_seen":7245,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"795c376fd5d5d73dc611b5da28463418","sha1":"48d049747faf6e19a0333d8c42dd4c6b9c82f962","sha256":"30d8ecfde94907cf04e80242a5f01290e451e5517b83a0641d9fdb08b5383511","sha512":"3a0a32b80189fa3bfc9a135657b8f16a6f05816172d98b08f24f0bf118e18f57233041167313699adc3ee6801f801d4f24fd37793dc2c7eb382bd71070bcc177","ssdeep":"","tlshash":"ff5000000000003cc00000c000000000303cc0c00000030000300000000000c0000000","size":9,"data":"","first_seen":"2025-10-31T00:05:45.14911Z","last_seen":"2026-04-11T20:49:47.165555Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chaseherbalpasty.com/lv/esnk/2018929/code.js","fqdn":"chaseherbalpasty.com","domain":"chaseherbalpasty.com","tld":"com"},"ip":{"addr":"94.242.247.20","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"306497460fec2db20fe2b3cd79f079e1","sha1":"4c43f979ec2d9a22f88be8bf22e2ac63a70ff80d","sha256":"42b65c6df1569e65be8f7229a81a9b80ac77b72c2026b312409c60c39752a9b2","sha512":"c4bcd18e96fbe257a8bc98215f92c8496c1ebf9000db12f245d4ebf401bbaaa894b1a1ae7f470c40343dc61581a7896cbb657ff4fccd3676799e24335553930b","ssdeep":"1536:lso8qPSdMQEZSO1CRC2vxtFKsN76U6x+ui++UzrS5jUNvJrzTmwN5FOmdF+j4QvS:lsjak4+ukU6WpdLH","tlshash":"e1f3768efa833c76c266b03fc93fd906963568f1964e8404f063d1f819e4715a636bb6","size":169175,"data":"","first_seen":"2025-10-31T00:05:44.996977Z","last_seen":"2025-10-31T00:05:44.996977Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/themes/retrotube/assets/js/skip-link-focus-fix.js?ver=1.0.0","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"75abd4cd8807b312f9f7faeb77ee774b","sha1":"e7b7a7ed06d0123ab8667a1d1eeb23de9f2bece7","sha256":"ca424c0181141900220a19f998ffa7660380bc99ab99557ad458a083251f7034","sha512":"c9f1f752994f1361555680ca5a60339fda152587ccc055db20148c086d82846887dd0801187aa033829b7d5eb9644b9391f493965eee35b4a1592f82cbb36aa4","ssdeep":"","tlshash":"bb01cbb6b30d44b604aa32178d5f61cd297d91e3a829649b8cc909502924c6d23befb8","size":683,"data":"","first_seen":"2023-03-07T01:03:28Z","last_seen":"2026-06-20T01:50:30.34917Z","times_seen":12257,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/themes/retrotube/assets/js/jquery.bxslider.min.js?ver=4.2.15","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c675495748ef0df6858b93dd9e623c46","sha1":"e1be723e4e25d37282821c50b7e12796d3df5f8d","sha256":"9a32744fa4707d6ea1ad2b696c644c4f45d327509989b4625b8a980e4a45e271","sha512":"1775ad0e5bc7d3cc9ebdd032b94e440a0872f616f983ff867511984daba748ed52e1de5c67f0e4648947bef65b499b3a6197ff7726cf1f481b7d4253b6711127","ssdeep":"384:nudkTa6bYaGQZKbZi1X5U59g+rzyPSS1SMVu8r2WiWQK7XYANWck6QDhC2k+0CMu:uv9gPSSbs8PwhCK0CMl+ArJwz","tlshash":"e6b2b609b13939be05f632baf25ecb0550f6448d9827f0f4a8b5c94ddad88d4102fbe6","size":24252,"data":"","first_seen":"2023-03-07T01:15:16Z","last_seen":"2026-06-20T01:50:30.363656Z","times_seen":4253,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dodgyfactoidprecut.com/check.html","fqdn":"dodgyfactoidprecut.com","domain":"dodgyfactoidprecut.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8f2e0cd22b41fa7c9212af0b11f449d3","sha1":"6c552632a2eeaa712496444594c3e8c68eadbbb0","sha256":"d7ca5af269e02e5109a61ef55df0196e2206204d6c742daba5a153defc097fda","sha512":"c90bb9984fc0b2a5374129cb10fc509e937ba565063e2530578430fb0329f8058c145c914de139fa166d8530cfff9799a8c78aa1ad2752d9ec72e24c0fed477c","ssdeep":"","tlshash":"d201685934f5684d5127b630255b22182d32a40325cbd94efb2cdb301f825a7eca8aef","size":762,"data":"","first_seen":"2025-03-07T08:34:13.499254Z","last_seen":"2026-03-04T07:06:03.173543Z","times_seen":7245,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chaseherbalpasty.com/lv/esnk/2018929/code.js","fqdn":"chaseherbalpasty.com","domain":"chaseherbalpasty.com","tld":"com"},"ip":{"addr":"94.242.247.20","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"306497460fec2db20fe2b3cd79f079e1","sha1":"4c43f979ec2d9a22f88be8bf22e2ac63a70ff80d","sha256":"42b65c6df1569e65be8f7229a81a9b80ac77b72c2026b312409c60c39752a9b2","sha512":"c4bcd18e96fbe257a8bc98215f92c8496c1ebf9000db12f245d4ebf401bbaaa894b1a1ae7f470c40343dc61581a7896cbb657ff4fccd3676799e24335553930b","ssdeep":"1536:lso8qPSdMQEZSO1CRC2vxtFKsN76U6x+ui++UzrS5jUNvJrzTmwN5FOmdF+j4QvS:lsjak4+ukU6WpdLH","tlshash":"e1f3768efa833c76c266b03fc93fd906963568f1964e8404f063d1f819e4715a636bb6","size":169175,"data":"","first_seen":"2025-10-31T00:05:44.996977Z","last_seen":"2025-10-31T00:05:44.996977Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a291fedf2ceded2fe3139091fab10826","sha1":"df9601bb07db44c9071ceab61c5e76caf218b486","sha256":"4a3574de12976b51033caffc1311587bcbaaafb1897301ac9efa22da00264f3d","sha512":"8f4f3aa455c49ee50c3e5b987edb5bf81bfca6875ee82401ec04ad56e929a34368ada2151094d398eaeb32df6b96bb3c6ae94663695cb0f48d4d46c8304be9fa","ssdeep":"","tlshash":"d2d0977820939c3e41bb29422b87bb00b11233060002ae344ce18284017f90b6a59c88","size":247,"data":"","first_seen":"2025-02-10T21:56:42.068229Z","last_seen":"2025-11-25T23:20:14.820037Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"astronautlividlyreformer.com/get/1994451?id=1994451\u0026jp=_cllczpzppbzujoifkesztw\u0026dr=49\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.627-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=Ord-7bcKmZpiyzUDVIIHN\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=qNuhi03aHR0cHM6Ly9meGdneHQuY29tLw\u0026afid=396940830081536\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026dto=2\u0026pload=1798\u0026rlp=%5B0%2C91%2C298%2C159%2C2598%2C27804%2C4067%2C27455%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0","fqdn":"astronautlividlyreformer.com","domain":"astronautlividlyreformer.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"21b29623a60cff6e2d5a827a58efead1","sha1":"7f0f0e0fe4dcefc5d4a1fe711d629b8b951214d1","sha256":"c90059d00a7ead9306339211a792fc72a691865b71ccde500d0641d1c2f89365","sha512":"d64f09e5ff64f975514237125674f9b17ad1f25728ffa61ec5b64389e264b42a0405dd9aaa517efb9375403567e97130e503bfb7cf34278290d5ab1e33d3989c","ssdeep":"","tlshash":"a3618596e9cad9939997ec9c8978bdc54cde8ca6ae27111b0434c40213daf739dc702e","size":3283,"data":"","first_seen":"2025-10-31T00:05:45.042466Z","last_seen":"2025-10-31T00:05:45.042466Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chaseherbalpasty.com/get/2018929?zoneid=2018929\u0026pid=__clb-2018929_3\u0026jp=_clghylozzgdgxzblltpeqc\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.627\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=Ord-7bcKmZpiyzUDVIIHN\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=ri8WKr1aHR0cHM6Ly9meGdneHQuY29tLw\u0026afid=5463490410863104\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026dto=2\u0026pload=2317\u0026rlp=%5B0%2C91%2C298%2C159%2C2598%2C27804%2C4067%2C27455%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=3\u0026uf=0\u0026freq=0","fqdn":"chaseherbalpasty.com","domain":"chaseherbalpasty.com","tld":"com"},"ip":{"addr":"94.242.247.20","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"8513b625b81c4c3761b0a50d74939406","sha1":"48d22e27824f11571f68e32d5bd49e7b5be49807","sha256":"b826e2593dc7f767d6f101c6d59dc9b57e6037dcc09df538dc80e233eb0a77df","sha512":"3e271a5b4d1f478cff2bdacf74437896b8b9929f289789aeb81e6198928fdd8e23970a19db8b530b9cbc08df795c2130d9b506e255a5495d343c65be0e7ca0bb","ssdeep":"96:YeZjcPgvF3CmIuiZjcPgvF3CmIuPZjcPgvF3CmIubeZjcPgvF3CmIuPtweP/I7so:YeZBF3CmIRZBF3CmIAZBF3CmI8eZBF3m","tlshash":"a0a11a946020dcf87c987419aa350f9272ccbdd9828bd607a497a73ac72c12e573f8d3","size":5038,"data":"","first_seen":"2025-10-31T00:05:45.122998Z","last_seen":"2025-10-31T00:05:45.122998Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-8RMNSQMQGD","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"806d881ca94bcc8d9810c7497b903b60","sha1":"f7f8f47e0d9dbfabc9cdfa71b0e5d3d9ca210277","sha256":"5de83b438619774595a689d7d78e936fab753d36f6488c35f29d2a48eb4969ac","sha512":"555cbad26cc153adc86d3eb63d7b8cbd3acac4f0882276d02301390fc6ce7b83a94fdaaff33a6a72a529cdfcecfcbc088f5f1ea62be5e0c41d8780bb82197047","ssdeep":"6144:VBe5HIy2n8fud75KGq6A0RI6TLiYYg/FOY9ftLHAJ+aAMn/xS2GJa:rqHITiud75KGq6hvLiYlAJhh","tlshash":"ee94198e73c674269396f078503f118ba57b29e2b45cc896f189cce42d74a9a4237f7c","size":410798,"data":"","first_seen":"2025-10-31T00:05:45.036481Z","last_seen":"2025-10-31T00:05:45.036481Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chaseherbalpasty.com/lv/esnk/2018930/code.js","fqdn":"chaseherbalpasty.com","domain":"chaseherbalpasty.com","tld":"com"},"ip":{"addr":"94.242.247.20","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b81f7ad46848b8d4e2d805cb31a9d29","sha1":"8c544f2a355650b299016d4e2c63b149fcc73030","sha256":"1267ba33f4dfe477b55f1e2e642a83cb029b44a0da03890f16f630e8feb2747d","sha512":"d65f2146d05a1d00b21faf3d771c54553afd5a25554ee1030e640258b36ce9cbe1686f3b694873300bbf104e6f126cae281d5bc1c24d55b011ac4da96a967ebc","ssdeep":"1536:bso8qPSdMQEZSO1CRC2vxtFKsN76U6x+ui++UzrS5jUNvJrzTmwN5FOmdF+j4Qvy:bsjak4+ukU6WpdLP","tlshash":"38f3768ef6433c76c266b03fc93fd906963568f1964e8404f063d1f819e4715a636bb6","size":169175,"data":"","first_seen":"2025-10-31T00:05:44.938809Z","last_seen":"2025-10-31T00:05:44.938809Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chaseherbalpasty.com/get/2018930?zoneid=2018930\u0026pid=__clb-2018930_1\u0026jp=_cljlghuhpasvtsywolyvfe\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.627\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=Ord-7bcKmZpiyzUDVIIHN\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=vnVEf6OaHR0cHM6Ly9meGdneHQuY29tLw\u0026afid=7996765201222656\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026dto=2\u0026pload=1645\u0026rlp=%5B0%2C34%2C105%2C61%2C1542%2C18259%2C3480%2C17910%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=1\u0026uf=0\u0026freq=0","fqdn":"chaseherbalpasty.com","domain":"chaseherbalpasty.com","tld":"com"},"ip":{"addr":"94.242.247.20","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fec3c0abe4f4da92578e0f9a98bae29","sha1":"77aa68533d5dc98f6534dd9aec6bc4e0150bd067","sha256":"cbeefe24e9551757e63e85f450f3e5a46075e78a8ecc399b75e625c1ad8e5b94","sha512":"4ab29b04c832328a6412e65e60c6bdcc9a1ae4cc0ff0e1c261d211f2a49ad31890f79dd08ed1d4237344fed59592cc3763eb7cd155dcb7bbbcd566983c64a48d","ssdeep":"96:ONg4M2TYsmXxzBwyhTYsmXxz87wFhTYsmXxz+wRhTYsmXxzWDJy8o:Ou4dYsmXxzBwMYsmXxz87wnYsmXxz+wy","tlshash":"90a1182c5248f68c43e33ef8ca3a7d654765125953168ef1b3986f09fea62f67183840","size":5038,"data":"","first_seen":"2025-10-31T00:05:45.040465Z","last_seen":"2025-10-31T00:05:45.040465Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/themes/retrotube/assets/js/main.js?ver=1.10.2.1756142663","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"62479648a67b52a1f395970c883fdd50","sha1":"fb9b2468304ef42eecd402a8a935877ca61a9f35","sha256":"5e5bf8c461e32fca94beaf4df1cb8064e06d9702184807936464a163ca82e2e0","sha512":"3393648937cf923b85076b9668d4e49cddfaa4c72d44bcf1fc0dd58dd87720dcf6ebab044d60c8c95b2e47924f3ea361ff273267c7015134d768598580860c9f","ssdeep":"384:pnujdbo6UazbyFx4QsbatrEOFxnIfYatSyDZD9Vk2ly6oUv:puRbo7azbyFx5NtrEYnIwsnD19VkW/oO","tlshash":"2af29489f77d2546867a30da6c6f16cd313d1236a842086fbc2896e428e4b3c7396d3d","size":36394,"data":"","first_seen":"2025-08-28T06:46:38.264936Z","last_seen":"2026-06-19T09:13:28.525492Z","times_seen":1596,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dodgyfactoidprecut.com/get/1990339?id=1990339\u0026jp=_clrlpxodjlgafsgsnbnurh\u0026dr=102\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.627-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=Ord-7bcKmZpiyzUDVIIHN\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=XOUppqOaHR0cHM6Ly9meGdneHQuY29tLw\u0026afid=8841190131384320\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026dto=2\u0026pload=2134\u0026rlp=%5B0%2C91%2C298%2C159%2C2598%2C27804%2C4067%2C27455%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0\u0026freq=0","fqdn":"dodgyfactoidprecut.com","domain":"dodgyfactoidprecut.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3dabbc456f1fb7b0bb35d368df623401","sha1":"6d72288308273c496e7551cbde001e535124733d","sha256":"079225b2932de3f9ad3d818670b6545a236f7020ab763e44b8d72c5378efa957","sha512":"af90764107e3e293ad9a6df4fd1932c58e495175d50158d7ab6612871e9abb381e5a7d8b4789c84afbc4c6241162310be7d5bed28c0a06d06f4d4535dcc4eeb9","ssdeep":"96:v7Go+A3DyyBqNGHOw/Aj8bJ9fgjJUybhQW+A3DyyBFNmCV3tspbJ2rphz1XO9QPZ:v7Go3DyyBEGHnbJ9fIWyVR3DyyBbmCl3","tlshash":"5ab14b3c7699e948fc710fd214725cf61be8f45657d7916ad321c068d0b8e30da3e45a","size":5430,"data":"","first_seen":"2025-10-31T00:05:45.065954Z","last_seen":"2025-10-31T00:05:45.065954Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4831f5ddc8133dd8475ad9921364b83c","sha1":"f755d1a0613c503041a24b6152140c3e55725ff0","sha256":"525c496c59b4d52246ae533f0c2a9600774a1076c0e0eea61614d56d9d805af9","sha512":"1c3c14388245d493d74665fcc109d25b83781ed9b964fd3a5848abc4fe21a021fbc2eb411a101bfa3e9af33b40b2972e6dd446175e2efa927ccccb9982b635b8","ssdeep":"","tlshash":"ece07d3107425f5321e2f5c0012c4d5369b9a09294548e6923dcc89448c1c0277ee82f","size":311,"data":"","first_seen":"2025-10-31T00:05:45.150895Z","last_seen":"2025-10-31T00:05:45.150895Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"04473cc91cb8ceafcba745f2504f0e5e","sha1":"3026c2874e1f03c8264bd4a1ae566f21c54e4e05","sha256":"b995e8b9c6263248f088a48e3f052ceae54430ce9327f2120e70e57357926d75","sha512":"8e4daad4a95ea2fddd18195ccd21a8d2b4a8491f109a4963dcfb3e5d4567d81d90b734a18672f89109470dddb9fd4997b790feca6ed3b3c8c215fac07a13739f","ssdeep":"","tlshash":"39d0a7a92865883066a5014650b9e3d8276061906611a201c2d8cc1f5e11d9708b155c","size":217,"data":"","first_seen":"2025-10-31T00:05:45.141683Z","last_seen":"2025-10-31T00:05:45.141683Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"driverhugoverblown.com/get/1988026?id=1988026\u0026jp=_clladtxmuugtlbdrsovapd\u0026dr=49\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.627-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=Ord-7bcKmZpiyzUDVIIHN\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=aCTxKpyaHR0cHM6Ly9meGdneHQuY29tLw\u0026afid=8559715154713088\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026dto=2\u0026pload=2049\u0026rlp=%5B0%2C91%2C298%2C159%2C2598%2C27804%2C4067%2C27455%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0","fqdn":"driverhugoverblown.com","domain":"driverhugoverblown.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f4f2eec9022dc9d3dd9d64c6d330558","sha1":"87e80ded335b1c20144aeb22fda171743cc4a56b","sha256":"9d9e75cdc544f220598791216fb5273fd7c197b56f104f119cb634fec9edcf76","sha512":"d1e707760cf9ca08538fe3190caf82aa5a467bf0257b1935cabfae481aa725f6f2bdc38d3fe3448669a4bc6b3b087ab349de95993ff8b61d040b9423140c02bc","ssdeep":"","tlshash":"b56176ac4c8dd219c98ecdb553f8ed40a086415d44e7ac373774cba89a95de991811b3","size":3254,"data":"","first_seen":"2025-10-31T00:05:45.064733Z","last_seen":"2025-10-31T00:05:45.064733Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"driverhugoverblown.com/check.html","fqdn":"driverhugoverblown.com","domain":"driverhugoverblown.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8f2e0cd22b41fa7c9212af0b11f449d3","sha1":"6c552632a2eeaa712496444594c3e8c68eadbbb0","sha256":"d7ca5af269e02e5109a61ef55df0196e2206204d6c742daba5a153defc097fda","sha512":"c90bb9984fc0b2a5374129cb10fc509e937ba565063e2530578430fb0329f8058c145c914de139fa166d8530cfff9799a8c78aa1ad2752d9ec72e24c0fed477c","ssdeep":"","tlshash":"d201685934f5684d5127b630255b22182d32a40325cbd94efb2cdb301f825a7eca8aef","size":762,"data":"","first_seen":"2025-03-07T08:34:13.499254Z","last_seen":"2026-03-04T07:06:03.173543Z","times_seen":7245,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chaseherbalpasty.com/get/2018929?zoneid=2018929\u0026pid=__clb-2018929_5\u0026jp=_clkrnvpdkpchgwqyqhhsup\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.627\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=Ord-7bcKmZpiyzUDVIIHN\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=VA4u2v7aHR0cHM6Ly9meGdneHQuY29tLw\u0026afid=4056115527338496\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026dto=2\u0026pload=2492\u0026rlp=%5B0%2C91%2C298%2C159%2C2598%2C27804%2C4067%2C27455%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=3\u0026uf=0\u0026freq=0","fqdn":"chaseherbalpasty.com","domain":"chaseherbalpasty.com","tld":"com"},"ip":{"addr":"94.242.247.20","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0072327169e8c82322a04c78375e527","sha1":"af2a32a0b12cdfce9b4434c2318dbaf48dc3504d","sha256":"bd94d4a4d264be36534c7e69f5169c9ba010e1abfc6eee9717dcd35e8cc5d541","sha512":"f1253a197ca7ff6d1034abc0dce5806bc3b278ff32209d03f96d897fc7900a89b6b9b78077d72cd0327f6401d8559dc8a27dfb812ba5c0371663759fb241df6f","ssdeep":"96:gVD1QEASB0jpkvxEASB0jp5FEASB0jp4BEASB0jpUuk3vri8PYC6Ko:0XLB0Vk2LB0VQLB0VjLB0VR6vrBDZo","tlshash":"b7a1b7b08897e9439cd1fc8c20532efdd8d423656a4655352666f21ff4acf788a3b4d1","size":5038,"data":"","first_seen":"2025-10-31T00:05:45.095095Z","last_seen":"2025-10-31T00:05:45.095095Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-06-20T01:49:20.512041Z","times_seen":916602,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-06-20T01:49:20.481071Z","times_seen":843831,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.ru/metrika/tag.js","fqdn":"mc.yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"77.88.21.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d44f52402d880e3d56f05cd8bb00dcff","sha1":"6ce388903e0c4a14fbae450f2ca048d53e6c9b50","sha256":"e9b37bb86b7c81bd87d41b9d3ae945478eef870dc36bf7d900495f8fe98b779b","sha512":"59b95fe874231f5552cccc0a023a004f63b308b4fefdc555a9c35953eebf0246db61c6df7868dadbde7a6b5802a906b9509156104a211b72b66a89598ebf2f79","ssdeep":"3072:Cj2VixUuw6+4ONcXW8usOPD6maLpYobA7T8OfsgWq6ZAP3eqBbTCXJl:O2VixtANc3usW+maLyn8Ou/ZAPnTcl","tlshash":"0b34e8d976827472537334b4a03f004bb2be7896f14c8964f186e9d57e789a89237f2c","size":242247,"data":"","first_seen":"2025-10-27T16:57:08.555205Z","last_seen":"2025-11-05T14:32:31.007163Z","times_seen":623,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/RFC-Cena-caliente-%E2%80%93-Aalexxxtremo-Milky-Santy.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/RFC-Cena-caliente-%E2%80%93-Aalexxxtremo-Milky-Santy.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 17:46:25 GMT\r\netag: \"4430-69039fe3-6ba04a;;;\"\r\nlast-modified: Thu, 30 Oct 2025 17:26:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17456\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 22713\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7yfwH9xkalNcYyfiajvHCIREl5A0ZJPY9q9u6tHoEMtImV3kZGN9NzjR6eTnOIyi8vwOBYxSyLpIy9n3WdgKQ8zTBUcj7jQLy0U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5edd91f4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17456,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 500x281, components 3","md5":"5635dc759118803e163a5ec52c32c07b","sha1":"7b2e3eb0af1d554d85f8b0dd35db2c706765023d","sha256":"57847b975048bd1aad845ed91d9712adcdea8c709b4251f3325adb465f76113e","sha512":"413c2d5381910e661b59c549724547acd7d896f9e26bdd9f29f44c0308c7be9eb5c0bdafdaa23f0a733b98bb5a953496c4dd489b4e65444efa39561beefca513","ssdeep":"384:Fi1TtPhWcLkLZKGPPxa61TIdpBxpdqcpPIyAMb83gYnmvro3I3V:FiFlnMPxzCdFXRtrWgYnmvSI3V","tlshash":"7472e0df57210150d43bf1ae88a36557c2381cb1aa6237474fee1222df92acec2f0575","first_seen":"2025-10-31T00:05:44.92302Z","last_seen":"2025-10-31T00:05:44.92302Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/RFC-Dealing-with-huge-arab-dick-%E2%80%93-Marocain21cm-Melad-Paris.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/RFC-Dealing-with-huge-arab-dick-%E2%80%93-Marocain21cm-Melad-Paris.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 17:46:25 GMT\r\netag: \"27c0-69039fe5-6ba056;;;\"\r\nlast-modified: Thu, 30 Oct 2025 17:27:01 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10176\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 22713\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1W9ScObdfsqUUHoj2iUk2AMZS6U%2F685Vez%2BmARhe%2FqiY8VUdeKeKzWOs25ARRG%2B6gwbHZNpZE7QBEtywoy6P0js5Oquer0UIOiY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ede9294e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10176,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"72a5603fb503b5f2e79987b6bb491290","sha1":"7dbd70900b04bd552a85053821c74a745da2608b","sha256":"a6341ba46d02e5e748ebf4c5782c06fca07de03b6051000ecc51c03d08a8844f","sha512":"eb33ce8e9833e23bc1d9c368dc975f404104822b8c0bd2aff11a1fcc31bf93923933664d9fb7d0edc3c52d5c2844aea754f4b2683c3101de143525da09dbf3a4","ssdeep":"192:BD53gqyAeVnVIsNQHg15T8c5qrZCQUCCaNearQ7xMWd85oYqi07kEDcV96T3IYrB:FEhVnVIsNQHg15T86qxiaNXQY5o6D0cQ","tlshash":"4422bfa14330bcb5446941663a35077f847c614faa76f1471e9187f7adb7cad881902f","first_seen":"2025-10-31T00:05:44.927781Z","last_seen":"2025-10-31T00:05:44.927781Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2021/10/IMG_20211008_184411.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2021/10/IMG_20211008_184411.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 23:56:28 GMT\r\netag: \"6c90-616003f0-4aef14;;;\"\r\nlast-modified: Fri, 08 Oct 2021 08:40:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27792\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 510\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kfOFDF%2B%2F92u%2BNGJ2y0beY%2B754khwZeaBKvWZzOcW14jTYgJfRj6AJgZkP9lG3wFdoXOqNlkatQ%2FR8xVzCFwifPZrSiXQyMMA9kE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee695b4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":27792,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=4, height=0, orientation=[*0*], width=0], baseline, precision 8, 640x360, components 3","md5":"3cb9756b75c098c528e0cbe3aaf3c2e0","sha1":"f2aba5037163d5a97a9d62373fdd4949041c67de","sha256":"783b2591502472f035eff4eccdd2c25c5fd904c4a4bbe3585d96a8d0edaf235a","sha512":"62622d9ef8e858e9d35823d88b27a90d1fe06b030077094bc0c6782cefa0d9477fef307b0b08f2f682cb048486a025336704f182efb368c42625c6316941f4bf","ssdeep":"768:8RzfXVQtPNqrdCPhHnZdFgmJkR0RkIDFyqCxg743Md:81fXVqPNqroPZgqkB/3K","tlshash":"02c2e024574e01b3e8e547bd1ebf8b96d39aaa35e78437e25d7ee23c2674108c17082d","first_seen":"2025-10-31T00:05:44.931161Z","last_seen":"2025-10-31T00:05:44.931161Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/themes/retrotube/assets/js/main.js?ver=1.10.2.1756142663","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:00.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/themes/retrotube/assets/js/main.js?ver=1.10.2.1756142663 HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 01 Nov 2025 07:47:37 GMT\r\netag: \"8e2a-68ac9c47-7e0108;br\"\r\nlast-modified: Mon, 25 Aug 2025 17:24:23 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 9383\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 31 Oct 2025 00:05:00 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 490643\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oWhF2GvYnDgYQFn%2Fc8fD%2BavBj8HzsM6jvwXQXx%2FnDgdJprnHKVpm14VSXJXLRmDGG1U%2BQ55aSsiGETB59JcZ6PvQ3DktYa1Z6z0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 996ee5f449c94e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":36394,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"62479648a67b52a1f395970c883fdd50","sha1":"fb9b2468304ef42eecd402a8a935877ca61a9f35","sha256":"5e5bf8c461e32fca94beaf4df1cb8064e06d9702184807936464a163ca82e2e0","sha512":"3393648937cf923b85076b9668d4e49cddfaa4c72d44bcf1fc0dd58dd87720dcf6ebab044d60c8c95b2e47924f3ea361ff273267c7015134d768598580860c9f","ssdeep":"384:pnujdbo6UazbyFx4QsbatrEOFxnIfYatSyDZD9Vk2ly6oUv:puRbo7azbyFx5NtrEYnIwsnD19VkW/oO","tlshash":"2af29489f77d2546867a30da6c6f16cd313d1236a842086fbc2896e428e4b3c7396d3d","first_seen":"2025-08-28T06:46:38.264936Z","last_seen":"2026-06-19T09:13:28.525492Z","times_seen":1596,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.g.doubleclick.net/g/collect?v=2\u0026tid=G-8RMNSQMQGD\u0026cid=1850737930.1761869102\u0026gtm=45je5at1v883244240za200zd883244240\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~105322303~115480710~115583767~115938465~115938468~116217636~116217638~116253087~116253089~116254370","fqdn":"stats.g.doubleclick.net","domain":"doubleclick.net","tld":"net"},"ip":{"addr":"142.250.147.155","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:01.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.g.doubleclick.net","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:37:32 GMT","end":"Mon, 05 Jan 2026 08:37:31 GMT"},"fingerprint":{"sha1":"5F:FE:30:B9:29:99:0E:18:BA:44:3C:1D:D2:94:B7:D6:3A:02:A8:8B","sha256":"68:19:12:09:58:1E:5D:4A:19:C5:CE:E0:A6:9C:19:D3:69:D8:35:65:1F:AB:44:6A:9A:7F:AD:54:2D:51:FF:9A"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-8RMNSQMQGD\u0026cid=1850737930.1761869102\u0026gtm=45je5at1v883244240za200zd883244240\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~105322303~115480710~115583767~115938465~115938468~116217636~116217638~116253087~116253089~116254370 HTTP/1.1\r\nHost: stats.g.doubleclick.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://fxggxt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://fxggxt.com\r\ndate: Fri, 31 Oct 2025 00:05:01 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:129:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:129:0\r\nreport-to: {\"group\":\"ascnsrsggc:129:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:129:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":108,"dns":0,"connect":35,"send":0,"wait":45,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chaseherbalpasty.com/lv/esnk/2018930/code.js","fqdn":"chaseherbalpasty.com","domain":"chaseherbalpasty.com","tld":"com"},"ip":{"addr":"94.242.247.20","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chaseherbalpasty.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 01 Oct 2025 00:00:00 GMT","end":"Tue, 30 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"33:A3:14:CC:01:76:4E:33:44:46:15:D3:60:37:E2:11:39:59:F0:06","sha256":"29:67:DC:3A:7D:72:3E:0A:8C:3E:94:18:A0:47:AF:E8:3B:57:B6:5A:F9:C9:9B:5F:4A:36:73:3F:09:96:29:01"}}},"request":{"raw":"GET /lv/esnk/2018930/code.js HTTP/1.1\r\nHost: chaseherbalpasty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 30 Oct 2025 14:25:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6903754b-29589\"\r\nx-js-ab2: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":169175,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6b81f7ad46848b8d4e2d805cb31a9d29","sha1":"8c544f2a355650b299016d4e2c63b149fcc73030","sha256":"1267ba33f4dfe477b55f1e2e642a83cb029b44a0da03890f16f630e8feb2747d","sha512":"d65f2146d05a1d00b21faf3d771c54553afd5a25554ee1030e640258b36ce9cbe1686f3b694873300bbf104e6f126cae281d5bc1c24d55b011ac4da96a967ebc","ssdeep":"1536:bso8qPSdMQEZSO1CRC2vxtFKsN76U6x+ui++UzrS5jUNvJrzTmwN5FOmdF+j4Qvy:bsjak4+ukU6WpdLP","tlshash":"38f3768ef6433c76c266b03fc93fd906963568f1964e8404f063d1f819e4715a636bb6","first_seen":"2025-10-31T00:05:44.938809Z","last_seen":"2025-10-31T00:05:44.938809Z","times_seen":1,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":27,"dns":25,"connect":23,"send":0,"wait":26,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2023/07/RFC-Manuel-Reyes-fucked-by-Igor-Miller.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2023/07/RFC-Manuel-Reyes-fucked-by-Igor-Miller.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 23:56:28 GMT\r\netag: \"2c7e-64a300cf-5f0f83;;;\"\r\nlast-modified: Mon, 03 Jul 2023 17:09:35 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11390\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 510\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dd6UNzMEx4q%2FcfQdj2EK0BqLbgXDk9%2ByXY%2Fk1XQA%2BaAp7gXL2AjicQXTTIupfzPZupmZgThA8g8cLldHXVV%2Fmxrgcy2KtPr2MXk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee99664e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11390,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 400x225, components 3","md5":"498af3b623b8f45934cb70892a20251c","sha1":"467861e5c2841b018ec4752d30993a616c8f2dcf","sha256":"8ff02ccbb42696d3486c804c3486a882fcd4bd928a2e7683aa1953b6bb906e7a","sha512":"3dd58c2767f27b1a4ba912590fa91faf034f7f7e24b9e66e74811baa2c5a5aeb312142be8805e10b45581072cf3fb85ce9291d2f89856b391b9a6904f6701e52","ssdeep":"192:BISHPCnGc8LiyOF9raTU6D4xprxEZe1Z22H/NhtWPKEOlrmd3l:S1hZ+74rrxEZSr1WPPd3l","tlshash":"f632d0439b431d7c6d77787b182231b854f019fca920fb0b0cbacf09c9524d99989e9e","first_seen":"2025-10-31T00:05:44.940937Z","last_seen":"2025-10-31T00:05:44.940937Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/06/onlyfans-novinho-gang-fuck-1.webp","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/onlyfans-novinho-gang-fuck-1.webp HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 25 Oct 2025 07:53:57 GMT\r\netag: \"9b46-685d0d0a-66e690;;;\"\r\nlast-modified: Thu, 26 Jun 2025 09:04:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 39750\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 390432\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cFZ9spseVXooq7xIIYi9eYhu40OqOCuJ1P7AcKvj5vKAZdIKqjO%2BrCxrvAsSbotmqJuZgHDipPFf1bFOCZEgQTYNUNOFavCWcZQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5eeb96f4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39750,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 720x405, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"53e716661ec7fcd015b1463503eeeba9","sha1":"a856222d329b3ab3f05ac61a980437bf8da6e5da","sha256":"382f5189a04f944917e252f368133a43e06594f41fe82a7f1a21c5f2f8deeb43","sha512":"26e87d8844f8f1d097597abe58fc5cd10769f4cc58feec34696a653d24c8322aeb6aab6e1bfa19b8f4aa51de9b8f95f5c47bc6ccb55ea8729f958f00125124a5","ssdeep":"768:a+9bpcV+yxXywCy+dsda5J5tJX3d/LP7RU5ZdzHrlIuxUZmBG4q6i:fHcV+5dsoFtJZLP9VXZmBFqD","tlshash":"8103f1d945c3df8b30b8e997f1cde121262793f740d898009f4656b6c0eee895899890","first_seen":"2025-10-31T00:05:44.942755Z","last_seen":"2025-10-31T00:05:44.942755Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/themes/retrotube/assets/js/navigation.js?ver=1.0.0","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:00.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/themes/retrotube/assets/js/navigation.js?ver=1.0.0 HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 04 Nov 2025 18:35:17 GMT\r\netag: \"1194-68ac9c47-7e0109;br\"\r\nlast-modified: Mon, 25 Aug 2025 17:24:23 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 1394\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 31 Oct 2025 00:05:00 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 192582\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=og9Qsyxhjae3RAntzfJm3sBXLJTVQKBF8TOIW2e0xcfz7uG5lY10Uafx%2Bw7A7R7Id5DboiyjSFKp2SvScyCAHNu6GGYKPi%2FsDQE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 996ee5f459cd4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4500,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"eca10535dd65f4979e3b3ad3ec8e02c2","sha1":"54c38c3bf24825e407741ef0e316f678a5b580db","sha256":"802bc6725fd37d15aa9d599fa3f921fca0d4c585162c7b23da8ccd6f3ded751d","sha512":"680521331d53bb6b47390979cbb907f78607dc713d99405ea8664d401b8e9e3106bca7111c1142d8abb4a5d71a7957998ada61407432f084648bba32ed8e1d27","ssdeep":"96:wqduIPMiXjA1L1AWeyQqECAvBvRgY31rr/qBvHsMTFsPFxLdY0fdKI:wktP/W1Henqxy1R31/iRHsIFiFPBkI","tlshash":"7c91318aff88217b71b7326a697f61ed373844339a085c22f874d1a03d9446406bafdd","first_seen":"2023-03-07T01:26:46Z","last_seen":"2026-06-20T01:50:30.306328Z","times_seen":3955,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/cdn-cgi/challenge-platform/h/g/jsd/r/0.5886085675852252:1761865991:wFgXvh_kX1fz3NpaDJQPX9g8nWZRpSwQYaX3cfZoStU/996ee5ea0b2e75ab","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:01.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/r/0.5886085675852252:1761865991:wFgXvh_kX1fz3NpaDJQPX9g8nWZRpSwQYaX3cfZoStU/996ee5ea0b2e75ab HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12070\r\nOrigin: https://fxggxt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D; __PPU_cl_tl=AoKhbNJpA_0toWMC\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Fri, 31 Oct 2025 00:05:01 GMT\r\ncontent-length: 0\r\nset-cookie: cf_clearance=GmFI4H0ck8eRBc2gB1a_ES8KXuahlUae4A4KM28EtFk-1761869101-1.2.1.1-_kppeLjUjIX9DWmequxjK0g_Aik.lXnXoPlM0VUchpCxYA1UiO_eHhAaCVkPSwdlur403IUeLTfTkW0LwB7fKRuTShVOC9Fr7__UDYfkrggAJQw6wZ8IqSgHg_.RNwRyrP1h6E5ElbCTAr9O9sdzQodIp0oz.WDqcb5pMdn6puPJdg3LM7gGgg.PmybAD_TGuKe0S8Bt5HvStipkdykG3xA5sT.gHrBe_wlF8WCwz9w; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=fxggxt.com; Expires=Sat, 31 Oct 2026 00:05:01 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 996ee5fc0a2d4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chaseherbalpasty.com/jserror?type=banner\u0026bavar=0\u0026build=1.0.627\u0026zoneid=2018929\u0026e=Error\u0026m=BCLC\u0026aa=0\u0026trid=\u0026url=https%3A%2F%2Ffxggxt.com%2F","fqdn":"chaseherbalpasty.com","domain":"chaseherbalpasty.com","tld":"com"},"ip":{"addr":"94.242.247.20","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:02.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chaseherbalpasty.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 01 Oct 2025 00:00:00 GMT","end":"Tue, 30 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"33:A3:14:CC:01:76:4E:33:44:46:15:D3:60:37:E2:11:39:59:F0:06","sha256":"29:67:DC:3A:7D:72:3E:0A:8C:3E:94:18:A0:47:AF:E8:3B:57:B6:5A:F9:C9:9B:5F:4A:36:73:3F:09:96:29:01"}}},"request":{"raw":"GET /jserror?type=banner\u0026bavar=0\u0026build=1.0.627\u0026zoneid=2018929\u0026e=Error\u0026m=BCLC\u0026aa=0\u0026trid=\u0026url=https%3A%2F%2Ffxggxt.com%2F HTTP/1.1\r\nHost: chaseherbalpasty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nCookie: cart=1; cart_p=2; CHCK=1; PTS=AoKhbNJpA_0toWMC; UID=251030190545e4ab9b96b94cf9a2252b2bb6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 00:05:02 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":240,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/CorbinFisher-Rocky-Alex-POV.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/CorbinFisher-Rocky-Alex-POV.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 17:46:25 GMT\r\netag: \"3c89-69039fa3-6b9f9c;;;\"\r\nlast-modified: Thu, 30 Oct 2025 17:25:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15497\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 22713\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d4%2BPJzEXeCvvmPgHZ157t%2FikxXzhbqbWaT748irn4c1JgJDYZxM1FesMFGz3YDdqF0SeDBjaWUiwrAQp57AETODpl8MSfcudEWM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5edc9164e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":15497,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"8c8ea3de981dd585467e3ab24879ceaf","sha1":"3b2e4ea1540289bed85785c6fc1e1ebbc232399b","sha256":"88f0b5d79ca8704ee7e3ec348e4aa4d8cfdefd9f3d57072f3f9cea708773cdcd","sha512":"2d533b6be254aeb87683c23813f4f0b76958aade8b0228bd597853bd22066db9c2f1146cdb63d572081eb253e345c360fc6b1a902a620b4e3a2a65109908f2ff","ssdeep":"192:BD58InyJ+kIIlc3NEevlz+ay/SGIUPFx3vg28y9mB9mZ3HbV3z+cJ:FSVJdIIaEelyayu63v38imGZ3HbV3JJ","tlshash":"3962d08a1f61f6901942da742f3841d44be36f98bd53b01b1cb29805e7a038bbd4f9e2","first_seen":"2025-10-31T00:05:44.944662Z","last_seen":"2025-10-31T00:05:44.944662Z","times_seen":1,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/EricVideos-Dog-Rayan-loaded-by-2-thugs-%E2%80%93-Darko-Khalid-Dog-Rayan.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/EricVideos-Dog-Rayan-loaded-by-2-thugs-%E2%80%93-Darko-Khalid-Dog-Rayan.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 17:46:25 GMT\r\netag: \"3f84-69039fa4-6b9fa2;;;\"\r\nlast-modified: Thu, 30 Oct 2025 17:25:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16260\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 22713\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BVhTjDWdLv7CfY2mWo87WG0pxJkT01ijWeK56z8ZeTlUZzET7NTUIUu7KwJnidpoex1A264kEbBhmQnyawrtdb7mqP0m8aA3dPo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee192c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":16260,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"b2a7202e959f45961bdf72492bb28348","sha1":"979e4d75f40af2d3ffa20ce29363df2309b82c3b","sha256":"795c1354fb2d9fcee516819479481b5024beb0802e7d70aca1ff15236b32d7ec","sha512":"95c891b4594d2a59bc5fca7c55585554d91f65439fa4a325d1ef1b7bf0d903af4e6b0677ff7eb4ab00b88785493e48a40467ff627184074ddde4f1f57eb32514","ssdeep":"384:FZzO3H7INzIFiKpAcQXlNmshiRYBbqDG44FWRIF8dZQR7:FZzGb0kpIXash6gbq7gL8dI","tlshash":"1e72cf0c431930dc378bea2537d9a4082c56e2eba7e07b50ddb3a948e5f193659077fa","first_seen":"2025-10-31T00:05:44.946552Z","last_seen":"2025-10-31T00:05:44.946552Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/OnlyFans-James-Cassidy-Bryce-Jax-Leo-Max.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/OnlyFans-James-Cassidy-Bryce-Jax-Leo-Max.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 05 Nov 2025 21:18:12 GMT\r\netag: \"672a-69027c7e-6b9f2a;;;\"\r\nlast-modified: Wed, 29 Oct 2025 20:43:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 26410\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96406\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sQL1Xl2KqgW%2BUPTONdQcjaLKoWZOU592GzfStyDf0tdef6iNM584oRweg8zvzBxNdgA9v9zP3rvtPX8LVLCX64cdtkYUGFPt900%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee19374e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":26410,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"1fb4b326399f091f32449a6efa9a110f","sha1":"196385fbad7a4c27ef336365f538639b54f067cf","sha256":"bfd22f2605d660771c9b094bed7b1f051011002c550185f6b05f9e2a8720d2fb","sha512":"eb995e5384539dc8d5a9f9c3d7b7a06e28569e30c3fc7c5e71df0289f3a2c98190744dbef511856cd2c81fb260c12342c906275058c2acf04aa1bc7061d89ffd","ssdeep":"768:FxH75OThgjmDQkpvf94uvY1AKRM/UgDuaMAI9A:FxH74FgqDQmfOutKRM/PipA8A","tlshash":"3bc2e087734fc09286048028d533a29a32eeaeca78b271573dd45261e7f69d4ac5ddc7","first_seen":"2025-10-31T00:05:44.948697Z","last_seen":"2025-10-31T00:05:44.948697Z","times_seen":1,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/OnlyFans-Ridick-Apolo-Adri-Dickie-James.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/OnlyFans-Ridick-Apolo-Adri-Dickie-James.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 05 Nov 2025 21:18:12 GMT\r\netag: \"42c3-69027c82-6b9f5a;;;\"\r\nlast-modified: Wed, 29 Oct 2025 20:43:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17091\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96406\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oebAT4DfuuHXSRInlvDg2rCXhvMi%2B1GFHqbmoTpxMhlLl6WVjEQhdUxDCETU%2BbekKLDwE1PzyIrnEBTm%2BWEC%2BZ07rF26lUHs%2B18%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee193e4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17091,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"f4ca60b5608e735f9397472301b80479","sha1":"7b754c92e5ea4d815908024e6a58a95d838cce62","sha256":"4873a10cfb88848e12c9deb7c593acb3f71519f9c49452861c2b034f0482f7b0","sha512":"9742621391ca1d0d1c26adf8c33aed9bf416414f2b1fa998c1c0ff3b5199020c53e047d59382ec085c62187154a51f70a401e42d2467a12efdf5bbd8cd7638b8","ssdeep":"384:FopuVQoBzzrzqBgpNs4faaqzQ8ls9Mee6cM1kAs0PRqTnyH:FopuXZOBgpNaacQ8e9MfMuHCITnq","tlshash":"6072d06debc8b2d6501d4348466a93f4efa4caf5430137907ef9b0dfaf24d5d8804069","first_seen":"2025-10-31T00:05:44.950011Z","last_seen":"2025-10-31T00:05:44.950011Z","times_seen":1,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/06/czech-hunter-791-1.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/czech-hunter-791-1.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 01 Nov 2025 20:14:40 GMT\r\netag: \"5d9c-6847ec80-66b355;;;\"\r\nlast-modified: Tue, 10 Jun 2025 08:27:44 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23964\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 445818\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FqKqEySAjlfY2FP%2Fs4m6lMvHv0%2Bbcz9IEh1Z3LsKTXzqhKDFPA3Q4v7lFbkpybfwenFcWjPj2%2BVk5y5tiE5TbpGi17XLM%2BHVaio%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee19454e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23964,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 590x332, components 3","md5":"61802ef710e165a72048e0db6cfd8352","sha1":"e0a0e5f2fc952a68e426f98fcb02da814b8eec90","sha256":"d30a7365ffafb1c2a5faacc0760a484b0108720a443780f1bd3638dbb20186f3","sha512":"4f72256826526c872643dc70ec40397b98171bfb343406436a0e708cafd871d118ca1c37dd40c79b67127de506224d560003e8b316483c9e9549f2f217e05a28","ssdeep":"384:lGD3+k0A32smRxnO1vSHOgfSUg+xNtzTeoN0bJhd34/6A0rsdBwtXGmN5DFG9X:NxnO8nsqTePbmiA0rsdB8X7QN","tlshash":"84b2e040c6abe9321743f0f074f9a3a579039474574cafab5b4968a77847cb0b628f27","first_seen":"2025-10-31T00:05:44.951181Z","last_seen":"2025-10-31T00:05:44.951181Z","times_seen":1,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/08/OnlyFans-Marty-Smith-fucks-Asian-twink.