{"report_id":"7fc97222-d198-4207-8af5-cd6ac2233d7f","version":6,"status":"done","tags":[],"date":"2025-12-24T16:24:47Z","url":{"schema":"http","addr":"fido.xhamster-com.pornproxy.art/","fqdn":"fido.xhamster-com.pornproxy.art","domain":"pornproxy.art","tld":"art"},"ip":{"addr":"79.124.60.168","port":0,"asn":50360,"as":"Tamatiya EOOD","country":"Bulgaria","country_code":"BG"},"final":{"url":{"schema":"https","addr":"xhamster-com.pornproxy.art/","fqdn":"xhamster-com.pornproxy.art","domain":"pornproxy.art","tld":"art"},"title":"Free Porn Videos \u0026 XXX Movies: Sex Videos Tube | xHamster","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"fido.xhamster-com.pornproxy.art/","fqdn":"fido.xhamster-com.pornproxy.art","domain":"pornproxy.art","tld":"art"},"ip":{"addr":"79.124.60.168","port":0,"asn":50360,"as":"Tamatiya EOOD","country":"Bulgaria","country_code":"BG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-28T16:24:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"xhamster-com.pornproxy.art","ip":{"addr":"79.124.60.168","port":443,"asn":50360,"as":"Tamatiya EOOD","country":"Bulgaria","country_code":"BG"},"domain_registered":"2021-04-10","domain_rank":0,"first_seen":"2025-08-17T14:15:20.24557Z","last_seen":"2025-12-21T07:57:43.130844Z","alert_count":0,"request_count":2,"received_data":269039,"sent_data":1128,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"static-ah.xhcdn.com","ip":{"addr":"45.133.44.23","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2011-04-20","domain_rank":85744,"first_seen":"2018-08-19T07:09:12Z","last_seen":"2025-12-18T23:39:14.211187Z","alert_count":0,"request_count":15,"received_data":1224609,"sent_data":7508,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"image.imagexox.com","ip":{"addr":"104.26.2.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-13","domain_rank":1712261,"first_seen":"2025-07-13T23:40:26.691688Z","last_seen":"2025-12-17T01:41:19.472163Z","alert_count":0,"request_count":6,"received_data":358694,"sent_data":3514,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cordbraghare.com","ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-10-15","domain_rank":0,"first_seen":"2025-10-17T05:20:11.255078Z","last_seen":"2025-12-20T15:54:06.917627Z","alert_count":6,"request_count":2,"received_data":198352,"sent_data":920,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"static-nss.xhcdn.com","ip":{"addr":"185.76.9.4","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2011-04-20","domain_rank":66985,"first_seen":"2024-02-12T13:02:08Z","last_seen":"2025-12-18T23:39:13.451959Z","alert_count":0,"request_count":2,"received_data":7570,"sent_data":970,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"fido.xhamster-com.pornproxy.art","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":268978,"sent_data":916,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"vmuid.com","ip":{"addr":"178.162.215.162","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2018-10-22","domain_rank":182910,"first_seen":"2019-07-09T14:53:12Z","last_seen":"2025-12-18T15:48:37.9365Z","alert_count":0,"request_count":1,"received_data":10466,"sent_data":459,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"xhamster-com.pornproxy.art/","fqdn":"xhamster-com.pornproxy.art","domain":"pornproxy.art","tld":"art"},"ip":{"addr":"79.124.60.168","port":443,"asn":50360,"as":"Tamatiya EOOD","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-24T16:24:23.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pornproxy.art","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 04 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"34:98:DA:EF:BD:51:0F:FA:C0:7E:8D:F3:85:A9:0F:F3:74:94:33:AB","sha256":"C6:FB:DF:54:76:7A:90:37:60:35:67:CB:B2:AA:3D:0C:4C:74:07:B1:94:5A:7F:D9:A6:66:95:47:EC:42:52:A8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xhamster-com.pornproxy.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 24 Dec 2025 16:24:23 GMT\r\nset-cookie: view=1; expires=Thu, 25-Dec-2025 16:24:23 GMT; Max-Age=86400\nPHPSESSID=m0hmk9ab0rabp5374pcp6a5lj0; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]}],"data":{"size":268538,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (57474)","md5":"3dd079ca289bfddd2ae90df61327e7b0","sha1":"54b09760c78d6c274072d7aecc31575e807501b2","sha256":"1d0b1092623e8c1cc658cda3e3a6a8f09743e8575cd15984eb551c58c4063108","sha512":"efd7ef5a2cf61fea5d330a0266466594fa1ad1aae5bd4b80207423e83b14865afb3ad13bf6c6ab9bd737895efc72aa997ab2563cdf2fbfb3eb869efd6cbca35f","ssdeep":"1536:sglZ7Kiszi1iHi1iIi0ijbkRWGeOW+y2YiU64pvZP36U0sVnzBFogLi7h/sUE6P5:bcIC0H7xgLiJzygoc6b6XlV8ACAzZ","tlshash":"8944a672a7703d2a89fa72d6d94e3e488b4b9c23fc40f99196cc5a8415decfe7012536","first_seen":"2025-12-24T16:24:53.88265Z","last_seen":"2025-12-24T16:24:53.88265Z","times_seen":1,"resource_available":false,"data":null}},"time_used":602,"timings":{"blocked":169,"dns":54,"connect":52,"send":0,"wait":262,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-ah.xhcdn.com/xh-mobile/css/v54fab26979.index.css","fqdn":"static-ah.xhcdn.com","domain":"xhcdn.com","tld":"com"},"ip":{"addr":"45.133.44.23","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xhamster-com.pornproxy.art/","date":"2025-12-24T16:24:23.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-ah.xhcdn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 02:32:25 GMT","end":"Sun, 22 Feb 2026 02:32:24 GMT"},"fingerprint":{"sha1":"7B:F2:E0:21:13:37:93:2F:13:4B:AF:45:C9:20:3E:6D:21:68:25:63","sha256":"59:8A:65:99:A9:96:ED:19:C7:CB:14:05:E0:41:CC:43:A2:76:8C:70:0A:21:E8:1D:70:D0:73:07:BF:C0:3D:6D"}}},"request":{"raw":"GET /xh-mobile/css/v54fab26979.index.css HTTP/1.1\r\nHost: static-ah.xhcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xhamster-com.pornproxy.art\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.pornproxy.art/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 16:24:23 GMT\r\ncontent-type: text/css\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: rsic-kube0020\r\nx-rsic-pass: yes\r\ncache-control: max-age=86400\r\nx-rsic-responder: rsic-kube0020\r\nx-envoy-upstream-service-time: 2\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nexpires: Thu, 25 Dec 2025 16:24:23 GMT\r\nx-cdn-host-id: DS9201,DS9225\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":112242,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e8763020f93b65c01113eeac782f5e2d","sha1":"54fab269798c4d69f674be8b823348edefe2fab1","sha256":"97c26571bf2fb15da7e1811dcbfd0b47876a110a2a76850da20f760ffc4b26eb","sha512":"bacca60bf3fc6d3e6e29a64ef123b503c687cb78491d38a988a326bd94e2817d0a25c72a9e3ba39c98947d4b05766fbab5d4fa6b5a635ab51cf9a5c2d94375ff","ssdeep":"3072:7Z0N7hx+xwue8ogNGDqFZOPuVi8CtNM0RKQUEkjoUC0vx03h:7Z0Ndx+xBe8ogNGDqFZOPuVi8CtNM0Rb","tlshash":"72b3b7e2d73d917db837702ebb64519c560cc802eb2a4ae6fc81f196c4cb5e363b6458","first_seen":"2025-12-24T16:24:53.883737Z","last_seen":"2025-12-24T16:24:53.883737Z","times_seen":1,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":84,"dns":38,"connect":23,"send":0,"wait":48,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-ah.xhcdn.com/xh-mobile/js/v26687fb441.runtime.js","fqdn":"static-ah.xhcdn.com","domain":"xhcdn.com","tld":"com"},"ip":{"addr":"45.133.44.23","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhamster-com.pornproxy.art/","date":"2025-12-24T16:24:23.