{"report_id":"787e08a3-b8e4-4620-bdac-fd4de524e842","version":6,"status":"done","tags":[],"date":"2025-10-09T08:49:30Z","url":{"schema":"http","addr":"haxloppd.com/e/gxm0vtugwe9p","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"ip":{"addr":"104.21.72.69","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"haxloppd.com/e/gxm0vtugwe9p","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"title":"2025-09-29 14 (online-video-cutter com)"},"submit":{"url":{"schema":"http","addr":"haxloppd.com/e/gxm0vtugwe9p","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"ip":{"addr":"104.21.72.69","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-13T08:49:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amt3.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"p19-ad-site-sign-sg.tiktokcdn.com","ip":{"addr":"199.232.174.73","port":443,"asn":54113,"as":"FASTLY","country":"United Kingdom","country_code":"GB"},"domain_registered":"2017-09-20","domain_rank":0,"first_seen":"2025-09-30T05:29:05.117083Z","last_seen":"2025-10-08T05:54:19.75353Z","alert_count":0,"request_count":1,"received_data":865141,"sent_data":613,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"haxloppd.com","ip":{"addr":"172.67.176.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-16","domain_rank":512342,"first_seen":"2025-07-19T18:11:31.824083Z","last_seen":"2025-10-04T21:51:06.698126Z","alert_count":0,"request_count":16,"received_data":1269861,"sent_data":8249,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"pixoraa.cc","ip":{"addr":"104.21.77.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-16","domain_rank":0,"first_seen":"2025-09-24T05:22:54.006271Z","last_seen":"2025-10-01T15:30:26.151043Z","alert_count":0,"request_count":2,"received_data":957455,"sent_data":873,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"p16-ad-site-sign-sg.tiktokcdn.com","ip":{"addr":"2.23.13.104","port":443,"asn":20940,"as":"Akamai International B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2017-09-20","domain_rank":0,"first_seen":"2025-10-03T10:25:32.712595Z","last_seen":"2025-10-03T10:25:32.712595Z","alert_count":0,"request_count":1,"received_data":880250,"sent_data":605,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-10-05T22:12:07.052692Z","alert_count":0,"request_count":3,"received_data":1276330,"sent_data":1317,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bvtpk.com","ip":{"addr":"172.67.154.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-03-16","domain_rank":37068,"first_seen":"2025-05-21T11:34:02.786268Z","last_seen":"2025-10-07T14:59:13.045889Z","alert_count":0,"request_count":1,"received_data":111111,"sent_data":405,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"amt3.com","ip":{"addr":"139.45.195.9","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2004-03-18","domain_rank":8122,"first_seen":"2025-04-23T17:00:21.322227Z","last_seen":"2025-10-08T08:00:52.631212Z","alert_count":1,"request_count":1,"received_data":827,"sent_data":588,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"my.rtmark.net","ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-29","domain_rank":43911,"first_seen":"2015-02-04T09:54:57Z","last_seen":"2025-10-06T00:34:29.689436Z","alert_count":0,"request_count":1,"received_data":835,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-2TL7NH453R","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"89b1f879dbc1c24d8dda47e30a2f0fb1","sha1":"418cd17d67ecdaeed6d5cfc4994037cca213fe3f","sha256":"db6b6c22897e0d52c0947a2b443ee6f920994755decd78580ef1180276a7218a","sha512":"e0b94b0811177d1589413f7442d299d59b361b69566bcd68d07085d8ab5152be8f78eeb2ccc5ff7ca363ecabdab5e03c75dc50d82297bfd5b315ff518390d065","ssdeep":"6144:nBEwep2Vtv0njCnzGwXV4rvoB6bEGBQ5w0yN+Xy:BIYfsnjYGdo3zy","tlshash":"329409de73d674225396f478503f018ba57b28a2b44cc89af189cde42e74a9a4137f7c","size":424752,"data":"","first_seen":"2025-10-09T08:49:36.212891Z","last_seen":"2025-10-09T08:49:36.212891Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haxloppd.com/js/localstorage-slim.js","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"ip":{"addr":"172.67.176.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba6facacb00551830393d637195804cf","sha1":"77d2d2802ee44767b33a2d679945cc3efa3619cc","sha256":"41bb37c8133d8e5c128820cfbe03bcbf63ce256bcbd60a1a76143472d8668e38","sha512":"90aa07250eb414ec22765ab6922f593ed3186faecc02008f0331c3e3807cace76861e01028142015308341e955f151b609d08b7d354ff2d27e0ff04ebfde81f9","ssdeep":"","tlshash":"ea41118275e1d9904be004e728b0c002e638992e705d62d0f7b7dd827c9909bcfb57fa","size":2064,"data":"","first_seen":"2023-03-07T15:52:27Z","last_seen":"2026-04-04T05:48:04.622157Z","times_seen":1478,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haxloppd.com/player/jw8/jwplayer.js?v=7","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"ip":{"addr":"172.67.176.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"581ff912c413cd78a30f5c212f42271a","sha1":"79af689432d0f20cd1d951eb9436711da07decd4","sha256":"c708d26c24b48c3343e8cc7879d07e8ca6f23d1cc1e5df165a9f8e24a7c5830e","sha512":"c6185ea9db6db8786aa1636537595a5f061745caf287602beafc2dca984b1eceafeb3651109cad8cf45be3dba2a76a201758c6aaa7d7fb1adc8e07e95a39f41b","ssdeep":"1536:ELyl/ByW1iqxGJaGB2lAqU6ePRtwoIWz0Bk+5cm3wUn+yUi3LAalYqlkcRPUeJaQ:L4pknUi3LAbdhHwSm","tlshash":"99e339a631c2f4a613e264c7e47a4005f1790988744de8a4faacecd67956907b1b3ffc","size":148052,"data":"","first_seen":"2025-04-01T21:32:19.723959Z","last_seen":"2026-04-02T13:28:52.626488Z","times_seen":603,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haxloppd.com/e/gxm0vtugwe9p","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"ip":{"addr":"172.67.176.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b26d6f86c4345f37c33c9b3b6dc9338b","sha1":"b92b66a7dadcc3acefe2c4cbd34f36c525ef4a24","sha256":"5b3474edb6863ae89e1cfe842fb92e8ffdb6d4084a837040d36d497c4a864216","sha512":"4a761629227e8640b5401c3d20d4c21820fde23b975ac94da139912a7a4ef592f86ae1117eaa52a510b7155e9ac3c1b8413c75d429e95ff473b0b9333946382e","ssdeep":"","tlshash":"1dc02b8c720a0cb041fb27408b3fbb00b002321495d56931494923048d30e03db54c14","size":153,"data":"","first_seen":"2023-05-25T01:59:38Z","last_seen":"2026-04-02T13:28:52.639295Z","times_seen":604,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-E2BG6CPV2J","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1bb56b4f209b0094a09ffc80cf3885d9","sha1":"b01e4d977c3b9b21071a93da10bb6554b99fd58c","sha256":"240311c17c7afc3771066a9876b69f580959c6f1d8d4ee491150bafc76dd18c5","sha512":"5ec802870b8be4a22a524ca34bd5523815c7af55f9b42cc00bcf65152f6f586e912db780e8219f9636859eb9bb2dffed15747c5a6053227611dd7a11b9aaaf86","ssdeep":"6144:qBd/yp2a4t90uwbWZJT+Nju5204O0NsYXdXAQY:k0YJH0KZJu0O8","tlshash":"9f941ade73d674225396f078503f018ba57b28a2b44cc89af189cde42e74a9a4177f7c","size":424747,"data":"","first_seen":"2025-10-09T08:49:36.217311Z","last_seen":"2025-10-09T08:49:36.217311Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haxloppd.com/player/jw8/jwplayer.core.controls.js?v=42","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"ip":{"addr":"172.67.176.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc91b5efc8f4bb2482c2d7d5d8d9b691","sha1":"5db922c4c6caf3a7d22f57a21670281d5c31994b","sha256":"f061c139ad68d7ed1360ab6a2c8842466d2913582468c48eb2d1ee2a651fb495","sha512":"f1e175f4658e4cb1c603875c81f3b96caaab74346c78d9b320e564f0a09a8518b11123509351bfa5229ac9d867d56c6afc1118ce7c368ff1ce729de877c7d694","ssdeep":"3072:+jY7nFuuslX/Na3u6NxIeLSJhy1yiSS64pOknRBb9Wsr9BbrC3YLrmYRJ:2Yx5U/Na3JpLSJhyJOaRBRtBHzLrmYRJ","tlshash":"e9640932214252359aea82da66514604b3398085f516cfacff2ceddd4c6e9c731fabb4","size":331116,"data":"","first_seen":"2024-12-01T14:07:01.698179Z","last_seen":"2026-04-02T13:28:52.627773Z","times_seen":668,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bvtpk.com/tag.min.js","fqdn":"bvtpk.com","domain":"bvtpk.com","tld":"com"},"ip":{"addr":"172.67.154.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c87711a5d2974cd9ee1f91fdf13c865","sha1":"f8ed5f464bf5e473cf28b326f462df2ee5698b70","sha256":"d3f84084e3f7c148c636dc35fe87fc64580db8a3fafdf07ebf6174fa089d2398","sha512":"8da04dcbdb746b2810bee89cd945e4d09a0fa7838ab960b05d5227aadd59759d76a7385f83a58abde5ee52665e4f735e554651b2dda1e70ada87ede0cd3a3be1","ssdeep":"1536:I8zmHlk4JQ9aO4kD9VaZ06GUqo54Az0SBYQ4+DIVV3BWw:jzsJkaO44I06GUb0S6z3xWw","tlshash":"96b33bc6226a241612bf8034445bed0eb5aecd8104cdcdb8e1e5b8662d78b16d3f7fd9","size":109923,"data":"","first_seen":"2025-10-08T09:14:17.976464Z","last_seen":"2025-10-12T16:00:36.826808Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-2TL7NH453R\u0026cx=c\u0026gtm=4e5a80h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e57357809c840262b3d6e0ea7090a89","sha1":"5b8b04300256cb98b1fda9451ecc7728cf1d26a3","sha256":"e2c62bc0e313eb931feda96a79563685a58b33ebfd2d836bc246e3b011be9491","sha512":"89296c03384ebc675d7e33d448954e65ae0aef02752827746f00f2436b609ecf146ae6ea9466bce44d9b2cbd54a44266896a1d7f92a314e0dee8d1e06108c51d","ssdeep":"6144:nBB/yp2a4t90uwbWZJT+Nju5204O0NsYXdXAQb:BYYJH0KZJu0O3","tlshash":"459409de73d674225396f078503f018ba57b28a2b44cc89af189cde42e74a9a4177f7c","size":425039,"data":"","first_seen":"2025-10-09T08:49:36.2211Z","last_seen":"2025-10-09T08:49:36.2211Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haxloppd.com/js/jquery.cookie.js","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"ip":{"addr":"172.67.176.