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/OnlyFans-Marty-Smith-fucks-Asian-twink.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 23:56:28 GMT\r\netag: \"3787-68a641f8-67a392;;;\"\r\nlast-modified: Wed, 20 Aug 2025 21:45:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14215\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 510\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uzJnRP2PQomfn8zuq1iOESoo2U6sneE3kqXw%2BS%2B1HS1W2tiqpSmeA0NlqVI%2FuK%2BVwIw3LL7WlRoZJ0rUkq5V8mevEviLitfDTtg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee19474e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":14215,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"d695be0d46cddd821f726bcaf835a11f","sha1":"3116d1ca04b1e74376ade95cf8a5f907648fbe29","sha256":"cdebbccf5426b0d5c8ca12eb83224b69eb66d4708a9b96d6730c01016112b485","sha512":"600a17cc2ddf81938050a5120988daa2437c24e83e30856e2560de50d24627d3aed4be59af7c95f4f489b45663f38c751cedbd55e2649d0fcce257ef762593e0","ssdeep":"384:FRsVwgUZaBi8u8TnTnvTcHWWpPIxMmz23BnGd:FrorzvIHV5ImmKR4","tlshash":"4952d03a071e973a0796a630f51a1439a3995cc71e9733782c13693cee685e92c78c53","first_seen":"2025-10-31T00:05:44.952394Z","last_seen":"2025-10-31T00:05:44.952394Z","times_seen":1,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2023/01/RFC-Blind-Folded-Tied-UP-and-Fucked-HARD-Ryan-Chad.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2023/01/RFC-Blind-Folded-Tied-UP-and-Fucked-HARD-Ryan-Chad.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 23:56:28 GMT\r\netag: \"4832-63d27cdf-5710eb;;;\"\r\nlast-modified: Thu, 26 Jan 2023 13:15:11 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18482\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 510\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cJbQ8uwB9gT45itGyYNM6vsIWExJpwfOPzWtcsYayiN5arHcAT5iggeqMPC2Ih6xkZPcyFs%2B6%2FkntMDUVZHNiYE4uNJssK2Vb1Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee19494e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":18482,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"13a2973511c1389229f40dd7318fc48e","sha1":"e19028c53c9b26c7707e25acda1bffba8b4ee6b7","sha256":"f19258c1abc67e62f3fe75e2b5222e1941465678e21154b6b683ab6598849cf9","sha512":"ead017902be36d123211252afb5844c174afc3b75f20bd35e319e7bf388d2ef5f9884e2f2aa2dba52c2f61f209e829231c4fd5b156ff12c1f59788b2baa3dcce","ssdeep":"384:FG5YKfgd6ZnxjwTrvSHb55TyHl4WOgRDpE8cHbtd1WaAeWSeg:F1KAEnxsTrvSzyKWO8DTcv1WaxWSr","tlshash":"4482e1367fb69d6a55a856c0962217f3da3a55303dfc7511cc311f28d300d225feb924","first_seen":"2025-10-31T00:05:44.953796Z","last_seen":"2025-10-31T00:05:44.953796Z","times_seen":1,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2024/09/OnlyFans-TeenXXLGirth-Javi-Berlin.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2024/09/OnlyFans-TeenXXLGirth-Javi-Berlin.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 21:52:41 GMT\r\netag: \"2a9e-66f04c29-4beffc;;;\"\r\nlast-modified: Sun, 22 Sep 2024 16:56:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10910\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 7937\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XPvQ16%2BPmcwM%2BN52%2FqEcl65NsiOHsKS47dqz1kIvvB4Ke8I8sKDrqt6r9EgHSyE%2FVWfGqp3aD8bcpWSHwvVIyqSCMAAVfP310JY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee99614e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10910,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 400x225, components 3","md5":"961627f2cb7912ec57114607436f90c0","sha1":"af452ea1af4667a1f8b3e12a1ff0e4dff1534bdc","sha256":"c81af810c153c4cca5146085732a88e5801738c5655237cfc4f9ab21cb940a76","sha512":"b0ba29e9e39132f9f6065ee0edf30c4fe72aea20a11b464d3c3f9e8ade0128372da8294b9bc1810ac67002a15d6fea434bef1ad5acf867140d0bc2ce54c1405e","ssdeep":"192:BIf56oHYxQpscBVNk+zcxiDpCcfJjFUWJpjVDfCZmYATKKr1NZeUyHmQ:Sf5tHYip2Qcx6DtVDfCZmnTZrjZTyH9","tlshash":"2f32d1937318ed04c0c9f66e91187262ac7e57e524113ee0ac95dc6c48706c77c848cb","first_seen":"2025-10-31T00:05:44.955159Z","last_seen":"2025-10-31T00:05:44.955159Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/OnlyFans-Mr.-Deep-Voice-Poolside-Gangbang-%E2%80%93-MrDeepVoice-Bryce-Jaxxx-Hugs-Kandelas-James-Cassidy-Matty-West-Rocky-Unleashed-Siren-Santiago.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/OnlyFans-Mr.-Deep-Voice-Poolside-Gangbang-%E2%80%93-MrDeepVoice-Bryce-Jaxxx-Hugs-Kandelas-James-Cassidy-Matty-West-Rocky-Unleashed-Siren-Santiago.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 17:46:24 GMT\r\netag: \"504b-69039fd9-6ba026;;;\"\r\nlast-modified: Thu, 30 Oct 2025 17:26:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20555\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 22714\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kwtn1wAmsUVq3d8etvH31HAyxci3KAIMmJ%2FbJABNvHMY22RLb80hrYQ3CwVccRwgq37XTkOfzPuMy5jWfcrthJEC8A0wzwqsms4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5eda90d4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20555,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"12c177e4abe0dbeae2801cb34cbefeb3","sha1":"20e1442b9619f3d13712d6a10f39270a1c21b86f","sha256":"12a14edac423aac45061595f7d4eb26a2ef4185c8bc585b6bf52a49e7fdfb6b1","sha512":"0538a5bc7e5bdb973ff85b6f7663e2b3c1670e527c9971c718ac97e39dc9c71b05af31f31e47bbe04a9b075b0788cff8a07a327587d42640e4d452b9fc0f4c55","ssdeep":"384:Fn8Xr9Z9+7R41XdGy6FtEkOVnOB97JTroeFl1OZFEKEIs8VTINKKi4NHEt:FAZIeEy6FtzOVOBVJTro6lcZFElIsMd1","tlshash":"a992c0dfef1c1a358b5bf889564b3250d05860bf74513a476d41e297ceb23d6e2d8838","first_seen":"2025-10-31T00:05:44.95662Z","last_seen":"2025-10-31T00:05:44.95662Z","times_seen":1,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2023/08/OnlyFans-Pablo-Strokes-JayNite-Gemini-Aesthetics-HydroB3AST.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2023/08/OnlyFans-Pablo-Strokes-JayNite-Gemini-Aesthetics-HydroB3AST.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 23:56:28 GMT\r\netag: \"3160-64d26bd2-5afa9f;;;\"\r\nlast-modified: Tue, 08 Aug 2023 16:22:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12640\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 510\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OCh4%2BNFelubAHsv%2FZdkQWy9PB6%2FQLs9Fg%2FEJ2r3iIxk3E2ojNaG4mgwWaLAeSOEIWwwytstDa%2FJtIPxpZhAK3iTLhzkB27k81e8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5eeb96b4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":12640,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 400x225, components 3","md5":"926e2f3bfb04b71303db9c45136f7c48","sha1":"25bdb59d240d2632b1cb7af1fc3d9dd67d74267f","sha256":"8f751530ec0ca4d36eb6147f11e04c0c866c137f5895f89afd4756bf5f6d6653","sha512":"0525810f4279929042121202cf214c291c0acb0292c6277962bb69934dbb029213074377b701dca560f9b1899d87f4ca93ee88acc4ac88517e956e673fc46c76","ssdeep":"384:SOOn4FAVdcQyGtfg5+oGhnnr4ayibzoBIqt:SOQfcQyGRgU3nnr4xE2","tlshash":"f042bf9393100bf95825a53acc2221dea38954d8b99e77a23de9b7e9ce3c95d3026046","first_seen":"2025-10-31T00:05:44.958082Z","last_seen":"2025-10-31T00:05:44.958082Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2023/11/OnlyFans-Rocky-Boe-Jack-Ryan-2.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2023/11/OnlyFans-Rocky-Boe-Jack-Ryan-2.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 07:42:17 GMT\r\netag: \"4ad5-655b3c3a-53322d;;;\"\r\nlast-modified: Mon, 20 Nov 2023 11:00:10 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19157\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 58962\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ROcjPfhxI1YFF6ncKm%2BHd6t3PPgo0ZnWdyps5gTFgIP15%2B04FvK3oCEPM3X6lt5%2BiZ8OYqHZeC6J0yb%2FHK6kXNds%2Fs3XFgiH%2B0I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5eeb96c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19157,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 400x225, components 3","md5":"8d6345cbde8285ae56fdce23b7c1da52","sha1":"dde3bb58eeca42caab8c65e0688636d509c2d5ce","sha256":"d25c6197cd19ecebb6cedad18db19d2ecd5c7af405f8c2cf39b5d0de8ad60a05","sha512":"adf857d1c06845d6efba095109fb2bcfcdefe1024355569de63b9ae3f8f76af0c4ce12545bfb564cf53245c603c90c97eb521eaba307372dbe7a0e9c768cadf1","ssdeep":"384:CCPUkO50HU51hV/NnUYa/e2/PJnOpYNEzkB8BvtWpD:CjkeQo9U35cpYNckBv","tlshash":"9d82e1f8d7722a6a5fec8b223d87b67154f126f030d0f1ad8c0758915531ea96f06b19","first_seen":"2025-10-31T00:05:44.960178Z","last_seen":"2025-10-31T00:05:44.960178Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Oct 2025 06:18:58 GMT","end":"Tue, 20 Jan 2026 07:18:54 GMT"},"fingerprint":{"sha1":"C7:F8:82:22:3E:BC:9D:F4:7B:0A:EF:A0:EE:C2:C2:D1:34:7E:55:1D","sha256":"EA:85:37:F0:6A:CB:4D:61:4B:3D:2C:58:4B:FF:E5:CE:3C:33:94:71:D8:11:77:5A:C1:99:2F:94:1F:D2:FD:F1"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://fxggxt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 996ee5ef1d5b56aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-06-19T22:04:57.951996Z","times_seen":337418,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":1,"connect":2,"send":0,"wait":19,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:01.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/b5237f8e6aad/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\ndate: Fri, 31 Oct 2025 00:05:01 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\ncf-ray: 996ee5faaa1f4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10183,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/98348519/1?wmode=7\u0026page-url=https%3A%2F%2Ffxggxt.com%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A3xktzc2ogg05v7x8e2v8cowhnxhaz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2240%3Acn%3A1%3Adp%3A0%3Als%3A54964319613%3Ahid%3A395265548%3Az%3A0%3Ai%3A20251031000501%3Aet%3A1761869102%3Ac%3A1%3Arn%3A341241680%3Arqn%3A1%3Au%3A1761869102606664545%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A888%3Awv%3A2%3Ads%3A9%2C25%2C313%2C1%2C36%2C0%2C%2C527%2C6%2C2589%2C2589%2C8%2C2142%3Aco%3A0%3Acpf%3A1%3Ans%3A1761869098489%3Agi%3AR0ExLjEuMTg1MDczNzkzMC4xNzYxODY5MTAy%3Arqnl%3A1%3Ast%3A1761869102%3At%3AFXGGXT%20-%20Free%20HD%20and%20Amateur%20Gay%20Porn%20Videos\u0026t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2883952128%29ti%281%29\u0026redirnss=1","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"77.88.21.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:02.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"GET /watch/98348519/1?wmode=7\u0026page-url=https%3A%2F%2Ffxggxt.com%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A3xktzc2ogg05v7x8e2v8cowhnxhaz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2240%3Acn%3A1%3Adp%3A0%3Als%3A54964319613%3Ahid%3A395265548%3Az%3A0%3Ai%3A20251031000501%3Aet%3A1761869102%3Ac%3A1%3Arn%3A341241680%3Arqn%3A1%3Au%3A1761869102606664545%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A888%3Awv%3A2%3Ads%3A9%2C25%2C313%2C1%2C36%2C0%2C%2C527%2C6%2C2589%2C2589%2C8%2C2142%3Aco%3A0%3Acpf%3A1%3Ans%3A1761869098489%3Agi%3AR0ExLjEuMTg1MDczNzkzMC4xNzYxODY5MTAy%3Arqnl%3A1%3Ast%3A1761869102%3At%3AFXGGXT%20-%20Free%20HD%20and%20Amateur%20Gay%20Porn%20Videos\u0026t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2883952128%29ti%281%29\u0026redirnss=1 HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://fxggxt.com\r\nReferer: https://fxggxt.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: yabs-sid=1702861941761869101; i=bd3g5vh6FP2hfV9Cg5iPOGHS+0YzeW2LD1MhL74kQ/YRk6FD9DDucvfynwGVIkQ/MQeVTpvcFoAvp6v1t8vRKmQaTqs=; yandexuid=2689359981761869101; yuidss=2689359981761869101; ymex=1793405101.yrts.1761869101#1793405101.yrtsi.1761869101; bh=YK36j8gGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 705\r\npragma: no-cache\r\nx-content-type-options: nosniff\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: https://fxggxt.com\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nlast-modified: Fri, 31-Oct-2025 00:05:02 GMT\r\ncontent-type: application/json; charset=utf-8\r\nexpires: Fri, 31-Oct-2025 00:05:02 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":705,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c5fec1451652f468c0b20b09bdbd42d7","sha1":"3107e707b875682ef32db1ee474e35a36f4c0fe6","sha256":"86c1fc4d0017e3c3673ece6d677be0419874138e4c69cd940e61d28729048725","sha512":"4b42b6c2b116e38611f8d6e26c9df99d09105c7d219353aa86f08df43076d99f59345a82ca3bea1396c869cbcf9e284ac5ddaf60711ffeaa70256f1d56923033","ssdeep":"","tlshash":"1b014464049926f25d0f4f608055332339d813d5dd936fa076f095868dffdb5332b2a2","first_seen":"2025-10-31T00:05:44.965895Z","last_seen":"2025-10-31T00:05:44.965895Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/OnlyFans-River-North-Scott-Braun-Aussie-Sam.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/OnlyFans-River-North-Scott-Braun-Aussie-Sam.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 17:46:25 GMT\r\netag: \"35a9-69039fdc-6ba038;;;\"\r\nlast-modified: Thu, 30 Oct 2025 17:26:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13737\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 22713\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9%2BvQcLLjcP6n%2BDiWoXV0MVLLJuo364ZT5gZA55eKS%2F9jxGQW02SdWlD%2BGjYDUA2ILgS0KbR9wZ1cRsdp9WoKCxtgMC%2Fp385VUEo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5eda90e4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13737,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"93c4e75a86347b5925bbe43c823097a2","sha1":"bdc5c4bc7a053efd05b08b928f101a634a3749a5","sha256":"96f96f356d7175759130db6304376199f279fac957c39cc7c03b4f3d443d7184","sha512":"7e621b1c25b15774bc9a094ae0ee2db63879d9c6d73c13f27ffd4e3eb79461bd74b2993780a3ffac00bcad894fa41fb374f9eef709c78343e967337cd15fe89c","ssdeep":"192:BDkgPfEg+34xSx1w8oo1F6mDWIO7ksSzVikhxaUC4fuyorioGuDMYdIbveXpy:FSk8ndDWF7k/z7i4G9cuDbQv7","tlshash":"8652b02edb0865397d65caf4b897a4c6f2a70319d5cf73673f104d14a528ea105e00fc","first_seen":"2025-10-31T00:05:44.967894Z","last_seen":"2025-10-31T00:05:44.967894Z","times_seen":1,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/RFC-Igor-Lucios-Alex-Ink-Inked-Hung-and-Horny.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/RFC-Igor-Lucios-Alex-Ink-Inked-Hung-and-Horny.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 18:48:32 GMT\r\netag: \"461a-69039fe9-6ba068;;;\"\r\nlast-modified: Thu, 30 Oct 2025 17:27:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17946\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 18986\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p1cWEmDg4vo3pOlzKRWy9b4Ef6z4%2F0GF98hs6MUTk3CM2lg2MRaaqlJ8n6Wfasg2KbCcJRm8hvAWsVGKyOHqEIP%2B82RNH5iJxZw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5edd91e4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17946,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"7b64b535221c26b36eb2b7b312acd78a","sha1":"c182bcdd06fdc2e035697c40ac3a9b15c0c3417d","sha256":"24da7503d8998401889614b2b8a06cdc6afdbe4ead77e19b156c317f2facd94c","sha512":"6f64780e83c333630252c1b75e2a1ed0c638fa046f1dc16810249feffd5686e20956131876e4ebfd5f891c581e5e13f73a0b94332b4697b79c3f03fe16449f5e","ssdeep":"384:FLpkdsXAJRFPMgDMKMSowELZazQSt4xWtwtCw0W+eh1/g:FLpkCXAzFKKM72zQpWaE5W+eha","tlshash":"1882d14a13c87e2997ebbeb714ba594eb48f0225411a321f0df8c845cec2eb15dc20ad","first_seen":"2025-10-31T00:05:44.969966Z","last_seen":"2025-10-31T00:05:44.969966Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/TheBroNetwork-Trick-or-Treat-%E2%80%93-Gabriel-Clark-Joel-Grayson.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/TheBroNetwork-Trick-or-Treat-%E2%80%93-Gabriel-Clark-Joel-Grayson.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 17:46:25 GMT\r\netag: \"35cf-69039fba-6b9fe4;;;\"\r\nlast-modified: Thu, 30 Oct 2025 17:26:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13775\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 22713\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ItrSTEHu%2FZCKeiuAqaFzEIcM8QHeySBImOfR6CiY0BjXDOr%2BIQej4RNka5RZm%2BgX2pZgDxQCn4EbCp9SWIg7f9DPY7y%2BDKMNvBY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5edd9224e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13775,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"69780b2af418b431f258d79d74194c5c","sha1":"1ac6ece6bee74088acf6a03bbed2d7e4b568aabc","sha256":"c12bc3eb20c116f06455ecf7670aa464fe89adde26891ce63431235a8c1afc0f","sha512":"49909c257dec7bad4d524eec0b41b7e356cac69b69089a99b43a754c5ce65855fd63f4682741cc176c4893ea0d2723dae8d211bbe2f8caaae5ff524fb6f7b4c5","ssdeep":"384:FkzPRknGPLBSv/6ww9UXGv0HYg7/OUkcKYszXJSbB:F+PEGPLBSv3dXXHf7GUkcK3CB","tlshash":"8d52bfa743a7910cc94a846c430ea1e4c14ab4db75563304cc78cf9fbcbab2d67b6664","first_seen":"2025-10-31T00:05:44.972102Z","last_seen":"2025-10-31T00:05:44.972102Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2022/02/IMG_20220226_222911.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2022/02/IMG_20220226_222911.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 23:56:28 GMT\r\netag: \"78e2-621a63ec-5aaf51;;;\"\r\nlast-modified: Sat, 26 Feb 2022 17:31:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 30946\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 510\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9wvhlTBmvI0TFU0ouUXfp6EIbY80BgWwad8mkzoi%2F86eZ1jQW3wRH3FI9N9yP9jbcycsoD%2FE0wMaf1n7nJwDGlVdfjBMNG5241o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee19434e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30946,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x359, components 3","md5":"66cf35e0197367117a25ea55b6021124","sha1":"30206e4db9ad08d8abcad66326420f8a5f60dcb4","sha256":"73fb90c6555fbd7de3f7f5e5ffb48198aa133b1a748edf900a5a0f6c3ac5fe06","sha512":"d5908da086d6703092ddca5b8fe90c1bc0945edd5df73030f3bef1edd1ea0454fd9d032355df878dd1d01133d5cf35ef541f8f1e3174feed12c8f3ac1b8699ce","ssdeep":"768:2NOIrhqV2wimjlGCnEZ9oLuG8cBh4B8SLPr3SLZ2:qOMhqSmBG0EZ9oyaBiuyDSLZ2","tlshash":"e6d2e197f3d64099d50ab5f134e79a683b7f9c2201a85d18ccd0ae1331ab292de05c2e","first_seen":"2025-10-31T00:05:44.974926Z","last_seen":"2025-10-31T00:05:44.974926Z","times_seen":1,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2024/10/BaitBuddies-Ryan-Scott-DeMarco.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2024/10/BaitBuddies-Ryan-Scott-DeMarco.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 23:56:28 GMT\r\netag: \"28d7-67018cb8-4f45a7;;;\"\r\nlast-modified: Sat, 05 Oct 2024 19:00:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10455\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 510\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G7AXRpPLG%2BbYn2hjSuLuJ%2F6p9kOyc2PJLa9Eane%2FX4R0K0KSUZ%2BFnsX3W8wECWq0%2FfJhyKh%2FRrq1Cf53%2F%2BHgRaGZzXFjzNkM0nw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee69544e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10455,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 400x225, components 3","md5":"930395b6fff0643b66bfb9d14186ecca","sha1":"c0d0e3febe8f01d99ee5f0a45195ea07301fba9d","sha256":"e9cfa116a0dc653f7a271cd24b44c00b1c950d4c521bc4c0e381b52415c8af16","sha512":"a924a9d2852e475205a55308ad3c9ae4d91c714931a4b239e2dc66ee18994e1d4273272d6b97ef0acb9be08d7529ab5ef2a555e2722c0165429b686e8699cd60","ssdeep":"192:BI1RVSCsR8mTBsLAjluez5akqeOLTLoRuEwWM+9AkV+JSaEsJ:S+NRekqrg7z6Eu","tlshash":"2c22a0a73721c642a85fd5b186ad44d3948bbeca386cf60a4f3ec1c245d6986db30f5c","first_seen":"2025-10-31T00:05:44.9767Z","last_seen":"2025-10-31T00:05:44.9767Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/06/onlyfans-jaewon-jjjaewon-fucks-quan-kenvin.webp","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/onlyfans-jaewon-jjjaewon-fucks-quan-kenvin.webp HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 23:56:28 GMT\r\netag: \"4522-684862f2-66cd6a;;;\"\r\nlast-modified: Tue, 10 Jun 2025 16:53:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17698\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 510\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JHPdrw9xvaAT6jb6WOYscfLRoQv1j%2FyiPdzjIebIlGeL6OZ0zwpsJuKlQnRkjbiRfDSXiDu5t9THSVGHtff46zsnesBAQNNY%2B1A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5eed97b4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17698,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x321, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ca3d88b1cfbde3b2f3a1f9ba3445a743","sha1":"f5604b912259ac602eb6016d56db362b3a4c8230","sha256":"17ae7fa6b3fa8e81d639686796def67af3fa67a5a8fd43e8008092d34bb0cd55","sha512":"ae08b91a8243c05dbc55fdaa9cc5e38091bc4166f6d31735ca6407b35c81f1a21e52bd62b34cd67cd9029aad04ff15ff3d1b7e81899ed84c8fb5a82b7b37ebb8","ssdeep":"384:0iTIOoSFQxoOZgQLQwPfk5r2+U8eFlzAgIydYkterr3:ZT93WeOZgQLnPfk5g8azXdttW","tlshash":"e982bfe23c19e80f278a63b1fd7675dbb07956b70b34040f1e721b5368bac193426a8d","first_seen":"2025-10-31T00:05:44.978559Z","last_seen":"2025-10-31T00:05:44.978559Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:00.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 07 Sep 2025 12:23:46 GMT\r\netag: \"15601-64ecd5f0-46f13e;br\"\r\nlast-modified: Mon, 28 Aug 2023 17:14:24 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 29597\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 31 Oct 2025 00:05:00 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 384840\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X5BL%2FG%2FvNPVsWLLfl%2BIPyNqMHHWJdCZVv%2BA8nC89pKGz5NxLRa38tNPmhjSTlbP11Ryxw9hIkXde0MjUywc64bE9I4BBQrdn9bk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 996ee5f459cf4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-06-20T01:49:20.512041Z","times_seen":916602,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chaseherbalpasty.com/check.html","fqdn":"chaseherbalpasty.com","domain":"chaseherbalpasty.com","tld":"com"},"ip":{"addr":"94.242.247.20","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:00.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chaseherbalpasty.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 01 Oct 2025 00:00:00 GMT","end":"Tue, 30 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"33:A3:14:CC:01:76:4E:33:44:46:15:D3:60:37:E2:11:39:59:F0:06","sha256":"29:67:DC:3A:7D:72:3E:0A:8C:3E:94:18:A0:47:AF:E8:3B:57:B6:5A:F9:C9:9B:5F:4A:36:73:3F:09:96:29:01"}}},"request":{"raw":"GET /check.html HTTP/1.1\r\nHost: chaseherbalpasty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nCookie: cart=1; cart_p=2\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 00:05:00 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Thu, 23 Oct 2025 09:18:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f9f2c9-39e\"\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":926,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"088dba8e97eede53134c93219f7ebbae","sha1":"adb707654d1fe0af7d0d7a9f55660d22bd3625e4","sha256":"6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff","sha512":"23a1f87731e8aee4658993cd1ce35ec179fea80b89bf52aca7634488f1bdfcf88b9cabca4859481357a9fee06cbb49df64bbe0878b1dae0e5df4fa34003c6d80","ssdeep":"","tlshash":"6211d04934e1684c1127a6301597a2183c32a40315cbd949fb9cd7301f815a7dc596df","first_seen":"2024-11-22T16:59:41.974716Z","last_seen":"2026-03-04T10:11:28.020186Z","times_seen":13721,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/OnlyFans-Max-Hunter-@maxhunterxxl-with-a-guy-in-Barcelona.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/OnlyFans-Max-Hunter-@maxhunterxxl-with-a-guy-in-Barcelona.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 17:46:25 GMT\r\netag: \"4469-69039fd9-6ba020;;;\"\r\nlast-modified: Thu, 30 Oct 2025 17:26:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17513\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 22713\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0N%2Bpm%2F3fFejbViV9PObUmn5SwlNMyHNsbwUdryGiXsPCCGA5ZxPHkBBLwYuqa8SxCM3OuF6r5G4mY%2BMZGp77Pbd0ZXN8lP6nGL4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5edb9124e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17513,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 500x281, components 3","md5":"1eb95780bae1967d7351c4c3540bd950","sha1":"669654adf27669b24a80b2744f5522558a208596","sha256":"eb07e7692d6e39fa7ae30207145ca81b37601b34cf73b54585123c897d5f9f30","sha512":"4fdf5934914866d37e349d628e4d43aeee190b30fe925ab7c41b2775ac19b69cc0f3bbd401257e0ece5e5706db11121db7c856cdac42031331941feb6c2232d2","ssdeep":"384:FGkc+0OadJee05sbXC0UBpEhvkH4AbjVze1xquP1FMb:Fpc+qdANsbOwM4Abj1ejB8","tlshash":"6972e1525b346df1e87bea6c3b81e24fa5f5de5266f073150e0a5b63bc00311daad888","first_seen":"2025-10-31T00:05:44.982388Z","last_seen":"2025-10-31T00:05:44.982388Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2023/06/OnlyFans-Big-Mike-HungSkater-fuck-Conrad-Parker.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2023/06/OnlyFans-Big-Mike-HungSkater-fuck-Conrad-Parker.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 05 Nov 2025 21:04:53 GMT\r\netag: \"383a-648b52fd-62b4c8;;;\"\r\nlast-modified: Thu, 15 Jun 2023 18:05:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14394\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 97205\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TviOOdvfl1WHmIzaZyi9Hx8q3PvZ6ENNK8pbkN2WkNFFB8nnR7KnK8DSOJocBZdhpR%2F69UtczHCG5yBAAYpHHUZWRKKDAv0ukYw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee69554e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14394,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 400x225, components 3","md5":"b1844898994eef1741fb51f1cd6b159d","sha1":"625dd5c9e92d7560794563c3f1e0384db52e0862","sha256":"a8d02f09714057c720e91ea507d748d02c4eb28d06f7526e5386cae6145820c3","sha512":"bed5b7ed1b4b7229adacdc767af9f9c74986e9a106abcbca2a06c18c7e49e369673ed0254283d9511d467ec1ffb1e1f4447dddcc02df00e7aadd3275bb23c796","ssdeep":"384:SSJAhb7mY+X6CwmuRcUohLxU3AlLNGAsNU15aNdRrEr2cfoVOZ:SSJCeT7uOXhVUULNAUQP0mOZ","tlshash":"2052c09e4b9123e0eec150bf486ed44de4fa5fc0f844ae002dacd795fa9146b1a6e03d","first_seen":"2025-10-31T00:05:44.984344Z","last_seen":"2025-10-31T00:05:44.984344Z","times_seen":1,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2023/11/OnlyFans-SantanaXXL-So-I-was-with-TwinkRiley-all-day-and-this-happened.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2023/11/OnlyFans-SantanaXXL-So-I-was-with-TwinkRiley-all-day-and-this-happened.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 17:28:43 GMT\r\netag: \"2f8f-6546429b-53257d;;;\"\r\nlast-modified: Sat, 04 Nov 2023 13:09:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12175\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 23776\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UBU%2Bl7v1g4eGjJDqnSARgfKRid%2B782ODTaX%2BINK4jkCF7KFxy16XHjUHM%2FSLRTRhw%2BeZWbMBGyfK5k0t%2Flx1uFX3oa5Z1td2k4Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee795d4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":12175,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 400x225, components 3","md5":"f90db03fa4a8c44af8c44eafff6cc015","sha1":"5bfc45485766558619f6577cbdcc528b9e6f169f","sha256":"1f0833e3f04ebe249275a220d6c6a5541ce950a5ed021c29121697558a138191","sha512":"10ba2da435221b7f0bebb94d1dfe1328c8b647143e67809206a1c483db67c3b77fb293fef41727d8c158664439637173c812317dea7f26cc86f1181b7f7c14e0","ssdeep":"192:BI45qhxUHXsX8sAcsbZCIvJkClSE5eCWkcUCtkMHYC3RbXA2WKLLF0SPNIBr:S4LcX85cghdlS4ykcxu43EoLjyt","tlshash":"a642ae701787a1394d6eeba94466b510d8f83e211e087a9b4f8e00b6b72105ed770dec","first_seen":"2025-10-31T00:05:44.986048Z","last_seen":"2025-10-31T00:05:44.986048Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2022/12/GayPhoenixxx-Loving-a-Punky-Scruffy-Bottom-Mick-Stallone-Travis-Punk.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2022/12/GayPhoenixxx-Loving-a-Punky-Scruffy-Bottom-Mick-Stallone-Travis-Punk.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 23:56:28 GMT\r\netag: \"4310-6399aaac-5ae950;;;\"\r\nlast-modified: Wed, 14 Dec 2022 10:51:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17168\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 510\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0dRzmPb1fZahXugyeWO%2Bk4JHCSnmu54XaMRQfD9NKZyA%2BQZgSAfZBPaT%2BJ%2F1Tmd7%2BreXx%2F%2FulRyI7y8dxXm6vfCpcDMNAJgexZ8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5eeb96a4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":17168,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"894f0fbe6e2aec27def7cf0a0cd1baee","sha1":"0a485668678db6b0c22cef172e309ad4837a177d","sha256":"c9a0866aeaa4ea1f2842dd8e073d2ecad559e395af909fe2e101f294d884cc08","sha512":"f10225ebc1681716268453e48b46145621e9fc6dc09d416b4c4db82be55fd94bba957206bb4b727632f399e21bf348a51934894f6086d901a5c3d8e393c96d8d","ssdeep":"384:F1dBvjcOO8reqj/5HMQdVPl3ECD70mJP/8SyAFf92JwMiM2BZIs:FaOh75sYVXv0mN/8SyC92+MuIs","tlshash":"3772d00bf77ca26c2c224a77504781fbffa31964fd4eb8e51c8aa19caf04d4679814b5","first_seen":"2025-10-31T00:05:44.987628Z","last_seen":"2025-10-31T00:05:44.987628Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2023/11/RFC-My-Cock-Makes-Him-Moan-Like-A-Bitch-Cuban-DY-Santino-Fausto.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2023/11/RFC-My-Cock-Makes-Him-Moan-Like-A-Bitch-Cuban-DY-Santino-Fausto.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Oct 2025 13:42:22 GMT\r\netag: \"242e-6568971f-531edb;;;\"\r\nlast-modified: Thu, 30 Nov 2023 14:07:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9262\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 28215\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0UI6r7T4LzCCpmeAh6d5iTcADnaAbLc4r4Bxc2GO%2FOITj9yUt25A8KrKwCv81DhmbRIRH8sTokgeN934cXep1itASJIjXE8sGOY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5eeb96d4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9262,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 400x225, components 3","md5":"227a2cc9bb81d1160a2fba7199ffec56","sha1":"afe2d43bf5bb50f418346fb759f8c067afa7160f","sha256":"882da7a0ac13a17adff4af3f6d8d10df0276942d241aca47e00ba0e602ca6f59","sha512":"1a8841a514880b6671846123da5ac9d1f669d97d9aa57e96dc16afc74f1abd312937e7edec58edb90a750e4fcdeb28fc8c66d6eba0c691208115595d9b5095d1","ssdeep":"192:xIcyF0/LeHBbcJSlknxHvdjqgI7TdVtn4CvugbEgr75s53y:CJ0/L8a8YvdtEd/nlxbEgv/","tlshash":"7c129e44bf1123c4e82319b5ab1970b6f3a00d38b429fb389ed3528d57628d0fa5e31e","first_seen":"2025-10-31T00:05:44.989337Z","last_seen":"2025-10-31T00:05:44.989337Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/GayHoopla-Tyler-Smith-Gets-FUCKED-By-Brady-Corbin.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/GayHoopla-Tyler-Smith-Gets-FUCKED-By-Brady-Corbin.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 03 Nov 2025 15:01:18 GMT\r\netag: \"431f-68e7f803-6b88b0;;;\"\r\nlast-modified: Thu, 09 Oct 2025 17:59:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17183\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 291820\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JKHaga3D1XOeEdJm26P24PF%2F4oOqXaUQCmhEs5crGnJmmCettjOyF%2B%2FDVvmLNyiPCDKsP3sS6E%2FXNsEgy25iqK7Zfbfli%2BL7S08%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5eec9734e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":17183,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"5b2c80da5d31b9841c0f94cc0b314abb","sha1":"7a4ff8b1373ee475320ba76cae596893b6d20716","sha256":"2b6e358e7f74490cb1490fa064c061eaa82fd05f4f145c774283f88332982b93","sha512":"0429096fc93bb1df97e952972e97b9325487f42a293692c7ea21826f4ee8399900dc7f43e3728c9582155451e0de1f9c9e22ed4ae9f5b4883881994cf9bf3ed6","ssdeep":"384:FkW5x9pdSIWPr2v7J0OYhal2d5/xrWFPn3qRzDrU:FkwbpzI2RYIEr5WFP3qlDrU","tlshash":"db72d0e17f1cc737a5124753185a72a287da78f2a9d8b10f2cf962797b60028d2b5633","first_seen":"2025-10-31T00:05:44.990935Z","last_seen":"2025-10-31T00:05:44.990935Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/05/onlyfans-desert-heat-cody-arizona-paul-codi-travis-connor.webp","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/onlyfans-desert-heat-cody-arizona-paul-codi-travis-connor.webp HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 23:56:28 GMT\r\netag: \"6832-681b5df9-66895d;;;\"\r\nlast-modified: Wed, 07 May 2025 13:19:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 26674\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 510\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DZYTX8TkUS5KdszvFL1C%2Blv5iYsLZ9jaKHIfTV2Z41IDHSYH82GHhjiFeq9USZSrOBzUm6moeMs8mKVDwEfBBH2%2Fp3xuL4MIeFk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5eed9764e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26674,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x336, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b1c959c352c9940727c4b7bad8754382","sha1":"77dda0e0d259500a36f64fcc9c95ef2780c7609a","sha256":"f9ef00af4507e9e93a54d91f2bf02cd0270f50a505dad223a8dcd90f710fa9de","sha512":"524888acfc01beb35a18bd2f60da4ec8ee2069a9cd62c3725a55a2491dfd044d8a506feaafe5ff0f5c2d1b5c2517cf2650235e2646a50d88b33394ec158d2b0f","ssdeep":"768:6lgrYJwW2FeA+hcsbV13U1n2jXuIMXAClv:6SEKW2FwKOH3U1n2jXUACp","tlshash":"78c2e2865f5cec7cdeaba613ea19b6d2b445669d7873a140234ee84048fff3091df015","first_seen":"2025-10-31T00:05:44.992589Z","last_seen":"2025-10-31T00:05:44.992589Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chaseherbalpasty.com/lv/esnk/2018929/code.js","fqdn":"chaseherbalpasty.com","domain":"chaseherbalpasty.com","tld":"com"},"ip":{"addr":"94.242.247.20","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chaseherbalpasty.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 01 Oct 2025 00:00:00 GMT","end":"Tue, 30 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"33:A3:14:CC:01:76:4E:33:44:46:15:D3:60:37:E2:11:39:59:F0:06","sha256":"29:67:DC:3A:7D:72:3E:0A:8C:3E:94:18:A0:47:AF:E8:3B:57:B6:5A:F9:C9:9B:5F:4A:36:73:3F:09:96:29:01"}}},"request":{"raw":"GET /lv/esnk/2018929/code.js HTTP/1.1\r\nHost: chaseherbalpasty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 30 Oct 2025 14:25:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6903754b-29589\"\r\nx-js-ab2: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":169175,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"306497460fec2db20fe2b3cd79f079e1","sha1":"4c43f979ec2d9a22f88be8bf22e2ac63a70ff80d","sha256":"42b65c6df1569e65be8f7229a81a9b80ac77b72c2026b312409c60c39752a9b2","sha512":"c4bcd18e96fbe257a8bc98215f92c8496c1ebf9000db12f245d4ebf401bbaaa894b1a1ae7f470c40343dc61581a7896cbb657ff4fccd3676799e24335553930b","ssdeep":"1536:lso8qPSdMQEZSO1CRC2vxtFKsN76U6x+ui++UzrS5jUNvJrzTmwN5FOmdF+j4QvS:lsjak4+ukU6WpdLH","tlshash":"e1f3768efa833c76c266b03fc93fd906963568f1964e8404f063d1f819e4715a636bb6","first_seen":"2025-10-31T00:05:44.996977Z","last_seen":"2025-10-31T00:05:44.996977Z","times_seen":1,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2022/01/IMG_20220107_214730.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2022/01/IMG_20220107_214730.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 23:56:28 GMT\r\netag: \"59ee-61d88074-52e321;;;\"\r\nlast-modified: Fri, 07 Jan 2022 18:03:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23022\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 510\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q%2FUh7zZApyUHkZ174MkK6aKjwHaXBeEyNo2VLD9usEoX9fqhK4QmAI%2BazDpwWGpnhzz29IxKeVs1Fih7e7srATLYQvdp6ThFL3c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5eec9724e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":23022,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x359, components 3","md5":"ec3c9eef0f0dced638a43f359537c01b","sha1":"d3a37b7e0fd9b521581c4c7df2d109557deeb7f8","sha256":"159002a72a321cad807efd077a51ac53a0ef32371b75154ab3c94a58f74dd59c","sha512":"cafe7ada53c27427d75a51de2bede2965eb89dd33df08e29cfed6e8782c0ef19a8a6abab18d9b63afcbad5aa7834114dd1d6ce283127dc1055006ae2f2ec2df4","ssdeep":"384:944q/J80HOs8jfNAxh58hkP7pEJAIhVba5PwC2dKVCRBi0x6RRdjiCbC:xqh80u7GjWhk127jA0xS/bC","tlshash":"e5a2d07fc7d8a6def6ac54f3c1d8d311fb2dd0d204529a1e2a845e247d64da28dc9c0a","first_seen":"2025-10-31T00:05:44.998453Z","last_seen":"2025-10-31T00:05:44.998453Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"astronautlividlyreformer.com/on.js","fqdn":"astronautlividlyreformer.com","domain":"astronautlividlyreformer.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astronautlividlyreformer.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:27:08 GMT","end":"Wed, 21 Jan 2026 14:27:07 GMT"},"fingerprint":{"sha1":"EE:4F:A4:BF:E4:BA:9F:D9:89:60:3D:0C:57:BF:AA:79:20:D8:10:20","sha256":"6A:5F:C7:73:B8:99:4E:4B:AB:87:F9:1F:99:0F:80:48:57:86:F8:F5:84:09:D2:9A:05:E6:89:FB:31:15:41:2C"}}},"request":{"raw":"GET /on.js HTTP/1.1\r\nHost: astronautlividlyreformer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 30 Oct 2025 14:25:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6903754b-261ac\"\r\nexpires: Fri, 07 Nov 2025 00:04:59 GMT\r\ncache-control: max-age=604800\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":156076,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ce9a055ef3be68028027854e6f4ee75b","sha1":"dc8716fa1320e220e260e7ad34e2eb3bba95be04","sha256":"aae99139dcd5abda531bea2c2b797940f64fa0cdf8194aaca8a2635f3fff19cf","sha512":"2f77ce62eaa63e5d506acaf57a5d40e68a958fad288d3a9a57523cf6fea0c537f8bd392568524508247427b215d9f9e53dd7fb402d0da625069897b274a622b7","ssdeep":"1536:MnTw9cCrkxGxkVNrTmdU16cT9TRdyuQDr9wLGHYSpryNDCz2PG1DLZG3bUpP+8i:Mk9cCnxkV1m7cT5xKrKLGjpGeDLk3F","tlshash":"cce3a49d67cb20350303a029cc3f5627a9355ddba89dc590d9bfc1cce8b560bd12abe9","first_seen":"2025-10-30T16:20:15.292553Z","last_seen":"2025-11-05T13:40:53.471314Z","times_seen":121,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":20,"connect":23,"send":0,"wait":18,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chaseherbalpasty.com/lv/esnk/2018929/code.js","fqdn":"chaseherbalpasty.com","domain":"chaseherbalpasty.com","tld":"com"},"ip":{"addr":"94.242.247.20","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chaseherbalpasty.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 01 Oct 2025 00:00:00 GMT","end":"Tue, 30 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"33:A3:14:CC:01:76:4E:33:44:46:15:D3:60:37:E2:11:39:59:F0:06","sha256":"29:67:DC:3A:7D:72:3E:0A:8C:3E:94:18:A0:47:AF:E8:3B:57:B6:5A:F9:C9:9B:5F:4A:36:73:3F:09:96:29:01"}}},"request":{"raw":"GET /lv/esnk/2018929/code.js HTTP/1.1\r\nHost: chaseherbalpasty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 30 Oct 2025 14:25:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6903754b-29589\"\r\nx-js-ab2: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":169175,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"306497460fec2db20fe2b3cd79f079e1","sha1":"4c43f979ec2d9a22f88be8bf22e2ac63a70ff80d","sha256":"42b65c6df1569e65be8f7229a81a9b80ac77b72c2026b312409c60c39752a9b2","sha512":"c4bcd18e96fbe257a8bc98215f92c8496c1ebf9000db12f245d4ebf401bbaaa894b1a1ae7f470c40343dc61581a7896cbb657ff4fccd3676799e24335553930b","ssdeep":"1536:lso8qPSdMQEZSO1CRC2vxtFKsN76U6x+ui++UzrS5jUNvJrzTmwN5FOmdF+j4QvS:lsjak4+ukU6WpdLH","tlshash":"e1f3768efa833c76c266b03fc93fd906963568f1964e8404f063d1f819e4715a636bb6","first_seen":"2025-10-31T00:05:44.996977Z","last_seen":"2025-10-31T00:05:44.996977Z","times_seen":1,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chaseherbalpasty.com/lv/esnk/2018929/code.js","fqdn":"chaseherbalpasty.com","domain":"chaseherbalpasty.com","tld":"com"},"ip":{"addr":"94.242.247.20","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chaseherbalpasty.