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-ah.xhcdn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 02:32:25 GMT","end":"Sun, 22 Feb 2026 02:32:24 GMT"},"fingerprint":{"sha1":"7B:F2:E0:21:13:37:93:2F:13:4B:AF:45:C9:20:3E:6D:21:68:25:63","sha256":"59:8A:65:99:A9:96:ED:19:C7:CB:14:05:E0:41:CC:43:A2:76:8C:70:0A:21:E8:1D:70:D0:73:07:BF:C0:3D:6D"}}},"request":{"raw":"GET /xh-mobile/js/v26687fb441.runtime.js HTTP/1.1\r\nHost: static-ah.xhcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xhamster-com.pornproxy.art\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.pornproxy.art/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 16:24:23 GMT\r\ncontent-type: text/javascript\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: rsic-kube0019\r\nx-rsic-pass: yes\r\ncache-control: max-age=86400\r\nx-rsic-responder: rsic-kube0020\r\nx-envoy-upstream-service-time: 4\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nexpires: Thu, 25 Dec 2025 16:24:23 GMT\r\nx-cdn-host-id: DS9201,DS9225\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":24344,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (24344), with no line terminators","md5":"6f76a4277aa0057d400785b98ad643ac","sha1":"26687fb441fb14f99c7bbf903ea96b044c9d9bd9","sha256":"862bcc125a87c75008c17d174e9b759b2f4913481203216b9b6c3aa3224f9845","sha512":"fdbae5e667cb40a42fda5ae2d441006e10adf925f3cdbb6fd8375fbeb17a366db80bef6f18424795c356e92d3b8a7a3766e07ff3f0ca8a24edad735fa68572fc","ssdeep":"384:G6pgZfHMScSvzoKVkczI/AU1nJnbp9uf0p07xzVvDmgwSQN11HWQm4rTggi8/HD:xxSZzVLkJnbfuf0puxzV4SQN11xrTG8b","tlshash":"9eb2c45ae52433d629513f6ecc16208d1bed1bd33a36c14aa34df1ac1ad07df46d298b","first_seen":"2025-12-24T16:24:53.884718Z","last_seen":"2025-12-24T16:24:53.884718Z","times_seen":1,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.imagexox.com/?url=https%3A%2F%2Fic-vt-nss.xhcdn.com%2Fa%2FNWI5YmY4Y2ZhZDBjNjYzMjkzYjhlZWNiNjRlMGI3MmE%2Fs%28w%3A320%2Ch%3A240%29%2Cjpeg%2F010%2F128%2F627%2Fv2%2F320x240.250.jpg","fqdn":"image.imagexox.com","domain":"imagexox.com","tld":"com"},"ip":{"addr":"104.26.2.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://xhamster-com.pornproxy.art/","date":"2025-12-24T16:24:23.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagexox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Nov 2025 04:49:43 GMT","end":"Fri, 06 Feb 2026 05:48:19 GMT"},"fingerprint":{"sha1":"E5:35:C4:58:D6:DE:DE:E8:C7:3E:FD:8E:11:2B:6A:2B:5D:38:FD:4F","sha256":"8C:85:C1:D3:AE:CF:CA:4F:DA:BC:6A:4C:09:59:CE:29:A3:24:81:0B:90:7B:18:3D:CB:82:55:3B:9A:09:C5:C9"}}},"request":{"raw":"GET /?url=https%3A%2F%2Fic-vt-nss.xhcdn.com%2Fa%2FNWI5YmY4Y2ZhZDBjNjYzMjkzYjhlZWNiNjRlMGI3MmE%2Fs%28w%3A320%2Ch%3A240%29%2Cjpeg%2F010%2F128%2F627%2Fv2%2F320x240.250.jpg HTTP/1.1\r\nHost: image.imagexox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.pornproxy.art/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 16:24:24 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npragma: no-cache\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=14400, must-revalidate\r\ncf-cache-status: MISS\r\nlast-modified: Wed, 24 Dec 2025 16:24:24 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BowuFuAtJJc967Mq8179MjwIN4V4BCEmUoGRcxyNahx2FgOm4gzFul1qai2R%2BLRsv29rul%2BTTLjmaRpb3nf8zAbRzQozPS3Kcm2cHYCBzHE%3D\"}]}\r\ncf-ray: 9b3172dccb6256a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80289,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 321 x 241, 8-bit/color RGB, non-interlaced","md5":"49e9a7d542ffd8f042f1f384ca0ac077","sha1":"f77f482a08bf7361e5479b357ad5bf58ca3c2cc7","sha256":"612bb2283e265bb09726720fe82cdb8dccae4d3ed521597fe1f2843a9471665a","sha512":"0a1b2788578b8df7f08bc39c07f83fee0c0498c93bcc5b55f9e0e328f91f46aaec8107df7bd23650c9a838ff2464928df4429af7a83376e873548b54be6b5113","ssdeep":"1536:PYcToswMZsUhUn2wGJbuFZm/QC0qpqZzsLPHeAg:PYcEv2sUWnAbCkD+Ag","tlshash":"7073122cb8bf32bfc7f290f154ebdb4f249d48958e6160796bca460b0a126152760ed6","first_seen":"2025-12-24T16:24:53.885626Z","last_seen":"2025-12-24T16:24:53.885626Z","times_seen":1,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cordbraghare.com/22/49/27/2249275d1dd0a7f849bb75250a781e51.js","fqdn":"cordbraghare.com","domain":"cordbraghare.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhamster-com.pornproxy.art/","date":"2025-12-24T16:24:23.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cordbraghare.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Dec 2025 20:52:32 GMT","end":"Sat, 14 Mar 2026 20:52:31 GMT"},"fingerprint":{"sha1":"E8:04:69:D4:3F:86:5C:A1:C8:11:76:00:91:B5:04:A1:F2:D7:56:49","sha256":"F0:3F:9C:51:89:D0:71:1E:0C:2F:7C:06:E1:47:EE:E4:68:C3:CC:27:3E:9D:5B:37:CE:52:90:B0:34:55:CD:02"}}},"request":{"raw":"GET /22/49/27/2249275d1dd0a7f849bb75250a781e51.js HTTP/1.1\r\nHost: cordbraghare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.pornproxy.art/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 24 Dec 2025 16:24:24 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 44047\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: cordbraghare.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 020e8e7e7c723ce6075fc5f4114e90d8\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":117760,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"49c8b301cac430a7f5752eb74ab7d06b","sha1":"525ebab1feb26fdea35fe2ad9310ff44e9ca512a","sha256":"b8585353d652f7719d28bb143f132b13dfe8f30838037a455ea2fcddeea6a10d","sha512":"c3ef88cfa798002ca3d5c9068217d26bbdb4a4b6ab3cd665595e724f6f9382be054aba804737c6c33dc4573d49ac4e8124ca0a154963edf2fd9b0201b01f260e","ssdeep":"3072:yAziWVrVzs8WJ6Hy1/YiwZpNRl9NqPIih0902rrDygC:xJuQi6DVuf","tlshash":"4eb3d6883f41f37c02166077133f942ff01f4e425899d648d85af9e9ae6878ed63aa35","first_seen":"2025-12-24T16:24:53.886486Z","last_seen":"2026-01-11T16:55:19.363718Z","times_seen":16,"resource_available":false,"data":null}},"time_used":910,"timings":{"blocked":313,"dns":11,"connect":93,"send":0,"wait":97,"receive":186,"ssl":206},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cordbraghare.com/1b/8a/d1/1b8ad19e5b8faa97b5af717e65b0bdee.js","fqdn":"cordbraghare.com","domain":"cordbraghare.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhamster-com.pornproxy.art/","date":"2025-12-24T16:24:23.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cordbraghare.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Dec 2025 20:52:32 GMT","end":"Sat, 14 Mar 2026 20:52:31 GMT"},"fingerprint":{"sha1":"E8:04:69:D4:3F:86:5C:A1:C8:11:76:00:91:B5:04:A1:F2:D7:56:49","sha256":"F0:3F:9C:51:89:D0:71:1E:0C:2F:7C:06:E1:47:EE:E4:68:C3:CC:27:3E:9D:5B:37:CE:52:90:B0:34:55:CD:02"}}},"request":{"raw":"GET /1b/8a/d1/1b8ad19e5b8faa97b5af717e65b0bdee.js HTTP/1.1\r\nHost: cordbraghare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.pornproxy.art/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 24 Dec 2025 16:24:24 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 30273\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 3\r\nHost: cordbraghare.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: ba1aa7d0838971427b664817191b3ade\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":78908,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"36293d01ca74fac012809a29a0eab2b9","sha1":"cfa6bbc2acd51691f78713179f5217aa17b79bfb","sha256":"50c99b3139a88d620ef32da22cac9262c4345e6a6c8ef863a5ca3302fd71725e","sha512":"3eaccb5db0afd155917f91324c4b5beb7fec7701ad0ef3f9dfb197b8f3150d570696b56f72e0d6a84ddb6445ea7698d5408487b2f9758a1b1f653aea96b5eea2","ssdeep":"1536:99yUBg8XFOUGnAVTQsz3WArOwlNyBv77NzxpQ2jFFKfpjIh:93B91copUhxpJKpIh","tlshash":"927309487f82b15b5352a073626fd047f0256f1261ecd498d123e6e86f6c33af636b98","first_seen":"2025-12-17T13:22:58.48306Z","last_seen":"2026-01-11T16:55:19.351956Z","times_seen":20,"resource_available":false,"data":null}},"time_used":813,"timings":{"blocked":312,"dns":11,"connect":93,"send":0,"wait":96,"receive":91,"ssl":190},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static-ah.xhcdn.com/xh-shared/css/v1cc7dc3dfa.theme.css","fqdn":"static-ah.xhcdn.com","domain":"xhcdn.com","tld":"com"},"ip":{"addr":"45.133.44.23","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xhamster-com.pornproxy.art/","date":"2025-12-24T16:24:23.