{"report_id":"86b83b5a-c5cb-4e59-8507-525420db1f14","version":6,"status":"done","tags":["dyndns"],"date":"2026-01-03T07:16:44Z","url":{"schema":"http","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"104.21.56.249","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"title":"Owk/ Porn Videos for Free in Full HD #1","dom":{"size":89615,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (64685)","md5":"e66d7863a35eda1761559d77168c295e","sha1":"3ec040c74defcfeee901a0aed1e21dcf4d407e9f","sha256":"99d8152cf2a46db8ef644e5208ab0ab0e2cea28dcd7d81e3f74ddadd3b887d78","sha512":"6e281e1c01cb22b9beb03f3928770b3325c9f0545a4bdf6d5ae10da7e86e78dd8da00b6f32c7d2e6e3146066c68396ecd9cd4f4fa9ef02ab7b3c1dd0e9b91c75","ssdeep":"1536:/zeLElQtsm30oJ8q+DlhCi+arLQi118ICNYdaQuCu5rFLc:qwmxFFLc","tlshash":"72938411558251384fa7c1963b85a64cbb3ec182fb73afedfd69f118869e28d31e61c0","dom_hash":"domhash3bef0cc04dff0b55b7b7df1481d2fba4","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"104.21.56.249","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-07T07:16:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":2,"analyzer":10}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-03T07:16:12Z","timestamp":1767424572,"ip_dst":{"addr":"162.159.207.0","port":3478,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.20","port":51919,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2026-01-03T07:16:12.696749+0000\",\"flow_id\":1742295397081517,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":51919,\"dest_ip\":\"162.159.207.0\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2026-01-03T07:16:12.696749+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-03T07:16:12Z","timestamp":1767424572,"ip_dst":{"addr":"172.18.0.20","port":51919,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"162.159.207.0","port":3478,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)","source":"{\"timestamp\":\"2026-01-03T07:16:12.700770+0000\",\"flow_id\":1742295397081517,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"162.159.207.0\",\"src_port\":3478,\"dest_ip\":\"172.18.0.20\",\"dest_port\":51919,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016150,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":62,\"bytes_toclient\":74,\"start\":\"2026-01-03T07:16:12.696749+0000\"}}"}],"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"prxycdn.servequake.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"u3y8v8u8.aucdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"intelligenceadx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"www.intelligenceadx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"p.iople.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]},"summary":[{"fqdn":"prd.jwpltx.com","ip":{"addr":"108.157.229.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2012-08-14","domain_rank":18971,"first_seen":"2019-06-03T17:16:46Z","last_seen":"2025-12-28T02:29:28.50198Z","alert_count":0,"request_count":36,"received_data":10584,"sent_data":30012,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-28T22:14:05.525046Z","alert_count":0,"request_count":4,"received_data":194433,"sent_data":2098,"comment":"","tags":null,"fingerprints":null},{"fqdn":"imasdk.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3922,"first_seen":"2014-02-25T09:02:53Z","last_seen":"2025-12-29T21:08:31.306004Z","alert_count":0,"request_count":1,"received_data":462519,"sent_data":439,"comment":"","tags":null,"fingerprints":null},{"fqdn":"6.adsco.re","ip":{"addr":"104.16.83.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":91627,"first_seen":"2018-01-15T04:15:29Z","last_seen":"2026-01-02T15:58:02.609061Z","alert_count":0,"request_count":2,"received_data":1175,"sent_data":837,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"s.pemsrv.com","ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2023-08-01","domain_rank":104334,"first_seen":"2023-08-04T13:10:46Z","last_seen":"2025-12-30T11:33:09.838032Z","alert_count":0,"request_count":8,"received_data":9699,"sent_data":3612,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"b.adsco.re","ip":{"addr":"104.16.83.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":0,"first_seen":"2026-01-01T21:11:47.801645Z","last_seen":"2026-01-01T21:11:47.801645Z","alert_count":0,"request_count":1,"received_data":1859,"sent_data":440,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ping-meta-prd.jwpltx.com","ip":{"addr":"52.84.50.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2012-08-14","domain_rank":66485,"first_seen":"2019-07-29T19:21:51Z","last_seen":"2025-12-30T01:48:30.019356Z","alert_count":0,"request_count":1,"received_data":294,"sent_data":627,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"o0o5dapl3enn.s4.adsco.re","ip":{"addr":"185.200.116.60","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":463,"sent_data":430,"comment":"","tags":null,"fingerprints":null},{"fqdn":"hqfap.com","ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-27","domain_rank":0,"first_seen":"2025-11-04T03:53:41.697887Z","last_seen":"2025-12-27T00:45:09.408857Z","alert_count":0,"request_count":86,"received_data":3206505,"sent_data":71642,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Socket.io","description":"","website":"https://socket.io","common_platform_enumeration":"","icon":"Socket.io.svg","categories":["JavaScript frameworks"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Material Design Lite","description":"Material Design Lite is a library of components for web developers.","website":"https://getmdl.io","common_platform_enumeration":"","icon":"Material Design Lite.png","categories":["UI frameworks"]},{"name":"SweetAlert2","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]},{"name":"FingerprintJS:2","description":"FingerprintJS is a browser fingerprinting library that queries browser attributes and computes a hashed visitor identifier from