{"report_id":"80c55b17-7705-4c27-8cad-b7165d219ef7","version":6,"status":"done","tags":[],"date":"2025-02-16T18:17:35Z","url":{"schema":"http","addr":"rentry.co/freemediafuckyeah","fqdn":"rentry.co","domain":"rentry.co","tld":"co"},"ip":{"addr":"104.26.3.16","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rentry.co/freemediafuckyeah","fqdn":"rentry.co","domain":"rentry.co","tld":"co"},"title":"NSFW Indexes"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"","expires_at":"2027-04-27T18:17:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":75,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-02-12T01:50:35.062664Z","alert_count":0,"request_count":1,"received_data":110461,"sent_data":428,"comment":"","tags":null,"fingerprints":null},{"fqdn":"rentry.co","ip":{"addr":"104.26.3.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-05-04","domain_rank":152632,"first_seen":"2018-02-12T07:04:42Z","last_seen":"2025-02-11T23:27:02.704836Z","alert_count":0,"request_count":5,"received_data":441515,"sent_data":2493,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2025-02-16T18:17:05Z","timestamp":1739729825,"ip_dst":{"addr":"104.26.3.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.27","port":41784,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Pastebin Service Domain (rentry .co in TLS SNI)","source":"{\"timestamp\":\"2025-02-16T18:17:05.163589+0000\",\"flow_id\":1044951242724099,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.27\",\"src_port\":41784,\"dest_ip\":\"104.26.3.16\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2044865,\"rev\":1,\"signature\":\"ET INFO Observed Pastebin Service Domain (rentry .co in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2023_04_03\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_03\"]}},\"tls\":{\"sni\":\"rentry.co\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":911,\"bytes_toclient\":3513,\"start\":\"2025-02-16T18:17:05.152323+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rentry.co/freemediafuckyeah","fqdn":"rentry.co","domain":"rentry.co","tld":"co"},"ip":{"addr":"104.26.3.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"469bb64c8f975ef313c63fc82a47849c","sha1":"f77a7fb434663acc643a31fc6646df0bdac02dba","sha256":"13cdbe12e27208b08c7694a5ea20b699a46438a61ebb785b208ddc19b3c397c1","sha512":"99614855d5e012c78df70486d5b90b2f5c6db6d463466cff32f1eaccf904938a2f169abe8c38ab58bc247eefdedd5684ebfa37c924bbac5ce17847d7d80a1668","ssdeep":"","tlshash":"2fc08c88210b5c7142b76a0a0b6fa600b00a32139891aa32790f63044f30e07d749818","size":173,"data":"","first_seen":"2023-10-14T10:58:32Z","last_seen":"2026-04-04T12:21:45.226014Z","times_seen":779,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rentry.co/freemediafuckyeah","fqdn":"rentry.co","domain":"rentry.co","tld":"co"},"ip":{"addr":"104.26.3.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"90bc7084c1e66f84896e4d9381f354dd","sha1":"9ee0ed4d98181c637467ecfb26f569db784a5c46","sha256":"741481fe766011c748f008b0f9903c05ce71d317b17e8db7cb0b4820be4eefb2","sha512":"bcb64e0be345e9216bece36b34635230aad7af1b79d31dc93fa165a68ad3b6466be847ead033d879cfeb73dd51385bc36a94b79bad170d198224f165deaa100a","ssdeep":"","tlshash":"5ad0a7ac8cb1c73546a107c53031fa5028b3b0a96413e41989cddb4c1055fcfae56d05","size":241,"data":"","first_seen":"2023-11-11T06:33:16Z","last_seen":"2026-04-04T12:21:45.22652Z","times_seen":770,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rentry.co/static/js/jquery.min.js?vsson=28","fqdn":"rentry.co","domain":"rentry.co","tld":"co"},"ip":{"addr":"104.26.3.