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae0c2c5d8f01f7d35bb698bb618a62f7","sha1":"63556a22ddea1c5f23a5cf7d0b6d35c7aab54e20","sha256":"75aef2e95ea7f3a70999396fba0c2ab866f4ff06313cf1b07780d800a5fc1ebc","sha512":"eac94ca9d884692af8bdf12aa6e902a3be4eed0772ad8f2932ac1c3328b83a7351cdf743a409bbc0a3cd385956c08d3203d51c572bb1680489e37330fe27a2bb","ssdeep":"96:L4BZxb64Ng7V8cNwpGylRCsKZcj1JXulL6M/aGByLskPSP4lBCClf1wgCyC:LQnb6eg7DgCsk8fgZJkPSPa+gCyC","tlshash":"2e91fd293a0d231d149353f57aee10c8a930d632216ad46c744cb6b06f00c63ddfbbea","size":4331,"data":"","first_seen":"2023-03-07T01:03:07Z","last_seen":"2026-04-04T06:19:11.113197Z","times_seen":4345,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haxloppd.com/e/gxm0vtugwe9p","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"ip":{"addr":"172.67.176.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cb3a2f747e90c553769c2155d20f3ebf","sha1":"d10496bb17cb31e6c493f1429655fd723dfa3cfb","sha256":"79ac617398535f8ab3b7a4ec458a94ef2156acd847ff57111afef826d82d3742","sha512":"a1bc1a88e5a27e3270f872097bde105a03e1f7c2281f4067f2c81dee984a6be21d5e207d3237314315b7153d39c9805701b3c0486ac74137ff83230fff68540d","ssdeep":"","tlshash":"8cc09b8c251e5cb195f72740db7fb604b4423214d4d56a314d5d63845d30f17db55954","size":153,"data":"","first_seen":"2025-05-19T10:11:33.51975Z","last_seen":"2026-04-02T13:28:52.640293Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haxloppd.com/js/xupload.js","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"ip":{"addr":"172.67.176.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ef44e11ddf37c97750431e5284e4d77","sha1":"59ed0438edbda256e8258ce41729e89e7a9f0b66","sha256":"9be83627d9e3f905d1bf43b83445f1874a98ba283e79a944acff7db7c47b2cf6","sha512":"3812f64c724a2200a8a32568e793b444748a4def13c49e78815b2608106990b813649f37a36944d19da388b759f50559635fedc8b488183d9738ecbd3b5a584f","ssdeep":"192:7IKE9YGs1axsrl6XsZWnrbll621w+4UWdRebMQ4WdReDyYQaQv7OsaaFg+BnqGQZ:EGy+qBlV9GRebVReDyYS7OsaaF10fq3u","tlshash":"0522674abaa339a12a7730350bbf52043b398407114aca54bd5cd6c4af8452897ffbfd","size":10740,"data":"","first_seen":"2024-10-19T23:08:50.51898Z","last_seen":"2026-03-11T22:57:21.208385Z","times_seen":347,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haxloppd.com/assets/jquery/function.js?type=adult\u0026u=27067\u0026v=1.2","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"ip":{"addr":"172.67.176.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a958143bd34d5dbdf155bc9c8b86f5d1","sha1":"1d33fbedbd54b2b914c6ef2f0f052b0f64094e53","sha256":"559a906b99aeb55ca10e37a018f606e1df16f62c8648ba9eb35123a4cc95872e","sha512":"79c827775e2b7aa96e5c4c6455ae0a3516d65f46c41df8ebf36cc31297f20a2a48f2567fa0ae5969043641c43e6dd2feeb6cbf1664318c4790f8dcdb86fb28d3","ssdeep":"192:3KgdlIPs3VXaW/JFq2C62Os8QybOEIPjJsG:aeIPMqSlROE0jJsG","tlshash":"03f1645c7fe0291d03e64a73b13f54caf07b644a1ccfc4259011b5adaa9866eddfa831","size":7857,"data":"","first_seen":"2025-10-05T23:12:15.210025Z","last_seen":"2025-10-09T08:49:36.180823Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haxloppd.com/player/jw8/vast.js?v=32","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"ip":{"addr":"172.67.176.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b3eb53abc624a51f5e226d08758ddf3","sha1":"6cca061ec7c41313ec2027eaaca76fa9dfad750b","sha256":"73788e3233d5113578082f78869724925d3e4dd2c9d02fdc0bf84d6aed3a768e","sha512":"c6c7bbc31213d98134d98087ad912f1244b2dc7c7914247baac80d534663ab75135c004bf5473044db9e082302477b9d812b0a0db4c5f21b3e27508c26c265c5","ssdeep":"1536:twVnle2Qmbe005pkZ/gbxRYpYItN6X6ud7srzIjpitB39BsLIYOONMQHMkBxLNwO:tEnPRIN1D2zXkIYdN7Hnf","tlshash":"acb308872399d52247e484e960344212b335060f780a83acf67dfdef1d5ea4b76bab74","size":112211,"data":"","first_seen":"2025-04-01T21:32:19.700252Z","last_seen":"2026-04-02T13:28:52.634565Z","times_seen":561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haxloppd.com/player/jw8/provider.hlsjs.js?v=42","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"ip":{"addr":"172.67.176.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b88ce761b9ebc2a7859a2e03b33ce1ed","sha1":"70d94f3c48460af13fc14eea9e5969f8f28d1a3a","sha256":"0b009d01bf513b1059d8ee15e1a8b57faeb5f8066c0f47d2cf8e1dd2454e5b28","sha512":"0bf83a6b3d8d20918df3ecfd29f7016549a8d8c8cc4aa439018295d55ebf7e136397e0fca72ae0e4bc9eebcd3384261c9a4a492b6e4d43e1fc1acd3ce872c24a","ssdeep":"6144:Fy9gZtOSTvzXBukG/xu08Q9Eu961Q3/nqJxgEMLew9rrqwZk6:MyvvG/xu0pU1cqJxgEIZF","tlshash":"aca43bdd77a5a42642c2a1a5903f4607633b7d0a340dc1acfa2be9d75db8849b03bf74","size":461504,"data":"","first_seen":"2025-04-01T21:32:19.721472Z","last_seen":"2026-04-02T13:28:52.612627Z","times_seen":602,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haxloppd.com/js/jquery.min.js","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"ip":{"addr":"172.67.176.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-04T07:36:06.899443Z","times_seen":444739,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haxloppd.com/e/gxm0vtugwe9p","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"ip":{"addr":"172.67.176.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"17b8318ac8c4c66d7d9e8a82d605b771","sha1":"da94fcdae646dd50749accd7c1a5cbd0abf52540","sha256":"6abe6165dbe7eeca7d2519aedef11469c5233908fa665041ed5e0d4f531d57c5","sha512":"12179712d518406e51bd53cd738745032cc3fd5cdcabc35c1287405decb1714835278f1c0ef6c13d5f74eec340075a68e86b85cafe437836b6d3d2911ef68c20","ssdeep":"","tlshash":"d8f09ea93ccd8035e335126762afa15ab45a69382c4abc16c44c48853a95dba08af54c","size":506,"data":"","first_seen":"2025-06-22T04:35:10.483003Z","last_seen":"2026-03-11T22:57:21.236081Z","times_seen":239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haxloppd.com/e/gxm0vtugwe9p","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"ip":{"addr":"172.67.176.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"271627faddf30a6d73be015bbae0233e","sha1":"5fd274564f2ed0c2de23c8450e8cd9b163288937","sha256":"edc3c17212150dddf68ebfab64f5e900875628710952a8b50faa923ea810ff8a","sha512":"79b7c173b3e387930a1cd8e64b214b2e9f9257a675581811aca8e910032b8adee8bab78aa859e8333cce068ff42a9994dda609498e92ab4ec11e57b366ae1d12","ssdeep":"","tlshash":"e0012024f7ac1220c23b3067e537f2c7f43c00315810ec0efe4cd68c52a0847297a8a5","size":835,"data":"","first_seen":"2025-10-09T08:49:36.235493Z","last_seen":"2025-10-09T08:49:36.235493Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haxloppd.com/e/gxm0vtugwe9p","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"ip":{"addr":"172.67.176.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ef782da879f222c003eac288f2a40001","sha1":"9611ba80a9ce76b59c004f55e18986e0bec8d30c","sha256":"8a85767041b49d5e601a59f065f40999de9b789ddd51b7345309fcfa8d48f714","sha512":"92d662c974274e59d161fef1aea7e74eaf39a0b9cf49fea4a37486cdc180dfe8e4ba8d3733d0b57d0752ec04ef0c7276bc9b77860026bf0b84686b59a5bde455","ssdeep":"192:ApWKhWHwpyE65Up94XBF7Uu9Jrzo4gE0n11CW01XUmEXS1NvCWGWcWBWqwJF1p/:iWHwgWERaSrzo66hSPQF1l","tlshash":"7402092989804830c1d617e8bdbba314633d1c40ba94f59dfd6f75442739683a8bbec5","size":8718,"data":"","first_seen":"2025-10-09T08:49:36.239714Z","last_seen":"2025-10-09T08:49:36.239714Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haxloppd.com/e/gxm0vtugwe9p","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"ip":{"addr":"172.67.176.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"76cc6a7775b7b653ba5a7d7f9cea4eb4","sha1":"6484c7b286038e9a60c38f4adc61e6ba30062c91","sha256":"a00f1ced7d3bab63e82c08fdb0b05b0e9659805756c15b085c2b9804671302c9","sha512":"38c92e616452c2021d351efc393e49b83c1405721bcab7c63eb809eb040a9cb77d87e2f9bac91373a0853d198f76616ed1759e7024a8b5b0d3d0398da48738db","ssdeep":"","tlshash":"aaa022000300b80280000cccb000c8a820ec330380c20200f223fa0eea38282c03300e","size":60,"data":"","first_seen":"2023-03-07T01:03:07Z","last_seen":"2026-04-02T13:28:52.644231Z","times_seen":1027,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haxloppd.com/e/gxm0vtugwe9p","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"ip":{"addr":"172.67.176.