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-ah.xhcdn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 02:32:25 GMT","end":"Sun, 22 Feb 2026 02:32:24 GMT"},"fingerprint":{"sha1":"7B:F2:E0:21:13:37:93:2F:13:4B:AF:45:C9:20:3E:6D:21:68:25:63","sha256":"59:8A:65:99:A9:96:ED:19:C7:CB:14:05:E0:41:CC:43:A2:76:8C:70:0A:21:E8:1D:70:D0:73:07:BF:C0:3D:6D"}}},"request":{"raw":"GET /xh-shared/css/v1cc7dc3dfa.theme.css HTTP/1.1\r\nHost: static-ah.xhcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xhamster-com.pornproxy.art\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.pornproxy.art/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 16:24:23 GMT\r\ncontent-type: text/css\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: rsic-kube0018\r\nx-rsic-pass: yes\r\ncache-control: max-age=86400\r\nx-rsic-cached: yes\r\nx-rsic-responder: rsic-kube0019\r\nx-envoy-upstream-service-time: 2\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nexpires: Thu, 25 Dec 2025 16:24:23 GMT\r\nx-cdn-host-id: DS9201,DS9225\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22158,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (22158), with no line terminators","md5":"0d9a6884fdf6e8ff66484ab76736b6b6","sha1":"1cc7dc3dfa067d80969389a71caf5cef59b3a22a","sha256":"6fc655ee9b9bd7f0ee84e8423682c3c649445b5af58cc53f4df6acc614cbc9c8","sha512":"731e37f574566d15e54ccce6fb9ac7f5e52a0ddf7b1e845e80cdcde252a26dd3b7cd4c003ee8105fd929c4e649d59f323c1f68ba555d56b0f705ff93a3ce7c60","ssdeep":"192:XD+JPWuxwlk1hnAQXKDYJnxbuw8XTD6J3/pKLl8XTD6J3/pKLSnAQXKDYJnxbu0:T+bxznoUp4qpzqpPnoUpD","tlshash":"34a2e1b3fb55d147062708be60caeb31f28e8500fada1ba63f28a144795b64310f7d66","first_seen":"2025-11-20T08:38:40.214927Z","last_seen":"2026-03-11T14:40:14.16729Z","times_seen":85,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":81,"dns":43,"connect":21,"send":0,"wait":56,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-ah.xhcdn.com/xh-mobile/css/v5d0dece728.page-visible.css","fqdn":"static-ah.xhcdn.com","domain":"xhcdn.com","tld":"com"},"ip":{"addr":"45.133.44.23","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xhamster-com.pornproxy.art/","date":"2025-12-24T16:24:23.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-ah.xhcdn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 02:32:25 GMT","end":"Sun, 22 Feb 2026 02:32:24 GMT"},"fingerprint":{"sha1":"7B:F2:E0:21:13:37:93:2F:13:4B:AF:45:C9:20:3E:6D:21:68:25:63","sha256":"59:8A:65:99:A9:96:ED:19:C7:CB:14:05:E0:41:CC:43:A2:76:8C:70:0A:21:E8:1D:70:D0:73:07:BF:C0:3D:6D"}}},"request":{"raw":"GET /xh-mobile/css/v5d0dece728.page-visible.css HTTP/1.1\r\nHost: static-ah.xhcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xhamster-com.pornproxy.art\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.pornproxy.art/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 16:24:23 GMT\r\ncontent-type: text/css\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: rsic-kube0018\r\nx-rsic-pass: yes\r\ncache-control: max-age=86400\r\nx-rsic-responder: rsic-kube0020\r\nx-envoy-upstream-service-time: 9\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nexpires: Thu, 25 Dec 2025 16:24:23 GMT\r\nx-cdn-host-id: DS9201,DS9225\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":220464,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"0cd07a44091d3e5758641795d7990c62","sha1":"5d0dece72850d9904c8aa1f307609962b1759201","sha256":"46c6a1cd1049bcdf37f1e6664ba8d36cc906d713f5e24bb7a31dc1edf42f920b","sha512":"12af7556649ff255a0dd22563d5648b32195773df7a5a2b6fa8eb6ce5406c7133cb74832ffb4b309566f120d7363a83a44087014a6a96cb72f0149bb9fc84e69","ssdeep":"1536:gyw2sPsAZNazXh96E749HZGmWK4YtV0SJ5dzVHjh8:gyw2sPsAZNabhXkfWLSJ5dBHj6","tlshash":"9224f9e9d72440bdab37f59dab92e74c1718e852da220fa2fe45741cc0c7aca11a747c","first_seen":"2025-12-24T16:24:53.888529Z","last_seen":"2025-12-24T16:24:53.888529Z","times_seen":1,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":84,"dns":37,"connect":23,"send":0,"wait":49,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-ah.xhcdn.com/xh-shared/js/ve7d6a78e49.ext-detect.js","fqdn":"static-ah.xhcdn.com","domain":"xhcdn.com","tld":"com"},"ip":{"addr":"45.133.44.23","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhamster-com.pornproxy.art/","date":"2025-12-24T16:24:23.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-ah.xhcdn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 02:32:25 GMT","end":"Sun, 22 Feb 2026 02:32:24 GMT"},"fingerprint":{"sha1":"7B:F2:E0:21:13:37:93:2F:13:4B:AF:45:C9:20:3E:6D:21:68:25:63","sha256":"59:8A:65:99:A9:96:ED:19:C7:CB:14:05:E0:41:CC:43:A2:76:8C:70:0A:21:E8:1D:70:D0:73:07:BF:C0:3D:6D"}}},"request":{"raw":"GET /xh-shared/js/ve7d6a78e49.ext-detect.js HTTP/1.1\r\nHost: static-ah.xhcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xhamster-com.pornproxy.art\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.pornproxy.art/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 16:24:23 GMT\r\ncontent-type: text/javascript\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: rsic-kube0019\r\nx-rsic-pass: yes\r\ncache-control: max-age=86400\r\nx-rsic-responder: rsic-kube0018\r\nx-envoy-upstream-service-time: 2\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nexpires: Thu, 25 Dec 2025 16:24:23 GMT\r\nx-cdn-host-id: DS9201,DS9225\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6470,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6470), with no line terminators","md5":"e62b3edccdc564cf681c6bf41f661552","sha1":"e7d6a78e49270d84cb3c687b85f587e2a0ab6783","sha256":"e674b55b9941f7a685fa020e8db89f0f7e91558a358b5cb115368429ab9dcac0","sha512":"a7e379a0dffb467b0c45f3ad0c349ffaa7d8faf76f8c67ca08edf0093bb6c4982bc3f2c4fab024da563ba619023600eecdfd507b46b846bba0773f2c4cc7f65a","ssdeep":"96:ocemZuTLx1T3YrCSWwHo79vdM8lU6jCHemPZ6ysBNETWs7Eb7/n:tZSDYrbfypAPZ6tETWDXf","tlshash":"6ad196c969e4a4930db303fcddeb510662b4163644fc89ac527c5ad619e21cf81a3eb3","first_seen":"2025-12-24T16:24:53.889493Z","last_seen":"2025-12-24T16:24:53.889493Z","times_seen":1,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.imagexox.com/?url=https%3A%2F%2Fic-vt-nss.xhcdn.com%2Fa%2FOWZhMGI1NDg0YzdiOTNkMmFlNGYxOTc5ZmZiNzU1YzQ%2Fs%28w%3A320%2Ch%3A240%29%2Cjpeg%2F028%2F091%2F313%2Fv2%2F320x240.221.jpg","fqdn":"image.imagexox.com","domain":"imagexox.com","tld":"com"},"ip":{"addr":"104.26.2.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://xhamster-com.pornproxy.art/","date":"2025-12-24T16:24:23.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagexox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Nov 2025 04:49:43 GMT","end":"Fri, 06 Feb 2026 05:48:19 GMT"},"fingerprint":{"sha1":"E5:35:C4:58:D6:DE:DE:E8:C7:3E:FD:8E:11:2B:6A:2B:5D:38:FD:4F","sha256":"8C:85:C1:D3:AE:CF:CA:4F:DA:BC:6A:4C:09:59:CE:29:A3:24:81:0B:90:7B:18:3D:CB:82:55:3B:9A:09:C5:C9"}}},"request":{"raw":"GET /?url=https%3A%2F%2Fic-vt-nss.xhcdn.com%2Fa%2FOWZhMGI1NDg0YzdiOTNkMmFlNGYxOTc5ZmZiNzU1YzQ%2Fs%28w%3A320%2Ch%3A240%29%2Cjpeg%2F028%2F091%2F313%2Fv2%2F320x240.221.jpg HTTP/1.1\r\nHost: image.imagexox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.pornproxy.art/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 16:24:24 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npragma: no-cache\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=14400, must-revalidate\r\ncf-cache-status: MISS\r\nlast-modified: Wed, 24 Dec 2025 16:24:24 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fnidfiGK6a1tQEQLBFFYg3ulikn3Ub5SMho1bMDqErN5frdCZSjnNYEez6ijZpf0YB6OIznzGDzSfpNchgKWiJTkWFOJBj0T8EP4I0g05%2FE%3D\"}]}\r\ncf-ray: 9b3172dccb6456a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93087,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 321 x 241, 8-bit/color RGB, non-interlaced","md5":"9da52cd9300e58aebd1059747d0cfce4","sha1":"b620411bb4d0faf22cdf63934995786a07497cdf","sha256":"11cf7510ced9183a09b748b130dddfed1440f399c87893693df37f4d6d50142c","sha512":"5be302faf04c52bcc7b2c98cddb8e33e40c5f76c142509a7f356d4d4efa87dc6c8efbf3ad52a6c9d35f08eb389842c99aa5e618bcf32080b53231827ac79aed6","ssdeep":"1536:EbnnY7fb7w6BqbrCSsYFqOp3jExQhnZI0kIC7o2XzUcbpxf5w0POEaVfsyTgACeq:EbiPw6+r8YYooxQhZbkthHpxflKVUyML","tlshash":"f393125d9f7f448b773569a744b79362283fd57602d42078b97de2d882b20aca0d02ef","first_seen":"2025-12-24T16:24:53.890476Z","last_seen":"2025-12-24T16:24:53.890476Z","times_seen":1,"resource_available":false,"data":null}},"time_used":591,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":591,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-ah.xhcdn.com/xh-mobile/images/favicon/favicon-512x512.png?v=1","fqdn":"static-ah.xhcdn.com","domain":"xhcdn.com","tld":"com"},"ip":{"addr":"45.133.44.23","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhamster-com.pornproxy.art/","date":"2025-12-24T16:24:26.