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e188d3498d443f6756228e9deead947b","sha1":"1dcd38b086030b5e54cfb76d68bfa01725e57761","sha256":"e993773fb478d4f63d4ec15c0deb9891da6379535a9b659a65e18fdc2e78fae4","sha512":"991071c0c1d2e4dbbc1568492ad4cd74c95cd55f813062b5c3a8f19ff6a709bfdc9343c859abc7b1d7a8749e317fa2d4ff84000ff6718e1af5c108fcba732edd","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvaku:AYh8eip3huuf6IidlrvakdtQ47GKe","tlshash":"059309ddb2c6703257a720ba007f550bf236199d6c4d8450f129d8e9bcbca4a827bf6d","size":93490,"data":"","first_seen":"2024-10-17T19:23:11.057244Z","last_seen":"2025-06-16T02:01:15.736821Z","times_seen":283,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rentry.co/static/js/bootstrap.min.js?vsson=28","fqdn":"rentry.co","domain":"rentry.co","tld":"co"},"ip":{"addr":"104.26.3.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1d98d47689e00f8ecbc5d9f61bdb42e","sha1":"6778fed3cf095a318141a31f455c8f4663885bde","sha256":"0a34a87842c539c1f4feec56bba982fd596b73500046a6e6fe38a22260c6577b","sha512":"021e615983f30ec5477fd8b611e8c5045ac6d9900f9a9bb8649b56e0c7d282965a727f8cf501c3b7e1ddff02f5b44924d5481bcea7a926be8a9e166314a07ed0","ssdeep":"768:5NYyDyKAmHVaS3m3Dqp0NwCkXDtdFDLmTV+miDNJcJiQMRqyPiYtB6UvcCg8YGk:5NTKktDLmTF8yJL45XtHjoGk","tlshash":"1243c90a725478b205df9176917f420bb737688ae94ac16cb91d98ed1e7cc893227f3c","size":58072,"data":"","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-04-04T12:54:29.843664Z","times_seen":23517,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-LLFSDKZXET","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"32ed7964ec3dbcca2c135a5d688536b9","sha1":"e21cc2f32795f21ee8d1c6d0b27a95a30b6e09ee","sha256":"e82efc433a866c34accdd41101837bf92fc0a59b9b5d145a2b57eccb0032adca","sha512":"f69434cc5446c21bcf51225cf09c413d629191ba17ee8936fb0c93b132a9abfdd1ed32ddf88baa2ff8090b04e3665a60ad7158e948c372b443b7c14c59adb758","ssdeep":"3072:9sgp+jtEFe/L4INFREIG0/yTrz1+TMtBHNYFIXq7TVFzKENZI20UKMqehYB:a/rT4INF+cWNYFGq7TVFzKkZt0XMqeU","tlshash":"b56419cdb3c674669396a878507f018bb17b28a2f84ccc94f189c8d52d74a9a4277f7c","size":317958,"data":"","first_seen":"2025-02-16T18:17:38.32572Z","last_seen":"2025-02-16T18:17:38.32572Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-LLFSDKZXET","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rentry.co/freemediafuckyeah","date":"2025-02-16T18:17:05.636Z","timestamp":1739729825636,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jan 2025 08:35:27 GMT","end":"Mon, 21 Apr 2025 08:35:26 GMT"},"fingerprint":{"sha1":"65:8D:A3:B8:35:26:DF:86:1E:F6:68:B3:C0:3F:9A:71:5D:3D:F0:F1","sha256":"4F:72:70:C9:E0:56:46:A8:C1:50:F4:98:46:A9:C2:5C:5B:F3:63:81:7F:F9:DF:5D:9D:BE:B1:5C:1C:50:78:BB"}}},"request":{"raw":"GET /gtag/js?id=G-LLFSDKZXET HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rentry.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 16 Feb 2025 18:17:05 GMT\r\nexpires: Sun, 16 Feb 2025 18:17:05 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1003:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1003:0\r\nreport-to: {\"group\":\"ascgcycc:1003:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1003:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 109462\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":109462,"size_decoded":317958,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5960)","md5":"32ed7964ec3dbcca2c135a5d688536b9","sha1":"e21cc2f32795f21ee8d1c6d0b27a95a30b6e09ee","sha256":"e82efc433a866c34accdd41101837bf92fc0a59b9b5d145a2b57eccb0032adca","sha512":"f69434cc5446c21bcf51225cf09c413d629191ba17ee8936fb0c93b132a9abfdd1ed32ddf88baa2ff8090b04e3665a60ad7158e948c372b443b7c14c59adb758","ssdeep":"3072:9sgp+jtEFe/L4INFREIG0/yTrz1+TMtBHNYFIXq7TVFzKENZI20UKMqehYB:a/rT4INF+cWNYFGq7TVFzKkZt0XMqeU","tlshash":"b56419cdb3c674669396a878507f018bb17b28a2f84ccc94f189c8d52d74a9a4277f7c","first_seen":"2025-02-16T18:17:38.32572Z","last_seen":"2025-02-16T18:17:38.32572Z","times_seen":1,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":147,"dns":0,"connect":21,"send":0,"wait":43,"receive":52,"ssl":118},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rentry.co/static/js/jquery.min.js?vsson=28","fqdn":"rentry.co","domain":"rentry.co","tld":"co"},"ip":{"addr":"104.26.3.