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a1e2a332f2a6d939c3f1a9471fb3f1ba","sha1":"0e3e110ef0368a9241e69cd488e37ce8ec7d58ba","sha256":"79c08447e631cf325a5cbf712fa39fa1ca1c4a2fe45fc2226182ca65c8956120","sha512":"bbc59c856d0c9abcc5e1f0d0cc9d109c5eec825213518c4853ec41f4ed4899a1932e8b9177596512fd0af92d34b4d322320e3ff0950f4406bc2ef93cf9d8d849","ssdeep":"96:5lM4syFTv8OT/NJ3+RP5eV3MgsuVE8cHxRWN8vgDnsIVBFem3KoOcOrX2NeozUDU:o4s68yZ/Gg3VfGWNVnNnDWXM3zjcdC","tlshash":"92f14e3d557f406282d74a1eb51f2516b7b82e10bc36e333e85f88867695284d0f3af4","size":8007,"data":"","first_seen":"2025-10-09T08:49:36.243466Z","last_seen":"2025-10-09T08:49:36.243466Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haxloppd.com/e/gxm0vtugwe9p","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"ip":{"addr":"172.67.176.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a6051ba30f29c3e96123c936393d2a64","sha1":"72e84d5c9a5c00bf06bd3a13f993bc0042c4e588","sha256":"901053724f7acbf7f9625f53d18089a232a763737f396bd1403805f59156f401","sha512":"d361d4edd33d1b9db785ec49b8d3ce4abf1f331a976adc777a3d5145ce8bf1f208404fe8b1f53f56dfb30994d34751291ae517abe33542f79807813fcffd33c3","ssdeep":"","tlshash":"f73153b63128347882f6166f7cbb624df07b55512e1e9084a01ce4643828fb9f6338ce","size":1526,"data":"","first_seen":"2024-12-13T22:04:23.912578Z","last_seen":"2026-03-11T22:57:21.257626Z","times_seen":324,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"haxloppd.com/js/jquery.min.js","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"ip":{"addr":"172.67.176.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haxloppd.com/e/gxm0vtugwe9p","date":"2025-10-09T08:49:07.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haxloppd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 06:00:08 GMT","end":"Sat, 13 Dec 2025 04:58:44 GMT"},"fingerprint":{"sha1":"3A:53:BA:A8:0F:91:ED:60:F3:3F:BB:DD:7D:FE:8D:AF:86:99:3E:03","sha256":"58:4B:93:1C:A5:F7:3C:1C:C3:F3:A1:77:D5:B9:9B:F9:3C:67:CD:A6:02:BE:9A:CF:6B:7D:73:22:55:D3:F5:59"}}},"request":{"raw":"GET /js/jquery.min.js HTTP/1.1\r\nHost: haxloppd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haxloppd.com/e/gxm0vtugwe9p\r\nCookie: lang=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Oct 2025 08:49:07 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 03 Mar 2021 00:27:00 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xaxL7dWH5gfMW4Z2KOhgtBLy%2Fq%2BD5QU1YXPp0AwJrp4hna6vy8yxyoZ03jBvpJtaj61ogH2s%2F%2FnPmh7n3msLIBuHXuuHJHdoPgA2zw%3D%3D\"}]}\r\netag: \"603ed7d4-15d9d\"\r\nexpires: Fri, 10 Oct 2025 07:26:15 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nage: 523371\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc9f72ec4b0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89501,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-04T07:36:06.899443Z","times_seen":444739,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haxloppd.com/assets/jquery/function.js?type=adult\u0026u=27067\u0026v=1.2","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"ip":{"addr":"172.67.176.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haxloppd.com/e/gxm0vtugwe9p","date":"2025-10-09T08:49:07.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haxloppd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 06:00:08 GMT","end":"Sat, 13 Dec 2025 04:58:44 GMT"},"fingerprint":{"sha1":"3A:53:BA:A8:0F:91:ED:60:F3:3F:BB:DD:7D:FE:8D:AF:86:99:3E:03","sha256":"58:4B:93:1C:A5:F7:3C:1C:C3:F3:A1:77:D5:B9:9B:F9:3C:67:CD:A6:02:BE:9A:CF:6B:7D:73:22:55:D3:F5:59"}}},"request":{"raw":"GET /assets/jquery/function.js?type=adult\u0026u=27067\u0026v=1.2 HTTP/1.1\r\nHost: haxloppd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haxloppd.com/e/gxm0vtugwe9p\r\nCookie: lang=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Oct 2025 08:49:07 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NlI3gUmuUv2Vl%2FoDN7%2Bske3PxNVKEKukxYX8YXpI1L9QyzOpbjeOWEmZhk3Arei%2BHXKLmSGa2Dsmmy3dzOAlrc1SGpe16d7nKBfNRQ%3D%3D\"}]}\r\ncontent-encoding: br\r\nexpires: Wed, 08 Oct 2025 08:49:07 GMT\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nlast-modified: Thu, 09 Oct 2025 08:49:07 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98bc9f72fc510731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7857,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7857), with no line terminators","md5":"a958143bd34d5dbdf155bc9c8b86f5d1","sha1":"1d33fbedbd54b2b914c6ef2f0f052b0f64094e53","sha256":"559a906b99aeb55ca10e37a018f606e1df16f62c8648ba9eb35123a4cc95872e","sha512":"79c827775e2b7aa96e5c4c6455ae0a3516d65f46c41df8ebf36cc31297f20a2a48f2567fa0ae5969043641c43e6dd2feeb6cbf1664318c4790f8dcdb86fb28d3","ssdeep":"192:3KgdlIPs3VXaW/JFq2C62Os8QybOEIPjJsG:aeIPMqSlROE0jJsG","tlshash":"03f1645c7fe0291d03e64a73b13f54caf07b644a1ccfc4259011b5adaa9866eddfa831","first_seen":"2025-10-05T23:12:15.210025Z","last_seen":"2025-10-09T08:49:36.180823Z","times_seen":2,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haxloppd.com/stream/WJBfPE3UaHQc4zs-3sNKWQ/kjhhiuahiuhgihdf/1760042946/60558136/master.m3u8","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"ip":{"addr":"172.67.176.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://haxloppd.com/e/gxm0vtugwe9p","date":"2025-10-09T08:49:07.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haxloppd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 06:00:08 GMT","end":"Sat, 13 Dec 2025 04:58:44 GMT"},"fingerprint":{"sha1":"3A:53:BA:A8:0F:91:ED:60:F3:3F:BB:DD:7D:FE:8D:AF:86:99:3E:03","sha256":"58:4B:93:1C:A5:F7:3C:1C:C3:F3:A1:77:D5:B9:9B:F9:3C:67:CD:A6:02:BE:9A:CF:6B:7D:73:22:55:D3:F5:59"}}},"request":{"raw":"GET /stream/WJBfPE3UaHQc4zs-3sNKWQ/kjhhiuahiuhgihdf/1760042946/60558136/master.m3u8 HTTP/1.1\r\nHost: haxloppd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haxloppd.com/e/gxm0vtugwe9p\r\nCookie: lang=1; _ga_E2BG6CPV2J=GS2.1.s1759999747$o1$g0$t1759999747$j60$l0$h0; _ga=GA1.1.1813086151.1759999747; _ga_2TL7NH453R=GS2.1.s1759999747$o1$g0$t1759999747$j60$l0$h0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Oct 2025 08:49:08 GMT\r\ncontent-type: application/vnd.apple.mpegurl\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dMD5unEvl8YYn7trSxAbVxNFV3CPbm4KVdui6z9dz8njAzGbO7QcpI%2BBzda3TjHQP%2BE2n2k0WnIj8xrIzpCSoQWX2CoS3Taf6S2ElQ%3D%3D\"}]}\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncf-ray: 98bc9f77cc980731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"9ee2c8e567d1333778187bbc7460aa2f","sha1":"dbe7c31d58e190a0d135e3a2d685f6adad6ba87a","sha256":"ea91bbd790e4f7d20fc5f466393a3ea27016b30d843808a9a670ddbc6183128c","sha512":"89003c6c6dc172150b9af5e9a448294fdbe8296a2299b23f1c44e9671bf8b06b7ca63238c8bd8dbebe596c74e6a2399281bdc3406dd840c485a492efd8161143","ssdeep":"","tlshash":"6ac08c9ca53ec42a28109889448c6202a80938ed05985610f0c9018806e686826ba124","first_seen":"2025-10-09T08:49:36.184818Z","last_seen":"2025-10-09T08:49:36.184818Z","times_seen":1,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amt3.com/5/9615227/?oo=1\u0026js_build=iclick-v1.1586.2\u0026userId=08025dd4f3854030f9e196e703654cf4\u0026dmn=bvtpk.com\u0026tt=2\u0026ix=0","fqdn":"amt3.com","domain":"amt3.com","tld":"com"},"ip":{"addr":"139.45.195.9","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://haxloppd.com/e/gxm0vtugwe9p","date":"2025-10-09T08:49:08.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"amt3.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Sep 2025 05:18:13 GMT","end":"Sun, 28 Dec 2025 05:18:12 GMT"},"fingerprint":{"sha1":"07:CE:BC:65:68:14:E9:3D:A9:36:B2:F9:9B:EA:24:70:92:ED:15:21","sha256":"7E:B5:03:72:AF:6E:A6:99:87:96:AD:4D:D5:AA:4C:88:B3:63:32:D8:27:9F:0C:82:05:6A:40:FC:4F:1F:87:51"}}},"request":{"raw":"POST /5/9615227/?oo=1\u0026js_build=iclick-v1.1586.2\u0026userId=08025dd4f3854030f9e196e703654cf4\u0026dmn=bvtpk.com\u0026tt=2\u0026ix=0 HTTP/1.1\r\nHost: amt3.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2595\r\nOrigin: https://haxloppd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haxloppd.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Thu, 09 Oct 2025 08:49:08 GMT\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: https://haxloppd.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\npragma: no-cache, no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T07:46:07.547347Z","times_seen":13322606,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":86,"dns":0,"connect":26,"send":0,"wait":29,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amt3.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"haxloppd.com/e/gxm0vtugwe9p","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"ip":{"addr":"172.67.176.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-09T08:49:06.