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-ah.xhcdn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 02:32:25 GMT","end":"Sun, 22 Feb 2026 02:32:24 GMT"},"fingerprint":{"sha1":"7B:F2:E0:21:13:37:93:2F:13:4B:AF:45:C9:20:3E:6D:21:68:25:63","sha256":"59:8A:65:99:A9:96:ED:19:C7:CB:14:05:E0:41:CC:43:A2:76:8C:70:0A:21:E8:1D:70:D0:73:07:BF:C0:3D:6D"}}},"request":{"raw":"GET /xh-mobile/images/favicon/favicon-512x512.png?v=1 HTTP/1.1\r\nHost: static-ah.xhcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.pornproxy.art/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 16:24:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 24513\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: rsic-kube0021\r\nx-rsic-pass: yes\r\ncache-control: max-age=86400\r\nx-rsic-cached: yes\r\nx-rsic-responder: rsic-kube0021\r\nx-envoy-upstream-service-time: 0\r\ntiming-allow-origin: *\r\nexpires: Thu, 25 Dec 2025 16:24:26 GMT\r\nx-cdn-host-id: DS9201,DS9225\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24513,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"2c39bdc22c23a63952ccb8563d02efd0","sha1":"1d61498011ad2ee22a50c2b64801e676d681b82b","sha256":"3b575399a341bf463fc84bb789c0420f8d1277d36bc6f2bfbc0fbf295b8e0208","sha512":"3f2e9fff479239662102e833cb389664df2cac03d5b342d156fa9d9b16e07cb25aa66a4458db21c09bee9d5c37709a7862b750d9ea663d9da6998520dd1e6e5b","ssdeep":"384:Si//ETGH6M1BgtRYK6MKK25TrNZ4NYAKGZKqjkhq+tjZNc8Jj4WDQaIgr61PreZ+:zHzaM1UxK55THbGZKq+qQjY8Jj4WDQa2","tlshash":"35b2e1c9cee0da170fa641b10a938f4773275b1046da46f94f0db7ce289ecc28766529","first_seen":"2023-05-06T00:35:21Z","last_seen":"2026-04-28T07:00:01.6473Z","times_seen":391,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-ah.xhcdn.com/xh-mobile/css/vb96c32e285.start.css","fqdn":"static-ah.xhcdn.com","domain":"xhcdn.com","tld":"com"},"ip":{"addr":"45.133.44.23","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xhamster-com.pornproxy.art/","date":"2025-12-24T16:24:23.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-ah.xhcdn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 02:32:25 GMT","end":"Sun, 22 Feb 2026 02:32:24 GMT"},"fingerprint":{"sha1":"7B:F2:E0:21:13:37:93:2F:13:4B:AF:45:C9:20:3E:6D:21:68:25:63","sha256":"59:8A:65:99:A9:96:ED:19:C7:CB:14:05:E0:41:CC:43:A2:76:8C:70:0A:21:E8:1D:70:D0:73:07:BF:C0:3D:6D"}}},"request":{"raw":"GET /xh-mobile/css/vb96c32e285.start.css HTTP/1.1\r\nHost: static-ah.xhcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xhamster-com.pornproxy.art\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.pornproxy.art/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 16:24:23 GMT\r\ncontent-type: text/css\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: rsic-kube0020\r\nx-rsic-pass: yes\r\ncache-control: max-age=86400\r\nx-rsic-cached: yes\r\nx-rsic-responder: rsic-kube0019\r\nx-envoy-upstream-service-time: 3\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nexpires: Thu, 25 Dec 2025 16:24:23 GMT\r\nx-cdn-host-id: DS9201,DS9225\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19986,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19986), with no line terminators","md5":"fa450fe0cc422cf7d306bcd67490c719","sha1":"b96c32e2856e287bfe51df8032978104379ee0ca","sha256":"ddb35223fc67c0d1b2d19dd982d74e282fba75bab41a1fbdedf3298130587765","sha512":"354ce2cedc3888f9f0e1a6c7381bd916bb311810aaeb8de24d2dd485af8a03a1a96e6b56dbe4a58c5c09f9afdc214fc8b6f3f2b9f01c50b685737466a830bee1","ssdeep":"192:KPyifg9lrkVFUM2wIzvtdjgJi2O//fmZzVxVE/rmI7zWy1IJgrmA8BUeABcXeQMh:WfylrkVFUMKtIiHl7aWCHueABkDMmJ+","tlshash":"e6920fd9f360e03eac77e92a774a953c851c6c85ec4657b9ee1251c869c3ef32681b0c","first_seen":"2025-12-18T23:39:29.017871Z","last_seen":"2026-01-20T17:18:03.842874Z","times_seen":27,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":80,"dns":47,"connect":19,"send":0,"wait":20,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.imagexox.com/?url=https%3A%2F%2Fic-vt-nss.xhcdn.com%2Fa%2FZWUxMjlmMzk3NDU0YjlhNjk2ZWM2ZjQ4YWE1YTMzMDQ%2Fs%28w%3A320%2Ch%3A240%29%2Cjpeg%2F028%2F192%2F660%2Fv2%2F320x240.221.jpg","fqdn":"image.imagexox.com","domain":"imagexox.com","tld":"com"},"ip":{"addr":"104.26.2.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhamster-com.pornproxy.art/","date":"2025-12-24T16:24:23.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagexox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Nov 2025 04:49:43 GMT","end":"Fri, 06 Feb 2026 05:48:19 GMT"},"fingerprint":{"sha1":"E5:35:C4:58:D6:DE:DE:E8:C7:3E:FD:8E:11:2B:6A:2B:5D:38:FD:4F","sha256":"8C:85:C1:D3:AE:CF:CA:4F:DA:BC:6A:4C:09:59:CE:29:A3:24:81:0B:90:7B:18:3D:CB:82:55:3B:9A:09:C5:C9"}}},"request":{"raw":"GET /?url=https%3A%2F%2Fic-vt-nss.xhcdn.com%2Fa%2FZWUxMjlmMzk3NDU0YjlhNjk2ZWM2ZjQ4YWE1YTMzMDQ%2Fs%28w%3A320%2Ch%3A240%29%2Cjpeg%2F028%2F192%2F660%2Fv2%2F320x240.221.jpg HTTP/1.1\r\nHost: image.imagexox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.pornproxy.art/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 16:24:24 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npragma: no-cache\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=14400, must-revalidate\r\ncf-cache-status: MISS\r\nlast-modified: Wed, 24 Dec 2025 16:24:24 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zj%2B%2FmVDWGkGTWpuqPQGFaj%2Ffr9TSGFsLZILfooOpoznRiYXNVWF%2B5%2FhTvEuxKWlM%2FuSQ%2F2tukzpKJah4lCHeMXrD%2BNn2jilCZJrjHObBNUM%3D\"}]}\r\ncf-ray: 9b3172dccb6956a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85594,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 321 x 241, 8-bit/color RGB, non-interlaced","md5":"9c62351dbdd0c92ee02c6b8ce6145e0a","sha1":"7db432c07c88695bfc6e0d31f6b6cfc7ed8c8513","sha256":"01a57d448e9e5bdf408b155f279c28994ae4a2672a60c2f079b420e9de4061c2","sha512":"434301834ece8998dcc93acdc137fefeb99c3a058771988a6f809be1fd4be6c139adc06fb9bc46b4cf5e10fafa4722db669a809ef2e909b017f5e3b0091beedf","ssdeep":"1536:nDXnTo+pPxABq0LQsSS7WjIZlPHFkL88RLlZPfB3H25U4u7iS+Maco8xH:zTnZGSodg80LlZnlH25U4ui8o8J","tlshash":"df83124b37464b93d423feb055cc43ca5369ed24e8b4bc216b8be780876ed3d95141d9","first_seen":"2025-12-24T16:24:53.893042Z","last_seen":"2025-12-24T16:24:53.893042Z","times_seen":1,"resource_available":false,"data":null}},"time_used":661,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":654,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-ah.xhcdn.com/xh-shared/js/locales/v08801fbb4b.en.js","fqdn":"static-ah.xhcdn.com","domain":"xhcdn.com","tld":"com"},"ip":{"addr":"45.133.44.23","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhamster-com.pornproxy.art/","date":"2025-12-24T16:24:23.