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rentry.co/freemediafuckyeah","date":"2025-02-16T18:17:05.639Z","timestamp":1739729825639,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rentry.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Feb 2025 01:52:48 GMT","end":"Sun, 11 May 2025 02:52:45 GMT"},"fingerprint":{"sha1":"81:A7:05:B8:68:10:CA:D8:95:58:41:2D:5D:0F:24:B6:86:2D:3C:52","sha256":"E7:4B:DB:81:38:00:8E:E8:BA:28:42:97:15:CC:88:B2:AB:7F:B4:50:A1:D4:C2:EF:48:E5:8F:2F:A6:23:39:12"}}},"request":{"raw":"GET /static/js/jquery.min.js?vsson=28 HTTP/1.1\r\nHost: rentry.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rentry.co/freemediafuckyeah\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sessionid=og0f9t6ezfe54qd7fyc7d1z0z8w07777\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 16 Feb 2025 18:17:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 29 Oct 2024 18:34:53 GMT\r\netag: W/\"67212acd-16d32\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, vary\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: HIT\r\nage: 9502664\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=CSbDVQD%2B0u0QTXMoP%2B%2Bh6DyCWbZSb9UPzmXPWpuD95J80XO%2F6ZMZSyUZ3kQnECmzUXZWRIjjenjIrHRn3O%2F0gUWfW0bppBk%2F1sHk2YMaaGTLbVL%2FJW4ucwAmhg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 912f88522e5c5699-OSL\r\ncontent-encoding: br\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2161\u0026min_rtt=539\u0026rtt_var=2174\u0026sent=21\u0026recv=26\u0026lost=0\u0026retrans=0\u0026sent_bytes=18470\u0026recv_bytes=1642\u0026delivery_rate=14572735\u0026cwnd=256\u0026unsent_bytes=0\u0026cid=6db5e1b7490b79a1\u0026ts=493\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":93490,"size_decoded":93490,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"e188d3498d443f6756228e9deead947b","sha1":"1dcd38b086030b5e54cfb76d68bfa01725e57761","sha256":"e993773fb478d4f63d4ec15c0deb9891da6379535a9b659a65e18fdc2e78fae4","sha512":"991071c0c1d2e4dbbc1568492ad4cd74c95cd55f813062b5c3a8f19ff6a709bfdc9343c859abc7b1d7a8749e317fa2d4ff84000ff6718e1af5c108fcba732edd","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvaku:AYh8eip3huuf6IidlrvakdtQ47GKe","tlshash":"059309ddb2c6703257a720ba007f550bf236199d6c4d8450f129d8e9bcbca4a827bf6d","first_seen":"2024-10-17T19:23:11.057244Z","last_seen":"2025-06-16T02:01:15.736821Z","times_seen":283,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rentry.co/static/js/bootstrap.min.js?vsson=28","fqdn":"rentry.co","domain":"rentry.co","tld":"co"},"ip":{"addr":"104.26.3.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rentry.co/freemediafuckyeah","date":"2025-02-16T18:17:05.641Z","timestamp":1739729825641,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rentry.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Feb 2025 01:52:48 GMT","end":"Sun, 11 May 2025 02:52:45 GMT"},"fingerprint":{"sha1":"81:A7:05:B8:68:10:CA:D8:95:58:41:2D:5D:0F:24:B6:86:2D:3C:52","sha256":"E7:4B:DB:81:38:00:8E:E8:BA:28:42:97:15:CC:88:B2:AB:7F:B4:50:A1:D4:C2:EF:48:E5:8F:2F:A6:23:39:12"}}},"request":{"raw":"GET /static/js/bootstrap.min.js?vsson=28 HTTP/1.1\r\nHost: rentry.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rentry.co/freemediafuckyeah\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sessionid=og0f9t6ezfe54qd7fyc7d1z0z8w07777\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 16 Feb 2025 18:17:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 29 Oct 2024 18:39:27 GMT\r\netag: W/\"67212bdf-e2d8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, vary\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: HIT\r\nage: 384785\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=N16Cbg7NmeNjWmKCO4EO77KHh8AmyQBI0K7Pzyuy1lJeV955%2FhLZS4S7Xub0JYe5WBzMJMGWrCwwcIvqhqnVX%2Baa5ZaqfsAwZ6EKKu2hAOzLPjWk%2Brug9FuLTw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 912f88523e5f5699-OSL\r\ncontent-encoding: br\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2933\u0026min_rtt=539\u0026rtt_var=2604\u0026sent=70\u0026recv=44\u0026lost=0\u0026retrans=0\u0026sent_bytes=85822\u0026recv_bytes=1642\u0026delivery_rate=1702527\u0026cwnd=256\u0026unsent_bytes=0\u0026cid=6db5e1b7490b79a1\u0026ts=510\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":58072,"size_decoded":58072,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (57791)","md5":"e1d98d47689e00f8ecbc5d9f61bdb42e","sha1":"6778fed3cf095a318141a31f455c8f4663885bde","sha256":"0a34a87842c539c1f4feec56bba982fd596b73500046a6e6fe38a22260c6577b","sha512":"021e615983f30ec5477fd8b611e8c5045ac6d9900f9a9bb8649b56e0c7d282965a727f8cf501c3b7e1ddff02f5b44924d5481bcea7a926be8a9e166314a07ed0","ssdeep":"768:5NYyDyKAmHVaS3m3Dqp0NwCkXDtdFDLmTV+miDNJcJiQMRqyPiYtB6UvcCg8YGk:5NTKktDLmTF8yJL45XtHjoGk","tlshash":"1243c90a725478b205df9176917f420bb737688ae94ac16cb91d98ed1e7cc893227f3c","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-04-04T12:54:29.843664Z","times_seen":23517,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rentry.co/favicon.ico","fqdn":"rentry.co","domain":"rentry.co","tld":"co"},"ip":{"addr":"104.26.3.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rentry.co/freemediafuckyeah","date":"2025-02-16T18:17:05.966Z","timestamp":1739729825966,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rentry.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Feb 2025 01:52:48 GMT","end":"Sun, 11 May 2025 02:52:45 GMT"},"fingerprint":{"sha1":"81:A7:05:B8:68:10:CA:D8:95:58:41:2D:5D:0F:24:B6:86:2D:3C:52","sha256":"E7:4B:DB:81:38:00:8E:E8:BA:28:42:97:15:CC:88:B2:AB:7F:B4:50:A1:D4:C2:EF:48:E5:8F:2F:A6:23:39:12"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: rentry.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rentry.co/freemediafuckyeah\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sessionid=og0f9t6ezfe54qd7fyc7d1z0z8w07777\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 16 Feb 2025 18:17:05 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Tue, 29 Oct 2024 18:39:27 GMT\r\netag: W/\"67212bdf-3aee\"\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=14400, vary\r\ncf-cache-status: HIT\r\nage: 247\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=XJW%2B2F%2FW2sDgn9bGH%2BYzNMvOBs0Itet6PmBI0jiUKtLMR%2FB6VxLxM%2BW6jP6rcb5T6TQrbRTGFSOzGxOD9j3GMYXDsqrNMvjZclTKeIZ%2Bs4Vzkc45KMPl6qmkfA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 912f88544a865699-OSL\r\ncontent-encoding: br\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2879\u0026min_rtt=539\u0026rtt_var=2868\u0026sent=84\u0026recv=50\u0026lost=0\u0026retrans=0\u0026sent_bytes=102337\u0026recv_bytes=1745\u0026delivery_rate=16105156\u0026cwnd=256\u0026unsent_bytes=0\u0026cid=6db5e1b7490b79a1\u0026ts=829\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15086,"size_decoded":15086,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"b102d58bb28a83de9b59fedcd08d17ea","sha1":"8b6edee7f5d96b69c6e4f0c4e8376c640a34aa63","sha256":"93eab1e1c50b4ff5b4aa5eefa6e85ce7bae235b52886914529c8b8aa4319f26c","sha512":"8ce7c72ef1cddafbc5c00e163233ab42e27b3cc12d463053235f2d73ded0ed6d8fd313b81acc47dcc30a754759759097daf9a3dc05bc30e70485d9b133de2483","ssdeep":"48:jxe0vRY4RbYvH2OZ0PPF06O5QdGYTpBPBkArTfPI:leWavH2OZn6dUYTtPI","tlshash":"b66280560b204753f264b5fcc887fb54c739bebca79d024696843a8250b337bab1b15b","first_seen":"2023-05-06T04:39:58Z","last_seen":"2026-04-04T12:21:45.219043Z","times_seen":1169,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rentry.co/freemediafuckyeah","fqdn":"rentry.co","domain":"rentry.co","tld":"co"},"ip":{"addr":"104.26.3.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-02-16T18:17:05.157Z","timestamp":1739729825157,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rentry.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Feb 2025 01:52:48 GMT","end":"Sun, 11 May 2025 02:52:45 GMT"},"fingerprint":{"sha1":"81:A7:05:B8:68:10:CA:D8:95:58:41:2D:5D:0F:24:B6:86:2D:3C:52","sha256":"E7:4B:DB:81:38:00:8E:E8:BA:28:42:97:15:CC:88:B2:AB:7F:B4:50:A1:D4:C2:EF:48:E5:8F:2F:A6:23:39:12"}}},"request":{"raw":"GET /freemediafuckyeah HTTP/1.1\r\nHost: rentry.