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haxloppd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 06:00:08 GMT","end":"Sat, 13 Dec 2025 04:58:44 GMT"},"fingerprint":{"sha1":"3A:53:BA:A8:0F:91:ED:60:F3:3F:BB:DD:7D:FE:8D:AF:86:99:3E:03","sha256":"58:4B:93:1C:A5:F7:3C:1C:C3:F3:A1:77:D5:B9:9B:F9:3C:67:CD:A6:02:BE:9A:CF:6B:7D:73:22:55:D3:F5:59"}}},"request":{"raw":"GET /e/gxm0vtugwe9p HTTP/1.1\r\nHost: haxloppd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 08:49:06 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 08 Oct 2025 08:49:06 GMT\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fXh%2BVdf4GvykaiOel%2FqeqoDd9eZFTJOTLtmRBvYK0pCGPMOtjmLc2nrbrDvASeL1bJF3UTZrAASff0bImSfM%2F5agT3WU40FzdH6FHw%3D%3D\"}]}\r\ncontent-encoding: br\r\nset-cookie: lang=1; HttpOnly; Path=/; Domain=haxloppd.com\r\ncf-ray: 98bc9f6e6e9821fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":14068,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (8038)","md5":"6d56cd5e1def3ef7036090d376b02b7c","sha1":"01b6c40facfbea13c8120419a85302ee5f112b6b","sha256":"3de43dea65108636f23eb323a8ff54698812c71121b6e883f20b0f7ef0b3586e","sha512":"7437c756f9b9f73737f77ff4f580538a368e84fde23b1ed220fdd355621342cce884a872a67932b1212ad5cf28349566b3de7676e5a014f4fd57bd5cd3663393","ssdeep":"192:e/ZlsYrrMzw89oNEKg8oehW50+4s68yZ/Gg3VfGWNVnNnDWXM3zjcdgYUqRwZlXT:clMzwToehI4+8/VfN6c3zjogLqRwZl2G","tlshash":"cb524b3ead6e803282a2051ab53fb20db2bd2930b825e561f49ed4457f94bc9d4f3d94","first_seen":"2025-10-09T08:49:36.188908Z","last_seen":"2025-10-09T08:49:36.188908Z","times_seen":1,"resource_available":false,"data":null}},"time_used":922,"timings":{"blocked":181,"dns":1,"connect":1,"send":0,"wait":560,"receive":0,"ssl":177},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haxloppd.com/js/jquery.cookie.js","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"ip":{"addr":"172.67.176.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haxloppd.com/e/gxm0vtugwe9p","date":"2025-10-09T08:49:07.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haxloppd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 06:00:08 GMT","end":"Sat, 13 Dec 2025 04:58:44 GMT"},"fingerprint":{"sha1":"3A:53:BA:A8:0F:91:ED:60:F3:3F:BB:DD:7D:FE:8D:AF:86:99:3E:03","sha256":"58:4B:93:1C:A5:F7:3C:1C:C3:F3:A1:77:D5:B9:9B:F9:3C:67:CD:A6:02:BE:9A:CF:6B:7D:73:22:55:D3:F5:59"}}},"request":{"raw":"GET /js/jquery.cookie.js HTTP/1.1\r\nHost: haxloppd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haxloppd.com/e/gxm0vtugwe9p\r\nCookie: lang=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Oct 2025 08:49:07 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 31 May 2011 13:53:00 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pnXPhv%2BbFRW5w1jsAYfz6%2FBix3i%2Fx8NT1munGk%2F6xdlv0CE6ENpZRdA6LncNsKxAdO0ZSh0WMLDILefU11ZcPjouE6BvolFJKoLK9g%3D%3D\"}]}\r\netag: \"4de4f2bc-10eb\"\r\nexpires: Thu, 09 Oct 2025 20:28:34 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nage: 562832\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc9f72ec4d0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4331,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"ae0c2c5d8f01f7d35bb698bb618a62f7","sha1":"63556a22ddea1c5f23a5cf7d0b6d35c7aab54e20","sha256":"75aef2e95ea7f3a70999396fba0c2ab866f4ff06313cf1b07780d800a5fc1ebc","sha512":"eac94ca9d884692af8bdf12aa6e902a3be4eed0772ad8f2932ac1c3328b83a7351cdf743a409bbc0a3cd385956c08d3203d51c572bb1680489e37330fe27a2bb","ssdeep":"96:L4BZxb64Ng7V8cNwpGylRCsKZcj1JXulL6M/aGByLskPSP4lBCClf1wgCyC:LQnb6eg7DgCsk8fgZJkPSPa+gCyC","tlshash":"2e91fd293a0d231d149353f57aee10c8a930d632216ad46c744cb6b06f00c63ddfbbea","first_seen":"2023-03-07T01:03:07Z","last_seen":"2026-04-04T06:19:11.113197Z","times_seen":4345,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haxloppd.com/player/jw8/jwplayer.js?v=7","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"ip":{"addr":"172.67.176.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haxloppd.com/e/gxm0vtugwe9p","date":"2025-10-09T08:49:07.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haxloppd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 06:00:08 GMT","end":"Sat, 13 Dec 2025 04:58:44 GMT"},"fingerprint":{"sha1":"3A:53:BA:A8:0F:91:ED:60:F3:3F:BB:DD:7D:FE:8D:AF:86:99:3E:03","sha256":"58:4B:93:1C:A5:F7:3C:1C:C3:F3:A1:77:D5:B9:9B:F9:3C:67:CD:A6:02:BE:9A:CF:6B:7D:73:22:55:D3:F5:59"}}},"request":{"raw":"GET /player/jw8/jwplayer.js?v=7 HTTP/1.1\r\nHost: haxloppd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haxloppd.com/e/gxm0vtugwe9p\r\nCookie: lang=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Oct 2025 08:49:07 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nlast-modified: Fri, 28 Mar 2025 05:48:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"24254-631609ffc56c0\"\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 1515\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OhMaxensG1GcebG1aBpeRLGtBaEULjXKGo6RU6GukwYmz6%2FZloNlrJHEcQvio%2Fi62rXDHruKyZG%2BH7bboW0%2B%2F2dSzGamXTYAJIMsjA%3D%3D\"}]}\r\ncf-ray: 98bc9f72fc4e0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":148052,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65503)","md5":"581ff912c413cd78a30f5c212f42271a","sha1":"79af689432d0f20cd1d951eb9436711da07decd4","sha256":"c708d26c24b48c3343e8cc7879d07e8ca6f23d1cc1e5df165a9f8e24a7c5830e","sha512":"c6185ea9db6db8786aa1636537595a5f061745caf287602beafc2dca984b1eceafeb3651109cad8cf45be3dba2a76a201758c6aaa7d7fb1adc8e07e95a39f41b","ssdeep":"1536:ELyl/ByW1iqxGJaGB2lAqU6ePRtwoIWz0Bk+5cm3wUn+yUi3LAalYqlkcRPUeJaQ:L4pknUi3LAbdhHwSm","tlshash":"99e339a631c2f4a613e264c7e47a4005f1790988744de8a4faacecd67956907b1b3ffc","first_seen":"2025-04-01T21:32:19.723959Z","last_seen":"2026-04-02T13:28:52.626488Z","times_seen":603,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haxloppd.com/player/jw8/jwplayer.core.controls.js?v=42","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"ip":{"addr":"172.67.176.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haxloppd.com/e/gxm0vtugwe9p","date":"2025-10-09T08:49:07.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haxloppd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 06:00:08 GMT","end":"Sat, 13 Dec 2025 04:58:44 GMT"},"fingerprint":{"sha1":"3A:53:BA:A8:0F:91:ED:60:F3:3F:BB:DD:7D:FE:8D:AF:86:99:3E:03","sha256":"58:4B:93:1C:A5:F7:3C:1C:C3:F3:A1:77:D5:B9:9B:F9:3C:67:CD:A6:02:BE:9A:CF:6B:7D:73:22:55:D3:F5:59"}}},"request":{"raw":"GET /player/jw8/jwplayer.core.controls.js?v=42 HTTP/1.1\r\nHost: haxloppd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haxloppd.com/e/gxm0vtugwe9p\r\nCookie: lang=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Oct 2025 08:49:07 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nlast-modified: Thu, 24 Oct 2024 08:24:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"50d6c-62534bc2f2f80\"\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 6649\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FafuZUqSSqB1nnXDh3HCooGqhPJJK2h0iXOEfItZgCqdlIN3oBEt4KL5OS8RJWKpMMpNZiqDquABlORTOSObYRwW70wSO2FX90Tm7w%3D%3D\"}]}\r\ncf-ray: 98bc9f750c710731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":331116,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65143)","md5":"bc91b5efc8f4bb2482c2d7d5d8d9b691","sha1":"5db922c4c6caf3a7d22f57a21670281d5c31994b","sha256":"f061c139ad68d7ed1360ab6a2c8842466d2913582468c48eb2d1ee2a651fb495","sha512":"f1e175f4658e4cb1c603875c81f3b96caaab74346c78d9b320e564f0a09a8518b11123509351bfa5229ac9d867d56c6afc1118ce7c368ff1ce729de877c7d694","ssdeep":"3072:+jY7nFuuslX/Na3u6NxIeLSJhy1yiSS64pOknRBb9Wsr9BbrC3YLrmYRJ:2Yx5U/Na3JpLSJhyJOaRBRtBHzLrmYRJ","tlshash":"e9640932214252359aea82da66514604b3398085f516cfacff2ceddd4c6e9c731fabb4","first_seen":"2024-12-01T14:07:01.698179Z","last_seen":"2026-04-02T13:28:52.627773Z","times_seen":668,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haxloppd.com/stream/WJBfPE3UaHQc4zs-3sNKWQ/kjhhiuahiuhgihdf/1760042946/60558136/master.m3u8","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"ip":{"addr":"172.67.176.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://haxloppd.com/e/gxm0vtugwe9p","date":"2025-10-09T08:49:07.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haxloppd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 06:00:08 GMT","end":"Sat, 13 Dec 2025 04:58:44 GMT"},"fingerprint":{"sha1":"3A:53:BA:A8:0F:91:ED:60:F3:3F:BB:DD:7D:FE:8D:AF:86:99:3E:03","sha256":"58:4B:93:1C:A5:F7:3C:1C:C3:F3:A1:77:D5:B9:9B:F9:3C:67:CD:A6:02:BE:9A:CF:6B:7D:73:22:55:D3:F5:59"}}},"request":{"raw":"HEAD /stream/WJBfPE3UaHQc4zs-3sNKWQ/kjhhiuahiuhgihdf/1760042946/60558136/master.m3u8 HTTP/1.1\r\nHost: haxloppd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://haxloppd.com/e/gxm0vtugwe9p\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: lang=1; _ga_E2BG6CPV2J=GS2.1.s1759999747$o1$g0$t1759999747$j60$l0$h0; _ga=GA1.1.1813086151.1759999747; _ga_2TL7NH453R=GS2.1.s1759999747$o1$g0$t1759999747$j60$l0$h0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Oct 2025 08:49:07 GMT\r\ncontent-type: application/vnd.apple.mpegurl\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LQYMy7t%2F4meKeZdeJEAno1sF2V5Jq%2FO5%2FIte37DYF%2B5Pt6XkaKg8hoMFtYsyEN8vIJo56yiarelhTAv9yE6kf0cwuJZf2BsIYGORGw%3D%3D\"}]}\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc9f77ac950731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T07:46:07.547347Z","times_seen":13322606,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haxloppd.com/css/main.css","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"ip":{"addr":"172.67.176.