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-ah.xhcdn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 02:32:25 GMT","end":"Sun, 22 Feb 2026 02:32:24 GMT"},"fingerprint":{"sha1":"7B:F2:E0:21:13:37:93:2F:13:4B:AF:45:C9:20:3E:6D:21:68:25:63","sha256":"59:8A:65:99:A9:96:ED:19:C7:CB:14:05:E0:41:CC:43:A2:76:8C:70:0A:21:E8:1D:70:D0:73:07:BF:C0:3D:6D"}}},"request":{"raw":"GET /xh-shared/js/locales/v08801fbb4b.en.js HTTP/1.1\r\nHost: static-ah.xhcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xhamster-com.pornproxy.art\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.pornproxy.art/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 16:24:23 GMT\r\ncontent-type: text/javascript\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: rsic-kube0021\r\nx-rsic-pass: yes\r\ncache-control: max-age=86400\r\nx-rsic-responder: rsic-kube0019\r\nx-envoy-upstream-service-time: 4\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nexpires: Thu, 25 Dec 2025 16:24:23 GMT\r\nx-cdn-host-id: DS9201,DS9225\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":99308,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65517), with no line terminators","md5":"6a7feb847f88ef9df8db153d3d87bfca","sha1":"08801fbb4bcdadb0de097094957c86f7427934a6","sha256":"c2c2e1466b2d7322ac4f8830f6a09280f253b104ac1b18acbbb34ab2611a9920","sha512":"e9aabd4977c0c351199cb90bdda0fb04de53bd22b73534e3a51a29f841455d5e1ddb810ca6fc281daba10586f02006510692233be47b7d3115bb033b8645aafb","ssdeep":"1536:+pdJXC89afHCMVohW097gng8QtECHNqzlbfvxjQrE29BGYP:6HC89a/CVhegjkfvRQrE29f","tlshash":"48a3f96bc788161e0d933266fe8d726375b48218c680456c7edf941e01ebb89e33f6d9","first_seen":"2025-12-24T16:24:53.89392Z","last_seen":"2025-12-27T23:34:00.753779Z","times_seen":3,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-ah.xhcdn.com/xh-shared/js/v71bc25a750.polyfills.js","fqdn":"static-ah.xhcdn.com","domain":"xhcdn.com","tld":"com"},"ip":{"addr":"45.133.44.23","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhamster-com.pornproxy.art/","date":"2025-12-24T16:24:23.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-ah.xhcdn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 02:32:25 GMT","end":"Sun, 22 Feb 2026 02:32:24 GMT"},"fingerprint":{"sha1":"7B:F2:E0:21:13:37:93:2F:13:4B:AF:45:C9:20:3E:6D:21:68:25:63","sha256":"59:8A:65:99:A9:96:ED:19:C7:CB:14:05:E0:41:CC:43:A2:76:8C:70:0A:21:E8:1D:70:D0:73:07:BF:C0:3D:6D"}}},"request":{"raw":"GET /xh-shared/js/v71bc25a750.polyfills.js HTTP/1.1\r\nHost: static-ah.xhcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xhamster-com.pornproxy.art\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.pornproxy.art/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 16:24:23 GMT\r\ncontent-type: text/javascript\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: rsic-kube0018\r\nx-rsic-pass: yes\r\ncache-control: max-age=86400\r\nx-rsic-responder: rsic-kube0019\r\nx-envoy-upstream-service-time: 8\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nexpires: Thu, 25 Dec 2025 16:24:23 GMT\r\nx-cdn-host-id: DS9201,DS9225\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":393718,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65502), with no line terminators","md5":"c2e777837fe310dafff5eaebbb5afcb1","sha1":"71bc25a7507079d7bb7daa0dc7d850bd4406fe3c","sha256":"30058b2a86db97b81b0884a2f5f2d8dd6d2c31c1a73867af23a50590bb67834b","sha512":"8de14932fb0db88862d8baee7701ac1e536ce13bcb9011cd2ea36c5bd256a75e7edeac78b877d15e8e4654ab4b4b6b541abe8d8f5e70a6eb9f79e286b557a5d7","ssdeep":"3072:X7gLnz5+55AZE3H0hF/GrO7uo5UPoxvbmZYDWDUfhfIuWg/rct2hLzRQhZ2+ZeoS:WnZCHYVGS7m0nig/A2CZ2+Zehr","tlshash":"dd84a48dfad1b0b547e361a0802f550bf13b1a78b45e94d0d6a6d4e1acb8a8e4137f3d","first_seen":"2025-12-24T16:24:53.894729Z","last_seen":"2025-12-24T16:24:53.894729Z","times_seen":1,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":47,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-nss.xhcdn.com/xh-images/components/ui/svgs/flirtify.svg","fqdn":"static-nss.xhcdn.com","domain":"xhcdn.com","tld":"com"},"ip":{"addr":"185.76.9.4","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhamster-com.pornproxy.art/","date":"2025-12-24T16:24:23.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1568062827.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 16:37:26 GMT","end":"Wed, 28 Jan 2026 16:37:25 GMT"},"fingerprint":{"sha1":"D9:45:35:BC:11:71:78:DF:D2:80:BC:1D:D7:BB:63:0A:17:DB:2E:23","sha256":"93:8F:0B:F0:47:E5:AA:35:D3:41:F4:4F:E9:EB:8D:32:F7:9D:E8:C4:79:C2:CD:71:B2:CA:96:21:3A:39:5D:1C"}}},"request":{"raw":"GET /xh-images/components/ui/svgs/flirtify.svg HTTP/1.1\r\nHost: static-nss.xhcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.pornproxy.art/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 16:24:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: rsic-kube0018\r\nx-rsic-pass: yes\r\ncache-control: max-age=604800\r\nexpires: Mon, 29 Dec 2025 11:32:33 GMT\r\nx-rsic-cached: mem\r\nx-rsic-responder: rsic-kube0019\r\nx-envoy-upstream-service-time: 1\r\ntiming-allow-origin: *\r\nx-77-nzt: EgwBuUwJAQH3ZucCAAwBJRPCDQH3AAAAAA\r\nx-77-nzt-ray: 563766354312d369b7134c69247d8639\r\nx-77-cache: HIT\r\nx-77-age: 190310\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":4220,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bd94c959228482538e9f7e9cc7bcb764","sha1":"a657b18850ed856aac145902197276c248e4c7ed","sha256":"d3c1ce272d5c09db6b372bea918bf8508491d40b894d77ab3d9473605133ae24","sha512":"0918207780be4bcc5645c0d506f5cf99510db7e3d1c31d2bbd6361bd7a2da946be047512f43c8c235d35dbff4b695eb20f2e3237a22756fcc8a1c515e96a5ca7","ssdeep":"96:QEASFc4Fczf1EVQVh0ikNOQVh0ikNUoZSZnZ4ZY:QE3Fc4FcT1TYJye","tlshash":"569142f455fc85c1b76b8b5ed9dd02a6770e28e326564a48f08c9eb2ef325930b49c90","first_seen":"2024-01-21T16:23:27Z","last_seen":"2026-04-28T07:00:01.687992Z","times_seen":261,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":109,"dns":0,"connect":7,"send":0,"wait":7,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fido.xhamster-com.pornproxy.art/","fqdn":"fido.xhamster-com.pornproxy.art","domain":"pornproxy.art","tld":"art"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-24T16:24:22.785Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: fido.xhamster-com.pornproxy.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T15:24:19.563648Z","times_seen":14331860,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":158,"dns":0,"connect":30,"send":0,"wait":0,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"fido.xhamster-com.pornproxy.art/","fqdn":"fido.xhamster-com.pornproxy.art","domain":"pornproxy.art","tld":"art"},"ip":{"addr":"179.43.182.202","port":80,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-24T16:24:23.025Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: fido.xhamster-com.pornproxy.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Wed, 24 Dec 2025 16:24:23 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: view=1; expires=Thu, 25-Dec-2025 16:24:23 GMT; Max-Age=86400\nPHPSESSID=64apls6bga3q7qlonjg2lc87re; path=/\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nLocation: http://xhamster-com.pornproxy.art\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":268538,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T15:24:19.563648Z","times_seen":14331860,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":31,"dns":1,"connect":30,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vmuid.com/script.js?sid=c7a563de-f73e-40f2-abfd-c98fa333d0c0","fqdn":"vmuid.com","domain":"vmuid.com","tld":"com"},"ip":{"addr":"178.162.215.162","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhamster-com.pornproxy.art/","date":"2025-12-24T16:24:23.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"vmuid.