{"report_id":"7b288d74-f17c-4ef6-b42e-61e378f30af4","version":6,"status":"done","tags":[],"date":"2025-12-31T13:23:54Z","url":{"schema":"http","addr":"xnxx2.org","fqdn":"xnxx2.org","domain":"xnxx2.org","tld":"org"},"ip":{"addr":"172.67.199.63","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"xnxx2.org/","fqdn":"xnxx2.org","domain":"xnxx2.org","tld":"org"},"title":"Free XXX, XNXX Sex Videos for Free","dom":{"size":463,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (463), with no line terminators","md5":"b52670557f648ce8d22ebf45e403d353","sha1":"7bb33a1fb109b81cf221b5e3e21ac3114f5540e0","sha256":"fd0067c28da022be8ebab0813fe115bf9274e5525a7eee5f38b3606ae3403d09","sha512":"f4af43e64bcd302c253f8a88486fc9a036b4e619bfeeab9b71aa17b8ef86348f20793d2a0099832adf663ee6219a5cc0242d3a3fb6e934dfde0f54d6422a4d78","ssdeep":"","tlshash":"caf023350101784acf63f08badf08b1e211bc11ac25d8c899fea22bee2dd01b1c311ec","dom_hash":"domhashb0f30a90be2efee965fa7b4a05913ad9","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"xnxx2.org","fqdn":"xnxx2.org","domain":"xnxx2.org","tld":"org"},"ip":{"addr":"172.67.199.63","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-04T13:23:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"playhubconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"static-ca-cdn.eporner.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"thumb-v2.xhcdn.com","ip":{"addr":"45.133.44.19","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2011-04-20","domain_rank":214037,"first_seen":"2018-02-07T22:03:41Z","last_seen":"2025-12-20T15:52:32.066156Z","alert_count":0,"request_count":1,"received_data":7790,"sent_data":473,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ic-vt-nss.xhcdn.com","ip":{"addr":"185.76.9.4","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2011-04-20","domain_rank":118358,"first_seen":"2024-02-12T18:10:12Z","last_seen":"2025-12-25T18:28:39.821879Z","alert_count":0,"request_count":3,"received_data":46514,"sent_data":1560,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"tbi.sb-cd.com","ip":{"addr":"212.102.56.184","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"domain_registered":"2019-08-29","domain_rank":288507,"first_seen":"2023-01-11T18:55:09Z","last_seen":"2025-12-27T02:25:49.426028Z","alert_count":0,"request_count":2,"received_data":60458,"sent_data":933,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"clammyendearedkeg.com","ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-03-12","domain_rank":152981,"first_seen":"2025-04-07T06:36:04.475668Z","last_seen":"2025-12-26T08:54:43.438532Z","alert_count":0,"request_count":25,"received_data":909148,"sent_data":19298,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.clammyendearedkeg.com","ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-03-12","domain_rank":0,"first_seen":"2025-10-19T02:18:08.452898Z","last_seen":"2025-12-26T08:54:43.500547Z","alert_count":0,"request_count":5,"received_data":770405,"sent_data":2675,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn77-pic.xvideos-cdn.com","ip":{"addr":"185.76.9.7","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2017-08-25","domain_rank":75108,"first_seen":"2018-09-06T22:43:13Z","last_seen":"2025-12-25T10:42:16.805664Z","alert_count":0,"request_count":8,"received_data":82700,"sent_data":4241,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"xnxx2.org","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-04-11","domain_rank":76081,"first_seen":"2017-05-29T18:59:56Z","last_seen":"2025-12-26T11:39:06.087627Z","alert_count":0,"request_count":8,"received_data":237940,"sent_data":4162,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"mc.webvisor.org","ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"2009-08-25","domain_rank":99131,"first_seen":"2017-08-16T02:40:17Z","last_seen":"2025-12-29T20:34:32.76263Z","alert_count":0,"request_count":2,"received_data":4779,"sent_data":3280,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-12-28T22:26:34.892336Z","alert_count":0,"request_count":1,"received_data":262515,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"static-ca-cdn.eporner.com","ip":{"addr":"148.113.215.103","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"domain_registered":"2008-04-08","domain_rank":437402,"first_seen":"2017-02-01T13:42:14Z","last_seen":"2025-12-18T12:56:14.527822Z","alert_count":2,"request_count":2,"received_data":11329,"sent_data":941,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.27.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sacxagftoaz.com","ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-10-03","domain_rank":0,"first_seen":"2025-12-31T11:25:15.433128Z","last_seen":"2025-12-31T11:25:15.433128Z","alert_count":0,"request_count":5,"received_data":7660,"sent_data":2714,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-12-28T22:20:33.111263Z","alert_count":0,"request_count":2,"received_data":133409,"sent_data":1002,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ic-vt-lm.xhcdn.com","ip":{"addr":"88.208.45.217","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2011-04-20","domain_rank":1392874,"first_seen":"2022-03-23T13:38:17Z","last_seen":"2025-12-26T11:39:06.106991Z","alert_count":0,"request_count":3,"received_data":45373,"sent_data":1557,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"playhubconnect.com","ip":{"addr":"104.18.14.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-09-25","domain_rank":18094,"first_seen":"2024-10-01T12:19:44Z","last_seen":"2025-12-30T09:09:47.883332Z","alert_count":5,"request_count":5,"received_data":771490,"sent_data":2575,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"ei.phncdn.com","ip":{"addr":"64.210.135.114","port":443,"asn":30361,"as":"SWIFTWILL2","country":"United States","country_code":"US"},"domain_registered":"2009-12-11","domain_rank":65546,"first_seen":"2020-12-16T15:33:01Z","last_seen":"2025-12-25T23:17:05.982416Z","alert_count":0,"request_count":2,"received_data":28026,"sent_data":1000,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"clammyendearedkeg.com/bn.js","fqdn":"clammyendearedkeg.com","domain":"clammyendearedkeg.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d158e92e83d6c8a70cc928e23060ce7","sha1":"a3bfddb1307774261e73ab9d2486438504b35084","sha256":"44f722d75c727be078a5931dd3497aacf652ba8c6eb3097176599d06aac160a9","sha512":"1d4c7db82aed070da74c04af696f6ff716b1de4097cdb46ff681926e43691f1a72279569b98dab6562736b6c1c167ea2a20b3a6d0dfe1b8543c9037f1312cd22","ssdeep":"3072:YY3td0G485lbLLPY0QkWGENs6kmJNdRVJG:9d05QlbLTofgg/dVG","tlshash":"caf3c7deb74528361156b0390f2fdf34a6a5e8d2b88d8474e0e3c0ec787c996e193b65","size":170706,"data":"","first_seen":"2025-12-24T15:48:22.966068Z","last_seen":"2026-01-11T23:52:13.961648Z","times_seen":225,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clammyendearedkeg.com/get/2055057?id=2055057\u0026pid=__clb-spot_2055057_mfu_1\u0026jp=_claxoogcxrmryzfeayhfyr\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.658-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=tvoj1D2aHR0cHM6Ly94bnh4Mi5vcmcv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=5rWIK3DaHR0cHM6Ly94bnh4Mi5vcmcvb3V0LzMwMHgyNTBmb290ZXIucGhw\u0026afid=5182363975068160\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pkw=0\u0026pload=1421\u0026rlp=%5B0%2C36%2C74%2C52%2C11%2C329%2C162%2C220%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0","fqdn":"clammyendearedkeg.com","domain":"clammyendearedkeg.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"489ff8f87b782b6213a7097023ed18a0","sha1":"2cce036593f9b06c30d3be3ed391023f2925225d","sha256":"4dfa6bc27fd3ae4dafaf408f3d0026f6d29bcc2171e9d34ac3708a072172e0c1","sha512":"fe8cc87888115a7b19eb7145a2fde9603ae66da04a6593f3c6bde2c7cbb455d01061a2f5271a62fecaf6b809fa7f38b23230c049757cf17622b0292810ecfa83","ssdeep":"","tlshash":"f2f00c5ef11fca983b2c4b2b2e7c2d0858a033ea1fc386561370d827482903a6433a77","size":638,"data":"","first_seen":"2025-12-31T13:24:00.268774Z","last_seen":"2025-12-31T13:24:00.268774Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xnxx2.org/","fqdn":"xnxx2.org","domain":"xnxx2.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7151269adda30428d11f27d963271ca5","sha1":"af90da19e76b6a05d37f235acd280228e937a49f","sha256":"90c97075d7773e87e42d2b9993078ff2194b7a8c891c803fed3d590894cb05d9","sha512":"32925336cf191893c41c14de599f52825f52ec6d6260dcddeeac6a129061a801f2dd6bf204782d750ad4c0f82282eed1432e396cfe91cc243aa3ea63374373e6","ssdeep":"","tlshash":"30700000800008e000280020cf02322022028028800b8c20aa8002b0282080fc230282","size":24,"data":"","first_seen":"2024-04-09T08:26:53Z","last_seen":"2026-04-05T07:57:09.203485Z","times_seen":165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clammyendearedkeg.com/check.html","fqdn":"clammyendearedkeg.com","domain":"clammyendearedkeg.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8f2e0cd22b41fa7c9212af0b11f449d3","sha1":"6c552632a2eeaa712496444594c3e8c68eadbbb0","sha256":"d7ca5af269e02e5109a61ef55df0196e2206204d6c742daba5a153defc097fda","sha512":"c90bb9984fc0b2a5374129cb10fc509e937ba565063e2530578430fb0329f8058c145c914de139fa166d8530cfff9799a8c78aa1ad2752d9ec72e24c0fed477c","ssdeep":"","tlshash":"d201685934f5684d5127b630255b22182d32a40325cbd94efb2cdb301f825a7eca8aef","size":762,"data":"","first_seen":"2025-03-07T08:34:13.499254Z","last_seen":"2026-03-04T07:06:03.173543Z","times_seen":7245,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xnxx2.org/out/300x250footer.php","fqdn":"xnxx2.org","domain":"xnxx2.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"936ae9798e66af08d13662ddec500ef7","sha1":"5f03f69fafa66ffdc99dc4ad5813cddfd5a2a972","sha256":"18b7ccd52652d54008582a5771c04d994cb30e14dbfd50464c17e1de9929f630","sha512":"424165906d22cfe15d6d6e7dee11b16155ac0a22e6608808349f7167f307f201feda2312f024effadb23045ecdda74c3352d6c6b814ad9cbed57ed1adc6280a3","ssdeep":"","tlshash":"7b60003c000300300c30c00030003003000c3000c00c0ccc0c03c000c330000000000c","size":12,"data":"","first_seen":"2025-10-22T18:46:54.048927Z","last_seen":"2026-04-05T07:57:09.205821Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clammyendearedkeg.com/get/2055057?id=2055057\u0026pid=__clb-spot_2055057_nmt_1\u0026jp=_clnbpjlqceayrbzznypomr\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.658-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=zZmBGaoaHR0cHM6Ly94bnh4Mi5vcmcv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=YRfKe8XaHR0cHM6Ly94bnh4Mi5vcmcvb3V0LzMwMHgyNTBmb290ZXIucGhw\u0026afid=4619414021652992\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pkw=0\u0026pload=1830\u0026rlp=%5B0%2C35%2C75%2C48%2C13%2C349%2C184%2C239%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0","fqdn":"clammyendearedkeg.com","domain":"clammyendearedkeg.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"30295d2786083b776428352edb73f71e","sha1":"3cc2006e1f7f1f51a16141a3f5be32e8b2a8d775","sha256":"8e3e2fad9815c7b4d20523204504881acb5d990069b33ec5ef7e1801488a8b53","sha512":"0d3b9a9df3433025b4c525888dd44afc1ad5d420e4251a5ace49d12a5c68c6e396da618705f9a18c517180c73403aa8db3f72c1fe86bfea6000d329cad6033e7","ssdeep":"","tlshash":"22f00e1c6b63c419462678ca067d9d1e28ca48a7df131c1f2480405bc3960facef3905","size":519,"data":"","first_seen":"2025-12-31T13:24:00.313643Z","last_seen":"2025-12-31T13:24:00.313643Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clammyendearedkeg.com/get/2055057?id=2055057\u0026pid=__clb-spot_2055057_mfu_1\u0026jp=_claxoogcxrmryzfeayhfyr\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.658-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=tvoj1D2aHR0cHM6Ly94bnh4Mi5vcmcv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=niaUJLnaHR0cHM6Ly94bnh4Mi5vcmcvb3V0LzMwMHgyNTBmb290ZXIucGhw\u0026afid=8841538672284672\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pkw=0\u0026pi=W1oqmg\u0026pload=1856\u0026rlp=%5B0%2C36%2C74%2C52%2C2101%2C516%2C199%2C407%2C1%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0","fqdn":"clammyendearedkeg.com","domain":"clammyendearedkeg.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c243709cb5c51773830d08d1e424e969","sha1":"f9b85f7e9c577ce17c53dd28071c2e19eca6f7ce","sha256":"6e29e5bb5eed74943e4752ffc37168a298c53962c33173569f35e20af9b70f84","sha512":"30a325a94c1b198f2ec7e1418dffb08f5dec87a10c97d1d7f82086920e582fb4b5af4ae502bcfe83c2e5b2f03207fe12fd5ff590bafd0bd018b444fb3021afd8","ssdeep":"96:PT83nzAYAlTYVD83nzAYAlTYVoz83nzAYAlTYVn83nzAYAlTYVsRKfbyH8AMQMcd:PT83HAlTgD83HAlTgc83HAlTgn83HAlb","tlshash":"12c1e9666602d32f75a0b38d3136cf293292a985c94f7a1765c1f2855aee06ca1f3633","size":6098,"data":"","first_seen":"2025-12-31T13:24:00.258579Z","last_seen":"2025-12-31T13:24:00.258579Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clammyendearedkeg.com/bn.js","fqdn":"clammyendearedkeg.com","domain":"clammyendearedkeg.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d158e92e83d6c8a70cc928e23060ce7","sha1":"a3bfddb1307774261e73ab9d2486438504b35084","sha256":"44f722d75c727be078a5931dd3497aacf652ba8c6eb3097176599d06aac160a9","sha512":"1d4c7db82aed070da74c04af696f6ff716b1de4097cdb46ff681926e43691f1a72279569b98dab6562736b6c1c167ea2a20b3a6d0dfe1b8543c9037f1312cd22","ssdeep":"3072:YY3td0G485lbLLPY0QkWGENs6kmJNdRVJG:9d05QlbLTofgg/dVG","tlshash":"caf3c7deb74528361156b0390f2fdf34a6a5e8d2b88d8474e0e3c0ec787c996e193b65","size":170706,"data":"","first_seen":"2025-12-24T15:48:22.966068Z","last_seen":"2026-01-11T23:52:13.961648Z","times_seen":225,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xnxx2.org/out/300x250footer.php","fqdn":"xnxx2.org","domain":"xnxx2.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"936ae9798e66af08d13662ddec500ef7","sha1":"5f03f69fafa66ffdc99dc4ad5813cddfd5a2a972","sha256":"18b7ccd52652d54008582a5771c04d994cb30e14dbfd50464c17e1de9929f630","sha512":"424165906d22cfe15d6d6e7dee11b16155ac0a22e6608808349f7167f307f201feda2312f024effadb23045ecdda74c3352d6c6b814ad9cbed57ed1adc6280a3","ssdeep":"","tlshash":"7b60003c000300300c30c00030003003000c3000c00c0ccc0c03c000c330000000000c","size":12,"data":"","first_seen":"2025-10-22T18:46:54.048927Z","last_seen":"2026-04-05T07:57:09.205821Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sacxagftoaz.com/ohqomc?lNKm=uJVlMc\u0026xd=5\u0026ii=vue\u0026zhb=2\u0026ye=_udushbudxlshkliulgzglo\u0026ozvpaonm=711412\u0026xaus=978452\u0026rwj=pxxbjd\u0026goosvtus=140540\u0026dt=133718\u0026ocis=31192\u0026usk=280969\u0026yr=8918332","fqdn":"sacxagftoaz.com","domain":"sacxagftoaz.com","tld":"com"},"ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d458e647738c8ba0282c1db589ed2c30","sha1":"a274fef7529d7c9cd58436fd43d82e6a865380a8","sha256":"f1b990a510e8b99e2f498e872119a36e9ef27e34aa316c0ae263c55588bdab6a","sha512":"a93b52275bc797fd874b7d601586c57a1319979d29a6e4f1aedcd5916b24f71d842f087525ef4ae163f7cf618cf500c0a8a9f45fe54588ecf5fa1783420a08fc","ssdeep":"","tlshash":"bdf09ebd709cc4a8f0d1801b33fe9d1f24d651b95f1f0559a0205e542b4d3d2658381f","size":495,"data":"","first_seen":"2025-12-31T13:24:00.302046Z","last_seen":"2025-12-31T13:24:00.302046Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clammyendearedkeg.com/get/2055057?id=2055057\u0026pid=__clb-spot_2055057_phf_1\u0026jp=_clunkapjzxxusymwfhuucw\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.658-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=cfP6nT0aHR0cHM6Ly94bnh4Mi5vcmcv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=iGpzHNjaHR0cHM6Ly94bnh4Mi5vcmcvb3V0LzMwMHgyNTBmb290ZXIucGhw\u0026afid=8560063695573504\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pkw=0\u0026pi=W1oqmg\u0026pload=1844\u0026rlp=%5B0%2C36%2C70%2C51%2C2110%2C502%2C187%2C393%2C1%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0","fqdn":"clammyendearedkeg.com","domain":"clammyendearedkeg.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"5017d677c4566a1184a2eb968509417f","sha1":"32bdecd5a627c4888846831b02d580b7c868db1c","sha256":"c101588ee8ba8902ef7547c3c7181db56005f9868f2195ac9f36adbe384e44ac","sha512":"c8078af7741a5629aa96b8ca0a84f463bd9e0909b7a9c17f24a7a61c3fb7f24cdac727e87be3787bd6f208295a0f89ce27be10a85bf440cca7e7e11b86166770","ssdeep":"96:80cF4dIWAqy+TYn0Nbb4dIWAqy+TY3b4dIWAqy+TYpb4dIWAqy+TY/h2Rfa7hJMo:tAqynbAqy0AqySAqybIo","tlshash":"c4c1297213087cf0b81b6f36edd71d56a720254e7b434a98d4e5b24e2028a387d1b8fa","size":6098,"data":"","first_seen":"2025-12-31T13:24:00.275821Z","last_seen":"2025-12-31T13:24:00.275821Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xnxx2.org/","fqdn":"xnxx2.org","domain":"xnxx2.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ab9de157471af41687a8be433640d4ee","sha1":"accdc350ac5b72180cf2b6dc1ba4736674242e8c","sha256":"a589e6d4abca7890a170a33c9361cf4b7a2e5e7929e376ae41746652fd5053b2","sha512":"f5cbeeb5eed4af49d1b7de2c6bf3ce96f82a35d5e7045e1ccf615cedc87f8495fab1b9cdaf2bf1746584e374eb97c5bafd636e5c971f43266f43b8de658d993c","ssdeep":"","tlshash":"e7f054a47cc84035033121163233f298767a223a28099c51c11d885328a6cfd14bf00c","size":489,"data":"","first_seen":"2025-09-28T05:21:44.005282Z","last_seen":"2025-12-31T13:24:00.320087Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xnxx2.org/","fqdn":"xnxx2.org","domain":"xnxx2.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0a6950cc16e3f5b0d3e0cccf409ea216","sha1":"89446afa3bb8122afd587b50a4364b214c2cfe06","sha256":"12791b2d2cef2717e4c8dfc81323c350cf247d323de70e065f78349a3a146a6f","sha512":"b895cbc9f3b0a3fac5d0d5788fe03b0b1b9034d18686d7e5ef864593a632fe59404c9ed40ed813817803c4be5fe2e5e0c0903a6082a49a453bcae578953a8dcd","ssdeep":"","tlshash":"6ed0124d20e2105351b3b0f28faf481821b2714b004a9a257d6e02b2afa122f11a6abc","size":195,"data":"","first_seen":"2024-04-09T08:26:53Z","last_seen":"2026-04-05T07:57:09.208649Z","times_seen":150,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xnxx2.org/out/300x250footer.php","fqdn":"xnxx2.org","domain":"xnxx2.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ccf894a463bf5a40050595fd5e8bc55f","sha1":"917df356ea3d4dc62c0f973bde4856a2db944d74","sha256":"b367e3706c89700512a54c1c0897277a96bb00db24270f4b73907b2259f7434d","sha512":"a20b02e318a022c9d1806612b7a71400ef98cf291c1f7bdb01c50b73b3c9fb9b0eb7252f12e23285ada85a85d8079ee3499ca0803bf3db7ef861e6f2ab9df3e2","ssdeep":"192:64lb8sKv/o0FhXn/Umw8WXcLX2xlyAYeD5c2AYmf42ffZB9J+ORUksr6aBvWDGz:6WWXvFBn/iPXy2WjeD5c2qfRxBGORUks","tlshash":"ae0218b9f253ec6683e88cc9617e6530f42a6905340ad054f55cec933866686e3b3f7d","size":8530,"data":"","first_seen":"2025-10-22T18:46:54.051434Z","last_seen":"2026-04-05T07:57:09.210697Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clammyendearedkeg.com/bn.js","fqdn":"clammyendearedkeg.com","domain":"clammyendearedkeg.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d158e92e83d6c8a70cc928e23060ce7","sha1":"a3bfddb1307774261e73ab9d2486438504b35084","sha256":"44f722d75c727be078a5931dd3497aacf652ba8c6eb3097176599d06aac160a9","sha512":"1d4c7db82aed070da74c04af696f6ff716b1de4097cdb46ff681926e43691f1a72279569b98dab6562736b6c1c167ea2a20b3a6d0dfe1b8543c9037f1312cd22","ssdeep":"3072:YY3td0G485lbLLPY0QkWGENs6kmJNdRVJG:9d05QlbLTofgg/dVG","tlshash":"caf3c7deb74528361156b0390f2fdf34a6a5e8d2b88d8474e0e3c0ec787c996e193b65","size":170706,"data":"","first_seen":"2025-12-24T15:48:22.966068Z","last_seen":"2026-01-11T23:52:13.961648Z","times_seen":225,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clammyendearedkeg.com/get/2055057?id=2055057\u0026pid=__clb-spot_2055057_prb_1\u0026jp=_clczrpbpbrrfmtkgllgkgu\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.658-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=ZXyVC6HaHR0cHM6Ly94bnh4Mi5vcmcv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=r2Yw6xNaHR0cHM6Ly94bnh4Mi5vcmcvb3V0LzMwMHgyNTBmb290ZXIucGhw\u0026afid=3493514114782720\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pkw=0\u0026pload=1730\u0026rlp=%5B0%2C35%2C76%2C46%2C20%2C354%2C191%2C246%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0","fqdn":"clammyendearedkeg.com","domain":"clammyendearedkeg.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"576854c79bf4fbbc010e4510dce97605","sha1":"0627453e9a8d1ec1f837d1a6c2812810137b15df","sha256":"c54c9298f5269637c7cb7c8a54ddc6c80015a3a1b6bc4bbef31528a0d39c5ee8","sha512":"8bfb07ab0f0edb3f0c34e8042b49dcbce05bd26bea6561bf51614a15c89f3e65c8e2285297c956c951b2a96a4681bd7807dfc5731b9899bf4286a5f544f04889","ssdeep":"","tlshash":"b6f00e7c8152a3b83022e6300e6d3cc8b48f9c823f379b0032884882cc6d3d16e7389b","size":519,"data":"","first_seen":"2025-12-31T13:24:00.298746Z","last_seen":"2025-12-31T13:24:00.298746Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/yandex-metrica-watch/tag.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3fe451c4a76f0b05edf97761ff8cacb5","sha1":"e6f396e4d7fcdd1040f4028d93bdb6f1c763ca78","sha256":"44949ed1e7cfb4dd85871c67c024db8f3a622b82fb5d0e7b06e88caeeaa7b000","sha512":"b03aca089ff80ccab7e20766a869e78929050eef041922cf2ca767eb6a17a6968391b019a760cc299d0ac498911cb7eec87c8dae7f419b225fbd8956065e079d","ssdeep":"3072:ksj0LYR6rUiiCRqRV9zdUa3LIgF49XqU8rKigrtsQvCucWzDoo9SVI710:rYLY2iCRqR3bp49XbvrtYucWzD5SVIp0","tlshash":"4344f7dd7682b472537334b4a03f000bb2be6c96f14c8965e185d9d97e789a89237f2c","size":261736,"data":"","first_seen":"2025-12-04T23:09:53.86457Z","last_seen":"2026-03-19T22:12:37.047646Z","times_seen":1147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clammyendearedkeg.com/get/2055057?id=2055057\u0026pid=__clb-spot_2055057_phf_1\u0026jp=_clunkapjzxxusymwfhuucw\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.658-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=cfP6nT0aHR0cHM6Ly94bnh4Mi5vcmcv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=KH0gB3ZaHR0cHM6Ly94bnh4Mi5vcmcvb3V0LzMwMHgyNTBmb290ZXIucGhw\u0026afid=2649089184606208\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pkw=0\u0026pload=1307\u0026rlp=%5B0%2C36%2C70%2C51%2C21%2C313%2C151%2C204%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0","fqdn":"clammyendearedkeg.com","domain":"clammyendearedkeg.