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://haxloppd.com/e/gxm0vtugwe9p","date":"2025-10-09T08:49:07.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haxloppd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 06:00:08 GMT","end":"Sat, 13 Dec 2025 04:58:44 GMT"},"fingerprint":{"sha1":"3A:53:BA:A8:0F:91:ED:60:F3:3F:BB:DD:7D:FE:8D:AF:86:99:3E:03","sha256":"58:4B:93:1C:A5:F7:3C:1C:C3:F3:A1:77:D5:B9:9B:F9:3C:67:CD:A6:02:BE:9A:CF:6B:7D:73:22:55:D3:F5:59"}}},"request":{"raw":"GET /css/main.css HTTP/1.1\r\nHost: haxloppd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haxloppd.com/e/gxm0vtugwe9p\r\nCookie: lang=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Oct 2025 08:49:07 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 12 Nov 2022 15:05:00 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V4VseawGk9hhp7qH%2Fc92WSPH%2B1xEUt4XeNlE%2B7%2BR1gOg6qKEADJcSa9tZF5ClkP9OqA%2FwDKPp50b1tvVWaQ93aQzPcrhoClxDr5azg%3D%3D\"}]}\r\netag: \"636fb61c-c11b\"\r\nexpires: Fri, 10 Oct 2025 07:26:15 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nage: 523371\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc9f72ec4a0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49435,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text","md5":"51d559d2f974e61e564a5f8120a23a9a","sha1":"9eab84e6bf40cfca88aac7f6d849df54f27ac12d","sha256":"a01ef8569a9021b0315bf38d5d518a928d98efce576f56ac012c30f2b63e1cb6","sha512":"5a4a10a2083c3375306ea83736eb2f991cca894dd2f78582c18886609ba1ac725877abdee3ecbcb368d5bb3c57fe0b418e3d0a87bcca015d0fb8de5f51e8fdc8","ssdeep":"1536:AQV8FxnYgpery2vYsRwq9AOOGvC4DONaYi3Rz:AQVMxnYTy2v/AOOkdRz","tlshash":"c8239522a7812c0cf06bd1b67d6197d6233e4053d92b1f7c7ab93578c28e4e85173b9a","first_seen":"2023-04-09T22:09:53Z","last_seen":"2026-04-01T19:35:17.258141Z","times_seen":632,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haxloppd.com/favicon.ico","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"ip":{"addr":"172.67.176.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haxloppd.com/e/gxm0vtugwe9p","date":"2025-10-09T08:49:07.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haxloppd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 06:00:08 GMT","end":"Sat, 13 Dec 2025 04:58:44 GMT"},"fingerprint":{"sha1":"3A:53:BA:A8:0F:91:ED:60:F3:3F:BB:DD:7D:FE:8D:AF:86:99:3E:03","sha256":"58:4B:93:1C:A5:F7:3C:1C:C3:F3:A1:77:D5:B9:9B:F9:3C:67:CD:A6:02:BE:9A:CF:6B:7D:73:22:55:D3:F5:59"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: haxloppd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haxloppd.com/e/gxm0vtugwe9p\r\nCookie: lang=1; _ga_E2BG6CPV2J=GS2.1.s1759999747$o1$g0$t1759999747$j60$l0$h0; _ga=GA1.1.1813086151.1759999747\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Oct 2025 08:49:07 GMT\r\ncontent-type: image/x-icon\r\nvary: accept-encoding\r\nlast-modified: Fri, 06 Dec 2024 03:40:36 GMT\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 10 Oct 2025 11:14:10 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\netag: W/\"67527234-3c2e\"\r\nage: 509697\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bvkAJrkekEi%2B1eUjJRRiVSId7U9pTpyEAhX0KvWnTCm9TTOTgm%2Fsszj8wy2KVxpeWcBuvNyFgjAn%2BpUu0mmoSdq83hRKK9WOSLQc2w%3D%3D\"}]}\r\ncf-ray: 98bc9f765c880731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"b2c5203adab5e7b787bdb86d1c00f44f","sha1":"e12ac26f0ad579e2e32d36b00fb58867cd11a46c","sha256":"6ce20250cd83244a68b895f2aeeba18ff240c0988cd8adba70d8afa4be0b5ff5","sha512":"8784c9956ceda82d804c08d0bad22a5e23dd64b1abf767f0b1d4c324b2123f2c49a10c994f05c7ab4c0b121256b43e8cb67837c7627bf0854efa98747e54d5e2","ssdeep":"192:r0muBBo8m8ztSQdGJkh84D+N7UAPbEbs:4muDogztSHm84D+N7XJ","tlshash":"1c62f8ab7d72850ec4a9c3712cb52cee3de4fc0f9148179781d4363b6a1b9b406aa4d7","first_seen":"2024-12-18T23:10:44.072182Z","last_seen":"2026-04-02T13:28:52.613269Z","times_seen":264,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixoraa.cc/gxm0vtugwe9p0000.jpg","fqdn":"pixoraa.cc","domain":"pixoraa.cc","tld":"cc"},"ip":{"addr":"104.21.77.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haxloppd.com/e/gxm0vtugwe9p","date":"2025-10-09T08:49:08.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pixoraa.cc","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Sun, 14 Sep 2025 20:10:15 GMT","end":"Sat, 13 Dec 2025 19:04:04 GMT"},"fingerprint":{"sha1":"45:E4:A3:F5:8F:7E:B1:E8:92:97:F7:D8:1D:12:4B:2C:80:44:DF:0B","sha256":"1B:AF:7D:65:DC:AC:DC:17:29:53:1A:93:D0:D0:F8:BF:AC:6E:91:2E:92:CB:77:B1:E0:45:73:7C:EE:2D:80:8E"}}},"request":{"raw":"GET /gxm0vtugwe9p0000.jpg HTTP/1.1\r\nHost: pixoraa.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haxloppd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Oct 2025 08:49:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 859492\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2uPf2%2FJ8MpeFdTdWcL9SsxBmwk5sgmyK9pUhjLxB%2BGON99vOzZH6D5cV1tJb3Gtlayta6%2Fp%2B0LPT2yiPthRM4QoMMG6N82eV\"}]}\r\nlast-modified: Tue, 30 Sep 2025 08:12:12 GMT\r\netag: \"68db90dc-d1d64\"\r\nexpires: Thu, 16 Oct 2025 03:46:29 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nage: 18158\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98bc9f79ae6c5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":859492,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2000x1120, components 3","md5":"41ccaed5b765a8ce8f5bf0b085c53550","sha1":"ddd435a74036a61caabe0e52bff80919cf24c93c","sha256":"8a7aeeda723c3a508d62843b5be427246c7fc927ab49cd24fd50713a2540abcf","sha512":"544fb4e78966b0e29c3f7084c9fa65a5afe05b23d24d08b3df94148314e937d4eb2c55b9ae9de31b8e95446a5ab88a885507b1063e5edee8e71fa36626a1f462","ssdeep":"24576:beXhzc5p5yKxrOhCkGlZM8f4yH42gwFZL:bqhzc1xryPMM8QyHjg0","tlshash":"e805339443ac48416d46323c0bfd4be533790298aeff3325c6add8a8bd654a573b712e","first_seen":"2025-10-09T08:49:36.200373Z","last_seen":"2025-10-09T08:49:36.200373Z","times_seen":1,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p16-ad-site-sign-sg.tiktokcdn.com/ad-site-i18n-sg/202509305d0dc18af07f49d448cdb743~tplv-d5opwmad15-ttam-origin.image?lk3s=6d71dd51\u0026x-expires=1790755803\u0026x-signature=YkVmjKvpV2qcOKhv2mfadv7194I%3D","fqdn":"p16-ad-site-sign-sg.tiktokcdn.com","domain":"tiktokcdn.com","tld":"com"},"ip":{"addr":"2.23.13.104","port":443,"asn":20940,"as":"Akamai International B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://haxloppd.com/e/gxm0vtugwe9p","date":"2025-10-09T08:49:08.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tiktokcdn.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 07 Mar 2025 05:26:04 GMT","end":"Wed, 08 Apr 2026 05:26:03 GMT"},"fingerprint":{"sha1":"AB:A5:D2:DF:CE:6C:6D:AE:DD:36:C7:0F:CC:E1:32:1D:76:C7:35:C0","sha256":"75:76:14:5C:F5:BB:65:0D:C6:06:2B:2A:07:FA:50:AF:47:D8:3D:E9:63:80:10:B1:BA:42:B3:0B:51:AE:A7:9B"}}},"request":{"raw":"GET /ad-site-i18n-sg/202509305d0dc18af07f49d448cdb743~tplv-d5opwmad15-ttam-origin.image?lk3s=6d71dd51\u0026x-expires=1790755803\u0026x-signature=YkVmjKvpV2qcOKhv2mfadv7194I%3D HTTP/1.1\r\nHost: p16-ad-site-sign-sg.tiktokcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://haxloppd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haxloppd.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 878782\r\nimagex-fmt: png2png\r\nlast-modified: Tue, 30 Sep 2025 08:13:17 GMT\r\nnw-session-id: 20250930161316C718A8C26D7D3E239B5Bn6lnm13tt\r\nnw-session-trace: 2025-09-30T08:13:17.087377723Z 148\r\nx-bdcdn-cache-status: TCP_MISS\r\nx-length: 878782\r\nx-powered-by: ImageX\r\nx-response-date: Tue, 30 Sep 2025 08:13:17 GMT\r\nx-tt-logid: 20250930161316C718A8C26D7D3E239B5B\r\nx-request-ip: fdbd:dc51:ff:a001:1:251:69:95\r\nx-response-cinfo: fdbd:dc51:ff:a001:1:251:69:95\r\nx-response-cache: miss\r\nx-tt-trace-host: 0173d7af68fa6d0a706ae22a4f500d87bd8cf00ea32d3cde261ebe04b33ddf8cc82358a3d6a066537bb39c1edfd6d67d14f0ac35bf5ba6bc204e7c1276d93b8a22511f138b0c1aeb97c448b93534d01f68a1f22835857d204ff49da4bc480b4db7f91d49efad5161e0a809c9d3ce992f995bbe0d5fe9963fea8a42e7f78ec52848\r\nx-tt-trace-id: 00-250930161316C718A8C26D7D3E239B5B-762158B52CBF94A7-00\r\nserver: TLB\r\ncache-control: max-age=30756248\r\ndate: Thu, 09 Oct 2025 08:49:08 GMT\r\nx-cache: TCP_MISS from a2-23-13-100.deploy.akamaitechnologies.com (AkamaiGHost/22.2.5-a9c17ad842a5a5bbb9fede73ebb832d8) (-)\r\nx-cache-remote: TCP_HIT from a23-3-90-70.deploy.akamaitechnologies.com (AkamaiGHost/22.3.0-fcd174d50fb223c8364cec3c4b3f29c6) (-)\r\nx-tt-trace-tag: id=16;cdn-cache=miss;type=static\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=48, origin; dur=0, inner; dur=154\r\nx-parent-response-time: 48,2.23.13.100\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":878782,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced","md5":"8f3cbb73ee6507f2be13cbab2a201074","sha1":"30ef5fbc41133efe8db8a681c9af7115faafe864","sha256":"68511fd0dd579f1bcef2bc7506828e7156865589d76d2be9a85f67e1f5751b5a","sha512":"c93e460a29bf5f19f6f03bc33f7c6b808a25d7665ce3b6241af77220e9a5f4094393c41001a6075ffe01923d7cbb207b149f6b61a9b20bc12aa05e2095c74f76","ssdeep":"12288:yhswMzc1DP5s6T2s7wM7BMO/suZzLrZGZInz3XyvwnD5S4t4gnR4FS:kphGs71BMOZ9zUwnU4tIS","tlshash":"3b15120d3fdc3cd7c90b51b6924a5370a230ac44694daf66699d7f5af8f83e4dc60628","first_seen":"2025-10-09T08:49:36.202305Z","last_seen":"2025-10-09T08:49:36.202305Z","times_seen":1,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":61,"dns":36,"connect":1,"send":0,"wait":51,"receive":54,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haxloppd.com/js/xupload.js","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"ip":{"addr":"172.67.176.