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Nov 2025 01:58:17 GMT","end":"Fri, 13 Feb 2026 01:58:16 GMT"},"fingerprint":{"sha1":"55:AF:2A:55:F7:0A:50:14:17:98:81:98:2F:E8:79:25:A1:F4:CB:F1","sha256":"14:5E:46:EB:2B:61:ED:58:DA:3F:13:A4:5D:6C:7E:DC:01:97:B8:6B:1A:B3:A0:4F:05:97:01:DB:FE:C8:70:B1"}}},"request":{"raw":"GET /script.js?sid=c7a563de-f73e-40f2-abfd-c98fa333d0c0 HTTP/1.1\r\nHost: vmuid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.pornproxy.art/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 24 Dec 2025 16:24:23 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 10178\r\nConnection: keep-alive\r\nCache-Control: no-store, max-age=0\r\nAccept-Ch: Sec-CH-UA-Platform,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform-Version\r\nX-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10178,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10178), with no line terminators","md5":"dedd352338543b137f608adc8d0d4aa8","sha1":"100edb4e8fef9b6da043d51135077e68d2a61b22","sha256":"b338a91ba1d2ab7c3a7a0dd659426f5ffa4cd699be38e2bed5075c4d3e773a48","sha512":"e2fab4d95d5baa013a7c248945156524478341282dcffc462fb2de318f55ba29dcafba0db3abcfb6399c6164f6f630f06d48a7323b73f8ea05d5978cd60a4c5c","ssdeep":"192:ATn+ip4qxJ/gzuvu3fo8idwqnOqgStYc1qRP44+PHlCXXZE7904AxF:YbRJYz3oe+3tYGGx+NGXZCAn","tlshash":"2b22b5c9b2d2f06443d77161942f2007f23b2869b54dc498eb66e8d3bcb045ea227f79","first_seen":"2024-01-26T05:18:07Z","last_seen":"2025-12-29T12:17:25.567723Z","times_seen":3656,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":9,"connect":25,"send":0,"wait":31,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-ah.xhcdn.com/xh-shared/css/vd01ccf8fa2.variables.css","fqdn":"static-ah.xhcdn.com","domain":"xhcdn.com","tld":"com"},"ip":{"addr":"45.133.44.23","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xhamster-com.pornproxy.art/","date":"2025-12-24T16:24:23.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-ah.xhcdn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 02:32:25 GMT","end":"Sun, 22 Feb 2026 02:32:24 GMT"},"fingerprint":{"sha1":"7B:F2:E0:21:13:37:93:2F:13:4B:AF:45:C9:20:3E:6D:21:68:25:63","sha256":"59:8A:65:99:A9:96:ED:19:C7:CB:14:05:E0:41:CC:43:A2:76:8C:70:0A:21:E8:1D:70:D0:73:07:BF:C0:3D:6D"}}},"request":{"raw":"GET /xh-shared/css/vd01ccf8fa2.variables.css HTTP/1.1\r\nHost: static-ah.xhcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xhamster-com.pornproxy.art\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.pornproxy.art/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 16:24:23 GMT\r\ncontent-type: text/css\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: rsic-kube0019\r\nx-rsic-pass: yes\r\ncache-control: max-age=86400\r\nx-rsic-cached: yes\r\nx-rsic-responder: rsic-kube0020\r\nx-envoy-upstream-service-time: 1\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nexpires: Thu, 25 Dec 2025 16:24:23 GMT\r\nx-cdn-host-id: DS9201,DS9225\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4129,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4129), with no line terminators","md5":"e379467257e4a43a85da9d933dd74a17","sha1":"d01ccf8fa278fc9d536df098a8793bdf2edaa6f9","sha256":"78c2b9f6e1e36b62ac697a771327ff0daaf8512b2125078e97e054a77f5c8887","sha512":"b968327b8a156fe1167b4e80c72efb0859594aef1ff1c4367d68240beb440380e657e68485b2186ffe3ac838d7de1274467f456b8675f80dbbb8eed85124e5f5","ssdeep":"96:kebsCGa7gqZlyy1msePsf64X6fY6n6i6a66:nbsCGa7gqZlyy1msePihXJKvDx","tlshash":"d4817aa1fb29d071f3b9093e72217a76f49d4c8b9416c2acde05109cf6d1522ab4f748","first_seen":"2025-09-19T04:39:11.96112Z","last_seen":"2026-04-28T07:00:01.668083Z","times_seen":260,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":82,"dns":46,"connect":19,"send":0,"wait":61,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-ah.xhcdn.com/xh-mobile/v9474e73182.manifest.js","fqdn":"static-ah.xhcdn.com","domain":"xhcdn.com","tld":"com"},"ip":{"addr":"45.133.44.23","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhamster-com.pornproxy.art/","date":"2025-12-24T16:24:23.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-ah.xhcdn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 02:32:25 GMT","end":"Sun, 22 Feb 2026 02:32:24 GMT"},"fingerprint":{"sha1":"7B:F2:E0:21:13:37:93:2F:13:4B:AF:45:C9:20:3E:6D:21:68:25:63","sha256":"59:8A:65:99:A9:96:ED:19:C7:CB:14:05:E0:41:CC:43:A2:76:8C:70:0A:21:E8:1D:70:D0:73:07:BF:C0:3D:6D"}}},"request":{"raw":"GET /xh-mobile/v9474e73182.manifest.js HTTP/1.1\r\nHost: static-ah.xhcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xhamster-com.pornproxy.art\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.pornproxy.art/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 16:24:23 GMT\r\ncontent-type: text/javascript\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: rsic-kube0018\r\nx-rsic-pass: yes\r\ncache-control: max-age=86400\r\nx-rsic-responder: rsic-kube0021\r\nx-envoy-upstream-service-time: 2\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nexpires: Thu, 25 Dec 2025 16:24:23 GMT\r\nx-cdn-host-id: DS9201,DS9225\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":24258,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (24258), with no line terminators","md5":"5ecbad8400d457f7482277b5c00f6c4c","sha1":"9474e73182d210a7b5edf1a24ff75d40129f7bc2","sha256":"082f7c5c7eb2219315cdd5e2764e41549909d05d4e32d5a075e528f4bfd9adfa","sha512":"18841a34d6280ec602e0656468fd3010a9618ac21aeb946e9ea117506f1bfda01a0a8bd0068480038fc22ce78c14073468475cd7977de03b4ba3f340070e84e0","ssdeep":"384:DvDnly0d7e3PXPgRHMRrLj58UFlG1TsgYLHefeARWGtdqtFmhdb9hiOwRW3xe4bd:Dvbly0d7e3PXPgRHMRrLj58UFlG1Tsgn","tlshash":"10b2a6158a44f68f6ed48d3ed0f93717ece4c87a2d78c1f6945f99bd0162c27272a0a8","first_seen":"2025-12-24T16:24:53.89759Z","last_seen":"2025-12-24T16:24:53.89759Z","times_seen":1,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":33,"connect":23,"send":0,"wait":54,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-ah.xhcdn.com/xh-mobile/js/v5654e1d3af.start.js","fqdn":"static-ah.xhcdn.com","domain":"xhcdn.com","tld":"com"},"ip":{"addr":"45.133.44.23","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhamster-com.pornproxy.art/","date":"2025-12-24T16:24:23.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-ah.xhcdn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 02:32:25 GMT","end":"Sun, 22 Feb 2026 02:32:24 GMT"},"fingerprint":{"sha1":"7B:F2:E0:21:13:37:93:2F:13:4B:AF:45:C9:20:3E:6D:21:68:25:63","sha256":"59:8A:65:99:A9:96:ED:19:C7:CB:14:05:E0:41:CC:43:A2:76:8C:70:0A:21:E8:1D:70:D0:73:07:BF:C0:3D:6D"}}},"request":{"raw":"GET /xh-mobile/js/v5654e1d3af.start.js HTTP/1.1\r\nHost: static-ah.xhcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xhamster-com.pornproxy.art\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.pornproxy.art/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 16:24:23 GMT\r\ncontent-type: text/javascript\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: rsic-kube0020\r\nx-rsic-pass: yes\r\ncache-control: max-age=86400\r\nx-rsic-responder: rsic-kube0021\r\nx-envoy-upstream-service-time: 5\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nexpires: Thu, 25 Dec 2025 16:24:23 GMT\r\nx-cdn-host-id: DS9201,DS9225\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":235380,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f8969c7bd14f11860281b2e47ac80cbd","sha1":"5654e1d3af4730d49543b02f3f8f71e282e513c4","sha256":"89a83a55f6b54af2c4060e6392bd0636c494d2f9d0d532210f9af43436f6dbbb","sha512":"55d99e1671cfd8df4db916e3baaf4d8a3a807559b24d807083dbb8c43507da5e895f9da958d59564c3d0627373e2333026105fd93bc25781a2af0191b5bfbb7b","ssdeep":"6144:kLD7PNOvAktu5XWoYJo3WgZOsRvzwnSI6o1:kLDrI4kIZVIn","tlshash":"0c343c8ab2d9f0a627e711bd802f600ef3795954580d0c20f2b5ddd578b5a4da3a3fac","first_seen":"2025-12-24T16:24:53.898492Z","last_seen":"2025-12-24T16:24:53.898492Z","times_seen":1,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-ah.xhcdn.com/xh-mobile/images/favicon/favicon-32x32.png?v=1","fqdn":"static-ah.xhcdn.com","domain":"xhcdn.com","tld":"com"},"ip":{"addr":"45.133.44.23","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhamster-com.pornproxy.art/","date":"2025-12-24T16:24:26.