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f8529da7b43dae32c09d5100d14e182e","sha1":"da6705b9af3fee4e37bde5baf9efc766080af2ce","sha256":"789c4b6dda89ca792d1a5c357ee881c212f3d8eaa9c6c70743c48204a6b21adb","sha512":"d14d9aa62a4199415cc54e7518eb5debf0dfc1525981324ef2b30ed9df9564dc048832f8314fdc8f75883b4b29f66dfdd6ed681ec65517052cfba3039478561b","ssdeep":"","tlshash":"13f0c0f87684e8a03441c904d1a6b5521d8854b5cb3be91620b5448acf1d3b81d27c45","size":519,"data":"","first_seen":"2025-12-31T13:24:00.300767Z","last_seen":"2025-12-31T13:24:00.300767Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sacxagftoaz.com/ohqomc?R8F7EU=bC\u0026gehii=llbv\u0026qeypbnix=bhhqrw\u0026co=6643432\u0026dn=_wytfndyofqepongfxfjsia\u0026ka=023502\u0026veeygxf=861618\u0026bj=4\u0026gcu=gafp\u0026sqc=4\u0026dhly=ni\u0026icip=wnf\u0026mgki=gdsyuk","fqdn":"sacxagftoaz.com","domain":"sacxagftoaz.com","tld":"com"},"ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"328e9f75d981142a189a6a5cfd3f045a","sha1":"edc34218e74d905783af0a030af2552466b13c6d","sha256":"ed7b929e00af35fb849bf8a58b0ecfce619a56c50db029535faa37c93aba5589","sha512":"c0a482df7b5e6f8a7033ecef228b50148563aaa6ffc2496641ec459f67fa061fcc476f7e562582d784cd036a5d472d6557e93c30cd86651a718ff90adc7c5cc6","ssdeep":"","tlshash":"3bf09e756d6fc4e0813354ab98cf1c0178d0ab57cf030e26c4090b819e7d2552da3d0b","size":495,"data":"","first_seen":"2025-12-31T13:24:00.290121Z","last_seen":"2025-12-31T13:24:00.290121Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sacxagftoaz.com/ohqomc?Eh4v1W=yE\u0026xh=717112\u0026je=7559758\u0026hlcb=696997\u0026zsikmrfz=59916\u0026id=3\u0026yqei=amk\u0026ak=_oenwyevaeskxiugkirzfqc\u0026xpdsbiy=xu\u0026pojg=hxf\u0026jv=ysw\u0026szl=543051\u0026gpv=8","fqdn":"sacxagftoaz.com","domain":"sacxagftoaz.com","tld":"com"},"ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f78cefc87ef3e00c4ed4d7fb0000eb40","sha1":"a1b0cf762a9c62df8ec96830c58001970ca1c28c","sha256":"15331bac2ae5ce807057fc53ba9917702019f49f846c2448e4c51bfba91a31cc","sha512":"e3f5f52214f94f055fa1e6697b82f943bb97bf3a2b167ae4ca3739149ef7a1ba1ad79385b2b64ed7727fb2ce410f3863024ba8fbca0e2690cc5bb1b964669d7a","ssdeep":"","tlshash":"64f0d495c014ed45cc41d44d333755b71150e6498f37e85329ce004db05a29139bff65","size":495,"data":"","first_seen":"2025-12-31T13:24:00.274181Z","last_seen":"2025-12-31T13:24:00.274181Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sacxagftoaz.com/ohqomc?XsJk=X7Ogov\u0026oqqdb=411632\u0026wdcdvq=ous\u0026nf=_ukfvpcfbksibdjzmdffagy\u0026di=6832505\u0026pbf=1\u0026ay=279641\u0026riolpvbv=807782\u0026lr=2\u0026llshss=105789","fqdn":"sacxagftoaz.com","domain":"sacxagftoaz.com","tld":"com"},"ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"1cecd35f6b2fc22b07774fb7f5f15a4d","sha1":"d00fca9140347a426e3e1be4a116f119a158210b","sha256":"41b449875ef6bc4eaf681db3de30afb7447e4ac0c99b103ef6385b44ec4970d1","sha512":"529f537f5a7f5cf6c680a291272c05e0403aa0d0537eba803e2c3d14a8afbd124c2f7959bc1ea565e055983f5192c47f85b409ff1534ff2b67c0f51d0cca5e57","ssdeep":"","tlshash":"86f0277cbc5ead905809160d63a76ccd3588635f4b2b25155235cf96942c2718eb7c0a","size":495,"data":"","first_seen":"2025-12-31T13:24:00.271331Z","last_seen":"2025-12-31T13:24:00.271331Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clammyendearedkeg.com/get/2055057?id=2055057\u0026pid=__clb-spot_2055057_nmt_1\u0026jp=_clnbpjlqceayrbzznypomr\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.658-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=zZmBGaoaHR0cHM6Ly94bnh4Mi5vcmcv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=JEe6nY8aHR0cHM6Ly94bnh4Mi5vcmcvb3V0LzMwMHgyNTBmb290ZXIucGhw\u0026afid=4900888998370304\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pkw=0\u0026pi=W1oqmg\u0026pload=1894\u0026rlp=%5B0%2C35%2C75%2C48%2C2116%2C520%2C238%2C410%2C1%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0","fqdn":"clammyendearedkeg.com","domain":"clammyendearedkeg.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0af993deef2bd5554dfed525ab539703","sha1":"25e717f44a6c743a24ccb06c0bf9a31e823fb475","sha256":"78bb84d63524223fcd78681ab4c1cdae08bea7be04f4268f9f86213399b56818","sha512":"693adeada2a683c5d33478ce5f252444210bb2253be0588e488005ff3a3df7bebaf36e506e8a2a50a8ee1929c4194c70bf0fcbc73f6bd60516fcc097a504e535","ssdeep":"96:PD2AcIBzffAgcSER2AcIBzffAgcSEaW2AcIBzffAgcSE22AcIBzffAgcSE+4Bt2N:PdxBz3NLErxBz3NLEaWxBz3NLE2xBz3L","tlshash":"9ec12b78198deda79694d90c65b31d38418c62e734dbfc1c3d43606ea4a4a71a2af884","size":6098,"data":"","first_seen":"2025-12-31T13:24:00.279517Z","last_seen":"2025-12-31T13:24:00.279517Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xnxx2.org/","fqdn":"xnxx2.org","domain":"xnxx2.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3e3fde9e82128c5811d9717a272839d5","sha1":"6360a9e0b2148ee77490b88db498fd33d17d4d98","sha256":"ffc606069beb1e35868bdc820df2ecc0c800c11c645fe6d253c720372a778e36","sha512":"8374473202ea1ff85a8f054b256853992d763696fe995eb9587ee12dd2c1e4849f61494267e2685befa946d046ec7e144d3cd933f3ee0e2488eff4398e8d6601","ssdeep":"","tlshash":"2ee02ba4ecd318e34a576066c62f51083461043b5c55ec32765c55520fdda3ee0e96c8","size":430,"data":"","first_seen":"2025-10-16T21:47:02.123647Z","last_seen":"2025-12-31T13:24:00.322277Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xnxx2.org/out/300x250footer.php","fqdn":"xnxx2.org","domain":"xnxx2.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"936ae9798e66af08d13662ddec500ef7","sha1":"5f03f69fafa66ffdc99dc4ad5813cddfd5a2a972","sha256":"18b7ccd52652d54008582a5771c04d994cb30e14dbfd50464c17e1de9929f630","sha512":"424165906d22cfe15d6d6e7dee11b16155ac0a22e6608808349f7167f307f201feda2312f024effadb23045ecdda74c3352d6c6b814ad9cbed57ed1adc6280a3","ssdeep":"","tlshash":"7b60003c000300300c30c00030003003000c3000c00c0ccc0c03c000c330000000000c","size":12,"data":"","first_seen":"2025-10-22T18:46:54.048927Z","last_seen":"2026-04-05T07:57:09.205821Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xnxx2.org/out/300x250footer.php","fqdn":"xnxx2.org","domain":"xnxx2.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"936ae9798e66af08d13662ddec500ef7","sha1":"5f03f69fafa66ffdc99dc4ad5813cddfd5a2a972","sha256":"18b7ccd52652d54008582a5771c04d994cb30e14dbfd50464c17e1de9929f630","sha512":"424165906d22cfe15d6d6e7dee11b16155ac0a22e6608808349f7167f307f201feda2312f024effadb23045ecdda74c3352d6c6b814ad9cbed57ed1adc6280a3","ssdeep":"","tlshash":"7b60003c000300300c30c00030003003000c3000c00c0ccc0c03c000c330000000000c","size":12,"data":"","first_seen":"2025-10-22T18:46:54.048927Z","last_seen":"2026-04-05T07:57:09.205821Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xnxx2.org/out/300x250footer.php","fqdn":"xnxx2.org","domain":"xnxx2.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"936ae9798e66af08d13662ddec500ef7","sha1":"5f03f69fafa66ffdc99dc4ad5813cddfd5a2a972","sha256":"18b7ccd52652d54008582a5771c04d994cb30e14dbfd50464c17e1de9929f630","sha512":"424165906d22cfe15d6d6e7dee11b16155ac0a22e6608808349f7167f307f201feda2312f024effadb23045ecdda74c3352d6c6b814ad9cbed57ed1adc6280a3","ssdeep":"","tlshash":"7b60003c000300300c30c00030003003000c3000c00c0ccc0c03c000c330000000000c","size":12,"data":"","first_seen":"2025-10-22T18:46:54.048927Z","last_seen":"2026-04-05T07:57:09.205821Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clammyendearedkeg.com/get/2055057?id=2055057\u0026pid=__clb-spot_2055057_pjj_1\u0026jp=_clidjvunwpaoeyilswyzjt\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.658-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=6vY9AUjaHR0cHM6Ly94bnh4Mi5vcmcv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=QBJBBPaaHR0cHM6Ly94bnh4Mi5vcmcvb3V0LzMwMHgyNTBmb290ZXIucGhw\u0026afid=397289370992640\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pkw=0\u0026pi=W1oqmg\u0026pload=1870\u0026rlp=%5B0%2C34%2C73%2C49%2C2120%2C456%2C181%2C396%2C1%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0","fqdn":"clammyendearedkeg.com","domain":"clammyendearedkeg.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"da9e843ba6e831068c9e49958a20dfec","sha1":"b431af8e6da385ba004ed4fedc51e8966b4eb3ab","sha256":"13a9e25e0c06ded5d86a8e3a613889fb1bb6e2f8c108951b96149e92d8713cd1","sha512":"e9f774cd6b9e0302e777c08050dcb8282052228e761dfa0f0397abe10841941e91acab8dd4f902d9d9fa7c322e531017d14572ae055e0dc963c455be10b5194d","ssdeep":"96:WJRatZxQiqsm+1HqK5ZaMZxQiqsm+1HqKbZaXZxQiqsm+1HqKS9ZaIZxQiqsm+1a:iaIsLYCNIsLYacIsLYxbIsLYUUMFHo","tlshash":"0cc11b7d90a8e241c8d8d84afea999272145781bdc273c4017ef07cb798fb291fa1d0e","size":6098,"data":"","first_seen":"2025-12-31T13:24:00.277603Z","last_seen":"2025-12-31T13:24:00.277603Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clammyendearedkeg.com/get/2055057?id=2055057\u0026pid=__clb-spot_2055057_prb_1\u0026jp=_clczrpbpbrrfmtkgllgkgu\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.658-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=ZXyVC6HaHR0cHM6Ly94bnh4Mi5vcmcv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=f70Z0ohaHR0cHM6Ly94bnh4Mi5vcmcvb3V0LzMwMHgyNTBmb290ZXIucGhw\u0026afid=5463838951757312\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pkw=0\u0026pi=W1oqmg\u0026pload=1864\u0026rlp=%5B0%2C35%2C76%2C46%2C2130%2C532%2C251%2C424%2C1%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0","fqdn":"clammyendearedkeg.com","domain":"clammyendearedkeg.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b416d1eb156d60db48cb431c26258fb","sha1":"e1be397f1a6f7b90e4f4970a54138c92967597b6","sha256":"648974fcf0fcf6863dda63c3bcd6da5ac5e271d3585adbe177628b8af27b7afd","sha512":"8156d983c62d2410bdf7365725a382d4e04fc37c561edca9171754da2921fda1f72f5f6b9bbbf7915fccedeff6c6e4e3d5b9a39430bd5392fdcca1813cb81131","ssdeep":"96:V/zTbB6AKmcX3PtKzTbB6AKmcX3PtJzTbB6AKmcX3PtmzTbB6AKmcX3PtvEvsLC2:V/zXB6bX1KzXB6bX1JzXB6bX1mzXB6b3","tlshash":"fac12a94b64bc87954a00850d1b9bf3d4e831cb2ff640e08064e6dddc7988ff7716a9a","size":6098,"data":"","first_seen":"2025-12-31T13:24:00.30499Z","last_seen":"2025-12-31T13:24:00.30499Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clammyendearedkeg.com/bn.js","fqdn":"clammyendearedkeg.com","domain":"clammyendearedkeg.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d158e92e83d6c8a70cc928e23060ce7","sha1":"a3bfddb1307774261e73ab9d2486438504b35084","sha256":"44f722d75c727be078a5931dd3497aacf652ba8c6eb3097176599d06aac160a9","sha512":"1d4c7db82aed070da74c04af696f6ff716b1de4097cdb46ff681926e43691f1a72279569b98dab6562736b6c1c167ea2a20b3a6d0dfe1b8543c9037f1312cd22","ssdeep":"3072:YY3td0G485lbLLPY0QkWGENs6kmJNdRVJG:9d05QlbLTofgg/dVG","tlshash":"caf3c7deb74528361156b0390f2fdf34a6a5e8d2b88d8474e0e3c0ec787c996e193b65","size":170706,"data":"","first_seen":"2025-12-24T15:48:22.966068Z","last_seen":"2026-01-11T23:52:13.961648Z","times_seen":225,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clammyendearedkeg.com/bn.js","fqdn":"clammyendearedkeg.com","domain":"clammyendearedkeg.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d158e92e83d6c8a70cc928e23060ce7","sha1":"a3bfddb1307774261e73ab9d2486438504b35084","sha256":"44f722d75c727be078a5931dd3497aacf652ba8c6eb3097176599d06aac160a9","sha512":"1d4c7db82aed070da74c04af696f6ff716b1de4097cdb46ff681926e43691f1a72279569b98dab6562736b6c1c167ea2a20b3a6d0dfe1b8543c9037f1312cd22","ssdeep":"3072:YY3td0G485lbLLPY0QkWGENs6kmJNdRVJG:9d05QlbLTofgg/dVG","tlshash":"caf3c7deb74528361156b0390f2fdf34a6a5e8d2b88d8474e0e3c0ec787c996e193b65","size":170706,"data":"","first_seen":"2025-12-24T15:48:22.966068Z","last_seen":"2026-01-11T23:52:13.961648Z","times_seen":225,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clammyendearedkeg.com/get/2055057?id=2055057\u0026pid=__clb-spot_2055057_pjj_1\u0026jp=_clidjvunwpaoeyilswyzjt\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.658-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=6vY9AUjaHR0cHM6Ly94bnh4Mi5vcmcv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=OkYVXVZaHR0cHM6Ly94bnh4Mi5vcmcvb3V0LzMwMHgyNTBmb290ZXIucGhw\u0026afid=8841538672295936\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pkw=0\u0026pload=1630\u0026rlp=%5B0%2C34%2C73%2C49%2C7%2C290%2C131%2C230%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0","fqdn":"clammyendearedkeg.com","domain":"clammyendearedkeg.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"edfd9e23de27c27e24686de333c40d56","sha1":"e5d1c1a864f9bbbcec7d0153a78ab53a04cf7392","sha256":"8a1e62a63bc618675de9e5e8a55e6c2ee0ce128cc364897d91d22e30fc42bb81","sha512":"6216976b02f9c93d0fad5112e86ba37edac400cab18ba0f7aa37662750d446733e4c24bc460a17ee9ad4870d32c5091a93ea8146515f0ce161e3fcd14b5936a7","ssdeep":"","tlshash":"e2f0952f50ce88d41395981553ff7c1471d1024c89734725764867165c6826957b3e9c","size":519,"data":"","first_seen":"2025-12-31T13:24:00.293512Z","last_seen":"2025-12-31T13:24:00.293512Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sacxagftoaz.com/ohqomc?jvl=lj\u0026gvnof=344275\u0026xn=3698715\u0026ac=858516\u0026ugz=013144\u0026au=2\u0026axh=8\u0026gtvx=634347\u0026hc=09148\u0026kki=702812\u0026nr=_uubtlrvggdmethfqeyhtor","fqdn":"sacxagftoaz.com","domain":"sacxagftoaz.com","tld":"com"},"ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e8ec15a9c0f6caedb3269185aa6c8ad","sha1":"7340fa0a6f74c2652c55f2c3e59830ec8858dc12","sha256":"11a83cece02b6c90487fc208ce16f037b60d1bd5bed39f462617e5bf1dc5e3a7","sha512":"bfa8dc5ae33f5be894df9bb8ea351d074056304e824141d891e9dfad866a4c829b0c1874bc05d33c05dac159a2bc4afb717b0475c1c29bc622e48c54632a8582","ssdeep":"","tlshash":"e3f09ed9d0ebeda5fc81c8fd11399e0505e8d1c88b4301d640344e15444d874ec9bc11","size":495,"data":"","first_seen":"2025-12-31T13:24:00.303196Z","last_seen":"2025-12-31T13:24:00.303196Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"tbi.sb-cd.com/t/13210623/1/3/w:500/t6-enh/mixed-hijabi-vs-indian-d.jpg","fqdn":"tbi.sb-cd.com","domain":"sb-cd.com","tld":"com"},"ip":{"addr":"212.102.56.184","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xnxx2.org/","date":"2025-12-31T13:23:30.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1349102413.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 04:44:56 GMT","end":"Fri, 27 Feb 2026 04:44:55 GMT"},"fingerprint":{"sha1":"3F:53:7D:F8:A1:9B:9D:A7:52:8A:15:12:55:BE:47:FB:0E:11:60:9E","sha256":"74:E9:52:77:92:F7:CA:EB:AB:C5:90:20:A5:7E:56:FF:3C:61:DF:A9:D9:F2:6F:4E:16:DE:1A:02:DE:C0:FB:52"}}},"request":{"raw":"GET /t/13210623/1/3/w:500/t6-enh/mixed-hijabi-vs-indian-d.jpg HTTP/1.1\r\nHost: tbi.sb-cd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 13:23:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 34276\r\ncf-ray: 97b1f68f1e5834ad-ORD\r\ncache-control: max-age=31536000, public\r\ncf-bgj: imgq:85,h2pri,csam-hash\r\ncf-polished: qual=85, origFmt=jpeg, origSize=48318\r\nlast-modified: Sun, 07 Sep 2025 00:06:37 GMT\r\nvary: Accept\r\ncontent-disposition: inline; filename=\"mixed-hijabi-vs-indian-d.webp\"\r\ncontent-security-policy: script-src 'none'\r\nx-cache-status: EXPIRED\r\nx-request-id: bwjB1oAezQ2qPx6HaFTJI\r\ncf-cache-status: HIT\r\nage: 20\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-77-nzt: EwwB1GY4twH3VxSYAAwBuZhBPwH3HkIAAAwBWbu0RwH3vQAAAA\r\nx-77-nzt-ray: 25185808c5d44af0d323556907818607\r\nx-77-cache: HIT\r\nx-77-age: 9966679\r\nserver: CDN77-Turbo\r\nx-77-pop: frankfurtDE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":34276,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 500x918, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1fedde3d148aa3e12c4394d565623f9e","sha1":"7604fdff5d35f312c6bf78d394a6a07341b55480","sha256":"3c6d2dceb35b47be23095639695ab7ea27da1c0ac27da08152b497d9a0197422","sha512":"e1d8d948050af0953bc4fc9fb9f5bbd2cc86274645a079e9a42a9f2b50c5026dae634b38a0281dde7ad326815343ad312cdc5b68bc55ae407ec9ba1f65e93d6f","ssdeep":"768:/RfgA64urQGjJ6nFXxgwia6GjJHvRNVTiCGWJH4FWE0wzN3:/RM4gNYXxgwiLYJ3TNGpWfsN3","tlshash":"ecf2021710bb49b6fe2126b9bd2af7478ef088e2556519071c1b192f17721a3fac2f10","first_seen":"2025-10-16T21:47:02.018449Z","last_seen":"2025-12-31T13:24:00.254857Z","times_seen":4,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":166,"dns":47,"connect":23,"send":0,"wait":48,"receive":9,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ic-vt-lm.xhcdn.com/b/OGUzODBhYjJiMzM4NjJiZDc5ZmFmYmMzYTVlNzRjYzE/s(w:320,h:240,f:cv)/018/333/718/v2/1280x720.209.jpg","fqdn":"ic-vt-lm.xhcdn.com","domain":"xhcdn.com","tld":"com"},"ip":{"addr":"88.208.45.217","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xnxx2.org/","date":"2025-12-31T13:23:30.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.xhcdn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 06:37:20 GMT","end":"Mon, 02 Feb 2026 06:37:19 GMT"},"fingerprint":{"sha1":"93:4B:9A:AD:37:AA:70:4E:E5:A0:C6:BE:16:3C:B5:FA:71:F4:52:09","sha256":"6A:6E:09:AB:96:6A:66:D8:9E:69:F6:F3:95:FE:62:2D:2B:D1:93:FE:81:FD:63:15:8C:EF:3B:39:17:48:0B:17"}}},"request":{"raw":"GET /b/OGUzODBhYjJiMzM4NjJiZDc5ZmFmYmMzYTVlNzRjYzE/s(w:320,h:240,f:cv)/018/333/718/v2/1280x720.209.jpg HTTP/1.1\r\nHost: ic-vt-lm.xhcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Wed, 31 Dec 2025 13:23:31 GMT\r\nContent-Type: text/html\r\nContent-Length: 178\r\nConnection: keep-alive\r\nLocation: https://ic-vt-nss.xhcdn.com/b/OGUzODBhYjJiMzM4NjJiZDc5ZmFmYmMzYTVlNzRjYzE/s(w:320,h:240,f:cv)/018/333/718/v2/1280x720.209.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26043,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T12:23:02.643109Z","times_seen":13933290,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":88,"dns":19,"connect":17,"send":0,"wait":18,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clammyendearedkeg.com/get/2055057?id=2055057\u0026pid=__clb-spot_2055057_mfu_1\u0026jp=_claxoogcxrmryzfeayhfyr\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.658-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=tvoj1D2aHR0cHM6Ly94bnh4Mi5vcmcv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=niaUJLnaHR0cHM6Ly94bnh4Mi5vcmcvb3V0LzMwMHgyNTBmb290ZXIucGhw\u0026afid=8841538672284672\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pkw=0\u0026pi=W1oqmg\u0026pload=1856\u0026rlp=%5B0%2C36%2C74%2C52%2C2101%2C516%2C199%2C407%2C1%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0","fqdn":"clammyendearedkeg.com","domain":"clammyendearedkeg.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xnxx2.org/out/300x250footer.php","date":"2025-12-31T13:23:32.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clammyendearedkeg.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:25:45 GMT","end":"Wed, 21 Jan 2026 14:25:44 GMT"},"fingerprint":{"sha1":"3E:40:9C:04:25:32:1C:4E:63:1E:34:E9:AE:AD:6B:99:46:E3:EF:3C","sha256":"E1:40:5E:3A:D1:13:2B:95:6F:05:23:A1:DF:F7:A8:5B:2A:17:85:46:F0:C3:13:DE:9E:8F:80:B1:A2:8B:1F:D8"}}},"request":{"raw":"GET /get/2055057?id=2055057\u0026pid=__clb-spot_2055057_mfu_1\u0026jp=_claxoogcxrmryzfeayhfyr\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.658-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=tvoj1D2aHR0cHM6Ly94bnh4Mi5vcmcv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=niaUJLnaHR0cHM6Ly94bnh4Mi5vcmcvb3V0LzMwMHgyNTBmb290ZXIucGhw\u0026afid=8841538672284672\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pkw=0\u0026pi=W1oqmg\u0026pload=1856\u0026rlp=%5B0%2C36%2C74%2C52%2C2101%2C516%2C199%2C407%2C1%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: clammyendearedkeg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nCookie: cart=1; cart_p=2; CHCK=1; PTS=; UID=2512310823a6770dbd24204283bb07c043c3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 31 Dec 2025 13:23:32 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Wed, 03 Feb 2027 13:23:32 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Wed, 03 Feb 2027 13:23:32 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6098,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (6098), with no line terminators","md5":"c243709cb5c51773830d08d1e424e969","sha1":"f9b85f7e9c577ce17c53dd28071c2e19eca6f7ce","sha256":"6e29e5bb5eed74943e4752ffc37168a298c53962c33173569f35e20af9b70f84","sha512":"30a325a94c1b198f2ec7e1418dffb08f5dec87a10c97d1d7f82086920e582fb4b5af4ae502bcfe83c2e5b2f03207fe12fd5ff590bafd0bd018b444fb3021afd8","ssdeep":"96:PT83nzAYAlTYVD83nzAYAlTYVoz83nzAYAlTYVn83nzAYAlTYVsRKfbyH8AMQMcd:PT83HAlTgD83HAlTgc83HAlTgn83HAlb","tlshash":"12c1e9666602d32f75a0b38d3136cf293292a985c94f7a1765c1f2855aee06ca1f3633","first_seen":"2025-12-31T13:24:00.258579Z","last_seen":"2025-12-31T13:24:00.258579Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"playhubconnect.com/bn/24b/e55/095/24be550950a7c6fb20244a506c13acd5ded0f432.mp4","fqdn":"playhubconnect.com","domain":"playhubconnect.com","tld":"com"},"ip":{"addr":"104.18.14.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://xnxx2.org/out/300x250footer.php","date":"2025-12-31T13:23:33.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playhubconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 04:50:46 GMT","end":"Wed, 11 Feb 2026 05:50:34 GMT"},"fingerprint":{"sha1":"08:40:B9:AE:36:A1:74:E1:BA:0F:75:D5:97:DA:7B:24:68:4A:EC:AF","sha256":"A8:FB:61:7B:C9:91:75:23:4D:3A:56:E0:47:39:85:A1:36:66:5A:69:9F:F6:18:D0:70:9B:87:10:19:BC:7D:0D"}}},"request":{"raw":"GET /bn/24b/e55/095/24be550950a7c6fb20244a506c13acd5ded0f432.mp4 HTTP/1.1\r\nHost: playhubconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Wed, 31 Dec 2025 13:23:33 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 153602\r\ncf-ray: 9b6a1794e9392678-OSL\r\nx-amz-id-2: HjuIOPuHWoHjRvobiLi/Orkx2IjN0KKHfdv3J6Pgx63kDreXGngj79nuD0ttV/n6wKVMxo7LXnc=\r\nx-amz-request-id: 8BDHCMTRR16C8564\r\nlast-modified: Thu, 10 Jul 2025 14:05:43 GMT\r\netag: \"04d2bfd50d9359a53ed9531684e9da96\"\r\nx-amz-server-side-encryption: AES256\r\nage: 457568\r\ncontent-range: bytes 0-153601/153602\r\nexpires: Sat, 31 Jan 2026 13:23:33 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":153602,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"04d2bfd50d9359a53ed9531684e9da96","sha1":"24be550950a7c6fb20244a506c13acd5ded0f432","sha256":"647163abd604e867cca1fed5bdcb521f50121eee154b80596e62c9c37f146a35","sha512":"5e55e24b39958657fa25d6e2707d7c7f3a68e1487041bb7262c91c180eccc3a75a4028b5b7d0f80bc6b1fab9063d99411a5cdb638d428a4230cbb0a83e37a69c","ssdeep":"1536:5KHRxmfOPN5bHRrg7C9UKFethHwr/hYhZ4e3dn:5cmoNzg7ChF0wLh0nn","tlshash":"4ce3e1295ea26882f34cf37e48a1c829caf35363c4d6e14b788f49584f35225476f977","first_seen":"2025-08-25T16:09:43.16385Z","last_seen":"2026-04-15T01:00:15.515734Z","times_seen":326,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"playhubconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.clammyendearedkeg.com/static/video/bn/24b/e55/095/24be550950a7c6fb20244a506c13acd5ded0f432.mp4","fqdn":"www.clammyendearedkeg.com","domain":"clammyendearedkeg.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://xnxx2.org/out/300x250footer.php","date":"2025-12-31T13:23:33.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clammyendearedkeg.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:25:45 GMT","end":"Wed, 21 Jan 2026 14:25:44 GMT"},"fingerprint":{"sha1":"3E:40:9C:04:25:32:1C:4E:63:1E:34:E9:AE:AD:6B:99:46:E3:EF:3C","sha256":"E1:40:5E:3A:D1:13:2B:95:6F:05:23:A1:DF:F7:A8:5B:2A:17:85:46:F0:C3:13:DE:9E:8F:80:B1:A2:8B:1F:D8"}}},"request":{"raw":"GET /static/video/bn/24b/e55/095/24be550950a7c6fb20244a506c13acd5ded0f432.mp4 HTTP/1.1\r\nHost: www.clammyendearedkeg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Wed, 31 Dec 2025 13:23:33 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 153602\r\nlast-modified: Mon, 15 Dec 2025 18:52:34 GMT\r\netag: \"694058f2-25802\"\r\nexpires: Sun, 01 Mar 2026 13:23:33 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-expose-headers: Last-Modified\r\ncontent-range: bytes 0-153601/153602\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":153602,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"04d2bfd50d9359a53ed9531684e9da96","sha1":"24be550950a7c6fb20244a506c13acd5ded0f432","sha256":"647163abd604e867cca1fed5bdcb521f50121eee154b80596e62c9c37f146a35","sha512":"5e55e24b39958657fa25d6e2707d7c7f3a68e1487041bb7262c91c180eccc3a75a4028b5b7d0f80bc6b1fab9063d99411a5cdb638d428a4230cbb0a83e37a69c","ssdeep":"1536:5KHRxmfOPN5bHRrg7C9UKFethHwr/hYhZ4e3dn:5cmoNzg7ChF0wLh0nn","tlshash":"4ce3e1295ea26882f34cf37e48a1c829caf35363c4d6e14b788f49584f35225476f977","first_seen":"2025-08-25T16:09:43.16385Z","last_seen":"2026-04-15T01:00:15.515734Z","times_seen":326,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ei.phncdn.com/videos/202302/19/425786061/thumbs_5/(m=eaf8GgaaaWavb)(mh=_7LNxkaGhyCsQGgx)4.jpg","fqdn":"ei.phncdn.com","domain":"phncdn.com","tld":"com"},"ip":{"addr":"64.210.135.114","port":443,"asn":30361,"as":"SWIFTWILL2","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xnxx2.org/","date":"2025-12-31T13:23:30.