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haxloppd.com/e/gxm0vtugwe9p","date":"2025-10-09T08:49:07.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haxloppd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 06:00:08 GMT","end":"Sat, 13 Dec 2025 04:58:44 GMT"},"fingerprint":{"sha1":"3A:53:BA:A8:0F:91:ED:60:F3:3F:BB:DD:7D:FE:8D:AF:86:99:3E:03","sha256":"58:4B:93:1C:A5:F7:3C:1C:C3:F3:A1:77:D5:B9:9B:F9:3C:67:CD:A6:02:BE:9A:CF:6B:7D:73:22:55:D3:F5:59"}}},"request":{"raw":"GET /js/xupload.js HTTP/1.1\r\nHost: haxloppd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haxloppd.com/e/gxm0vtugwe9p\r\nCookie: lang=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Oct 2025 08:49:07 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 2024 06:42:06 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HhJBh%2Fix5U33G8H%2BVp7m9cPCVysq%2FpxDqCC7lVbtuz6vy2OIXAYrLOJL5UpW5CJ9WobXmqsO2Bc0Kw1wA9%2BA0DBe1A6diK140rRNUA%3D%3D\"}]}\r\netag: \"6712033e-29f4\"\r\nexpires: Wed, 15 Oct 2025 05:37:44 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nage: 97882\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc9f72ec4c0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10740,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"7ef44e11ddf37c97750431e5284e4d77","sha1":"59ed0438edbda256e8258ce41729e89e7a9f0b66","sha256":"9be83627d9e3f905d1bf43b83445f1874a98ba283e79a944acff7db7c47b2cf6","sha512":"3812f64c724a2200a8a32568e793b444748a4def13c49e78815b2608106990b813649f37a36944d19da388b759f50559635fedc8b488183d9738ecbd3b5a584f","ssdeep":"192:7IKE9YGs1axsrl6XsZWnrbll621w+4UWdRebMQ4WdReDyYQaQv7OsaaFg+BnqGQZ:EGy+qBlV9GRebVReDyYS7OsaaF10fq3u","tlshash":"0522674abaa339a12a7730350bbf52043b398407114aca54bd5cd6c4af8452897ffbfd","first_seen":"2024-10-19T23:08:50.51898Z","last_seen":"2026-03-11T22:57:21.208385Z","times_seen":347,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haxloppd.com/js/localstorage-slim.js","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"ip":{"addr":"172.67.176.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haxloppd.com/e/gxm0vtugwe9p","date":"2025-10-09T08:49:07.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haxloppd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 06:00:08 GMT","end":"Sat, 13 Dec 2025 04:58:44 GMT"},"fingerprint":{"sha1":"3A:53:BA:A8:0F:91:ED:60:F3:3F:BB:DD:7D:FE:8D:AF:86:99:3E:03","sha256":"58:4B:93:1C:A5:F7:3C:1C:C3:F3:A1:77:D5:B9:9B:F9:3C:67:CD:A6:02:BE:9A:CF:6B:7D:73:22:55:D3:F5:59"}}},"request":{"raw":"GET /js/localstorage-slim.js HTTP/1.1\r\nHost: haxloppd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haxloppd.com/e/gxm0vtugwe9p\r\nCookie: lang=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Oct 2025 08:49:07 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 16 Nov 2021 13:32:00 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kPDR6GmNKJDFcb%2FAgXeJz3vNtaUk%2B%2BFhImWUA%2FOccycysRRNRRRfJBqASNz%2BAq7pgL74aErbfcMg1UEn86KFkctypS9NedixuX8m3Q%3D%3D\"}]}\r\netag: \"6193b2d0-810\"\r\nexpires: Sun, 12 Oct 2025 01:33:21 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nage: 371745\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc9f72fc500731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2064,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2063)","md5":"ba6facacb00551830393d637195804cf","sha1":"77d2d2802ee44767b33a2d679945cc3efa3619cc","sha256":"41bb37c8133d8e5c128820cfbe03bcbf63ce256bcbd60a1a76143472d8668e38","sha512":"90aa07250eb414ec22765ab6922f593ed3186faecc02008f0331c3e3807cace76861e01028142015308341e955f151b609d08b7d354ff2d27e0ff04ebfde81f9","ssdeep":"","tlshash":"ea41118275e1d9904be004e728b0c002e638992e705d62d0f7b7dd827c9909bcfb57fa","first_seen":"2023-03-07T15:52:27Z","last_seen":"2026-04-04T05:48:04.622157Z","times_seen":1478,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haxloppd.com/player/jw8/provider.hlsjs.js?v=42","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"ip":{"addr":"172.67.176.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haxloppd.com/e/gxm0vtugwe9p","date":"2025-10-09T08:49:07.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haxloppd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 06:00:08 GMT","end":"Sat, 13 Dec 2025 04:58:44 GMT"},"fingerprint":{"sha1":"3A:53:BA:A8:0F:91:ED:60:F3:3F:BB:DD:7D:FE:8D:AF:86:99:3E:03","sha256":"58:4B:93:1C:A5:F7:3C:1C:C3:F3:A1:77:D5:B9:9B:F9:3C:67:CD:A6:02:BE:9A:CF:6B:7D:73:22:55:D3:F5:59"}}},"request":{"raw":"GET /player/jw8/provider.hlsjs.js?v=42 HTTP/1.1\r\nHost: haxloppd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haxloppd.com/e/gxm0vtugwe9p\r\nCookie: lang=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Oct 2025 08:49:07 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nlast-modified: Fri, 28 Mar 2025 05:48:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"70ac0-631609e8e20c0\"\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 6649\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fxx6puRqVWI9ysDuz547ArIzeSLnTCGjS1giNyew2Wt6m3Dsk6j9IdUSNLzH11jcFGCh3S0%2F8yKb%2Bbdk5mXtboD05Kbs3lE2utiDCA%3D%3D\"}]}\r\ncf-ray: 98bc9f750c720731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":461504,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65501)","md5":"b88ce761b9ebc2a7859a2e03b33ce1ed","sha1":"70d94f3c48460af13fc14eea9e5969f8f28d1a3a","sha256":"0b009d01bf513b1059d8ee15e1a8b57faeb5f8066c0f47d2cf8e1dd2454e5b28","sha512":"0bf83a6b3d8d20918df3ecfd29f7016549a8d8c8cc4aa439018295d55ebf7e136397e0fca72ae0e4bc9eebcd3384261c9a4a492b6e4d43e1fc1acd3ce872c24a","ssdeep":"6144:Fy9gZtOSTvzXBukG/xu08Q9Eu961Q3/nqJxgEMLew9rrqwZk6:MyvvG/xu0pU1cqJxgEIZF","tlshash":"aca43bdd77a5a42642c2a1a5903f4607633b7d0a340dc1acfa2be9d75db8849b03bf74","first_seen":"2025-04-01T21:32:19.721472Z","last_seen":"2026-04-02T13:28:52.612627Z","times_seen":602,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haxloppd.com/dl?op=get_slides\u0026length=88\u0026url=https://pixoraa.cc/gxm0vtugwe9p0000.jpg","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"ip":{"addr":"172.67.176.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://haxloppd.com/e/gxm0vtugwe9p","date":"2025-10-09T08:49:07.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haxloppd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 06:00:08 GMT","end":"Sat, 13 Dec 2025 04:58:44 GMT"},"fingerprint":{"sha1":"3A:53:BA:A8:0F:91:ED:60:F3:3F:BB:DD:7D:FE:8D:AF:86:99:3E:03","sha256":"58:4B:93:1C:A5:F7:3C:1C:C3:F3:A1:77:D5:B9:9B:F9:3C:67:CD:A6:02:BE:9A:CF:6B:7D:73:22:55:D3:F5:59"}}},"request":{"raw":"GET /dl?op=get_slides\u0026length=88\u0026url=https://pixoraa.cc/gxm0vtugwe9p0000.jpg HTTP/1.1\r\nHost: haxloppd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haxloppd.com/e/gxm0vtugwe9p\r\nCookie: lang=1; _ga_E2BG6CPV2J=GS2.1.s1759999747$o1$g0$t1759999747$j60$l0$h0; _ga=GA1.1.1813086151.1759999747; _ga_2TL7NH453R=GS2.1.s1759999747$o1$g0$t1759999747$j60$l0$h0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Oct 2025 08:49:07 GMT\r\ncontent-type: text/vtt\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yOBIc22N2lPw9EXP7%2Br6tPOywnIA8Mn9C8eTZoCeB1ZrJKDS5YHbQbJKv5ualfIB97zsikK%2BMT8yEa3S5UIUaT8FGitclrjne1uIrw%3D%3D\"}]}\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bc9f775c8b0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9228,"size_decoded":0,"mime_type":"text/vtt","magic":"WebVTT subtitles, ASCII text","md5":"07f1711f24853fbae261dcd36926a46e","sha1":"1cefa3c975e7fd94a9eb025df74c2e8548d5073f","sha256":"a77b63e41627079b96b0093acdf0cde81a8aec194d2564bccea0aca151372edc","sha512":"084871d4a920367817e2e39f7ced531d1d8b99580b9d20fc4200d929f60a67acac998e5cd181ea67fcb8f1fcb3c828e9323cef85889574500ce0eb211628ef3a","ssdeep":"48:LdSWnSv1Wi7ttehq1bEo4Ua4lBSek1vDb8/cKPhQP2L+XfbMaVeZ:LPWr8hqRta4sHKAXi","tlshash":"f3127ad64374cc5ee262d774d7a23eebeb13614f98cc6c21f8713062ac8d618d92949b","first_seen":"2025-10-09T08:49:36.207701Z","last_seen":"2025-10-09T08:49:36.207701Z","times_seen":1,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haxloppd.com/stream/WJBfPE3UaHQc4zs-3sNKWQ/kjhhiuahiuhgihdf/1760042946/60558136/index-v1-a1.m3u8","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"ip":{"addr":"172.67.176.