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 01 Oct 2025 00:00:00 GMT","end":"Tue, 30 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"33:A3:14:CC:01:76:4E:33:44:46:15:D3:60:37:E2:11:39:59:F0:06","sha256":"29:67:DC:3A:7D:72:3E:0A:8C:3E:94:18:A0:47:AF:E8:3B:57:B6:5A:F9:C9:9B:5F:4A:36:73:3F:09:96:29:01"}}},"request":{"raw":"GET /lv/esnk/2018929/code.js HTTP/1.1\r\nHost: chaseherbalpasty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 30 Oct 2025 14:25:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6903754b-29589\"\r\nx-js-ab2: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":169175,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"306497460fec2db20fe2b3cd79f079e1","sha1":"4c43f979ec2d9a22f88be8bf22e2ac63a70ff80d","sha256":"42b65c6df1569e65be8f7229a81a9b80ac77b72c2026b312409c60c39752a9b2","sha512":"c4bcd18e96fbe257a8bc98215f92c8496c1ebf9000db12f245d4ebf401bbaaa894b1a1ae7f470c40343dc61581a7896cbb657ff4fccd3676799e24335553930b","ssdeep":"1536:lso8qPSdMQEZSO1CRC2vxtFKsN76U6x+ui++UzrS5jUNvJrzTmwN5FOmdF+j4QvS:lsjak4+ukU6WpdLH","tlshash":"e1f3768efa833c76c266b03fc93fd906963568f1964e8404f063d1f819e4715a636bb6","first_seen":"2025-10-31T00:05:44.996977Z","last_seen":"2025-10-31T00:05:44.996977Z","times_seen":1,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/b5237f8e6aad/main.js?","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:01.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/b5237f8e6aad/main.js? HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ndate: Fri, 31 Oct 2025 00:05:01 GMT\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 996ee5f9ba154e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10148,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10148), with no line terminators","md5":"58ed288ecb7a896330e8392f48ae6d92","sha1":"87f68dde45666e4027c8cb374604396836ae74b6","sha256":"7581444217876202e258bebc7c72366814fa063868c1c3251d87adda52c2a203","sha512":"e4fa62fa749799ab1711934460f2c559619db63055e18618030fd076dc18d1e70371fb22e9ff081768d320700229bb107211de0550db1ce2ddaf015926d8c657","ssdeep":"192:RiaSKkC50YFJ46aMQ0ie3XQ0gOyCwnWRUDJQybdkvzfQve8yX:RzAYFqd0mCw6a+tUGJX","tlshash":"d6221a8b7c8cb94c07935ae2483f24da116aad82c444ad21de94e5f4be30759f9dbf90","first_seen":"2025-10-30T23:19:58.288563Z","last_seen":"2025-10-31T00:05:45.000864Z","times_seen":4,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/b5237f8e6aad/main.js?","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:01.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/b5237f8e6aad/main.js? HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%22CAIFRQ%22%3A%22ADPmGAAAAAAAAAAEADNFZwAAAAAAAAAC%22%2C%22CAIFRT%22%3A%22ADPmGAAAAABpBAoQADNFZwAAAABpBAoQ%22%7D; __PPU_cl_tl=AoKhbNJpA_0toWMB; cf_clearance=GmFI4H0ck8eRBc2gB1a_ES8KXuahlUae4A4KM28EtFk-1761869101-1.2.1.1-_kppeLjUjIX9DWmequxjK0g_Aik.lXnXoPlM0VUchpCxYA1UiO_eHhAaCVkPSwdlur403IUeLTfTkW0LwB7fKRuTShVOC9Fr7__UDYfkrggAJQw6wZ8IqSgHg_.RNwRyrP1h6E5ElbCTAr9O9sdzQodIp0oz.WDqcb5pMdn6puPJdg3LM7gGgg.PmybAD_TGuKe0S8Bt5HvStipkdykG3xA5sT.gHrBe_wlF8WCwz9w; _ga_8RMNSQMQGD=GS2.1.s1761869101$o1$g0$t1761869101$j60$l0$h0; _ga=GA1.1.1850737930.1761869102; _ym_uid=1761869102606664545; _ym_d=1761869102; bnState_2018930=%7B%22impressions%22%3A1%2C%22delayStarted%22%3A0%7D; bnState_2018929=%7B%22impressions%22%3A2%2C%22delayStarted%22%3A0%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ndate: Fri, 31 Oct 2025 00:05:01 GMT\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 996ee5fe9a644e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10183,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10183), with no line terminators","md5":"90b8261faa2841c08890e62ec45d26ed","sha1":"c90519dd49492026c5e9e2b7a724867ae4ff2cfa","sha256":"de952ce7d6de5e74fb8a18e3b2b69625c16014d4a17a85ecb9e4aa79af41024f","sha512":"395ab0587c1afac5cca15e7d63b608071a6b0fcf2fa158d0fb5653acd79b351ac6f7aa587f0f4a82d1df77c309b8fb22bc088258bc817589e7c6542a6d81de9f","ssdeep":"192:FvoJIQyK+0YMv/a020iJCr4yxUD3QybK7UBpTOn/k1deK:FvolYv/ygguyzK","tlshash":"7f22198b7cccb588536b15b2483b20da1167ad8284489f56dea4fdf97e30354f9d6f40","first_seen":"2025-10-31T00:05:45.005858Z","last_seen":"2025-10-31T00:05:45.005858Z","times_seen":1,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chaseherbalpasty.com/jserror?type=banner\u0026bavar=0\u0026build=1.0.627\u0026zoneid=2018929\u0026e=Error\u0026m=BCLC\u0026aa=0\u0026trid=\u0026url=https%3A%2F%2Ffxggxt.com%2F","fqdn":"chaseherbalpasty.com","domain":"chaseherbalpasty.com","tld":"com"},"ip":{"addr":"94.242.247.20","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:02.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chaseherbalpasty.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 01 Oct 2025 00:00:00 GMT","end":"Tue, 30 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"33:A3:14:CC:01:76:4E:33:44:46:15:D3:60:37:E2:11:39:59:F0:06","sha256":"29:67:DC:3A:7D:72:3E:0A:8C:3E:94:18:A0:47:AF:E8:3B:57:B6:5A:F9:C9:9B:5F:4A:36:73:3F:09:96:29:01"}}},"request":{"raw":"GET /jserror?type=banner\u0026bavar=0\u0026build=1.0.627\u0026zoneid=2018929\u0026e=Error\u0026m=BCLC\u0026aa=0\u0026trid=\u0026url=https%3A%2F%2Ffxggxt.com%2F HTTP/1.1\r\nHost: chaseherbalpasty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nCookie: cart=1; cart_p=2; CHCK=1; PTS=AoKhbNJpA_0toWMC; UID=251030190545e4ab9b96b94cf9a2252b2bb6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 00:05:02 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":39,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/RFC-Dotado-For-Fucks-Mike-Verinne.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/RFC-Dotado-For-Fucks-Mike-Verinne.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 17:46:25 GMT\r\netag: \"5077-69039fe8-6ba062;;;\"\r\nlast-modified: Thu, 30 Oct 2025 17:27:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20599\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 22713\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G%2FaX94awFT%2FTE4BNhZYdESY%2FWzfAsifIWORqNLmhodtczPLyzibi%2BDwZP4STornsSZcQJbh%2FtWGB8VMZCqatzrBqcZk5ezkdx3k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ede9264e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20599,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 500x281, components 3","md5":"b09824040a07285a0c7c2401a55b9f70","sha1":"107e9e1acc5d8186ba7861bcab4c501538695f17","sha256":"1d488d887f3af7385cb7113647910ee3de112cf762df18a68613b81f1b442529","sha512":"5ccbf6c228828d3fe76c0ab88bb578a7c92551749a019a739dd6ba77d2e6e5e9c304d9ae35e173c7133f98e2fb1c632aa87daa3c423f04b95079709b489e0966","ssdeep":"384:FUjtf+w2Wozo9ZSASmDKvH74QgiVjQFb408DgwTN1pASh4ScfW9IVG:Fqt2w2k9ZDSm2JgiVje4TnTGSSp+9IM","tlshash":"1a92d0995740f725a8471dbff5ff07f2b5df3860809036261f596496e4e8a10e6890f1","first_seen":"2025-10-31T00:05:45.007814Z","last_seen":"2025-10-31T00:05:45.007814Z","times_seen":1,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/09/RFC-I-went-out-for-a-walk-and-came-back-with-my-ass-destroyed-%E2%80%93-Giovane-Maximo-Ravy-Lion.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/RFC-I-went-out-for-a-walk-and-came-back-with-my-ass-destroyed-%E2%80%93-Giovane-Maximo-Ravy-Lion.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 09:52:03 GMT\r\netag: \"3707-68d98ee7-6e5443;;;\"\r\nlast-modified: Sun, 28 Sep 2025 19:39:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14087\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 51175\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Do5q4Avt%2BnGsZyLs7m6yYAQt9uBohqEFuVRzmaC9EcI65pPXY9zNO%2BgmcArOe4ROlfifw4hdyQnUlcSyZRQVoEtaeI4MJpuape0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee795c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14087,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 500x281, components 3","md5":"90ba2e7e11e61cadf95af8ede5e0bdaf","sha1":"32c02155e5b5c94be731f18380b3884887dcece6","sha256":"c268d1e44d60332ff30becd08487f9c18528448a4a0c7ed1e6fe8802ae8034f4","sha512":"bc1791d7bf4d786e77b569b7763595cf94a6069ffa7480019ed5dfea162fa4439752412f2738a156d8b6471eb1e01d6067ebd0b22f520406953f4285f3b9b4be","ssdeep":"384:F1tDabnX0c1AfoxUeDIw6EzjH3yNhZ3hEPhHZxK0JlVdN8:F/ubnX0AEw6EzjiRxEPZZxvJn8","tlshash":"4c52e107b307add4051bf9ecdb7b2e908bde350120fef204dd1aa5a9430988666e0d9b","first_seen":"2025-10-31T00:05:45.009525Z","last_seen":"2025-10-31T00:05:45.009525Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/OnlyFans-Legrand-Wolf-Dylan-Tides-Jack-Aries-Milo-Miles.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/OnlyFans-Legrand-Wolf-Dylan-Tides-Jack-Aries-Milo-Miles.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 17:46:25 GMT\r\netag: \"490d-69039fd5-6ba00e;;;\"\r\nlast-modified: Thu, 30 Oct 2025 17:26:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18701\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 22713\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EzzCeQLDVMnJEYUeus%2FaOw4YFE8i1SXBUdqMgNz9f%2BtS2E%2BphNNOBSQGSACsknXHbylpK0ULXdCiT1gqsHEhXlCJIk80T1NaEow%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5eda90f4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18701,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"108e2861540adf25556a5229068fddeb","sha1":"9d0af98eb0dbbdb6f7e9254d086876c7c19a7a2f","sha256":"84ef3be4d00501d217020d9a0c68ec5de2456dc7c2dfc469f0ff2f1f46dd0951","sha512":"76f040f21a91ca659b06c761610c248e61a5072b8f536f60ede2133d6d012821bf7538f22421550cabcc5b09af4e3621d89c419e48bc3add1e7971e58e0d2d7d","ssdeep":"384:FVgnIjuUOZkKeajrVIoDzU2V7VF0VvM5i6FBjG0YwmYTMx:F2oHsmajrOsjWVhUiwm9x","tlshash":"cc82d01f5313ed62cd8136e067452780f384c6a4395576089fb8f5309e698bebc79e8e","first_seen":"2025-10-31T00:05:45.011678Z","last_seen":"2025-10-31T00:05:45.011678Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/MasqueradeMen-The-Jack-Attack-%E2%80%93-Isaac-Jack.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/MasqueradeMen-The-Jack-Attack-%E2%80%93-Isaac-Jack.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 17:46:25 GMT\r\netag: \"3fd9-69039fab-6b9fc0;;;\"\r\nlast-modified: Thu, 30 Oct 2025 17:26:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16345\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 22713\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=90VMqsl5j4Kl31ZepMIGJJWxOnmiX7XQ0iOxDEw4dIDoaza2I8aXsN6nSzeMrx3wzNOhG%2FvXFyk75vxCqPj%2FCaveU%2B8AEXpRdlE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5edc9184e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16345,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"2c828e17686c34b853808ca177887467","sha1":"882b1ba8021c2bf900e8e8551a2accdc62d38e61","sha256":"ef54b4fea790944065eb2efc5cf353877550c00a7ea232e4464cc7a8b15e584e","sha512":"8154f95a862c246e9b2b89ca4c68e8af1367ca6ecaf7deb9bcfba8c2542e51e2f8220faf7c616cfbb01b7e180ca80ae3db2a62709a9c464606199da413ccc0ab","ssdeep":"384:Fta3LmtYr6pF0SOTePhc0ArnpjOe7vt8UMYWdxT8x5EdqcZG7P:FAaQK0S1Zc0ArnpjVvBMfdxT8xCdZk","tlshash":"4c72b0430bc036404423ca25bd8e461719de303ba60db4d6ae631ea8b59c5eaded66d5","first_seen":"2025-10-31T00:05:45.01358Z","last_seen":"2025-10-31T00:05:45.01358Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/ProjectY-Take-it-like-a-Man.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/ProjectY-Take-it-like-a-Man.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 17:46:25 GMT\r\netag: \"470f-69039fb2-6b9fd8;;;\"\r\nlast-modified: Thu, 30 Oct 2025 17:26:10 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18191\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 22713\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IaWmD0E0VF0OIa7l9o%2BRuawQ6rakmXwNTfAX2JjYr%2BBBWbroESHC%2Bpd67L0OvPdjN8%2BrMySLFdnM8bySNBE7YxZMfZX1o81nHTk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee192d4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18191,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"3f87fce1db0e75f08df1562353fa71ab","sha1":"06c596d1d7b51dcf6ac303f64862f082fd56d390","sha256":"0db2e751c313a5bff3a81359fba49f16c985981197de0bf32a802f51abebbab6","sha512":"22303160b0a64466a73bcb6c8ffbcbce3ba99a6a70b6c554e016edfb5ea7004bacae66b8c6c519c1f032083db09842e8ee71b262aa9d98adbf57eb9a67972dc9","ssdeep":"384:FZHsZjEoDrRfWp7ch2b7jh6V9ho8O6SyKrDPmVDBlKTQbSrAOw:FZMZjNRWe2bXh6n5OzrulKT3cOw","tlshash":"6782c0829381484e1543fbc91092da54ddbcad12f674bffc3d4a2b92fe055b5faa8113","first_seen":"2025-10-31T00:05:45.015224Z","last_seen":"2025-10-31T00:05:45.015224Z","times_seen":1,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chaseherbalpasty.com/check.html","fqdn":"chaseherbalpasty.com","domain":"chaseherbalpasty.com","tld":"com"},"ip":{"addr":"94.242.247.20","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:00.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chaseherbalpasty.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 01 Oct 2025 00:00:00 GMT","end":"Tue, 30 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"33:A3:14:CC:01:76:4E:33:44:46:15:D3:60:37:E2:11:39:59:F0:06","sha256":"29:67:DC:3A:7D:72:3E:0A:8C:3E:94:18:A0:47:AF:E8:3B:57:B6:5A:F9:C9:9B:5F:4A:36:73:3F:09:96:29:01"}}},"request":{"raw":"GET /check.html HTTP/1.1\r\nHost: chaseherbalpasty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nCookie: cart=1; cart_p=2\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 00:05:00 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Thu, 23 Oct 2025 09:18:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f9f2c9-39e\"\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":926,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"088dba8e97eede53134c93219f7ebbae","sha1":"adb707654d1fe0af7d0d7a9f55660d22bd3625e4","sha256":"6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff","sha512":"23a1f87731e8aee4658993cd1ce35ec179fea80b89bf52aca7634488f1bdfcf88b9cabca4859481357a9fee06cbb49df64bbe0878b1dae0e5df4fa34003c6d80","ssdeep":"","tlshash":"6211d04934e1684c1127a6301597a2183c32a40315cbd949fb9cd7301f815a7dc596df","first_seen":"2024-11-22T16:59:41.974716Z","last_seen":"2026-03-04T10:11:28.020186Z","times_seen":13721,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-8RMNSQMQGD\u0026gtm=45je5at1v883244240za200zd883244240\u0026_p=1761869101085\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=1850737930.1761869102\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_s=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~105322303~115480710~115583767~115938465~115938468~116217636~116217638~116253087~116253089~116254370\u0026sid=1761869101\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Ffxggxt.com%2F\u0026dt=FXGGXT%20-%20Free%20HD%20and%20Amateur%20Gay%20Porn%20Videos\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026tfd=3182","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:01.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:32:04 GMT","end":"Wed, 24 Dec 2025 14:32:03 GMT"},"fingerprint":{"sha1":"D7:8C:7A:D0:97:B6:11:02:45:69:BD:62:90:53:49:F8:8D:01:20:26","sha256":"F3:B2:48:55:BA:37:4F:37:37:83:8F:61:8F:04:B7:1F:E7:6F:4D:1A:D6:71:F7:BA:2C:E5:C4:45:B8:D7:B7:7E"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-8RMNSQMQGD\u0026gtm=45je5at1v883244240za200zd883244240\u0026_p=1761869101085\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=1850737930.1761869102\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_s=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~105322303~115480710~115583767~115938465~115938468~116217636~116217638~116253087~116253089~116254370\u0026sid=1761869101\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Ffxggxt.com%2F\u0026dt=FXGGXT%20-%20Free%20HD%20and%20Amateur%20Gay%20Porn%20Videos\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026tfd=3182 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fxggxt.com/\r\nOrigin: https://fxggxt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://fxggxt.com\r\ndate: Fri, 31 Oct 2025 00:05:01 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:161:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:161:0\r\nreport-to: {\"group\":\"ascnsrsggc:161:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:161:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":30,"dns":1,"connect":7,"send":0,"wait":17,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/OnlyFans-Ridick-Dato-Foland-N1c-HungGayCock.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/OnlyFans-Ridick-Dato-Foland-N1c-HungGayCock.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 05 Nov 2025 21:18:12 GMT\r\netag: \"4103-69027c82-6b9f60;;;\"\r\nlast-modified: Wed, 29 Oct 2025 20:43:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16643\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96406\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sx2Jsw5JhmVNjgNMKOSHdix8LZb7YmtXuYyi3qm%2BO%2BnDBgBxyyinUYrbrI4LdSh4QDpM6hM20aX1MrBlAzG%2BUSy3uqw5bnYKXmw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee193b4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16643,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"613f4343f7f6300465fd991dee88c9e7","sha1":"6eb25d21fb7a2c07ccb3336bae02c47468349500","sha256":"8c37598741ffc43151279641b75f8c0f3449727ffa3a67f257a5aef0f9bb6201","sha512":"d24bef4bc410c66b709a30ef337538ad3000df36cb67ea93530d6858baeedd8ffa09fab714a59ea952b656cef212728b61ceee01356ad7fdb0c925bd3eb3691a","ssdeep":"384:FtEaa+IiZUYjIa442iMmFj1tP0HbzJq7jPS9OBpQF:FtEv+Ii+O442hmNSqjwya","tlshash":"b972c0623366b7c64bea0d71e55830e794c606676158f35eacea6338373801838d8bce","first_seen":"2025-10-31T00:05:45.016906Z","last_seen":"2025-10-31T00:05:45.016906Z","times_seen":1,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2021/04/IMG_20210329_043314.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2021/04/IMG_20210329_043314.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 31 Oct 2025 20:07:38 GMT\r\netag: \"6f63-607f15ce-4f143f;;;\"\r\nlast-modified: Tue, 20 Apr 2021 17:56:30 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 28515\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 532641\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xhJ1uOcBNrPqk32GjTmGBTXwZwC9YQukgLAUJZ6JyrOdmDWhcTOW5dHZWoYeA8DwIOigiiqqncV%2FWaNsgyF%2B23cT67Cb1NJS%2BoQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee294c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":28515,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1868x1051, components 3","md5":"716a24bd277ec5c5134eb41638352608","sha1":"7e4895b0eb94ffb6e8bcd9004159dcbe6d51cccb","sha256":"bcddc0a8e85cf0710f23abd71a5515dfb667b265ae35a70bb057dac3811583f8","sha512":"3b20ce851084614969c16229f448a3f40c8664977610b117c32e6e5ea211905f335fc5d37148f7820d1ac3e9e3bf90942f8ac8b33bdee4eb6b12afa231fac188","ssdeep":"768:CntoSJmJWiNN8tWCBOtEUcitp43+oBYTve:CckiNNABOfcMpU02","tlshash":"49d2af32f315d26ec29877f254c38b2e37e21da8c3118626a2e50d32d6f970dad5d9e1","first_seen":"2025-10-31T00:05:45.018354Z","last_seen":"2025-10-31T00:05:45.018354Z","times_seen":1,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2022/06/OnlyFans-Evans-First-BBC-Evan-Peix-John-Johnson.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2022/06/OnlyFans-Evans-First-BBC-Evan-Peix-John-Johnson.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 15:20:22 GMT\r\netag: \"5b1a-629e1355-5ad64a;;;\"\r\nlast-modified: Mon, 06 Jun 2022 14:46:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23322\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 31477\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G4ydGpvpFLT40JQLLNPMOjV2Wex7xOrS7QPWmjs6%2FX%2BuBMO9sFiCQWm4R722tt1VD6Ysq73POltPsh7TJ0DBh7z5nFrTxKVcjxQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5eeb9694e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":23322,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2, software=PhotoScape], baseline, precision 8, 640x360, components 3","md5":"2ed3c698d878ceb3a35a25eabd6e5ed8","sha1":"c83d239ae360a4acb67533f422a01d9be79950e7","sha256":"21f344d3c364add252b026c5a8f41d01bc7f3965443430a12826120a9d783a46","sha512":"598d66c496b27aa70ecd9ac9c78a16eca50ad3814c3aea7341d79847cc479eb1439968fd3e2f1890de86b5818e40503eb44db789f4d1dbaa912ccc84e99bb130","ssdeep":"384:Nvl/Vq5YFUztllg3J0/qnZPygMDcdSRCMCVelaiiRPkjEVRkB1zRhKHO/oezJUpE:NvlU5YFSllg3JaSPUI0nC8YiiRwukBgQ","tlshash":"74a2e18c3e878a004914fde44c69cbefdf666d42ab81381a740e9151bfd0b2b9dc6689","first_seen":"2025-10-31T00:05:45.019875Z","last_seen":"2025-10-31T00:05:45.019875Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dodgyfactoidprecut.com/in.js","fqdn":"dodgyfactoidprecut.com","domain":"dodgyfactoidprecut.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dodgyfactoidprecut.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 09:30:15 GMT","end":"Fri, 21 Nov 2025 09:30:14 GMT"},"fingerprint":{"sha1":"FE:A7:AB:2C:17:BD:52:9F:0C:60:D7:37:DC:D2:FA:6E:06:40:80:29","sha256":"6D:04:F7:81:F8:AA:AA:A4:07:56:33:F9:A0:DA:33:3F:85:EF:7F:35:0D:AB:1D:38:E3:7B:A2:49:0D:81:11:44"}}},"request":{"raw":"GET /in.js HTTP/1.1\r\nHost: dodgyfactoidprecut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 30 Oct 2025 14:25:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6903754b-2e09e\"\r\nexpires: Fri, 07 Nov 2025 00:04:59 GMT\r\ncache-control: max-age=604800\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":188574,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"00e7e7069f4023e01917a2ee5952093a","sha1":"8315530716c59c35b399fe2b1623a5c10345d9e0","sha256":"b255f5c1ba16ed93f82842e5a6100c511066c1a5bfb93ff4aaf5f4f9cbbc0fc6","sha512":"4f3aa2a6fa5953a09b8833b36813185ba943a35e2610d9b439dcd9439745ee8e7adaba8e2c86c804d6e005204a341f191f277cbfac794c770689c9f9b702d074","ssdeep":"3072:4wX1hsNb5+ZvKKlx3ooZG6eJ0MgEyjFauheW:Jq5OvtlxooZG6wuheW","tlshash":"2104829deeb4603d519ed51bb82e0939ba35dbcba09d84008c63f1c43b67946d131baf","first_seen":"2025-10-30T15:40:40.913524Z","last_seen":"2025-11-05T14:17:52.627817Z","times_seen":63,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":18,"connect":20,"send":0,"wait":19,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chaseherbalpasty.com/jserror?type=banner\u0026bavar=0\u0026build=1.0.627\u0026zoneid=2018930\u0026e=Error\u0026m=BCLC\u0026aa=0\u0026trid=\u0026url=https%3A%2F%2Ffxggxt.com%2F","fqdn":"chaseherbalpasty.com","domain":"chaseherbalpasty.com","tld":"com"},"ip":{"addr":"94.242.247.20","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:02.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chaseherbalpasty.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 01 Oct 2025 00:00:00 GMT","end":"Tue, 30 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"33:A3:14:CC:01:76:4E:33:44:46:15:D3:60:37:E2:11:39:59:F0:06","sha256":"29:67:DC:3A:7D:72:3E:0A:8C:3E:94:18:A0:47:AF:E8:3B:57:B6:5A:F9:C9:9B:5F:4A:36:73:3F:09:96:29:01"}}},"request":{"raw":"GET /jserror?type=banner\u0026bavar=0\u0026build=1.0.627\u0026zoneid=2018930\u0026e=Error\u0026m=BCLC\u0026aa=0\u0026trid=\u0026url=https%3A%2F%2Ffxggxt.com%2F HTTP/1.1\r\nHost: chaseherbalpasty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nCookie: cart=1; cart_p=2; CHCK=1; PTS=AoKhbNJpA_0toWMC; UID=251030190545e4ab9b96b94cf9a2252b2bb6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 00:05:02 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/NakedSword-Saddle-Uptown-Scene-5-%E2%80%93-Theo-Dore-Marcus-McNeill-Harrison-Feels.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/NakedSword-Saddle-Uptown-Scene-5-%E2%80%93-Theo-Dore-Marcus-McNeill-Harrison-Feels.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 17:46:24 GMT\r\netag: \"4bb5-69039fae-6b9fd2;;;\"\r\nlast-modified: Thu, 30 Oct 2025 17:26:06 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19381\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 22714\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xZCrS1NS1%2BR7jsoRImDT%2FP6kM%2F5KVAQhTGuSDpcAEfzC8uf7kdPXuxnTGsbXHU2%2BRD8c0lX0EFWy72N2fpd1pgny6q2VT7nPX7w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5eda90b4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19381,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"2b297e7be695062e43e8ab1695e0e3a0","sha1":"9cd0588def320d0e0f7327004924060d8c3a6918","sha256":"0e8e80fea3dca27a3bd67d3e58caf322fa5bd6c74cd413a39c3d4854889f9376","sha512":"48ea94f9b9a5c3c7ac1633f9f5f01ab231b4d4fc7fcb7d53a7d795998af18b453024f40c262177a2bf9c48dcba07029c275c21ab10aa49b5937422bf23bd2975","ssdeep":"384:FNJn0u8cZLuCzJ8JFTWCDcK+G5aL17ttZXbXpJaKyf896RB6R:FT0uJLuHJwK3arjXLav6R","tlshash":"bd92e153ab2167114e70dd2006ce577af62388733dc4ef847ec6dc189568eee996d00d","first_seen":"2025-10-31T00:05:45.022816Z","last_seen":"2025-10-31T00:05:45.022816Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/OnlyFans-Ali-Rush-Luciano.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/OnlyFans-Ali-Rush-Luciano.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 05 Nov 2025 21:18:12 GMT\r\netag: \"4084-69027c7b-6b9f00;;;\"\r\nlast-modified: Wed, 29 Oct 2025 20:43:39 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16516\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 19418\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=doKGRcM8%2FdqZs93XR3XYO2dNMeODRF5gSFGn53KmyEUG9yS%2FnjSsQr%2Fw0WDBKQ2blwdoN7xwIDTivujsXGu2HGyPYHSn15d5o4o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee19334e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16516,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"ed3224ffef9c89e3fcad1a1dcdb104ce","sha1":"0949fcfdcf01a3fdf2720b4ed53a36ac78a58343","sha256":"43c35a1b93e3382d21dd0b3c3715a1cb41f44d51e2a07811394d1f2f5268e858","sha512":"9ef76107a9b9de9e6bd81abe84fbe4e492385e8204403253c83997dd10e3775bad53b2f6507405b992ae3450164572e8f8ce0db32c7e6c3b4b91dab278a2a027","ssdeep":"384:FRfMEW0dmzSsHl1i+MLcBAISJs0Q2eYlTrpaAIjWHg:FRUEW/2sHK+MLoAIb/2eYlvpan","tlshash":"7672d0dbcb2d194b949c0064d61e2235ed883c81b832b2048de8f597cd98ebe74ea589","first_seen":"2025-10-31T00:05:45.024241Z","last_seen":"2025-10-31T00:05:45.024241Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2023/04/OnlyFans-Amir-Pounding-fucks-Eric-Rey-hard.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2023/04/OnlyFans-Amir-Pounding-fucks-Eric-Rey-hard.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 23:56:28 GMT\r\netag: \"326b-6449184b-62ca03;;;\"\r\nlast-modified: Wed, 26 Apr 2023 12:25:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12907\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 510\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CJnPVqf9J%2BvcifIfQZupGQuQr6%2BszYe6NmxszDY9oCqIC5HqIChNxmer%2BSek9ebNOgerrnT30hijaTZ1pwQN%2B8SJ%2F4opivVvZhM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee194b4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":12907,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 400x225, components 3","md5":"4d82de1adee3c15d8db618190d1c31f4","sha1":"8766829520527bfdd2c886d2046ed1f40584fb8c","sha256":"1c72144d326bdbd39d6b8625092ef6c1ceef62ad4d734d557209e1e0685ce63b","sha512":"cd928322ed0c282a59dc7ad3bbfe0c03ec7273b3a83bb71baa9bcc938cb6eff845d5276bcb944d878b9a0ad20f998fc93c3bf0bf325a55e7f6dc522d0e3d2c39","ssdeep":"384:SMwfHjerbORlDJO7UZYKCUg41gRELp96u/v:ShfHlRtpHYygELzl","tlshash":"cf42c0d4eb7b8390934d1f3837ad83aa06788545317830b00d5bc2ba96fd06dd55eaf8","first_seen":"2025-10-31T00:05:45.025583Z","last_seen":"2025-10-31T00:05:45.025583Z","times_seen":1,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2024/11/OnlyFans-BigSpoonXXL-Martin-Brute.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2024/11/OnlyFans-BigSpoonXXL-Martin-Brute.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 14:22:00 GMT\r\netag: \"2c01-673b7e4d-537f38;;;\"\r\nlast-modified: Mon, 18 Nov 2024 17:50:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11265\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 34978\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KZVe5zOJ8wTlO%2Bdwbpsf6D%2FwgejUI%2B3iQHK4GkmBWPT54Z53GJElWvTw1MXMImG0wm34pP0NRg3UCWjL7V76JmWsiJ3%2FOXTxx%2B0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee49504e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11265,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 400x225, components 3","md5":"c004a817467e8c2659e2f4ed6f66b5e9","sha1":"75f34560d121c0974fb1b27e779a5d0c3b31eb58","sha256":"79606d0dfa60f05bfa309003da9f473073217f587ee51111669b88ab17ba9eee","sha512":"ec2c86b673f05b36d215e8de4f381964934686969634fac8c2deca30623ffc282225c443b49debedf656d966b54716a2fc895819aa400f041fb45445cf4dc3d3","ssdeep":"192:BIIO1Qle/tQKiThQrhf+AdBqjwLqBrshRzh/r/Z+9l2+CX9d9Vv4b6s2b:SIO1QA/SVC8qfOBothLZq2+CX9Kb6D","tlshash":"3932c0d2af16d030955ae6bb3f37a07bc146fed8b205f710acd5923182129e1eac2635","first_seen":"2025-10-31T00:05:45.027073Z","last_seen":"2025-10-31T00:05:45.027073Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2024/12/RFC-Not-So-Tender-Fucking-BostonJock-PupTenderPawsXX.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/RFC-Not-So-Tender-Fucking-BostonJock-PupTenderPawsXX.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 05 Nov 2025 22:26:55 GMT\r\netag: \"2141-6761bf81-576f5f;;;\"\r\nlast-modified: Tue, 17 Dec 2024 18:14:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8513\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 92284\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q7TDSydXeF9LmqqnquVyXTGhyJbH9YwvJ78bLt1K9CZdAsBphXoLDCQZIi22EoHI%2FuAeJ0BKNR3RL8AHF4bMbpDNxujap5k7cSM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5eed9784e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":8513,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 400x225, components 3","md5":"4270979a1da951bdf379ee94ef1cec93","sha1":"52659927b45e8fba3c47f6d8e95dbc1e524ca060","sha256":"43d4b0e8a7cbdc3fd75fc61e9f92ea6fc5b0043027d10aa831828c83d573452b","sha512":"87b1f4d2ffa822ff2e17c740b43ab8a0437a2b12d72cbff2a1df2c12851fd2a00fa8c1f21c130f52ac8c8fdd9c0a333b14743e156ccbf8861c5c037b347790bf","ssdeep":"192:BINIEhu1siIJvWKumwKIIwegMWAqurVBoqQCM8ACQkwRyhDvWBX9Ht:SNjN9JQIw9Aquzo1oYfHt","tlshash":"bc02cfb1df20c1910d74485726469beec2ef7e48be5bf3269c894f9181c07e14a4a1e9","first_seen":"2025-10-31T00:05:45.028417Z","last_seen":"2025-10-31T00:05:45.028417Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chaseherbalpasty.com/get/2018929?zoneid=2018929\u0026pid=__clb-2018929_4\u0026jp=_clnzoygucnnyeciyssjapy\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.627\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=Ord-7bcKmZpiyzUDVIIHN\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=NFrraDqaHR0cHM6Ly9meGdneHQuY29tLw\u0026afid=4619065480723968\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026dto=2\u0026pload=2396\u0026rlp=%5B0%2C91%2C298%2C159%2C2598%2C27804%2C4067%2C27455%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=3\u0026uf=0\u0026freq=0","fqdn":"chaseherbalpasty.com","domain":"chaseherbalpasty.com","tld":"com"},"ip":{"addr":"94.242.247.20","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:01.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chaseherbalpasty.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 01 Oct 2025 00:00:00 GMT","end":"Tue, 30 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"33:A3:14:CC:01:76:4E:33:44:46:15:D3:60:37:E2:11:39:59:F0:06","sha256":"29:67:DC:3A:7D:72:3E:0A:8C:3E:94:18:A0:47:AF:E8:3B:57:B6:5A:F9:C9:9B:5F:4A:36:73:3F:09:96:29:01"}}},"request":{"raw":"GET /get/2018929?zoneid=2018929\u0026pid=__clb-2018929_4\u0026jp=_clnzoygucnnyeciyssjapy\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.627\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=Ord-7bcKmZpiyzUDVIIHN\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=NFrraDqaHR0cHM6Ly9meGdneHQuY29tLw\u0026afid=4619065480723968\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026dto=2\u0026pload=2396\u0026rlp=%5B0%2C91%2C298%2C159%2C2598%2C27804%2C4067%2C27455%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=3\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: chaseherbalpasty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 00:05:01 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: PTS=AoKhbNJpA_0toWMB; Path=/; Expires=Fri, 04 Dec 2026 00:05:01 GMT; Secure; SameSite=None\nUID=251030190545e4ab9b96b94cf9a2252b2bb6; Path=/; Expires=Fri, 04 Dec 2026 00:05:01 GMT; Secure; SameSite=None\nCHCK=1; Path=/; Expires=Fri, 04 Dec 2026 00:05:01 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5038,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (5038), with no line terminators","md5":"01f4f056aaded1a4f72b6eb86ccdb82b","sha1":"8cd48cc18e128ced3d7792b5268ae5c5d5f722f5","sha256":"d427ce7619e5c12502ab3917c31ce6481aa9b2d8ce969f27469628944338aee4","sha512":"d5d33ea32cf5efe2fbfe56ff02c800a61c36c5bd54fd3e2429930d87c7a42972c5583febc0fb4a9ce6756e70230b397326a17212560a4bb6df7f8cdaea5c57a5","ssdeep":"96:PfPImxN/+ABJrxN/+ABOxN/+ABQxN/+ABuNc9u9mr9M5F0Co:PfPImxEmrxEBxE9xESgA+5xo","tlshash":"86a1076424d64fdbe97450c79234ec41bec72bf8bb27694c872e46ab1b0d219b0b49d1","first_seen":"2025-10-31T00:05:45.029673Z","last_seen":"2025-10-31T00:05:45.029673Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/FistingInferno-Top-8-Raunchy-Scenes-Devin-Franco.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/FistingInferno-Top-8-Raunchy-Scenes-Devin-Franco.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 17:46:25 GMT\r\netag: \"41a8-69039fa7-6b9fae;;;\"\r\nlast-modified: Thu, 30 Oct 2025 17:25:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16808\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 22713\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6fxQS65T2qGwJPeNAWtjeAmLJA1eVPVqmVq3xMgpAlxcAeZ8NmGQWwEAvpZ6w8vpd6x6cE4YBqpd8Hp3bFJTbT5SXzplP1B6Yn8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ede9234e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":16808,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"6eea7edd9507438587f22feebdf334e5","sha1":"bc74f7504deebe9330f4ea33f24e5934339bdaec","sha256":"513ef9cae7c47a40cd01279a99ee6ef0be7e321e0da10d746196150444a95373","sha512":"60e38141e22bfd757b17e0a54a5ecb9840a8a8b868ab9358d734e612054234051a444e11210d20743b1a245d81fac5be8ed4da66286114ed513ee5a80d122b9c","ssdeep":"384:FRakSjOsSL/B2LIDBNOsjphtriL1XwlBpo/Z7cbrE3TVxjxH:FRaxjQB2A3lw1XwlBa/mby3NH","tlshash":"8772e1d3078547f3423a1f6d8c214866e60b764504f0f12b5c7b2ee2b120a05dfafa4e","first_seen":"2025-10-31T00:05:45.031004Z","last_seen":"2025-10-31T00:05:45.031004Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/RFC-Cum-on-my-face-%E2%80%93-Derek-Allen-and-Taylor-Reign-fuck-and-exchange-facials.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/RFC-Cum-on-my-face-%E2%80%93-Derek-Allen-and-Taylor-Reign-fuck-and-exchange-facials.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 17:46:25 GMT\r\netag: \"399d-69039fe4-6ba050;;;\"\r\nlast-modified: Thu, 30 Oct 2025 17:27:00 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14749\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 22713\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UghZkvNVzXCsiFhcPTwJAp3GyP0p7IBlOISKjz9N%2BrYNwIjXbVGRpgita3qwkasBQXQYf0lUlhx9yyorcl47wvhLMliofY7lY4g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ede92a4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":14749,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"b4bb5196e57da2176d39b7131146daa2","sha1":"1d76933f04dd4d37d31afa3c9071511c914bdf8f","sha256":"002c30f136ee5d78219a75a6daa638a1fc66fccd0a641de18d4380ffce1b215d","sha512":"91df8f3d40ed272c2f0c6c1ee402ee584f373b0047a7bc8cbd030e121af552dc6033294f20f9fbf1926ff1a1419d120c685e692d3a06d4bf57b9089230bed834","ssdeep":"384:Fo/6LA7rB9OCTqGHlra5lemmd6xU27MFjEeLu:Fo/6k+0l2IwxU27MFI7","tlshash":"0d62bf3b97db38f280fee079320d5436a7fa212208c4764aac96e012f510dbb9ea445d","first_seen":"2025-10-31T00:05:45.032398Z","last_seen":"2025-10-31T00:05:45.032398Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/BreederFuckers-%E2%80%93-Jakub-Scene-5.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/BreederFuckers-%E2%80%93-Jakub-Scene-5.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 17:46:25 GMT\r\netag: \"31b6-69039f9e-6b9f84;;;\"\r\nlast-modified: Thu, 30 Oct 2025 17:25:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12726\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 22713\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yInlvIsoGRAkc6HrLg1DPvU8oPUWNHUuztRvYcW%2B7NUqUlogiZz%2FyNRJ3AMHo6wh4GsqXSfi%2BkALKDbzDg%2FJhDfC6fnubS%2FS8j4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee19324e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12726,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"ad3b264b51849a46c9e125e46d242168","sha1":"99a6e6811f2ed943b24ae2641a26c0e107911803","sha256":"73fa6d742a63d91ac8e70030c8341c9f586e99b8bcf40097c1c16746e36fbb3b","sha512":"bc956c15a5767249f8b896e756beaa79e31786f56017f1574d4d57d5f41be9f4a9804da914593ce14c74d3612a3799aa4d55c392ded88c2e67ccdb9e5b8f5255","ssdeep":"384:FyGZ82zPWYfIgASmbMQzrQ5jCgYG3icwk:FyQ8YPWAaFwjCTGy+","tlshash":"cf42cf6b939c7721ac0b05aa1ee0a427bf1f0f1206a47116be449637c9fe4dc8b1e65d","first_seen":"2025-10-31T00:05:45.033774Z","last_seen":"2025-10-31T00:05:45.033774Z","times_seen":1,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/OnlyFans-James-Cassidy-Bryce-Jax-TexasGymJock.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/OnlyFans-James-Cassidy-Bryce-Jax-TexasGymJock.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 05 Nov 2025 21:18:12 GMT\r\netag: \"38c3-69027c7e-6b9f24;;;\"\r\nlast-modified: Wed, 29 Oct 2025 20:43:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14531\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96406\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ahprb7J4WBfEpxHAe3S2JXDNm3t2nTXHnpHKk6AXoYLyo5kgfJf33QWUiI6lv1%2BwQdEh14pMrCOyk%2BJAYJrS7dOmIcPkfQt%2FaNw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee193c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":14531,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"62ab861a16592a94800d7e8d3ebf91ae","sha1":"2ab6ef9259845de2d5c024b3863427d4622b8763","sha256":"858d153862bc93ec711ee23d54cc6f581ca8d6634ee268ecbea6c26e63945af4","sha512":"0a716ced09f0b12a0379685a88102161ed27f293e51d7527e2c35f263bd458189a7f50ca0c44c43adef85e18f9a64ca0329064532651c22783b610e59ddc4f55","ssdeep":"384:FYV086kwkfztc/FA3Vt7HqDQvPw2R9t+lt09tLwckYKkQ:FYV086kXthFtcQvP7vklzcxKkQ","tlshash":"cd62c0990bf11f823fcd227a416b49cae6dc9167345f3b4dae34d078cae4018996d36c","first_seen":"2025-10-31T00:05:45.035119Z","last_seen":"2025-10-31T00:05:45.035119Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-8RMNSQMQGD","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:00.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:32:04 GMT","end":"Wed, 24 Dec 2025 14:32:03 GMT"},"fingerprint":{"sha1":"D7:8C:7A:D0:97:B6:11:02:45:69:BD:62:90:53:49:F8:8D:01:20:26","sha256":"F3:B2:48:55:BA:37:4F:37:37:83:8F:61:8F:04:B7:1F:E7:6F:4D:1A:D6:71:F7:BA:2C:E5:C4:45:B8:D7:B7:7E"}}},"request":{"raw":"GET /gtag/js?id=G-8RMNSQMQGD HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 31 Oct 2025 00:05:00 GMT\r\nexpires: Fri, 31 Oct 2025 00:05:00 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 138521\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":410798,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"806d881ca94bcc8d9810c7497b903b60","sha1":"f7f8f47e0d9dbfabc9cdfa71b0e5d3d9ca210277","sha256":"5de83b438619774595a689d7d78e936fab753d36f6488c35f29d2a48eb4969ac","sha512":"555cbad26cc153adc86d3eb63d7b8cbd3acac4f0882276d02301390fc6ce7b83a94fdaaff33a6a72a529cdfcecfcbc088f5f1ea62be5e0c41d8780bb82197047","ssdeep":"6144:VBe5HIy2n8fud75KGq6A0RI6TLiYYg/FOY9ftLHAJ+aAMn/xS2GJa:rqHITiud75KGq6hvLiYlAJhh","tlshash":"ee94198e73c674269396f078503f118ba57b29e2b45cc896f189cce42d74a9a4237f7c","first_seen":"2025-10-31T00:05:45.036481Z","last_seen":"2025-10-31T00:05:45.036481Z","times_seen":1,"resource_available":true,"data":null}},"time_used":405,"timings":{"blocked":139,"dns":1,"connect":21,"send":0,"wait":45,"receive":59,"ssl":137},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.chaseherbalpasty.com/static/video/bn/bf3/7d0/56d/bf37d056d84d92ce50d337c48e4cb6ab143cda69.mp4","fqdn":"www.chaseherbalpasty.com","domain":"chaseherbalpasty.com","tld":"com"},"ip":{"addr":"94.242.247.20","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:02.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chaseherbalpasty.