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phncdn.com","organization":"AYLO Freesites Ltd"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Sat, 19 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:B5:27:AA:6B:2E:09:43:BF:20:85:5B:20:46:36:51:85:A2:3A:B7","sha256":"6A:D2:70:68:DC:32:49:E4:83:44:97:24:82:FD:75:3B:36:FA:F1:BD:91:ED:17:E6:D7:97:90:53:68:97:4A:C0"}}},"request":{"raw":"GET /videos/202302/19/425786061/thumbs_5/(m=eaf8GgaaaWavb)(mh=_7LNxkaGhyCsQGgx)4.jpg HTTP/1.1\r\nHost: ei.phncdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 13:23:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13848\r\nexpires: Thu, 05 Mar 2026 20:06:18 GMT\r\ncache-control: max-age=10213495\r\nlast-modified: Tue, 21 Feb 2023 18:55:45 GMT\r\netag: \"1575a-5f53a53bb20e0\"\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=300\r\nx-cdn-diag: ams5-6140-3-2698495-h-0-0---;6141-31-230739----0-0-0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13848,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x240, components 3","md5":"4ad3ec75ae4f4652a91e9d0763b306c6","sha1":"f6b6239b1c9014b11cb79df00e827a68aa93cc17","sha256":"872f30c3c221e44522bc8dfa3a5b7d82841a84ef4c391201071d82731ae58dbb","sha512":"a34f2caa70c40a308d8223f8f04b826e1d27b3627a8879c1640add11d0e60539f49fe66243e627102b69736276188d7bc84bdc047743171f239f99949e971027","ssdeep":"384:LGAzQJ2k5Zc7TOAxKa4Trhg3dH+3oLITfR:KAkJ2k5Zc7YJ2IDR","tlshash":"7452bf9b8b4f85bae74e02762a001694ed17ed747d765b77600252813f1238b6791c8c","first_seen":"2025-11-12T02:15:34.31284Z","last_seen":"2025-12-31T13:24:00.262757Z","times_seen":3,"resource_available":false,"data":null}},"time_used":481,"timings":{"blocked":-1,"dns":71,"connect":23,"send":0,"wait":41,"receive":1,"ssl":330},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-ca-cdn.eporner.com/thumbs/static4/4/41/416/4168248/5_240.jpg","fqdn":"static-ca-cdn.eporner.com","domain":"eporner.com","tld":"com"},"ip":{"addr":"148.113.215.103","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xnxx2.org/","date":"2025-12-31T13:23:30.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.eporner.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 01 Oct 2025 13:34:47 GMT","end":"Mon, 02 Nov 2026 13:34:46 GMT"},"fingerprint":{"sha1":"1F:A7:56:73:C6:B1:A1:84:2E:1C:16:A2:3F:33:2F:CE:61:2D:26:AC","sha256":"F3:03:05:71:51:E9:1D:83:E1:43:B1:57:96:0B:2D:08:C5:67:CA:93:8D:A4:0D:88:02:AE:21:97:45:F8:00:FF"}}},"request":{"raw":"GET /thumbs/static4/4/41/416/4168248/5_240.jpg HTTP/1.1\r\nHost: static-ca-cdn.eporner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.4\r\ndate: Wed, 31 Dec 2025 13:23:31 GMT\r\ncontent-type: image/avif\r\ncontent-length: 7538\r\nlast-modified: Mon, 23 Oct 2023 12:41:22 GMT\r\netag: \"653669f2-1d72\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\naccess-control-max-age: 1728000\r\nvary: Accept-Encoding, Accept\r\nlink: \u003chttps://static-ca-cdn.eporner.com/thumbs/static4/4/41/416/4168248/5_240.jpg\u003e; rel=\"canonical\"\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7538,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"edb5e3c1ad3a7cdd3ffa5ddf16048bf9","sha1":"d033fd14433e40fcd8b57156c95c352f4b3a991f","sha256":"840e420ba560c1845683696621a372ca845106949a9bad10c9623340a4fb06e2","sha512":"d22d563042111d5f5d5bae9cb3f4d305e70d257a3a0e6dc66d4f06a2c56636d2a9e8b3f005dded73a2b500c80ce4d7af67b4e771bf7497348742cbc3bddb58ba","ssdeep":"192:rGId1+8qudN7FBlNIV5y5uexreUDlM+gweyhAbiAMRrB:rj+8q2hOi3RM+gwe2CpG9","tlshash":"2ff18e6fdb379cabe03d1e3d5bc31f0661639128d04dab0d2600a961bd329c99ba9916","first_seen":"2025-10-16T21:47:02.103529Z","last_seen":"2025-12-31T13:24:00.26433Z","times_seen":2,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":2,"connect":104,"send":0,"wait":99,"receive":20,"ssl":111},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"static-ca-cdn.eporner.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/a2/89/73/a28973e5b1608ce32d7341ac1c4c5214-1/a28973e5b1608ce32d7341ac1c4c5214.2.jpg","fqdn":"cdn77-pic.xvideos-cdn.com","domain":"xvideos-cdn.com","tld":"com"},"ip":{"addr":"185.76.9.7","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xnxx2.org/","date":"2025-12-31T13:23:30.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xvideos.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 15 Oct 2025 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3C:93:93:D2:61:40:5B:B9:F9:EB:A2:B0:78:48:57:C0:F2:41:42:42","sha256":"D9:3E:6D:83:C8:0E:74:42:32:A1:4F:A3:9B:CA:3A:9D:E0:D2:60:38:FF:BF:EB:0E:36:AA:3E:41:44:D5:A7:59"}}},"request":{"raw":"GET /videos/thumbs169ll/a2/89/73/a28973e5b1608ce32d7341ac1c4c5214-1/a28973e5b1608ce32d7341ac1c4c5214.2.jpg HTTP/1.1\r\nHost: cdn77-pic.xvideos-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 13:23:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6947\r\nx-frame-options: sameorigin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Mon, 12 Dec 2022 19:25:42 GMT\r\ncache-control: max-age=10368000, public\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBuUwJBgH3EiQ5AAwBJRPCOgH30+M7AAgBj/Q62AGB\r\nx-77-nzt-ray: 5451992d0fc02ab0d323556923ef9305\r\nx-accel-expires: @1773805281\r\nx-77-cache: HIT\r\nx-accel-date: 1763442625\r\nx-accel-date-max: 1701228783\r\nx-77-age: 3744786\r\nserver: CDN77-Turbo\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":6947,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100\", progressive, precision 8, 352x198, components 3","md5":"3ee44bbb914ba926d0019f68a4cfbf9e","sha1":"d1c5dfaa075f3a997c6e90cc852d64bb4199bd9e","sha256":"ba072e447d01da40acbaea19022fbb3011f65faf167005ebe7fb1a6a1a6b41ca","sha512":"9735932c5e38c9f7c2ccb0d7515aad5357ee0e9d3a1c0f368fbde23bfba5f3cac5a9b5795cdef4cda7b8cc859831f71cbd1a2956be072569464058a20d53db09","ssdeep":"96:IJiXRgNZ5StJP5yhL1DC+LrTGYO3tEKu0nJn9s+jTvHU+S9ird6nZncm3gbRzpQW:vXgyLUbDCcCQKu0ng+nP8irEZn+afls","tlshash":"38e17e94fdeb0d42d5e86030c4b5507dab38276be5d219c31ac9a751eeba03e29f600c","first_seen":"2025-10-16T21:47:02.029612Z","last_seen":"2025-12-31T13:24:00.266456Z","times_seen":3,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":28,"connect":10,"send":0,"wait":14,"receive":1,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clammyendearedkeg.com/check.html","fqdn":"clammyendearedkeg.com","domain":"clammyendearedkeg.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://xnxx2.org/out/300x250footer.php","date":"2025-12-31T13:23:32.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clammyendearedkeg.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:25:45 GMT","end":"Wed, 21 Jan 2026 14:25:44 GMT"},"fingerprint":{"sha1":"3E:40:9C:04:25:32:1C:4E:63:1E:34:E9:AE:AD:6B:99:46:E3:EF:3C","sha256":"E1:40:5E:3A:D1:13:2B:95:6F:05:23:A1:DF:F7:A8:5B:2A:17:85:46:F0:C3:13:DE:9E:8F:80:B1:A2:8B:1F:D8"}}},"request":{"raw":"GET /check.html HTTP/1.1\r\nHost: clammyendearedkeg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nCookie: cart=1; cart_p=2\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 31 Dec 2025 13:23:32 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Mon, 24 Nov 2025 08:42:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69241a69-39e\"\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":926,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"088dba8e97eede53134c93219f7ebbae","sha1":"adb707654d1fe0af7d0d7a9f55660d22bd3625e4","sha256":"6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff","sha512":"23a1f87731e8aee4658993cd1ce35ec179fea80b89bf52aca7634488f1bdfcf88b9cabca4859481357a9fee06cbb49df64bbe0878b1dae0e5df4fa34003c6d80","ssdeep":"","tlshash":"6211d04934e1684c1127a6301597a2183c32a40315cbd949fb9cd7301f815a7dc596df","first_seen":"2024-11-22T16:59:41.974716Z","last_seen":"2026-03-04T10:11:28.020186Z","times_seen":13721,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clammyendearedkeg.com/get/2055057?id=2055057\u0026pid=__clb-spot_2055057_mfu_1\u0026jp=_claxoogcxrmryzfeayhfyr\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.658-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=tvoj1D2aHR0cHM6Ly94bnh4Mi5vcmcv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=5rWIK3DaHR0cHM6Ly94bnh4Mi5vcmcvb3V0LzMwMHgyNTBmb290ZXIucGhw\u0026afid=5182363975068160\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pkw=0\u0026pload=1421\u0026rlp=%5B0%2C36%2C74%2C52%2C11%2C329%2C162%2C220%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0","fqdn":"clammyendearedkeg.com","domain":"clammyendearedkeg.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xnxx2.org/out/300x250footer.php","date":"2025-12-31T13:23:32.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clammyendearedkeg.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:25:45 GMT","end":"Wed, 21 Jan 2026 14:25:44 GMT"},"fingerprint":{"sha1":"3E:40:9C:04:25:32:1C:4E:63:1E:34:E9:AE:AD:6B:99:46:E3:EF:3C","sha256":"E1:40:5E:3A:D1:13:2B:95:6F:05:23:A1:DF:F7:A8:5B:2A:17:85:46:F0:C3:13:DE:9E:8F:80:B1:A2:8B:1F:D8"}}},"request":{"raw":"GET /get/2055057?id=2055057\u0026pid=__clb-spot_2055057_mfu_1\u0026jp=_claxoogcxrmryzfeayhfyr\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.658-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=tvoj1D2aHR0cHM6Ly94bnh4Mi5vcmcv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=5rWIK3DaHR0cHM6Ly94bnh4Mi5vcmcvb3V0LzMwMHgyNTBmb290ZXIucGhw\u0026afid=5182363975068160\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pkw=0\u0026pload=1421\u0026rlp=%5B0%2C36%2C74%2C52%2C11%2C329%2C162%2C220%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: clammyendearedkeg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 31 Dec 2025 13:23:32 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Wed, 03 Feb 2027 13:23:32 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Wed, 03 Feb 2027 13:23:32 GMT; Secure; SameSite=None\nUID=25123108239afaceae1ac54192986dcc02ec; Path=/; Expires=Wed, 03 Feb 2027 13:23:32 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":638,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (638), with no line terminators","md5":"489ff8f87b782b6213a7097023ed18a0","sha1":"2cce036593f9b06c30d3be3ed391023f2925225d","sha256":"4dfa6bc27fd3ae4dafaf408f3d0026f6d29bcc2171e9d34ac3708a072172e0c1","sha512":"fe8cc87888115a7b19eb7145a2fde9603ae66da04a6593f3c6bde2c7cbb455d01061a2f5271a62fecaf6b809fa7f38b23230c049757cf17622b0292810ecfa83","ssdeep":"","tlshash":"f2f00c5ef11fca983b2c4b2b2e7c2d0858a033ea1fc386561370d827482903a6433a77","first_seen":"2025-12-31T13:24:00.268774Z","last_seen":"2025-12-31T13:24:00.268774Z","times_seen":1,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sacxagftoaz.com/ohqomc?XsJk=X7Ogov\u0026oqqdb=411632\u0026wdcdvq=ous\u0026nf=_ukfvpcfbksibdjzmdffagy\u0026di=6832505\u0026pbf=1\u0026ay=279641\u0026riolpvbv=807782\u0026lr=2\u0026llshss=105789","fqdn":"sacxagftoaz.com","domain":"sacxagftoaz.com","tld":"com"},"ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xnxx2.org/out/300x250footer.php","date":"2025-12-31T13:23:32.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sacxagftoaz.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Dec 2025 18:09:15 GMT","end":"Tue, 17 Mar 2026 18:09:14 GMT"},"fingerprint":{"sha1":"4A:CA:2A:3A:CC:8E:B4:7F:73:10:99:9F:77:F5:2C:C7:E8:77:75:27","sha256":"71:F8:7F:E5:1B:CA:E5:81:C5:99:65:BE:A8:AF:6C:FB:B5:0C:8E:CF:41:BF:21:4A:E8:99:F4:AD:F3:0C:C5:A4"}}},"request":{"raw":"GET /ohqomc?XsJk=X7Ogov\u0026oqqdb=411632\u0026wdcdvq=ous\u0026nf=_ukfvpcfbksibdjzmdffagy\u0026di=6832505\u0026pbf=1\u0026ay=279641\u0026riolpvbv=807782\u0026lr=2\u0026llshss=105789 HTTP/1.1\r\nHost: sacxagftoaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 31 Dec 2025 13:23:32 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Wed, 03 Feb 2027 13:23:32 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Wed, 03 Feb 2027 13:23:32 GMT; Secure; SameSite=None\nUID=251231082386f977ae7ef04f348a37014027; Path=/; Expires=Wed, 03 Feb 2027 13:23:32 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":495,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (495), with no line terminators","md5":"1cecd35f6b2fc22b07774fb7f5f15a4d","sha1":"d00fca9140347a426e3e1be4a116f119a158210b","sha256":"41b449875ef6bc4eaf681db3de30afb7447e4ac0c99b103ef6385b44ec4970d1","sha512":"529f537f5a7f5cf6c680a291272c05e0403aa0d0537eba803e2c3d14a8afbd124c2f7959bc1ea565e055983f5192c47f85b409ff1534ff2b67c0f51d0cca5e57","ssdeep":"","tlshash":"86f0277cbc5ead905809160d63a76ccd3588635f4b2b25155235cf96942c2718eb7c0a","first_seen":"2025-12-31T13:24:00.271331Z","last_seen":"2025-12-31T13:24:00.271331Z","times_seen":1,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":47,"dns":0,"connect":17,"send":0,"wait":20,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clammyendearedkeg.com/bn.js","fqdn":"clammyendearedkeg.com","domain":"clammyendearedkeg.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xnxx2.org/out/300x250footer.php","date":"2025-12-31T13:23:31.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clammyendearedkeg.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:25:45 GMT","end":"Wed, 21 Jan 2026 14:25:44 GMT"},"fingerprint":{"sha1":"3E:40:9C:04:25:32:1C:4E:63:1E:34:E9:AE:AD:6B:99:46:E3:EF:3C","sha256":"E1:40:5E:3A:D1:13:2B:95:6F:05:23:A1:DF:F7:A8:5B:2A:17:85:46:F0:C3:13:DE:9E:8F:80:B1:A2:8B:1F:D8"}}},"request":{"raw":"GET /bn.js HTTP/1.1\r\nHost: clammyendearedkeg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 31 Dec 2025 13:23:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 24 Dec 2025 12:35:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694bde26-29ad2\"\r\nexpires: Wed, 07 Jan 2026 13:23:31 GMT\r\ncache-control: max-age=604800\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":170706,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2d158e92e83d6c8a70cc928e23060ce7","sha1":"a3bfddb1307774261e73ab9d2486438504b35084","sha256":"44f722d75c727be078a5931dd3497aacf652ba8c6eb3097176599d06aac160a9","sha512":"1d4c7db82aed070da74c04af696f6ff716b1de4097cdb46ff681926e43691f1a72279569b98dab6562736b6c1c167ea2a20b3a6d0dfe1b8543c9037f1312cd22","ssdeep":"3072:YY3td0G485lbLLPY0QkWGENs6kmJNdRVJG:9d05QlbLTofgg/dVG","tlshash":"caf3c7deb74528361156b0390f2fdf34a6a5e8d2b88d8474e0e3c0ec787c996e193b65","first_seen":"2025-12-24T15:48:22.966068Z","last_seen":"2026-01-11T23:52:13.961648Z","times_seen":225,"resource_available":true,"data":null}},"time_used":286,"timings":{"blocked":104,"dns":36,"connect":20,"send":0,"wait":69,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sacxagftoaz.com/ohqomc?Eh4v1W=yE\u0026xh=717112\u0026je=7559758\u0026hlcb=696997\u0026zsikmrfz=59916\u0026id=3\u0026yqei=amk\u0026ak=_oenwyevaeskxiugkirzfqc\u0026xpdsbiy=xu\u0026pojg=hxf\u0026jv=ysw\u0026szl=543051\u0026gpv=8","fqdn":"sacxagftoaz.com","domain":"sacxagftoaz.com","tld":"com"},"ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xnxx2.org/out/300x250footer.php","date":"2025-12-31T13:23:32.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sacxagftoaz.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Dec 2025 18:09:15 GMT","end":"Tue, 17 Mar 2026 18:09:14 GMT"},"fingerprint":{"sha1":"4A:CA:2A:3A:CC:8E:B4:7F:73:10:99:9F:77:F5:2C:C7:E8:77:75:27","sha256":"71:F8:7F:E5:1B:CA:E5:81:C5:99:65:BE:A8:AF:6C:FB:B5:0C:8E:CF:41:BF:21:4A:E8:99:F4:AD:F3:0C:C5:A4"}}},"request":{"raw":"GET /ohqomc?Eh4v1W=yE\u0026xh=717112\u0026je=7559758\u0026hlcb=696997\u0026zsikmrfz=59916\u0026id=3\u0026yqei=amk\u0026ak=_oenwyevaeskxiugkirzfqc\u0026xpdsbiy=xu\u0026pojg=hxf\u0026jv=ysw\u0026szl=543051\u0026gpv=8 HTTP/1.1\r\nHost: sacxagftoaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 31 Dec 2025 13:23:32 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: UID=25123108233ebb0111b1fd4eb3bc17af7d37; Path=/; Expires=Wed, 03 Feb 2027 13:23:32 GMT; Secure; SameSite=None\nCHCK=1; Path=/; Expires=Wed, 03 Feb 2027 13:23:32 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Wed, 03 Feb 2027 13:23:32 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":495,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (495), with no line terminators","md5":"f78cefc87ef3e00c4ed4d7fb0000eb40","sha1":"a1b0cf762a9c62df8ec96830c58001970ca1c28c","sha256":"15331bac2ae5ce807057fc53ba9917702019f49f846c2448e4c51bfba91a31cc","sha512":"e3f5f52214f94f055fa1e6697b82f943bb97bf3a2b167ae4ca3739149ef7a1ba1ad79385b2b64ed7727fb2ce410f3863024ba8fbca0e2690cc5bb1b964669d7a","ssdeep":"","tlshash":"64f0d495c014ed45cc41d44d333755b71150e6498f37e85329ce004db05a29139bff65","first_seen":"2025-12-31T13:24:00.274181Z","last_seen":"2025-12-31T13:24:00.274181Z","times_seen":1,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clammyendearedkeg.com/get/2055057?id=2055057\u0026pid=__clb-spot_2055057_phf_1\u0026jp=_clunkapjzxxusymwfhuucw\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.658-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=cfP6nT0aHR0cHM6Ly94bnh4Mi5vcmcv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=iGpzHNjaHR0cHM6Ly94bnh4Mi5vcmcvb3V0LzMwMHgyNTBmb290ZXIucGhw\u0026afid=8560063695573504\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pkw=0\u0026pi=W1oqmg\u0026pload=1844\u0026rlp=%5B0%2C36%2C70%2C51%2C2110%2C502%2C187%2C393%2C1%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0","fqdn":"clammyendearedkeg.com","domain":"clammyendearedkeg.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xnxx2.org/out/300x250footer.php","date":"2025-12-31T13:23:32.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clammyendearedkeg.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:25:45 GMT","end":"Wed, 21 Jan 2026 14:25:44 GMT"},"fingerprint":{"sha1":"3E:40:9C:04:25:32:1C:4E:63:1E:34:E9:AE:AD:6B:99:46:E3:EF:3C","sha256":"E1:40:5E:3A:D1:13:2B:95:6F:05:23:A1:DF:F7:A8:5B:2A:17:85:46:F0:C3:13:DE:9E:8F:80:B1:A2:8B:1F:D8"}}},"request":{"raw":"GET /get/2055057?id=2055057\u0026pid=__clb-spot_2055057_phf_1\u0026jp=_clunkapjzxxusymwfhuucw\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.658-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=cfP6nT0aHR0cHM6Ly94bnh4Mi5vcmcv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=iGpzHNjaHR0cHM6Ly94bnh4Mi5vcmcvb3V0LzMwMHgyNTBmb290ZXIucGhw\u0026afid=8560063695573504\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pkw=0\u0026pi=W1oqmg\u0026pload=1844\u0026rlp=%5B0%2C36%2C70%2C51%2C2110%2C502%2C187%2C393%2C1%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: clammyendearedkeg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nCookie: cart=1; cart_p=2; CHCK=1; PTS=; UID=2512310823a6770dbd24204283bb07c043c3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 31 Dec 2025 13:23:32 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Wed, 03 Feb 2027 13:23:32 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Wed, 03 Feb 2027 13:23:32 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6098,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (6098), with no line terminators","md5":"5017d677c4566a1184a2eb968509417f","sha1":"32bdecd5a627c4888846831b02d580b7c868db1c","sha256":"c101588ee8ba8902ef7547c3c7181db56005f9868f2195ac9f36adbe384e44ac","sha512":"c8078af7741a5629aa96b8ca0a84f463bd9e0909b7a9c17f24a7a61c3fb7f24cdac727e87be3787bd6f208295a0f89ce27be10a85bf440cca7e7e11b86166770","ssdeep":"96:80cF4dIWAqy+TYn0Nbb4dIWAqy+TY3b4dIWAqy+TYpb4dIWAqy+TY/h2Rfa7hJMo:tAqynbAqy0AqySAqybIo","tlshash":"c4c1297213087cf0b81b6f36edd71d56a720254e7b434a98d4e5b24e2028a387d1b8fa","first_seen":"2025-12-31T13:24:00.275821Z","last_seen":"2025-12-31T13:24:00.275821Z","times_seen":1,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clammyendearedkeg.com/get/2055057?id=2055057\u0026pid=__clb-spot_2055057_pjj_1\u0026jp=_clidjvunwpaoeyilswyzjt\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.658-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=6vY9AUjaHR0cHM6Ly94bnh4Mi5vcmcv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=QBJBBPaaHR0cHM6Ly94bnh4Mi5vcmcvb3V0LzMwMHgyNTBmb290ZXIucGhw\u0026afid=397289370992640\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pkw=0\u0026pi=W1oqmg\u0026pload=1870\u0026rlp=%5B0%2C34%2C73%2C49%2C2120%2C456%2C181%2C396%2C1%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0","fqdn":"clammyendearedkeg.com","domain":"clammyendearedkeg.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xnxx2.org/out/300x250footer.php","date":"2025-12-31T13:23:32.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clammyendearedkeg.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:25:45 GMT","end":"Wed, 21 Jan 2026 14:25:44 GMT"},"fingerprint":{"sha1":"3E:40:9C:04:25:32:1C:4E:63:1E:34:E9:AE:AD:6B:99:46:E3:EF:3C","sha256":"E1:40:5E:3A:D1:13:2B:95:6F:05:23:A1:DF:F7:A8:5B:2A:17:85:46:F0:C3:13:DE:9E:8F:80:B1:A2:8B:1F:D8"}}},"request":{"raw":"GET /get/2055057?id=2055057\u0026pid=__clb-spot_2055057_pjj_1\u0026jp=_clidjvunwpaoeyilswyzjt\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.658-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=6vY9AUjaHR0cHM6Ly94bnh4Mi5vcmcv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=QBJBBPaaHR0cHM6Ly94bnh4Mi5vcmcvb3V0LzMwMHgyNTBmb290ZXIucGhw\u0026afid=397289370992640\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pkw=0\u0026pi=W1oqmg\u0026pload=1870\u0026rlp=%5B0%2C34%2C73%2C49%2C2120%2C456%2C181%2C396%2C1%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: clammyendearedkeg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nCookie: cart=1; cart_p=2; CHCK=1; PTS=; UID=2512310823a6770dbd24204283bb07c043c3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 31 Dec 2025 13:23:32 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Wed, 03 Feb 2027 13:23:32 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Wed, 03 Feb 2027 13:23:32 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6098,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (6098), with no line terminators","md5":"da9e843ba6e831068c9e49958a20dfec","sha1":"b431af8e6da385ba004ed4fedc51e8966b4eb3ab","sha256":"13a9e25e0c06ded5d86a8e3a613889fb1bb6e2f8c108951b96149e92d8713cd1","sha512":"e9f774cd6b9e0302e777c08050dcb8282052228e761dfa0f0397abe10841941e91acab8dd4f902d9d9fa7c322e531017d14572ae055e0dc963c455be10b5194d","ssdeep":"96:WJRatZxQiqsm+1HqK5ZaMZxQiqsm+1HqKbZaXZxQiqsm+1HqKS9ZaIZxQiqsm+1a:iaIsLYCNIsLYacIsLYxbIsLYUUMFHo","tlshash":"0cc11b7d90a8e241c8d8d84afea999272145781bdc273c4017ef07cb798fb291fa1d0e","first_seen":"2025-12-31T13:24:00.277603Z","last_seen":"2025-12-31T13:24:00.277603Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clammyendearedkeg.com/get/2055057?id=2055057\u0026pid=__clb-spot_2055057_nmt_1\u0026jp=_clnbpjlqceayrbzznypomr\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.658-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=zZmBGaoaHR0cHM6Ly94bnh4Mi5vcmcv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=JEe6nY8aHR0cHM6Ly94bnh4Mi5vcmcvb3V0LzMwMHgyNTBmb290ZXIucGhw\u0026afid=4900888998370304\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pkw=0\u0026pi=W1oqmg\u0026pload=1894\u0026rlp=%5B0%2C35%2C75%2C48%2C2116%2C520%2C238%2C410%2C1%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0","fqdn":"clammyendearedkeg.com","domain":"clammyendearedkeg.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xnxx2.org/out/300x250footer.php","date":"2025-12-31T13:23:32.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clammyendearedkeg.