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-ah.xhcdn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 02:32:25 GMT","end":"Sun, 22 Feb 2026 02:32:24 GMT"},"fingerprint":{"sha1":"7B:F2:E0:21:13:37:93:2F:13:4B:AF:45:C9:20:3E:6D:21:68:25:63","sha256":"59:8A:65:99:A9:96:ED:19:C7:CB:14:05:E0:41:CC:43:A2:76:8C:70:0A:21:E8:1D:70:D0:73:07:BF:C0:3D:6D"}}},"request":{"raw":"GET /xh-mobile/images/favicon/favicon-32x32.png?v=1 HTTP/1.1\r\nHost: static-ah.xhcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.pornproxy.art/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 16:24:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 1272\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: rsic-kube0021\r\nx-rsic-pass: yes\r\ncache-control: max-age=86400\r\nx-rsic-cached: yes\r\nx-rsic-responder: rsic-kube0019\r\nx-envoy-upstream-service-time: 2\r\ntiming-allow-origin: *\r\nexpires: Thu, 25 Dec 2025 16:24:26 GMT\r\nx-cdn-host-id: DS9201,DS9225\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1272,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"cddc3bfc3511f3b1b05da979ebfa5c21","sha1":"14bcd2e5c58066ac367de02485a54ed0479b2628","sha256":"c11294ed2139852cde01f742725c71b9cbe1037f0fc2aa0097c4c430cdfe899f","sha512":"874a87704ec56563185b0205393de685e062274712f755e681593ca16fe9a7367cd3951ddb57f2c8f9fde47df942872c7c022e221303a434eb6fe768812239cf","ssdeep":"","tlshash":"73211afa521019c9564c0823df4a7a6850f2594eeddc7390e11bdc17ca274d86a3a76c","first_seen":"2023-06-09T16:02:19Z","last_seen":"2026-04-28T07:00:01.825786Z","times_seen":383,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-ah.xhcdn.com/xh-mobile/js/vbf2de6328c.assetsLoader.js","fqdn":"static-ah.xhcdn.com","domain":"xhcdn.com","tld":"com"},"ip":{"addr":"45.133.44.23","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhamster-com.pornproxy.art/","date":"2025-12-24T16:24:23.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-ah.xhcdn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 02:32:25 GMT","end":"Sun, 22 Feb 2026 02:32:24 GMT"},"fingerprint":{"sha1":"7B:F2:E0:21:13:37:93:2F:13:4B:AF:45:C9:20:3E:6D:21:68:25:63","sha256":"59:8A:65:99:A9:96:ED:19:C7:CB:14:05:E0:41:CC:43:A2:76:8C:70:0A:21:E8:1D:70:D0:73:07:BF:C0:3D:6D"}}},"request":{"raw":"GET /xh-mobile/js/vbf2de6328c.assetsLoader.js HTTP/1.1\r\nHost: static-ah.xhcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xhamster-com.pornproxy.art\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.pornproxy.art/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 16:24:23 GMT\r\ncontent-type: text/javascript\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: rsic-kube0021\r\nx-rsic-pass: yes\r\ncache-control: max-age=86400\r\nx-rsic-responder: rsic-kube0018\r\nx-envoy-upstream-service-time: 2\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nexpires: Thu, 25 Dec 2025 16:24:23 GMT\r\nx-cdn-host-id: DS9201,DS9225\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12485,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (12485), with no line terminators","md5":"c4f9c1017e0b878b0c1b455e400fd0c4","sha1":"bf2de6328c8418343fe00881a13728bf0723bb9f","sha256":"0618f4881ca537ad2fea3dccb597d90e576d6179702517c47a208d51783de193","sha512":"ec5c10e2b17700cda9e3ddc97fa026c045d79f52068de6deffd1cdd7c0e046631943079aa2de1afcee8b2e434ea29eafaf7c6eb13cb648b0bd16a7e104fc469d","ssdeep":"384:Gxw4MNCT4nwlyfKHidePKt/nDCxt6thR3B57YmJCqNYW:KZkCT4Jtde+/nDIt6thl/3JNNYW","tlshash":"bf42c5797de1fd2ac3b62771b8bf000b737d09d0448c4710b26a4dda749665c622beaa","first_seen":"2025-12-24T16:24:53.899793Z","last_seen":"2025-12-24T16:24:53.899793Z","times_seen":1,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":49,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-nss.xhcdn.com/xh-images/components/ui/svgs/faphouse-crown.svg","fqdn":"static-nss.xhcdn.com","domain":"xhcdn.com","tld":"com"},"ip":{"addr":"185.76.9.4","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhamster-com.pornproxy.art/","date":"2025-12-24T16:24:23.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1568062827.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 16:37:26 GMT","end":"Wed, 28 Jan 2026 16:37:25 GMT"},"fingerprint":{"sha1":"D9:45:35:BC:11:71:78:DF:D2:80:BC:1D:D7:BB:63:0A:17:DB:2E:23","sha256":"93:8F:0B:F0:47:E5:AA:35:D3:41:F4:4F:E9:EB:8D:32:F7:9D:E8:C4:79:C2:CD:71:B2:CA:96:21:3A:39:5D:1C"}}},"request":{"raw":"GET /xh-images/components/ui/svgs/faphouse-crown.svg HTTP/1.1\r\nHost: static-nss.xhcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.pornproxy.art/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 16:24:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: rsic-kube0020\r\nx-rsic-pass: yes\r\ncache-control: max-age=604800\r\nexpires: Mon, 29 Dec 2025 11:32:33 GMT\r\nx-rsic-cached: mem\r\nx-rsic-responder: rsic-kube0019\r\nx-envoy-upstream-service-time: 1\r\ntiming-allow-origin: *\r\nx-77-nzt: EgwBuUwJAQH3ZucCAAwBisclzQH3AAAAAA\r\nx-77-nzt-ray: 563766354312d369b7134c69a8437939\r\nx-77-cache: HIT\r\nx-77-age: 190310\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":1930,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"01cd90c161db25640233d3f435ad8896","sha1":"773f9c25222c0a7a8f61a8c1bfe373aad79c6646","sha256":"335b16cdbca642b5cfb410519ef7522cb5c0c5f526d0c8d7b88ab1ffce1ecd5d","sha512":"adfe6e3a1acced4d4bfa18d5ee96b52cfa28c9b15aa1a67ee31b867174f1d2d3b31fbc05038f2f0f506e8e5035b952dafbd8c683abb54589e7115345b91f1470","ssdeep":"","tlshash":"9841bbb2d2e89847c41acae9de49d4356d5d00fb6ac2c5c0b1ddca9eaf340d2084ad94","first_seen":"2025-12-11T19:08:20.347129Z","last_seen":"2026-04-28T07:00:01.747187Z","times_seen":113,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":110,"dns":0,"connect":7,"send":0,"wait":8,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.imagexox.com/?url=https%3A%2F%2Fthumb-nss.xhcdn.com%2Fa%2FXQby_6gZqLRVTKuuU3CVig%2F017%2F586%2F877%2Fv2%2F16x9.214.jpg","fqdn":"image.imagexox.com","domain":"imagexox.com","tld":"com"},"ip":{"addr":"104.26.2.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://xhamster-com.pornproxy.art/","date":"2025-12-24T16:24:23.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagexox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Nov 2025 04:49:43 GMT","end":"Fri, 06 Feb 2026 05:48:19 GMT"},"fingerprint":{"sha1":"E5:35:C4:58:D6:DE:DE:E8:C7:3E:FD:8E:11:2B:6A:2B:5D:38:FD:4F","sha256":"8C:85:C1:D3:AE:CF:CA:4F:DA:BC:6A:4C:09:59:CE:29:A3:24:81:0B:90:7B:18:3D:CB:82:55:3B:9A:09:C5:C9"}}},"request":{"raw":"GET /?url=https%3A%2F%2Fthumb-nss.xhcdn.com%2Fa%2FXQby_6gZqLRVTKuuU3CVig%2F017%2F586%2F877%2Fv2%2F16x9.214.jpg HTTP/1.1\r\nHost: image.imagexox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.pornproxy.art/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 16:24:24 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npragma: no-cache\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=14400, must-revalidate\r\ncf-cache-status: MISS\r\nlast-modified: Wed, 24 Dec 2025 16:24:24 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8F7mBLLkhAj2N8t5Xj846A3VkQiCt8RoA79H%2FflTDG43JDaLpFg9YOjLU7tN4n2rqeY3hfUVBaMFSflzilq3HXjMQupD0ZDCsUlpIpbjwp4%3D\"}]}\r\ncf-ray: 9b3172dccb6556a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":541,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 17 x 10, 8-bit/color RGB, non-interlaced","md5":"010479cab78d9bd302b23e45a5e3b0ff","sha1":"943b338c160ab4d380358a94dd874869d2595e8b","sha256":"bcdb03b5bd9ab893f228239728e244c88a5c555f27170009f97fd5aa982bb33f","sha512":"abe0a22f1000f8e0fcb7bdff22072e81937cf08ba7559e10322590fb92641245dde6cfc9680a6cf0e29c8644c67317c3900f04366800b44ed1ddeaac1e092580","ssdeep":"","tlshash":"93f020c3d846764cc48c05ab1371ac0264024b7d0ca17acd6494d8490bb60928cd71cd","first_seen":"2025-12-24T16:24:53.901353Z","last_seen":"2025-12-24T16:24:53.901353Z","times_seen":1,"resource_available":false,"data":null}},"time_used":508,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":508,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-ah.xhcdn.com/xh-shared/js/locales/v99a0a46f59.en-start.js","fqdn":"static-ah.xhcdn.com","domain":"xhcdn.com","tld":"com"},"ip":{"addr":"45.133.44.23","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhamster-com.pornproxy.art/","date":"2025-12-24T16:24:23.