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 01 Oct 2025 00:00:00 GMT","end":"Tue, 30 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"33:A3:14:CC:01:76:4E:33:44:46:15:D3:60:37:E2:11:39:59:F0:06","sha256":"29:67:DC:3A:7D:72:3E:0A:8C:3E:94:18:A0:47:AF:E8:3B:57:B6:5A:F9:C9:9B:5F:4A:36:73:3F:09:96:29:01"}}},"request":{"raw":"GET /static/video/bn/bf3/7d0/56d/bf37d056d84d92ce50d337c48e4cb6ab143cda69.mp4 HTTP/1.1\r\nHost: www.chaseherbalpasty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 00:05:02 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 952885\r\nlast-modified: Wed, 15 Oct 2025 18:51:27 GMT\r\netag: \"68efed2f-e8a35\"\r\nexpires: Tue, 30 Dec 2025 00:05:02 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-expose-headers: Last-Modified\r\ncontent-range: bytes 0-952884/952885\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":952885,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"87ef915cc39e1ca0204ebda8289b4f52","sha1":"bf37d056d84d92ce50d337c48e4cb6ab143cda69","sha256":"a5c2f77a616c7caf3801bb24f99ee6ac1c6cc2bc85c0d79f4224779e39a16249","sha512":"c2fd78f56f77aaec7442d725d8e0638dcc408ea40311adfdb7d00eefdbcaef3f6026b8a43f36801240c172391585f4c81276c9a61e02ae6f86398751a84c9b81","ssdeep":"6144:WAFoTGEP7FgOxU0zl9IJ9QJGas83T2q2cw8bHJ8cufvnC2IuWCe:WCqG27F5xU0J9IJ94GA3T7HbpufvtWP","tlshash":"b6157b6e0d964132ff4cfa3e9494c867d8e05a15c9c6c30fb95c09118bbe25a47bf4ba","first_seen":"2025-04-13T17:07:16.972621Z","last_seen":"2026-01-28T02:27:55.924774Z","times_seen":975,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":18,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.chaseherbalpasty.com/static/video/bn/bf3/7d0/56d/bf37d056d84d92ce50d337c48e4cb6ab143cda69.mp4","fqdn":"www.chaseherbalpasty.com","domain":"chaseherbalpasty.com","tld":"com"},"ip":{"addr":"94.242.247.20","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:02.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chaseherbalpasty.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 01 Oct 2025 00:00:00 GMT","end":"Tue, 30 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"33:A3:14:CC:01:76:4E:33:44:46:15:D3:60:37:E2:11:39:59:F0:06","sha256":"29:67:DC:3A:7D:72:3E:0A:8C:3E:94:18:A0:47:AF:E8:3B:57:B6:5A:F9:C9:9B:5F:4A:36:73:3F:09:96:29:01"}}},"request":{"raw":"GET /static/video/bn/bf3/7d0/56d/bf37d056d84d92ce50d337c48e4cb6ab143cda69.mp4 HTTP/1.1\r\nHost: www.chaseherbalpasty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 00:05:02 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 952885\r\nlast-modified: Wed, 15 Oct 2025 18:51:27 GMT\r\netag: \"68efed2f-e8a35\"\r\nexpires: Tue, 30 Dec 2025 00:05:02 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-expose-headers: Last-Modified\r\ncontent-range: bytes 0-952884/952885\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":952885,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"87ef915cc39e1ca0204ebda8289b4f52","sha1":"bf37d056d84d92ce50d337c48e4cb6ab143cda69","sha256":"a5c2f77a616c7caf3801bb24f99ee6ac1c6cc2bc85c0d79f4224779e39a16249","sha512":"c2fd78f56f77aaec7442d725d8e0638dcc408ea40311adfdb7d00eefdbcaef3f6026b8a43f36801240c172391585f4c81276c9a61e02ae6f86398751a84c9b81","ssdeep":"6144:WAFoTGEP7FgOxU0zl9IJ9QJGas83T2q2cw8bHJ8cufvnC2IuWCe:WCqG27F5xU0J9IJ94GA3T7HbpufvtWP","tlshash":"b6157b6e0d964132ff4cfa3e9494c867d8e05a15c9c6c30fb95c09118bbe25a47bf4ba","first_seen":"2025-04-13T17:07:16.972621Z","last_seen":"2026-01-28T02:27:55.924774Z","times_seen":975,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/98348519/1?page-url=https%3A%2F%2Ffxggxt.com%2F\u0026charset=utf-8\u0026hittoken=1761869102_9da16d8f04519c1aa7b4be9411a0aa7007a7fc627736859e98c89aa86a29d9ce\u0026browser-info=nb%3A1%3Acl%3A498%3Aar%3A1%3Avf%3A3xktzc2ogg05v7x8e2v8cowhnxhaz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2240%3Acn%3A1%3Adp%3A0%3Als%3A54964319613%3Ahid%3A395265548%3Az%3A0%3Ai%3A20251031000516%3Aet%3A1761869117%3Ac%3A1%3Arn%3A868086424%3Arqn%3A2%3Au%3A1761869102606664545%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A1%3Ans%3A1761869098489%3Agi%3AR0ExLjEuMTg1MDczNzkzMC4xNzYxODY5MTAy%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1761869117\u0026t=gdpr(14)clc(0-0-0)rqnt(2)aw(1)rcm(1)cdl(na)eco(83952128)oms(0)prs(1)w2s(0)ti(0)\u0026force-urlencoded=1\u0026site-info=%7B%22__ym%22%3A%7B%22ct.e%22%3A%22ns%22%7D%7D","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"77.88.21.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:16.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"POST /watch/98348519/1?page-url=https%3A%2F%2Ffxggxt.com%2F\u0026charset=utf-8\u0026hittoken=1761869102_9da16d8f04519c1aa7b4be9411a0aa7007a7fc627736859e98c89aa86a29d9ce\u0026browser-info=nb%3A1%3Acl%3A498%3Aar%3A1%3Avf%3A3xktzc2ogg05v7x8e2v8cowhnxhaz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2240%3Acn%3A1%3Adp%3A0%3Als%3A54964319613%3Ahid%3A395265548%3Az%3A0%3Ai%3A20251031000516%3Aet%3A1761869117%3Ac%3A1%3Arn%3A868086424%3Arqn%3A2%3Au%3A1761869102606664545%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A1%3Ans%3A1761869098489%3Agi%3AR0ExLjEuMTg1MDczNzkzMC4xNzYxODY5MTAy%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1761869117\u0026t=gdpr(14)clc(0-0-0)rqnt(2)aw(1)rcm(1)cdl(na)eco(83952128)oms(0)prs(1)w2s(0)ti(0)\u0026force-urlencoded=1\u0026site-info=%7B%22__ym%22%3A%7B%22ct.e%22%3A%22ns%22%7D%7D HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://fxggxt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nCookie: yabs-sid=1702861941761869101; i=bd3g5vh6FP2hfV9Cg5iPOGHS+0YzeW2LD1MhL74kQ/YRk6FD9DDucvfynwGVIkQ/MQeVTpvcFoAvp6v1t8vRKmQaTqs=; yandexuid=2689359981761869101; yuidss=2689359981761869101; ymex=1793405101.yrts.1761869101#1793405101.yrtsi.1761869101; bh=YK36j8gGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 43\r\naccess-control-allow-credentials: true\r\nexpires: Fri, 31-Oct-2025 00:05:16 GMT\r\ncontent-type: image/gif\r\naccess-control-allow-origin: https://fxggxt.com\r\nstrict-transport-security: max-age=31536000\r\nx-xss-protection: 1; mode=block\r\npragma: no-cache\r\nlast-modified: Fri, 31-Oct-2025 00:05:16 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-06-20T01:39:15.965679Z","times_seen":106501,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2021/12/IMG_20211210_222337.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2021/12/IMG_20211210_222337.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 02:43:24 GMT\r\netag: \"64ca-61b3782c-4f0c2b;;;\"\r\nlast-modified: Fri, 10 Dec 2021 15:54:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25802\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 76894\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m2%2Fw0RZUrdUJtUcbVpa73q8sGmHHKdTbgW3a5QZhdYxDK5YtfDhcjab3yxOapRVzxqBUIUZk%2FiUTlU5z35UOAKT%2BCQuqDDy1tTM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee99624e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":25802,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x360, components 3","md5":"d29718f94c15aa0f546341148bb908c5","sha1":"64d22987b170d51069575a5e9f918e8a66d8ce1b","sha256":"140ed85d47468c8c5a7b3c9372b338177ad52973f10a7642587c2801f2b433e8","sha512":"a8c4b4ede62f194aae526f0fd3e590da9537c54bc7af0335ac20ff0bf565aeb9996a8c6dc87da07335bd9cf4902e2f083eff37d07bc9c38ec797adde3ba8151f","ssdeep":"768:ncM7/XEvYFD4RcsicQBjTdsEIenOuEV+sl0u2UL0RNgBqu:cM7/PyRcsicQBjT3nnOuEVdz2UL0ngYu","tlshash":"a7c2e179e2965222c4c0ecf00c959bcd6b45d8242c1a9b1c468c9743f88eec5e7fdf89","first_seen":"2025-10-31T00:05:45.039126Z","last_seen":"2025-10-31T00:05:45.039126Z","times_seen":1,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chaseherbalpasty.com/lv/esnk/2018929/code.js","fqdn":"chaseherbalpasty.com","domain":"chaseherbalpasty.com","tld":"com"},"ip":{"addr":"94.242.247.20","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chaseherbalpasty.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 01 Oct 2025 00:00:00 GMT","end":"Tue, 30 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"33:A3:14:CC:01:76:4E:33:44:46:15:D3:60:37:E2:11:39:59:F0:06","sha256":"29:67:DC:3A:7D:72:3E:0A:8C:3E:94:18:A0:47:AF:E8:3B:57:B6:5A:F9:C9:9B:5F:4A:36:73:3F:09:96:29:01"}}},"request":{"raw":"GET /lv/esnk/2018929/code.js HTTP/1.1\r\nHost: chaseherbalpasty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 30 Oct 2025 14:25:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6903754b-29589\"\r\nx-js-ab2: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":169175,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"306497460fec2db20fe2b3cd79f079e1","sha1":"4c43f979ec2d9a22f88be8bf22e2ac63a70ff80d","sha256":"42b65c6df1569e65be8f7229a81a9b80ac77b72c2026b312409c60c39752a9b2","sha512":"c4bcd18e96fbe257a8bc98215f92c8496c1ebf9000db12f245d4ebf401bbaaa894b1a1ae7f470c40343dc61581a7896cbb657ff4fccd3676799e24335553930b","ssdeep":"1536:lso8qPSdMQEZSO1CRC2vxtFKsN76U6x+ui++UzrS5jUNvJrzTmwN5FOmdF+j4QvS:lsjak4+ukU6WpdLH","tlshash":"e1f3768efa833c76c266b03fc93fd906963568f1964e8404f063d1f819e4715a636bb6","first_seen":"2025-10-31T00:05:44.996977Z","last_seen":"2025-10-31T00:05:44.996977Z","times_seen":1,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chaseherbalpasty.com/get/2018930?zoneid=2018930\u0026pid=__clb-2018930_1\u0026jp=_cljlghuhpasvtsywolyvfe\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.627\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=Ord-7bcKmZpiyzUDVIIHN\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=vnVEf6OaHR0cHM6Ly9meGdneHQuY29tLw\u0026afid=7996765201222656\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026dto=2\u0026pload=1645\u0026rlp=%5B0%2C34%2C105%2C61%2C1542%2C18259%2C3480%2C17910%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=1\u0026uf=0\u0026freq=0","fqdn":"chaseherbalpasty.com","domain":"chaseherbalpasty.com","tld":"com"},"ip":{"addr":"94.242.247.20","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:01.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chaseherbalpasty.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 01 Oct 2025 00:00:00 GMT","end":"Tue, 30 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"33:A3:14:CC:01:76:4E:33:44:46:15:D3:60:37:E2:11:39:59:F0:06","sha256":"29:67:DC:3A:7D:72:3E:0A:8C:3E:94:18:A0:47:AF:E8:3B:57:B6:5A:F9:C9:9B:5F:4A:36:73:3F:09:96:29:01"}}},"request":{"raw":"GET /get/2018930?zoneid=2018930\u0026pid=__clb-2018930_1\u0026jp=_cljlghuhpasvtsywolyvfe\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.627\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=Ord-7bcKmZpiyzUDVIIHN\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=vnVEf6OaHR0cHM6Ly9meGdneHQuY29tLw\u0026afid=7996765201222656\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026dto=2\u0026pload=1645\u0026rlp=%5B0%2C34%2C105%2C61%2C1542%2C18259%2C3480%2C17910%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=1\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: chaseherbalpasty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 00:05:01 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Fri, 04 Dec 2026 00:05:01 GMT; Secure; SameSite=None\nPTS=AoKhbNJpA_0toWMB; Path=/; Expires=Fri, 04 Dec 2026 00:05:01 GMT; Secure; SameSite=None\nUID=2510301905dc7bacea67a64fed91e4a0c0b9; Path=/; Expires=Fri, 04 Dec 2026 00:05:01 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5038,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (5038), with no line terminators","md5":"8fec3c0abe4f4da92578e0f9a98bae29","sha1":"77aa68533d5dc98f6534dd9aec6bc4e0150bd067","sha256":"cbeefe24e9551757e63e85f450f3e5a46075e78a8ecc399b75e625c1ad8e5b94","sha512":"4ab29b04c832328a6412e65e60c6bdcc9a1ae4cc0ff0e1c261d211f2a49ad31890f79dd08ed1d4237344fed59592cc3763eb7cd155dcb7bbbcd566983c64a48d","ssdeep":"96:ONg4M2TYsmXxzBwyhTYsmXxz87wFhTYsmXxz+wRhTYsmXxzWDJy8o:Ou4dYsmXxzBwMYsmXxz87wnYsmXxz+wy","tlshash":"90a1182c5248f68c43e33ef8ca3a7d654765125953168ef1b3986f09fea62f67183840","first_seen":"2025-10-31T00:05:45.040465Z","last_seen":"2025-10-31T00:05:45.040465Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"astronautlividlyreformer.com/solid.gif?z=1994451\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.627-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=Ord-7bcKmZpiyzUDVIIHN\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=qNuhi03aHR0cHM6Ly9meGdneHQuY29tLw\u0026afid=396940830081536\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026dto=2\u0026pload=1798\u0026rlp=%5B0%2C91%2C298%2C159%2C2598%2C27804%2C4067%2C27455%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5","fqdn":"astronautlividlyreformer.com","domain":"astronautlividlyreformer.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:01.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astronautlividlyreformer.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:27:08 GMT","end":"Wed, 21 Jan 2026 14:27:07 GMT"},"fingerprint":{"sha1":"EE:4F:A4:BF:E4:BA:9F:D9:89:60:3D:0C:57:BF:AA:79:20:D8:10:20","sha256":"6A:5F:C7:73:B8:99:4E:4B:AB:87:F9:1F:99:0F:80:48:57:86:F8:F5:84:09:D2:9A:05:E6:89:FB:31:15:41:2C"}}},"request":{"raw":"POST /solid.gif?z=1994451\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.627-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=Ord-7bcKmZpiyzUDVIIHN\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=qNuhi03aHR0cHM6Ly9meGdneHQuY29tLw\u0026afid=396940830081536\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026dto=2\u0026pload=1798\u0026rlp=%5B0%2C91%2C298%2C159%2C2598%2C27804%2C4067%2C27455%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5 HTTP/1.1\r\nHost: astronautlividlyreformer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://fxggxt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 00:05:01 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-route-id: stats.tag.loaded\r\nset-cookie: CHCK=1; Path=/; Expires=Fri, 04 Dec 2026 00:05:01 GMT; Secure; SameSite=None\nPTS=AoKhbNJpA_0toWMB; Path=/; Expires=Fri, 04 Dec 2026 00:05:01 GMT; Secure; SameSite=None\nUID=2510301905fce1882647284c37914f295586; Path=/; Expires=Fri, 04 Dec 2026 00:05:01 GMT; Secure; SameSite=None\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"28e463819a210071de3b45ebe7633613","sha1":"6dccd571828ec0912629119cf7eabfea9f33ddbc","sha256":"44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84","sha512":"8a82ac5a7883cd9b74bdb561cf825ce86474e259ad8c445e538d697b0003e3f2b1d6edcd3dc6512f4ad16e9074da204a79938257c457ecf68f4329eac0182e67","ssdeep":"","tlshash":"04900003e280e082c3a0c0300e0ccb802b88a2308a28030fb0fc2baefc3a3a20c23000","first_seen":"2023-04-05T09:26:54Z","last_seen":"2026-06-19T22:26:28.141623Z","times_seen":22397,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"astronautlividlyreformer.com/get/1994451?id=1994451\u0026jp=_cllczpzppbzujoifkesztw\u0026dr=49\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.627-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=Ord-7bcKmZpiyzUDVIIHN\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=qNuhi03aHR0cHM6Ly9meGdneHQuY29tLw\u0026afid=396940830081536\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026dto=2\u0026pload=1798\u0026rlp=%5B0%2C91%2C298%2C159%2C2598%2C27804%2C4067%2C27455%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0","fqdn":"astronautlividlyreformer.com","domain":"astronautlividlyreformer.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:01.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astronautlividlyreformer.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:27:08 GMT","end":"Wed, 21 Jan 2026 14:27:07 GMT"},"fingerprint":{"sha1":"EE:4F:A4:BF:E4:BA:9F:D9:89:60:3D:0C:57:BF:AA:79:20:D8:10:20","sha256":"6A:5F:C7:73:B8:99:4E:4B:AB:87:F9:1F:99:0F:80:48:57:86:F8:F5:84:09:D2:9A:05:E6:89:FB:31:15:41:2C"}}},"request":{"raw":"GET /get/1994451?id=1994451\u0026jp=_cllczpzppbzujoifkesztw\u0026dr=49\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.627-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=Ord-7bcKmZpiyzUDVIIHN\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=qNuhi03aHR0cHM6Ly9meGdneHQuY29tLw\u0026afid=396940830081536\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026dto=2\u0026pload=1798\u0026rlp=%5B0%2C91%2C298%2C159%2C2598%2C27804%2C4067%2C27455%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0 HTTP/1.1\r\nHost: astronautlividlyreformer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 00:05:01 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Fri, 04 Dec 2026 00:05:01 GMT; Secure; SameSite=None\nPTS=AoKhbNJpA_0toWMB; Path=/; Expires=Fri, 04 Dec 2026 00:05:01 GMT; Secure; SameSite=None\nUID=251030190574caa541cf7d426fbf07d49089; Path=/; Expires=Fri, 04 Dec 2026 00:05:01 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3283,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3283), with no line terminators","md5":"21b29623a60cff6e2d5a827a58efead1","sha1":"7f0f0e0fe4dcefc5d4a1fe711d629b8b951214d1","sha256":"c90059d00a7ead9306339211a792fc72a691865b71ccde500d0641d1c2f89365","sha512":"d64f09e5ff64f975514237125674f9b17ad1f25728ffa61ec5b64389e264b42a0405dd9aaa517efb9375403567e97130e503bfb7cf34278290d5ab1e33d3989c","ssdeep":"","tlshash":"a3618596e9cad9939997ec9c8978bdc54cde8ca6ae27111b0434c40213daf739dc702e","first_seen":"2025-10-31T00:05:45.042466Z","last_seen":"2025-10-31T00:05:45.042466Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"driverhugoverblown.com/solid.gif?z=1988026\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.627-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=Ord-7bcKmZpiyzUDVIIHN\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=aCTxKpyaHR0cHM6Ly9meGdneHQuY29tLw\u0026afid=8559715154713088\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026dto=2\u0026pload=2049\u0026rlp=%5B0%2C91%2C298%2C159%2C2598%2C27804%2C4067%2C27455%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5","fqdn":"driverhugoverblown.com","domain":"driverhugoverblown.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:01.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"driverhugoverblown.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:23:57 GMT","end":"Wed, 21 Jan 2026 14:23:56 GMT"},"fingerprint":{"sha1":"AB:39:B2:8C:70:D6:0B:38:B0:1E:73:99:51:2D:35:30:EA:6B:4A:70","sha256":"86:18:14:14:6C:52:E9:C3:AC:03:AF:10:49:19:37:24:9D:9A:36:E6:1A:05:C8:1C:8E:69:BE:53:1E:CE:6F:65"}}},"request":{"raw":"POST /solid.gif?z=1988026\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.627-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=Ord-7bcKmZpiyzUDVIIHN\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=aCTxKpyaHR0cHM6Ly9meGdneHQuY29tLw\u0026afid=8559715154713088\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026dto=2\u0026pload=2049\u0026rlp=%5B0%2C91%2C298%2C159%2C2598%2C27804%2C4067%2C27455%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5 HTTP/1.1\r\nHost: driverhugoverblown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://fxggxt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 00:05:01 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-route-id: stats.tag.loaded\r\nset-cookie: CHCK=1; Path=/; Expires=Fri, 04 Dec 2026 00:05:01 GMT; Secure; SameSite=None\nPTS=AoKhbNJpA_0toWMB; Path=/; Expires=Fri, 04 Dec 2026 00:05:01 GMT; Secure; SameSite=None\nUID=25103019058b234b26f9e24ef7ac926f45ee; Path=/; Expires=Fri, 04 Dec 2026 00:05:01 GMT; Secure; SameSite=None\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"28e463819a210071de3b45ebe7633613","sha1":"6dccd571828ec0912629119cf7eabfea9f33ddbc","sha256":"44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84","sha512":"8a82ac5a7883cd9b74bdb561cf825ce86474e259ad8c445e538d697b0003e3f2b1d6edcd3dc6512f4ad16e9074da204a79938257c457ecf68f4329eac0182e67","ssdeep":"","tlshash":"04900003e280e082c3a0c0300e0ccb802b88a2308a28030fb0fc2baefc3a3a20c23000","first_seen":"2023-04-05T09:26:54Z","last_seen":"2026-06-19T22:26:28.141623Z","times_seen":22397,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/GuysInSweatPants-Laundry-Day-%E2%80%93-Orlando-Rivas-Florez.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/GuysInSweatPants-Laundry-Day-%E2%80%93-Orlando-Rivas-Florez.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 17:46:24 GMT\r\netag: \"38a7-69039fa8-6b9fb4;;;\"\r\nlast-modified: Thu, 30 Oct 2025 17:26:00 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14503\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 22714\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xGcrXsePXUPxFBVAj%2BMg2GPlW6Ex8wzA0oRsNgHtc0q0N9DrfSGsPlu7zCQCMER9IYZfbY4fbn7L8t2Wqe5fjtsuiW1wFQa55s8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5eda9094e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14503,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"8c6674818b254a6a4f737db3dbaf4f3c","sha1":"2fc90e30751ac40a8e1e8e04ed9326c6e5e69779","sha256":"38c577a14ef94e502d2e092f700ddd619ed709a76488837cbbfa9e88b0691322","sha512":"7b5523dff5517d3ad5ddad1b35927a9fb751a092170397bc26a63f27165b2a88c39ba4dfad9d878f035ef955af39dae479bc91ff3cc44c341a87be8cacb74a77","ssdeep":"384:F2wRBqCal69hKIA8GQFs5q8N/6mxFk6lsISpA4:FNqCalGd4qQfFk6s/","tlshash":"0f52c0a6cf051ebb21955662f53c12d782e68ad8e62037c71ddf1e02720381dcde1b81","first_seen":"2025-10-31T00:05:45.043619Z","last_seen":"2025-10-31T00:05:45.043619Z","times_seen":1,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/SeanCody-Baileys-Fuck-Buddy-Jess.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/SeanCody-Baileys-Fuck-Buddy-Jess.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 17:46:25 GMT\r\netag: \"372f-69039fb8-6b9fde;;;\"\r\nlast-modified: Thu, 30 Oct 2025 17:26:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14127\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 22713\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qTI%2Blkd4aEzGcgtetjUsKEKQMia87mmvnDXMHjlTS5ghRisDSPuUXrnYMZgRCjlALnKx14j5tiRYE1DBTcz23x7MhT9XN%2F57IYE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5edc9154e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":14127,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"44ec80af84ac4eda98f862e00dc94dd3","sha1":"ae3e98673d64c878fee8d72fbb4c7192e6f533e1","sha256":"869695fa0d4007fec71bfe935113017ca7b0098aafc5c7d67740e5c9445f8c83","sha512":"7831109de575f1e97d2547cb9bb08bbf397e7cca81f6f8bb7a1bc268ddb20a706e4ff795fa9e872d9fa496968e984f331583e52675cc39671a0f30640c073ccf","ssdeep":"192:BDZ6hhn+RttHpEoRVXJrKzDn/oK/6Q40MKL5TTz3UEep95wkSjMA8lnG7OIuBTo7:FshN06I5rK/t/6Yv5vAEe/5TSz7OFI","tlshash":"5852c116674b51c41d84dcd6f8d62267641ae191e488fec10c9f8d3568e228ceb44a7e","first_seen":"2025-10-31T00:05:45.044911Z","last_seen":"2025-10-31T00:05:45.044911Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/OnlyFans-James-Cassidy-Bryce-Jax-Carlos-Magati.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/OnlyFans-James-Cassidy-Bryce-Jax-Carlos-Magati.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 05 Nov 2025 21:18:12 GMT\r\netag: \"3795-69027c7d-6b9f1e;;;\"\r\nlast-modified: Wed, 29 Oct 2025 20:43:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14229\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96406\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9C%2FcT4%2Bm8qlx8XNd0uQKJE7c4iRVg95sCmRP%2F%2Fw%2FhT6cwh%2BnvUUDz%2FpClWeWodfkXZx5eEjqkpa%2F8iHJXM4%2BQMasiWNE%2Bf%2F9Kg8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee19384e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":14229,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"a475dbf5f30d61a8e108ec07dbdd0cc3","sha1":"d55f5fcab3c23ed88348a119bf23f53142fc96ab","sha256":"fa4e9ff0823ea34a9964bce7c25a557407d065b142b469b282f5431c06d1074a","sha512":"ef75806f3d5bd913b4258481b315c5bd8fbacaa3b5dacacaa29b882e883918816e403ae8ecbfa3cc335e562ff97fdafd03d6760014e961520055c6cd9a248bd6","ssdeep":"384:FwTKm4kXurBZ4ve/SPWQ20i5PLP56cJBjsG:FwTB4EuJ+WF0GF6cJGG","tlshash":"7d52d1af1b16ff98f82d83bf9e195e939449095450d5f9c23ce1724083a4be51d95223","first_seen":"2025-10-31T00:05:45.046143Z","last_seen":"2025-10-31T00:05:45.046143Z","times_seen":1,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2021/06/23cf211c569048dda1dbc263406e9374_1.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/23cf211c569048dda1dbc263406e9374_1.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 23:56:28 GMT\r\netag: \"33cc6-60d5527a-4ef283;;;\"\r\nlast-modified: Fri, 25 Jun 2021 03:50:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 212166\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 510\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FeT5OwPKdtccuQmK7kEIdW%2FesZ69OUSm8I0R4IY6OY%2FfUGfrraUy96WIxZUKrwl%2FIzzDW%2BBxsjMa6Au3e%2FDK9c5jzisDO%2FsbKfU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee695a4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":212166,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 1920x1080, components 3","md5":"51f54988669d5802e264d2ba97623f0b","sha1":"9fd5483b0c352ce98761003698ec6bf189056b38","sha256":"b9887fe364fa9973bf658ab9754b496a4ffbf7b53bb04dfbc4cc9811fb29156d","sha512":"acd85e24aa83d88dee72ad6cb30706ed9dd9ac0119ddf4e390cb655453fef3a5818c00876051d25d2ec8eaafa373a00faa21c7f53ae5feff4bad759088d32f28","ssdeep":"3072:htvxuAM+gzzxXbeT4DX5wGPmduZ1wmWERIG311nDnpSvGlGFMz2V3cDts:vPgvx6kL9/rtRIGl1nDwmGFo2V3cDts","tlshash":"a824124e5bda4b1cf1b40934c15e86bcc2e001adefd6e0d1707a2fab259893d1b1cea5","first_seen":"2025-10-31T00:05:45.047382Z","last_seen":"2025-10-31T00:05:45.047382Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2022/12/RFC-Fuckin-my-boyfriend-TheBeardX-Lichu-Grosso.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2022/12/RFC-Fuckin-my-boyfriend-TheBeardX-Lichu-Grosso.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Oct 2025 15:38:31 GMT\r\netag: \"3763-63a8ae25-5af2a0;;;\"\r\nlast-modified: Sun, 25 Dec 2022 20:10:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14179\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 105317\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZM67UxbmS%2F%2B6xec9ixIUbCHWT6lRYwu26BehKndbgpCGnyWJlTRHkblrVAealoSqH%2FbvULVtWMYHjA9sJhnYXM%2B7FXSmRzMCU44%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee99644e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14179,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"3c4f4717e89ea910a9f27e1358e79e93","sha1":"0ed0a19df3850b648be4df9438980b0d87b6e6f6","sha256":"4fa90cf0d4335bf7e8f0914c3c22025c705bd7f92f0c8a9e3574714229b8fbea","sha512":"6ab633c9d799bf17281bcf0f16baf723e1d29f065007c75983426612b1f02c85eee13de6b008099369530d9f45d7022c83e359408198d3a644053d469aa8a472","ssdeep":"384:F7YgCo3FuGgIPr5y/oTV7ru8wGSG8NQoV19z9Sgnm:F7NFuGDr5y/O7ru8wXdNQoVQim","tlshash":"ab52b0c10346f1f69f8081d1aee703224248a6265de9fac6fe2e8251f9917d5f15e5c8","first_seen":"2025-10-31T00:05:45.048712Z","last_seen":"2025-10-31T00:05:45.048712Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2021/04/cropped-Logopit_1617545426773-192x192.png","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:00.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2021/04/cropped-Logopit_1617545426773-192x192.png HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Sep 2025 00:52:24 GMT\r\netag: \"8f6-606990c8-4f1514;;;\"\r\nlast-modified: Sun, 04 Apr 2021 10:11:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 2294\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:05:00 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 330861\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fXsTfCpNC%2FLm8c4MpmLRQKdEVeyhtFnsZmtdHY4ixjiNzpHu%2BkAPu69lEyyYts3MbALAm1IypDk8f44E2BC5r5x9bPEIb0cW9%2Fc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5f709e34e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2294,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"96251be5e1d2a2c19885bd57d2d2229f","sha1":"01049940250d82d57b7cb81162784762039dfb91","sha256":"c5e5cf18b42db0a17e05b60380f8e04f8453546e93c07e1247dbc7271fd857d2","sha512":"f9e1d0cbec4463cb77bb0652cd05391ef8d350eebfef571956a7d7e38f03a6a37b953e1dd6287c028f4d308d0b8ca2e0b2139b3a416a10077eaf3ede79535b11","ssdeep":"","tlshash":"2c411ba5d30886c9c948ddb7338c90f2157cc2377c43d89ccf49c62c9686b938a6b64c","first_seen":"2025-01-04T11:18:01.811023Z","last_seen":"2026-06-11T05:03:54.521329Z","times_seen":9,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-8RMNSQMQGD","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:01.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:32:04 GMT","end":"Wed, 24 Dec 2025 14:32:03 GMT"},"fingerprint":{"sha1":"D7:8C:7A:D0:97:B6:11:02:45:69:BD:62:90:53:49:F8:8D:01:20:26","sha256":"F3:B2:48:55:BA:37:4F:37:37:83:8F:61:8F:04:B7:1F:E7:6F:4D:1A:D6:71:F7:BA:2C:E5:C4:45:B8:D7:B7:7E"}}},"request":{"raw":"GET /gtag/js?id=G-8RMNSQMQGD HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 31 Oct 2025 00:05:01 GMT\r\nexpires: Fri, 31 Oct 2025 00:05:01 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 138521\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":410798,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"806d881ca94bcc8d9810c7497b903b60","sha1":"f7f8f47e0d9dbfabc9cdfa71b0e5d3d9ca210277","sha256":"5de83b438619774595a689d7d78e936fab753d36f6488c35f29d2a48eb4969ac","sha512":"555cbad26cc153adc86d3eb63d7b8cbd3acac4f0882276d02301390fc6ce7b83a94fdaaff33a6a72a529cdfcecfcbc088f5f1ea62be5e0c41d8780bb82197047","ssdeep":"6144:VBe5HIy2n8fud75KGq6A0RI6TLiYYg/FOY9ftLHAJ+aAMn/xS2GJa:rqHITiud75KGq6hvLiYlAJhh","tlshash":"ee94198e73c674269396f078503f118ba57b29e2b45cc896f189cce42d74a9a4237f7c","first_seen":"2025-10-31T00:05:45.036481Z","last_seen":"2025-10-31T00:05:45.036481Z","times_seen":1,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.chaseherbalpasty.com/static/video/bn/bf3/7d0/56d/bf37d056d84d92ce50d337c48e4cb6ab143cda69.mp4","fqdn":"www.chaseherbalpasty.com","domain":"chaseherbalpasty.com","tld":"com"},"ip":{"addr":"94.242.247.20","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:02.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chaseherbalpasty.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 01 Oct 2025 00:00:00 GMT","end":"Tue, 30 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"33:A3:14:CC:01:76:4E:33:44:46:15:D3:60:37:E2:11:39:59:F0:06","sha256":"29:67:DC:3A:7D:72:3E:0A:8C:3E:94:18:A0:47:AF:E8:3B:57:B6:5A:F9:C9:9B:5F:4A:36:73:3F:09:96:29:01"}}},"request":{"raw":"GET /static/video/bn/bf3/7d0/56d/bf37d056d84d92ce50d337c48e4cb6ab143cda69.mp4 HTTP/1.1\r\nHost: www.chaseherbalpasty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 00:05:02 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 952885\r\nlast-modified: Wed, 15 Oct 2025 18:51:27 GMT\r\netag: \"68efed2f-e8a35\"\r\nexpires: Tue, 30 Dec 2025 00:05:02 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-expose-headers: Last-Modified\r\ncontent-range: bytes 0-952884/952885\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":952885,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"87ef915cc39e1ca0204ebda8289b4f52","sha1":"bf37d056d84d92ce50d337c48e4cb6ab143cda69","sha256":"a5c2f77a616c7caf3801bb24f99ee6ac1c6cc2bc85c0d79f4224779e39a16249","sha512":"c2fd78f56f77aaec7442d725d8e0638dcc408ea40311adfdb7d00eefdbcaef3f6026b8a43f36801240c172391585f4c81276c9a61e02ae6f86398751a84c9b81","ssdeep":"6144:WAFoTGEP7FgOxU0zl9IJ9QJGas83T2q2cw8bHJ8cufvnC2IuWCe:WCqG27F5xU0J9IJ94GA3T7HbpufvtWP","tlshash":"b6157b6e0d964132ff4cfa3e9494c867d8e05a15c9c6c30fb95c09118bbe25a47bf4ba","first_seen":"2025-04-13T17:07:16.972621Z","last_seen":"2026-01-28T02:27:55.924774Z","times_seen":975,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/OnlyFans-Aaron-Burke-M-Vee.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/OnlyFans-Aaron-Burke-M-Vee.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 17:46:25 GMT\r\netag: \"2ad0-69039fd0-6b9ff0;;;\"\r\nlast-modified: Thu, 30 Oct 2025 17:26:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10960\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 22713\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GFm4qjO0neGik%2Br99KMQifxho%2B%2BbqoU0EgmJsxF1C%2F7oo3WUw2hkn8EyNjtC2oWitY1qZO%2BSzXR4nMJpXTBMhSOBpzIof0qHk34%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5edb9134e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10960,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"d0b86026b9a7c7318de92e0f6d0c648e","sha1":"9210558800b3cd339a87bc977df2c1150e501533","sha256":"b32fd1cd76f03ba46cd1db21181876df0935c203e6b46e10b460d5bdedd237d8","sha512":"75a4183cf6f5e3dc9aa0c17b579a18526c4f85746a9db85037d7d3d319ea9847d715578d9cab5b97561280a52af147941df7d1f8ad665385af1d573f2a19dc26","ssdeep":"192:BDF4c7Sm6JT92Le+xfVkKPmdDe0HGqgsRhu14ojamO8bM8P521vRW9wKVf0P:FF4cemjJxfVxz0HGEhu14elxbMyEDQaP","tlshash":"db32b01b9bad6197e8540aeab094d0d8f3e86bc4f483b3729cc94db0c8418765492f1a","first_seen":"2025-10-31T00:05:45.050897Z","last_seen":"2025-10-31T00:05:45.050897Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/OnlyFans-Logan-Stevens-Reece-Scott-Patrick-McDonald.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/OnlyFans-Logan-Stevens-Reece-Scott-Patrick-McDonald.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 18:41:20 GMT\r\netag: \"5a21-69039fd6-6ba014;;;\"\r\nlast-modified: Thu, 30 Oct 2025 17:26:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23073\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 19418\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tHR9Sh4PDy1FxNDeIYoxzWnJ5AL10%2F6WNdxChE6m7XUjp%2BQ82QMTfgSy77tDakLcBmNW7PHZglrxgMxIHG6bz8jDHPqiKQXQSDg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5edc91a4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":23073,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"527f1c8ec56c247b32e3c95fc50a73d8","sha1":"e4c55eb6357d5cb5e591c3567bd77115953ee1ce","sha256":"d6c94482f033c3152971492f181dc0f34b43235bf55092c48d5fa0acf5fe6544","sha512":"7cceb9cade8f49b27a8ae4b1518527e68f1a27588b7c1a1ca0d8542f3ed896f0e8ab6e360f72d86d2e868f2851ce99e1997bd00bbfeb0f03b538efdbd4d93559","ssdeep":"384:FKtuPqF7jPEAAtGrwNhRwQjo2g0tqkUD6rsEjXDlHXGRCtRcbvkfD//G/ahE:FojdAtGrORZorIrLjdXGRCwbvYAahE","tlshash":"eda2e08503578702ab419e224efe13d6019a49c0f13635145e2c93cf27762cf2aee664","first_seen":"2025-10-31T00:05:45.052258Z","last_seen":"2025-10-31T00:05:45.052258Z","times_seen":1,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/OnlyFans-Eddie-Burke-Jake-Mathews.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/OnlyFans-Eddie-Burke-Jake-Mathews.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 05 Nov 2025 21:18:12 GMT\r\netag: \"40a5-69027c7d-6b9f18;;;\"\r\nlast-modified: Wed, 29 Oct 2025 20:43:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16549\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96406\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aaRcDj6DFCf3VBhozz6z1IseagPW2%2B4yzBulHpDR%2F04CF7w4fLLVKnA7%2Bs1TuOXPklV51E%2BRAk%2FDysR7R3Yp5gwfu1oOriPR%2BVU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee193f4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":16549,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"4a51c6d4e47d83692dd3bc96e1aa6ed4","sha1":"35430535e4d1617ab88f58fc5d47328faa7c0aaf","sha256":"6c5068d1d27df113990c11b28b6ec134e67413b29c37946f015b56641ebc246f","sha512":"9d91f293307dde13c8d4154147c74311ba1cc5cc88d924f4729bd3d1d6059f4363df06e03d8e40e3bf55acdc171fd8794ea9d5950c021ff84ded02dfb4bcf318","ssdeep":"384:FuQjjuj9rNlVZ4uYI5WBff84g89jtQYj7W/T9X6+5r2:F/fupFZ4uYIMbyYkxX5K","tlshash":"2772e093a304476047ba22740c4002a9f15fdfce6115b7be1dff2d2a7a8425bfd157a9","first_seen":"2025-10-31T00:05:45.053539Z","last_seen":"2025-10-31T00:05:45.053539Z","times_seen":1,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/05/rfc-the-hidden-god-versus-the-satyr-hole.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/rfc-the-hidden-god-versus-the-satyr-hole.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 04 Nov 2025 18:35:29 GMT\r\netag: \"7d5b-681b817f-669fbe;;;\"\r\nlast-modified: Wed, 07 May 2025 15:51:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 32091\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 192569\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=23Bah6wcqamWl2WbeX6sP%2FWzrMp6DCYeq5397XwqK0kC8GhzJRAjRuwxRqrIti6X6%2FF9C7vrvuJgJRmdhCXxNSvE8bAZL3MoJ8g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee19464e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":32091,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 590x331, components 3","md5":"be43b968bce95996de7e755583cd1d96","sha1":"20b21a6db78e4f8fc3527da8df8b59dca966a3c6","sha256":"93a0749d70b214a3d05dcf46d115352c1938d6bd6793a86aca7dd5d943f72bc9","sha512":"e33e0602380beaa1263cd38f325677c181f8b311c61a5aec189bc53e0a5ffa354647424f0e1e8bc694e334dcf3898883e0fc3c6f2afd72b3c47c5c5386f9c537","ssdeep":"768:5J/OS3vuel/XQDDVHkInVNbFD34tFdl2Iy07tx61nt:LHllPSDJHJsPD7tx61nt","tlshash":"c4e2e001db24b5a5d371017b897b1b733bb39910aa6016fc386d49c5be6fe73228958c","first_seen":"2025-10-31T00:05:45.05494Z","last_seen":"2025-10-31T00:05:45.05494Z","times_seen":1,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2023/09/OnlyFans-Holden-Hunt-Sawyer.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2023/09/OnlyFans-Holden-Hunt-Sawyer.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 04 Nov 2025 23:52:37 GMT\r\netag: \"31d1-65119fec-57385c;;;\"\r\nlast-modified: Mon, 25 Sep 2023 14:57:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12753\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 173542\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ODcb4PTFb6sOK0WE9HtX2INwpMPRxJclSeoPStQlvh6atkwh8kpA6U7fwXihXRva1FKNg1hG%2Fc16mx6B1j8acARwYIFPcRSPO7c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee19484e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12753,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 400x225, components 3","md5":"4bda860c12169828ea6d565b280cab70","sha1":"e7496d32034cf7d860ca68e211f90979d940133b","sha256":"2abef32924d97cf35850e816d243191e172463fb66552f8d457079c44c2d2a61","sha512":"0893d749781657570a03dbeae4064c09d4d8b6e3e7248321e5c709617f1783e01e098030d6ca94954ff07172648e7226a55de5eed7690afa238ff486c249eb60","ssdeep":"384:SmiNMSliV1lSPDOv/W35Zs3ZoKQC0z6h77:SmTV2Ov/W35ZgZvp0ehn","tlshash":"d642bffe07c094d8f8c164e158b210f55b4bc5641e6c7d029dad4ab783aea992dfc83b","first_seen":"2025-10-31T00:05:45.056174Z","last_seen":"2025-10-31T00:05:45.056174Z","times_seen":1,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2023/10/BreedMeRaw-Jonas-Matt-Dan-Daniel.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2023/10/BreedMeRaw-Jonas-Matt-Dan-Daniel.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 22:01:08 GMT\r\netag: \"2ed2-6527e81b-5309a4;;;\"\r\nlast-modified: Thu, 12 Oct 2023 12:35:39 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11986\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 7430\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dSZWA9FUR4TuqNoISAoV%2BKVCbEizibp8xpmfRDrPsQ0ArrhqVgvJAFr1uC2%2FX0lH2ePMlwIy6htyRUx6QhrDTaU5Dbz56KpreLk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee69574e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11986,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 400x225, components 3","md5":"a3d0a95204564251f96c5529d85681f3","sha1":"fe5ce03d7343ff3d5c64810cf38c6308c9377a3e","sha256":"dc97b77f2b3a2572752c6b4d24064c3d6351a1654dc52da05d1fc11b0cc7f1c0","sha512":"0d63fbc3c817eeebb66fc85fd0d5478676d0d007acd42cde3c40bbe943fc86871669e4d918b46004314b8e227809e7474bc2c57cb86d093997bfa4006fe0dd74","ssdeep":"192:xI8FD0rcBiQtVJ3ZyvwXSY8GIUardzDVqXFkLbbrMD8FYkgWiS+0OjWq:CG0Kp8vwXNITfqXF8sD074SGWq","tlshash":"5132bf1b37339614dee2d73a5810332215b9f6c96e85bcd12cac6be30180dd950ad9e4","first_seen":"2025-10-31T00:05:45.057398Z","last_seen":"2025-10-31T00:05:45.057398Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2023/03/OnlyFans-DeepDick10x7-BlssdBoyNYC.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2023/03/OnlyFans-DeepDick10x7-BlssdBoyNYC.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 23:56:28 GMT\r\netag: \"26d7-64147516-5ee368;;;\"\r\nlast-modified: Fri, 17 Mar 2023 14:11:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9943\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 510\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2EGldZo%2FzUzWgM34ffkx7CEvdUzlkVLp9iYoEZv7TT9Px%2Bwrz1zzPS9mb3SUhrm%2BrzkdQzpWP6M0p5Lq4zAcDlm6ovAyG6FFBpc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee69594e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9943,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 400x225, components 3","md5":"7c32b5221679fadbbede9cda66c76ec5","sha1":"0bcf7ab7bbe4c5a557394a1b4f0dcd1f24dc7ca1","sha256":"b741748b4478ca56707e94b070deaba19e7e34ec78be0e698ac7ea981fcfed5e","sha512":"d56c94af69109f9813dde3cc10991b8ea9a39bb2bb858fccfcb54665c0740f39a17e5c12cb2139335472b545f3e3adab0e01cae6ec7454fbb237e86a3709d426","ssdeep":"192:BIxjvlyCUgisakVXblExFuxjJeeLF/6bAqneJlBbKPd2L3Bq:SIgnTllsFKIeILeJfMt","tlshash":"d322bf8f1b432150a27ac4fe19f853bdfb99a5ac204032fd0e1278e5a9203d75049fe8","first_seen":"2025-10-31T00:05:45.058535Z","last_seen":"2025-10-31T00:05:45.058535Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/themes/retrotube/assets/js/skip-link-focus-fix.js?ver=1.0.0","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:00.