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:25:45 GMT","end":"Wed, 21 Jan 2026 14:25:44 GMT"},"fingerprint":{"sha1":"3E:40:9C:04:25:32:1C:4E:63:1E:34:E9:AE:AD:6B:99:46:E3:EF:3C","sha256":"E1:40:5E:3A:D1:13:2B:95:6F:05:23:A1:DF:F7:A8:5B:2A:17:85:46:F0:C3:13:DE:9E:8F:80:B1:A2:8B:1F:D8"}}},"request":{"raw":"GET /get/2055057?id=2055057\u0026pid=__clb-spot_2055057_nmt_1\u0026jp=_clnbpjlqceayrbzznypomr\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.658-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=zZmBGaoaHR0cHM6Ly94bnh4Mi5vcmcv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=JEe6nY8aHR0cHM6Ly94bnh4Mi5vcmcvb3V0LzMwMHgyNTBmb290ZXIucGhw\u0026afid=4900888998370304\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pkw=0\u0026pi=W1oqmg\u0026pload=1894\u0026rlp=%5B0%2C35%2C75%2C48%2C2116%2C520%2C238%2C410%2C1%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: clammyendearedkeg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nCookie: cart=1; cart_p=2; CHCK=1; PTS=; UID=2512310823a6770dbd24204283bb07c043c3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 31 Dec 2025 13:23:32 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Wed, 03 Feb 2027 13:23:32 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Wed, 03 Feb 2027 13:23:32 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6098,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (6098), with no line terminators","md5":"0af993deef2bd5554dfed525ab539703","sha1":"25e717f44a6c743a24ccb06c0bf9a31e823fb475","sha256":"78bb84d63524223fcd78681ab4c1cdae08bea7be04f4268f9f86213399b56818","sha512":"693adeada2a683c5d33478ce5f252444210bb2253be0588e488005ff3a3df7bebaf36e506e8a2a50a8ee1929c4194c70bf0fcbc73f6bd60516fcc097a504e535","ssdeep":"96:PD2AcIBzffAgcSER2AcIBzffAgcSEaW2AcIBzffAgcSE22AcIBzffAgcSE+4Bt2N:PdxBz3NLErxBz3NLEaWxBz3NLE2xBz3L","tlshash":"9ec12b78198deda79694d90c65b31d38418c62e734dbfc1c3d43606ea4a4a71a2af884","first_seen":"2025-12-31T13:24:00.279517Z","last_seen":"2025-12-31T13:24:00.279517Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-ca-cdn.eporner.com/thumbs/static4/3/39/391/3918895/11_240.jpg","fqdn":"static-ca-cdn.eporner.com","domain":"eporner.com","tld":"com"},"ip":{"addr":"148.113.215.103","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xnxx2.org/","date":"2025-12-31T13:23:30.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.eporner.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 01 Oct 2025 13:34:47 GMT","end":"Mon, 02 Nov 2026 13:34:46 GMT"},"fingerprint":{"sha1":"1F:A7:56:73:C6:B1:A1:84:2E:1C:16:A2:3F:33:2F:CE:61:2D:26:AC","sha256":"F3:03:05:71:51:E9:1D:83:E1:43:B1:57:96:0B:2D:08:C5:67:CA:93:8D:A4:0D:88:02:AE:21:97:45:F8:00:FF"}}},"request":{"raw":"GET /thumbs/static4/3/39/391/3918895/11_240.jpg HTTP/1.1\r\nHost: static-ca-cdn.eporner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.4\r\ndate: Wed, 31 Dec 2025 13:23:31 GMT\r\ncontent-type: image/avif\r\ncontent-length: 2349\r\nlast-modified: Wed, 22 Nov 2023 20:24:51 GMT\r\netag: \"655e6393-92d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\naccess-control-max-age: 1728000\r\nvary: Accept-Encoding, Accept\r\nlink: \u003chttps://static-ca-cdn.eporner.com/thumbs/static4/3/39/391/3918895/11_240.jpg\u003e; rel=\"canonical\"\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2349,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"a170866cf43bd807aad86f8e397e9e55","sha1":"7658e4a5c98ce192e8f15cb92265aca7677418a1","sha256":"f824034788607d0e2ad86fa85e704d8e46f1c53812778d065b75966b45258e8b","sha512":"1134577d3f718be8e826419398b25179974175d9a5c69c3ba688cd2df66ae610f1cc38b861bde89fac8bb07e905396a2cf48f17c4a07cbe054616b42b68dd72b","ssdeep":"","tlshash":"48416b04b3f51688e82c43b60a2663623342fedff20a78526c123a68840c4aa8f0fc24","first_seen":"2025-12-31T13:24:00.281214Z","last_seen":"2025-12-31T13:24:00.281214Z","times_seen":1,"resource_available":false,"data":null}},"time_used":580,"timings":{"blocked":231,"dns":26,"connect":104,"send":0,"wait":99,"receive":1,"ssl":110},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"static-ca-cdn.eporner.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/f4/8e/48/f48e48228aee671cebeba889d8041058-2/f48e48228aee671cebeba889d8041058.3.jpg","fqdn":"cdn77-pic.xvideos-cdn.com","domain":"xvideos-cdn.com","tld":"com"},"ip":{"addr":"185.76.9.7","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xnxx2.org/","date":"2025-12-31T13:23:30.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xvideos.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 15 Oct 2025 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3C:93:93:D2:61:40:5B:B9:F9:EB:A2:B0:78:48:57:C0:F2:41:42:42","sha256":"D9:3E:6D:83:C8:0E:74:42:32:A1:4F:A3:9B:CA:3A:9D:E0:D2:60:38:FF:BF:EB:0E:36:AA:3E:41:44:D5:A7:59"}}},"request":{"raw":"GET /videos/thumbs169ll/f4/8e/48/f48e48228aee671cebeba889d8041058-2/f48e48228aee671cebeba889d8041058.3.jpg HTTP/1.1\r\nHost: cdn77-pic.xvideos-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 13:23:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13028\r\nx-frame-options: sameorigin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Tue, 29 Nov 2022 10:16:35 GMT\r\ncache-control: max-age=10368000, public\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBuUwJBgHXxR0vAAwBnJIhIwH3phsyAAgBj/Q6jAGB\r\nx-77-nzt-ray: 5451992d0fc02ab0d3235569c9a6ae04\r\nx-accel-expires: @1774466961\r\nx-77-cache: HIT\r\nx-accel-date: 1764099598\r\nx-accel-date-max: 1722626843\r\nx-77-age: 3087813\r\nserver: CDN77-Turbo\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":13028,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100\", progressive, precision 8, 352x198, components 3","md5":"8fbc3a34cfc8afc40efb31696ee461ef","sha1":"d0b7d3fcc81100ce384d1d6ed48775006900fef1","sha256":"9a1a1ba958cfd32a7a5ef3835282bee92ac0c0125a917c7ab40131736ad2e426","sha512":"8a27b2a95aba0bb964c6aec5966f0eb2dd2283e646a337a05cfd1509182543fd5ddf3c796e224757655d6e1c60e6f3d9171ecac838e3f3d2dd4216f98780577b","ssdeep":"384:bXr+lWqGmzHlERLSzKs+Gr7YCzcHefhQaF1HEq/fe:2gUySaPCoHEQaDVW","tlshash":"3942b0f27ad16a26d0d1af75059e1c8f268984518286b446e3c03b037ff9a6b4d09734","first_seen":"2025-12-31T13:24:00.283021Z","last_seen":"2025-12-31T13:24:00.283021Z","times_seen":1,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":79,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"playhubconnect.com/bn/24b/e55/095/24be550950a7c6fb20244a506c13acd5ded0f432.mp4","fqdn":"playhubconnect.com","domain":"playhubconnect.com","tld":"com"},"ip":{"addr":"104.18.14.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://xnxx2.org/out/300x250footer.php","date":"2025-12-31T13:23:33.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playhubconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 04:50:46 GMT","end":"Wed, 11 Feb 2026 05:50:34 GMT"},"fingerprint":{"sha1":"08:40:B9:AE:36:A1:74:E1:BA:0F:75:D5:97:DA:7B:24:68:4A:EC:AF","sha256":"A8:FB:61:7B:C9:91:75:23:4D:3A:56:E0:47:39:85:A1:36:66:5A:69:9F:F6:18:D0:70:9B:87:10:19:BC:7D:0D"}}},"request":{"raw":"GET /bn/24b/e55/095/24be550950a7c6fb20244a506c13acd5ded0f432.mp4 HTTP/1.1\r\nHost: playhubconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Wed, 31 Dec 2025 13:23:33 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 153602\r\ncf-ray: 9b6a17940953b518-OSL\r\nx-amz-id-2: HjuIOPuHWoHjRvobiLi/Orkx2IjN0KKHfdv3J6Pgx63kDreXGngj79nuD0ttV/n6wKVMxo7LXnc=\r\nx-amz-request-id: 8BDHCMTRR16C8564\r\nlast-modified: Thu, 10 Jul 2025 14:05:43 GMT\r\netag: \"04d2bfd50d9359a53ed9531684e9da96\"\r\nx-amz-server-side-encryption: AES256\r\nage: 457568\r\ncontent-range: bytes 0-153601/153602\r\nexpires: Sat, 31 Jan 2026 13:23:33 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":153602,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"04d2bfd50d9359a53ed9531684e9da96","sha1":"24be550950a7c6fb20244a506c13acd5ded0f432","sha256":"647163abd604e867cca1fed5bdcb521f50121eee154b80596e62c9c37f146a35","sha512":"5e55e24b39958657fa25d6e2707d7c7f3a68e1487041bb7262c91c180eccc3a75a4028b5b7d0f80bc6b1fab9063d99411a5cdb638d428a4230cbb0a83e37a69c","ssdeep":"1536:5KHRxmfOPN5bHRrg7C9UKFethHwr/hYhZ4e3dn:5cmoNzg7ChF0wLh0nn","tlshash":"4ce3e1295ea26882f34cf37e48a1c829caf35363c4d6e14b788f49584f35225476f977","first_seen":"2025-08-25T16:09:43.16385Z","last_seen":"2026-04-15T01:00:15.515734Z","times_seen":326,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":40,"dns":20,"connect":1,"send":0,"wait":10,"receive":8,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"playhubconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clammyendearedkeg.com/jserror?type=banner_static\u0026bavar=0\u0026build=1.0.658\u0026zoneid=\u0026e=Error\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Fxnxx2.org%2Fout%2F300x250footer.php","fqdn":"clammyendearedkeg.com","domain":"clammyendearedkeg.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xnxx2.org/out/300x250footer.php","date":"2025-12-31T13:23:33.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clammyendearedkeg.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:25:45 GMT","end":"Wed, 21 Jan 2026 14:25:44 GMT"},"fingerprint":{"sha1":"3E:40:9C:04:25:32:1C:4E:63:1E:34:E9:AE:AD:6B:99:46:E3:EF:3C","sha256":"E1:40:5E:3A:D1:13:2B:95:6F:05:23:A1:DF:F7:A8:5B:2A:17:85:46:F0:C3:13:DE:9E:8F:80:B1:A2:8B:1F:D8"}}},"request":{"raw":"GET /jserror?type=banner_static\u0026bavar=0\u0026build=1.0.658\u0026zoneid=\u0026e=Error\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Fxnxx2.org%2Fout%2F300x250footer.php HTTP/1.1\r\nHost: clammyendearedkeg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nCookie: cart=1; cart_p=2; CHCK=1; PTS=; UID=2512310823a6770dbd24204283bb07c043c3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 31 Dec 2025 13:23:33 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T12:23:02.643109Z","times_seen":13933290,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clammyendearedkeg.com/jserror?type=banner_static\u0026bavar=0\u0026build=1.0.658\u0026zoneid=\u0026e=Error\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Fxnxx2.org%2Fout%2F300x250footer.php","fqdn":"clammyendearedkeg.com","domain":"clammyendearedkeg.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xnxx2.org/out/300x250footer.php","date":"2025-12-31T13:23:33.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clammyendearedkeg.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:25:45 GMT","end":"Wed, 21 Jan 2026 14:25:44 GMT"},"fingerprint":{"sha1":"3E:40:9C:04:25:32:1C:4E:63:1E:34:E9:AE:AD:6B:99:46:E3:EF:3C","sha256":"E1:40:5E:3A:D1:13:2B:95:6F:05:23:A1:DF:F7:A8:5B:2A:17:85:46:F0:C3:13:DE:9E:8F:80:B1:A2:8B:1F:D8"}}},"request":{"raw":"GET /jserror?type=banner_static\u0026bavar=0\u0026build=1.0.658\u0026zoneid=\u0026e=Error\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Fxnxx2.org%2Fout%2F300x250footer.php HTTP/1.1\r\nHost: clammyendearedkeg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nCookie: cart=1; cart_p=2; CHCK=1; PTS=; UID=2512310823a6770dbd24204283bb07c043c3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 31 Dec 2025 13:23:33 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T12:23:02.643109Z","times_seen":13933290,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/5.9.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xnxx2.org/","date":"2025-12-31T13:23:30.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/font-awesome/5.9.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xnxx2.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 13:23:30 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 9939\r\ncf-ray: 9b6a17842d963181-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03e60-da9f\"\r\nlast-modified: Mon, 04 May 2020 16:10:08 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1060750\r\nexpires: Mon, 21 Dec 2026 13:23:30 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=XFlz5UZc%2FvOZgbJSLpKoXSv1X7UNuSty5pl1FZFRZ4Wl%2Fw21BAK5Tr2gczqasQ8a8MFOFO%2BLpZewKXhw2prT13E8o%2B576qFA6u4Vsh81tVz0dYD2HT3TH%2B7wlsdwFmk3zpyrOFAj\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55967,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (55782)","md5":"dbf9d822cefe851ba6f66e1ad57e8987","sha1":"2c43148f7df780e8b40a3ab09c770f03adbf11af","sha256":"533143d96607d94d5d4292838e364aef656d3de58fe74368263776eab9c07542","sha512":"ab779669bc993dcd574c2985fbcfcbb84d68ce9839c719fb88ef3dc9f48e779fe82afcaa2e7828346b31f23abdd98f1e5c9fc847141b102f85192631b64da88b","ssdeep":"768:suC31sPizPq4/vnUAUHJvkQCg/xMQyjJrX759sGZQz5:suTPUC4/vMHBBC8gd7nsDF","tlshash":"85430bb8e54c41c9a731c44fbf82b2bc61baf73ce5910d95f00e691c2ad26a811c5fb9","first_seen":"2023-04-05T23:27:49Z","last_seen":"2026-04-19T11:46:25.221348Z","times_seen":18500,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":12,"dns":1,"connect":1,"send":0,"wait":10,"receive":1,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xnxx2.org/out/300x250footer.php","fqdn":"xnxx2.org","domain":"xnxx2.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://xnxx2.org/","date":"2025-12-31T13:23:30.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xnxx2.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 23:03:40 GMT","end":"Mon, 09 Feb 2026 00:02:04 GMT"},"fingerprint":{"sha1":"3B:A5:14:50:4A:4C:BA:8D:5F:95:D5:48:08:4D:46:B3:2C:60:95:6A","sha256":"DD:2C:A1:30:88:33:C2:0F:73:B9:C7:3A:E0:9C:AF:9F:FA:77:E5:4D:04:C3:CB:E5:B5:55:15:EE:44:1F:EF:17"}}},"request":{"raw":"GET /out/300x250footer.php HTTP/1.1\r\nHost: xnxx2.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 31 Dec 2025 13:23:30 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0IS8DWrbxW11LCLFJJhD1EpetXsQZ1OSGiQtGSeWIPCs%2Fn6Mtf%2FD4QqIgA%2BfF5TNrF9%2BNHBiOe%2FA992aMa02U3WOLV4yais%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9b6a1784cc8e56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15765,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (8570)","md5":"736fbcc39f22df3d63165b26bfb91c3c","sha1":"d1be33b130626dca63190f62f2be8039f6e3bb62","sha256":"f401437785e2025d1953d68c7c0cfc84882c7036d9eac67c6e3d20bd779804ab","sha512":"a4cd44981b3a08d3e4f68c38982788d31736fb00173af2755964ea2606c70ee1489330f99ba020c03e79cb5bb5a6fef38bcc18a5a9480b0c0307f924ddd89c71","ssdeep":"384:uTrBWWXvFBn/iPXy2WjeD5c2qfRxBGORUkU6ZDGNCZ0xy24mWk28CgopORi:03fGXrWjsqfRbGObGNCZ0xy24mWbpTpN","tlshash":"56622bb5b343ed6683a88cc551bf6a30f03a9a053509c494f5adacc73866685d2b3f3d","first_seen":"2025-10-22T18:46:53.927341Z","last_seen":"2026-04-05T07:57:09.183191Z","times_seen":23,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/74/9f/d5/749fd50c2376ddad5d51d4999ed00180/749fd50c2376ddad5d51d4999ed00180.23.jpg","fqdn":"cdn77-pic.xvideos-cdn.com","domain":"xvideos-cdn.com","tld":"com"},"ip":{"addr":"185.76.9.7","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xnxx2.org/","date":"2025-12-31T13:23:30.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xvideos.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 15 Oct 2025 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3C:93:93:D2:61:40:5B:B9:F9:EB:A2:B0:78:48:57:C0:F2:41:42:42","sha256":"D9:3E:6D:83:C8:0E:74:42:32:A1:4F:A3:9B:CA:3A:9D:E0:D2:60:38:FF:BF:EB:0E:36:AA:3E:41:44:D5:A7:59"}}},"request":{"raw":"GET /videos/thumbs169ll/74/9f/d5/749fd50c2376ddad5d51d4999ed00180/749fd50c2376ddad5d51d4999ed00180.23.jpg HTTP/1.1\r\nHost: cdn77-pic.xvideos-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 13:23:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13582\r\nx-frame-options: sameorigin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Fri, 04 Aug 2023 21:53:31 GMT\r\ncache-control: max-age=10368000, public\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBuUwJBgH3qYqTAAwBT3/TFQH3BUqWAAgBj/Q6jAGB\r\nx-77-nzt-ray: 5451992d0fc02ab0d32355693e76d306\r\nx-accel-expires: @1767883940\r\nx-77-cache: HIT\r\nx-accel-date: 1757518122\r\nx-accel-date-max: 1695307827\r\nx-77-age: 9669289\r\nserver: CDN77-Turbo\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":13582,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100\", progressive, precision 8, 352x198, components 3","md5":"5f54e26d586e08984b0f50ec05af0191","sha1":"c7b46ce3e445ad59ff32f03acecbc1c53d250517","sha256":"c0fa7203d88cfc902a04ab5ed9fcadc87dbf3b748c7c5e1f0b794a310eb5e155","sha512":"18a2d670dbe10b977225d77dd3ffa851bdaf0a7bd8bc185b9d66150a1b1dc3c134f088267c3f1ea8e613498c2df96ec21c1670a2252f2c65d3e185f038ccb2d0","ssdeep":"384:sYqJ4nxPdm9c9wChL8QffYHkFGd5eSZIjvaEAbHFT:srJ4nRdm9c9958tEFGd5eSVEAb5","tlshash":"f452d06f5610490ed10ee1bdb5f67e086a462662e913c7363fc194ebbfaa5800e5a324","first_seen":"2025-10-16T21:47:01.904584Z","last_seen":"2025-12-31T13:24:00.286622Z","times_seen":3,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":143,"dns":65,"connect":10,"send":0,"wait":10,"receive":1,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/62/d1/b4/62d1b4f095d6f10f45c119e2dad20d9b-2/62d1b4f095d6f10f45c119e2dad20d9b.15.jpg","fqdn":"cdn77-pic.xvideos-cdn.com","domain":"xvideos-cdn.com","tld":"com"},"ip":{"addr":"185.76.9.7","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xnxx2.org/","date":"2025-12-31T13:23:30.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xvideos.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 15 Oct 2025 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3C:93:93:D2:61:40:5B:B9:F9:EB:A2:B0:78:48:57:C0:F2:41:42:42","sha256":"D9:3E:6D:83:C8:0E:74:42:32:A1:4F:A3:9B:CA:3A:9D:E0:D2:60:38:FF:BF:EB:0E:36:AA:3E:41:44:D5:A7:59"}}},"request":{"raw":"GET /videos/thumbs169ll/62/d1/b4/62d1b4f095d6f10f45c119e2dad20d9b-2/62d1b4f095d6f10f45c119e2dad20d9b.15.jpg HTTP/1.1\r\nHost: cdn77-pic.xvideos-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 13:23:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9224\r\nx-frame-options: sameorigin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Tue, 08 Nov 2022 13:30:36 GMT\r\ncache-control: max-age=10368000, public\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBuUwJBgHXSo+SAAwBT3/TEgH3v2iVAAgBj/Q63QGB\r\nx-77-nzt-ray: 5451992d0fc02ab0d3235569d6369f04\r\nx-accel-expires: @1767943765\r\nx-77-cache: HIT\r\nx-accel-date: 1757582473\r\nx-accel-date-max: 1695367572\r\nx-77-age: 9604938\r\nserver: CDN77-Turbo\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":9224,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100\", progressive, precision 8, 352x198, components 3","md5":"5996da40fab742a600012445d726311b","sha1":"1293be7079b534c23728480b84c4cd670d12e2e1","sha256":"dcb448fe304a1d99551994cb13fb88eb2d22b422ab5bcf37384e62445bbda4f8","sha512":"88bbe1ab5b63f489155c36694e1b1f473c6e3c7b14bb80191f06b2f2e0f2516d8282d941e7f3504e9b8c4d0f4f997a857fc3225ef5096993cb374820c83bf3e3","ssdeep":"192:vDThc+aXxDAxLYHRrTqcSng/tC/gx5mfXUQeRlfdnAB/3piKyQ7kwCut4u:3K9RAxLYWJ/eiklfGxppyQwwftp","tlshash":"de12bff97e3576e6e1281932497ad9ea367b780f8c2abb00b0527d6c50234a295b3345","first_seen":"2025-10-16T21:47:01.931897Z","last_seen":"2025-12-31T13:24:00.288384Z","times_seen":4,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":24,"connect":9,"send":0,"wait":9,"receive":1,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clammyendearedkeg.com/bn.js","fqdn":"clammyendearedkeg.com","domain":"clammyendearedkeg.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xnxx2.org/out/300x250footer.php","date":"2025-12-31T13:23:31.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clammyendearedkeg.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:25:45 GMT","end":"Wed, 21 Jan 2026 14:25:44 GMT"},"fingerprint":{"sha1":"3E:40:9C:04:25:32:1C:4E:63:1E:34:E9:AE:AD:6B:99:46:E3:EF:3C","sha256":"E1:40:5E:3A:D1:13:2B:95:6F:05:23:A1:DF:F7:A8:5B:2A:17:85:46:F0:C3:13:DE:9E:8F:80:B1:A2:8B:1F:D8"}}},"request":{"raw":"GET /bn.js HTTP/1.1\r\nHost: clammyendearedkeg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 31 Dec 2025 13:23:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 24 Dec 2025 12:35:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694bde26-29ad2\"\r\nexpires: Wed, 07 Jan 2026 13:23:31 GMT\r\ncache-control: max-age=604800\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":170706,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2d158e92e83d6c8a70cc928e23060ce7","sha1":"a3bfddb1307774261e73ab9d2486438504b35084","sha256":"44f722d75c727be078a5931dd3497aacf652ba8c6eb3097176599d06aac160a9","sha512":"1d4c7db82aed070da74c04af696f6ff716b1de4097cdb46ff681926e43691f1a72279569b98dab6562736b6c1c167ea2a20b3a6d0dfe1b8543c9037f1312cd22","ssdeep":"3072:YY3td0G485lbLLPY0QkWGENs6kmJNdRVJG:9d05QlbLTofgg/dVG","tlshash":"caf3c7deb74528361156b0390f2fdf34a6a5e8d2b88d8474e0e3c0ec787c996e193b65","first_seen":"2025-12-24T15:48:22.966068Z","last_seen":"2026-01-11T23:52:13.961648Z","times_seen":225,"resource_available":true,"data":null}},"time_used":282,"timings":{"blocked":106,"dns":34,"connect":19,"send":0,"wait":67,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"playhubconnect.com/bn/24b/e55/095/24be550950a7c6fb20244a506c13acd5ded0f432.mp4","fqdn":"playhubconnect.com","domain":"playhubconnect.com","tld":"com"},"ip":{"addr":"104.18.14.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://xnxx2.org/out/300x250footer.php","date":"2025-12-31T13:23:33.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playhubconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 04:50:46 GMT","end":"Wed, 11 Feb 2026 05:50:34 GMT"},"fingerprint":{"sha1":"08:40:B9:AE:36:A1:74:E1:BA:0F:75:D5:97:DA:7B:24:68:4A:EC:AF","sha256":"A8:FB:61:7B:C9:91:75:23:4D:3A:56:E0:47:39:85:A1:36:66:5A:69:9F:F6:18:D0:70:9B:87:10:19:BC:7D:0D"}}},"request":{"raw":"GET /bn/24b/e55/095/24be550950a7c6fb20244a506c13acd5ded0f432.mp4 HTTP/1.1\r\nHost: playhubconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Wed, 31 Dec 2025 13:23:33 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 153602\r\ncf-ray: 9b6a179458de2678-OSL\r\nx-amz-id-2: HjuIOPuHWoHjRvobiLi/Orkx2IjN0KKHfdv3J6Pgx63kDreXGngj79nuD0ttV/n6wKVMxo7LXnc=\r\nx-amz-request-id: 8BDHCMTRR16C8564\r\nlast-modified: Thu, 10 Jul 2025 14:05:43 GMT\r\netag: \"04d2bfd50d9359a53ed9531684e9da96\"\r\nx-amz-server-side-encryption: AES256\r\nage: 457568\r\ncontent-range: bytes 0-153601/153602\r\nexpires: Sat, 31 Jan 2026 13:23:33 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153602,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"04d2bfd50d9359a53ed9531684e9da96","sha1":"24be550950a7c6fb20244a506c13acd5ded0f432","sha256":"647163abd604e867cca1fed5bdcb521f50121eee154b80596e62c9c37f146a35","sha512":"5e55e24b39958657fa25d6e2707d7c7f3a68e1487041bb7262c91c180eccc3a75a4028b5b7d0f80bc6b1fab9063d99411a5cdb638d428a4230cbb0a83e37a69c","ssdeep":"1536:5KHRxmfOPN5bHRrg7C9UKFethHwr/hYhZ4e3dn:5cmoNzg7ChF0wLh0nn","tlshash":"4ce3e1295ea26882f34cf37e48a1c829caf35363c4d6e14b788f49584f35225476f977","first_seen":"2025-08-25T16:09:43.16385Z","last_seen":"2026-04-15T01:00:15.515734Z","times_seen":326,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"playhubconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"playhubconnect.com/bn/24b/e55/095/24be550950a7c6fb20244a506c13acd5ded0f432.mp4","fqdn":"playhubconnect.com","domain":"playhubconnect.com","tld":"com"},"ip":{"addr":"104.18.14.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://xnxx2.org/out/300x250footer.php","date":"2025-12-31T13:23:33.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playhubconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 04:50:46 GMT","end":"Wed, 11 Feb 2026 05:50:34 GMT"},"fingerprint":{"sha1":"08:40:B9:AE:36:A1:74:E1:BA:0F:75:D5:97:DA:7B:24:68:4A:EC:AF","sha256":"A8:FB:61:7B:C9:91:75:23:4D:3A:56:E0:47:39:85:A1:36:66:5A:69:9F:F6:18:D0:70:9B:87:10:19:BC:7D:0D"}}},"request":{"raw":"GET /bn/24b/e55/095/24be550950a7c6fb20244a506c13acd5ded0f432.mp4 HTTP/1.1\r\nHost: playhubconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Wed, 31 Dec 2025 13:23:33 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 153602\r\ncf-ray: 9b6a1794e93e2678-OSL\r\nx-amz-id-2: HjuIOPuHWoHjRvobiLi/Orkx2IjN0KKHfdv3J6Pgx63kDreXGngj79nuD0ttV/n6wKVMxo7LXnc=\r\nx-amz-request-id: 8BDHCMTRR16C8564\r\nlast-modified: Thu, 10 Jul 2025 14:05:43 GMT\r\netag: \"04d2bfd50d9359a53ed9531684e9da96\"\r\nx-amz-server-side-encryption: AES256\r\nage: 457568\r\ncontent-range: bytes 0-153601/153602\r\nexpires: Sat, 31 Jan 2026 13:23:33 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":153602,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"04d2bfd50d9359a53ed9531684e9da96","sha1":"24be550950a7c6fb20244a506c13acd5ded0f432","sha256":"647163abd604e867cca1fed5bdcb521f50121eee154b80596e62c9c37f146a35","sha512":"5e55e24b39958657fa25d6e2707d7c7f3a68e1487041bb7262c91c180eccc3a75a4028b5b7d0f80bc6b1fab9063d99411a5cdb638d428a4230cbb0a83e37a69c","ssdeep":"1536:5KHRxmfOPN5bHRrg7C9UKFethHwr/hYhZ4e3dn:5cmoNzg7ChF0wLh0nn","tlshash":"4ce3e1295ea26882f34cf37e48a1c829caf35363c4d6e14b788f49584f35225476f977","first_seen":"2025-08-25T16:09:43.16385Z","last_seen":"2026-04-15T01:00:15.515734Z","times_seen":326,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"playhubconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clammyendearedkeg.com/jserror?type=banner_static\u0026bavar=0\u0026build=1.0.658\u0026zoneid=\u0026e=Error\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Fxnxx2.org%2Fout%2F300x250footer.php","fqdn":"clammyendearedkeg.com","domain":"clammyendearedkeg.