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-ah.xhcdn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 02:32:25 GMT","end":"Sun, 22 Feb 2026 02:32:24 GMT"},"fingerprint":{"sha1":"7B:F2:E0:21:13:37:93:2F:13:4B:AF:45:C9:20:3E:6D:21:68:25:63","sha256":"59:8A:65:99:A9:96:ED:19:C7:CB:14:05:E0:41:CC:43:A2:76:8C:70:0A:21:E8:1D:70:D0:73:07:BF:C0:3D:6D"}}},"request":{"raw":"GET /xh-shared/js/locales/v99a0a46f59.en-start.js HTTP/1.1\r\nHost: static-ah.xhcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xhamster-com.pornproxy.art\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.pornproxy.art/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 16:24:23 GMT\r\ncontent-type: text/javascript\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: rsic-kube0018\r\nx-rsic-pass: yes\r\ncache-control: max-age=86400\r\nx-rsic-responder: rsic-kube0018\r\nx-envoy-upstream-service-time: 1\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nexpires: Thu, 25 Dec 2025 16:24:23 GMT\r\nx-cdn-host-id: DS9201,DS9225\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":15432,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (15430), with no line terminators","md5":"6716e12a46143244fd06e609cc33697c","sha1":"99a0a46f595630270e27584d102c9d274588ccaa","sha256":"a5671442fec0ce7452ed7de32f72352c6c3e82acde1f3b67af017e40df7833e4","sha512":"3b9462416f1a4f029b551cfe07ce86d5b278831fbef9a17d5a711417b17ce9c7d22972ec97b6b44f334d15d979b0ded9f539b43bac3948fb6cc9628d41633733","ssdeep":"384:AeQSMe2poE8UiHe46WfWOHisUAovo5tpw5WXR2:Ae02E8URCAjQ5tp1U","tlshash":"af62a71b7b3c222d09d3472a77921aaff665611c13a4405a78b474b80fd9a8f8b737c7","first_seen":"2025-12-24T16:24:53.902429Z","last_seen":"2025-12-27T23:34:00.838014Z","times_seen":3,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.imagexox.com/?url=https%3A%2F%2Fthumb-nss.xhcdn.com%2Fa%2F707oJHWQzAY2ZVOlccWxrg%2F024%2F691%2F623%2Fv2%2F16x9.203.jpg","fqdn":"image.imagexox.com","domain":"imagexox.com","tld":"com"},"ip":{"addr":"104.26.2.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://xhamster-com.pornproxy.art/","date":"2025-12-24T16:24:23.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagexox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Nov 2025 04:49:43 GMT","end":"Fri, 06 Feb 2026 05:48:19 GMT"},"fingerprint":{"sha1":"E5:35:C4:58:D6:DE:DE:E8:C7:3E:FD:8E:11:2B:6A:2B:5D:38:FD:4F","sha256":"8C:85:C1:D3:AE:CF:CA:4F:DA:BC:6A:4C:09:59:CE:29:A3:24:81:0B:90:7B:18:3D:CB:82:55:3B:9A:09:C5:C9"}}},"request":{"raw":"GET /?url=https%3A%2F%2Fthumb-nss.xhcdn.com%2Fa%2F707oJHWQzAY2ZVOlccWxrg%2F024%2F691%2F623%2Fv2%2F16x9.203.jpg HTTP/1.1\r\nHost: image.imagexox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.pornproxy.art/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 16:24:24 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npragma: no-cache\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=14400, must-revalidate\r\ncf-cache-status: MISS\r\nlast-modified: Wed, 24 Dec 2025 16:24:24 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ezi16DH8mxESfX6vBJbjL8ihvLEcp5IUveC29l0LUC9pSZz%2FJP1fm%2BhK2qEET7fhefGh%2BGd%2FWlDK58TkM25ofp3qFgheN33vW0sY9v%2BF3mE%3D\"}]}\r\ncf-ray: 9b3172dccb6156a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":568,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 17 x 10, 8-bit/color RGB, non-interlaced","md5":"41373a40b222f6e356026acde45665de","sha1":"15685fd4d2b801d0a8ac64e1a4c4e9002cfd094f","sha256":"ef427b40b61ff34ea3c40c7a91e2e00ade7bf66e8399fc211ad6ccf9b1f1184b","sha512":"384468c7902f44ebeade6b9ee75a20c24d60ccd14b6ffb27613cce2dfa0bd631fe37ac6b26e2468fff536afe5dcf6f84bdcb6317054e789d591a76241788641d","ssdeep":"","tlshash":"1ef0269e9e7a5217c20c02ad5612a024fd1940b847f6777b1599d457fa3ef05c890904","first_seen":"2025-12-24T16:24:53.904726Z","last_seen":"2025-12-24T16:24:53.904726Z","times_seen":1,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":9,"connect":1,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.imagexox.com/?url=https%3A%2F%2Fic-vrm-nss.xhcdn.com%2Fa%2FZmE2NTI1MDE3YjgwMTUwMjMwYjVkOWMxMGQ4NDE4ZWY%2Fwebp%28q%3A75%29%2Cs%28w%3A1536%2Ch%3A152%29%2Fpromo%2Fmessage%2F3721%2F694016586fbaa.jpg","fqdn":"image.imagexox.com","domain":"imagexox.com","tld":"com"},"ip":{"addr":"104.26.2.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhamster-com.pornproxy.art/","date":"2025-12-24T16:24:23.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagexox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Nov 2025 04:49:43 GMT","end":"Fri, 06 Feb 2026 05:48:19 GMT"},"fingerprint":{"sha1":"E5:35:C4:58:D6:DE:DE:E8:C7:3E:FD:8E:11:2B:6A:2B:5D:38:FD:4F","sha256":"8C:85:C1:D3:AE:CF:CA:4F:DA:BC:6A:4C:09:59:CE:29:A3:24:81:0B:90:7B:18:3D:CB:82:55:3B:9A:09:C5:C9"}}},"request":{"raw":"GET /?url=https%3A%2F%2Fic-vrm-nss.xhcdn.com%2Fa%2FZmE2NTI1MDE3YjgwMTUwMjMwYjVkOWMxMGQ4NDE4ZWY%2Fwebp%28q%3A75%29%2Cs%28w%3A1536%2Ch%3A152%29%2Fpromo%2Fmessage%2F3721%2F694016586fbaa.jpg HTTP/1.1\r\nHost: image.imagexox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.pornproxy.art/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 16:24:24 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npragma: no-cache\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=14400, must-revalidate\r\ncf-cache-status: MISS\r\nlast-modified: Wed, 24 Dec 2025 16:24:24 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lZMUG%2BjrwaJsaspntx2yilXxNYdcvcSQca6MdB6luvrpr8xPOOtpFgDfrZYFhwKp30kPBNPaDRN96bx%2F9Z%2BN%2Bj9Azy9ilj9uncYHxuSh6JU%3D\"}]}\r\ncf-ray: 9b3172dccb6756a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":94551,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1537 x 153, 8-bit/color RGB, non-interlaced","md5":"3bec8c14656af937b4624af96ff27041","sha1":"103044b7930484269a0a324efb3b7e77987e0ed2","sha256":"d45d464ab0e9bb7f3a6244aaa91100c8b9d333a7d3d8434cf14cdc74f2bc3a6d","sha512":"d65ae398fc335b1c7fb5393448a5c4023b8a269d76a6726cae9849194d42c00ba61ec5bfe0c6a450aacab255445515841640f2a48eac75abf3dd4d0cc7320bc6","ssdeep":"1536:c6+tCPav9MCZWvP0YoN1mfVO8LI6X9H7/cJhpuIMF2OOOBjpI7+xE2RMPXjCR8HB:pDPaVMCk3Vk8LXXNcJhpuxbTjpqCTROb","tlshash":"6d93120276f9b950754391cdabb6dc0adef8a6d394450286d338f1a9bd5cce6888d3f0","first_seen":"2025-12-24T16:24:53.905637Z","last_seen":"2025-12-24T16:24:53.905637Z","times_seen":1,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhamster-com.pornproxy.art/user.php","fqdn":"xhamster-com.pornproxy.art","domain":"pornproxy.art","tld":"art"},"ip":{"addr":"79.124.60.168","port":443,"asn":50360,"as":"Tamatiya EOOD","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xhamster-com.pornproxy.art/","date":"2025-12-24T16:24:24.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pornproxy.art","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 04 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"34:98:DA:EF:BD:51:0F:FA:C0:7E:8D:F3:85:A9:0F:F3:74:94:33:AB","sha256":"C6:FB:DF:54:76:7A:90:37:60:35:67:CB:B2:AA:3D:0C:4C:74:07:B1:94:5A:7F:D9:A6:66:95:47:EC:42:52:A8"}}},"request":{"raw":"POST /user.php HTTP/1.1\r\nHost: xhamster-com.pornproxy.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xhamster-com.pornproxy.art/\r\nContent-Type: application/x-www-form-urlencoded\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 39\r\nOrigin: https://xhamster-com.pornproxy.art\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: view=1; PHPSESSID=m0hmk9ab0rabp5374pcp6a5lj0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":39,"data":"action=aa4d9fbab6cac347da6b11b89b4d2ac7"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 24 Dec 2025 16:24:24 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T15:24:19.563648Z","times_seen":14331860,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}