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://haxloppd.com/e/gxm0vtugwe9p","date":"2025-10-09T08:49:08.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haxloppd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 06:00:08 GMT","end":"Sat, 13 Dec 2025 04:58:44 GMT"},"fingerprint":{"sha1":"3A:53:BA:A8:0F:91:ED:60:F3:3F:BB:DD:7D:FE:8D:AF:86:99:3E:03","sha256":"58:4B:93:1C:A5:F7:3C:1C:C3:F3:A1:77:D5:B9:9B:F9:3C:67:CD:A6:02:BE:9A:CF:6B:7D:73:22:55:D3:F5:59"}}},"request":{"raw":"GET /stream/WJBfPE3UaHQc4zs-3sNKWQ/kjhhiuahiuhgihdf/1760042946/60558136/index-v1-a1.m3u8 HTTP/1.1\r\nHost: haxloppd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haxloppd.com/e/gxm0vtugwe9p\r\nCookie: lang=1; _ga_E2BG6CPV2J=GS2.1.s1759999747$o1$g0$t1759999747$j60$l0$h0; _ga=GA1.1.1813086151.1759999747; _ga_2TL7NH453R=GS2.1.s1759999747$o1$g0$t1759999747$j60$l0$h0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Oct 2025 08:49:08 GMT\r\ncontent-type: application/vnd.apple.mpegurl\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NaOVn8k5vlgaJ%2BIrv57qHciKLgtbSWPu7mLaJdHevJXf5FcaIi2Cs7rU28z%2BQFm198sVA2WEYGCCwm%2BRrjSemHhHJ1zPPp0C3kQjfw%3D%3D\"}]}\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncf-ray: 98bc9f793cc10731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2127,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"55c1cd67a8a39310d5fd72d5fea7ceef","sha1":"da5d8f5c61aa07dab9dcf8fdcc2a2975bfbc2c90","sha256":"414cae8207b963be71e26ad4989a74f8c403e852480b1115de9826b75f403206","sha512":"89796b82947ebcb62c17c90954ad66d463bcdccffdbe1a5db5b325c0bd1c4d37be3dbc6aba1d8756671da12e92cbd09152df664566b92abf8d4a3dd781028066","ssdeep":"","tlshash":"26419c6bcf9822081d6c4d9dd632785af743aafcb8f58bc429009fb91d64c4f426281a","first_seen":"2025-10-09T08:49:36.209327Z","last_seen":"2025-10-09T08:49:36.209327Z","times_seen":1,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://haxloppd.com/e/gxm0vtugwe9p","date":"2025-10-09T08:49:08.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 13:14:02 GMT","end":"Wed, 26 Nov 2025 14:13:48 GMT"},"fingerprint":{"sha1":"7A:B2:21:7F:72:E3:39:3E:95:5D:FB:ED:BB:1C:7E:88:C4:7A:B1:B3","sha256":"FB:1D:6D:AF:DA:57:8D:9A:8B:B2:CC:FF:A2:55:C8:F3:71:3D:49:77:06:FC:4D:6F:16:91:61:6F:89:1C:A3:CB"}}},"request":{"raw":"GET /gid.js HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://haxloppd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haxloppd.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 08:49:08 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://haxloppd.com\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=08025dd4f3854030f9e196e703654cf4; expires=Fri, 09 Oct 2026 08:49:08 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 98bc9f79aded49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c60dde48bf14d452d539b62067e723b6","sha1":"b3614fc5f09c47974c74e5f37a2ab81b8f332208","sha256":"2b5a25fe226fcaa8cf74c665b863161010f78bfb0479be8a27568eb07d32fb0d","sha512":"96108c17b35867deba80a57253b6f3d260714babc8ec082360114e53b972222d3d8e72dc53a175c012d1fe71af7caa74310c0e03d22732506bfcde960829683e","ssdeep":"","tlshash":"b7a022a2002800800cc802032ecbc3a080020082c820038ca0c2c00200cb3ac8c02a88","first_seen":"2025-10-09T08:49:36.211316Z","last_seen":"2025-10-09T08:49:36.211316Z","times_seen":1,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":39,"dns":0,"connect":1,"send":0,"wait":34,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-2TL7NH453R","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haxloppd.com/e/gxm0vtugwe9p","date":"2025-10-09T08:49:07.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:34:17 GMT","end":"Mon, 08 Dec 2025 08:34:16 GMT"},"fingerprint":{"sha1":"71:28:4D:CB:A8:43:CE:20:8D:C2:D0:1C:15:47:53:FB:EE:1F:E6:6C","sha256":"FD:F8:A3:C0:21:C0:03:15:43:2F:C7:36:8C:50:6A:39:57:B4:06:6A:0D:82:33:AB:55:A7:80:D2:E3:79:B8:11"}}},"request":{"raw":"GET /gtag/js?id=G-2TL7NH453R HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haxloppd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 09 Oct 2025 08:49:07 GMT\r\nexpires: Thu, 09 Oct 2025 08:49:07 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 140998\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":424752,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"89b1f879dbc1c24d8dda47e30a2f0fb1","sha1":"418cd17d67ecdaeed6d5cfc4994037cca213fe3f","sha256":"db6b6c22897e0d52c0947a2b443ee6f920994755decd78580ef1180276a7218a","sha512":"e0b94b0811177d1589413f7442d299d59b361b69566bcd68d07085d8ab5152be8f78eeb2ccc5ff7ca363ecabdab5e03c75dc50d82297bfd5b315ff518390d065","ssdeep":"6144:nBEwep2Vtv0njCnzGwXV4rvoB6bEGBQ5w0yN+Xy:BIYfsnjYGdo3zy","tlshash":"329409de73d674225396f478503f018ba57b28a2b44cc89af189cde42e74a9a4137f7c","first_seen":"2025-10-09T08:49:36.212891Z","last_seen":"2025-10-09T08:49:36.212891Z","times_seen":1,"resource_available":true,"data":null}},"time_used":297,"timings":{"blocked":77,"dns":0,"connect":21,"send":0,"wait":89,"receive":44,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-E2BG6CPV2J","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haxloppd.com/e/gxm0vtugwe9p","date":"2025-10-09T08:49:07.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:34:17 GMT","end":"Mon, 08 Dec 2025 08:34:16 GMT"},"fingerprint":{"sha1":"71:28:4D:CB:A8:43:CE:20:8D:C2:D0:1C:15:47:53:FB:EE:1F:E6:6C","sha256":"FD:F8:A3:C0:21:C0:03:15:43:2F:C7:36:8C:50:6A:39:57:B4:06:6A:0D:82:33:AB:55:A7:80:D2:E3:79:B8:11"}}},"request":{"raw":"GET /gtag/js?id=G-E2BG6CPV2J HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haxloppd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 09 Oct 2025 08:49:07 GMT\r\nexpires: Thu, 09 Oct 2025 08:49:07 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 141218\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":424747,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"1bb56b4f209b0094a09ffc80cf3885d9","sha1":"b01e4d977c3b9b21071a93da10bb6554b99fd58c","sha256":"240311c17c7afc3771066a9876b69f580959c6f1d8d4ee491150bafc76dd18c5","sha512":"5ec802870b8be4a22a524ca34bd5523815c7af55f9b42cc00bcf65152f6f586e912db780e8219f9636859eb9bb2dffed15747c5a6053227611dd7a11b9aaaf86","ssdeep":"6144:qBd/yp2a4t90uwbWZJT+Nju5204O0NsYXdXAQY:k0YJH0KZJu0O8","tlshash":"9f941ade73d674225396f078503f018ba57b28a2b44cc89af189cde42e74a9a4177f7c","first_seen":"2025-10-09T08:49:36.217311Z","last_seen":"2025-10-09T08:49:36.217311Z","times_seen":1,"resource_available":true,"data":null}},"time_used":284,"timings":{"blocked":71,"dns":0,"connect":22,"send":0,"wait":69,"receive":59,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-2TL7NH453R\u0026cx=c\u0026gtm=4e5a80h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haxloppd.com/e/gxm0vtugwe9p","date":"2025-10-09T08:49:07.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:34:17 GMT","end":"Mon, 08 Dec 2025 08:34:16 GMT"},"fingerprint":{"sha1":"71:28:4D:CB:A8:43:CE:20:8D:C2:D0:1C:15:47:53:FB:EE:1F:E6:6C","sha256":"FD:F8:A3:C0:21:C0:03:15:43:2F:C7:36:8C:50:6A:39:57:B4:06:6A:0D:82:33:AB:55:A7:80:D2:E3:79:B8:11"}}},"request":{"raw":"GET /gtag/js?id=G-2TL7NH453R\u0026cx=c\u0026gtm=4e5a80h2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haxloppd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 09 Oct 2025 08:49:07 GMT\r\nexpires: Thu, 09 Oct 2025 08:49:07 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 141121\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":425039,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"7e57357809c840262b3d6e0ea7090a89","sha1":"5b8b04300256cb98b1fda9451ecc7728cf1d26a3","sha256":"e2c62bc0e313eb931feda96a79563685a58b33ebfd2d836bc246e3b011be9491","sha512":"89296c03384ebc675d7e33d448954e65ae0aef02752827746f00f2436b609ecf146ae6ea9466bce44d9b2cbd54a44266896a1d7f92a314e0dee8d1e06108c51d","ssdeep":"6144:nBB/yp2a4t90uwbWZJT+Nju5204O0NsYXdXAQb:BYYJH0KZJu0O3","tlshash":"459409de73d674225396f078503f018ba57b28a2b44cc89af189cde42e74a9a4177f7c","first_seen":"2025-10-09T08:49:36.2211Z","last_seen":"2025-10-09T08:49:36.2211Z","times_seen":1,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bvtpk.com/tag.min.js","fqdn":"bvtpk.com","domain":"bvtpk.com","tld":"com"},"ip":{"addr":"172.67.154.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haxloppd.com/e/gxm0vtugwe9p","date":"2025-10-09T08:49:07.