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/themes/retrotube/assets/js/skip-link-focus-fix.js?ver=1.0.0 HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Sep 2025 07:28:46 GMT\r\netag: \"2ab-68ac9c47-7e010a;br\"\r\nlast-modified: Mon, 25 Aug 2025 17:24:23 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 329\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 31 Oct 2025 00:05:00 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 300800\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1rVsguAsdz5dxUQ8b%2FRzamaViUUyIPdbC7uSW3hzBKpyqOVTboMONQYRYVX97U%2FG%2F0jbuVb3QuCoHnILA6hMuiX%2BZKLLkUCDk8s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 996ee5f449c84e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":683,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"75abd4cd8807b312f9f7faeb77ee774b","sha1":"e7b7a7ed06d0123ab8667a1d1eeb23de9f2bece7","sha256":"ca424c0181141900220a19f998ffa7660380bc99ab99557ad458a083251f7034","sha512":"c9f1f752994f1361555680ca5a60339fda152587ccc055db20148c086d82846887dd0801187aa033829b7d5eb9644b9391f493965eee35b4a1592f82cbb36aa4","ssdeep":"","tlshash":"bb01cbb6b30d44b604aa32178d5f61cd297d91e3a829649b8cc909502924c6d23befb8","first_seen":"2023-03-07T01:03:28Z","last_seen":"2026-06-20T01:50:30.34917Z","times_seen":12257,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2024/11/BlakeMason-Hole-Swapping-Twink-Boys-Kamyk-Walker-Liam-Zayn.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2024/11/BlakeMason-Hole-Swapping-Twink-Boys-Kamyk-Walker-Liam-Zayn.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 23:14:01 GMT\r\netag: \"3038-67435542-5386a6;;;\"\r\nlast-modified: Sun, 24 Nov 2024 16:33:06 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12344\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 3057\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tN8BRZiJtzfaP16%2FOejQq2EuVx6W2JsfqNmsT9aIglK7Qq2SzdkiPq8wvJB%2ByuG3FHxAWqETEc%2FHbT%2Fzpu486P89LmJgNpqoLdQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee59534e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12344,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 400x225, components 3","md5":"de75bfc4b1c15082c1be202c33fc081a","sha1":"dc7d67952461726b4a706c0da24ae016d6f6e598","sha256":"edcbc6df7912f6cbea94a966901d8e06d8c3b2bc1ba2e91fb732e8ae8efe3724","sha512":"a42869689d9a62109c10519552ea702626def76a0eae16e17a9a80fb569c8a6a37187b99b6a45b9badc19d25ff6f2709523968a456e6b8bac738112fe2651a48","ssdeep":"384:SYsmYziRDFws5g5WV84MQynJMpUgE14WCe5v90T6n:SYIe/wsmGyn+OgE4k10T6","tlshash":"f442bf44771b6792a4439c7bc3ad697482c78a1b3348fb405c1bb159ef0062ce92ed61","first_seen":"2025-10-31T00:05:45.060312Z","last_seen":"2025-10-31T00:05:45.060312Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/05/beefcakehunter-ginger-haired-beefcake-landon.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/beefcakehunter-ginger-haired-beefcake-landon.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 05 Nov 2025 02:02:29 GMT\r\netag: \"5f41-681b797c-668f2f;;;\"\r\nlast-modified: Wed, 07 May 2025 15:17:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24385\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 165750\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BEwVjBSKCednSSemFzaVokzZEkch7YLtfcPq7bexdlGXpAhNXbgKmDBkhH7%2FfRjsBWSMArj2FO62RTMrkqE60OE%2Fzj%2FOjFGc3YQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5eed97d4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24385,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 590x332, components 3","md5":"d23564e80f1935b846fbcec70662cd1e","sha1":"5c52c1232d2810e26593ea0b79ac732a312b67ad","sha256":"708026271cb2c0431405785a301a61ca9e09d796a736dab26d369849d0abcd19","sha512":"9251a91b78ac08a5e3b5dbe08de7ec515a7f1b746830060e901cb5f48556596a32217ff94d03edcc25a116d9a1ef4ee864274ca36dceb0fae242f4aee4049e8e","ssdeep":"384:WYVY/ba2UQy3ormQ2UTqNFfD4zNE9DqVUCnfKFx3Pb7KfBWFgrfi5tqi3Co:WYwMQBmGTa0zNEayFx3POWFg0XJ","tlshash":"abb2f19798ad7870ff8989f41490e3f49603b8f43705b7b8008908ab6dd2a7d33f1244","first_seen":"2025-10-31T00:05:45.061473Z","last_seen":"2025-10-31T00:05:45.061473Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"driverhugoverblown.com/on.js","fqdn":"driverhugoverblown.com","domain":"driverhugoverblown.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"driverhugoverblown.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:23:57 GMT","end":"Wed, 21 Jan 2026 14:23:56 GMT"},"fingerprint":{"sha1":"AB:39:B2:8C:70:D6:0B:38:B0:1E:73:99:51:2D:35:30:EA:6B:4A:70","sha256":"86:18:14:14:6C:52:E9:C3:AC:03:AF:10:49:19:37:24:9D:9A:36:E6:1A:05:C8:1C:8E:69:BE:53:1E:CE:6F:65"}}},"request":{"raw":"GET /on.js HTTP/1.1\r\nHost: driverhugoverblown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 30 Oct 2025 14:25:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6903754b-261ac\"\r\nexpires: Fri, 07 Nov 2025 00:04:59 GMT\r\ncache-control: max-age=604800\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":156076,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ce9a055ef3be68028027854e6f4ee75b","sha1":"dc8716fa1320e220e260e7ad34e2eb3bba95be04","sha256":"aae99139dcd5abda531bea2c2b797940f64fa0cdf8194aaca8a2635f3fff19cf","sha512":"2f77ce62eaa63e5d506acaf57a5d40e68a958fad288d3a9a57523cf6fea0c537f8bd392568524508247427b215d9f9e53dd7fb402d0da625069897b274a622b7","ssdeep":"1536:MnTw9cCrkxGxkVNrTmdU16cT9TRdyuQDr9wLGHYSpryNDCz2PG1DLZG3bUpP+8i:Mk9cCnxkV1m7cT5xKrKLGjpGeDLk3F","tlshash":"cce3a49d67cb20350303a029cc3f5627a9355ddba89dc590d9bfc1cce8b560bd12abe9","first_seen":"2025-10-30T16:20:15.292553Z","last_seen":"2025-11-05T13:40:53.471314Z","times_seen":121,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":19,"connect":23,"send":0,"wait":34,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2021/04/cropped-Logopit_1617545426773-32x32.png","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:00.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2021/04/cropped-Logopit_1617545426773-32x32.png HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 07 Sep 2025 12:23:46 GMT\r\netag: \"170-606990c8-4f146f;;;\"\r\nlast-modified: Sun, 04 Apr 2021 10:11:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 368\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:05:00 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 382582\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ujt9azjJXHHb6jbIIHGBB5E%2BlJrSJUKWx9brqsmwRrJ6MHgms%2F45ejI5%2BWCY629Qf5e%2FQlIhq3RgbCKj7%2BcwHRM8Ga7u1FhS7Hg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5f709e44e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":368,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"477f3f04473093da7b4c60b8da0d7f4f","sha1":"48aceca8330819902784672e69d942ddd2b3f42d","sha256":"387f047845493cedd4075551092952aa13e94ebff41cf892acd596c3c987e5ac","sha512":"fedcda1c63ad18ce2ae88e4aa5aafd08a5ffcea2a1b83117fb48404ec92b655e173f8db301b2a7f29a6de025f7547682445616d8bb4161bf81627a735a916be1","ssdeep":"","tlshash":"f3e068c5c0568588a4c0e233aa376144c87398e0997f334c1a22cce38235da261a6563","first_seen":"2025-01-04T11:18:01.809156Z","last_seen":"2026-06-11T05:03:54.446768Z","times_seen":9,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/cdn-cgi/rum?","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:01.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1008\r\nOrigin: https://fxggxt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D; __PPU_cl_tl=AoKhbNJpA_0toWMC; cf_clearance=GmFI4H0ck8eRBc2gB1a_ES8KXuahlUae4A4KM28EtFk-1761869101-1.2.1.1-_kppeLjUjIX9DWmequxjK0g_Aik.lXnXoPlM0VUchpCxYA1UiO_eHhAaCVkPSwdlur403IUeLTfTkW0LwB7fKRuTShVOC9Fr7__UDYfkrggAJQw6wZ8IqSgHg_.RNwRyrP1h6E5ElbCTAr9O9sdzQodIp0oz.WDqcb5pMdn6puPJdg3LM7gGgg.PmybAD_TGuKe0S8Bt5HvStipkdykG3xA5sT.gHrBe_wlF8WCwz9w\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://fxggxt.com\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iJM594gmHLGfgu3r2477fk8QinTrpbURhhRpamYyh3gKLsPG6KC50N%2BJvVy4nPrEgzmjRB8j62mPqmW6HBwp%2Bc1XZDRvIPAFUSw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 31 Oct 2025 00:05:01 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 996ee5fc8a354e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/cdn-cgi/challenge-platform/h/g/jsd/r/0.5886085675852252:1761865991:wFgXvh_kX1fz3NpaDJQPX9g8nWZRpSwQYaX3cfZoStU/996ee5ea0b2e75ab","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:02.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/r/0.5886085675852252:1761865991:wFgXvh_kX1fz3NpaDJQPX9g8nWZRpSwQYaX3cfZoStU/996ee5ea0b2e75ab HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12070\r\nOrigin: https://fxggxt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%22CAIFRQ%22%3A%22ADPmGAAAAAAAAAAEADNFZwAAAAAAAAAC%22%2C%22CAIFRT%22%3A%22ADPmGAAAAABpBAoQADNFZwAAAABpBAoQ%22%7D; __PPU_cl_tl=AoKhbNJpA_0toWMB; cf_clearance=GmFI4H0ck8eRBc2gB1a_ES8KXuahlUae4A4KM28EtFk-1761869101-1.2.1.1-_kppeLjUjIX9DWmequxjK0g_Aik.lXnXoPlM0VUchpCxYA1UiO_eHhAaCVkPSwdlur403IUeLTfTkW0LwB7fKRuTShVOC9Fr7__UDYfkrggAJQw6wZ8IqSgHg_.RNwRyrP1h6E5ElbCTAr9O9sdzQodIp0oz.WDqcb5pMdn6puPJdg3LM7gGgg.PmybAD_TGuKe0S8Bt5HvStipkdykG3xA5sT.gHrBe_wlF8WCwz9w; _ga_8RMNSQMQGD=GS2.1.s1761869101$o1$g0$t1761869101$j60$l0$h0; _ga=GA1.1.1850737930.1761869102; _ym_uid=1761869102606664545; _ym_d=1761869102; bnState_2018930=%7B%22impressions%22%3A1%2C%22delayStarted%22%3A0%7D; bnState_2018929=%7B%22impressions%22%3A5%2C%22delayStarted%22%3A0%7D; _ym_isad=2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Fri, 31 Oct 2025 00:05:02 GMT\r\ncontent-length: 0\r\nset-cookie: cf_clearance=lT7dsTIadnsaB81wuuOXRCVwkFOXfIYwH9gq1C94MuY-1761869102-1.2.1.1-MSg0Tswg3W26A9koq6FFo6GcXWTx8w_QHigUf4I2lbKRBmoN0IgtVXODHpeqIgMvDksiO_Q9Hb3G5TE5EEeksUdSjkIYox8DAaeS23GcMD7XzGhD2vHKDB9fXBrC7_jK3WRFuMUenCBC7lzFPffwZjQnNtYTJuSmkZ1QjFc1G.18j7dEseiIsx8W5Zup236VMhjmWvgUjjlnyhVy5TExoV4zH_OflEo92jc0Kw8LAIo; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=fxggxt.com; Expires=Sat, 31 Oct 2026 00:05:02 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 996ee600da8a4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.chaseherbalpasty.com/static/video/bn/bf3/7d0/56d/bf37d056d84d92ce50d337c48e4cb6ab143cda69.mp4","fqdn":"www.chaseherbalpasty.com","domain":"chaseherbalpasty.com","tld":"com"},"ip":{"addr":"94.242.247.20","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:02.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chaseherbalpasty.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 01 Oct 2025 00:00:00 GMT","end":"Tue, 30 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"33:A3:14:CC:01:76:4E:33:44:46:15:D3:60:37:E2:11:39:59:F0:06","sha256":"29:67:DC:3A:7D:72:3E:0A:8C:3E:94:18:A0:47:AF:E8:3B:57:B6:5A:F9:C9:9B:5F:4A:36:73:3F:09:96:29:01"}}},"request":{"raw":"GET /static/video/bn/bf3/7d0/56d/bf37d056d84d92ce50d337c48e4cb6ab143cda69.mp4 HTTP/1.1\r\nHost: www.chaseherbalpasty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 00:05:02 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 952885\r\nlast-modified: Wed, 15 Oct 2025 18:51:27 GMT\r\netag: \"68efed2f-e8a35\"\r\nexpires: Tue, 30 Dec 2025 00:05:02 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-expose-headers: Last-Modified\r\ncontent-range: bytes 0-952884/952885\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":952885,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"87ef915cc39e1ca0204ebda8289b4f52","sha1":"bf37d056d84d92ce50d337c48e4cb6ab143cda69","sha256":"a5c2f77a616c7caf3801bb24f99ee6ac1c6cc2bc85c0d79f4224779e39a16249","sha512":"c2fd78f56f77aaec7442d725d8e0638dcc408ea40311adfdb7d00eefdbcaef3f6026b8a43f36801240c172391585f4c81276c9a61e02ae6f86398751a84c9b81","ssdeep":"6144:WAFoTGEP7FgOxU0zl9IJ9QJGas83T2q2cw8bHJ8cufvnC2IuWCe:WCqG27F5xU0J9IJ94GA3T7HbpufvtWP","tlshash":"b6157b6e0d964132ff4cfa3e9494c867d8e05a15c9c6c30fb95c09118bbe25a47bf4ba","first_seen":"2025-04-13T17:07:16.972621Z","last_seen":"2026-01-28T02:27:55.924774Z","times_seen":975,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":216,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/RFC-Dom-and-sub-scene-part-2-of-2-%E2%80%93-Breakhimx-Levy-Foxx.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/RFC-Dom-and-sub-scene-part-2-of-2-%E2%80%93-Breakhimx-Levy-Foxx.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 17:46:25 GMT\r\netag: \"6816-69039fe7-6ba05c;;;\"\r\nlast-modified: Thu, 30 Oct 2025 17:27:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 26646\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 22713\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bEgIJzW7QHf2CUz6mjJk5uVGYj71PzjnVcVXlE8XVY3%2BN%2FWRtLmOGLPlW3qwhq1h2C2vgMDwVphfhh6yhvnuc5KYwejNapQ1Aro%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5edd91d4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":26646,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"1761903806756468aa4ed3f1a729405a","sha1":"9589747ad0be2582783acf6ee24cde716f499a9d","sha256":"a4a6877018dbf390677e7b6f6d5709a306fb948510a46050ecc984c3255392e0","sha512":"40c2a03b3a117af99a75077d554de4747f81e4d57d2979adb852537ed5a2c84327b8ee335c5b2246b307e02ce9900eccc1406c140f6f9fb45a3e672641bce53b","ssdeep":"768:FDY6+oqCgDLW3fKNmIyxAJOqpox0e5YptxOn:FDY6dMfW3yEJxS5pQ5ksn","tlshash":"e4c2d0efff94391979729e6b03cf228e28248fe13dd164857a4474dd2c213408d9eb96","first_seen":"2025-10-31T00:05:45.063484Z","last_seen":"2025-10-31T00:05:45.063484Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"driverhugoverblown.com/get/1988026?id=1988026\u0026jp=_clladtxmuugtlbdrsovapd\u0026dr=49\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.627-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=Ord-7bcKmZpiyzUDVIIHN\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=aCTxKpyaHR0cHM6Ly9meGdneHQuY29tLw\u0026afid=8559715154713088\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026dto=2\u0026pload=2049\u0026rlp=%5B0%2C91%2C298%2C159%2C2598%2C27804%2C4067%2C27455%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0","fqdn":"driverhugoverblown.com","domain":"driverhugoverblown.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:01.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"driverhugoverblown.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:23:57 GMT","end":"Wed, 21 Jan 2026 14:23:56 GMT"},"fingerprint":{"sha1":"AB:39:B2:8C:70:D6:0B:38:B0:1E:73:99:51:2D:35:30:EA:6B:4A:70","sha256":"86:18:14:14:6C:52:E9:C3:AC:03:AF:10:49:19:37:24:9D:9A:36:E6:1A:05:C8:1C:8E:69:BE:53:1E:CE:6F:65"}}},"request":{"raw":"GET /get/1988026?id=1988026\u0026jp=_clladtxmuugtlbdrsovapd\u0026dr=49\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.627-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=Ord-7bcKmZpiyzUDVIIHN\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=aCTxKpyaHR0cHM6Ly9meGdneHQuY29tLw\u0026afid=8559715154713088\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026dto=2\u0026pload=2049\u0026rlp=%5B0%2C91%2C298%2C159%2C2598%2C27804%2C4067%2C27455%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0 HTTP/1.1\r\nHost: driverhugoverblown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 00:05:01 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Fri, 04 Dec 2026 00:05:01 GMT; Secure; SameSite=None\nPTS=AoKhbNJpA_0toWMB; Path=/; Expires=Fri, 04 Dec 2026 00:05:01 GMT; Secure; SameSite=None\nUID=25103019059c4c50d89fff4177ba3e2961bd; Path=/; Expires=Fri, 04 Dec 2026 00:05:01 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3254,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3254), with no line terminators","md5":"9f4f2eec9022dc9d3dd9d64c6d330558","sha1":"87e80ded335b1c20144aeb22fda171743cc4a56b","sha256":"9d9e75cdc544f220598791216fb5273fd7c197b56f104f119cb634fec9edcf76","sha512":"d1e707760cf9ca08538fe3190caf82aa5a467bf0257b1935cabfae481aa725f6f2bdc38d3fe3448669a4bc6b3b087ab349de95993ff8b61d040b9423140c02bc","ssdeep":"","tlshash":"b56176ac4c8dd219c98ecdb553f8ed40a086415d44e7ac373774cba89a95de991811b3","first_seen":"2025-10-31T00:05:45.064733Z","last_seen":"2025-10-31T00:05:45.064733Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dodgyfactoidprecut.com/get/1990339?id=1990339\u0026jp=_clrlpxodjlgafsgsnbnurh\u0026dr=102\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.627-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=Ord-7bcKmZpiyzUDVIIHN\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=XOUppqOaHR0cHM6Ly9meGdneHQuY29tLw\u0026afid=8841190131384320\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026dto=2\u0026pload=2134\u0026rlp=%5B0%2C91%2C298%2C159%2C2598%2C27804%2C4067%2C27455%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0\u0026freq=0","fqdn":"dodgyfactoidprecut.com","domain":"dodgyfactoidprecut.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:01.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dodgyfactoidprecut.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 09:30:15 GMT","end":"Fri, 21 Nov 2025 09:30:14 GMT"},"fingerprint":{"sha1":"FE:A7:AB:2C:17:BD:52:9F:0C:60:D7:37:DC:D2:FA:6E:06:40:80:29","sha256":"6D:04:F7:81:F8:AA:AA:A4:07:56:33:F9:A0:DA:33:3F:85:EF:7F:35:0D:AB:1D:38:E3:7B:A2:49:0D:81:11:44"}}},"request":{"raw":"GET /get/1990339?id=1990339\u0026jp=_clrlpxodjlgafsgsnbnurh\u0026dr=102\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.627-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=Ord-7bcKmZpiyzUDVIIHN\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=XOUppqOaHR0cHM6Ly9meGdneHQuY29tLw\u0026afid=8841190131384320\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026dto=2\u0026pload=2134\u0026rlp=%5B0%2C91%2C298%2C159%2C2598%2C27804%2C4067%2C27455%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: dodgyfactoidprecut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 00:05:01 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: UID=2510301905bb1714e375ad4f53a089165f85; Path=/; Expires=Fri, 04 Dec 2026 00:05:01 GMT; Secure; SameSite=None\nCHCK=1; Path=/; Expires=Fri, 04 Dec 2026 00:05:01 GMT; Secure; SameSite=None\nPTS=AoKhbNJpA_0toWMB; Path=/; Expires=Fri, 04 Dec 2026 00:05:01 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5430,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (5430), with no line terminators","md5":"3dabbc456f1fb7b0bb35d368df623401","sha1":"6d72288308273c496e7551cbde001e535124733d","sha256":"079225b2932de3f9ad3d818670b6545a236f7020ab763e44b8d72c5378efa957","sha512":"af90764107e3e293ad9a6df4fd1932c58e495175d50158d7ab6612871e9abb381e5a7d8b4789c84afbc4c6241162310be7d5bed28c0a06d06f4d4535dcc4eeb9","ssdeep":"96:v7Go+A3DyyBqNGHOw/Aj8bJ9fgjJUybhQW+A3DyyBFNmCV3tspbJ2rphz1XO9QPZ:v7Go3DyyBEGHnbJ9fIWyVR3DyyBbmCl3","tlshash":"5ab14b3c7699e948fc710fd214725cf61be8f45657d7916ad321c068d0b8e30da3e45a","first_seen":"2025-10-31T00:05:45.065954Z","last_seen":"2025-10-31T00:05:45.065954Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/05/onlyfans-zeidmoon-kyle-krieger.webp","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/onlyfans-zeidmoon-kyle-krieger.webp HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 04 Nov 2025 22:36:03 GMT\r\netag: \"6946-681b8197-66a096;;;\"\r\nlast-modified: Wed, 07 May 2025 15:51:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 26950\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 178135\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oX5YaPOTh%2BfJ5ChvCpmM3EUf3MCLzKI5IAgHXLppauCnkBvQK2MGBsrJOiPhW2%2Fmc%2FLOw0i7nd3WRTMtaLdUUvST6%2B5Jp2oVnqE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee99654e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26950,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x338, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e978093f1edb20606ccf393962f0a9ea","sha1":"059cf2cfea49daddbf7e1a404948badd28edce4a","sha256":"aa0918944d2ad6949f1e858f7cbaf001ff8229bbe73680a64b78bd9cc0d4d908","sha512":"f7e66621b304dff382c7e0dd165bd215a845b545534038767873611a8bf8b71757a9fb483692fe9931c85b655ef4c03677f0679be0475ed7ea1734b44789f253","ssdeep":"768:+8VCj9KbI2hIFhzyvjgWJNr3l8KSY1kw0:+8VOk02hIFNGUWJNGCr0","tlshash":"7ec2e0cef1ab59ff55f6bf9298c15c264cbc9c93324fe52a1209bc085e59c583186e2c","first_seen":"2025-10-31T00:05:45.067042Z","last_seen":"2025-10-31T00:05:45.067042Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/AussiesDoIt-%E2%80%93-Tai-Jay.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/AussiesDoIt-%E2%80%93-Tai-Jay.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 17:46:25 GMT\r\netag: \"36da-69039f9d-6b9f7e;;;\"\r\nlast-modified: Thu, 30 Oct 2025 17:25:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14042\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 22713\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qtE4kvs8b5RzMqB%2BAjOZhdQH5vbXmdIosxVDr38eJ4X6VCK%2BgyjQTtkVHDl42XbBw6h7yALXp%2Fr%2BTykjQvJ562r9WLNmqsUhUIw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee19304e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14042,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"1ef266fef85b60eac934d7b4f996be9b","sha1":"81571a8e5c2b676b35ab50b01cb809225740a30b","sha256":"88275138eb314719071a368b0212ce0f793572ead34d17a35d311304cfc28cdf","sha512":"f51c29bbe8c8132e2bb858e5072d35876f0a716ee821d385892431135bc2d4ca44e78291e34901f1ccc49a0977a701303e76ff1020eac4e4d9881f3d904aeb66","ssdeep":"192:BDjgEUwRlrujvjdpvEqBQSDi/P2SHSb9P3MlAxJDOJEQS4eSH96NjK2KnqhsDv/Z:FUE7RlSjTEu6+SHSb9P3MLSjSP/qg/r9","tlshash":"5a52c006ebc366438f2ba1b8decf36f3305e7445b86c73964deee0235b51491b1184a9","first_seen":"2025-10-31T00:05:45.068135Z","last_seen":"2025-10-31T00:05:45.068135Z","times_seen":1,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2023/09/The-Full-English-Meeting-Mark.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2023/09/The-Full-English-Meeting-Mark.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 18:13:50 GMT\r\netag: \"2a90-64f894fe-572aad;;;\"\r\nlast-modified: Wed, 06 Sep 2023 15:04:30 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10896\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 21068\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h3gL%2FFD24rIKtWNXBWnmTdsiYQRrI8CiUKhSZjVnDDJbNRyFz20CDC75DCoZGuwOaxe3cAIq3dvoIxSOWT%2FhBMsraWcuQmZD9X4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5eed9744e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10896,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 400x225, components 3","md5":"04df62c38d22e85269c381dcedec7942","sha1":"fe615270b35f80e66e12a5be54ba7b150c887d1c","sha256":"f2e870b7f6affd1874d88f2195f7ed72c60af872d067fc2d741071f86430db4c","sha512":"41352b87457dadaf4439394c0b9aa5af105cc080b4b417d0d63ee7fcbbb0ca7c0bb38fac65db6a51e8733f28af9fad9e6296b8282760d3fbf836b3fcdb6798e4","ssdeep":"192:BIng/qpAhNmhzUaqfeZOWi1vE5INkF0eoEFGafT7TwfErnkuIDfV6+j6+q47d0i:Sg/q9zUTmMvtaowGUTXw6kTDfV6+j6+V","tlshash":"7c22af07ff56caf2112704f870ea05e1a20ee9d266557bc9cc165b2bdb8e1cfe8c0664","first_seen":"2025-10-31T00:05:45.069132Z","last_seen":"2025-10-31T00:05:45.069132Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dodgyfactoidprecut.com/check.html","fqdn":"dodgyfactoidprecut.com","domain":"dodgyfactoidprecut.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:00.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dodgyfactoidprecut.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 09:30:15 GMT","end":"Fri, 21 Nov 2025 09:30:14 GMT"},"fingerprint":{"sha1":"FE:A7:AB:2C:17:BD:52:9F:0C:60:D7:37:DC:D2:FA:6E:06:40:80:29","sha256":"6D:04:F7:81:F8:AA:AA:A4:07:56:33:F9:A0:DA:33:3F:85:EF:7F:35:0D:AB:1D:38:E3:7B:A2:49:0D:81:11:44"}}},"request":{"raw":"GET /check.html HTTP/1.1\r\nHost: dodgyfactoidprecut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 00:05:00 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Thu, 23 Oct 2025 09:18:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f9f2c9-39e\"\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":926,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"088dba8e97eede53134c93219f7ebbae","sha1":"adb707654d1fe0af7d0d7a9f55660d22bd3625e4","sha256":"6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff","sha512":"23a1f87731e8aee4658993cd1ce35ec179fea80b89bf52aca7634488f1bdfcf88b9cabca4859481357a9fee06cbb49df64bbe0878b1dae0e5df4fa34003c6d80","ssdeep":"","tlshash":"6211d04934e1684c1127a6301597a2183c32a40315cbd949fb9cd7301f815a7dc596df","first_seen":"2024-11-22T16:59:41.974716Z","last_seen":"2026-03-04T10:11:28.020186Z","times_seen":13721,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-8RMNSQMQGD\u0026cid=1850737930.1761869102\u0026gtm=45je5at1v883244240za200zd883244240\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~105322303~115480710~115583767~115938465~115938468~116217636~116217638~116253087~116253089~116254370\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~105322303~115480710~115583767~115938465~115938468~116217636~116217638~116253087~116253089~116254370\u0026z=826054478","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:01.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:40:49 GMT","end":"Mon, 05 Jan 2026 08:40:48 GMT"},"fingerprint":{"sha1":"B6:6D:0C:D8:3F:11:77:11:67:D3:B6:46:05:08:4A:98:12:FA:BF:AA","sha256":"A7:0A:AB:F8:DA:FA:E9:BF:2C:BE:39:D2:D1:0E:51:96:35:29:65:53:47:47:69:6E:00:69:42:6F:26:CB:86:B2"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-8RMNSQMQGD\u0026cid=1850737930.1761869102\u0026gtm=45je5at1v883244240za200zd883244240\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~105322303~115480710~115583767~115938465~115938468~116217636~116217638~116253087~116253089~116254370\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~105322303~115480710~115583767~115938465~115938468~116217636~116217638~116253087~116253089~116254370\u0026z=826054478 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 31 Oct 2025 00:05:01 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-20T01:50:34.224519Z","times_seen":955412,"resource_available":true,"data":null}},"time_used":351,"timings":{"blocked":150,"dns":1,"connect":27,"send":0,"wait":48,"receive":0,"ssl":122},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/themes/retrotube/style.css?ver=1.10.2.1756142663","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/themes/retrotube/style.css?ver=1.10.2.1756142663 HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 07 Sep 2025 12:59:09 GMT\r\netag: \"127b8-68ac9c47-7e013f;br\"\r\nlast-modified: Mon, 25 Aug 2025 17:24:23 GMT\r\ncontent-type: text/css\r\ncontent-length: 13440\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 53812\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2OxANTX%2F3YHKNSR7mj770qj2Tg7r2wvnxbunsyfp5FnwXg4Sf2OdQzsVoj%2BpmcffR4gp3VOChMpwGkGlaYh5DyBJK1IZTGG6Vy0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 996ee5ed99064e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":75704,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"c48f6edba50d51809787fbd9344de949","sha1":"0a2a37afe84f4929f54f202d41ee6821be9a1a44","sha256":"588117437aed4239f76d76462c04dfd9307b99e7a1ce74fd7b3ab24ca72fdf55","sha512":"c9561555b8afa826ee1ada6d32c9e177fd9bc1f5ea74efc96377d99ad064c8fca2e42fca191ec339d9b3d032d2074d36e900615ed3674b6a99e54a5c7d01d70e","ssdeep":"1536:1+vfevN5dbJil/zinqEqFkQiN0NtIhjwU3zl0oyEjG/2WmM1/S/5s5DX3F/Is5Du:1+3QN3Jil/ziBN0jKl0KyrWixLO","tlshash":"3d737465af141c44932bc2a9afd5e750c63e4051df0f0edff099a528d38a69502bff8a","first_seen":"2025-08-28T06:46:38.274306Z","last_seen":"2026-06-14T08:22:20.461235Z","times_seen":569,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/OnlyFans-Antonio-Velez-Ricky-Hard.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/OnlyFans-Antonio-Velez-Ricky-Hard.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 05 Nov 2025 21:18:12 GMT\r\netag: \"3abc-69027c7b-6b9f06;;;\"\r\nlast-modified: Wed, 29 Oct 2025 20:43:39 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15036\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96406\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0B3q4eMi4PvlkT8p6YWpey8Kf82nESVcgaVOjW1Nj5BW9ZYAELL6PF3R%2Bn0xozhpXuLP%2FtyhMO1YKNGSd9N2CIUPiGZeN2VbQho%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee19354e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15036,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"eeea504b38c6e91b93912523bfe58000","sha1":"05ed5f875454cb7783454c64e1d5172309994038","sha256":"3e9e51b9e47e6683595479e9cc814697988a5c5c1611a00d0f366f00530dfe2f","sha512":"8427dda693a40c27b7a3f3efb250c4eb78f34c2b6c53fb58d8f1857582bc78cdde4b42e0e26227dd348cbb32c76c2b2f50fab32c0fa92d1228807419ed25a0ec","ssdeep":"384:Ff2W0pld4uoWoS/F15Oe8dzqfmFxwDKdwsY:FftGdZo/6O1mfWxNa","tlshash":"ab62d093b74360b5dc2893299a751ad8865f3001db5d7f6b7cc0b2c6bb1429fd98d308","first_seen":"2025-10-31T00:05:45.071283Z","last_seen":"2025-10-31T00:05:45.071283Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2024/08/OnlyFans-Craij-HungGayCock-Three-loads.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2024/08/OnlyFans-Craij-HungGayCock-Three-loads.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 02 Nov 2025 17:48:23 GMT\r\netag: \"3853-66d37ede-4f4014;;;\"\r\nlast-modified: Sat, 31 Aug 2024 20:36:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14419\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 368196\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BMdurNS7HtNuHptGpjyUVwRDBvcQ5yGYfGmLhYaJqDZfqD07%2FWyRveKoBJrp0bx0dnmi%2BNw4PtZYAu2rHxDphEK%2BWNRs4f72xS0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee394f4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":14419,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 400x225, components 3","md5":"a33de35573bdc4dc000182d8fa5f0e14","sha1":"ab2d79f565fb426a296bfe26a78d636ad9c1702d","sha256":"fd1505f8e64f902c6067057719d4df55a9336e486f96696523c39ce54422a8b3","sha512":"b69d62aa55cc857754da97b0e6ba4c80d5c0ab4743f0ad2b665fe30db500b6bb625650a1f88f5fe24485f835bced79a93e737f840be7d1b63969e42cecdfb36c","ssdeep":"384:SkpqNUkmh6W+8dYQYBmn1bKOsybg3pS7ze:SkMSz94cnlKxO0n","tlshash":"7e52cf6f430b2516ed7ddfb5c94c2e8389265e866588bce5bcfc53c1420922d24ea90e","first_seen":"2025-10-31T00:05:45.072315Z","last_seen":"2025-10-31T00:05:45.072315Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chaseherbalpasty.com/check.html","fqdn":"chaseherbalpasty.com","domain":"chaseherbalpasty.com","tld":"com"},"ip":{"addr":"94.242.247.20","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:00.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chaseherbalpasty.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 01 Oct 2025 00:00:00 GMT","end":"Tue, 30 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"33:A3:14:CC:01:76:4E:33:44:46:15:D3:60:37:E2:11:39:59:F0:06","sha256":"29:67:DC:3A:7D:72:3E:0A:8C:3E:94:18:A0:47:AF:E8:3B:57:B6:5A:F9:C9:9B:5F:4A:36:73:3F:09:96:29:01"}}},"request":{"raw":"GET /check.html HTTP/1.1\r\nHost: chaseherbalpasty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 00:05:00 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Thu, 23 Oct 2025 09:18:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f9f2c9-39e\"\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":926,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"088dba8e97eede53134c93219f7ebbae","sha1":"adb707654d1fe0af7d0d7a9f55660d22bd3625e4","sha256":"6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff","sha512":"23a1f87731e8aee4658993cd1ce35ec179fea80b89bf52aca7634488f1bdfcf88b9cabca4859481357a9fee06cbb49df64bbe0878b1dae0e5df4fa34003c6d80","ssdeep":"","tlshash":"6211d04934e1684c1127a6301597a2183c32a40315cbd949fb9cd7301f815a7dc596df","first_seen":"2024-11-22T16:59:41.974716Z","last_seen":"2026-03-04T10:11:28.020186Z","times_seen":13721,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"playhubconnect.com/bn/bf3/7d0/56d/bf37d056d84d92ce50d337c48e4cb6ab143cda69.mp4","fqdn":"playhubconnect.com","domain":"playhubconnect.com","tld":"com"},"ip":{"addr":"104.18.14.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:01.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playhubconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 01:53:00 GMT","end":"Sun, 14 Dec 2025 02:52:57 GMT"},"fingerprint":{"sha1":"6F:7E:45:FD:0D:E1:5B:9F:C6:D0:2A:9F:AA:8E:F1:FA:79:84:B9:99","sha256":"0A:22:22:40:F0:60:14:FC:D9:59:21:94:0E:1A:55:24:DC:9F:21:05:F9:C7:0D:42:25:19:56:47:78:53:0D:8B"}}},"request":{"raw":"GET /bn/bf3/7d0/56d/bf37d056d84d92ce50d337c48e4cb6ab143cda69.mp4 HTTP/1.1\r\nHost: playhubconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Fri, 31 Oct 2025 00:05:01 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 952885\r\ncf-ray: 996ee5ff48fbb4f9-OSL\r\nx-amz-id-2: 4hLuiQEzjvWMhTxgfMGpSU/6u8DUcNm+SeUMEbh6YSAUgI2rfHmKQvWC59NYkek/DInun7M9ASg=\r\nx-amz-request-id: EX21PD7A1D5N99K7\r\nlast-modified: Thu, 15 May 2025 12:07:52 GMT\r\netag: \"87ef915cc39e1ca0204ebda8289b4f52\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nage: 506156\r\ncontent-range: bytes 0-952884/952885\r\nexpires: Mon, 01 Dec 2025 00:05:01 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":952885,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"87ef915cc39e1ca0204ebda8289b4f52","sha1":"bf37d056d84d92ce50d337c48e4cb6ab143cda69","sha256":"a5c2f77a616c7caf3801bb24f99ee6ac1c6cc2bc85c0d79f4224779e39a16249","sha512":"c2fd78f56f77aaec7442d725d8e0638dcc408ea40311adfdb7d00eefdbcaef3f6026b8a43f36801240c172391585f4c81276c9a61e02ae6f86398751a84c9b81","ssdeep":"6144:WAFoTGEP7FgOxU0zl9IJ9QJGas83T2q2cw8bHJ8cufvnC2IuWCe:WCqG27F5xU0J9IJ94GA3T7HbpufvtWP","tlshash":"b6157b6e0d964132ff4cfa3e9494c867d8e05a15c9c6c30fb95c09118bbe25a47bf4ba","first_seen":"2025-04-13T17:07:16.972621Z","last_seen":"2026-01-28T02:27:55.924774Z","times_seen":975,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":86,"dns":29,"connect":1,"send":0,"wait":18,"receive":112,"ssl":58},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"playhubconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/OnlyFans-Andres-Junior-Camilo-Lopez.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/OnlyFans-Andres-Junior-Camilo-Lopez.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 17:46:24 GMT\r\netag: \"4a72-69039fd1-6b9ff6;;;\"\r\nlast-modified: Thu, 30 Oct 2025 17:26:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19058\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 22714\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bp3cucY3Vq%2FOFnxukeY58Q3lGDJbmi8Dz0YxiHRMuWl3z2U74Pb9OKj3EA36r6CTKnmGdzQ4rOPTsBthkdlLE7yIlgmsXTPVYPc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5eda90c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19058,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"3acf2d92f0e37d29f5e5e8b37939bd10","sha1":"8920b34e8fa935cdd2a566c352dd38b80235a042","sha256":"8f70a4098846a4a44980df5365f4f99e23b3640544ec3754d3140bf9b53b482a","sha512":"b147a4c1884a4ed4497679274678c94ccab2cb0c2276a06ca5a5186b6ca07075606236a6f5a429be46bcda1caf8db8bbc6bcb3a1bc58a9fdb9b63c528fcbe7a4","ssdeep":"384:FHM0UZPa4Mq1q8MEICgzOh6xqGxOBfWv9jM+WfUAb2QlA71:FH6xbh5MfCcQ2Ok9CiQl41","tlshash":"be82e16f73c0b801c80b37bb184250eed6af817439b77e852e5f5939c9a58111e286b8","first_seen":"2025-10-31T00:05:45.073442Z","last_seen":"2025-10-31T00:05:45.073442Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/OnlyFans-James-Cassidy-Bryce-Jax-Scott-Gardner.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/OnlyFans-James-Cassidy-Bryce-Jax-Scott-Gardner.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 17:46:25 GMT\r\netag: \"41a6-69039fd3-6b9ffc;;;\"\r\nlast-modified: Thu, 30 Oct 2025 17:26:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16806\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 22713\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tYpb13D6z200xjyHx59HT7HtmW9EvNcWlgkNEaKyQxFKE1QTaY5QHQeBFNU9kaseSk%2F4UxVoj4PzmGxHaMjM3rvEwKuH43hA5k0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5edd91c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16806,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"0a9f7f520aa04f172affc8300ccb7011","sha1":"973b2bda205f123ae9a0ee573bb41db9eef00064","sha256":"11cf763d17371a42b2df72429d0edb7283b6ac2d10c7a4af54ca9d9b8006e91a","sha512":"4da5082c04f7899cf580e68063a10741f792f1b53c279c4b5d62ebeb588a25e36d26b67f8bc66de8e4d2026f7df316bd50a6df366c2965c124e8d782237b97e1","ssdeep":"384:FXmB/UBTVjbp2xsrZYDCX73Dyz6kwyyrX6x8+xZ0jfwvgcZ:FXm+Bpj12yZYDkzDyzYyyr6ewqjSgcZ","tlshash":"8572d1fbcbeedf23c8c748682c0c0416f858277d43633a852c9ef9a1e5a5d592ba4255","first_seen":"2025-10-31T00:05:45.07452Z","last_seen":"2025-10-31T00:05:45.07452Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2023/05/SketchySex-Sunday-Rush.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2023/05/SketchySex-Sunday-Rush.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Oct 2025 10:20:19 GMT\r\netag: \"27a1-64776d48-62e55c;;;\"\r\nlast-modified: Wed, 31 May 2023 15:52:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10145\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 340777\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9lRUgoA%2FwlXBRoMJALqSs%2BiGFcYsY4DZUrIazsNkEIfA9omORxmXl9v72mRy5pL3PZX%2B9tP3fOFCcpZE9T0qe9mS6nwY%2FZxwmuw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee69564e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":10145,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 400x225, components 3","md5":"58582e15c36d441deec46c5ba6874dd8","sha1":"0db0dda47a3a9cedf7764e8f91b05572f515f78e","sha256":"1c6c8da4395387f85beced872a775e8fb84aacb6b4250f0161bea7f034a438d4","sha512":"39138f583d857c76917d57f6a51134143dfa3c62a3714656b23309eabf446c9228529a3efd33ecf585fb2537e250dfbffa59b0b47ee87f97158ac24f0f51363d","ssdeep":"192:BIo3GqYBHAuzuejXe3S60CRYdnakfizdbA9smIr9FOt:So3Gzp9jXsS3nNNIbAs9FOt","tlshash":"f422ad6ecb5dc1a75e3137b53a4b712a0eaf9a0810a5f6dc1dd34b1ce0207cd9ad6c0a","first_seen":"2025-10-31T00:05:45.0757Z","last_seen":"2025-10-31T00:05:45.0757Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2022/11/TheGuySite-Monstah-Muscle-Man-Dildoed.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2022/11/TheGuySite-Monstah-Muscle-Man-Dildoed.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 23:56:28 GMT\r\netag: \"4e7f-637cc3df-5ab8b3;;;\"\r\nlast-modified: Tue, 22 Nov 2022 12:43:11 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20095\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 510\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O94Y7FM3aQaKPFaQmrhSQBnJnFCt%2FimkrPYfKN%2Bb7apjoXginl14Ga9kWRLMyGTf9q5Bdt4FR%2FLw%2BPeDP494Dk8El96OQwpdBdE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5eeb96e4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20095,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"03b0643de97da80bc1863701b2c9db81","sha1":"6e53e97dd1bfbc9727235b66e74c5b3ace4f5f20","sha256":"beaf0aa65bd50856cebb18e452f81d30d188ca4ad69ec56e40da9dcebcd20e3c","sha512":"253b84532285131417f22e96a4416aad357fc764d0a3adc3680ba71f75d663d27b440ace6c579c297c662866e598c0265fca12548d2aa099b3110ead7f79bedf","ssdeep":"384:F0rVNeAOr8MBqm3yQ0FGiImXIy2pyzQNZI2DGOdVLEEPY8Ax0y:FgfjlMBryQ0FGi1H2pyzQN1DddV4DIy","tlshash":"2992d03767b405d00458c57e46af0aa4949ff8899b88f6137d32debbdc75b20a30503e","first_seen":"2025-10-31T00:05:45.076817Z","last_seen":"2025-10-31T00:05:45.076817Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"astronautlividlyreformer.com/check.html","fqdn":"astronautlividlyreformer.com","domain":"astronautlividlyreformer.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:00.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astronautlividlyreformer.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:27:08 GMT","end":"Wed, 21 Jan 2026 14:27:07 GMT"},"fingerprint":{"sha1":"EE:4F:A4:BF:E4:BA:9F:D9:89:60:3D:0C:57:BF:AA:79:20:D8:10:20","sha256":"6A:5F:C7:73:B8:99:4E:4B:AB:87:F9:1F:99:0F:80:48:57:86:F8:F5:84:09:D2:9A:05:E6:89:FB:31:15:41:2C"}}},"request":{"raw":"GET /check.html HTTP/1.1\r\nHost: astronautlividlyreformer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 00:05:00 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Thu, 23 Oct 2025 09:18:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f9f2c9-39e\"\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":926,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"088dba8e97eede53134c93219f7ebbae","sha1":"adb707654d1fe0af7d0d7a9f55660d22bd3625e4","sha256":"6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff","sha512":"23a1f87731e8aee4658993cd1ce35ec179fea80b89bf52aca7634488f1bdfcf88b9cabca4859481357a9fee06cbb49df64bbe0878b1dae0e5df4fa34003c6d80","ssdeep":"","tlshash":"6211d04934e1684c1127a6301597a2183c32a40315cbd949fb9cd7301f815a7dc596df","first_seen":"2024-11-22T16:59:41.974716Z","last_seen":"2026-03-04T10:11:28.020186Z","times_seen":13721,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.ru/metrika/tag.js","fqdn":"mc.yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"77.88.21.