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 16 Feb 2025 18:17:05 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Origin, Cookie, accept-encoding\r\nx-xss-protection: 1; mode=block\r\nset-cookie: sessionid=og0f9t6ezfe54qd7fyc7d1z0z8w07777; expires=Wed, 19 Feb 2025 18:17:05 GMT; HttpOnly; Max-Age=259200; Path=/; SameSite=Lax; Secure\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: Vary\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=p5niRoCGZMYaHUyfs6GFtbLE88sBuN%2FrVrRPkES6C%2FN1Sq5MMzD%2FlbDepBBFhp1T4fPX53%2Fgp3ewYm%2FsHzHSQigUktHNNt8YyKGgD239rxTORKjUb5KwSIzepA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 912f884f78045699-OSL\r\ncontent-encoding: br\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=6864\u0026min_rtt=539\u0026rtt_var=12551\u0026sent=7\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3268\u0026recv_bytes=1255\u0026delivery_rate=5768924\u0026cwnd=253\u0026unsent_bytes=0\u0026cid=6db5e1b7490b79a1\u0026ts=138\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":78992,"size_decoded":78992,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T12:49:17.462299Z","times_seen":13332134,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":42,"dns":1,"connect":1,"send":0,"wait":100,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rentry.co/static/css/bootstrap.min.css?vsson=28","fqdn":"rentry.co","domain":"rentry.co","tld":"co"},"ip":{"addr":"104.26.3.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rentry.co/freemediafuckyeah","date":"2025-02-16T18:17:05.633Z","timestamp":1739729825633,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rentry.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Feb 2025 01:52:48 GMT","end":"Sun, 11 May 2025 02:52:45 GMT"},"fingerprint":{"sha1":"81:A7:05:B8:68:10:CA:D8:95:58:41:2D:5D:0F:24:B6:86:2D:3C:52","sha256":"E7:4B:DB:81:38:00:8E:E8:BA:28:42:97:15:CC:88:B2:AB:7F:B4:50:A1:D4:C2:EF:48:E5:8F:2F:A6:23:39:12"}}},"request":{"raw":"GET /static/css/bootstrap.min.css?vsson=28 HTTP/1.1\r\nHost: rentry.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rentry.co/freemediafuckyeah\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sessionid=og0f9t6ezfe54qd7fyc7d1z0z8w07777\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 16 Feb 2025 18:17:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 29 Oct 2024 18:34:53 GMT\r\netag: W/\"67212acd-2e907\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, vary\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: HIT\r\nage: 9502664\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=R0tvpcZWNTaEbD%2ByitPeAbmYFaeXSrFXE%2FxcUM7iOb4gv1AU0%2F1ejyjVxg7ONP7rHxF1BG9hRhCgLo6jBrunb8wkr7G72RGXoJtPiIf%2Be1q3imwLvve6TBw53g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 912f88522e565699-OSL\r\ncontent-encoding: br\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1647\u0026min_rtt=539\u0026rtt_var=106\u0026sent=46\u0026recv=42\u0026lost=0\u0026retrans=0\u0026sent_bytes=52782\u0026recv_bytes=1642\u0026delivery_rate=14572735\u0026cwnd=256\u0026unsent_bytes=0\u0026cid=6db5e1b7490b79a1\u0026ts=501\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":190727,"size_decoded":190727,"mime_type":"text/css","magic":"ASCII text, with very long lines (65324)","md5":"9eae62f922a6cd7f2abdea13d8bc0a32","sha1":"c0875bc2662a303f288fea600bba5a5a53906e79","sha256":"dab2f4b3f262998d8e8034b6714e34ebaa63cdf367ff35cb0a1823023b2ae79d","sha512":"32b31c4d35f1a48e17920092c95a963a0b6f865b70f0d2886917458b57de0afef1f1c3639807425e0df5373bb1affecba87aa483015bc378fd38cc51307ac114","ssdeep":"1536:b/xImT+IcCQYYDnDEBi83NcuSEk/ekX/uKiq3SYiLENM6HN26CTRPDbQ0T:b/Riz7G3q3SYiLENM6HN26UbQ0T","tlshash":"3f1495a7f1a0316de063c61954d0fabe162f8185e7264ffbf42b376447895ca1a63e0c","first_seen":"2024-10-30T15:45:57.812198Z","last_seen":"2025-03-13T18:40:03.906954Z","times_seen":122,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}