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xnxx2.org/out/300x250footer.php","date":"2025-12-31T13:23:33.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clammyendearedkeg.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:25:45 GMT","end":"Wed, 21 Jan 2026 14:25:44 GMT"},"fingerprint":{"sha1":"3E:40:9C:04:25:32:1C:4E:63:1E:34:E9:AE:AD:6B:99:46:E3:EF:3C","sha256":"E1:40:5E:3A:D1:13:2B:95:6F:05:23:A1:DF:F7:A8:5B:2A:17:85:46:F0:C3:13:DE:9E:8F:80:B1:A2:8B:1F:D8"}}},"request":{"raw":"GET /jserror?type=banner_static\u0026bavar=0\u0026build=1.0.658\u0026zoneid=\u0026e=Error\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Fxnxx2.org%2Fout%2F300x250footer.php HTTP/1.1\r\nHost: clammyendearedkeg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nCookie: cart=1; cart_p=2; CHCK=1; PTS=; UID=2512310823a6770dbd24204283bb07c043c3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 31 Dec 2025 13:23:33 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T12:23:02.643109Z","times_seen":13933290,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xnxx2.org/out/300x250footer.php","fqdn":"xnxx2.org","domain":"xnxx2.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://xnxx2.org/","date":"2025-12-31T13:23:30.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xnxx2.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 23:03:40 GMT","end":"Mon, 09 Feb 2026 00:02:04 GMT"},"fingerprint":{"sha1":"3B:A5:14:50:4A:4C:BA:8D:5F:95:D5:48:08:4D:46:B3:2C:60:95:6A","sha256":"DD:2C:A1:30:88:33:C2:0F:73:B9:C7:3A:E0:9C:AF:9F:FA:77:E5:4D:04:C3:CB:E5:B5:55:15:EE:44:1F:EF:17"}}},"request":{"raw":"GET /out/300x250footer.php HTTP/1.1\r\nHost: xnxx2.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 31 Dec 2025 13:23:30 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yu7neuuR2vUozcEpkunZOWkh2gAMblMKJEDsqCfgfEGOdayPaQV97hpYz1ywtJp3AADk4R3l0V8rkc3xlOQ39E0GsSUyewQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9b6a1784cc9356cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15765,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (8570)","md5":"736fbcc39f22df3d63165b26bfb91c3c","sha1":"d1be33b130626dca63190f62f2be8039f6e3bb62","sha256":"f401437785e2025d1953d68c7c0cfc84882c7036d9eac67c6e3d20bd779804ab","sha512":"a4cd44981b3a08d3e4f68c38982788d31736fb00173af2755964ea2606c70ee1489330f99ba020c03e79cb5bb5a6fef38bcc18a5a9480b0c0307f924ddd89c71","ssdeep":"384:uTrBWWXvFBn/iPXy2WjeD5c2qfRxBGORUkU6ZDGNCZ0xy24mWk28CgopORi:03fGXrWjsqfRbGObGNCZ0xy24mWbpTpN","tlshash":"56622bb5b343ed6683a88cc551bf6a30f03a9a053509c494f5adacc73866685d2b3f3d","first_seen":"2025-10-22T18:46:53.927341Z","last_seen":"2026-04-05T07:57:09.183191Z","times_seen":23,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sacxagftoaz.com/ohqomc?R8F7EU=bC\u0026gehii=llbv\u0026qeypbnix=bhhqrw\u0026co=6643432\u0026dn=_wytfndyofqepongfxfjsia\u0026ka=023502\u0026veeygxf=861618\u0026bj=4\u0026gcu=gafp\u0026sqc=4\u0026dhly=ni\u0026icip=wnf\u0026mgki=gdsyuk","fqdn":"sacxagftoaz.com","domain":"sacxagftoaz.com","tld":"com"},"ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xnxx2.org/out/300x250footer.php","date":"2025-12-31T13:23:32.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sacxagftoaz.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Dec 2025 18:09:15 GMT","end":"Tue, 17 Mar 2026 18:09:14 GMT"},"fingerprint":{"sha1":"4A:CA:2A:3A:CC:8E:B4:7F:73:10:99:9F:77:F5:2C:C7:E8:77:75:27","sha256":"71:F8:7F:E5:1B:CA:E5:81:C5:99:65:BE:A8:AF:6C:FB:B5:0C:8E:CF:41:BF:21:4A:E8:99:F4:AD:F3:0C:C5:A4"}}},"request":{"raw":"GET /ohqomc?R8F7EU=bC\u0026gehii=llbv\u0026qeypbnix=bhhqrw\u0026co=6643432\u0026dn=_wytfndyofqepongfxfjsia\u0026ka=023502\u0026veeygxf=861618\u0026bj=4\u0026gcu=gafp\u0026sqc=4\u0026dhly=ni\u0026icip=wnf\u0026mgki=gdsyuk HTTP/1.1\r\nHost: sacxagftoaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 31 Dec 2025 13:23:32 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Wed, 03 Feb 2027 13:23:32 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Wed, 03 Feb 2027 13:23:32 GMT; Secure; SameSite=None\nUID=25123108238d749e822bd64abbb64571c86b; Path=/; Expires=Wed, 03 Feb 2027 13:23:32 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":495,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (495), with no line terminators","md5":"328e9f75d981142a189a6a5cfd3f045a","sha1":"edc34218e74d905783af0a030af2552466b13c6d","sha256":"ed7b929e00af35fb849bf8a58b0ecfce619a56c50db029535faa37c93aba5589","sha512":"c0a482df7b5e6f8a7033ecef228b50148563aaa6ffc2496641ec459f67fa061fcc476f7e562582d784cd036a5d472d6557e93c30cd86651a718ff90adc7c5cc6","ssdeep":"","tlshash":"3bf09e756d6fc4e0813354ab98cf1c0178d0ab57cf030e26c4090b819e7d2552da3d0b","first_seen":"2025-12-31T13:24:00.290121Z","last_seen":"2025-12-31T13:24:00.290121Z","times_seen":1,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":48,"dns":1,"connect":17,"send":0,"wait":18,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clammyendearedkeg.com/jserror?type=banner_static\u0026bavar=0\u0026build=1.0.658\u0026zoneid=\u0026e=Error\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Fxnxx2.org%2Fout%2F300x250footer.php","fqdn":"clammyendearedkeg.com","domain":"clammyendearedkeg.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xnxx2.org/out/300x250footer.php","date":"2025-12-31T13:23:33.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clammyendearedkeg.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:25:45 GMT","end":"Wed, 21 Jan 2026 14:25:44 GMT"},"fingerprint":{"sha1":"3E:40:9C:04:25:32:1C:4E:63:1E:34:E9:AE:AD:6B:99:46:E3:EF:3C","sha256":"E1:40:5E:3A:D1:13:2B:95:6F:05:23:A1:DF:F7:A8:5B:2A:17:85:46:F0:C3:13:DE:9E:8F:80:B1:A2:8B:1F:D8"}}},"request":{"raw":"GET /jserror?type=banner_static\u0026bavar=0\u0026build=1.0.658\u0026zoneid=\u0026e=Error\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Fxnxx2.org%2Fout%2F300x250footer.php HTTP/1.1\r\nHost: clammyendearedkeg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nCookie: cart=1; cart_p=2; CHCK=1; PTS=; UID=2512310823a6770dbd24204283bb07c043c3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 31 Dec 2025 13:23:33 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T12:23:02.643109Z","times_seen":13933290,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xnxx2.org/out/300x250footer.php","fqdn":"xnxx2.org","domain":"xnxx2.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://xnxx2.org/","date":"2025-12-31T13:23:30.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xnxx2.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 23:03:40 GMT","end":"Mon, 09 Feb 2026 00:02:04 GMT"},"fingerprint":{"sha1":"3B:A5:14:50:4A:4C:BA:8D:5F:95:D5:48:08:4D:46:B3:2C:60:95:6A","sha256":"DD:2C:A1:30:88:33:C2:0F:73:B9:C7:3A:E0:9C:AF:9F:FA:77:E5:4D:04:C3:CB:E5:B5:55:15:EE:44:1F:EF:17"}}},"request":{"raw":"GET /out/300x250footer.php HTTP/1.1\r\nHost: xnxx2.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 31 Dec 2025 13:23:30 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cZs%2BvBBsVvPG7HxxxC5HPT3yLOwtFpGTbHFCKyXuTe7o%2Buc3LKsc3mVdnpWqyy%2BJHDieu5VxJ8a6paaUqSmfR1keIyomQvg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9b6a1784bc7c56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15765,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (8570)","md5":"736fbcc39f22df3d63165b26bfb91c3c","sha1":"d1be33b130626dca63190f62f2be8039f6e3bb62","sha256":"f401437785e2025d1953d68c7c0cfc84882c7036d9eac67c6e3d20bd779804ab","sha512":"a4cd44981b3a08d3e4f68c38982788d31736fb00173af2755964ea2606c70ee1489330f99ba020c03e79cb5bb5a6fef38bcc18a5a9480b0c0307f924ddd89c71","ssdeep":"384:uTrBWWXvFBn/iPXy2WjeD5c2qfRxBGORUkU6ZDGNCZ0xy24mWk28CgopORi:03fGXrWjsqfRbGObGNCZ0xy24mWbpTpN","tlshash":"56622bb5b343ed6683a88cc551bf6a30f03a9a053509c494f5adacc73866685d2b3f3d","first_seen":"2025-10-22T18:46:53.927341Z","last_seen":"2026-04-05T07:57:09.183191Z","times_seen":23,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tbi.sb-cd.com/t/2521963/2/5/w:500/t6-enh/chat-mom-iam.jpg","fqdn":"tbi.sb-cd.com","domain":"sb-cd.com","tld":"com"},"ip":{"addr":"212.102.56.184","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xnxx2.org/","date":"2025-12-31T13:23:30.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1349102413.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 04:44:56 GMT","end":"Fri, 27 Feb 2026 04:44:55 GMT"},"fingerprint":{"sha1":"3F:53:7D:F8:A1:9B:9D:A7:52:8A:15:12:55:BE:47:FB:0E:11:60:9E","sha256":"74:E9:52:77:92:F7:CA:EB:AB:C5:90:20:A5:7E:56:FF:3C:61:DF:A9:D9:F2:6F:4E:16:DE:1A:02:DE:C0:FB:52"}}},"request":{"raw":"GET /t/2521963/2/5/w:500/t6-enh/chat-mom-iam.jpg HTTP/1.1\r\nHost: tbi.sb-cd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 13:23:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24618\r\ncf-ray: 97b254e58d6761d6-ORD\r\ncache-control: max-age=31536000, public\r\ncf-bgj: imgq:85,h2pri,csam-hash\r\ncf-polished: qual=85, origFmt=jpeg, origSize=27324\r\nlast-modified: Sun, 07 Sep 2025 00:15:12 GMT\r\nvary: Accept\r\ncontent-disposition: inline; filename=\"chat-mom-iam.webp\"\r\ncontent-security-policy: script-src 'none'\r\nx-cache-status: HIT\r\nx-request-id: k3M9UImVDSlChRVetoExl\r\ncf-cache-status: HIT\r\nage: 3369\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-77-nzt: EwwB1GY4twHX5rMVAAwBuZhBPwH324WCAAwBWbu0RwH3WQ4AAA\r\nx-77-nzt-ray: 25185808c5d44af0d32355697e482407\r\nx-77-cache: HIT\r\nx-77-age: 1422310\r\nserver: CDN77-Turbo\r\nx-77-pop: frankfurtDE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24618,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 500x281, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"05b27c1b4d1a55c81448f481cb8c5dcd","sha1":"e1750ae3a5496cff24e8f6322dc4d8a249d61e8a","sha256":"2e72843cca76e03f1314e59b01f3f96f4a52f1b2ceef7dd166fd8f85afc15aac","sha512":"14e3da66b092c629353d5fe2eb97d94ec5018f76e781b96d5ca046839b3cde8c7bec58af06c7a139102b88393d0609d8a94b7fc7b0b7a22792934fee2fb162cc","ssdeep":"768:Bz1yY/KCkX4GspO5D4hPwyD/4vAWCkHeJxBb:Bz1yuZkX4PNPwu/46k+Jz","tlshash":"e4b2e13add0fa44f7e3d72ddec4c0c92703479a19e3e2cb4d5a1d4d7854e65e81226a2","first_seen":"2025-10-16T21:47:02.002098Z","last_seen":"2025-12-31T13:24:00.291876Z","times_seen":2,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":30,"connect":23,"send":0,"wait":30,"receive":16,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clammyendearedkeg.com/get/2055057?id=2055057\u0026pid=__clb-spot_2055057_pjj_1\u0026jp=_clidjvunwpaoeyilswyzjt\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.658-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=6vY9AUjaHR0cHM6Ly94bnh4Mi5vcmcv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=OkYVXVZaHR0cHM6Ly94bnh4Mi5vcmcvb3V0LzMwMHgyNTBmb290ZXIucGhw\u0026afid=8841538672295936\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pkw=0\u0026pload=1630\u0026rlp=%5B0%2C34%2C73%2C49%2C7%2C290%2C131%2C230%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0","fqdn":"clammyendearedkeg.com","domain":"clammyendearedkeg.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xnxx2.org/out/300x250footer.php","date":"2025-12-31T13:23:32.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clammyendearedkeg.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:25:45 GMT","end":"Wed, 21 Jan 2026 14:25:44 GMT"},"fingerprint":{"sha1":"3E:40:9C:04:25:32:1C:4E:63:1E:34:E9:AE:AD:6B:99:46:E3:EF:3C","sha256":"E1:40:5E:3A:D1:13:2B:95:6F:05:23:A1:DF:F7:A8:5B:2A:17:85:46:F0:C3:13:DE:9E:8F:80:B1:A2:8B:1F:D8"}}},"request":{"raw":"GET /get/2055057?id=2055057\u0026pid=__clb-spot_2055057_pjj_1\u0026jp=_clidjvunwpaoeyilswyzjt\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.658-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=6vY9AUjaHR0cHM6Ly94bnh4Mi5vcmcv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=OkYVXVZaHR0cHM6Ly94bnh4Mi5vcmcvb3V0LzMwMHgyNTBmb290ZXIucGhw\u0026afid=8841538672295936\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pkw=0\u0026pload=1630\u0026rlp=%5B0%2C34%2C73%2C49%2C7%2C290%2C131%2C230%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: clammyendearedkeg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 31 Dec 2025 13:23:32 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Wed, 03 Feb 2027 13:23:32 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Wed, 03 Feb 2027 13:23:32 GMT; Secure; SameSite=None\nUID=251231082330b4f0d3f662494daeef863d1f; Path=/; Expires=Wed, 03 Feb 2027 13:23:32 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":519,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (519), with no line terminators","md5":"edfd9e23de27c27e24686de333c40d56","sha1":"e5d1c1a864f9bbbcec7d0153a78ab53a04cf7392","sha256":"8a1e62a63bc618675de9e5e8a55e6c2ee0ce128cc364897d91d22e30fc42bb81","sha512":"6216976b02f9c93d0fad5112e86ba37edac400cab18ba0f7aa37662750d446733e4c24bc460a17ee9ad4870d32c5091a93ea8146515f0ce161e3fcd14b5936a7","ssdeep":"","tlshash":"e2f0952f50ce88d41395981553ff7c1471d1024c89734725764867165c6826957b3e9c","first_seen":"2025-12-31T13:24:00.293512Z","last_seen":"2025-12-31T13:24:00.293512Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/57/59/26/575926e4cb2b735bfadce05ccd0d1ae1-1/575926e4cb2b735bfadce05ccd0d1ae1.27.jpg","fqdn":"cdn77-pic.xvideos-cdn.com","domain":"xvideos-cdn.com","tld":"com"},"ip":{"addr":"185.76.9.7","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xnxx2.org/","date":"2025-12-31T13:23:30.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xvideos.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 15 Oct 2025 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3C:93:93:D2:61:40:5B:B9:F9:EB:A2:B0:78:48:57:C0:F2:41:42:42","sha256":"D9:3E:6D:83:C8:0E:74:42:32:A1:4F:A3:9B:CA:3A:9D:E0:D2:60:38:FF:BF:EB:0E:36:AA:3E:41:44:D5:A7:59"}}},"request":{"raw":"GET /videos/thumbs169ll/57/59/26/575926e4cb2b735bfadce05ccd0d1ae1-1/575926e4cb2b735bfadce05ccd0d1ae1.27.jpg HTTP/1.1\r\nHost: cdn77-pic.xvideos-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 13:23:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6097\r\nx-frame-options: sameorigin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Fri, 16 Dec 2022 20:16:48 GMT\r\ncache-control: max-age=10368000, public\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBuUwJBgHXfGgjAAwBJRPCQAH32TEyAAwBj/Q63QH3nqgAAA\r\nx-77-nzt-ray: 5451992d0fc02ab0d323556955b7bc05\r\nx-accel-expires: @1775234823\r\nx-accel-date: 1764866903\r\nx-77-cache: HIT\r\nx-77-age: 2320508\r\nx-accel-date-max: 1701908461\r\nserver: CDN77-Turbo\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":6097,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", progressive, precision 8, 352x198, components 3","md5":"31e6666be16656dd6b84556ca8f11473","sha1":"02983f50553f05bb1c63f53cfe1b27f62c54d29f","sha256":"9d53b8a6136fd58e56bf0745648d0c41fd10f06c322e8a041422e86899bb85c6","sha512":"9ba54ccdfa6462c3cb324ba284138192f195ccd75faecc5b5d04cce90a0cfffe4469f6e6e2be94f2bb5c0115b8f4217c7ebd66b7d81e0fa9165b3c580d714903","ssdeep":"96:QJibwMmRwBpVz2Yeyp7rci8WFK7lV0EwqOt18dP6OesLusCMLOGjifKq:HbGwzJ2YOXWAf0FBnC6YaBMKGjsh","tlshash":"69c17e11bf6db2e3fc71203653f6895d761f54224e46faae3e42c1c78deb222ca65046","first_seen":"2024-10-20T19:47:26.614704Z","last_seen":"2025-12-31T13:24:00.295038Z","times_seen":6,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":32,"connect":10,"send":0,"wait":14,"receive":1,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ei.phncdn.com/videos/201905/30/226588331/original/(m=q8_8-UUbeaf8GgaaaWavb)(mh=i2CJOi90sYivXEiF)0.jpg","fqdn":"ei.phncdn.com","domain":"phncdn.com","tld":"com"},"ip":{"addr":"64.210.135.114","port":443,"asn":30361,"as":"SWIFTWILL2","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xnxx2.org/","date":"2025-12-31T13:23:30.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phncdn.com","organization":"AYLO Freesites Ltd"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Sat, 19 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:B5:27:AA:6B:2E:09:43:BF:20:85:5B:20:46:36:51:85:A2:3A:B7","sha256":"6A:D2:70:68:DC:32:49:E4:83:44:97:24:82:FD:75:3B:36:FA:F1:BD:91:ED:17:E6:D7:97:90:53:68:97:4A:C0"}}},"request":{"raw":"GET /videos/201905/30/226588331/original/(m=q8_8-UUbeaf8GgaaaWavb)(mh=i2CJOi90sYivXEiF)0.jpg HTTP/1.1\r\nHost: ei.phncdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 13:23:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13327\r\nexpires: Sun, 11 Jan 2026 00:29:52 GMT\r\ncache-control: max-age=10670034\r\nlast-modified: Thu, 30 May 2019 15:16:44 GMT\r\netag: \"1a1f3d1ac-bf6e-58a1c62c0bfec\"\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=300\r\nx-cdn-diag: ams5-6140-1-2698378-h-0-0---;6141-31-230739----0-0-1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13327,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x240, components 3","md5":"4185f9e27b1fde02792eb240753e11a8","sha1":"6853780aadbcf4a42395d41bf9f84a0129105b33","sha256":"d147b4336a79631deb7aba343f6b6692c63ae504ac5407a3831ad9b1012ab1e7","sha512":"9a8942a39de17b6a8d05af9dce76775c08b714ac8fe98e01e0d1e57a4ccaa30c2899fee45aa7daa8cc6519d454bacba6c5a8fab539b386477841186697377bfb","ssdeep":"384:Z8IQjV0tpreffJ5By0Xqt2j19RwbLawmv4FzfVKoimTtTSY:ZXpCXbjXqO9Rw3awUSzwLwtT1","tlshash":"e052d0803645a45ede8de63d1a981b3fbb023b81e25a16ed81163f3dd72f4f112d801d","first_seen":"2025-11-12T02:15:34.341711Z","last_seen":"2025-12-31T13:24:00.295986Z","times_seen":2,"resource_available":false,"data":null}},"time_used":459,"timings":{"blocked":-1,"dns":51,"connect":23,"send":0,"wait":17,"receive":26,"ssl":331},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clammyendearedkeg.com/bn.js","fqdn":"clammyendearedkeg.com","domain":"clammyendearedkeg.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xnxx2.org/out/300x250footer.php","date":"2025-12-31T13:23:31.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clammyendearedkeg.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:25:45 GMT","end":"Wed, 21 Jan 2026 14:25:44 GMT"},"fingerprint":{"sha1":"3E:40:9C:04:25:32:1C:4E:63:1E:34:E9:AE:AD:6B:99:46:E3:EF:3C","sha256":"E1:40:5E:3A:D1:13:2B:95:6F:05:23:A1:DF:F7:A8:5B:2A:17:85:46:F0:C3:13:DE:9E:8F:80:B1:A2:8B:1F:D8"}}},"request":{"raw":"GET /bn.js HTTP/1.1\r\nHost: clammyendearedkeg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 31 Dec 2025 13:23:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 24 Dec 2025 12:35:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694bde26-29ad2\"\r\nexpires: Wed, 07 Jan 2026 13:23:31 GMT\r\ncache-control: max-age=604800\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":170706,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2d158e92e83d6c8a70cc928e23060ce7","sha1":"a3bfddb1307774261e73ab9d2486438504b35084","sha256":"44f722d75c727be078a5931dd3497aacf652ba8c6eb3097176599d06aac160a9","sha512":"1d4c7db82aed070da74c04af696f6ff716b1de4097cdb46ff681926e43691f1a72279569b98dab6562736b6c1c167ea2a20b3a6d0dfe1b8543c9037f1312cd22","ssdeep":"3072:YY3td0G485lbLLPY0QkWGENs6kmJNdRVJG:9d05QlbLTofgg/dVG","tlshash":"caf3c7deb74528361156b0390f2fdf34a6a5e8d2b88d8474e0e3c0ec787c996e193b65","first_seen":"2025-12-24T15:48:22.966068Z","last_seen":"2026-01-11T23:52:13.961648Z","times_seen":225,"resource_available":true,"data":null}},"time_used":286,"timings":{"blocked":106,"dns":35,"connect":19,"send":0,"wait":69,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ic-vt-nss.xhcdn.com/b/OGUzODBhYjJiMzM4NjJiZDc5ZmFmYmMzYTVlNzRjYzE/s(w:320,h:240,f:cv)/018/333/718/v2/1280x720.209.jpg","fqdn":"ic-vt-nss.xhcdn.com","domain":"xhcdn.com","tld":"com"},"ip":{"addr":"185.76.9.4","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xnxx2.org/","date":"2025-12-31T13:23:31.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1483870901.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 16:37:13 GMT","end":"Wed, 28 Jan 2026 16:37:12 GMT"},"fingerprint":{"sha1":"78:18:E2:15:BA:2E:3E:79:74:7F:F9:6E:B5:8E:85:27:E1:15:97:33","sha256":"74:3C:65:25:19:05:F4:EF:59:43:7E:44:5F:89:0D:4C:41:68:D4:BF:EF:81:C3:4A:10:15:25:25:99:D6:1F:E7"}}},"request":{"raw":"GET /b/OGUzODBhYjJiMzM4NjJiZDc5ZmFmYmMzYTVlNzRjYzE/s(w:320,h:240,f:cv)/018/333/718/v2/1280x720.209.jpg HTTP/1.1\r\nHost: ic-vt-nss.xhcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xnxx2.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 13:23:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 26043\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: rsic-kube0018\r\ncache-control: max-age=604800\r\nexpires: Mon, 05 Jan 2026 21:14:53 GMT\r\nx-rsic-responder: rsic-kube0021\r\nx-envoy-upstream-service-time: 19\r\ntiming-allow-origin: *\r\nx-77-nzt: EgwBuUwJAQHXKDMCAAwBnJIhLgH3XgEAAA\r\nx-77-nzt-ray: 56376635560d02a9d32355695e177b33\r\nx-77-cache: HIT\r\nx-77-age: 144168\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":26043,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 320x600, components 3","md5":"a5243018ef707afb694189e87fe9c0e0","sha1":"6cfa7aa85ce7d011cf4f82157f52b51fe1f4ecea","sha256":"eba8618e0c9727ed68749e77ad9fd1f90ffcff79b9aed1354b715ba6df0bcda2","sha512":"76c7d7dd1cbb029827004b31dfba94d618e0635c11b55aeaabf61e98fe43f4fa4eff8f06bd9a2c1135a322e74bb7ad34512acd005ff19985e611f9847c946c40","ssdeep":"384:NBzSywH8Ep9F/0IZl5SZwASV2w/4nMC2w4PCwuAq/cszjZLg4+BbmX5kNfZLA5WX:/w8M9dNlgZNWgnXRAq/1zjSBc5WL0+","tlshash":"fac2e1847dc6ae59ccd5d13839c6671313db2b5329184d8e3ad4c91f1dec4cead22127","first_seen":"2025-10-16T21:47:02.080611Z","last_seen":"2025-12-31T13:24:00.298056Z","times_seen":4,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":99,"dns":56,"connect":7,"send":0,"wait":10,"receive":5,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clammyendearedkeg.com/get/2055057?id=2055057\u0026pid=__clb-spot_2055057_prb_1\u0026jp=_clczrpbpbrrfmtkgllgkgu\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.658-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=ZXyVC6HaHR0cHM6Ly94bnh4Mi5vcmcv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=r2Yw6xNaHR0cHM6Ly94bnh4Mi5vcmcvb3V0LzMwMHgyNTBmb290ZXIucGhw\u0026afid=3493514114782720\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pkw=0\u0026pload=1730\u0026rlp=%5B0%2C35%2C76%2C46%2C20%2C354%2C191%2C246%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0","fqdn":"clammyendearedkeg.com","domain":"clammyendearedkeg.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xnxx2.org/out/300x250footer.php","date":"2025-12-31T13:23:32.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clammyendearedkeg.