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:01.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"GET /metrika/tag.js HTTP/1.1\r\nHost: mc.yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 80980\r\ndate: Fri, 31 Oct 2025 00:05:01 GMT\r\nexpires: Fri, 31 Oct 2025 01:05:01 GMT\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncontent-type: application/javascript\r\nset-cookie: bh=YK36j8gGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.ru; Expires=Sat, 05 Dec 2026 00:05:01 GMT; SameSite=None; Secure\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\netag: \"68fb7a75-13c54\"\r\ncontent-encoding: br\r\nlast-modified: Fri, 24 Oct 2025 13:09:09 GMT\r\ncache-control: max-age=3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":242250,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (675)","md5":"d44f52402d880e3d56f05cd8bb00dcff","sha1":"6ce388903e0c4a14fbae450f2ca048d53e6c9b50","sha256":"e9b37bb86b7c81bd87d41b9d3ae945478eef870dc36bf7d900495f8fe98b779b","sha512":"59b95fe874231f5552cccc0a023a004f63b308b4fefdc555a9c35953eebf0246db61c6df7868dadbde7a6b5802a906b9509156104a211b72b66a89598ebf2f79","ssdeep":"3072:Cj2VixUuw6+4ONcXW8usOPD6maLpYobA7T8OfsgWq6ZAP3eqBbTCXJl:O2VixtANc3usW+maLyn8Ou/ZAPnTcl","tlshash":"0b34e8d976827472537334b4a03f004bb2be7896f14c8964f186e9d57e789a89237f2c","first_seen":"2025-10-27T16:57:08.555205Z","last_seen":"2025-11-05T14:32:31.007163Z","times_seen":623,"resource_available":true,"data":null}},"time_used":471,"timings":{"blocked":150,"dns":1,"connect":46,"send":0,"wait":88,"receive":76,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-includes/css/dist/block-library/style.min.css?ver=6.8.3","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=6.8.3 HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Oct 2025 05:32:46 GMT\r\netag: \"1c679-68768963-46ef3a;br\"\r\nlast-modified: Tue, 15 Jul 2025 17:01:23 GMT\r\ncontent-type: text/css\r\ncontent-length: 14004\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 139389\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CAeGbZ%2FDL%2BRYRPa67vNspXd6L9%2FNCUvgH57V2F9ZK1ikU49GojaecBv8UsLfgWhlEOny%2B2rIaoW5tS2YtfzSnBCz2wiVSAbbYn8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 996ee5ed89024e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":116345,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55654)","md5":"a06b3af98203ddc303997e0e0caaff83","sha1":"04c3e7de74a890d18014588c4e1f077a52d79acc","sha256":"838ede31a58a3cdb411d6dd7f13cbe65d4a26193d9fa31882854e63938f12bac","sha512":"4ce1079b8dc07043b0201dc74f5888b50aa530a4e604eecd7673e225946de62c421b290a707014ddaf4366591f8c4767737b5689bc44d57eb0a11aef905cead9","ssdeep":"3072:seeJu1iQg5MG7x+qehvP0x2pck2qkA3Pu:b1iQg5MG7x+qehvP0x2pck2lA2","tlshash":"34b3615417b4dcf935ffa73a5e4ee248a503aa41c68a57ebe066d190618ca490cf3f0f","first_seen":"2025-07-15T17:03:07.843749Z","last_seen":"2026-06-20T00:54:22.489562Z","times_seen":175083,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/OnlyFans-Nerdy-Adam-8-Eric-Rey.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/OnlyFans-Nerdy-Adam-8-Eric-Rey.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 17:46:25 GMT\r\netag: \"4857-69039fda-6ba02c;;;\"\r\nlast-modified: Thu, 30 Oct 2025 17:26:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18519\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 22713\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AYkpQr1fVn5fsRbjtjEYYX0CTOP%2BYMrmzQ%2BXaoWHwGxA1tmqNBZC8%2FGdcLbxGfaJQXYUAc02wbiMZVlGPTbVc3UQeo%2FUs3a3Clc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5edc9194e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18519,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 500x281, components 3","md5":"dcedce9f4b781f9fc03f6f197e482ff4","sha1":"548d093ef47a7ed229be12061ee2b8e25237e219","sha256":"cfff82ca6a6c8cd3c4333d54b5691faf8ff0f61c6b5a021e4b349072e694407e","sha512":"469b23bd146ac9ef0df7c3ef8c39e62fa8d6c0f9e8cccee37ae7738e9703864e32f0812a457181bb29187bb611ddcd718f324b9cb2df6b1bab1bc50a21bfcfd6","ssdeep":"384:F+kN8xFpuaCWjaFAjMVI4QQfo+9PpyKgXdWWKi7eY957QuNIVPpKYb:F+konuaBjayCI4QQfoEyxWWxb7Quefb","tlshash":"1482e063cb867d8d7e344e3bd4261667a0d8ac3576bf79220d47ca44e1881fd69c88c8","first_seen":"2025-10-31T00:05:45.079397Z","last_seen":"2025-10-31T00:05:45.079397Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/OnlyFans-Vitor-Guedes-Oliver-Hunt-Jake-Manson.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/OnlyFans-Vitor-Guedes-Oliver-Hunt-Jake-Manson.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 05 Nov 2025 21:18:12 GMT\r\netag: \"3f77-69027c84-6b9f78;;;\"\r\nlast-modified: Wed, 29 Oct 2025 20:43:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16247\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96406\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6jG3lcnPjpeQbUwEs0BCsLsWqONZ%2BAFpDjTBayn3SMy5cyK1G88eufsvrrtE1GB%2BtBtSTbe2KqkX1Hxx1oaDpVmoQ3iA3AcK6pc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee19344e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16247,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"4736d9b19bef90e5515a771bda34a375","sha1":"86734f6905e6299affbcb38cb9b96683ac84cbd3","sha256":"d398a1fcf5944b3184822ff7adb2df6d68792521f22bcb947dbeb9d35678e696","sha512":"7188d892ec4f90108fd2eabe6284c0daf3fb209b1228ea026a70dfd98da04fdd4456946ca8e167546fb2c93ff6fe182975d21b836b3dbc1b3276102c8b3ad78b","ssdeep":"384:FKd6ee73FvhOI2Sm5UrZH7m4kQcd9jt2PcdTasd9hhfo5QW7G:FKd6v73uI2S2U9CrtsPcdT/siW7G","tlshash":"3872cf458f4a7045f47acaa76242ca58968718d4394e35ccb8cfed7c4ac42fd941938f","first_seen":"2025-10-31T00:05:45.080464Z","last_seen":"2025-10-31T00:05:45.080464Z","times_seen":1,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chaseherbalpasty.com/lv/esnk/2018929/code.js","fqdn":"chaseherbalpasty.com","domain":"chaseherbalpasty.com","tld":"com"},"ip":{"addr":"94.242.247.20","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chaseherbalpasty.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 01 Oct 2025 00:00:00 GMT","end":"Tue, 30 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"33:A3:14:CC:01:76:4E:33:44:46:15:D3:60:37:E2:11:39:59:F0:06","sha256":"29:67:DC:3A:7D:72:3E:0A:8C:3E:94:18:A0:47:AF:E8:3B:57:B6:5A:F9:C9:9B:5F:4A:36:73:3F:09:96:29:01"}}},"request":{"raw":"GET /lv/esnk/2018929/code.js HTTP/1.1\r\nHost: chaseherbalpasty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 30 Oct 2025 14:25:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6903754b-29589\"\r\nx-js-ab2: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":169175,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"306497460fec2db20fe2b3cd79f079e1","sha1":"4c43f979ec2d9a22f88be8bf22e2ac63a70ff80d","sha256":"42b65c6df1569e65be8f7229a81a9b80ac77b72c2026b312409c60c39752a9b2","sha512":"c4bcd18e96fbe257a8bc98215f92c8496c1ebf9000db12f245d4ebf401bbaaa894b1a1ae7f470c40343dc61581a7896cbb657ff4fccd3676799e24335553930b","ssdeep":"1536:lso8qPSdMQEZSO1CRC2vxtFKsN76U6x+ui++UzrS5jUNvJrzTmwN5FOmdF+j4QvS:lsjak4+ukU6WpdLH","tlshash":"e1f3768efa833c76c266b03fc93fd906963568f1964e8404f063d1f819e4715a636bb6","first_seen":"2025-10-31T00:05:44.996977Z","last_seen":"2025-10-31T00:05:44.996977Z","times_seen":1,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/themes/retrotube/assets/js/lazyload.js?ver=1.0.0","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:00.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/themes/retrotube/assets/js/lazyload.js?ver=1.0.0 HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Sep 2025 07:28:46 GMT\r\netag: \"167b-68ac9c47-7e0107;br\"\r\nlast-modified: Mon, 25 Aug 2025 17:24:23 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 2036\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 31 Oct 2025 00:05:00 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 300800\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MHzfMGmH3PvE1%2F4ocJb%2B%2BG05bK%2FOtJJO%2BRSVMqvjzY6tbkdBRN62lHKPxblzeY5Babi0vj8ZyPCI5g8OwY3VPGqxFmfBYsdeBYw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 996ee5f449ca4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":5755,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (5710)","md5":"6dcca58db348f35d6eee39aadb7cd280","sha1":"0a513a0ebed60f4b0b4d69f7aaf519feaadbfaec","sha256":"2683c87843149db588b42abb7ef80b2815438fc44b368e1a855983f93ae431e4","sha512":"ee897cdc326f80eb18c74b3c42fe1b97b3b16c0be8f048a763cb33db134fa47dc2eb07bc1ba6cd8feb91385d791aa89a28816fd49217a57763dc54df1ef3693e","ssdeep":"96:IncwFK9HqOq0tioGJULBx7PYuyrr5VrcAeS1h3osyTaZ+1KZZ/p5k1QDSYRV9uR5:M9YH9qfJ2x7PYf5BcVSPfq+DkGDjP9u/","tlshash":"5fc15308b065b43f65777032523f130bb23a606778884494f6b4eae99ebc81e5923f7d","first_seen":"2023-03-07T12:12:33Z","last_seen":"2026-06-20T01:50:30.333181Z","times_seen":4006,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.pncloudfl.com/pn/082/d6d/41f/082d6d41f9bd3220a660f2a4108986b2b367f0e4.png","fqdn":"cdn.pncloudfl.com","domain":"pncloudfl.com","tld":"com"},"ip":{"addr":"172.66.165.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:01.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.pncloudfl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 11:22:47 GMT","end":"Sat, 10 Jan 2026 12:22:44 GMT"},"fingerprint":{"sha1":"5F:F3:87:DA:78:FE:FC:D5:F7:1B:E2:6F:99:A9:F5:88:06:1F:6D:0C","sha256":"9E:1C:41:AF:6B:2C:22:66:DB:77:8A:92:75:A0:FC:E8:37:90:0A:A6:EA:FB:D6:6D:72:71:80:40:DD:CE:20:36"}}},"request":{"raw":"GET /pn/082/d6d/41f/082d6d41f9bd3220a660f2a4108986b2b367f0e4.png HTTP/1.1\r\nHost: cdn.pncloudfl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 31 Oct 2025 00:05:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 55322\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncache-control: max-age=432000\r\ncf-bgj: imgq:100,h2pri\r\naccept-ranges: bytes\r\ncf-polished: origSize=66221\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\netag: 20c64ca88091db62ea69001a7382f005\r\nexpires: Fri, 31 Oct 2025 03:31:31 GMT\r\nlast-modified: Mon, 23 Dec 2019 08:43:03 GMT\r\nx-cdn-host-id: ds7445,ds5833\r\nx-openstack-request-id: tx28758e8f7663411990400-0066ec1df3\r\nx-proxy-cache: HIT\r\nx-timestamp: 1577090582.49776\r\nx-trans-id: tx28758e8f7663411990400-0066ec1df3\r\ncf-cache-status: HIT\r\nage: 160410\r\ncf-ray: 996ee5fd0c1a569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55322,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGB, non-interlaced","md5":"067d88595c2f421f4f3d5ba457be3fb4","sha1":"755b7cadd97ba8b8ef6dac92923629c1b51862b1","sha256":"0f1d6309b6c39fa7be1c27d7fa028211bf4f617929e6bd76710f013085695b1d","sha512":"10a5b0e2b0023a1c6558dd0669fba43d2b8eb7afe8f7f38ef581454651e676e3124aee5f81d60fe9f4ea27803ecc6b28dfb5e3cc58b32696756016d29b6ff75b","ssdeep":"1536:Ze9yJR/OyM8nr+mghZ7DeB5iu1FDeUmcnIFPmSzpmo:ZeUPo8rl0DenikFi/cIRpl","tlshash":"a94301979e415d29ac75ef2fb65af73c14fa44d297b95ab02c67c841c092cce23e43a0","first_seen":"2025-07-01T18:24:57.387963Z","last_seen":"2025-11-25T23:20:14.809926Z","times_seen":133,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":63,"dns":44,"connect":1,"send":0,"wait":6,"receive":3,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dodgyfactoidprecut.com/chicken.gif?z=1990339\u0026pb=6501bf595ddd6bd53bbf6cb3f1cee7171761876301\u0026pbc=gfsPKAhoDcNNGQRp\u0026pbi=_oOzsivTq25NGQRp\u0026pbu=X3l5p1pxyeJNGQRp\u0026psp=UGXGtS-uA28fMw3jqJfF0S7gZHctRr-B-nrJuLax_wQazYZxLDgVO_dqXmPCTNFjZB7F0OkEn25tzCK48IVQ1c13-v5M-K3qB0laY7IxWO14PI1kBQW184mXMoJlKX_R-3cUvHNjvoR3gZNaF1YWX_dDuD3VHkV9qIZe3yIpJ9B1Ern9qM6J41iop3QasjdFf_QZ3T4gSBcC5NkysvhV_zUnjxh5-PQfeY5Ymx9hTm2ZGC9XKH3Dw0KLiMZf5dllqrQQ2ygzOP25unWRiEohyHYj1ytdjrk54hHms4XRG2uaUAQv32yYFP2lYc6ohd5T2VgAFyxHyuOC7xg8ToPImIqV_YeNHN6pVJm2VyOYELUc1Q90wj2ZqvIHB6m3xRqK13lAH3VP4GiiGXtdTGJnthYy-DDvpcvNn6B9nEGM4kxsEdYKDTuhx9P9WjrQRKqsvehXBsFo3mMwoDGbQ23FLOUPKxh9cwqrylHR6xcSXZclUykXGTaq38cNn-9I6Xj1boOBKzr-SYIvrvVr-HL_9HGgYqKkC5uQiq8rBsvyiNsKeR73i_kKBKMaQrH-fqRcJgk478cSB2h1UyxTuD-oy9XkCcBNC_LWICY6yQyU5dItkOVFZay-QY3tf_wts7iFiYV-ZMAfsTVIqz2x3LUSVZcjTkCDsB5K-LAqwApoJ8GyKNiAwYkSKrVG9D5T5iqvYRS3CkcOEG9Up4fxseSiZYmR-FkPqsJiqXbTJ3JVdie1io8SJ3KkJCIF9zTsBSm73ToZg9U1pHR1z9AoP-ltMgHAumUt7KRmLO0joKs=\u0026freq=0\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.627-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=Ord-7bcKmZpiyzUDVIIHN\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=MibZYiLaHR0cHM6Ly9meGdneHQuY29tLw\u0026afid=4056115527496704\u0026caifrq=ADPmGAAAAAAAAAAEADNFZwAAAAAAAAAC\u0026eclog=0\u0026snc=0\u0026ssc=4\u0026tp=288230376151711740\u0026tl=AoKhbNJpA_0toWMB\u0026vp=0\u0026dto=2\u0026pload=2597\u0026rlp=%5B0%2C91%2C604%2C385%2C46360%2C34889%2C4804%2C34540%2C1%5D\u0026im=1\u0026noch=1\u0026cs=5","fqdn":"dodgyfactoidprecut.com","domain":"dodgyfactoidprecut.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:03.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dodgyfactoidprecut.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 09:30:15 GMT","end":"Fri, 21 Nov 2025 09:30:14 GMT"},"fingerprint":{"sha1":"FE:A7:AB:2C:17:BD:52:9F:0C:60:D7:37:DC:D2:FA:6E:06:40:80:29","sha256":"6D:04:F7:81:F8:AA:AA:A4:07:56:33:F9:A0:DA:33:3F:85:EF:7F:35:0D:AB:1D:38:E3:7B:A2:49:0D:81:11:44"}}},"request":{"raw":"GET /chicken.gif?z=1990339\u0026pb=6501bf595ddd6bd53bbf6cb3f1cee7171761876301\u0026pbc=gfsPKAhoDcNNGQRp\u0026pbi=_oOzsivTq25NGQRp\u0026pbu=X3l5p1pxyeJNGQRp\u0026psp=UGXGtS-uA28fMw3jqJfF0S7gZHctRr-B-nrJuLax_wQazYZxLDgVO_dqXmPCTNFjZB7F0OkEn25tzCK48IVQ1c13-v5M-K3qB0laY7IxWO14PI1kBQW184mXMoJlKX_R-3cUvHNjvoR3gZNaF1YWX_dDuD3VHkV9qIZe3yIpJ9B1Ern9qM6J41iop3QasjdFf_QZ3T4gSBcC5NkysvhV_zUnjxh5-PQfeY5Ymx9hTm2ZGC9XKH3Dw0KLiMZf5dllqrQQ2ygzOP25unWRiEohyHYj1ytdjrk54hHms4XRG2uaUAQv32yYFP2lYc6ohd5T2VgAFyxHyuOC7xg8ToPImIqV_YeNHN6pVJm2VyOYELUc1Q90wj2ZqvIHB6m3xRqK13lAH3VP4GiiGXtdTGJnthYy-DDvpcvNn6B9nEGM4kxsEdYKDTuhx9P9WjrQRKqsvehXBsFo3mMwoDGbQ23FLOUPKxh9cwqrylHR6xcSXZclUykXGTaq38cNn-9I6Xj1boOBKzr-SYIvrvVr-HL_9HGgYqKkC5uQiq8rBsvyiNsKeR73i_kKBKMaQrH-fqRcJgk478cSB2h1UyxTuD-oy9XkCcBNC_LWICY6yQyU5dItkOVFZay-QY3tf_wts7iFiYV-ZMAfsTVIqz2x3LUSVZcjTkCDsB5K-LAqwApoJ8GyKNiAwYkSKrVG9D5T5iqvYRS3CkcOEG9Up4fxseSiZYmR-FkPqsJiqXbTJ3JVdie1io8SJ3KkJCIF9zTsBSm73ToZg9U1pHR1z9AoP-ltMgHAumUt7KRmLO0joKs=\u0026freq=0\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.627-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=Ord-7bcKmZpiyzUDVIIHN\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=MibZYiLaHR0cHM6Ly9meGdneHQuY29tLw\u0026afid=4056115527496704\u0026caifrq=ADPmGAAAAAAAAAAEADNFZwAAAAAAAAAC\u0026eclog=0\u0026snc=0\u0026ssc=4\u0026tp=288230376151711740\u0026tl=AoKhbNJpA_0toWMB\u0026vp=0\u0026dto=2\u0026pload=2597\u0026rlp=%5B0%2C91%2C604%2C385%2C46360%2C34889%2C4804%2C34540%2C1%5D\u0026im=1\u0026noch=1\u0026cs=5 HTTP/1.1\r\nHost: dodgyfactoidprecut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cart=1; cart_p=2; UID=2510301905bb1714e375ad4f53a089165f85; CHCK=1; PTS=AoKhbNJpA_0toWMB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 00:05:03 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-route-id: stats.impression\r\nset-cookie: BCAI=ABSSDQAAAAAAAAAB; Path=/; Expires=Sat, 01 Nov 2025 00:05:03 GMT; Secure; SameSite=None\nBMI=AB8WOwAAAAAAAAAB; Path=/; Expires=Sat, 01 Nov 2025 00:05:03 GMT; Secure; SameSite=None\nBCRI=NKSzggAAAAAAAAAB; Path=/; Expires=Sat, 01 Nov 2025 00:05:03 GMT; Secure; SameSite=None\nIMC_102=1; Path=/; Expires=Sat, 01 Nov 2025 00:05:03 GMT; Secure; SameSite=None\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"28e463819a210071de3b45ebe7633613","sha1":"6dccd571828ec0912629119cf7eabfea9f33ddbc","sha256":"44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84","sha512":"8a82ac5a7883cd9b74bdb561cf825ce86474e259ad8c445e538d697b0003e3f2b1d6edcd3dc6512f4ad16e9074da204a79938257c457ecf68f4329eac0182e67","ssdeep":"","tlshash":"04900003e280e082c3a0c0300e0ccb802b88a2308a28030fb0fc2baefc3a3a20c23000","first_seen":"2023-04-05T09:26:54Z","last_seen":"2026-06-19T22:26:28.141623Z","times_seen":22397,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2024/07/FXGGXT.COM_.png","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2024/07/FXGGXT.COM_.png HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 07 Sep 2025 12:23:45 GMT\r\netag: \"5550-669bbd9e-4ad4bc;;;\"\r\nlast-modified: Sat, 20 Jul 2024 13:37:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 21840\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 385915\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NnKUF0uk%2BoPzbaMv1P%2BpxfJSIOyD2I4b8Ej00riFKrm0AsVZAHo%2BBAmvvJf%2Bvzcn%2FGT83F7kY8VqYCnEwVD5XeEBVSCm4w81mcM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ed99054e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":21840,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 71, 8-bit/color RGBA, non-interlaced","md5":"d7b6888a41b8dccdb50c0ce80cb86e91","sha1":"789bdbd19c124f2ad6b59503d786bf1789bd3768","sha256":"8396e77ccb5fe4577c4407d38c2a4b8504e288d06d9c21510e0b2afaf54fb2fd","sha512":"add53d8019d9be05939cf55b79513e04386fd0e12523afea1ada554e7d76c268e532d808feed4dbb9ea69f5b0def1c0a074323f6db11b0312c8155619470c3ae","ssdeep":"384:JwSgam2kIVSbf8vMPXHB5Qg2Q9wlgt7CrOTXvMRb6TBu5zmOoXWDefE92Kb6Uel:CawIWgMPXHogUlgBCrOTYSIVkPUxel","tlshash":"eca2e1bb908b61d9d62a8161f96e9dee5922407b2ed50c34012212cdd9fe40f4df7b62","first_seen":"2024-10-13T13:35:10.366629Z","last_seen":"2026-06-11T05:03:54.512597Z","times_seen":12,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/OnlyFans-Cody-Seiya-Jolian.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/OnlyFans-Cody-Seiya-Jolian.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 05 Nov 2025 21:18:12 GMT\r\netag: \"4151-69027c7c-6b9f0c;;;\"\r\nlast-modified: Wed, 29 Oct 2025 20:43:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16721\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96406\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sGVbJm52xf1rhVHK1TWsApHcz4Wrike2Cy64hpDNFy9ud83UzE4RHnnkwHBNDN3IT92TjLFyrcA7oKnPrJPzXPXEatNNf8jHbrY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee193a4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16721,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"195d8c9b44699cd48d062737f332bf27","sha1":"2fe014ecd1eef4e623bf1a672048be467b356a89","sha256":"5a3f759b787d863654d8ec11320211fb97f7941fcaaed4308d4f9714801e0f50","sha512":"08b13bc0939c934886be9c6fcef9b3ffab3ce2dcead906e478bdaf1834aa433aaf083d34902b2f80dd4aec74d5bfd9f319cf02484ea92290bc1f6ec25cca3de6","ssdeep":"384:FM9sJ1qBOxvQ6af2joW7vMh9Or1LaZwOpBwIruUr8XM2aF/NUZB:FM2JR9Q6aCrkOrFaSObyUr6MDFF8B","tlshash":"5372d0b39720c4994c6b05b55e3f09e0daed5425a450f34fccb3a192adde6889238439","first_seen":"2025-10-31T00:05:45.083619Z","last_seen":"2025-10-31T00:05:45.083619Z","times_seen":1,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/08/OnlyFans-Samuel-Decker-Matheuz-Henk.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/OnlyFans-Samuel-Decker-Matheuz-Henk.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 23:56:28 GMT\r\netag: \"3be8-6893997d-671683;;;\"\r\nlast-modified: Wed, 06 Aug 2025 18:05:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15336\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 510\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r6AFA2ebEs9aZq4QGvG9Yxhqazj7hh9Zt8DjN5JmkpYQ7mRVKkoJSnCPft%2BOZUbr%2B0H1CLSS9X8gw6fsQzSWsODcYq6ZJpPq8dw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee59524e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15336,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"8f00be5a2f7b17e69ef941b5f6209bb6","sha1":"0997d11acbd83ac8ce207e8ca33a3362ff68e4f4","sha256":"978fc6e6cdd80ba57d8b4a7a79e9276f8e9714045ddef69835efbdf14f586784","sha512":"9a1e223e96cc71f18696f0dc57a1bc767f3a5694087f4ae87159e0ba2665526cc29f02db8538764b0451d1892b8d43108f0fb84f42ddcd814bf5cd31d2e1bedf","ssdeep":"384:F8uCFFQkV1R3omCyqZwz4oXRMnbQdz0EVFxNzGyOf2:FKFFDaNwzDi8dzTVFxNXA2","tlshash":"b362d0ba2b0617a5faa449aed1ade31f71a180b1646cbb439d014032ce3723fdd547dd","first_seen":"2025-10-31T00:05:45.084877Z","last_seen":"2025-10-31T00:05:45.084877Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/HelixStudios-%E2%80%93-Twink-3-Times-Austin-Walker-Tyler-Moore-Vincent-Revero.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/HelixStudios-%E2%80%93-Twink-3-Times-Austin-Walker-Tyler-Moore-Vincent-Revero.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 17:46:25 GMT\r\netag: \"43a1-69039fa9-6b9fba;;;\"\r\nlast-modified: Thu, 30 Oct 2025 17:26:01 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17313\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 22713\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vMXV2chcVbEihL3DYCwMSp5%2BSMdstr6aE2hvWXWVeELQaYNQHWO7HMZYLTjaMPc%2FcXtPZJOoAbTKAaMio9wNbG5XBeldRQGtRww%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ede9254e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":17313,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"3692d962006afd60ae5b7b6804ca7dfd","sha1":"12037547ec74272e17d7f93db03f072eba652a55","sha256":"89ad782c8cea1f6c68ab1353c6c031d3b99972fb173d7377e5e6a08b5321e4c5","sha512":"57adef4891514e2d18a0cc7b7b6aef02d17e397dd6266148eb07cb82639b3cfc8ff0b69dbdf9304ef8c4392663fcd0d600e83c39f1b90de0b18f62d2ae7dbce6","ssdeep":"384:FlBB+MnfF+g/NY21luundj3VhT8CBMrtdjhOwT9DgMbb6+ppB:FbR9+O11dj3VhT7eYwTuM","tlshash":"ea72d0269b2fcb655c83fc31953e4b80c47679c071aebc2b2d1d925b8e614f194cc9ca","first_seen":"2025-10-31T00:05:45.086035Z","last_seen":"2025-10-31T00:05:45.086035Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2021/11/IMG_20211125_231044.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2021/11/IMG_20211125_231044.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 23:56:28 GMT\r\netag: \"56c2-619fba90-4ed5b9;;;\"\r\nlast-modified: Thu, 25 Nov 2021 16:32:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22210\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 510\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J9SzUJUuKQmzvUttBF2yCFqtnY92Oh%2BdzxTTGSE%2Br2i3FjbrosHu96enqBDMipIbMZOto%2BaEQKfx4j1FFfUC7gSrd4uhGhuFeYY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee69584e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":22210,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x360, components 3","md5":"7de9b317ad8bcf4aacc8bc02173294a1","sha1":"32a3b918cae98d2e7c38a1862604f529b2321572","sha256":"2b1a0049d8bb0336e0e6e35a8fa16178246ede7858e788d401b1437f394c0b1b","sha512":"194f10d0bd130268d70412f6a0640005435ae0cf222be9048e67350172327122a8c21ec4e6c9c545eac3083590a829805a9c9d8e7d0ec6cbf970e0749fb0103d","ssdeep":"384:9JeANtAdxa9sHu9i+EXC0KUubUj/7ueRuhpFXszyvocu6DQJLYfdPX9Bb22StbXk:ZEuMai+WC0F0u/7DohDqAZQJLYfd91Pz","tlshash":"8fa2d1d7d033d2aacd2442b07d89110f71826754a46fb8bde4968d2cb31c8c89aeca1f","first_seen":"2025-10-31T00:05:45.087164Z","last_seen":"2025-10-31T00:05:45.087164Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2021/11/IMG_20211105_204440.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2021/11/IMG_20211105_204440.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 00:17:41 GMT\r\netag: \"4ff9-618518a0-4edcce;;;\"\r\nlast-modified: Fri, 05 Nov 2021 11:42:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20473\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 85637\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IL8ZBXDpGz1yMMro%2BbEbnHojMp9ZYVuKJsUcPMgqW4z4wIvNXORjtHWJeZ2fnPJbm3J%2F5nAhb98ebp3Bc%2FxH6onXm5CWdOAIRyo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5eed97c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20473,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=4, height=0, orientation=[*0*], width=0], baseline, precision 8, 640x360, components 3","md5":"b59cb01f4f24e421d75374d7e7d4469d","sha1":"88f0f78ea5cffa22da21237aa85457f189e857ea","sha256":"9f10ce0e648852692f3bc260553ce75fc2c16594cbeaab65b05c5054d63b5743","sha512":"c63cb2e1f2fcd270dfc0519592e241c7ebe008a07a36a7433ce30c5e5edd8195cbc0cb5b07753e181a30b4714c60a4b94a59afc0835e7c48d0ad6da956bb473d","ssdeep":"384:8A9/EcayrS63zi1qRTzIjHRdoFH3mQZ6Wp5FX5X1reSufRdl8J5b4in:8J8jbpIAFHWQZ62zFMZin","tlshash":"dc92d0247f196f07d55ea4b8b09995e273a9f304a398feafc8889970b04144c7e14a7b","first_seen":"2025-10-31T00:05:45.08838Z","last_seen":"2025-10-31T00:05:45.08838Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Fri, 31 Oct 2025 00:52:59 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cFcM87O2Sep54WgEHe7lrApo8fw%2FhExiicMY0LClm%2BS%2F%2B1rzbqPwqyNHJfC1TlD8P29F%2BkBVIpJu2vQ4bITanlzAM7iylKRRbgo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\ncf-ray: 996ee5eee9804e4c-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-20T01:42:30.071841Z","times_seen":115143,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/themes/retrotube/assets/stylesheets/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:00.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/themes/retrotube/assets/stylesheets/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/wp-content/themes/retrotube/assets/stylesheets/font-awesome/css/font-awesome.min.css?ver=4.7.0\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Oct 2025 15:43:37 GMT\r\netag: \"12d68-68ac9c47-7e0114;;;\"\r\nlast-modified: Mon, 25 Aug 2025 17:24:23 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 77160\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:05:00 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RV46XRSA9t8apfI1ZkkZgek%2BBLRrTh0v8GT%2FFaFl%2BiwKiYTiXhM%2BmdfPMo7%2FTgpCSrU3Vzw%2F%2F2BahN5J9EYZJPhbDwlEF4UvoQs%3D\"}]}\r\nage: 374317\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5f3a9c44e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-06-20T01:50:30.299742Z","times_seen":498894,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chaseherbalpasty.com/check.html","fqdn":"chaseherbalpasty.com","domain":"chaseherbalpasty.com","tld":"com"},"ip":{"addr":"94.242.247.20","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:00.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chaseherbalpasty.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 01 Oct 2025 00:00:00 GMT","end":"Tue, 30 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"33:A3:14:CC:01:76:4E:33:44:46:15:D3:60:37:E2:11:39:59:F0:06","sha256":"29:67:DC:3A:7D:72:3E:0A:8C:3E:94:18:A0:47:AF:E8:3B:57:B6:5A:F9:C9:9B:5F:4A:36:73:3F:09:96:29:01"}}},"request":{"raw":"GET /check.html HTTP/1.1\r\nHost: chaseherbalpasty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nCookie: cart=1; cart_p=2\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 00:05:00 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Thu, 23 Oct 2025 09:18:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f9f2c9-39e\"\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":926,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"088dba8e97eede53134c93219f7ebbae","sha1":"adb707654d1fe0af7d0d7a9f55660d22bd3625e4","sha256":"6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff","sha512":"23a1f87731e8aee4658993cd1ce35ec179fea80b89bf52aca7634488f1bdfcf88b9cabca4859481357a9fee06cbb49df64bbe0878b1dae0e5df4fa34003c6d80","ssdeep":"","tlshash":"6211d04934e1684c1127a6301597a2183c32a40315cbd949fb9cd7301f815a7dc596df","first_seen":"2024-11-22T16:59:41.974716Z","last_seen":"2026-03-04T10:11:28.020186Z","times_seen":13721,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"playhubconnect.com/bn/bf3/7d0/56d/bf37d056d84d92ce50d337c48e4cb6ab143cda69.mp4","fqdn":"playhubconnect.com","domain":"playhubconnect.com","tld":"com"},"ip":{"addr":"104.18.14.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:01.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playhubconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 01:53:00 GMT","end":"Sun, 14 Dec 2025 02:52:57 GMT"},"fingerprint":{"sha1":"6F:7E:45:FD:0D:E1:5B:9F:C6:D0:2A:9F:AA:8E:F1:FA:79:84:B9:99","sha256":"0A:22:22:40:F0:60:14:FC:D9:59:21:94:0E:1A:55:24:DC:9F:21:05:F9:C7:0D:42:25:19:56:47:78:53:0D:8B"}}},"request":{"raw":"GET /bn/bf3/7d0/56d/bf37d056d84d92ce50d337c48e4cb6ab143cda69.mp4 HTTP/1.1\r\nHost: playhubconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Fri, 31 Oct 2025 00:05:02 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 952885\r\ncf-ray: 996ee5ffb93fb4f9-OSL\r\nx-amz-id-2: 4hLuiQEzjvWMhTxgfMGpSU/6u8DUcNm+SeUMEbh6YSAUgI2rfHmKQvWC59NYkek/DInun7M9ASg=\r\nx-amz-request-id: EX21PD7A1D5N99K7\r\nlast-modified: Thu, 15 May 2025 12:07:52 GMT\r\netag: \"87ef915cc39e1ca0204ebda8289b4f52\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nage: 506156\r\ncontent-range: bytes 0-952884/952885\r\nexpires: Mon, 01 Dec 2025 00:05:02 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":950272,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"82e27ef6c4fd91188f08491cbf64ee60","sha1":"172397bb2454bc50f95e23a96779fa8652bfdf34","sha256":"4dff7cbf3a086fcd5aef4bc016c1c1519d8082094b6e2bf8dd029b3cbac92fad","sha512":"4d4b6f8d4eb3aad1c38bcd96811ebde8a998fe175c6f57ef069f14de60367e56bed9a29f92ad7641444d99e86d3b0acb060c7f7c50cb700e419f1fc2888221be","ssdeep":"6144:WAFoTGEP7FgOxU0zl9IJ9QJGas83T2q2cw8bHJ8cufvnC2IuWCA:WCqG27F5xU0J9IJ94GA3T7HbpufvtWf","tlshash":"11157b6e0d964132ff4cfa3e9494c867d8e05a15c9c6c30fb95c09118bbe25a47bf4ba","first_seen":"2025-06-12T01:03:56.984979Z","last_seen":"2025-12-31T00:08:02.714068Z","times_seen":23,"resource_available":false,"data":null}},"time_used":488,"timings":{"blocked":164,"dns":17,"connect":13,"send":0,"wait":114,"receive":53,"ssl":58},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"playhubconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/RFC-Monstercock-made-me-moan-with-pleasure-and-left-my-ass-full-of-milk-%E2%80%93-Andolinixxl-Julian-Shul.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/RFC-Monstercock-made-me-moan-with-pleasure-and-left-my-ass-full-of-milk-%E2%80%93-Andolinixxl-Julian-Shul.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 17:46:25 GMT\r\netag: \"33d7-69039fe0-6ba03e;;;\"\r\nlast-modified: Thu, 30 Oct 2025 17:26:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13271\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 22713\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gqYLH%2F1POEE2ERZ%2BCgJpLRjXf711F39fx6ThZ5SwvSEt8adM%2Bee%2Bu7j%2FZ2A20yqElpmETknpk3x528uLlKFUSU8gX2c4q7zE9lU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5edd9204e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13271,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"f384297c41015c1b2d1568769dc0b627","sha1":"07eb6e301d5708c390c770020b1549cb15d5bbda","sha256":"4d0c494097d4eb8c9f46fd82fc3f8ae85d6e8a7af8cc52b61b39dcee89d30af5","sha512":"a1795f861d0931d5f15c7a2b0d455c7c7ef9966a967a3cad89c29ec576c48039df166160e9d36f956331a73d5ab065c64df94f2d09e2af2aabc60a7351e3d712","ssdeep":"384:Fyqj7JpCxOKffbhsuVaO6BjEloRq570beRTG:FN2rfbhOZgloRq5nRa","tlshash":"9f52d0377b1808575c528b3b833d43e9ee5ba1ab7ec876384cee40a92533d0554e32e9","first_seen":"2025-10-31T00:05:45.09142Z","last_seen":"2025-10-31T00:05:45.09142Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/OnlyFans-Kenvin-Daniel-Pietro.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/OnlyFans-Kenvin-Daniel-Pietro.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 05 Nov 2025 21:18:12 GMT\r\netag: \"3f8d-69027c7f-6b9f36;;;\"\r\nlast-modified: Wed, 29 Oct 2025 20:43:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16269\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96406\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IkdqNOWiz7%2FIB6rvqsusQs0uUSY9ZEP0ERw4qQKL1OF%2F5ZLzmrT01YUmnY1pxn0lDs2z1M0AT8%2BLn6gTMGhyIHSL9GKkPdrjH%2B0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee19414e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16269,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"6a69df6f09e23a4438648707d7f3ab40","sha1":"b2e3048f68858e3b78dfa8e25829af3d708137e3","sha256":"e63bee1d171676798065bf2dfb7118b03c28ac8b09ade6a79423f8e4e9277607","sha512":"681b549342bc3bd27b29372c15e1e266d06469fefe15600b91c080df8d0c7a58f4a6d3dcc58d9186c7ade4797fa6741a516d0aafaa9e7325fe16aec1ea09e53b","ssdeep":"384:FqcHm3O+NFc0lWiKwypUtvflFo6ploq2huad/:FqcHY/cccwypUJljL2h1d/","tlshash":"da72e1e3eb8c0088be5d43ad03c4df15d44418262bf6b51c4ff6157ee65230720a9da7","first_seen":"2025-10-31T00:05:45.092546Z","last_seen":"2025-10-31T00:05:45.092546Z","times_seen":1,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2021/09/fa657f04cd41025395102998c1c5f9bc_1.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2021/09/fa657f04cd41025395102998c1c5f9bc_1.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 03 Nov 2025 00:25:29 GMT\r\netag: \"3daa-613df542-52d796;;;\"\r\nlast-modified: Sun, 12 Sep 2021 12:40:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15786\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 344369\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BB7y2ZeA%2B9%2FMRCJ9GhUVb4uby%2FID3uWWac2GcRmM4d6mevgIZccBYQExRNAFRXrrBgNlX%2FVB2s3apmtdxKD5s82CJSbhuuNyyw4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5eed97a4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15786,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=4, height=0, orientation=[*0*], width=0], baseline, precision 8, 640x360, components 3","md5":"e8f2d5240739fa1db024c98db74554f1","sha1":"ebfe3cb5117515dca086a1fd48e7cc8b79f49b09","sha256":"62c66e8cad5221fd15ea0c2578d3e51205bdd188f0623db3440d443bc0f6c272","sha512":"3495240e0fdae5f77a7ffaca7037426b7ea7db91a7eb94466b43bd01b07e8103348235d8da2503b6d713b35a69a6028342d3109f936fcadf6f8115ae6d7af5a5","ssdeep":"384:8AX06rOssOW4jpmGmt4iUk5/IChFvNGo9:8l6rOsbW4jpbS1UkNIsFt9","tlshash":"4662c01a7961853ae24b9a3841cc0fd83f78b320c2f03b17d38d192c5b62e9d24f2257","first_seen":"2025-10-31T00:05:45.093651Z","last_seen":"2025-10-31T00:05:45.093651Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chaseherbalpasty.com/get/2018929?zoneid=2018929\u0026pid=__clb-2018929_5\u0026jp=_clkrnvpdkpchgwqyqhhsup\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.627\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=Ord-7bcKmZpiyzUDVIIHN\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=VA4u2v7aHR0cHM6Ly9meGdneHQuY29tLw\u0026afid=4056115527338496\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026dto=2\u0026pload=2492\u0026rlp=%5B0%2C91%2C298%2C159%2C2598%2C27804%2C4067%2C27455%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=3\u0026uf=0\u0026freq=0","fqdn":"chaseherbalpasty.com","domain":"chaseherbalpasty.com","tld":"com"},"ip":{"addr":"94.242.247.20","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:01.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chaseherbalpasty.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 01 Oct 2025 00:00:00 GMT","end":"Tue, 30 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"33:A3:14:CC:01:76:4E:33:44:46:15:D3:60:37:E2:11:39:59:F0:06","sha256":"29:67:DC:3A:7D:72:3E:0A:8C:3E:94:18:A0:47:AF:E8:3B:57:B6:5A:F9:C9:9B:5F:4A:36:73:3F:09:96:29:01"}}},"request":{"raw":"GET /get/2018929?zoneid=2018929\u0026pid=__clb-2018929_5\u0026jp=_clkrnvpdkpchgwqyqhhsup\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.627\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=Ord-7bcKmZpiyzUDVIIHN\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=VA4u2v7aHR0cHM6Ly9meGdneHQuY29tLw\u0026afid=4056115527338496\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026dto=2\u0026pload=2492\u0026rlp=%5B0%2C91%2C298%2C159%2C2598%2C27804%2C4067%2C27455%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=3\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: chaseherbalpasty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nCookie: cart=1; cart_p=2; CHCK=1; PTS=AoKhbNJpA_0toWMB; UID=2510301905dc7bacea67a64fed91e4a0c0b9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 00:05:01 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Fri, 04 Dec 2026 00:05:01 GMT; Secure; SameSite=None\nPTS=AoKhbNJpA_0toWMC; Path=/; Expires=Fri, 04 Dec 2026 00:05:01 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5038,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (5038), with no line terminators","md5":"b0072327169e8c82322a04c78375e527","sha1":"af2a32a0b12cdfce9b4434c2318dbaf48dc3504d","sha256":"bd94d4a4d264be36534c7e69f5169c9ba010e1abfc6eee9717dcd35e8cc5d541","sha512":"f1253a197ca7ff6d1034abc0dce5806bc3b278ff32209d03f96d897fc7900a89b6b9b78077d72cd0327f6401d8559dc8a27dfb812ba5c0371663759fb241df6f","ssdeep":"96:gVD1QEASB0jpkvxEASB0jp5FEASB0jp4BEASB0jpUuk3vri8PYC6Ko:0XLB0Vk2LB0VQLB0VjLB0VR6vrBDZo","tlshash":"b7a1b7b08897e9439cd1fc8c20532efdd8d423656a4655352666f21ff4acf788a3b4d1","first_seen":"2025-10-31T00:05:45.095095Z","last_seen":"2025-10-31T00:05:45.095095Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"playhubconnect.com/bn/bf3/7d0/56d/bf37d056d84d92ce50d337c48e4cb6ab143cda69.mp4","fqdn":"playhubconnect.com","domain":"playhubconnect.com","tld":"com"},"ip":{"addr":"104.18.14.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:01.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playhubconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 01:53:00 GMT","end":"Sun, 14 Dec 2025 02:52:57 GMT"},"fingerprint":{"sha1":"6F:7E:45:FD:0D:E1:5B:9F:C6:D0:2A:9F:AA:8E:F1:FA:79:84:B9:99","sha256":"0A:22:22:40:F0:60:14:FC:D9:59:21:94:0E:1A:55:24:DC:9F:21:05:F9:C7:0D:42:25:19:56:47:78:53:0D:8B"}}},"request":{"raw":"GET /bn/bf3/7d0/56d/bf37d056d84d92ce50d337c48e4cb6ab143cda69.mp4 HTTP/1.1\r\nHost: playhubconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Fri, 31 Oct 2025 00:05:01 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 952885\r\ncf-ray: 996ee5ff48ffb4f9-OSL\r\nx-amz-id-2: 4hLuiQEzjvWMhTxgfMGpSU/6u8DUcNm+SeUMEbh6YSAUgI2rfHmKQvWC59NYkek/DInun7M9ASg=\r\nx-amz-request-id: EX21PD7A1D5N99K7\r\nlast-modified: Thu, 15 May 2025 12:07:52 GMT\r\netag: \"87ef915cc39e1ca0204ebda8289b4f52\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nage: 506156\r\ncontent-range: bytes 0-952884/952885\r\nexpires: Mon, 01 Dec 2025 00:05:01 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":952885,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"87ef915cc39e1ca0204ebda8289b4f52","sha1":"bf37d056d84d92ce50d337c48e4cb6ab143cda69","sha256":"a5c2f77a616c7caf3801bb24f99ee6ac1c6cc2bc85c0d79f4224779e39a16249","sha512":"c2fd78f56f77aaec7442d725d8e0638dcc408ea40311adfdb7d00eefdbcaef3f6026b8a43f36801240c172391585f4c81276c9a61e02ae6f86398751a84c9b81","ssdeep":"6144:WAFoTGEP7FgOxU0zl9IJ9QJGas83T2q2cw8bHJ8cufvnC2IuWCe:WCqG27F5xU0J9IJ94GA3T7HbpufvtWP","tlshash":"b6157b6e0d964132ff4cfa3e9494c867d8e05a15c9c6c30fb95c09118bbe25a47bf4ba","first_seen":"2025-04-13T17:07:16.972621Z","last_seen":"2026-01-28T02:27:55.924774Z","times_seen":975,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":91,"dns":33,"connect":1,"send":0,"wait":14,"receive":162,"ssl":59},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"playhubconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/OnlyFans-James-Cassidy-Bryce-Jax-Sam-Holister-Michael-Boston-River-North.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/OnlyFans-James-Cassidy-Bryce-Jax-Sam-Holister-Michael-Boston-River-North.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 05 Nov 2025 21:18:12 GMT\r\netag: \"409f-69027c7f-6b9f30;;;\"\r\nlast-modified: Wed, 29 Oct 2025 20:43:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16543\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96406\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IWHLbvFRXhgi3Q4u%2BPl0hjUC0kEppl0%2BJTw%2BcHbMOsIN3sXttls2GqGexkHB8fVptbttW3iU9U6x9KlgqCkC7490NBskcP58eIo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee19364e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":16543,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"0f9cfeda0000ce9b0f57fc4c4deff725","sha1":"6fbc79daf067482b8f391914105f824c3cd534ff","sha256":"d9cc91f2e0e883766777554a1de9f128da3f9f92e75b1af2619a69433e652efc","sha512":"e8470cebb41664865ff23a54ab72138fcaed6915cea6d459a2627014c29594f90628a4b89bc2ff2dd8ae056c178fb4acd7f0c048b6a4913a2d25c79f27244cf5","ssdeep":"384:FXswp69rQP+hTIBe90TizTdy/C3Jbzsqxatu9U/SsQH:F9aAxBe1lya3Jb/xatu92k","tlshash":"3472c0cf170fc597041bc2293cbb595369c59beab2fa753a0e5613a10cc419db61186b","first_seen":"2025-10-31T00:05:45.096406Z","last_seen":"2025-10-31T00:05:45.096406Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/OnlyFans-Kenvin-LazyTigerJJ.