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bvtpk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 16:15:33 GMT","end":"Mon, 08 Dec 2025 17:13:51 GMT"},"fingerprint":{"sha1":"57:53:1B:12:8D:B5:A7:B6:96:E2:B4:FE:90:A1:D8:FA:24:94:9A:B9","sha256":"4E:2A:10:4F:06:F6:4E:34:B3:5A:E6:9B:A2:C7:FC:B2:A4:7D:55:44:3D:06:2B:38:35:A7:52:1D:F2:4E:80:5E"}}},"request":{"raw":"GET /tag.min.js HTTP/1.1\r\nHost: bvtpk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haxloppd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 08:49:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-trace-id: 14f2149b505d9cc6c5695c044b72a227\r\ncache-control: public, max-age=600, s-maxage=1800\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 488\r\ncf-cache-status: HIT\r\nlast-modified: Thu, 09 Oct 2025 08:40:59 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0wOre5wus01gKdcHgY3g4m9JEwJ%2FGihyxJ4W1DRpm4RLxR99NuGgB3UFSoMQRGl%2BFQCIZJVrb3ZqlDhw3Xy%2FHjKtUVicMMQ%3D\"}]}\r\ncf-ray: 98bc9f75fe1d56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109923,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6c87711a5d2974cd9ee1f91fdf13c865","sha1":"f8ed5f464bf5e473cf28b326f462df2ee5698b70","sha256":"d3f84084e3f7c148c636dc35fe87fc64580db8a3fafdf07ebf6174fa089d2398","sha512":"8da04dcbdb746b2810bee89cd945e4d09a0fa7838ab960b05d5227aadd59759d76a7385f83a58abde5ee52665e4f735e554651b2dda1e70ada87ede0cd3a3be1","ssdeep":"1536:I8zmHlk4JQ9aO4kD9VaZ06GUqo54Az0SBYQ4+DIVV3BWw:jzsJkaO44I06GUb0S6z3xWw","tlshash":"96b33bc6226a241612bf8034445bed0eb5aecd8104cdcdb8e1e5b8662d78b16d3f7fd9","first_seen":"2025-10-08T09:14:17.976464Z","last_seen":"2025-10-12T16:00:36.826808Z","times_seen":68,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":31,"dns":0,"connect":1,"send":0,"wait":8,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p19-ad-site-sign-sg.tiktokcdn.com/ad-site-i18n-sg/202509305d0d4d996215a999417888f2~tplv-d5opwmad15-ttam-origin.image?lk3s=6d71dd51\u0026x-expires=1790755802\u0026x-signature=NnyAz%2Fdc%2B%2Fn7Qr7JkU0L%2B5eXTRY%3D","fqdn":"p19-ad-site-sign-sg.tiktokcdn.com","domain":"tiktokcdn.com","tld":"com"},"ip":{"addr":"199.232.174.73","port":443,"asn":54113,"as":"FASTLY","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://haxloppd.com/e/gxm0vtugwe9p","date":"2025-10-09T08:49:08.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tiktokcdn.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 15 Jan 2025 09:33:11 GMT","end":"Mon, 16 Feb 2026 09:33:10 GMT"},"fingerprint":{"sha1":"70:AD:7C:EE:3C:C2:37:58:80:E2:22:48:4E:8E:98:76:D5:CC:C2:C7","sha256":"50:F7:58:6F:4E:CC:87:A4:9F:9D:5A:3A:AD:40:1C:65:CA:A7:7D:B8:EF:BE:E4:24:D5:C9:B3:77:30:94:6D:0E"}}},"request":{"raw":"GET /ad-site-i18n-sg/202509305d0d4d996215a999417888f2~tplv-d5opwmad15-ttam-origin.image?lk3s=6d71dd51\u0026x-expires=1790755802\u0026x-signature=NnyAz%2Fdc%2B%2Fn7Qr7JkU0L%2B5eXTRY%3D HTTP/1.1\r\nHost: p19-ad-site-sign-sg.tiktokcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://haxloppd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haxloppd.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncache-control: max-age=31536000\r\nimagex-fmt: png2png\r\nlast-modified: Tue, 30 Sep 2025 08:13:28 GMT\r\nnw-session-id: 20250930161328937DCE2AC1EB8009E0CCgzrnm13tt\r\nnw-session-trace: 2025-09-30T08:13:28.14202465Z 18\r\nx-bdcdn-cache-status: TCP_MISS\r\nx-length: 863742\r\nx-powered-by: ImageX\r\nx-response-date: Tue, 30 Sep 2025 08:13:28 GMT\r\nx-tt-logid: 20250930161328937DCE2AC1EB8009E0CC\r\nvia: fdbd:dc53:2e:811::14, 1.1 varnish, 1.1 varnish\r\nx-request-ip: fdbd:dc53:3:831::35\r\nx-response-cinfo: fdbd:dc53:3:831::35\r\nx-response-cache: miss\r\nx-tt-trace-host: 01ede6fedd80c334bc0cef99b4ce90a460aedc427c7a5bda58947082ceda7e1d1989a50d3c187448319c5ff8dfefafe1b34668af6f76999d65b87ba22851b70e8c8c8cc90938eb184995aabf7245ded23c30b9a21e87dbc1f70221abe50f79c2a47b91f262856b138a92a5fc1964f5e687\r\nx-tt-trace-id: 00-250930161328937DCE2AC1EB8009E0CC-7A85D550697A2B10-00\r\nserver: TLB\r\naccept-ranges: bytes\r\nage: 779741\r\ndate: Thu, 09 Oct 2025 08:49:09 GMT\r\nx-served-by: cache-qpg1244-QPG, cache-bma-essb1270054-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 3, 0\r\nx-timer: S1759999749.030118,VS0,VE1\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nserver-timing: inner; dur=23, cdn-cache;desc=hit, edge;dur=1, origin;dur=0\r\nx-tt-trace-tag: id=19;cdn-cache=hit;type=static\r\ncontent-length: 863742\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":863742,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced","md5":"b791fe35f8004e779f2be1d6f433e2a8","sha1":"a4fc874881833830901dd3d956448cda6bc90a5a","sha256":"98564a7882dad93dc94255da6adf904f1a590727e29d69469521d93980635b1b","sha512":"9667da6848d30eda9c2cc95a7acfbe77020fa7d57a463c758ced162e2a03d6a7d0f1e028b5135beda7ce0143c02e6f6e171d019858e50ec996d5de633339d8a8","ssdeep":"24576:2GgVz+uyLjL2moV7QdwfPYDB3xPArzdpftC:14zby/iDQdE63iNttC","tlshash":"dc05228a3f141cded95745b182265bb167a4ec446c593f1624a87f5ffef83a8ce38028","first_seen":"2025-10-09T08:49:36.226276Z","last_seen":"2025-10-09T08:49:36.226276Z","times_seen":1,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":71,"dns":22,"connect":21,"send":0,"wait":23,"receive":109,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixoraa.cc/gxm0vtugwe9p_xt.jpg","fqdn":"pixoraa.cc","domain":"pixoraa.cc","tld":"cc"},"ip":{"addr":"104.21.77.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haxloppd.com/e/gxm0vtugwe9p","date":"2025-10-09T08:49:07.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pixoraa.cc","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Sun, 14 Sep 2025 20:10:15 GMT","end":"Sat, 13 Dec 2025 19:04:04 GMT"},"fingerprint":{"sha1":"45:E4:A3:F5:8F:7E:B1:E8:92:97:F7:D8:1D:12:4B:2C:80:44:DF:0B","sha256":"1B:AF:7D:65:DC:AC:DC:17:29:53:1A:93:D0:D0:F8:BF:AC:6E:91:2E:92:CB:77:B1:E0:45:73:7C:EE:2D:80:8E"}}},"request":{"raw":"GET /gxm0vtugwe9p_xt.jpg HTTP/1.1\r\nHost: pixoraa.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haxloppd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 08:49:07 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 96456\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 30 Sep 2025 08:12:11 GMT\r\netag: \"68db90db-178c8\"\r\nexpires: Tue, 14 Oct 2025 08:57:09 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nage: 172318\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TF5FkqA9ilM7PHFrbcnCUSI6d0Wi0Iq6YzNzLSZzRdHePorOmF2aXngs5EdRjU0oHjfBmpaWsJSvy%2FPAP6bH2SyQzS2rHcJF\"}]}\r\ncf-ray: 98bc9f750b8bb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96456,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 488x875, components 3","md5":"af84132bde8fdda8f362dcf88c7116e1","sha1":"1540b471f661a3ea85dbef6366cba885993048d2","sha256":"a8f8513dea72fa3f9356da2e8976c5071e48cb6a9607c6a0a3abc8ebe9e907e6","sha512":"7393d9af071c1696b2468acb904d329985f94cc5a367f23b1a97da244a748d9f3ed973d66bd35b3f1aced35ad80b53d7c1d93a71e0f0a1bbea67bdc926c34bf5","ssdeep":"1536:j5HwYJtFtkDHIzkRxPSkMy5imeQLEFq5/93YCttNpwL6:P7kTCcnMy5iILE2lIwtNeu","tlshash":"8c931227e3965412ef31b633a6da4f103b2918736586574ca1fa0f639d107b741382eb","first_seen":"2025-10-09T08:49:36.22911Z","last_seen":"2025-10-09T08:49:36.22911Z","times_seen":1,"resource_available":false,"data":null}},"time_used":661,"timings":{"blocked":317,"dns":5,"connect":2,"send":0,"wait":11,"receive":4,"ssl":319},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haxloppd.com/player/jw8/vast.js?v=32","fqdn":"haxloppd.com","domain":"haxloppd.com","tld":"com"},"ip":{"addr":"172.67.176.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haxloppd.com/e/gxm0vtugwe9p","date":"2025-10-09T08:49:07.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haxloppd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 06:00:08 GMT","end":"Sat, 13 Dec 2025 04:58:44 GMT"},"fingerprint":{"sha1":"3A:53:BA:A8:0F:91:ED:60:F3:3F:BB:DD:7D:FE:8D:AF:86:99:3E:03","sha256":"58:4B:93:1C:A5:F7:3C:1C:C3:F3:A1:77:D5:B9:9B:F9:3C:67:CD:A6:02:BE:9A:CF:6B:7D:73:22:55:D3:F5:59"}}},"request":{"raw":"GET /player/jw8/vast.js?v=32 HTTP/1.1\r\nHost: haxloppd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haxloppd.com/e/gxm0vtugwe9p\r\nCookie: lang=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 09 Oct 2025 08:49:07 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nlast-modified: Tue, 10 Dec 2024 07:24:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"1b653-628e55ff864c0\"\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 4949\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rA0blBuO9YvnC2%2F9nApRXZvuw34Jb7WRp9qSq28IUb23%2BBNl6tN%2BXhCpEl0smwBXZ1GoEH4YygAh4J05EDwWxcbcCit%2FKoCSZ1jGzA%3D%3D\"}]}\r\ncf-ray: 98bc9f73bc5a0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112211,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1b3eb53abc624a51f5e226d08758ddf3","sha1":"6cca061ec7c41313ec2027eaaca76fa9dfad750b","sha256":"73788e3233d5113578082f78869724925d3e4dd2c9d02fdc0bf84d6aed3a768e","sha512":"c6c7bbc31213d98134d98087ad912f1244b2dc7c7914247baac80d534663ab75135c004bf5473044db9e082302477b9d812b0a0db4c5f21b3e27508c26c265c5","ssdeep":"1536:twVnle2Qmbe005pkZ/gbxRYpYItN6X6ud7srzIjpitB39BsLIYOONMQHMkBxLNwO:tEnPRIN1D2zXkIYdN7Hnf","tlshash":"acb308872399d52247e484e960344212b335060f780a83acf67dfdef1d5ea4b76bab74","first_seen":"2025-04-01T21:32:19.700252Z","last_seen":"2026-04-02T13:28:52.634565Z","times_seen":561,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}