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:25:45 GMT","end":"Wed, 21 Jan 2026 14:25:44 GMT"},"fingerprint":{"sha1":"3E:40:9C:04:25:32:1C:4E:63:1E:34:E9:AE:AD:6B:99:46:E3:EF:3C","sha256":"E1:40:5E:3A:D1:13:2B:95:6F:05:23:A1:DF:F7:A8:5B:2A:17:85:46:F0:C3:13:DE:9E:8F:80:B1:A2:8B:1F:D8"}}},"request":{"raw":"GET /get/2055057?id=2055057\u0026pid=__clb-spot_2055057_prb_1\u0026jp=_clczrpbpbrrfmtkgllgkgu\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.658-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=ZXyVC6HaHR0cHM6Ly94bnh4Mi5vcmcv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=r2Yw6xNaHR0cHM6Ly94bnh4Mi5vcmcvb3V0LzMwMHgyNTBmb290ZXIucGhw\u0026afid=3493514114782720\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pkw=0\u0026pload=1730\u0026rlp=%5B0%2C35%2C76%2C46%2C20%2C354%2C191%2C246%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: clammyendearedkeg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 31 Dec 2025 13:23:32 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Wed, 03 Feb 2027 13:23:32 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Wed, 03 Feb 2027 13:23:32 GMT; Secure; SameSite=None\nUID=2512310823a6770dbd24204283bb07c043c3; Path=/; Expires=Wed, 03 Feb 2027 13:23:32 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":519,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (519), with no line terminators","md5":"576854c79bf4fbbc010e4510dce97605","sha1":"0627453e9a8d1ec1f837d1a6c2812810137b15df","sha256":"c54c9298f5269637c7cb7c8a54ddc6c80015a3a1b6bc4bbef31528a0d39c5ee8","sha512":"8bfb07ab0f0edb3f0c34e8042b49dcbce05bd26bea6561bf51614a15c89f3e65c8e2285297c956c951b2a96a4681bd7807dfc5731b9899bf4286a5f544f04889","ssdeep":"","tlshash":"b6f00e7c8152a3b83022e6300e6d3cc8b48f9c823f379b0032884882cc6d3d16e7389b","first_seen":"2025-12-31T13:24:00.298746Z","last_seen":"2025-12-31T13:24:00.298746Z","times_seen":1,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.clammyendearedkeg.com/static/video/bn/24b/e55/095/24be550950a7c6fb20244a506c13acd5ded0f432.mp4","fqdn":"www.clammyendearedkeg.com","domain":"clammyendearedkeg.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://xnxx2.org/out/300x250footer.php","date":"2025-12-31T13:23:33.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clammyendearedkeg.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:25:45 GMT","end":"Wed, 21 Jan 2026 14:25:44 GMT"},"fingerprint":{"sha1":"3E:40:9C:04:25:32:1C:4E:63:1E:34:E9:AE:AD:6B:99:46:E3:EF:3C","sha256":"E1:40:5E:3A:D1:13:2B:95:6F:05:23:A1:DF:F7:A8:5B:2A:17:85:46:F0:C3:13:DE:9E:8F:80:B1:A2:8B:1F:D8"}}},"request":{"raw":"GET /static/video/bn/24b/e55/095/24be550950a7c6fb20244a506c13acd5ded0f432.mp4 HTTP/1.1\r\nHost: www.clammyendearedkeg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Wed, 31 Dec 2025 13:23:33 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 153602\r\nlast-modified: Mon, 15 Dec 2025 18:52:34 GMT\r\netag: \"694058f2-25802\"\r\nexpires: Sun, 01 Mar 2026 13:23:33 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-expose-headers: Last-Modified\r\ncontent-range: bytes 0-153601/153602\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":153602,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"04d2bfd50d9359a53ed9531684e9da96","sha1":"24be550950a7c6fb20244a506c13acd5ded0f432","sha256":"647163abd604e867cca1fed5bdcb521f50121eee154b80596e62c9c37f146a35","sha512":"5e55e24b39958657fa25d6e2707d7c7f3a68e1487041bb7262c91c180eccc3a75a4028b5b7d0f80bc6b1fab9063d99411a5cdb638d428a4230cbb0a83e37a69c","ssdeep":"1536:5KHRxmfOPN5bHRrg7C9UKFethHwr/hYhZ4e3dn:5cmoNzg7ChF0wLh0nn","tlshash":"4ce3e1295ea26882f34cf37e48a1c829caf35363c4d6e14b788f49584f35225476f977","first_seen":"2025-08-25T16:09:43.16385Z","last_seen":"2026-04-15T01:00:15.515734Z","times_seen":326,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clammyendearedkeg.com/check.html","fqdn":"clammyendearedkeg.com","domain":"clammyendearedkeg.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://xnxx2.org/out/300x250footer.php","date":"2025-12-31T13:23:32.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clammyendearedkeg.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:25:45 GMT","end":"Wed, 21 Jan 2026 14:25:44 GMT"},"fingerprint":{"sha1":"3E:40:9C:04:25:32:1C:4E:63:1E:34:E9:AE:AD:6B:99:46:E3:EF:3C","sha256":"E1:40:5E:3A:D1:13:2B:95:6F:05:23:A1:DF:F7:A8:5B:2A:17:85:46:F0:C3:13:DE:9E:8F:80:B1:A2:8B:1F:D8"}}},"request":{"raw":"GET /check.html HTTP/1.1\r\nHost: clammyendearedkeg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nCookie: cart=1; cart_p=2\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 31 Dec 2025 13:23:32 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Mon, 24 Nov 2025 08:42:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69241a69-39e\"\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":926,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"088dba8e97eede53134c93219f7ebbae","sha1":"adb707654d1fe0af7d0d7a9f55660d22bd3625e4","sha256":"6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff","sha512":"23a1f87731e8aee4658993cd1ce35ec179fea80b89bf52aca7634488f1bdfcf88b9cabca4859481357a9fee06cbb49df64bbe0878b1dae0e5df4fa34003c6d80","ssdeep":"","tlshash":"6211d04934e1684c1127a6301597a2183c32a40315cbd949fb9cd7301f815a7dc596df","first_seen":"2024-11-22T16:59:41.974716Z","last_seen":"2026-03-04T10:11:28.020186Z","times_seen":13721,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ic-vt-nss.xhcdn.com/b/YjE3YzMxY2RiMWE2NDE5YTNlYzJhMjlkYTdhOGE5NWY/s(w:320,h:240,f:cv)/011/992/967/v2/1280x720.209.jpg","fqdn":"ic-vt-nss.xhcdn.com","domain":"xhcdn.com","tld":"com"},"ip":{"addr":"185.76.9.4","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xnxx2.org/","date":"2025-12-31T13:23:31.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1483870901.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 16:37:13 GMT","end":"Wed, 28 Jan 2026 16:37:12 GMT"},"fingerprint":{"sha1":"78:18:E2:15:BA:2E:3E:79:74:7F:F9:6E:B5:8E:85:27:E1:15:97:33","sha256":"74:3C:65:25:19:05:F4:EF:59:43:7E:44:5F:89:0D:4C:41:68:D4:BF:EF:81:C3:4A:10:15:25:25:99:D6:1F:E7"}}},"request":{"raw":"GET /b/YjE3YzMxY2RiMWE2NDE5YTNlYzJhMjlkYTdhOGE5NWY/s(w:320,h:240,f:cv)/011/992/967/v2/1280x720.209.jpg HTTP/1.1\r\nHost: ic-vt-nss.xhcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xnxx2.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 13:23:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9941\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: rsic-kube0019\r\ncache-control: max-age=604800\r\nexpires: Thu, 01 Jan 2026 05:32:25 GMT\r\nx-rsic-cached: mem\r\nx-rsic-responder: rsic-kube0019\r\nx-envoy-upstream-service-time: 0\r\ntiming-allow-origin: *\r\nx-77-nzt: EgwBuUwJAQH3PVcIAAwBisclzQH3LQAAAA\r\nx-77-nzt-ray: 56376635560d02a9d3235569efcf2933\r\nx-77-cache: HIT\r\nx-77-age: 546621\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":9941,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 320x320, components 3","md5":"1bd62c65c37be92b05a9690a1d0a8ff8","sha1":"fa24777a435e5e99583596f11a319fd5cf5650c1","sha256":"ba35d3895106a08052330a75d5d91f9fe3a8d5ed812605ddd960b68bf75380c4","sha512":"60e248588e448ccf0528a6ba0ebbdb7275f29b2afddac29a5693d62c3eaa52e93aaf3c467a78d8a6db724a48ceb38224a3316cd0fabbe06fb1905c402013eaae","ssdeep":"192:NczMqqnBkgssqVr9Y6/WH5uJDp/V9RmaEtG0:NczMdKs45CcDpN9RmaB0","tlshash":"3722ae407b6aad88c491c2b83652e336e7dff0e28c49a36d35566a5a0f341464d71c94","first_seen":"2025-10-16T21:47:02.058211Z","last_seen":"2025-12-31T13:24:00.300111Z","times_seen":3,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":91,"dns":57,"connect":7,"send":0,"wait":9,"receive":1,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clammyendearedkeg.com/get/2055057?id=2055057\u0026pid=__clb-spot_2055057_phf_1\u0026jp=_clunkapjzxxusymwfhuucw\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.658-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=cfP6nT0aHR0cHM6Ly94bnh4Mi5vcmcv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=KH0gB3ZaHR0cHM6Ly94bnh4Mi5vcmcvb3V0LzMwMHgyNTBmb290ZXIucGhw\u0026afid=2649089184606208\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pkw=0\u0026pload=1307\u0026rlp=%5B0%2C36%2C70%2C51%2C21%2C313%2C151%2C204%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0","fqdn":"clammyendearedkeg.com","domain":"clammyendearedkeg.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xnxx2.org/out/300x250footer.php","date":"2025-12-31T13:23:32.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clammyendearedkeg.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:25:45 GMT","end":"Wed, 21 Jan 2026 14:25:44 GMT"},"fingerprint":{"sha1":"3E:40:9C:04:25:32:1C:4E:63:1E:34:E9:AE:AD:6B:99:46:E3:EF:3C","sha256":"E1:40:5E:3A:D1:13:2B:95:6F:05:23:A1:DF:F7:A8:5B:2A:17:85:46:F0:C3:13:DE:9E:8F:80:B1:A2:8B:1F:D8"}}},"request":{"raw":"GET /get/2055057?id=2055057\u0026pid=__clb-spot_2055057_phf_1\u0026jp=_clunkapjzxxusymwfhuucw\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.658-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=cfP6nT0aHR0cHM6Ly94bnh4Mi5vcmcv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=KH0gB3ZaHR0cHM6Ly94bnh4Mi5vcmcvb3V0LzMwMHgyNTBmb290ZXIucGhw\u0026afid=2649089184606208\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pkw=0\u0026pload=1307\u0026rlp=%5B0%2C36%2C70%2C51%2C21%2C313%2C151%2C204%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: clammyendearedkeg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 31 Dec 2025 13:23:32 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Wed, 03 Feb 2027 13:23:32 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Wed, 03 Feb 2027 13:23:32 GMT; Secure; SameSite=None\nUID=251231082391580c714914493aa035e7e280; Path=/; Expires=Wed, 03 Feb 2027 13:23:32 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":519,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (519), with no line terminators","md5":"f8529da7b43dae32c09d5100d14e182e","sha1":"da6705b9af3fee4e37bde5baf9efc766080af2ce","sha256":"789c4b6dda89ca792d1a5c357ee881c212f3d8eaa9c6c70743c48204a6b21adb","sha512":"d14d9aa62a4199415cc54e7518eb5debf0dfc1525981324ef2b30ed9df9564dc048832f8314fdc8f75883b4b29f66dfdd6ed681ec65517052cfba3039478561b","ssdeep":"","tlshash":"13f0c0f87684e8a03441c904d1a6b5521d8854b5cb3be91620b5448acf1d3b81d27c45","first_seen":"2025-12-31T13:24:00.300767Z","last_seen":"2025-12-31T13:24:00.300767Z","times_seen":1,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.webvisor.org/watch/75134221?wmode=7\u0026page-url=https%3A%2F%2Fxnxx2.org%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A6dxo56vtzxzyyc4emdpvks38xllgf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2292%3Acn%3A1%3Adp%3A0%3Als%3A1394281546640%3Ahid%3A457231739%3Az%3A0%3Ai%3A20251231132331%3Aet%3A1767187411%3Ac%3A1%3Arn%3A242035318%3Arqn%3A1%3Au%3A1767187411825938930%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A695%3Awv%3A2%3Ads%3A30%2C20%2C111%2C44%2C21%2C0%2C%2C442%2C4%2C%2C%2C%2C712%3Aco%3A0%3Acpf%3A1%3Ans%3A1767187410193%3Afip%3A698841448a2422c7b39663531bcbbde5-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1767187413%3At%3AFree%20XXX%2C%20XNXX%20Sex%20Videos%20for%20Free\u0026t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(83952128)fip(1)ti(1)","fqdn":"mc.webvisor.org","domain":"webvisor.org","tld":"org"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xnxx2.org/","date":"2025-12-31T13:23:32.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mc.webvisor.com","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 18 Aug 2025 21:05:34 GMT","end":"Mon, 09 Feb 2026 20:59:59 GMT"},"fingerprint":{"sha1":"52:51:83:17:11:3C:6A:D0:47:28:FB:42:75:CF:6A:DA:48:B5:5A:C8","sha256":"69:B8:8D:9D:77:CB:F9:C7:48:04:E2:8C:99:28:7C:EF:5E:C7:2B:43:D6:52:7B:21:D2:99:F6:86:18:A6:0F:80"}}},"request":{"raw":"GET /watch/75134221?wmode=7\u0026page-url=https%3A%2F%2Fxnxx2.org%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A6dxo56vtzxzyyc4emdpvks38xllgf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2292%3Acn%3A1%3Adp%3A0%3Als%3A1394281546640%3Ahid%3A457231739%3Az%3A0%3Ai%3A20251231132331%3Aet%3A1767187411%3Ac%3A1%3Arn%3A242035318%3Arqn%3A1%3Au%3A1767187411825938930%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A695%3Awv%3A2%3Ads%3A30%2C20%2C111%2C44%2C21%2C0%2C%2C442%2C4%2C%2C%2C%2C712%3Aco%3A0%3Acpf%3A1%3Ans%3A1767187410193%3Afip%3A698841448a2422c7b39663531bcbbde5-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1767187413%3At%3AFree%20XXX%2C%20XNXX%20Sex%20Videos%20for%20Free\u0026t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(83952128)fip(1)ti(1) HTTP/1.1\r\nHost: mc.webvisor.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xnxx2.org/\r\nOrigin: https://xnxx2.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nlast-modified: Wed, 31-Dec-2025 13:23:32 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nstrict-transport-security: max-age=31536000\r\nlocation: /watch/75134221/1?wmode=7\u0026page-url=https%3A%2F%2Fxnxx2.org%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A6dxo56vtzxzyyc4emdpvks38xllgf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2292%3Acn%3A1%3Adp%3A0%3Als%3A1394281546640%3Ahid%3A457231739%3Az%3A0%3Ai%3A20251231132331%3Aet%3A1767187411%3Ac%3A1%3Arn%3A242035318%3Arqn%3A1%3Au%3A1767187411825938930%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A695%3Awv%3A2%3Ads%3A30%2C20%2C111%2C44%2C21%2C0%2C%2C442%2C4%2C%2C%2C%2C712%3Aco%3A0%3Acpf%3A1%3Ans%3A1767187410193%3Afip%3A698841448a2422c7b39663531bcbbde5-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1767187413%3At%3AFree%20XXX%2C%20XNXX%20Sex%20Videos%20for%20Free\u0026t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2883952128%29fip%281%29ti%281%29\u0026redirnss=1\r\nset-cookie: yabs-sid=72301841767187412; Path=/; SameSite=None; Secure\ni=wXnjr/KoAvapeNqUeh3NEtEzTrCxJ8/BEbxjx9Jlyrf09d70M/IplFZyS0VtQM/b7eLInw4Y9c7yzVxFjlY6idwyDoM=; Expires=Sat, 29-Dec-2035 13:23:13 GMT; Domain=.webvisor.org; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=1369600561767187412; Expires=Sat, 29-Dec-2035 13:23:13 GMT; Domain=.webvisor.org; Path=/; Secure; SameSite=None\nyuidss=1369600561767187412; Expires=Thu, 31-Dec-2026 13:23:32 GMT; Domain=.webvisor.org; Path=/; SameSite=None; Secure\nymex=1798723412.yrts.1767187412#1798723412.yrtsi.1767187412; Expires=Thu, 31-Dec-2026 13:23:32 GMT; Domain=.webvisor.org; Path=/; SameSite=None; Secure\nbh=YNTH1MoGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.webvisor.org; Expires=Thu, 04 Feb 2027 13:23:32 GMT; SameSite=None; Secure\nbh=YNTH1MoGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.webvisor.org; Expires=Thu, 04 Feb 2027 13:23:32 GMT; SameSite=None; Secure\r\naccess-control-allow-origin: https://xnxx2.org\r\nexpires: Wed, 31-Dec-2025 13:23:32 GMT\r\naccess-control-allow-credentials: true\r\nx-xss-protection: 1; mode=block\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\npragma: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":645,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T12:23:02.643109Z","times_seen":13933290,"resource_available":true,"data":null}},"time_used":464,"timings":{"blocked":198,"dns":1,"connect":48,"send":0,"wait":52,"receive":0,"ssl":162},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sacxagftoaz.com/ohqomc?lNKm=uJVlMc\u0026xd=5\u0026ii=vue\u0026zhb=2\u0026ye=_udushbudxlshkliulgzglo\u0026ozvpaonm=711412\u0026xaus=978452\u0026rwj=pxxbjd\u0026goosvtus=140540\u0026dt=133718\u0026ocis=31192\u0026usk=280969\u0026yr=8918332","fqdn":"sacxagftoaz.com","domain":"sacxagftoaz.com","tld":"com"},"ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xnxx2.org/out/300x250footer.php","date":"2025-12-31T13:23:32.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sacxagftoaz.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Dec 2025 18:09:15 GMT","end":"Tue, 17 Mar 2026 18:09:14 GMT"},"fingerprint":{"sha1":"4A:CA:2A:3A:CC:8E:B4:7F:73:10:99:9F:77:F5:2C:C7:E8:77:75:27","sha256":"71:F8:7F:E5:1B:CA:E5:81:C5:99:65:BE:A8:AF:6C:FB:B5:0C:8E:CF:41:BF:21:4A:E8:99:F4:AD:F3:0C:C5:A4"}}},"request":{"raw":"GET /ohqomc?lNKm=uJVlMc\u0026xd=5\u0026ii=vue\u0026zhb=2\u0026ye=_udushbudxlshkliulgzglo\u0026ozvpaonm=711412\u0026xaus=978452\u0026rwj=pxxbjd\u0026goosvtus=140540\u0026dt=133718\u0026ocis=31192\u0026usk=280969\u0026yr=8918332 HTTP/1.1\r\nHost: sacxagftoaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 31 Dec 2025 13:23:32 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Wed, 03 Feb 2027 13:23:32 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Wed, 03 Feb 2027 13:23:32 GMT; Secure; SameSite=None\nUID=251231082306f556da0eef4fe38ba79447ec; Path=/; Expires=Wed, 03 Feb 2027 13:23:32 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":495,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (495), with no line terminators","md5":"d458e647738c8ba0282c1db589ed2c30","sha1":"a274fef7529d7c9cd58436fd43d82e6a865380a8","sha256":"f1b990a510e8b99e2f498e872119a36e9ef27e34aa316c0ae263c55588bdab6a","sha512":"a93b52275bc797fd874b7d601586c57a1319979d29a6e4f1aedcd5916b24f71d842f087525ef4ae163f7cf618cf500c0a8a9f45fe54588ecf5fa1783420a08fc","ssdeep":"","tlshash":"bdf09ebd709cc4a8f0d1801b33fe9d1f24d651b95f1f0559a0205e542b4d3d2658381f","first_seen":"2025-12-31T13:24:00.302046Z","last_seen":"2025-12-31T13:24:00.302046Z","times_seen":1,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":49,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sacxagftoaz.com/ohqomc?jvl=lj\u0026gvnof=344275\u0026xn=3698715\u0026ac=858516\u0026ugz=013144\u0026au=2\u0026axh=8\u0026gtvx=634347\u0026hc=09148\u0026kki=702812\u0026nr=_uubtlrvggdmethfqeyhtor","fqdn":"sacxagftoaz.com","domain":"sacxagftoaz.com","tld":"com"},"ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xnxx2.org/out/300x250footer.php","date":"2025-12-31T13:23:32.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sacxagftoaz.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Dec 2025 18:09:15 GMT","end":"Tue, 17 Mar 2026 18:09:14 GMT"},"fingerprint":{"sha1":"4A:CA:2A:3A:CC:8E:B4:7F:73:10:99:9F:77:F5:2C:C7:E8:77:75:27","sha256":"71:F8:7F:E5:1B:CA:E5:81:C5:99:65:BE:A8:AF:6C:FB:B5:0C:8E:CF:41:BF:21:4A:E8:99:F4:AD:F3:0C:C5:A4"}}},"request":{"raw":"GET /ohqomc?jvl=lj\u0026gvnof=344275\u0026xn=3698715\u0026ac=858516\u0026ugz=013144\u0026au=2\u0026axh=8\u0026gtvx=634347\u0026hc=09148\u0026kki=702812\u0026nr=_uubtlrvggdmethfqeyhtor HTTP/1.1\r\nHost: sacxagftoaz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 31 Dec 2025 13:23:32 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Wed, 03 Feb 2027 13:23:32 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Wed, 03 Feb 2027 13:23:32 GMT; Secure; SameSite=None\nUID=2512310823401b8d7505824f68a2af37d2fb; Path=/; Expires=Wed, 03 Feb 2027 13:23:32 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":495,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (495), with no line terminators","md5":"7e8ec15a9c0f6caedb3269185aa6c8ad","sha1":"7340fa0a6f74c2652c55f2c3e59830ec8858dc12","sha256":"11a83cece02b6c90487fc208ce16f037b60d1bd5bed39f462617e5bf1dc5e3a7","sha512":"bfa8dc5ae33f5be894df9bb8ea351d074056304e824141d891e9dfad866a4c829b0c1874bc05d33c05dac159a2bc4afb717b0475c1c29bc622e48c54632a8582","ssdeep":"","tlshash":"e3f09ed9d0ebeda5fc81c8fd11399e0505e8d1c88b4301d640344e15444d874ec9bc11","first_seen":"2025-12-31T13:24:00.303196Z","last_seen":"2025-12-31T13:24:00.303196Z","times_seen":1,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xnxx2.org/out/300x250footer.php","fqdn":"xnxx2.org","domain":"xnxx2.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://xnxx2.org/","date":"2025-12-31T13:23:30.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xnxx2.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 23:03:40 GMT","end":"Mon, 09 Feb 2026 00:02:04 GMT"},"fingerprint":{"sha1":"3B:A5:14:50:4A:4C:BA:8D:5F:95:D5:48:08:4D:46:B3:2C:60:95:6A","sha256":"DD:2C:A1:30:88:33:C2:0F:73:B9:C7:3A:E0:9C:AF:9F:FA:77:E5:4D:04:C3:CB:E5:B5:55:15:EE:44:1F:EF:17"}}},"request":{"raw":"GET /out/300x250footer.php HTTP/1.1\r\nHost: xnxx2.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 31 Dec 2025 13:23:30 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2j3YhNDX9WvHZge9VlautWJ3%2FWgCJH57TJQny%2BJrhwUDT9TLBriDq8QPCd8JJKRzo7BRS1MbZ7fXqxkC9nNrtmkeJHFVCFY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9b6a1784bc7e56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15765,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (8570)","md5":"736fbcc39f22df3d63165b26bfb91c3c","sha1":"d1be33b130626dca63190f62f2be8039f6e3bb62","sha256":"f401437785e2025d1953d68c7c0cfc84882c7036d9eac67c6e3d20bd779804ab","sha512":"a4cd44981b3a08d3e4f68c38982788d31736fb00173af2755964ea2606c70ee1489330f99ba020c03e79cb5bb5a6fef38bcc18a5a9480b0c0307f924ddd89c71","ssdeep":"384:uTrBWWXvFBn/iPXy2WjeD5c2qfRxBGORUkU6ZDGNCZ0xy24mWk28CgopORi:03fGXrWjsqfRbGObGNCZ0xy24mWbpTpN","tlshash":"56622bb5b343ed6683a88cc551bf6a30f03a9a053509c494f5adacc73866685d2b3f3d","first_seen":"2025-10-22T18:46:53.927341Z","last_seen":"2026-04-05T07:57:09.183191Z","times_seen":23,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/fc/ed/b7/fcedb7f0d5ece40b59225d25dbe59914-2/fcedb7f0d5ece40b59225d25dbe59914.15.jpg","fqdn":"cdn77-pic.xvideos-cdn.com","domain":"xvideos-cdn.com","tld":"com"},"ip":{"addr":"185.76.9.7","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xnxx2.org/","date":"2025-12-31T13:23:30.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xvideos.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 15 Oct 2025 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3C:93:93:D2:61:40:5B:B9:F9:EB:A2:B0:78:48:57:C0:F2:41:42:42","sha256":"D9:3E:6D:83:C8:0E:74:42:32:A1:4F:A3:9B:CA:3A:9D:E0:D2:60:38:FF:BF:EB:0E:36:AA:3E:41:44:D5:A7:59"}}},"request":{"raw":"GET /videos/thumbs169ll/fc/ed/b7/fcedb7f0d5ece40b59225d25dbe59914-2/fcedb7f0d5ece40b59225d25dbe59914.15.jpg HTTP/1.1\r\nHost: cdn77-pic.xvideos-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 13:23:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5466\r\nx-frame-options: sameorigin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Sun, 27 Nov 2022 11:36:19 GMT\r\ncache-control: max-age=10368000, public\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBuUwJBgHXbGAjAAwBnJIhIwH3psMNAAwBj/Q6lQH3oOEKAA\r\nx-77-nzt-ray: 5451992d0fc02ab0d323556997fb7d06\r\nx-accel-expires: @1775213652\r\nx-accel-date: 1764868967\r\nx-accel-date-max: 1713936969\r\nx-77-cache: HIT\r\nx-77-age: 2318444\r\nserver: CDN77-Turbo\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":5466,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100\", progressive, precision 8, 352x198, components 3","md5":"c74ceaf7e228f16f4987a9bf39630b1e","sha1":"4677cd49e1a49445517f0ef0d2ecd0bf928c9484","sha256":"4eb47dc5046d9931195c37fe90119da4d0e3df4a0c396b25f1bf894bd8846f58","sha512":"339fed9b152542d85616e95de8d0d0530ef020e1a4521a32be26eae84c1fe50be4f76c6d0cbfdbd15985c5960c61cf13a179f48659667728e48e9ed81cf87254","ssdeep":"96:IJiEsoz2fIkxUd40WnKQRyvEh+T88FZcSxptIjrkM36wMgXw3qUnCEzXjF:vcqfjxj0uKDLg8FZcKCrLXNXoB7F","tlshash":"7bb15cfcbf1ee218f2e343be10b8832056755d63a0168a6502545b3dee3f1d4385b963","first_seen":"2025-10-16T21:47:02.026207Z","last_seen":"2025-12-31T13:24:00.304325Z","times_seen":3,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":40,"connect":10,"send":0,"wait":8,"receive":0,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clammyendearedkeg.com/get/2055057?id=2055057\u0026pid=__clb-spot_2055057_prb_1\u0026jp=_clczrpbpbrrfmtkgllgkgu\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.658-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=ZXyVC6HaHR0cHM6Ly94bnh4Mi5vcmcv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=f70Z0ohaHR0cHM6Ly94bnh4Mi5vcmcvb3V0LzMwMHgyNTBmb290ZXIucGhw\u0026afid=5463838951757312\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pkw=0\u0026pi=W1oqmg\u0026pload=1864\u0026rlp=%5B0%2C35%2C76%2C46%2C2130%2C532%2C251%2C424%2C1%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0","fqdn":"clammyendearedkeg.com","domain":"clammyendearedkeg.