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/OnlyFans-Kenvin-LazyTigerJJ.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 05 Nov 2025 21:18:12 GMT\r\netag: \"43de-69027c7f-6b9f3c;;;\"\r\nlast-modified: Wed, 29 Oct 2025 20:43:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17374\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96406\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7pXAj4%2F9CwLFjIpzN%2B12YIgfz1jD5aicfEbN4XfsozUBC3JnhjrY1Mg5WAWgn2uOXh4AbGwUDrUp1zQ5wF3lggYcQlcz6fjrq8k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee19404e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17374,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"dad0713fc4f0f03b8b89423d1fb3a08a","sha1":"22621754c53b18f02956a25ae6c4652ad86ad4a0","sha256":"9b542cc82edc0a661ecd78953103461963ea5f18e040cd68ea8db2aeae162f08","sha512":"4c00c74d2ece0e7b2558ecea2b2fc03507c7e002600c17b1eef9d42f3d721c35ac8c2c2136b1681c8b9e34ac6e05120c9e4727f57743f0af0714c74eda7a14f5","ssdeep":"384:FxMBIuEOXkXTJE8FH1TnWTauwyE3gQhMQcClXvMD1Luc:FWiX1EG1mauwyGgQCClX0Zt","tlshash":"b072e16b737858975f883c772566c5a7c85e2bb2e0c33dd9d490037a670ce4e4060d49","first_seen":"2025-10-31T00:05:45.097566Z","last_seen":"2025-10-31T00:05:45.097566Z","times_seen":1,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2023/05/RFC-Memories-Of-A-Straight-Scort-Blessexxx-Gay-Danny-Boss.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2023/05/RFC-Memories-Of-A-Straight-Scort-Blessexxx-Gay-Danny-Boss.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 09:52:03 GMT\r\netag: \"1fb4-646e2f0b-62d56e;;;\"\r\nlast-modified: Wed, 24 May 2023 15:36:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8116\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 51175\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nSieWRJYhVourTkANRozUEexG9jTu26mcxB3XqIepT7uEynCU7ohqnsWHSEZ47xUAUQSy%2F7MGffRklwIK9ysdJtbdkyC1UMvaA8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee49514e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8116,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 400x225, components 3","md5":"d461f6294bc4683287628df7f8490e4c","sha1":"bbe549a497e28ecedeafd8337a224d7e9672f40e","sha256":"bc67669a8bf0601feccd05ae92d631e009366a3c3c617a7da0f412a40fd27f0d","sha512":"e006497b3bce05ab6a055557b94b1ed9996ca57cd5bb3b489e5c6089aae581206e00160acb8da17e16acfb8b789d8160a255c041cd415f23f4d562e3a657e4e3","ssdeep":"96:BGBEuYOYgpr+U8LweLCShwngpH2nddJgdcpUZKYkHzhJvadrMZaoGbBvn+BS8:BI35DF8c7SOKGB+cGMzhpqrMF0Bv+Bz","tlshash":"b7f1ae92cb5ac9237d760efb052c0bab1fe183f77d88374f9d26149901ea24a16017e0","first_seen":"2025-10-31T00:05:45.09871Z","last_seen":"2025-10-31T00:05:45.09871Z","times_seen":1,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chaseherbalpasty.com/get/2018929?zoneid=2018929\u0026pid=__clb-2018929_1\u0026jp=_clpxcgyopzqqdtnfzoeqoc\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.627\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=Ord-7bcKmZpiyzUDVIIHN\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=kjTbye6aHR0cHM6Ly9meGdneHQuY29tLw\u0026afid=3493165573873152\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026dto=2\u0026pload=1961\u0026rlp=%5B0%2C91%2C298%2C159%2C2598%2C27804%2C4067%2C27455%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=3\u0026uf=0\u0026freq=0","fqdn":"chaseherbalpasty.com","domain":"chaseherbalpasty.com","tld":"com"},"ip":{"addr":"94.242.247.20","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:01.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chaseherbalpasty.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 01 Oct 2025 00:00:00 GMT","end":"Tue, 30 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"33:A3:14:CC:01:76:4E:33:44:46:15:D3:60:37:E2:11:39:59:F0:06","sha256":"29:67:DC:3A:7D:72:3E:0A:8C:3E:94:18:A0:47:AF:E8:3B:57:B6:5A:F9:C9:9B:5F:4A:36:73:3F:09:96:29:01"}}},"request":{"raw":"GET /get/2018929?zoneid=2018929\u0026pid=__clb-2018929_1\u0026jp=_clpxcgyopzqqdtnfzoeqoc\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.627\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=Ord-7bcKmZpiyzUDVIIHN\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=kjTbye6aHR0cHM6Ly9meGdneHQuY29tLw\u0026afid=3493165573873152\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026dto=2\u0026pload=1961\u0026rlp=%5B0%2C91%2C298%2C159%2C2598%2C27804%2C4067%2C27455%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=3\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: chaseherbalpasty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 00:05:01 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Fri, 04 Dec 2026 00:05:01 GMT; Secure; SameSite=None\nPTS=AoKhbNJpA_0toWMB; Path=/; Expires=Fri, 04 Dec 2026 00:05:01 GMT; Secure; SameSite=None\nUID=2510301905e64e3eae85754536834c134b47; Path=/; Expires=Fri, 04 Dec 2026 00:05:01 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5038,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (5038), with no line terminators","md5":"cee413ed2416d819e416b676dc5b98eb","sha1":"f184aa8d38086c91f71da666d0044d3f33a4d383","sha256":"5b1c796bb5eb7dbf8d3d94c413e3bad7c0eca66e9024da87ec8b8def0ccbc81f","sha512":"8c28420a5972d7c25ad88702ebb06f575ad0971e8504a3a9f20831691677385d2226ba42c0c9e536cbd0124c902ce6683967d46a3a3f00f6dec5343c052a41a6","ssdeep":"96:AlvSsdcoVaU3QiMvSsdcoVaU3QwvSsdcoVaU3QlvSsdcoVaU3QhreK8gWQ4Byo:AgoVatMoVatjoVatgoVatBekJo","tlshash":"a6a1d94ab03c981bbce01c6fb4c41e12b7232d43ad7e70f68d0a0642b094ef77995c65","first_seen":"2025-10-31T00:05:45.099742Z","last_seen":"2025-10-31T00:05:45.099742Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.chaseherbalpasty.com/static/video/bn/bf3/7d0/56d/bf37d056d84d92ce50d337c48e4cb6ab143cda69.mp4","fqdn":"www.chaseherbalpasty.com","domain":"chaseherbalpasty.com","tld":"com"},"ip":{"addr":"94.242.247.20","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:02.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chaseherbalpasty.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 01 Oct 2025 00:00:00 GMT","end":"Tue, 30 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"33:A3:14:CC:01:76:4E:33:44:46:15:D3:60:37:E2:11:39:59:F0:06","sha256":"29:67:DC:3A:7D:72:3E:0A:8C:3E:94:18:A0:47:AF:E8:3B:57:B6:5A:F9:C9:9B:5F:4A:36:73:3F:09:96:29:01"}}},"request":{"raw":"GET /static/video/bn/bf3/7d0/56d/bf37d056d84d92ce50d337c48e4cb6ab143cda69.mp4 HTTP/1.1\r\nHost: www.chaseherbalpasty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 00:05:02 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 952885\r\nlast-modified: Wed, 15 Oct 2025 18:51:27 GMT\r\netag: \"68efed2f-e8a35\"\r\nexpires: Tue, 30 Dec 2025 00:05:02 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-expose-headers: Last-Modified\r\ncontent-range: bytes 0-952884/952885\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":952885,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"87ef915cc39e1ca0204ebda8289b4f52","sha1":"bf37d056d84d92ce50d337c48e4cb6ab143cda69","sha256":"a5c2f77a616c7caf3801bb24f99ee6ac1c6cc2bc85c0d79f4224779e39a16249","sha512":"c2fd78f56f77aaec7442d725d8e0638dcc408ea40311adfdb7d00eefdbcaef3f6026b8a43f36801240c172391585f4c81276c9a61e02ae6f86398751a84c9b81","ssdeep":"6144:WAFoTGEP7FgOxU0zl9IJ9QJGas83T2q2cw8bHJ8cufvnC2IuWCe:WCqG27F5xU0J9IJ94GA3T7HbpufvtWP","tlshash":"b6157b6e0d964132ff4cfa3e9494c867d8e05a15c9c6c30fb95c09118bbe25a47bf4ba","first_seen":"2025-04-13T17:07:16.972621Z","last_seen":"2026-01-28T02:27:55.924774Z","times_seen":975,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":168,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chaseherbalpasty.com/jserror?type=banner\u0026bavar=0\u0026build=1.0.627\u0026zoneid=2018929\u0026e=Error\u0026m=BCLC\u0026aa=0\u0026trid=\u0026url=https%3A%2F%2Ffxggxt.com%2F","fqdn":"chaseherbalpasty.com","domain":"chaseherbalpasty.com","tld":"com"},"ip":{"addr":"94.242.247.20","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:02.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chaseherbalpasty.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 01 Oct 2025 00:00:00 GMT","end":"Tue, 30 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"33:A3:14:CC:01:76:4E:33:44:46:15:D3:60:37:E2:11:39:59:F0:06","sha256":"29:67:DC:3A:7D:72:3E:0A:8C:3E:94:18:A0:47:AF:E8:3B:57:B6:5A:F9:C9:9B:5F:4A:36:73:3F:09:96:29:01"}}},"request":{"raw":"GET /jserror?type=banner\u0026bavar=0\u0026build=1.0.627\u0026zoneid=2018929\u0026e=Error\u0026m=BCLC\u0026aa=0\u0026trid=\u0026url=https%3A%2F%2Ffxggxt.com%2F HTTP/1.1\r\nHost: chaseherbalpasty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nCookie: cart=1; cart_p=2; CHCK=1; PTS=AoKhbNJpA_0toWMC; UID=251030190545e4ab9b96b94cf9a2252b2bb6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 00:05:02 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":91,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/FistingInferno-Fuck-The-Police.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/FistingInferno-Fuck-The-Police.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 17:46:25 GMT\r\netag: \"4866-69039fa6-6b9fa8;;;\"\r\nlast-modified: Thu, 30 Oct 2025 17:25:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18534\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 22713\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g5OyVxBEMXC26DxbzTQt%2FaFxwE9Y1beafGx0NwkOsx6waDmS59b4hkQW%2Bp858BwxObAvV7NAx4ZAcPL5tDIHDgaVPAZJRvDyKaY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ede9244e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18534,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"2915d4fb86d5f00fc839c8978a89ffea","sha1":"c7ddc275be05ba6a1a0ef2d1606098e4195d6ae6","sha256":"4250f22c25fe79a8c2475ec861c750ebf62792120b8b3369524df160a478b05d","sha512":"635fa5f0217cfe10fa8bd695d9c6516ad76522bdf2aba4ef363c503a166d79cd094b4d7ec0413670a41385958ec5672cd596a4bb9303a29619f48de2d231c5ae","ssdeep":"384:Fcri+iIIYpSQnAGy/YSlPd7Jb5Q6oOuCJueP5p07B0eLOVsDxJ5eyvEEKLzrVt:FcrSIPZnjygSdd7Jbpdp80STRZEFzrVt","tlshash":"a482e1d0fb6cd0e52983e2366dba186dcde8254b42687065de11f20c2b92359fd1f2e5","first_seen":"2025-10-31T00:05:45.100862Z","last_seen":"2025-10-31T00:05:45.100862Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/RFC-A-Backstage-video-in-which-the-cameraman-ends-up-taking-part-in-the-scene-%E2%80%93-Gastonix-Mutante-Joris-Leonard.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/RFC-A-Backstage-video-in-which-the-cameraman-ends-up-taking-part-in-the-scene-%E2%80%93-Gastonix-Mutante-Joris-Leonard.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 17:46:25 GMT\r\netag: \"4c71-69039fe2-6ba044;;;\"\r\nlast-modified: Thu, 30 Oct 2025 17:26:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19569\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 22713\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=23b7Trsv%2BB5EHrR6McF3ktTExXofn1vjcLRJOOUFeSwlxypVjMdxC1QULgWHjfTvoESf7v8rWPFXo3pKhLg%2BOLaRZRdSYj7UnjA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ede9274e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":19569,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"ee5bdbbfcf2dc5f0435a19cacfc24cd3","sha1":"8b63169a02c26c7370e01360b52053b13b82d097","sha256":"5e7af4956e1e2a39dc6582dac42ad02324c8cee2b1f4fb31e9f024d3f5e3b67a","sha512":"0197049f136c74248602b12c473fbd80aea7fa79396ca72cf4574445c9820fa327d98fd60b57e4bc4028ae1a91e86929cfb781c8e3cc2bdd4edf4c459eb6765a","ssdeep":"384:FVEr35bvUGWJaynRMsHSKQdF4oxYpWIyljbxdn4K8idwEVh++5o1OB:FVSbvPWJPnRMsN64Eqyp/n4XywEasosB","tlshash":"6392c07ac7cfe8e110075035d3686361c1ae4ed8b760392a5d2b25b463613b53ac73ac","first_seen":"2025-10-31T00:05:45.101961Z","last_seen":"2025-10-31T00:05:45.101961Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/WilliamHiggins-Rudy-Fesak-%E2%80%93-EROTIC-SOLO.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/WilliamHiggins-Rudy-Fesak-%E2%80%93-EROTIC-SOLO.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 17:46:25 GMT\r\netag: \"4846-69039fbb-6b9fea;;;\"\r\nlast-modified: Thu, 30 Oct 2025 17:26:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18502\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 22713\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MneyPttOVz9TS7C9wFMhSGjRctjuktp6nwQxbm0Ok4uFKpQYBEBRqHBKAv6MIh6klPrGPm4OcJlOqkEKjgRGBXl%2Bj4kMfJzy46Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ede9284e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18502,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"25a1033cbd7169a50efb3c6bfa6eb603","sha1":"9d76127ad4d4eb5c457f5773818d42ed31fe7df3","sha256":"00729c852dd0be138d624d82494a7bacfae51a3e158139f03d60f83b6ffbea86","sha512":"1a6fe6a53002b5edf5d9d5dcb5bbbc2770370e08b63d0f75365ff1401b862339938c2e6bdeaffa34e8a96a2246697869c4f46fe155e3da4e006576c46d77a729","ssdeep":"384:F+WEpIyRYiNZ5YsrLWmi4XvgfVtbol/2hzCVCDNBPOB8ss:FDyRYif/Zi4Eot2JCVIcFs","tlshash":"c382d033a363735b00748501ebb5b554c7e5cf9ebd623a6a2f2182bfdf65a0290d82c0","first_seen":"2025-10-31T00:05:45.103056Z","last_seen":"2025-10-31T00:05:45.103056Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/OnlyFans-TexasGymJock-Florida-Muscle-Bottom.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/OnlyFans-TexasGymJock-Florida-Muscle-Bottom.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 05 Nov 2025 21:18:12 GMT\r\netag: \"423c-69027c83-6b9f6c;;;\"\r\nlast-modified: Wed, 29 Oct 2025 20:43:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16956\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96406\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jsgkPzHSrfD0jj4vC4GoIbw5qDxZTVtpqCg%2FlS8PVTcAGxA8HxJWGuiqW574wetcuiqmSzr3nDkZfwtBD%2Fa4G2CewLaD0duq%2BP8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee19314e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":16956,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"0c73ffb70f6afe73a17b80d9eaef606b","sha1":"4962d4d6a3304cb7808151858749fb807594da5c","sha256":"e1ef763a3a8a870b6a77e1ecc7f6d4962d7da88162cd9c7e887af9fe506b83a5","sha512":"964fa22f484f85f1f7a0c1d232dfd31529a4ef854dd12461dd466e299b75ed2f7f8a5e0a04ae0cbcf498fdaceacb15f70ac4dc47d886f87b0fb45107ed9ab620","ssdeep":"384:F1R6qt2qXcBHVAD+3g/ZBWJnDoPTRGCSZhpzu0ndNtVKcxbBRVOUeL:F10qt2xHV/AZq8lGCSZ/C0VbbBREL","tlshash":"db72d03c4b8190f5ad37045889eb4eeab7e80dc5e8f17a923d5f056ec4348bc6a08618","first_seen":"2025-10-31T00:05:45.10426Z","last_seen":"2025-10-31T00:05:45.10426Z","times_seen":1,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2023/06/BravoFucker-Spicy-Boys-Pablo-Bravo-Carlos-Maranhao.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2023/06/BravoFucker-Spicy-Boys-Pablo-Bravo-Carlos-Maranhao.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 23:56:28 GMT\r\netag: \"392f-64872f64-62ac8a;;;\"\r\nlast-modified: Mon, 12 Jun 2023 14:44:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14639\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 510\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h8mautWqFChtl7r55hzFO14tqyYySUjCe1y3t%2FYGynQQ8n1Ii8WFu5Qp6nEZDofqTHrP%2FkzPEHBTtJHWTmqAS5a2uwHBRxLWLaA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee99634e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14639,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 400x225, components 3","md5":"ccad0b4ba0fbc316a503b987393c8cdf","sha1":"6f680e15393dbe9a004cc9c1706eb278fdccd933","sha256":"c5476dd5eb1ae852a239daeff864e4e486997a0711b5dbe33ab084e404eda530","sha512":"845e9fa57549639c781c08c848ba5e409e1634ca82dc37999bebe9d8aeef3d9e7b5e4b4327c96ba2d6cd3ab1d6af199a382155e3ce63808762495c22b05c20da","ssdeep":"384:Sw12s309ew2LQ4+zhwArjeDJx50lvevOGZiEu6PuP:Sw12sG2AzSAeD6lNEzM","tlshash":"ec62c06c031007648603eeaf26654823f0c7fddb719cf6dd7eb9760362d241d247a66a","first_seen":"2025-10-31T00:05:45.105379Z","last_seen":"2025-10-31T00:05:45.105379Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/themes/retrotube/assets/js/jquery.touchSwipe.min.js?ver=1.6.18","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:00.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/themes/retrotube/assets/js/jquery.touchSwipe.min.js?ver=1.6.18 HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Oct 2025 05:06:58 GMT\r\netag: \"4fce-68ac9c47-7e0106;br\"\r\nlast-modified: Mon, 25 Aug 2025 17:24:23 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 4876\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 31 Oct 2025 00:05:00 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 154284\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zep951wN%2F6AOGXjdwawQnvZS28fxEpYjKM8dEV8V%2BqckEh4xfJyTqL3M32qIa%2FitBGw7zycbD%2BIGsR2qbDr6BLqN0w46i0afabo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 996ee5f449cb4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20430,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (20018)","md5":"4cd5ea35543390c5fc4e9def651ab721","sha1":"d360aa74dff157fcefda69336ecf420f04940f98","sha256":"9167cb37ed21405ef9556646b83789a2099c15398f5cea867470df1e81752e17","sha512":"d666a51729862abb8d23b0cca5d5ade738c08df2a23fbabb55be95f2a1fbef60255bda850cb36457e70bb2706067f9cee620169c9166f5e9f29a48af470d4fab","ssdeep":"384:lrKvSC3FheMYNzktJlro8aVfPxodAuyalYleh++PFoAS4TSPE9MfA+0UUTK7:gqC36LkJcjPxodAl8DiPE9/+0UKK7","tlshash":"da9294c5bb053d53e9ff12f64157170ba2368eed050e10289839efc629314b1a6efb69","first_seen":"2023-03-07T01:15:16Z","last_seen":"2026-06-20T01:50:30.347143Z","times_seen":5207,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/themes/retrotube/assets/js/jquery.bxslider.min.js?ver=4.2.15","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:00.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/themes/retrotube/assets/js/jquery.bxslider.min.js?ver=4.2.15 HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Sep 2025 07:28:46 GMT\r\netag: \"5ebc-68ac9c47-7e0104;br\"\r\nlast-modified: Mon, 25 Aug 2025 17:24:23 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 6023\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 31 Oct 2025 00:05:00 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 300800\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B1I%2FxuED8CVIy0XAMNsfkZgY05Lqjy8znpxdCUwt7%2BJbxWLckf6SFuCnkqJNhGUh%2FaloogKzVcjlS4xkeUBoKzzD4DkF0ERVYvI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 996ee5f459cc4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":24252,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (24063)","md5":"c675495748ef0df6858b93dd9e623c46","sha1":"e1be723e4e25d37282821c50b7e12796d3df5f8d","sha256":"9a32744fa4707d6ea1ad2b696c644c4f45d327509989b4625b8a980e4a45e271","sha512":"1775ad0e5bc7d3cc9ebdd032b94e440a0872f616f983ff867511984daba748ed52e1de5c67f0e4648947bef65b499b3a6197ff7726cf1f481b7d4253b6711127","ssdeep":"384:nudkTa6bYaGQZKbZi1X5U59g+rzyPSS1SMVu8r2WiWQK7XYANWck6QDhC2k+0CMu:uv9gPSSbs8PwhCK0CMl+ArJwz","tlshash":"e6b2b609b13939be05f632baf25ecb0550f6448d9827f0f4a8b5c94ddad88d4102fbe6","first_seen":"2023-03-07T01:15:16Z","last_seen":"2026-06-20T01:50:30.363656Z","times_seen":4253,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chaseherbalpasty.com/check.html","fqdn":"chaseherbalpasty.com","domain":"chaseherbalpasty.com","tld":"com"},"ip":{"addr":"94.242.247.20","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:00.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chaseherbalpasty.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 01 Oct 2025 00:00:00 GMT","end":"Tue, 30 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"33:A3:14:CC:01:76:4E:33:44:46:15:D3:60:37:E2:11:39:59:F0:06","sha256":"29:67:DC:3A:7D:72:3E:0A:8C:3E:94:18:A0:47:AF:E8:3B:57:B6:5A:F9:C9:9B:5F:4A:36:73:3F:09:96:29:01"}}},"request":{"raw":"GET /check.html HTTP/1.1\r\nHost: chaseherbalpasty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nCookie: cart=1; cart_p=2\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 00:05:00 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Thu, 23 Oct 2025 09:18:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f9f2c9-39e\"\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":926,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"088dba8e97eede53134c93219f7ebbae","sha1":"adb707654d1fe0af7d0d7a9f55660d22bd3625e4","sha256":"6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff","sha512":"23a1f87731e8aee4658993cd1ce35ec179fea80b89bf52aca7634488f1bdfcf88b9cabca4859481357a9fee06cbb49df64bbe0878b1dae0e5df4fa34003c6d80","ssdeep":"","tlshash":"6211d04934e1684c1127a6301597a2183c32a40315cbd949fb9cd7301f815a7dc596df","first_seen":"2024-11-22T16:59:41.974716Z","last_seen":"2026-03-04T10:11:28.020186Z","times_seen":13721,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2023/05/OnlyFans-Shower-Time-Koaty-Sumner.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2023/05/OnlyFans-Shower-Time-Koaty-Sumner.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 08:36:06 GMT\r\netag: \"2c93-646a4200-62e0ef;;;\"\r\nlast-modified: Sun, 21 May 2023 16:08:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11411\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 55733\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O9uKqDhFrj6Jb6%2FI09NcETkze6L1T18QuWCYT72GKxMrUe1ZT%2BIQ3Sa3BFesIKSs8pVKM1qoIuiOpn0%2FbZWZyvy8H1u7nXqhqeo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee394e4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11411,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 400x225, components 3","md5":"58f86eaa7a7fb3b1dd9a2b1d266956dd","sha1":"333a9f65fa5018fbb439409422cd77bb592c8119","sha256":"4d8ceae5205f0e560e8f77ccbe9bba3ab0b1e5a667769184ddfb7a8e104ed15b","sha512":"e1601975ce7defb4fb7146f4ef07733b7c926337275c6edee8b99e800c8403dc219ad57b0f8fc32ca0d35007b9c5f503a6c4ecf4ba196e68a95b6b7f250fc44a","ssdeep":"192:BIoqC30h4LmbG3dLlyxMWAfYTU3q+3JDI3j+OKaxl0/gcFWM+rTz:SoqC302mKNAqWAwT0XJDI36ORq2z","tlshash":"8c32c02747ff8392db826eb2c92c0485014fd48bb4cdff187e6a11e696f01b87ca2016","first_seen":"2025-10-31T00:05:45.107589Z","last_seen":"2025-10-31T00:05:45.107589Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2024/08/OnlyFans-Javao-LondonGirthPlus.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2024/08/OnlyFans-Javao-LondonGirthPlus.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 05 Nov 2025 01:39:35 GMT\r\netag: \"2a4d-66d37f04-4f4092;;;\"\r\nlast-modified: Sat, 31 Aug 2024 20:37:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10829\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 167123\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hvR8QPAHQxVPAV1BV8w9K%2FJkWZmqjIC%2FUIrXWQBGQH9DpVFbekSnRF0jdzxt0BX9lxl2lGQHvJk582G2Q78VTxwxXc2Pf0%2FGkVc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee795f4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10829,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 400x225, components 3","md5":"893c3fe9e2ac149b51f7af1856b35a1a","sha1":"2064bd5c456084cb23eb4958b8a96c3b22019d89","sha256":"3506eb7616520d9322e53afc6f497d447e0f17b7f8729ff2ed56e1d2a6fce028","sha512":"e4a4bc2c1845061e8eaa4f829f3fa0a33c074665bbd236b7fd5460f61bcdacd7ee4bbdcc41c05e2a13344ebfa63509962eea78360aa948918903ff69782ee0e5","ssdeep":"192:BIq2ahJq44aTwisd1ci82kx0TGIFBT+qcOeyE2dLRsSslRF1B:SBahr4P7t8BxYGIx7bFsl/f","tlshash":"d322b09b87a04671bcfd2d77f90d778c9575cc843925b04b0d2808d7a43baca52b1f5a","first_seen":"2025-10-31T00:05:45.108641Z","last_seen":"2025-10-31T00:05:45.108641Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chaseherbalpasty.com/check.html","fqdn":"chaseherbalpasty.com","domain":"chaseherbalpasty.com","tld":"com"},"ip":{"addr":"94.242.247.20","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:00.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chaseherbalpasty.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 01 Oct 2025 00:00:00 GMT","end":"Tue, 30 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"33:A3:14:CC:01:76:4E:33:44:46:15:D3:60:37:E2:11:39:59:F0:06","sha256":"29:67:DC:3A:7D:72:3E:0A:8C:3E:94:18:A0:47:AF:E8:3B:57:B6:5A:F9:C9:9B:5F:4A:36:73:3F:09:96:29:01"}}},"request":{"raw":"GET /check.html HTTP/1.1\r\nHost: chaseherbalpasty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nCookie: cart=1; cart_p=2\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 00:05:00 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Thu, 23 Oct 2025 09:18:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f9f2c9-39e\"\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":926,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"088dba8e97eede53134c93219f7ebbae","sha1":"adb707654d1fe0af7d0d7a9f55660d22bd3625e4","sha256":"6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff","sha512":"23a1f87731e8aee4658993cd1ce35ec179fea80b89bf52aca7634488f1bdfcf88b9cabca4859481357a9fee06cbb49df64bbe0878b1dae0e5df4fa34003c6d80","ssdeep":"","tlshash":"6211d04934e1684c1127a6301597a2183c32a40315cbd949fb9cd7301f815a7dc596df","first_seen":"2024-11-22T16:59:41.974716Z","last_seen":"2026-03-04T10:11:28.020186Z","times_seen":13721,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/98348519?wmode=7\u0026page-url=https%3A%2F%2Ffxggxt.com%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A3xktzc2ogg05v7x8e2v8cowhnxhaz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2240%3Acn%3A1%3Adp%3A0%3Als%3A54964319613%3Ahid%3A395265548%3Az%3A0%3Ai%3A20251031000501%3Aet%3A1761869102%3Ac%3A1%3Arn%3A341241680%3Arqn%3A1%3Au%3A1761869102606664545%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A888%3Awv%3A2%3Ads%3A9%2C25%2C313%2C1%2C36%2C0%2C%2C527%2C6%2C2589%2C2589%2C8%2C2142%3Aco%3A0%3Acpf%3A1%3Ans%3A1761869098489%3Agi%3AR0ExLjEuMTg1MDczNzkzMC4xNzYxODY5MTAy%3Arqnl%3A1%3Ast%3A1761869102%3At%3AFXGGXT%20-%20Free%20HD%20and%20Amateur%20Gay%20Porn%20Videos\u0026t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(83952128)ti(1)","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"77.88.21.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:01.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"GET /watch/98348519?wmode=7\u0026page-url=https%3A%2F%2Ffxggxt.com%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A3xktzc2ogg05v7x8e2v8cowhnxhaz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2240%3Acn%3A1%3Adp%3A0%3Als%3A54964319613%3Ahid%3A395265548%3Az%3A0%3Ai%3A20251031000501%3Aet%3A1761869102%3Ac%3A1%3Arn%3A341241680%3Arqn%3A1%3Au%3A1761869102606664545%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A888%3Awv%3A2%3Ads%3A9%2C25%2C313%2C1%2C36%2C0%2C%2C527%2C6%2C2589%2C2589%2C8%2C2142%3Aco%3A0%3Acpf%3A1%3Ans%3A1761869098489%3Agi%3AR0ExLjEuMTg1MDczNzkzMC4xNzYxODY5MTAy%3Arqnl%3A1%3Ast%3A1761869102%3At%3AFXGGXT%20-%20Free%20HD%20and%20Amateur%20Gay%20Porn%20Videos\u0026t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(83952128)ti(1) HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fxggxt.com/\r\nOrigin: https://fxggxt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\naccess-control-allow-credentials: true\r\nlast-modified: Fri, 31-Oct-2025 00:05:01 GMT\r\npragma: no-cache\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nexpires: Fri, 31-Oct-2025 00:05:01 GMT\r\nstrict-transport-security: max-age=31536000\r\nlocation: /watch/98348519/1?wmode=7\u0026page-url=https%3A%2F%2Ffxggxt.com%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A3xktzc2ogg05v7x8e2v8cowhnxhaz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2240%3Acn%3A1%3Adp%3A0%3Als%3A54964319613%3Ahid%3A395265548%3Az%3A0%3Ai%3A20251031000501%3Aet%3A1761869102%3Ac%3A1%3Arn%3A341241680%3Arqn%3A1%3Au%3A1761869102606664545%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A888%3Awv%3A2%3Ads%3A9%2C25%2C313%2C1%2C36%2C0%2C%2C527%2C6%2C2589%2C2589%2C8%2C2142%3Aco%3A0%3Acpf%3A1%3Ans%3A1761869098489%3Agi%3AR0ExLjEuMTg1MDczNzkzMC4xNzYxODY5MTAy%3Arqnl%3A1%3Ast%3A1761869102%3At%3AFXGGXT%20-%20Free%20HD%20and%20Amateur%20Gay%20Porn%20Videos\u0026t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2883952128%29ti%281%29\u0026redirnss=1\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: https://fxggxt.com\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nset-cookie: yabs-sid=1702861941761869101; Path=/; SameSite=None; Secure\ni=bd3g5vh6FP2hfV9Cg5iPOGHS+0YzeW2LD1MhL74kQ/YRk6FD9DDucvfynwGVIkQ/MQeVTpvcFoAvp6v1t8vRKmQaTqs=; Expires=Mon, 29-Oct-2035 00:04:58 GMT; Domain=.yandex.com; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=2689359981761869101; Expires=Mon, 29-Oct-2035 00:04:58 GMT; Domain=.yandex.com; Path=/; Secure; SameSite=None\nyuidss=2689359981761869101; Expires=Sat, 31-Oct-2026 00:05:01 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure\nymex=1793405101.yrts.1761869101#1793405101.yrtsi.1761869101; Expires=Sat, 31-Oct-2026 00:05:01 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure\nbh=YK36j8gGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Sat, 05 Dec 2026 00:05:01 GMT; SameSite=None; Secure\nbh=YK36j8gGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Sat, 05 Dec 2026 00:05:01 GMT; SameSite=None; Secure\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":705,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"playhubconnect.com/bn/bf3/7d0/56d/bf37d056d84d92ce50d337c48e4cb6ab143cda69.mp4","fqdn":"playhubconnect.com","domain":"playhubconnect.com","tld":"com"},"ip":{"addr":"104.18.14.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:01.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playhubconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 01:53:00 GMT","end":"Sun, 14 Dec 2025 02:52:57 GMT"},"fingerprint":{"sha1":"6F:7E:45:FD:0D:E1:5B:9F:C6:D0:2A:9F:AA:8E:F1:FA:79:84:B9:99","sha256":"0A:22:22:40:F0:60:14:FC:D9:59:21:94:0E:1A:55:24:DC:9F:21:05:F9:C7:0D:42:25:19:56:47:78:53:0D:8B"}}},"request":{"raw":"GET /bn/bf3/7d0/56d/bf37d056d84d92ce50d337c48e4cb6ab143cda69.mp4 HTTP/1.1\r\nHost: playhubconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Fri, 31 Oct 2025 00:05:01 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 952885\r\ncf-ray: 996ee5ff38f7b4f9-OSL\r\nx-amz-id-2: 4hLuiQEzjvWMhTxgfMGpSU/6u8DUcNm+SeUMEbh6YSAUgI2rfHmKQvWC59NYkek/DInun7M9ASg=\r\nx-amz-request-id: EX21PD7A1D5N99K7\r\nlast-modified: Thu, 15 May 2025 12:07:52 GMT\r\netag: \"87ef915cc39e1ca0204ebda8289b4f52\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nage: 506156\r\ncontent-range: bytes 0-952884/952885\r\nexpires: Mon, 01 Dec 2025 00:05:01 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":952885,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"87ef915cc39e1ca0204ebda8289b4f52","sha1":"bf37d056d84d92ce50d337c48e4cb6ab143cda69","sha256":"a5c2f77a616c7caf3801bb24f99ee6ac1c6cc2bc85c0d79f4224779e39a16249","sha512":"c2fd78f56f77aaec7442d725d8e0638dcc408ea40311adfdb7d00eefdbcaef3f6026b8a43f36801240c172391585f4c81276c9a61e02ae6f86398751a84c9b81","ssdeep":"6144:WAFoTGEP7FgOxU0zl9IJ9QJGas83T2q2cw8bHJ8cufvnC2IuWCe:WCqG27F5xU0J9IJ94GA3T7HbpufvtWP","tlshash":"b6157b6e0d964132ff4cfa3e9494c867d8e05a15c9c6c30fb95c09118bbe25a47bf4ba","first_seen":"2025-04-13T17:07:16.972621Z","last_seen":"2026-01-28T02:27:55.924774Z","times_seen":975,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":83,"dns":30,"connect":1,"send":0,"wait":15,"receive":59,"ssl":54},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"playhubconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"playhubconnect.com/bn/bf3/7d0/56d/bf37d056d84d92ce50d337c48e4cb6ab143cda69.mp4","fqdn":"playhubconnect.com","domain":"playhubconnect.com","tld":"com"},"ip":{"addr":"104.18.14.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:01.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playhubconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 01:53:00 GMT","end":"Sun, 14 Dec 2025 02:52:57 GMT"},"fingerprint":{"sha1":"6F:7E:45:FD:0D:E1:5B:9F:C6:D0:2A:9F:AA:8E:F1:FA:79:84:B9:99","sha256":"0A:22:22:40:F0:60:14:FC:D9:59:21:94:0E:1A:55:24:DC:9F:21:05:F9:C7:0D:42:25:19:56:47:78:53:0D:8B"}}},"request":{"raw":"GET /bn/bf3/7d0/56d/bf37d056d84d92ce50d337c48e4cb6ab143cda69.mp4 HTTP/1.1\r\nHost: playhubconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Fri, 31 Oct 2025 00:05:02 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 952885\r\ncf-ray: 996ee600999fb4f9-OSL\r\nx-amz-id-2: 4hLuiQEzjvWMhTxgfMGpSU/6u8DUcNm+SeUMEbh6YSAUgI2rfHmKQvWC59NYkek/DInun7M9ASg=\r\nx-amz-request-id: EX21PD7A1D5N99K7\r\nlast-modified: Thu, 15 May 2025 12:07:52 GMT\r\netag: \"87ef915cc39e1ca0204ebda8289b4f52\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nage: 506156\r\ncontent-range: bytes 0-952884/952885\r\nexpires: Mon, 01 Dec 2025 00:05:02 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":952885,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"87ef915cc39e1ca0204ebda8289b4f52","sha1":"bf37d056d84d92ce50d337c48e4cb6ab143cda69","sha256":"a5c2f77a616c7caf3801bb24f99ee6ac1c6cc2bc85c0d79f4224779e39a16249","sha512":"c2fd78f56f77aaec7442d725d8e0638dcc408ea40311adfdb7d00eefdbcaef3f6026b8a43f36801240c172391585f4c81276c9a61e02ae6f86398751a84c9b81","ssdeep":"6144:WAFoTGEP7FgOxU0zl9IJ9QJGas83T2q2cw8bHJ8cufvnC2IuWCe:WCqG27F5xU0J9IJ94GA3T7HbpufvtWP","tlshash":"b6157b6e0d964132ff4cfa3e9494c867d8e05a15c9c6c30fb95c09118bbe25a47bf4ba","first_seen":"2025-04-13T17:07:16.972621Z","last_seen":"2026-01-28T02:27:55.924774Z","times_seen":975,"resource_available":false,"data":null}},"time_used":722,"timings":{"blocked":286,"dns":28,"connect":13,"send":0,"wait":31,"receive":100,"ssl":173},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"playhubconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-31T00:04:58.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 31 Oct 2025 00:04:58 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://fxggxt.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nvary: Accept-Encoding\r\nx-litespeed-cache: hit\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=03MwdHNwqb9paC%2FtNX%2B%2BGbD%2BKxgJycBNopDGJLBr10L%2B3ecIHBlhVpmJfiyYLpA649neibi3KrETN7v886KtHGkECuCeRWLUQOI%3D\"}]}\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=3,cfOrigin;dur=210\r\ncontent-encoding: br\r\ncf-ray: 996ee5ea0b2e75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Site Kit:1.164.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"bxSlider:4.2.15","description":"Add a respsonsive image slider to any website.","website":"https://bxslider.com/","common_platform_enumeration":"","icon":"bxSlider.png","categories":["Photo galleries","JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":178311,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9173)","md5":"f5c1df6894432b2d4c54d42fdf33e1b0","sha1":"f35ff78f6e463baf3e7ecab1692265baef14ab58","sha256":"6f93e649c7f927a06e4768d2bce70ac7692d62be9f17bfe8d4b057723e3ef8da","sha512":"97b11650b57f5cdca6a5d36fb757e92ee6c685511c3b92bee9c0673b53238e1fc97ae15918578f17b6ac690d22d4b723b1fd429164f6a8d14b11e216a252db1f","ssdeep":"1536:KM9q5TIapOXY/0hfvvNxwkiZf+dDGr5kwyOxlYR9i28uJm8ejh9jJjs17MsM+b5T:Ksk7X8ejhRZrOIl9u","tlshash":"890494b2e672147b562bd6ce4a40bb1cb8d2d11ec6034dc8f3ed12cda7c6eb6b851194","first_seen":"2025-10-31T00:05:45.109719Z","last_seen":"2025-10-31T00:05:45.109719Z","times_seen":1,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":18,"dns":9,"connect":4,"send":0,"wait":312,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/British-Boys-Fetish-Club-Discipline-Tales-Vol-292-%E2%80%93-Cal-Jonathan-Leon-Ricky-Ryan-Seb.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/British-Boys-Fetish-Club-Discipline-Tales-Vol-292-%E2%80%93-Cal-Jonathan-Leon-Ricky-Ryan-Seb.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 17:46:25 GMT\r\netag: \"2d17-69039f9f-6b9f8a;;;\"\r\nlast-modified: Thu, 30 Oct 2025 17:25:51 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11543\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 22713\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z7%2BgqZnUmZ8vOfwJZ3dEFtNOH1VyoJvNJkJkl%2Bsf30ss56z4DqQrWhH99BHqahSAs6h1EcmN058pbnFgQqljnqWGg33IENfViV4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee192e4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11543,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"b4225fd4f9d06134f1d83148b5ef13af","sha1":"633cf6c78a5e5d326ed9c0c89eb345ef85cbd0a1","sha256":"c2c7a15b51bf1aa421468209e2fdf6e12550c13a12e4cfbe47fe756d450d856a","sha512":"f75e9c01b7fc70c9b217df160fe59a17db725e94927d6c9b7439be80653914edb2a5584b3a1268083cfc10642870569c38ce76a68820b0c47e0e66b204b332c9","ssdeep":"192:BDHQQQQQQQQ1RIXsORP4BBY02mIh2Q2r2Y1C0Tl5GZrnoJwzmak:FSPPQ2zX2r2Y1RTl5GlPyX","tlshash":"55329e034f54aa5a7e080f76f706dece756a4b11bad3f2f62e104e84f85145b0e8919f","first_seen":"2025-10-31T00:05:45.111294Z","last_seen":"2025-10-31T00:05:45.111294Z","times_seen":1,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2022/08/RFC-RAW-FUCKERS-Rob-Montana-Jota-Palma-Gitano-Silva-Serg-Shepard.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2022/08/RFC-RAW-FUCKERS-Rob-Montana-Jota-Palma-Gitano-Silva-Serg-Shepard.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 21:58:08 GMT\r\netag: \"5e6b-62e7f9f1-56cbd3;;;\"\r\nlast-modified: Mon, 01 Aug 2022 16:06:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24171\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 7610\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=epB21FSmC9yYe3fmw0Kd%2FHXYFrRf2uLm6PjitCNeHlJVO364Nkfqtzcqom5T%2BI75lKzuyflwC5bcPmumtXMFYUerXXabV8RWLpM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee19444e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24171,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2, software=PhotoScape], baseline, precision 8, 640x360, components 3","md5":"17b4a226af54007520b48e94eeeb7fbb","sha1":"16932653718db4d2c8de75dd058307a2539564df","sha256":"0d507ed8dddb7c00194b6a44a90ab52822e9231565d00ccaf0f76792cb68af8c","sha512":"30a2517f63ef7ce1557d4d7431db57eb87c331e5dc951996b029f55d56c06ea099497bf51d044a3d6f96276af2f89e1cc80ebf50b4407b9f44c32f09fa223987","ssdeep":"384:NvKfVQDPlP7RhBTnGDtc9HdBwc+CCGEaIpVnFzviWHAlRyxcSk7SHhv0W:NvjD5NhBTe0dBwNnfn5vid2hv0W","tlshash":"d0b2e16371adcfa4ee924ef908561a8fd35c19142d80d84c7efd42f1bb52304aaac395","first_seen":"2025-10-31T00:05:45.112415Z","last_seen":"2025-10-31T00:05:45.112415Z","times_seen":1,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2023/01/OnlyFans-BoysToBreed-fucks-Diego-Platano.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2023/01/OnlyFans-BoysToBreed-fucks-Diego-Platano.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 23:56:28 GMT\r\netag: \"332b-63d27d00-570e77;;;\"\r\nlast-modified: Thu, 26 Jan 2023 13:15:44 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13099\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 510\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7eKivC0p3ud%2BK%2Boi0pefexOzG3PcTJ57wqFdPPTKKCBVPrBhQzmHy0hbwq5ArjSrYanxzjLEjmopquOC5Y31ulWsUpe%2BN4Rm6I8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee99604e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":13099,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"e6bb2aff25449c2915f0346b3c11fd71","sha1":"7b4855512d8ff107c2c84e7fa47b2feedd798224","sha256":"4c1ec9b312c9f19942b132c90e5f7583ce4ab226df7e2e94784b0e36e9d60432","sha512":"38af3ea76d6c3db8ea9946427ae53fa2e3ac862205479df564140527c113c2809b2d095e37b804dd45af0b893bcc281221596ac1afcfa34a29d7bdd30d3dcac2","ssdeep":"384:FJn7d2II/Y41TBf3St4Sdvc/QGRXSuXvinzEH:FJ7d2IIw4L3S6YvGXSuXvinS","tlshash":"8042d1d85f81c148d659b5bbd42db0c8f3edbb53646c7f1e3fa88a250c220560b0267d","first_seen":"2025-10-31T00:05:45.113611Z","last_seen":"2025-10-31T00:05:45.113611Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2023/02/JustForFans-Mateo-Muscle-John-Bronco.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2023/02/JustForFans-Mateo-Muscle-John-Bronco.