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xnxx2.org/out/300x250footer.php","date":"2025-12-31T13:23:32.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clammyendearedkeg.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:25:45 GMT","end":"Wed, 21 Jan 2026 14:25:44 GMT"},"fingerprint":{"sha1":"3E:40:9C:04:25:32:1C:4E:63:1E:34:E9:AE:AD:6B:99:46:E3:EF:3C","sha256":"E1:40:5E:3A:D1:13:2B:95:6F:05:23:A1:DF:F7:A8:5B:2A:17:85:46:F0:C3:13:DE:9E:8F:80:B1:A2:8B:1F:D8"}}},"request":{"raw":"GET /get/2055057?id=2055057\u0026pid=__clb-spot_2055057_prb_1\u0026jp=_clczrpbpbrrfmtkgllgkgu\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.658-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=ZXyVC6HaHR0cHM6Ly94bnh4Mi5vcmcv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=f70Z0ohaHR0cHM6Ly94bnh4Mi5vcmcvb3V0LzMwMHgyNTBmb290ZXIucGhw\u0026afid=5463838951757312\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pkw=0\u0026pi=W1oqmg\u0026pload=1864\u0026rlp=%5B0%2C35%2C76%2C46%2C2130%2C532%2C251%2C424%2C1%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: clammyendearedkeg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nCookie: cart=1; cart_p=2; CHCK=1; PTS=; UID=2512310823a6770dbd24204283bb07c043c3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 31 Dec 2025 13:23:32 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Wed, 03 Feb 2027 13:23:32 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Wed, 03 Feb 2027 13:23:32 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6098,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (6098), with no line terminators","md5":"2b416d1eb156d60db48cb431c26258fb","sha1":"e1be397f1a6f7b90e4f4970a54138c92967597b6","sha256":"648974fcf0fcf6863dda63c3bcd6da5ac5e271d3585adbe177628b8af27b7afd","sha512":"8156d983c62d2410bdf7365725a382d4e04fc37c561edca9171754da2921fda1f72f5f6b9bbbf7915fccedeff6c6e4e3d5b9a39430bd5392fdcca1813cb81131","ssdeep":"96:V/zTbB6AKmcX3PtKzTbB6AKmcX3PtJzTbB6AKmcX3PtmzTbB6AKmcX3PtvEvsLC2:V/zXB6bX1KzXB6bX1JzXB6bX1mzXB6b3","tlshash":"fac12a94b64bc87954a00850d1b9bf3d4e831cb2ff640e08064e6dddc7988ff7716a9a","first_seen":"2025-12-31T13:24:00.30499Z","last_seen":"2025-12-31T13:24:00.30499Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.clammyendearedkeg.com/static/video/bn/24b/e55/095/24be550950a7c6fb20244a506c13acd5ded0f432.mp4","fqdn":"www.clammyendearedkeg.com","domain":"clammyendearedkeg.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://xnxx2.org/out/300x250footer.php","date":"2025-12-31T13:23:33.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clammyendearedkeg.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:25:45 GMT","end":"Wed, 21 Jan 2026 14:25:44 GMT"},"fingerprint":{"sha1":"3E:40:9C:04:25:32:1C:4E:63:1E:34:E9:AE:AD:6B:99:46:E3:EF:3C","sha256":"E1:40:5E:3A:D1:13:2B:95:6F:05:23:A1:DF:F7:A8:5B:2A:17:85:46:F0:C3:13:DE:9E:8F:80:B1:A2:8B:1F:D8"}}},"request":{"raw":"GET /static/video/bn/24b/e55/095/24be550950a7c6fb20244a506c13acd5ded0f432.mp4 HTTP/1.1\r\nHost: www.clammyendearedkeg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Wed, 31 Dec 2025 13:23:33 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 153602\r\nlast-modified: Mon, 15 Dec 2025 18:52:34 GMT\r\netag: \"694058f2-25802\"\r\nexpires: Sun, 01 Mar 2026 13:23:33 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-expose-headers: Last-Modified\r\ncontent-range: bytes 0-153601/153602\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":153602,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"04d2bfd50d9359a53ed9531684e9da96","sha1":"24be550950a7c6fb20244a506c13acd5ded0f432","sha256":"647163abd604e867cca1fed5bdcb521f50121eee154b80596e62c9c37f146a35","sha512":"5e55e24b39958657fa25d6e2707d7c7f3a68e1487041bb7262c91c180eccc3a75a4028b5b7d0f80bc6b1fab9063d99411a5cdb638d428a4230cbb0a83e37a69c","ssdeep":"1536:5KHRxmfOPN5bHRrg7C9UKFethHwr/hYhZ4e3dn:5cmoNzg7ChF0wLh0nn","tlshash":"4ce3e1295ea26882f34cf37e48a1c829caf35363c4d6e14b788f49584f35225476f977","first_seen":"2025-08-25T16:09:43.16385Z","last_seen":"2026-04-15T01:00:15.515734Z","times_seen":326,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ic-vt-lm.xhcdn.com/b/NzEyZmE0ZDA0Zjk0YWZjNTkwMDEyMzQ4YzRiNWM3MDQ/s(w:320,h:240,f:cv)/010/250/182/v2/1280x720.207.jpg","fqdn":"ic-vt-lm.xhcdn.com","domain":"xhcdn.com","tld":"com"},"ip":{"addr":"88.208.45.217","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xnxx2.org/","date":"2025-12-31T13:23:30.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.xhcdn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 06:37:20 GMT","end":"Mon, 02 Feb 2026 06:37:19 GMT"},"fingerprint":{"sha1":"93:4B:9A:AD:37:AA:70:4E:E5:A0:C6:BE:16:3C:B5:FA:71:F4:52:09","sha256":"6A:6E:09:AB:96:6A:66:D8:9E:69:F6:F3:95:FE:62:2D:2B:D1:93:FE:81:FD:63:15:8C:EF:3B:39:17:48:0B:17"}}},"request":{"raw":"GET /b/NzEyZmE0ZDA0Zjk0YWZjNTkwMDEyMzQ4YzRiNWM3MDQ/s(w:320,h:240,f:cv)/010/250/182/v2/1280x720.207.jpg HTTP/1.1\r\nHost: ic-vt-lm.xhcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Wed, 31 Dec 2025 13:23:31 GMT\r\nContent-Type: text/html\r\nContent-Length: 178\r\nConnection: keep-alive\r\nLocation: https://ic-vt-nss.xhcdn.com/b/NzEyZmE0ZDA0Zjk0YWZjNTkwMDEyMzQ4YzRiNWM3MDQ/s(w:320,h:240,f:cv)/010/250/182/v2/1280x720.207.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8510,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T12:23:02.643109Z","times_seen":13933290,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":1,"connect":20,"send":0,"wait":21,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clammyendearedkeg.com/bn.js","fqdn":"clammyendearedkeg.com","domain":"clammyendearedkeg.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xnxx2.org/out/300x250footer.php","date":"2025-12-31T13:23:31.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clammyendearedkeg.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:25:45 GMT","end":"Wed, 21 Jan 2026 14:25:44 GMT"},"fingerprint":{"sha1":"3E:40:9C:04:25:32:1C:4E:63:1E:34:E9:AE:AD:6B:99:46:E3:EF:3C","sha256":"E1:40:5E:3A:D1:13:2B:95:6F:05:23:A1:DF:F7:A8:5B:2A:17:85:46:F0:C3:13:DE:9E:8F:80:B1:A2:8B:1F:D8"}}},"request":{"raw":"GET /bn.js HTTP/1.1\r\nHost: clammyendearedkeg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 31 Dec 2025 13:23:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 24 Dec 2025 12:35:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694bde26-29ad2\"\r\nexpires: Wed, 07 Jan 2026 13:23:31 GMT\r\ncache-control: max-age=604800\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":170706,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2d158e92e83d6c8a70cc928e23060ce7","sha1":"a3bfddb1307774261e73ab9d2486438504b35084","sha256":"44f722d75c727be078a5931dd3497aacf652ba8c6eb3097176599d06aac160a9","sha512":"1d4c7db82aed070da74c04af696f6ff716b1de4097cdb46ff681926e43691f1a72279569b98dab6562736b6c1c167ea2a20b3a6d0dfe1b8543c9037f1312cd22","ssdeep":"3072:YY3td0G485lbLLPY0QkWGENs6kmJNdRVJG:9d05QlbLTofgg/dVG","tlshash":"caf3c7deb74528361156b0390f2fdf34a6a5e8d2b88d8474e0e3c0ec787c996e193b65","first_seen":"2025-12-24T15:48:22.966068Z","last_seen":"2026-01-11T23:52:13.961648Z","times_seen":225,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":96,"dns":37,"connect":17,"send":0,"wait":34,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xnxx2.org/favicon.ico","fqdn":"xnxx2.org","domain":"xnxx2.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xnxx2.org/","date":"2025-12-31T13:23:31.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xnxx2.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 23:03:40 GMT","end":"Mon, 09 Feb 2026 00:02:04 GMT"},"fingerprint":{"sha1":"3B:A5:14:50:4A:4C:BA:8D:5F:95:D5:48:08:4D:46:B3:2C:60:95:6A","sha256":"DD:2C:A1:30:88:33:C2:0F:73:B9:C7:3A:E0:9C:AF:9F:FA:77:E5:4D:04:C3:CB:E5:B5:55:15:EE:44:1F:EF:17"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: xnxx2.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nCookie: _ym_uid=1767187411825938930; _ym_d=1767187411\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 31 Dec 2025 13:23:32 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MsBDawvUOAibs70JKQk4KR9eTgNliw5NhzLXoRJRSHOVzMq8ilUaheI5SvpZabubYboj5nkV3KxPArJscBzhAbzAP0DMYpk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9b6a178cdbcd56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"998368d7c95ea4293237f2320546e440","sha1":"30dfd2d3bb8a7e3241bd7792e90a98ebb70be3a4","sha256":"533a1ca5d6595793725bca7641d9461a0f00dd1732dded3e4281196f5dd21736","sha512":"648c4720a85dbf834be1ba00f0e1b4167cc670fe15896efb00a77fb6e0c225a13aae3da10d85fa6e7f726420d9bb3c20c43466e02296d44153c127b7160e0b97","ssdeep":"","tlshash":"4fc02b2d7513bc4cc563317832c37080c0c6833769bb4112c440800331cf2998bc3397","first_seen":"2023-04-06T02:01:38Z","last_seen":"2026-04-19T09:02:24.355319Z","times_seen":4233,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xnxx2.org/out/a","fqdn":"xnxx2.org","domain":"xnxx2.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xnxx2.org/","date":"2025-12-31T13:23:32.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xnxx2.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 23:03:40 GMT","end":"Mon, 09 Feb 2026 00:02:04 GMT"},"fingerprint":{"sha1":"3B:A5:14:50:4A:4C:BA:8D:5F:95:D5:48:08:4D:46:B3:2C:60:95:6A","sha256":"DD:2C:A1:30:88:33:C2:0F:73:B9:C7:3A:E0:9C:AF:9F:FA:77:E5:4D:04:C3:CB:E5:B5:55:15:EE:44:1F:EF:17"}}},"request":{"raw":"POST /out/a HTTP/1.1\r\nHost: xnxx2.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 88\r\nOrigin: https://xnxx2.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nCookie: _ym_uid=1767187411825938930; _ym_d=1767187411; UGVyc2lzdFN0b3JhZ2U=%7B%7D; _ym_isad=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":88,"data":"{\"ref\":\"\",\"url\":\"https://xnxx2.org/\",\"type\":\"index\",\"uid\":\"\",\"tag\":\"\",\"t\":1767187412560}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 31 Dec 2025 13:23:32 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-frame-options: SAMEORIGIN\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: Sat, 26 Jul 1997 05:00:00 GMT\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nX8rnXz3YDacf35sRuojjNkZpHttzBaYxF7QXi0kDNO5JGLRbP8JlvccMNM9mj1xdq8oNoXikCvLXPLNUbGEpQUvJDYTaHU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9b6a17908f3256cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T12:23:02.643109Z","times_seen":13933290,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"playhubconnect.com/bn/24b/e55/095/24be550950a7c6fb20244a506c13acd5ded0f432.mp4","fqdn":"playhubconnect.com","domain":"playhubconnect.com","tld":"com"},"ip":{"addr":"104.18.14.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://xnxx2.org/out/300x250footer.php","date":"2025-12-31T13:23:33.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playhubconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 04:50:46 GMT","end":"Wed, 11 Feb 2026 05:50:34 GMT"},"fingerprint":{"sha1":"08:40:B9:AE:36:A1:74:E1:BA:0F:75:D5:97:DA:7B:24:68:4A:EC:AF","sha256":"A8:FB:61:7B:C9:91:75:23:4D:3A:56:E0:47:39:85:A1:36:66:5A:69:9F:F6:18:D0:70:9B:87:10:19:BC:7D:0D"}}},"request":{"raw":"GET /bn/24b/e55/095/24be550950a7c6fb20244a506c13acd5ded0f432.mp4 HTTP/1.1\r\nHost: playhubconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Wed, 31 Dec 2025 13:23:33 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 153602\r\ncf-ray: 9b6a1795496f2678-OSL\r\nx-amz-id-2: HjuIOPuHWoHjRvobiLi/Orkx2IjN0KKHfdv3J6Pgx63kDreXGngj79nuD0ttV/n6wKVMxo7LXnc=\r\nx-amz-request-id: 8BDHCMTRR16C8564\r\nlast-modified: Thu, 10 Jul 2025 14:05:43 GMT\r\netag: \"04d2bfd50d9359a53ed9531684e9da96\"\r\nx-amz-server-side-encryption: AES256\r\nage: 457568\r\ncontent-range: bytes 0-153601/153602\r\nexpires: Sat, 31 Jan 2026 13:23:33 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":153602,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"04d2bfd50d9359a53ed9531684e9da96","sha1":"24be550950a7c6fb20244a506c13acd5ded0f432","sha256":"647163abd604e867cca1fed5bdcb521f50121eee154b80596e62c9c37f146a35","sha512":"5e55e24b39958657fa25d6e2707d7c7f3a68e1487041bb7262c91c180eccc3a75a4028b5b7d0f80bc6b1fab9063d99411a5cdb638d428a4230cbb0a83e37a69c","ssdeep":"1536:5KHRxmfOPN5bHRrg7C9UKFethHwr/hYhZ4e3dn:5cmoNzg7ChF0wLh0nn","tlshash":"4ce3e1295ea26882f34cf37e48a1c829caf35363c4d6e14b788f49584f35225476f977","first_seen":"2025-08-25T16:09:43.16385Z","last_seen":"2026-04-15T01:00:15.515734Z","times_seen":326,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"playhubconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clammyendearedkeg.com/jserror?type=banner_static\u0026bavar=0\u0026build=1.0.658\u0026zoneid=\u0026e=Error\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Fxnxx2.org%2Fout%2F300x250footer.php","fqdn":"clammyendearedkeg.com","domain":"clammyendearedkeg.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xnxx2.org/out/300x250footer.php","date":"2025-12-31T13:23:33.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clammyendearedkeg.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:25:45 GMT","end":"Wed, 21 Jan 2026 14:25:44 GMT"},"fingerprint":{"sha1":"3E:40:9C:04:25:32:1C:4E:63:1E:34:E9:AE:AD:6B:99:46:E3:EF:3C","sha256":"E1:40:5E:3A:D1:13:2B:95:6F:05:23:A1:DF:F7:A8:5B:2A:17:85:46:F0:C3:13:DE:9E:8F:80:B1:A2:8B:1F:D8"}}},"request":{"raw":"GET /jserror?type=banner_static\u0026bavar=0\u0026build=1.0.658\u0026zoneid=\u0026e=Error\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Fxnxx2.org%2Fout%2F300x250footer.php HTTP/1.1\r\nHost: clammyendearedkeg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nCookie: cart=1; cart_p=2; CHCK=1; PTS=; UID=2512310823a6770dbd24204283bb07c043c3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 31 Dec 2025 13:23:33 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T12:23:02.643109Z","times_seen":13933290,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/5.9.0/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xnxx2.org/","date":"2025-12-31T13:23:30.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/font-awesome/5.9.0/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xnxx2.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 13:23:30 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 75440\r\ncf-ray: 9b6a17850f773181-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"5eb03e60-126b0\"\r\nlast-modified: Mon, 04 May 2020 16:10:08 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1004769\r\nexpires: Mon, 21 Dec 2026 13:23:30 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=7ViEELklnyfb9ROMV54nB4QkvkwKbjlsyXIxv1%2BmqRa0G2IZv14kHi7cjPkkIjOHF8oowIUcKaeHNdZkFPUiI4gr074e0iwOHCgQtCGxyLRvCHX3YO4fkV5ksZOYT2d5K6ZCj2A9\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75440,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 75440, version 329.-1049","md5":"b5cf8ae26748570d8fb95a47f46b69e1","sha1":"07bed153d47f9129a944ee54dd72952deed074c8","sha256":"cd398be1a91817126cef10224738e624358edf6f08043abad7e60c1aaeccc8d0","sha512":"f08b9289695cf530094f076b2df4d2b0e1a1daedd00190d123b4179b2c1a1b5e8b2bb988d86fc6dc9eee117d88a58dd5b6dfe7689586c17068f5d2da01904d76","ssdeep":"1536:1Zq/f5ldhNurIqp+jqNT5Fm653lqWppat1Wa4W8TeodjxNrqM:1kvdS7ppFm6JhpgkrW6bGM","tlshash":"6f73028e1719f192f5d6cd177edc20be38f1a7121008f839e2eda6dd5085ab639a3825","first_seen":"2023-04-05T08:48:24Z","last_seen":"2026-04-19T11:46:25.262907Z","times_seen":20130,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.clammyendearedkeg.com/static/video/bn/24b/e55/095/24be550950a7c6fb20244a506c13acd5ded0f432.mp4","fqdn":"www.clammyendearedkeg.com","domain":"clammyendearedkeg.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://xnxx2.org/out/300x250footer.php","date":"2025-12-31T13:23:33.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clammyendearedkeg.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:25:45 GMT","end":"Wed, 21 Jan 2026 14:25:44 GMT"},"fingerprint":{"sha1":"3E:40:9C:04:25:32:1C:4E:63:1E:34:E9:AE:AD:6B:99:46:E3:EF:3C","sha256":"E1:40:5E:3A:D1:13:2B:95:6F:05:23:A1:DF:F7:A8:5B:2A:17:85:46:F0:C3:13:DE:9E:8F:80:B1:A2:8B:1F:D8"}}},"request":{"raw":"GET /static/video/bn/24b/e55/095/24be550950a7c6fb20244a506c13acd5ded0f432.mp4 HTTP/1.1\r\nHost: www.clammyendearedkeg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Wed, 31 Dec 2025 13:23:33 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 153602\r\nlast-modified: Mon, 15 Dec 2025 18:52:34 GMT\r\netag: \"694058f2-25802\"\r\nexpires: Sun, 01 Mar 2026 13:23:33 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-expose-headers: Last-Modified\r\ncontent-range: bytes 0-153601/153602\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":153602,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"04d2bfd50d9359a53ed9531684e9da96","sha1":"24be550950a7c6fb20244a506c13acd5ded0f432","sha256":"647163abd604e867cca1fed5bdcb521f50121eee154b80596e62c9c37f146a35","sha512":"5e55e24b39958657fa25d6e2707d7c7f3a68e1487041bb7262c91c180eccc3a75a4028b5b7d0f80bc6b1fab9063d99411a5cdb638d428a4230cbb0a83e37a69c","ssdeep":"1536:5KHRxmfOPN5bHRrg7C9UKFethHwr/hYhZ4e3dn:5cmoNzg7ChF0wLh0nn","tlshash":"4ce3e1295ea26882f34cf37e48a1c829caf35363c4d6e14b788f49584f35225476f977","first_seen":"2025-08-25T16:09:43.16385Z","last_seen":"2026-04-15T01:00:15.515734Z","times_seen":326,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ic-vt-lm.xhcdn.com/b/YjE3YzMxY2RiMWE2NDE5YTNlYzJhMjlkYTdhOGE5NWY/s(w:320,h:240,f:cv)/011/992/967/v2/1280x720.209.jpg","fqdn":"ic-vt-lm.xhcdn.com","domain":"xhcdn.com","tld":"com"},"ip":{"addr":"88.208.45.217","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xnxx2.org/","date":"2025-12-31T13:23:30.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.xhcdn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 06:37:20 GMT","end":"Mon, 02 Feb 2026 06:37:19 GMT"},"fingerprint":{"sha1":"93:4B:9A:AD:37:AA:70:4E:E5:A0:C6:BE:16:3C:B5:FA:71:F4:52:09","sha256":"6A:6E:09:AB:96:6A:66:D8:9E:69:F6:F3:95:FE:62:2D:2B:D1:93:FE:81:FD:63:15:8C:EF:3B:39:17:48:0B:17"}}},"request":{"raw":"GET /b/YjE3YzMxY2RiMWE2NDE5YTNlYzJhMjlkYTdhOGE5NWY/s(w:320,h:240,f:cv)/011/992/967/v2/1280x720.209.jpg HTTP/1.1\r\nHost: ic-vt-lm.xhcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Wed, 31 Dec 2025 13:23:31 GMT\r\nContent-Type: text/html\r\nContent-Length: 178\r\nConnection: keep-alive\r\nLocation: https://ic-vt-nss.xhcdn.com/b/YjE3YzMxY2RiMWE2NDE5YTNlYzJhMjlkYTdhOGE5NWY/s(w:320,h:240,f:cv)/011/992/967/v2/1280x720.209.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9941,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T12:23:02.643109Z","times_seen":13933290,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":1,"connect":17,"send":0,"wait":32,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/25/2b/0a/252b0a1432120241b7a9f0dc19ca96ee-2/252b0a1432120241b7a9f0dc19ca96ee.15.jpg","fqdn":"cdn77-pic.xvideos-cdn.com","domain":"xvideos-cdn.com","tld":"com"},"ip":{"addr":"185.76.9.7","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xnxx2.org/","date":"2025-12-31T13:23:30.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xvideos.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 15 Oct 2025 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3C:93:93:D2:61:40:5B:B9:F9:EB:A2:B0:78:48:57:C0:F2:41:42:42","sha256":"D9:3E:6D:83:C8:0E:74:42:32:A1:4F:A3:9B:CA:3A:9D:E0:D2:60:38:FF:BF:EB:0E:36:AA:3E:41:44:D5:A7:59"}}},"request":{"raw":"GET /videos/thumbs169ll/25/2b/0a/252b0a1432120241b7a9f0dc19ca96ee-2/252b0a1432120241b7a9f0dc19ca96ee.15.jpg HTTP/1.1\r\nHost: cdn77-pic.xvideos-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 13:23:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6474\r\nx-frame-options: sameorigin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Wed, 23 Nov 2022 23:51:52 GMT\r\ncache-control: max-age=10368000, public\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwgBuUwJBgFBDAElE8JAAffzESQADAFtPVqnAfcJNQAA\r\nx-77-nzt-ray: 5451992d0fc02ab0d32355696a2baa04\r\nx-accel-expires: @1775191520\r\nx-accel-date: 1764823520\r\nx-accel-date-max: 1754452489\r\nx-77-cache: HIT\r\nx-77-age: 2363891\r\nserver: CDN77-Turbo\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":6474,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100\", progressive, precision 8, 352x198, components 3","md5":"cf61571bcc8ca033822fb996ac6750c8","sha1":"891cdca3d58347af27c1390af80771bb4eda96ae","sha256":"3593dd2a222210029735dc80bc3b9ad853767a04ae0342b9d14e55fee7c2aedb","sha512":"b896662b9ca39d704440928fddeaeeda7929797f3a5c8cd0b9a267415248d04ded178c9e501c079554388cf5e4c44f8353edc1d2a58112b50d20860ee7eda941","ssdeep":"192:vgjfoTyx0wtwC0IdfUgjK20ZKcvt8Tr6YKjTq1:IjwODwCJTe20ReWri","tlshash":"03d1ae0267526601deb96e7819db73a1af1dfb1ab113cbf8220b51f51e5770828c6378","first_seen":"2025-12-31T13:24:00.308021Z","last_seen":"2025-12-31T13:24:00.308021Z","times_seen":1,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":80,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ic-vt-nss.xhcdn.com/b/NzEyZmE0ZDA0Zjk0YWZjNTkwMDEyMzQ4YzRiNWM3MDQ/s(w:320,h:240,f:cv)/010/250/182/v2/1280x720.207.jpg","fqdn":"ic-vt-nss.xhcdn.com","domain":"xhcdn.com","tld":"com"},"ip":{"addr":"185.76.9.4","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xnxx2.org/","date":"2025-12-31T13:23:31.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1483870901.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 16:37:13 GMT","end":"Wed, 28 Jan 2026 16:37:12 GMT"},"fingerprint":{"sha1":"78:18:E2:15:BA:2E:3E:79:74:7F:F9:6E:B5:8E:85:27:E1:15:97:33","sha256":"74:3C:65:25:19:05:F4:EF:59:43:7E:44:5F:89:0D:4C:41:68:D4:BF:EF:81:C3:4A:10:15:25:25:99:D6:1F:E7"}}},"request":{"raw":"GET /b/NzEyZmE0ZDA0Zjk0YWZjNTkwMDEyMzQ4YzRiNWM3MDQ/s(w:320,h:240,f:cv)/010/250/182/v2/1280x720.207.jpg HTTP/1.1\r\nHost: ic-vt-nss.xhcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xnxx2.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 13:23:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8510\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: rsic-kube0018\r\ncache-control: max-age=604800\r\nexpires: Mon, 05 Jan 2026 16:46:09 GMT\r\nx-rsic-responder: rsic-kube0020\r\nx-envoy-upstream-service-time: 9\r\ntiming-allow-origin: *\r\nx-77-nzt: EgwBuUwJAQH3rlsCAAwBnJIhLgH31BcAAA\r\nx-77-nzt-ray: 56376635560d02a9d32355699a5e8f33\r\nx-77-cache: HIT\r\nx-77-age: 154542\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":8510,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 240x240, components 3","md5":"1cac1304bfa0b04a221e60e8a2dab7c8","sha1":"63c96f9cfe45aa1a66b2ec76e34a892b1437a684","sha256":"805f6956be2f5a847ce8fe590d0142abf8cb7c87ffdd4bbb07d683deaaf1f42c","sha512":"eaf3d421d2fbfca41168d9a4641299f25d331f513a3ff4137b4ac7af37cc1b50c3ede14ca16803a771c8752d0aed2ca262ed0e69d0d71a3c79955c80f109d77b","ssdeep":"192:N4zf+V/+lkzlBzSomU+poUO0jGN2akN8Gkk:N4zZylBzSowFOhPknkk","tlshash":"61029e0932e8cfe6c720e7385416a327bf0eba297664f75f0617499c6c520dac85d65c","first_seen":"2025-10-16T21:47:02.088298Z","last_seen":"2025-12-31T13:24:00.309432Z","times_seen":3,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":99,"dns":55,"connect":12,"send":0,"wait":14,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clammyendearedkeg.com/check.html","fqdn":"clammyendearedkeg.com","domain":"clammyendearedkeg.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://xnxx2.org/out/300x250footer.php","date":"2025-12-31T13:23:32.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clammyendearedkeg.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:25:45 GMT","end":"Wed, 21 Jan 2026 14:25:44 GMT"},"fingerprint":{"sha1":"3E:40:9C:04:25:32:1C:4E:63:1E:34:E9:AE:AD:6B:99:46:E3:EF:3C","sha256":"E1:40:5E:3A:D1:13:2B:95:6F:05:23:A1:DF:F7:A8:5B:2A:17:85:46:F0:C3:13:DE:9E:8F:80:B1:A2:8B:1F:D8"}}},"request":{"raw":"GET /check.html HTTP/1.1\r\nHost: clammyendearedkeg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nCookie: cart=1; cart_p=2\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 31 Dec 2025 13:23:32 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Mon, 24 Nov 2025 08:42:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69241a69-39e\"\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":926,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"088dba8e97eede53134c93219f7ebbae","sha1":"adb707654d1fe0af7d0d7a9f55660d22bd3625e4","sha256":"6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff","sha512":"23a1f87731e8aee4658993cd1ce35ec179fea80b89bf52aca7634488f1bdfcf88b9cabca4859481357a9fee06cbb49df64bbe0878b1dae0e5df4fa34003c6d80","ssdeep":"","tlshash":"6211d04934e1684c1127a6301597a2183c32a40315cbd949fb9cd7301f815a7dc596df","first_seen":"2024-11-22T16:59:41.974716Z","last_seen":"2026-03-04T10:11:28.020186Z","times_seen":13721,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clammyendearedkeg.com/check.html","fqdn":"clammyendearedkeg.com","domain":"clammyendearedkeg.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://xnxx2.org/out/300x250footer.php","date":"2025-12-31T13:23:32.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clammyendearedkeg.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:25:45 GMT","end":"Wed, 21 Jan 2026 14:25:44 GMT"},"fingerprint":{"sha1":"3E:40:9C:04:25:32:1C:4E:63:1E:34:E9:AE:AD:6B:99:46:E3:EF:3C","sha256":"E1:40:5E:3A:D1:13:2B:95:6F:05:23:A1:DF:F7:A8:5B:2A:17:85:46:F0:C3:13:DE:9E:8F:80:B1:A2:8B:1F:D8"}}},"request":{"raw":"GET /check.html HTTP/1.1\r\nHost: clammyendearedkeg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nCookie: cart=1; cart_p=2\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 31 Dec 2025 13:23:32 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Mon, 24 Nov 2025 08:42:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69241a69-39e\"\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":926,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"088dba8e97eede53134c93219f7ebbae","sha1":"adb707654d1fe0af7d0d7a9f55660d22bd3625e4","sha256":"6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff","sha512":"23a1f87731e8aee4658993cd1ce35ec179fea80b89bf52aca7634488f1bdfcf88b9cabca4859481357a9fee06cbb49df64bbe0878b1dae0e5df4fa34003c6d80","ssdeep":"","tlshash":"6211d04934e1684c1127a6301597a2183c32a40315cbd949fb9cd7301f815a7dc596df","first_seen":"2024-11-22T16:59:41.974716Z","last_seen":"2026-03-04T10:11:28.020186Z","times_seen":13721,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/yandex-metrica-watch/tag.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xnxx2.org/","date":"2025-12-31T13:23:30.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/yandex-metrica-watch/tag.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 1.423.0\r\nx-jsd-version-type: version\r\netag: W/\"3fe6b-B45OS4IdRNBELSboVQ7vid2Dh5Q\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 31 Dec 2025 13:23:30 GMT\r\nage: 3998\r\nx-served-by: cache-fra-eddf8230126-FRA, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 101778\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":261739,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (676)","md5":"3fe451c4a76f0b05edf97761ff8cacb5","sha1":"e6f396e4d7fcdd1040f4028d93bdb6f1c763ca78","sha256":"44949ed1e7cfb4dd85871c67c024db8f3a622b82fb5d0e7b06e88caeeaa7b000","sha512":"b03aca089ff80ccab7e20766a869e78929050eef041922cf2ca767eb6a17a6968391b019a760cc299d0ac498911cb7eec87c8dae7f419b225fbd8956065e079d","ssdeep":"3072:ksj0LYR6rUiiCRqRV9zdUa3LIgF49XqU8rKigrtsQvCucWzDoo9SVI710:rYLY2iCRqR3bp49XbvrtYucWzD5SVIp0","tlshash":"4344f7dd7682b472537334b4a03f000bb2be6c96f14c8965e185d9d97e789a89237f2c","first_seen":"2025-12-04T23:09:53.86457Z","last_seen":"2026-03-19T22:12:37.047646Z","times_seen":1147,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":66,"dns":1,"connect":26,"send":0,"wait":27,"receive":54,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clammyendearedkeg.com/bn.js","fqdn":"clammyendearedkeg.com","domain":"clammyendearedkeg.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xnxx2.org/out/300x250footer.php","date":"2025-12-31T13:23:31.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clammyendearedkeg.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:25:45 GMT","end":"Wed, 21 Jan 2026 14:25:44 GMT"},"fingerprint":{"sha1":"3E:40:9C:04:25:32:1C:4E:63:1E:34:E9:AE:AD:6B:99:46:E3:EF:3C","sha256":"E1:40:5E:3A:D1:13:2B:95:6F:05:23:A1:DF:F7:A8:5B:2A:17:85:46:F0:C3:13:DE:9E:8F:80:B1:A2:8B:1F:D8"}}},"request":{"raw":"GET /bn.js HTTP/1.1\r\nHost: clammyendearedkeg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 31 Dec 2025 13:23:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 24 Dec 2025 12:35:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694bde26-29ad2\"\r\nexpires: Wed, 07 Jan 2026 13:23:31 GMT\r\ncache-control: max-age=604800\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":170706,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2d158e92e83d6c8a70cc928e23060ce7","sha1":"a3bfddb1307774261e73ab9d2486438504b35084","sha256":"44f722d75c727be078a5931dd3497aacf652ba8c6eb3097176599d06aac160a9","sha512":"1d4c7db82aed070da74c04af696f6ff716b1de4097cdb46ff681926e43691f1a72279569b98dab6562736b6c1c167ea2a20b3a6d0dfe1b8543c9037f1312cd22","ssdeep":"3072:YY3td0G485lbLLPY0QkWGENs6kmJNdRVJG:9d05QlbLTofgg/dVG","tlshash":"caf3c7deb74528361156b0390f2fdf34a6a5e8d2b88d8474e0e3c0ec787c996e193b65","first_seen":"2025-12-24T15:48:22.966068Z","last_seen":"2026-01-11T23:52:13.961648Z","times_seen":225,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":99,"dns":36,"connect":20,"send":0,"wait":54,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/9e/69/04/9e69041727bda45a75a7764f387a1c7e/9e69041727bda45a75a7764f387a1c7e.8.jpg","fqdn":"cdn77-pic.xvideos-cdn.com","domain":"xvideos-cdn.com","tld":"com"},"ip":{"addr":"185.76.9.7","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xnxx2.org/","date":"2025-12-31T13:23:30.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xvideos.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 15 Oct 2025 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3C:93:93:D2:61:40:5B:B9:F9:EB:A2:B0:78:48:57:C0:F2:41:42:42","sha256":"D9:3E:6D:83:C8:0E:74:42:32:A1:4F:A3:9B:CA:3A:9D:E0:D2:60:38:FF:BF:EB:0E:36:AA:3E:41:44:D5:A7:59"}}},"request":{"raw":"GET /videos/thumbs169ll/9e/69/04/9e69041727bda45a75a7764f387a1c7e/9e69041727bda45a75a7764f387a1c7e.8.jpg HTTP/1.1\r\nHost: cdn77-pic.xvideos-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 13:23:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17021\r\nx-frame-options: sameorigin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Thu, 06 Aug 2020 19:59:08 GMT\r\ncache-control: max-age=10368000, public\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBuUwJBgH3KP4hAAwBz9PTEwH3oZ0cAAwBj/Q63QHX72g/AA\r\nx-77-nzt-ray: 5451992d0fc02ab0d323556903a8bb06\r\nx-accel-expires: @1775327520\r\nx-accel-date: 1764959659\r\nx-accel-date-max: 1713640517\r\nx-77-cache: HIT\r\nx-77-age: 2227752\r\nserver: CDN77-Turbo\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":17021,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 352x198, components 3","md5":"6c5c2ff129640f8e4a43b18a7851cb34","sha1":"8103e770fda1cb422cd3e08bf1491bcc0a7be3f0","sha256":"c2d6e3d7f6e0f79bc506762b75a25d0bb889a90f863a06ed50e4684ee241e373","sha512":"7d24b81f703d2f7ed5bf58f9fac3086c161b4c8aaddee87b8ae37dd40e6b32c9b3f5544da7f52aca1bdc8a31300d420d7b5b4f79ae72992f87aee24efd53651f","ssdeep":"384:yLIkjDTZV2ciOrxTiAxAHK64WBPZRiShL09xICcr2Jh5TPYkOt9PuVhx:yLRXZVTtifrRNhLsx15she9","tlshash":"d372d0ed4d401a604a1f1237939d9ac4d8c6c7229d1a6b905bf0035afb68dfef448bf9","first_seen":"2025-10-16T21:47:02.05203Z","last_seen":"2025-12-31T13:24:00.311639Z","times_seen":3,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":163,"dns":48,"connect":10,"send":0,"wait":9,"receive":1,"ssl":87},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumb-v2.xhcdn.com/a/mldP1e-mzrbnzOMStBkTRA/020/205/642/320x240.10.jpg","fqdn":"thumb-v2.xhcdn.com","domain":"xhcdn.com","tld":"com"},"ip":{"addr":"45.133.44.19","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xnxx2.org/","date":"2025-12-31T13:23:30.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thumb-v2.xhcdn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 02:32:54 GMT","end":"Sun, 22 Feb 2026 02:32:53 GMT"},"fingerprint":{"sha1":"95:0E:F1:75:C1:C6:93:3E:E7:94:A3:17:80:DA:BB:BB:F7:B1:6B:2D","sha256":"BB:1C:78:26:0C:4B:60:35:F5:5D:65:F3:29:44:F8:87:E1:73:B2:51:F1:FB:64:9C:A1:2D:AF:11:14:BD:B7:E2"}}},"request":{"raw":"GET /a/mldP1e-mzrbnzOMStBkTRA/020/205/642/320x240.10.jpg HTTP/1.1\r\nHost: thumb-v2.xhcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 13:23:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7418\r\nserver: nginx\r\nlast-modified: Fri, 18 Jun 2021 21:46:02 GMT\r\netag: \"60cd141a-1cfa\"\r\ncache-control: max-age=86400\r\ntiming-allow-origin: *\r\nexpires: Thu, 01 Jan 2026 13:23:31 GMT\r\nx-cdn-host-id: ds9612,DS5859\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7418,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x240, components 3","md5":"179377e78aa52e3a0a378b71123acf5a","sha1":"9a51ab56d766adfc71e34dc3725d20d64aab7826","sha256":"0da76413f14324a833b35e53d3812c652ebdf3f420b6cb48f928d5e01e823a8e","sha512":"3e961dd8020a6cd2c8839ee54120dd2d579cc0a397a9202424e6f0c93a24b2c41cb495081d884e72aebc63b061637406eec2dff844adcef6249ab660346a429e","ssdeep":"96:em516EKx2Tzb9LmH9jQ9F9ii7mqxK06/lvp/k4XPa13wLexci13xeQ03OUd77XLn:Ri2TzilQ/GnX84XPa1jui13fUVm+/8I","tlshash":"83e1af068efdd057f3ed2f30809b6f6d1a286f8319a3912294c0a8741de50cb7e96259","first_seen":"2025-11-12T02:15:34.329227Z","last_seen":"2025-12-31T13:24:00.312934Z","times_seen":3,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":108,"dns":33,"connect":19,"send":0,"wait":23,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clammyendearedkeg.com/check.html","fqdn":"clammyendearedkeg.com","domain":"clammyendearedkeg.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://xnxx2.org/out/300x250footer.php","date":"2025-12-31T13:23:31.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clammyendearedkeg.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:25:45 GMT","end":"Wed, 21 Jan 2026 14:25:44 GMT"},"fingerprint":{"sha1":"3E:40:9C:04:25:32:1C:4E:63:1E:34:E9:AE:AD:6B:99:46:E3:EF:3C","sha256":"E1:40:5E:3A:D1:13:2B:95:6F:05:23:A1:DF:F7:A8:5B:2A:17:85:46:F0:C3:13:DE:9E:8F:80:B1:A2:8B:1F:D8"}}},"request":{"raw":"GET /check.html HTTP/1.1\r\nHost: clammyendearedkeg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 31 Dec 2025 13:23:31 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Mon, 24 Nov 2025 08:42:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69241a69-39e\"\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":926,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"088dba8e97eede53134c93219f7ebbae","sha1":"adb707654d1fe0af7d0d7a9f55660d22bd3625e4","sha256":"6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff","sha512":"23a1f87731e8aee4658993cd1ce35ec179fea80b89bf52aca7634488f1bdfcf88b9cabca4859481357a9fee06cbb49df64bbe0878b1dae0e5df4fa34003c6d80","ssdeep":"","tlshash":"6211d04934e1684c1127a6301597a2183c32a40315cbd949fb9cd7301f815a7dc596df","first_seen":"2024-11-22T16:59:41.974716Z","last_seen":"2026-03-04T10:11:28.020186Z","times_seen":13721,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clammyendearedkeg.com/get/2055057?id=2055057\u0026pid=__clb-spot_2055057_nmt_1\u0026jp=_clnbpjlqceayrbzznypomr\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.658-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=zZmBGaoaHR0cHM6Ly94bnh4Mi5vcmcv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=YRfKe8XaHR0cHM6Ly94bnh4Mi5vcmcvb3V0LzMwMHgyNTBmb290ZXIucGhw\u0026afid=4619414021652992\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pkw=0\u0026pload=1830\u0026rlp=%5B0%2C35%2C75%2C48%2C13%2C349%2C184%2C239%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0","fqdn":"clammyendearedkeg.com","domain":"clammyendearedkeg.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xnxx2.org/out/300x250footer.php","date":"2025-12-31T13:23:32.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clammyendearedkeg.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:25:45 GMT","end":"Wed, 21 Jan 2026 14:25:44 GMT"},"fingerprint":{"sha1":"3E:40:9C:04:25:32:1C:4E:63:1E:34:E9:AE:AD:6B:99:46:E3:EF:3C","sha256":"E1:40:5E:3A:D1:13:2B:95:6F:05:23:A1:DF:F7:A8:5B:2A:17:85:46:F0:C3:13:DE:9E:8F:80:B1:A2:8B:1F:D8"}}},"request":{"raw":"GET /get/2055057?id=2055057\u0026pid=__clb-spot_2055057_nmt_1\u0026jp=_clnbpjlqceayrbzznypomr\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.658-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=zZmBGaoaHR0cHM6Ly94bnh4Mi5vcmcv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=YRfKe8XaHR0cHM6Ly94bnh4Mi5vcmcvb3V0LzMwMHgyNTBmb290ZXIucGhw\u0026afid=4619414021652992\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pkw=0\u0026pload=1830\u0026rlp=%5B0%2C35%2C75%2C48%2C13%2C349%2C184%2C239%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: clammyendearedkeg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nCookie: cart=1; cart_p=2; CHCK=1; PTS=; UID=251231082391580c714914493aa035e7e280\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 31 Dec 2025 13:23:32 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Wed, 03 Feb 2027 13:23:32 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Wed, 03 Feb 2027 13:23:32 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":519,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (519), with no line terminators","md5":"30295d2786083b776428352edb73f71e","sha1":"3cc2006e1f7f1f51a16141a3f5be32e8b2a8d775","sha256":"8e3e2fad9815c7b4d20523204504881acb5d990069b33ec5ef7e1801488a8b53","sha512":"0d3b9a9df3433025b4c525888dd44afc1ad5d420e4251a5ace49d12a5c68c6e396da618705f9a18c517180c73403aa8db3f72c1fe86bfea6000d329cad6033e7","ssdeep":"","tlshash":"22f00e1c6b63c419462678ca067d9d1e28ca48a7df131c1f2480405bc3960facef3905","first_seen":"2025-12-31T13:24:00.313643Z","last_seen":"2025-12-31T13:24:00.313643Z","times_seen":1,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.clammyendearedkeg.com/static/video/bn/24b/e55/095/24be550950a7c6fb20244a506c13acd5ded0f432.mp4","fqdn":"www.clammyendearedkeg.com","domain":"clammyendearedkeg.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://xnxx2.org/out/300x250footer.php","date":"2025-12-31T13:23:33.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clammyendearedkeg.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:25:45 GMT","end":"Wed, 21 Jan 2026 14:25:44 GMT"},"fingerprint":{"sha1":"3E:40:9C:04:25:32:1C:4E:63:1E:34:E9:AE:AD:6B:99:46:E3:EF:3C","sha256":"E1:40:5E:3A:D1:13:2B:95:6F:05:23:A1:DF:F7:A8:5B:2A:17:85:46:F0:C3:13:DE:9E:8F:80:B1:A2:8B:1F:D8"}}},"request":{"raw":"GET /static/video/bn/24b/e55/095/24be550950a7c6fb20244a506c13acd5ded0f432.mp4 HTTP/1.1\r\nHost: www.clammyendearedkeg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Wed, 31 Dec 2025 13:23:33 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 153602\r\nlast-modified: Mon, 15 Dec 2025 18:52:34 GMT\r\netag: \"694058f2-25802\"\r\nexpires: Sun, 01 Mar 2026 13:23:33 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-expose-headers: Last-Modified\r\ncontent-range: bytes 0-153601/153602\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":153602,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"04d2bfd50d9359a53ed9531684e9da96","sha1":"24be550950a7c6fb20244a506c13acd5ded0f432","sha256":"647163abd604e867cca1fed5bdcb521f50121eee154b80596e62c9c37f146a35","sha512":"5e55e24b39958657fa25d6e2707d7c7f3a68e1487041bb7262c91c180eccc3a75a4028b5b7d0f80bc6b1fab9063d99411a5cdb638d428a4230cbb0a83e37a69c","ssdeep":"1536:5KHRxmfOPN5bHRrg7C9UKFethHwr/hYhZ4e3dn:5cmoNzg7ChF0wLh0nn","tlshash":"4ce3e1295ea26882f34cf37e48a1c829caf35363c4d6e14b788f49584f35225476f977","first_seen":"2025-08-25T16:09:43.16385Z","last_seen":"2026-04-15T01:00:15.515734Z","times_seen":326,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xnxx2.org/out/300x250footer.php","fqdn":"xnxx2.org","domain":"xnxx2.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://xnxx2.org/","date":"2025-12-31T13:23:30.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xnxx2.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 23:03:40 GMT","end":"Mon, 09 Feb 2026 00:02:04 GMT"},"fingerprint":{"sha1":"3B:A5:14:50:4A:4C:BA:8D:5F:95:D5:48:08:4D:46:B3:2C:60:95:6A","sha256":"DD:2C:A1:30:88:33:C2:0F:73:B9:C7:3A:E0:9C:AF:9F:FA:77:E5:4D:04:C3:CB:E5:B5:55:15:EE:44:1F:EF:17"}}},"request":{"raw":"GET /out/300x250footer.php HTTP/1.1\r\nHost: xnxx2.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xnxx2.org/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 31 Dec 2025 13:23:30 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nQV%2F9ixAVn1kgD74HeIeReksESGR39JMjd9d2D5I%2Fr1klyTPKOHJQZpJgAbbTb1uPeXp3Mc0u6vaJOsW5aZYXPPETObVCfQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9b6a1784ac6b56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15765,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (8570)","md5":"736fbcc39f22df3d63165b26bfb91c3c","sha1":"d1be33b130626dca63190f62f2be8039f6e3bb62","sha256":"f401437785e2025d1953d68c7c0cfc84882c7036d9eac67c6e3d20bd779804ab","sha512":"a4cd44981b3a08d3e4f68c38982788d31736fb00173af2755964ea2606c70ee1489330f99ba020c03e79cb5bb5a6fef38bcc18a5a9480b0c0307f924ddd89c71","ssdeep":"384:uTrBWWXvFBn/iPXy2WjeD5c2qfRxBGORUkU6ZDGNCZ0xy24mWk28CgopORi:03fGXrWjsqfRbGObGNCZ0xy24mWbpTpN","tlshash":"56622bb5b343ed6683a88cc551bf6a30f03a9a053509c494f5adacc73866685d2b3f3d","first_seen":"2025-10-22T18:46:53.927341Z","last_seen":"2026-04-05T07:57:09.183191Z","times_seen":23,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.webvisor.org/watch/75134221/1?wmode=7\u0026page-url=https%3A%2F%2Fxnxx2.org%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A6dxo56vtzxzyyc4emdpvks38xllgf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2292%3Acn%3A1%3Adp%3A0%3Als%3A1394281546640%3Ahid%3A457231739%3Az%3A0%3Ai%3A20251231132331%3Aet%3A1767187411%3Ac%3A1%3Arn%3A242035318%3Arqn%3A1%3Au%3A1767187411825938930%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A695%3Awv%3A2%3Ads%3A30%2C20%2C111%2C44%2C21%2C0%2C%2C442%2C4%2C%2C%2C%2C712%3Aco%3A0%3Acpf%3A1%3Ans%3A1767187410193%3Afip%3A698841448a2422c7b39663531bcbbde5-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1767187413%3At%3AFree%20XXX%2C%20XNXX%20Sex%20Videos%20for%20Free\u0026t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2883952128%29fip%281%29ti%281%29\u0026redirnss=1","fqdn":"mc.webvisor.org","domain":"webvisor.org","tld":"org"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xnxx2.org/","date":"2025-12-31T13:23:33.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mc.webvisor.com","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 18 Aug 2025 21:05:34 GMT","end":"Mon, 09 Feb 2026 20:59:59 GMT"},"fingerprint":{"sha1":"52:51:83:17:11:3C:6A:D0:47:28:FB:42:75:CF:6A:DA:48:B5:5A:C8","sha256":"69:B8:8D:9D:77:CB:F9:C7:48:04:E2:8C:99:28:7C:EF:5E:C7:2B:43:D6:52:7B:21:D2:99:F6:86:18:A6:0F:80"}}},"request":{"raw":"GET /watch/75134221/1?wmode=7\u0026page-url=https%3A%2F%2Fxnxx2.org%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A6dxo56vtzxzyyc4emdpvks38xllgf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2292%3Acn%3A1%3Adp%3A0%3Als%3A1394281546640%3Ahid%3A457231739%3Az%3A0%3Ai%3A20251231132331%3Aet%3A1767187411%3Ac%3A1%3Arn%3A242035318%3Arqn%3A1%3Au%3A1767187411825938930%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A695%3Awv%3A2%3Ads%3A30%2C20%2C111%2C44%2C21%2C0%2C%2C442%2C4%2C%2C%2C%2C712%3Aco%3A0%3Acpf%3A1%3Ans%3A1767187410193%3Afip%3A698841448a2422c7b39663531bcbbde5-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1767187413%3At%3AFree%20XXX%2C%20XNXX%20Sex%20Videos%20for%20Free\u0026t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2883952128%29fip%281%29ti%281%29\u0026redirnss=1 HTTP/1.1\r\nHost: mc.webvisor.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xnxx2.org\r\nReferer: https://xnxx2.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: yabs-sid=72301841767187412; i=wXnjr/KoAvapeNqUeh3NEtEzTrCxJ8/BEbxjx9Jlyrf09d70M/IplFZyS0VtQM/b7eLInw4Y9c7yzVxFjlY6idwyDoM=; yandexuid=1369600561767187412; yuidss=1369600561767187412; ymex=1798723412.yrts.1767187412#1798723412.yrtsi.1767187412; bh=YNTH1MoGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 645\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: https://xnxx2.org\r\naccess-control-allow-credentials: true\r\npragma: no-cache\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nexpires: Wed, 31-Dec-2025 13:23:33 GMT\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Wed, 31-Dec-2025 13:23:33 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":645,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0dd1783463e811bf88f1f7fb62b63c3e","sha1":"8c5edcf05d9c1d4af8f8931062cd494b8ff31454","sha256":"13a6d58940f648172cc5a3d77df4b8d7fa10f204bf2a2900e27a35d494e6fa62","sha512":"4d613e49c8c436f5742de8330cfb96ec5b15aa493bb4bb5d6ae2c0e8c641751b603de9bdd8d1f52fc27bd0b038c09bc8867f8940aabf0b12ea0b54145c82ef37","ssdeep":"","tlshash":"1cf02360540444f94b169aca687f1403924cf6155ec1c5907590d248c84f9293343ba8","first_seen":"2025-12-31T13:24:00.315136Z","last_seen":"2025-12-31T13:24:00.315136Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xnxx2.org/","fqdn":"xnxx2.org","domain":"xnxx2.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-31T13:23:30.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xnxx2.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 23:03:40 GMT","end":"Mon, 09 Feb 2026 00:02:04 GMT"},"fingerprint":{"sha1":"3B:A5:14:50:4A:4C:BA:8D:5F:95:D5:48:08:4D:46:B3:2C:60:95:6A","sha256":"DD:2C:A1:30:88:33:C2:0F:73:B9:C7:3A:E0:9C:AF:9F:FA:77:E5:4D:04:C3:CB:E5:B5:55:15:EE:44:1F:EF:17"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xnxx2.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 13:23:30 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K9XmHK4Rg2utBPSCUTgtkevIHEvaPMABA5Vvre70GU2m5T%2FMU1v1bt5NEBmxHKyUX7pat6AQ7jn8EatxrlEaHxvFqDqxGMA%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9b6a17822d1f5687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":154207,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (315)","md5":"6aa4f5c7177454c889cfc6033aa74829","sha1":"583412eae989b5e93e059ae2439369cf11afa918","sha256":"251114850bb3ca3ada3867cc8bee4452a687689bf0441ff07636bd1036772ddb","sha512":"5e44251dc353f407585e021914ab39ba7e1400bfa4dfce6c9ef9f5bbfe3eb2865cac1241ebbc39bdefeba247a4a4b8da6b34d895c590f06b5f90b40f28db1b2b","ssdeep":"1536:juVdF5umFaVRIgNVYkvG80Mq+3U11jDd8bTXb3wCW+gLNRsnXG7fOUP7eWvbpGkf:yVsI0Vb/6+y1Hd8Dqrf","tlshash":"99e3a32251f4106b067aa2da1d60b73aaf936097ca5f9e0176bd5fce9f47c428c0718f","first_seen":"2025-12-31T13:24:00.316417Z","last_seen":"2025-12-31T13:24:00.316417Z","times_seen":1,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":51,"dns":30,"connect":1,"send":0,"wait":112,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}