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 23:56:28 GMT\r\netag: \"2b5e-63f8ff74-62939a;;;\"\r\nlast-modified: Fri, 24 Feb 2023 18:18:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11102\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 510\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WTkW6d%2FqahFVBu9vD3OYi3TDrgMERtj461ziIyDB2PO5kSumvCm6MWgwBmpz%2FO4imvmYE1Fz8ooLeR3Glhe49xBYMi4pKgOOqgs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5eea9674e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11102,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 400x225, components 3","md5":"81e6986bf0a3b60443d5661654f1fe8a","sha1":"de2ea625133716f5ca622f62a2aee12d5d8ebdd7","sha256":"f5f0dc20893d73d66a9cca4693b738c21178b848aac554f2f24e1b5f46957893","sha512":"5891cc777d98ae19e31bf7283ddc6e58427203c72f51968f5b48872cd3bbf9373d73f0de73e8eb4b43ee8e8453dd6037efffb64635a6afc31bdccee766785098","ssdeep":"192:BIQsNQgt42Lgb9X+GFa1vrAWzCisUUEjgnVbbexZmvV/5FB8waC04EwTIwUn:SbQMLghuGF6vrPzPsXEjgnVbbKZ0Vmwc","tlshash":"5132b0ae43337150f1fae79c2d03675685f26bd175a533e55cbacbb2c3a0c766200910","first_seen":"2025-10-31T00:05:45.114934Z","last_seen":"2025-10-31T00:05:45.114934Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2023/03/OnlyFans-Bruno-Alex-My-husband-is-just-amazing.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2023/03/OnlyFans-Bruno-Alex-My-husband-is-just-amazing.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 11:12:38 GMT\r\netag: \"2f58-64107f75-5ee18d;;;\"\r\nlast-modified: Tue, 14 Mar 2023 14:06:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12120\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 46341\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n7fSHx%2FF3z93e9IHOYNdMqu33cXQuR4LV4jV%2FOINZHIz%2Befh4FSXUp0M4tO8d5v5f2oireu5eepLZOGZQYw8%2BZ1eKcpN%2FZa3ItE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5eed9754e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12120,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 400x225, components 3","md5":"4fa476e56af250876d34cd2a8a306a51","sha1":"1ce1ec382cf46d6a27839e8e0eedda819f2d2b17","sha256":"7f0703b28ddd6fee66bf0ee170541d1daf67166fb0c1e48c182c41977fc34ad7","sha512":"3d70786733fcbdb405839c634390b735466d4f95bd4ffe7b7b9f16fc76db3bacc8ecc3f2ca3e47c81dc31a2c887e5450b9ad07563a0979375d8848aa02b77345","ssdeep":"192:BIbqYmmX3dmVSEJSB+Rf+v1JjNn8SwPGnsl8pjX2tcJrZfpkeNuW/QgHq2WXSBSE:SpNg5MkRfK3iSwPGsl8pjX2SJthjYcqo","tlshash":"fa42bf13efc8c3e5f1ab205e0644668de605160b23ceff963e738698e7805a6921ad35","first_seen":"2025-10-31T00:05:45.116135Z","last_seen":"2025-10-31T00:05:45.116135Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"driverhugoverblown.com/check.html","fqdn":"driverhugoverblown.com","domain":"driverhugoverblown.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:00.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"driverhugoverblown.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:23:57 GMT","end":"Wed, 21 Jan 2026 14:23:56 GMT"},"fingerprint":{"sha1":"AB:39:B2:8C:70:D6:0B:38:B0:1E:73:99:51:2D:35:30:EA:6B:4A:70","sha256":"86:18:14:14:6C:52:E9:C3:AC:03:AF:10:49:19:37:24:9D:9A:36:E6:1A:05:C8:1C:8E:69:BE:53:1E:CE:6F:65"}}},"request":{"raw":"GET /check.html HTTP/1.1\r\nHost: driverhugoverblown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 00:05:00 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Thu, 23 Oct 2025 09:18:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f9f2c9-39e\"\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":926,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"088dba8e97eede53134c93219f7ebbae","sha1":"adb707654d1fe0af7d0d7a9f55660d22bd3625e4","sha256":"6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff","sha512":"23a1f87731e8aee4658993cd1ce35ec179fea80b89bf52aca7634488f1bdfcf88b9cabca4859481357a9fee06cbb49df64bbe0878b1dae0e5df4fa34003c6d80","ssdeep":"","tlshash":"6211d04934e1684c1127a6301597a2183c32a40315cbd949fb9cd7301f815a7dc596df","first_seen":"2024-11-22T16:59:41.974716Z","last_seen":"2026-03-04T10:11:28.020186Z","times_seen":13721,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"playhubconnect.com/bn/bf3/7d0/56d/bf37d056d84d92ce50d337c48e4cb6ab143cda69.mp4","fqdn":"playhubconnect.com","domain":"playhubconnect.com","tld":"com"},"ip":{"addr":"104.18.14.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:01.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playhubconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 01:53:00 GMT","end":"Sun, 14 Dec 2025 02:52:57 GMT"},"fingerprint":{"sha1":"6F:7E:45:FD:0D:E1:5B:9F:C6:D0:2A:9F:AA:8E:F1:FA:79:84:B9:99","sha256":"0A:22:22:40:F0:60:14:FC:D9:59:21:94:0E:1A:55:24:DC:9F:21:05:F9:C7:0D:42:25:19:56:47:78:53:0D:8B"}}},"request":{"raw":"GET /bn/bf3/7d0/56d/bf37d056d84d92ce50d337c48e4cb6ab143cda69.mp4 HTTP/1.1\r\nHost: playhubconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Fri, 31 Oct 2025 00:05:02 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 952885\r\ncf-ray: 996ee600698db4f9-OSL\r\nx-amz-id-2: 4hLuiQEzjvWMhTxgfMGpSU/6u8DUcNm+SeUMEbh6YSAUgI2rfHmKQvWC59NYkek/DInun7M9ASg=\r\nx-amz-request-id: EX21PD7A1D5N99K7\r\nlast-modified: Thu, 15 May 2025 12:07:52 GMT\r\netag: \"87ef915cc39e1ca0204ebda8289b4f52\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nage: 506156\r\ncontent-range: bytes 0-952884/952885\r\nexpires: Mon, 01 Dec 2025 00:05:02 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":786432,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"088d96fa02b9f3cc5eddf25ce4483554","sha1":"997b03bc4d8846cc28aa1a64786245b66e033c11","sha256":"656c6cea02e66bdc6dbd6acc3a512926686031bebf0e0a2d41cf3b730499df85","sha512":"0ca873029cac06cb06559699e68528694b9c3d1e29cefcc813d981d15c482b235412ea98497b6b57e951d4ba6b3cb4e2e1722bddbd8683f07f69349c7d5c56bd","ssdeep":"6144:WAFoTGEP7FgOxU0zl9IJ9QJGas83T2q2cw8bHJ8cufv1:WCqG27F5xU0J9IJ94GA3T7Hbpufv1","tlshash":"78f48b6e4d928132ff4cfa3e9494c867d8e15a11c9c6c30fb94c05114bbe25a4bbf5ba","first_seen":"2025-10-16T04:27:06.818451Z","last_seen":"2026-01-18T18:04:52.609268Z","times_seen":29,"resource_available":false,"data":null}},"time_used":553,"timings":{"blocked":266,"dns":21,"connect":13,"send":0,"wait":12,"receive":0,"ssl":115},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"playhubconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/MissionaryBoys-%E2%80%93-What-Does-Your-Book-Say-About-Sex-With-Men-Caden-Dior-Alex-Kof.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/MissionaryBoys-%E2%80%93-What-Does-Your-Book-Say-About-Sex-With-Men-Caden-Dior-Alex-Kof.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 17:46:25 GMT\r\netag: \"3f33-69039fad-6b9fcc;;;\"\r\nlast-modified: Thu, 30 Oct 2025 17:26:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16179\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 22713\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rbyWVjD7qAn%2Bub8NUrWdEby40zNHXfWoVLtmY%2B28tlr%2F6bXywCK6c3Zu7hkZKLlh5sEjnfIWYmJzz8YIdRIx%2BqY6qWT%2F3It0A8U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5edc9174e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":16179,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"9f2954fc4bfd063220fc7d31d10163e4","sha1":"052bc5c1d6cfa16f581b567c0612baa5974b6498","sha256":"ffeb03e3b75ff7060c0b00382a9991eabb2983f3b3986053b13eba772820f81b","sha512":"7ba0a4ea8b6338761801b33aaf498ba0d64b2f9ad74a8b9bb4b817c244f308ea81a1a9e0ab23b9a85670e8cc70f661fe2c27de42e20244133575c1621ed3d5da","ssdeep":"384:FNW9L/noo/jFBrro7VdjmVrqjwhnhGceIU1GyZsPYSRLs:FkJ/oo/3f2Vqu0KcnEBZs5R4","tlshash":"c072e0338772123869fb9a1c81de24cbe05d225f75a23185ecc8dca3cab8691f192651","first_seen":"2025-10-31T00:05:45.117871Z","last_seen":"2025-10-31T00:05:45.117871Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/OnlyFans-Luke-Catton-Jose-Miguel.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/OnlyFans-Luke-Catton-Jose-Miguel.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 19:09:36 GMT\r\netag: \"36b5-69039fd7-6ba01a;;;\"\r\nlast-modified: Thu, 30 Oct 2025 17:26:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14005\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17722\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VkBuQYf1FtWjUVcxK9IfVni8XMPQXUkZevxvHSv52xULuxu19%2FQuJ3A7aXH2tu99WlKQzvH%2B23z2CLmIsRdpbz1TVZjZ8Y75lmw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5edd9214e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14005,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"9f0212507e128d9f96eb542e8d300d4e","sha1":"540f33f2319d52bae1eacc8297ae082ae38a662c","sha256":"8edba2e66f35c517fd5dcd9f5b7aaf10ec6f45205ccaa93c9e63d914377145d5","sha512":"5f3e7c4720bdb6a9954f2853f947e27f789544a74a30f1f160ad5fc832cb65c310dbc931385a72dcbcb473d1605830c96720508786e3e80a643313ffa5318379","ssdeep":"384:Fqrf6cdJWnhq2vGBCsA6pZ3AW821+8DuBmsI:FCDEq2vGBCy/821+8DamsI","tlshash":"a552d093af43f5e10c25df6e681070a5a41cec4ee584f7970e0a55d2c68daeb3d6234c","first_seen":"2025-10-31T00:05:45.118949Z","last_seen":"2025-10-31T00:05:45.118949Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2023/11/FraternityX-Heavy-Handed.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2023/11/FraternityX-Heavy-Handed.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 23:56:28 GMT\r\netag: \"3209-656620eb-531c7a;;;\"\r\nlast-modified: Tue, 28 Nov 2023 17:18:35 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12809\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 510\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pufxcpjmws77IOcJTne6y%2B4vTiOjmd7C0vuW%2BQ29TA9iMMpyhi%2FZB7TkwTR0f9vYC7PaNXopb4nRHQdYzIsFQI9nowaQDhEyENA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee19424e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12809,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 400x225, components 3","md5":"6c90f925f40f33c3c0c86bf2e4ea2c39","sha1":"5a26f40f0333428c33cd6169a6ea02b72603b720","sha256":"a2f2c20df73f861e57c702c9ba2cbe177e2df341ea7f24c28af9a35f351dac43","sha512":"6a4a10f3ff70975a7fab156c0a045339facdd1e31513d9dec7b21cc076e4b9dfcedee40bd9a0af8294290fb27abf3bcbb117b1dd6dd9e8b8b9a00bed00099026","ssdeep":"384:SJkfjXA/ZgXQfTK+TPQAmRqJKmnNoZvig:SJMjXkiXQfTdTPQAMqJj5g","tlshash":"2942bf88e74ac2262d6235fe0a4e49149f08693fb310ba5e6dd550e248f80d7a63dc7e","first_seen":"2025-10-31T00:05:45.120055Z","last_seen":"2025-10-31T00:05:45.120055Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2024/09/OnlyFans-JJ-Aussie-Philipe-Coutinho.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2024/09/OnlyFans-JJ-Aussie-Philipe-Coutinho.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 05 Nov 2025 18:52:45 GMT\r\netag: \"268e-66e5e9c2-4be430;;;\"\r\nlast-modified: Sat, 14 Sep 2024 19:53:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9870\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 105134\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PIcguNRkis%2BggpyRtoPi5jjK3cdi38oEM5jvpDlbq%2BvXeU%2F4JVPq8oK3bwUGKlxJAkjfm85IbJTlZbcddURlgHmlTO1hYr1DlZA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee795e4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":9870,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 400x225, components 3","md5":"8ee337d899a2814b146b987f473b54d0","sha1":"db8241809cb05891e9eead2beb896f3a582cd6b5","sha256":"5547a2824c0fb86b57b618678c4af47fa9eb2410423f64b67f51e3200b9f0786","sha512":"aeddb97cddb44a9cbd9974f9dada7f73a534ed93513e980f1c0e8d2a72704e9aec351d57e4036d7d45681834566c6a93cb689ea1f2a3fe19defb781fd7bc2a14","ssdeep":"192:BIck9zWn5dm3i7zC1l1EK2b6L3MHwsYLvb+y8gSwGqNJezgYsDL:Sj9z2ddnkOK2OsYbb+J5+Ezy","tlshash":"8a12a02e83127900b9d393b057553a03da0907720f3535edacb116aad8576ddf5b5f1c","first_seen":"2025-10-31T00:05:45.121309Z","last_seen":"2025-10-31T00:05:45.121309Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:00.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 11 Oct 2025 15:44:14 GMT\r\netag: \"3509-6482bd64-46f13b;br\"\r\nlast-modified: Fri, 09 Jun 2023 05:49:24 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 4679\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 31 Oct 2025 00:05:00 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 459458\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BomVOLB5GOdsPZZl1UKz4om59yqWb9g%2FsR6EaachxjIkUL2kI3PpLEo6ZHYqx7kRK5vhZatzwq4Y6JG0cuLerhLMwZQ0BUkRWEU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 996ee5f459ce4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-06-20T01:49:20.481071Z","times_seen":843831,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chaseherbalpasty.com/get/2018929?zoneid=2018929\u0026pid=__clb-2018929_3\u0026jp=_clghylozzgdgxzblltpeqc\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.627\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=Ord-7bcKmZpiyzUDVIIHN\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=ri8WKr1aHR0cHM6Ly9meGdneHQuY29tLw\u0026afid=5463490410863104\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026dto=2\u0026pload=2317\u0026rlp=%5B0%2C91%2C298%2C159%2C2598%2C27804%2C4067%2C27455%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=3\u0026uf=0\u0026freq=0","fqdn":"chaseherbalpasty.com","domain":"chaseherbalpasty.com","tld":"com"},"ip":{"addr":"94.242.247.20","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:01.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chaseherbalpasty.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 01 Oct 2025 00:00:00 GMT","end":"Tue, 30 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"33:A3:14:CC:01:76:4E:33:44:46:15:D3:60:37:E2:11:39:59:F0:06","sha256":"29:67:DC:3A:7D:72:3E:0A:8C:3E:94:18:A0:47:AF:E8:3B:57:B6:5A:F9:C9:9B:5F:4A:36:73:3F:09:96:29:01"}}},"request":{"raw":"GET /get/2018929?zoneid=2018929\u0026pid=__clb-2018929_3\u0026jp=_clghylozzgdgxzblltpeqc\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.627\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=Ord-7bcKmZpiyzUDVIIHN\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=ri8WKr1aHR0cHM6Ly9meGdneHQuY29tLw\u0026afid=5463490410863104\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026dto=2\u0026pload=2317\u0026rlp=%5B0%2C91%2C298%2C159%2C2598%2C27804%2C4067%2C27455%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=3\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: chaseherbalpasty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 00:05:01 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Fri, 04 Dec 2026 00:05:01 GMT; Secure; SameSite=None\nPTS=AoKhbNJpA_0toWMB; Path=/; Expires=Fri, 04 Dec 2026 00:05:01 GMT; Secure; SameSite=None\nUID=25103019053a0913fa765142c4bcdf78e3a2; Path=/; Expires=Fri, 04 Dec 2026 00:05:01 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5038,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (5038), with no line terminators","md5":"8513b625b81c4c3761b0a50d74939406","sha1":"48d22e27824f11571f68e32d5bd49e7b5be49807","sha256":"b826e2593dc7f767d6f101c6d59dc9b57e6037dcc09df538dc80e233eb0a77df","sha512":"3e271a5b4d1f478cff2bdacf74437896b8b9929f289789aeb81e6198928fdd8e23970a19db8b530b9cbc08df795c2130d9b506e255a5495d343c65be0e7ca0bb","ssdeep":"96:YeZjcPgvF3CmIuiZjcPgvF3CmIuPZjcPgvF3CmIubeZjcPgvF3CmIuPtweP/I7so:YeZBF3CmIRZBF3CmIAZBF3CmI8eZBF3m","tlshash":"a0a11a946020dcf87c987419aa350f9272ccbdd9828bd607a497a73ac72c12e573f8d3","first_seen":"2025-10-31T00:05:45.122998Z","last_seen":"2025-10-31T00:05:45.122998Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chaseherbalpasty.com/jserror?type=banner\u0026bavar=0\u0026build=1.0.627\u0026zoneid=2018929\u0026e=Error\u0026m=BCLC\u0026aa=0\u0026trid=\u0026url=https%3A%2F%2Ffxggxt.com%2F","fqdn":"chaseherbalpasty.com","domain":"chaseherbalpasty.com","tld":"com"},"ip":{"addr":"94.242.247.20","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:02.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chaseherbalpasty.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 01 Oct 2025 00:00:00 GMT","end":"Tue, 30 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"33:A3:14:CC:01:76:4E:33:44:46:15:D3:60:37:E2:11:39:59:F0:06","sha256":"29:67:DC:3A:7D:72:3E:0A:8C:3E:94:18:A0:47:AF:E8:3B:57:B6:5A:F9:C9:9B:5F:4A:36:73:3F:09:96:29:01"}}},"request":{"raw":"GET /jserror?type=banner\u0026bavar=0\u0026build=1.0.627\u0026zoneid=2018929\u0026e=Error\u0026m=BCLC\u0026aa=0\u0026trid=\u0026url=https%3A%2F%2Ffxggxt.com%2F HTTP/1.1\r\nHost: chaseherbalpasty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nCookie: cart=1; cart_p=2; CHCK=1; PTS=AoKhbNJpA_0toWMC; UID=251030190545e4ab9b96b94cf9a2252b2bb6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 00:05:02 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/CockyBoys-Blain-OConnor-Theo-Brady.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/CockyBoys-Blain-OConnor-Theo-Brady.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 17:46:24 GMT\r\netag: \"5050-69039fa2-6b9f96;;;\"\r\nlast-modified: Thu, 30 Oct 2025 17:25:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20560\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 22714\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NiT5%2BXdDQRbReGBsmTN3AaEGSizVxx8SqCbnopnheb%2BZO0C%2FjdwecZUj%2BjmwMgGwbBDM2FbhhbbZULki91lHGCDEByRjhRnceEo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5eda90a4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20560,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"442ee7fa660a56ffc68c93ad0a3cf72a","sha1":"87d716f7f2234faee4cf93d48502c1cac1ce64f9","sha256":"00c5d333de6ef215b65a88068e4396583b142a55891f06e8ab0d5c5a833ed597","sha512":"c65a4fdebb2b3997117aa71ad6c6975b4ad3e25f4557ab5ab1694cb515c0e723037391f0201b6404e84eb726740dbc9007525a99c120196d73a25c7314b9b0df","ssdeep":"384:FMwOjfD1ReXc5niAs6XXIOti4+OTq26J2KXr4RHihGTQ9lNUYV8jkTKW:FMdHeGiOXXv+Gq2K8Ji0TQ90Y2kTz","tlshash":"4792e0a8c3b3bfb3572203ac30030f16d3dd27551e83bb926e8a657c5ae99c9d814d85","first_seen":"2025-10-31T00:05:45.124045Z","last_seen":"2025-10-31T00:05:45.124045Z","times_seen":1,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/OnlyFans-John-Rodrigues-GangBang-%E2%80%93-Torremolinos-2025.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/OnlyFans-John-Rodrigues-GangBang-%E2%80%93-Torremolinos-2025.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 17:46:25 GMT\r\netag: \"4ee1-69039fd4-6ba002;;;\"\r\nlast-modified: Thu, 30 Oct 2025 17:26:44 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20193\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 22713\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OWij3wn%2Fof8NmN%2FfK1QLhHcMQjCiSv8n1rPNzxBW4izapIIHx7CKhCrm5pOGNyvy9hAfH68xEO%2FLEina3q%2Bwy6yKbY%2FhefIcdkQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5edb9114e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20193,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"ea67b5944db932177d5d778b5426b7d0","sha1":"381671da436f05e158d6cfc4073ba29c2fc5613b","sha256":"a1a7b43750c9555e382e747ab30b0549dbd835f005d500605c9e9714df02ce60","sha512":"4cd748f0177232aa5ced697b26c0ef26dee837e107783365b9d50dcae15ce9e588b9de97b6b7a8e91c3bc54d857b4e694eb904db33108e77f233813923c73cd8","ssdeep":"384:FJdQnHRf+mTi77aNpc5oHKxEiYsfmiQR6jb22o0+lduLBsw:FPQnHRf+Z779mq+56bd+lxw","tlshash":"0992d0a74ec76b8a6b6fc1bf50f5678433a267213e003f981c539ce090e546c7a24e29","first_seen":"2025-10-31T00:05:45.125475Z","last_seen":"2025-10-31T00:05:45.125475Z","times_seen":1,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/Citebeur-Everybody-needs-Etalons-delicious-cock-%E2%80%93-Etalon-As2pic.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/Citebeur-Everybody-needs-Etalons-delicious-cock-%E2%80%93-Etalon-As2pic.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 17:46:25 GMT\r\netag: \"3cee-69039fa1-6b9f90;;;\"\r\nlast-modified: Thu, 30 Oct 2025 17:25:53 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15598\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 22713\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xYKhmhbIvmDrscbI4iO9zmr4QW7fQx%2BYl4WAdNrnOMfkxg0NJoalVEIwQRdOl2B5I0l2SnmrVDcJ%2FncUgwcCd%2BnFgX8SqqTY%2FPE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee192f4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":15598,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"140d15c99bebd40ae9bbfb2bb84fc4c1","sha1":"0a7eae28b9fa091387c1f3f4fb54a2945da8ed77","sha256":"d40c87e33a9e15ad3dc2b0a1e55f929475562827c0ebc157dd66b020f6e8106c","sha512":"15e6916e11a9a58c78eda3e00a341c435646e7bd69aa4b59444636ec14633cd10f77435c88ba3141c78b6d3d58052d8929916dd70d95dc272d0f8d8a652ff7e0","ssdeep":"384:F1tIPhZcYNC+FHjmq8rDE6EtLv25vrty1GMRWZC/7EA:Fo0zHct7SvY1G5CD","tlshash":"d362d0efaf3513115e1dc1bc984152e098c8875fead83752cd86c909da9005af97c2ea","first_seen":"2025-10-31T00:05:45.12668Z","last_seen":"2025-10-31T00:05:45.12668Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chaseherbalpasty.com/get/2018929?zoneid=2018929\u0026pid=__clb-2018929_2\u0026jp=_clntigmrjmhnxtkzaanupz\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.627\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=Ord-7bcKmZpiyzUDVIIHN\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=bZFV8qBaHR0cHM6Ly9meGdneHQuY29tLw\u0026afid=7996765201271808\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026dto=2\u0026pload=2231\u0026rlp=%5B0%2C91%2C298%2C159%2C2598%2C27804%2C4067%2C27455%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=3\u0026uf=0\u0026freq=0","fqdn":"chaseherbalpasty.com","domain":"chaseherbalpasty.com","tld":"com"},"ip":{"addr":"94.242.247.20","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:01.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chaseherbalpasty.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 01 Oct 2025 00:00:00 GMT","end":"Tue, 30 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"33:A3:14:CC:01:76:4E:33:44:46:15:D3:60:37:E2:11:39:59:F0:06","sha256":"29:67:DC:3A:7D:72:3E:0A:8C:3E:94:18:A0:47:AF:E8:3B:57:B6:5A:F9:C9:9B:5F:4A:36:73:3F:09:96:29:01"}}},"request":{"raw":"GET /get/2018929?zoneid=2018929\u0026pid=__clb-2018929_2\u0026jp=_clntigmrjmhnxtkzaanupz\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.627\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=Ord-7bcKmZpiyzUDVIIHN\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=bZFV8qBaHR0cHM6Ly9meGdneHQuY29tLw\u0026afid=7996765201271808\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026dto=2\u0026pload=2231\u0026rlp=%5B0%2C91%2C298%2C159%2C2598%2C27804%2C4067%2C27455%2C0%5D\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=3\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: chaseherbalpasty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 00:05:01 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Fri, 04 Dec 2026 00:05:01 GMT; Secure; SameSite=None\nPTS=AoKhbNJpA_0toWMB; Path=/; Expires=Fri, 04 Dec 2026 00:05:01 GMT; Secure; SameSite=None\nUID=2510301905e3aae4b724d54dcfa277bf143a; Path=/; Expires=Fri, 04 Dec 2026 00:05:01 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5038,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (5038), with no line terminators","md5":"a2d80cf13e466747c39806987e5a2c08","sha1":"d69c503738b884bf6d158a6bf6efc0add560bc28","sha256":"c027164d9ae1bf51ad35d84cf1ec66d669e93eb7b5ee18f44372f8e511e93f79","sha512":"af842acd47de4b74815cad4d03b536e02621b86d35d0ef391753de723c5312dbf67608b0f2e5da503122f6e75d43253d60bf23794200b48096e8fc1ce8eb560f","ssdeep":"96:Pvv1fXQZiNhLzl6me8GfXQZiNhLzl6meBIfXQZiNhLzl6meAfXQZiNhLzl6meuqh:PvRAi7l6HAi7l6PgAi7l6uAi7l6MotaW","tlshash":"2da10a157c0b25742c429c8c30b269df435ad2c24fda5b646b4ad8c5a72eefd283269b","first_seen":"2025-10-31T00:05:45.127788Z","last_seen":"2025-10-31T00:05:45.127788Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chaseherbalpasty.com/jserror?type=banner\u0026bavar=0\u0026build=1.0.627\u0026zoneid=2018929\u0026e=Error\u0026m=BCLC\u0026aa=0\u0026trid=\u0026url=https%3A%2F%2Ffxggxt.com%2F","fqdn":"chaseherbalpasty.com","domain":"chaseherbalpasty.com","tld":"com"},"ip":{"addr":"94.242.247.20","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:02.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chaseherbalpasty.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 01 Oct 2025 00:00:00 GMT","end":"Tue, 30 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"33:A3:14:CC:01:76:4E:33:44:46:15:D3:60:37:E2:11:39:59:F0:06","sha256":"29:67:DC:3A:7D:72:3E:0A:8C:3E:94:18:A0:47:AF:E8:3B:57:B6:5A:F9:C9:9B:5F:4A:36:73:3F:09:96:29:01"}}},"request":{"raw":"GET /jserror?type=banner\u0026bavar=0\u0026build=1.0.627\u0026zoneid=2018929\u0026e=Error\u0026m=BCLC\u0026aa=0\u0026trid=\u0026url=https%3A%2F%2Ffxggxt.com%2F HTTP/1.1\r\nHost: chaseherbalpasty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nCookie: cart=1; cart_p=2; CHCK=1; PTS=AoKhbNJpA_0toWMC; UID=251030190545e4ab9b96b94cf9a2252b2bb6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 00:05:02 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":66,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/OnlyFans-Reunion-%E2%80%93-Teddy-Bear-River-North.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/OnlyFans-Reunion-%E2%80%93-Teddy-Bear-River-North.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 17:46:25 GMT\r\netag: \"4396-69039fdb-6ba032;;;\"\r\nlast-modified: Thu, 30 Oct 2025 17:26:51 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17302\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 22713\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jf4GsGPgXvcnviZ426qrpXk7xo2fWT2CfX9e3X00mnMTF6e%2Bnuv3kwIcKk1%2B9ZsxevDlZSrqS9sFD%2FjJ7n3f7Zqel4gcPJyII%2BQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5eda9104e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17302,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"3ce46c8d7c20fb7e520981df30af6c9c","sha1":"116f9df5e9bf5e1c2e30b4c48db0e781e998db91","sha256":"029d2bc1985392156152bf133f0cf888a0a15f291058f73b461288172576d309","sha512":"153b3795cd171643be4d4db78d692d71d27fb58f36f993734b251ea74c90b21b1676987d3002469b2a4fca532e1952400a44a79db88efb40bd95d8a8b8cc4da9","ssdeep":"384:F4MOcUq6HO8tIB8884dobrto+qXvdR2WoNkif1IpMtsYjL0QfQ8lh4X:F97H8+Vob5zVqMtsYjL0Q534X","tlshash":"b672d0ba971f0086ac21af3b8fe641b9e10db1155c8371adbe8871c9cbf5dbc15d804a","first_seen":"2025-10-31T00:05:45.129051Z","last_seen":"2025-10-31T00:05:45.129051Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/OnlyFans-Serge-Bear-Peralta-Silva.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/OnlyFans-Serge-Bear-Peralta-Silva.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 05 Nov 2025 22:42:45 GMT\r\netag: \"3d83-69027c83-6b9f66;;;\"\r\nlast-modified: Wed, 29 Oct 2025 20:43:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15747\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 91333\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KzzMraVnl3ymu73g7tw9Mwga18Q6AX6U%2FvyAcWQsg7QIoe%2FAbWaB%2FBFbKCBdLj1HrphW115wQMBDpC5SO%2BvWMEmNbfDE4oNVZag%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee193d4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15747,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"f666ecc1ce8eba6721cceb2e9111d89e","sha1":"a1df7057e7470153707ccc92cf71b16a452fefe6","sha256":"3c7510bc5e6e6add45a5df4820d1b2eae1251c9d5913893af656e14caed549dd","sha512":"6f70a2b6dd872ccd7d0e1a87ba2a2124566813e47619f8d165e7e2bef83e0092095e2c9bbddbb6982bb8465ec078d6a1e4f9026271798152aae359a13cac81b0","ssdeep":"384:FMeeY4+igAT6o1yeWW3IfyXLOtWMj68NsyCptkA7bE:FMe2oe6nR8IfybOtWEsjpmAvE","tlshash":"d262c0090b62b0c916ac81686b4d2b6efbdba15df0b43304ecb353e4dff104729b5569","first_seen":"2025-10-31T00:05:45.130053Z","last_seen":"2025-10-31T00:05:45.130053Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/09/RFC-Sex-and-chill-%E2%80%93-Juan-Martin-Vinni06of.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/RFC-Sex-and-chill-%E2%80%93-Juan-Martin-Vinni06of.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 09:38:46 GMT\r\netag: \"3a24-68d594b6-6e620e;;;\"\r\nlast-modified: Thu, 25 Sep 2025 19:15:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14884\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 51972\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2uSNqWeYbT1y80I2aTxxDX%2Bbmyt68wnuRNSH7gm4FgKNi6AMoHPzlLc3CM11mTu90Dr1aDDy%2FvDNF7phU0x9GM55c%2FkWEWe1ST0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee194a4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14884,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"778799710cba00e6e5ff03cb1d0bea76","sha1":"07e35c292b0946231cab75ef9285f1255d51c179","sha256":"8f4b1212eea9a4cf5697b337b9b8eba6b6c48147b598abf66e4cdc31cdb3a410","sha512":"8967f91ddc1678c51a656f8a037a471430f5fce12c729da913e5533e00c317a81527af638903abd3698558e7eda32ee02e5bf1fde890a8e7c592f47bfc7979fa","ssdeep":"384:Fm/ByEW8Wx0CFrkD8035oGVvZcEsEvgMbDH2fmj756vBh2z7c:FeByEW8Wx0Yr08035oGVvNwMfH2fbvBj","tlshash":"2462cfa00f286502de8261966d9fb025d0615d9f687cf788ce04439a4b9ccedd8fa42f","first_seen":"2025-10-31T00:05:45.131197Z","last_seen":"2025-10-31T00:05:45.131197Z","times_seen":1,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/05/onlyfans-rico-marlon-threesome-with-friends.webp","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/onlyfans-rico-marlon-threesome-with-friends.webp HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 01 Nov 2025 22:18:24 GMT\r\netag: \"6220-681b811b-669cf3;;;\"\r\nlast-modified: Wed, 07 May 2025 15:49:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25120\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 438394\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nhN9cFsY%2BH6MbmTxBA9qRXLs2yCFNwpwV%2FTybpKAQfWJomgDNdIVm2UKp5ZziZb%2F9fIAFm2X4X2WxbDhHspAHjkjvqeSK5liji4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee294d4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":25120,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x336, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bfcab555ca1b37cf3fc99d7ce611209b","sha1":"1bf8a8d93aded22b13d82fb24c3a88c6be0fdd01","sha256":"84c8df8f66d7399f0826ba787e8a9cb23c53a87cb973fb72e89dab30dd9f0fa7","sha512":"cfd7619846228a56b7538429e70d33949e607aa76c71d4efe4dcbde79e32a7904eaeab204db09594bd49461a8761ccf04142f4a052c17af1eacc3a9431904f8b","ssdeep":"384:Dz4Ars4nUuwTiFOqNiPpsqNd/hVl7HNM5Iuu3eKRQGMSsiealjJ6IbtuD3bw:jVmWFt6ps4d/hP7puu3hRxKIbtuDLw","tlshash":"ccb2e209f6160ab5a745792930bc48080b58c37f5292898de65547ecfca4fe97c75bc8","first_seen":"2025-10-31T00:05:45.132367Z","last_seen":"2025-10-31T00:05:45.132367Z","times_seen":1,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:00.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/b5237f8e6aad/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\ndate: Fri, 31 Oct 2025 00:05:00 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\ncf-ray: 996ee5f709e54e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10148,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/metrika/advert.gif","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"77.88.21.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:01.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"GET /metrika/advert.gif HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 43\r\ncontent-type: image/gif\r\ncache-control: max-age=3600\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nlast-modified: Fri, 24 Oct 2025 13:09:09 GMT\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:05:01 GMT\r\naccess-control-allow-origin: *\r\nset-cookie: bh=YK36j8gGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Sat, 05 Dec 2026 00:05:01 GMT; SameSite=None; Secure\r\nexpires: Fri, 31 Oct 2025 01:05:01 GMT\r\nstrict-transport-security: max-age=31536000\r\netag: \"68fb7a75-2b\"\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-06-20T01:39:15.965679Z","times_seen":106501,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.chaseherbalpasty.com/static/video/bn/bf3/7d0/56d/bf37d056d84d92ce50d337c48e4cb6ab143cda69.mp4","fqdn":"www.chaseherbalpasty.com","domain":"chaseherbalpasty.com","tld":"com"},"ip":{"addr":"94.242.247.20","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:05:02.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chaseherbalpasty.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 01 Oct 2025 00:00:00 GMT","end":"Tue, 30 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"33:A3:14:CC:01:76:4E:33:44:46:15:D3:60:37:E2:11:39:59:F0:06","sha256":"29:67:DC:3A:7D:72:3E:0A:8C:3E:94:18:A0:47:AF:E8:3B:57:B6:5A:F9:C9:9B:5F:4A:36:73:3F:09:96:29:01"}}},"request":{"raw":"GET /static/video/bn/bf3/7d0/56d/bf37d056d84d92ce50d337c48e4cb6ab143cda69.mp4 HTTP/1.1\r\nHost: www.chaseherbalpasty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 00:05:02 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 952885\r\nlast-modified: Wed, 15 Oct 2025 18:51:27 GMT\r\netag: \"68efed2f-e8a35\"\r\nexpires: Tue, 30 Dec 2025 00:05:02 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-expose-headers: Last-Modified\r\ncontent-range: bytes 0-952884/952885\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":952885,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"87ef915cc39e1ca0204ebda8289b4f52","sha1":"bf37d056d84d92ce50d337c48e4cb6ab143cda69","sha256":"a5c2f77a616c7caf3801bb24f99ee6ac1c6cc2bc85c0d79f4224779e39a16249","sha512":"c2fd78f56f77aaec7442d725d8e0638dcc408ea40311adfdb7d00eefdbcaef3f6026b8a43f36801240c172391585f4c81276c9a61e02ae6f86398751a84c9b81","ssdeep":"6144:WAFoTGEP7FgOxU0zl9IJ9QJGas83T2q2cw8bHJ8cufvnC2IuWCe:WCqG27F5xU0J9IJ94GA3T7HbpufvtWP","tlshash":"b6157b6e0d964132ff4cfa3e9494c867d8e05a15c9c6c30fb95c09118bbe25a47bf4ba","first_seen":"2025-04-13T17:07:16.972621Z","last_seen":"2026-01-28T02:27:55.924774Z","times_seen":975,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/themes/retrotube/assets/stylesheets/font-awesome/css/font-awesome.min.css?ver=4.7.0","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/themes/retrotube/assets/stylesheets/font-awesome/css/font-awesome.min.css?ver=4.7.0 HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 24 Oct 2025 07:20:22 GMT\r\netag: \"7918-68ac9c47-7e010e;br\"\r\nlast-modified: Mon, 25 Aug 2025 17:24:23 GMT\r\ncontent-type: text/css\r\ncontent-length: 6646\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 571767\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2GJlEVVeW5FjNFkLqTN0D7jVs7w6P23tOqUKTaMdqkKFTqXuFJBGeGewsRyyuPNiDTFswgAJ1ClzzQ%2BuiHPMAuERH8vDZehoyLQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 996ee5ed89044e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31000,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-06-20T01:50:30.319039Z","times_seen":288005,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/MEN-Cum-Quietly-%E2%80%93-River-North-Alfonso-Osnaya.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/MEN-Cum-Quietly-%E2%80%93-River-North-Alfonso-Osnaya.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 17:46:24 GMT\r\netag: \"40fe-69039fac-6b9fc6;;;\"\r\nlast-modified: Thu, 30 Oct 2025 17:26:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16638\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 22714\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a9h6Ns9JRQONcy%2FtakpyAHmTd6wVjg12AWMBhJFBuXIfqhyC7ePmAbKXXCeo6u%2F8XQLm6WhyvUL3lChFJU9tDRVY%2FrwYjDOrhAk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ed99074e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":16638,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"4bad471a5fe7e87a85eb2d068fdc2c9f","sha1":"b955c69b72baf53c7f01f1cb9d50fc476d42fc0d","sha256":"052568e48e4367e67741b861fa21917195c49643a51ab7dffdf8c7d05ba237d6","sha512":"99a10e0d3552e9551b86239bbb0d5aa92db8d2c8582a06a8dadd2ea4a5040b0be8958b09a017a3106d4993236d0ae9f8596462499b4663d4c34d76c5bbafc09e","ssdeep":"384:F6iQKPsBaHnmtB8aCjm3PHHpAn+MV5yLvyhVvgYdoGTO965:FBQ/BaHmtuO3vHpCV5pfRBW65","tlshash":"9472d113278302096a60dbb014067f26d72a2f2049a4727e3dd57e819371bbd58c6eaf","first_seen":"2025-10-31T00:05:45.135071Z","last_seen":"2025-10-31T00:05:45.135071Z","times_seen":1,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/OnlyFans-TexasGymJock-Naughty-Jewish-Boy-Big-Law.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/OnlyFans-TexasGymJock-Naughty-Jewish-Boy-Big-Law.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 05 Nov 2025 21:18:12 GMT\r\netag: \"3d1f-69027c84-6b9f72;;;\"\r\nlast-modified: Wed, 29 Oct 2025 20:43:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15647\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 96406\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xncwqJfdmP8UbvxwaKMOKOQGMunU%2B7EhQCvdKHyx23Pz29lOz90a8gZRFc7xTCbOH1GoK4nUpvX9oowjQ1yWTy0CbNmHMQu2VjI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5ee19394e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15647,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 500x281, components 3","md5":"10991d5b7e56e21e9d26009c3e2eb3ff","sha1":"de6af3c03287c78e23c082cf8ea62ec32ba3da69","sha256":"8327333bd415ed1746c77710413adfc3e4939b8430aaf85fb28687cfdc2b0a24","sha512":"ae6cfa942aa9f4c53c7508c83bc318613ba9b274ba7f7bf5862e6ae9d451e41c67bf828119ec39372c96ba75f6e8c111e3431339bd1c441fa28804c514a31bc7","ssdeep":"384:FFanfczIsdpbUTknMFZDaxa74Mw9jQhZ/eq8ZvGo:Fofc0sXUTknMFQxaErmZ+ZV","tlshash":"ca62c0971b6643219ed9e0e17e55aa60df4bc60e85d9f35a3d8d410acf1300caaeb05b","first_seen":"2025-10-31T00:05:45.136407Z","last_seen":"2025-10-31T00:05:45.136407Z","times_seen":1,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2024/09/RFC-Jack-and-the-Boys-Jack-Stacked-OXFit81-DaddyGymRat-SmogHobbit.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2024/09/RFC-Jack-and-the-Boys-Jack-Stacked-OXFit81-DaddyGymRat-SmogHobbit.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 23:56:28 GMT\r\netag: \"3306-66e5db5d-4be282;;;\"\r\nlast-modified: Sat, 14 Sep 2024 18:52:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13062\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 510\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RxLQUoicbb5gzNt1TonLGmIdx2gn7Hm4RFd1m4DUoAtBmEr3SKX5vD5S836bpm3ejIgQgpv%2FPO%2FE2UW0Gdc3ZLtfkDHcg8%2F7IT0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5eeb9704e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13062,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 400x225, components 3","md5":"bd7e91c2bd52eb8960afce5ccf9d23ef","sha1":"3ae65f3e3efac1330d68f14dc71691dc716a73f3","sha256":"1353c1ea90b63e69d8da3b53facd54c1f1cda8cf8abe0493b91689b4a4f48319","sha512":"6f02bdda9ffbe6999f62133307733b7a651c16a52b49e8a92bfaf172364a09cbf69cd51de94e9bf330f1f2e58e07a569d392e21dc1cf4aba7520b77c179c06d1","ssdeep":"384:SzWJNy5lqU+PYJyS3ExSe5qKVRt8q8s0N:SaJYlq28iExqSsVN","tlshash":"0842cf665f23427138218e3b140b9baf134ddf43213db7cd9e6e8a5583d270663326a5","first_seen":"2025-10-31T00:05:45.137774Z","last_seen":"2025-10-31T00:05:45.137774Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fxggxt.com/wp-content/uploads/2025/10/OnlyFans-Kurt-Adam-Alexis-Uriel.jpg","fqdn":"fxggxt.com","domain":"fxggxt.com","tld":"com"},"ip":{"addr":"172.67.154.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fxggxt.com/","date":"2025-10-31T00:04:59.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fxggxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 06:21:08 GMT","end":"Sun, 11 Jan 2026 05:22:35 GMT"},"fingerprint":{"sha1":"F3:A4:EB:49:33:0F:EC:0C:63:EA:CC:AA:0D:D1:87:96:78:72:9F:44","sha256":"90:44:8C:B9:A1:41:9B:53:EF:A0:FE:68:1B:BD:29:CB:52:AD:34:5A:6C:75:8B:FC:5B:1D:53:56:80:F3:44:6A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/OnlyFans-Kurt-Adam-Alexis-Uriel.jpg HTTP/1.1\r\nHost: fxggxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fxggxt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Nov 2025 17:46:25 GMT\r\netag: \"4d78-69039fd5-6ba008;;;\"\r\nlast-modified: Thu, 30 Oct 2025 17:26:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19832\r\naccept-ranges: bytes\r\ndate: Fri, 31 Oct 2025 00:04:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 22713\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p2FkEazyLRRUy2zK8Yu9S2T0XN8TT3kMmDjzK5zqjI8qeW%2Fmf%2FSVNnAOEEMaJPls2hqljzVlwXaYx3RhD13dw9svMmZU%2F%2Bbk28Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 996ee5edc91b4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19832,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 500x281, components 3","md5":"f1a3cde365328bbdc750eedf763addb3","sha1":"c67a6465342124cfb1677e69ab46172ac891f0c1","sha256":"758e4b46593f06b886dd64c26e082ddc23d8f2bd4bb35f2907e7ecb641e94ec8","sha512":"37281922b9025ed555474ae6ac26f03340cfa47d22752ebce228c714fca911a5fd47a43aca6e40704c8e4db2d3bca15f419f610a0473b37c71ffdd2caab3a3cc","ssdeep":"384:Fh2exwYlrbraRFabaTlWtAQKZNznGCr0zilcM5kZz3N9I2RbTI8LbokVPErAS3:F/uYtLbqlR3/EMcSYTN91FI8LfmN3","tlshash":"5e92d001fb0f6a2750572b952e69f0e760516740a3923c3f9c97d4cacef8187ca4ca02","first_seen":"2025-10-31T00:05:45.139344Z","last_seen":"2025-10-31T00:05:45.139344Z","times_seen":1,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