them.","website":"https://fingerprintjs.com","common_platform_enumeration":"","icon":"FingerprintJS.svg","categories":["JavaScript libraries","Browser fingerprinting"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Glyphicons","description":"Glyphicons are icon fonts which you can use in your web projects.","website":"https://glyphicons.com","common_platform_enumeration":"","icon":"Glyphicons.png","categories":["Font scripts"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"s.magsrv.com","ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2023-08-01","domain_rank":47665,"first_seen":"2023-08-04T12:48:00Z","last_seen":"2025-12-30T10:36:46.668022Z","alert_count":31,"request_count":31,"received_data":92501,"sent_data":28829,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"4.adsco.re","ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2017-02-14","domain_rank":95532,"first_seen":"2021-01-04T16:47:52Z","last_seen":"2026-01-02T14:18:55.851749Z","alert_count":0,"request_count":2,"received_data":1044,"sent_data":837,"comment":"","tags":null,"fingerprints":null},{"fqdn":"o0o5dapl3enn.n4.adsco.re","ip":{"addr":"38.132.109.126","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":463,"sent_data":430,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.iople.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2021-01-18","domain_rank":3768179,"first_seen":"2021-02-17T17:35:51Z","last_seen":"2026-01-02T17:56:23.427878Z","alert_count":0,"request_count":1,"received_data":112025,"sent_data":402,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"c.adsco.re","ip":{"addr":"104.16.83.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":100769,"first_seen":"2017-11-29T18:42:15Z","last_seen":"2025-12-30T22:00:49.362137Z","alert_count":0,"request_count":1,"received_data":469,"sent_data":464,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"extreme-ip-lookup.com","ip":{"addr":"190.2.142.44","port":443,"asn":49981,"as":"WorldStream B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2016-06-24","domain_rank":19564,"first_seen":"2016-07-04T05:00:32Z","last_seen":"2025-12-30T17:21:29.344282Z","alert_count":0,"request_count":1,"received_data":684,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"o0o5dapl3enn.l4.adsco.re","ip":{"addr":"185.200.118.62","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":463,"sent_data":430,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-12-28T22:17:10.032556Z","alert_count":0,"request_count":2,"received_data":9258,"sent_data":878,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-12-28T22:20:33.111263Z","alert_count":0,"request_count":3,"received_data":343709,"sent_data":1399,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.intelligenceadx.com","ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2020-04-18","domain_rank":673791,"first_seen":"2020-04-29T02:39:45Z","last_seen":"2025-12-30T11:33:46.573759Z","alert_count":1,"request_count":1,"received_data":42497,"sent_data":447,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"p.iople.com","ip":{"addr":"138.199.36.8","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"domain_registered":"2021-01-18","domain_rank":3590296,"first_seen":"2021-04-12T07:41:22Z","last_seen":"2025-12-27T00:45:10.093215Z","alert_count":1,"request_count":1,"received_data":443,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"prxycdn.servequake.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2000-02-10","domain_rank":0,"first_seen":"2025-12-12T22:30:10.687926Z","last_seen":"2025-12-27T00:45:09.964777Z","alert_count":8,"request_count":4,"received_data":0,"sent_data":2084,"comment":"","tags":null,"fingerprints":null},{"fqdn":"s3t3d2y1.afcdn.net","ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2022-06-27","domain_rank":0,"first_seen":"2025-11-21T12:51:16.33547Z","last_seen":"2026-01-02T20:39:03.970784Z","alert_count":20,"request_count":20,"received_data":1454495,"sent_data":10096,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"a.pemsrv.com","ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2023-08-01","domain_rank":181476,"first_seen":"2023-08-05T12:08:36Z","last_seen":"2026-01-01T22:13:42.412289Z","alert_count":0,"request_count":6,"received_data":863234,"sent_data":2458,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"u3y8v8u8.aucdn.net","ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2022-06-27","domain_rank":0,"first_seen":"2025-12-30T19:43:33.304479Z","last_seen":"2025-12-30T19:43:33.304479Z","alert_count":1,"request_count":1,"received_data":1573460,"sent_data":544,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"theporndude.com","ip":{"addr":"172.66.153.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-11-19","domain_rank":8134,"first_seen":"2013-12-28T00:22:02Z","last_seen":"2025-12-27T00:45:09.907198Z","alert_count":0,"request_count":1,"received_data":2770,"sent_data":436,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ssl.p.jwpcdn.com","ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-08-07","domain_rank":16928,"first_seen":"2017-01-30T05:00:14Z","last_seen":"2025-12-31T03:10:49.022264Z","alert_count":0,"request_count":45,"received_data":5001813,"sent_data":19296,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"entitlements.jwplayer.com","ip":{"addr":"65.9.46.54","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2007-09-17","domain_rank":18344,"first_seen":"2016-06-21T17:08:11Z","last_seen":"2025-12-30T19:48:13.944676Z","alert_count":0,"request_count":9,"received_data":4572,"sent_data":3960,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"adsco.re","ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2017-02-14","domain_rank":3069,"first_seen":"2017-04-03T03:11:30Z","last_seen":"2025-12-31T07:41:43.098962Z","alert_count":0,"request_count":1,"received_data":1764,"sent_data":438,"comment":"","tags":null,"fingerprints":null},{"fqdn":"a.magsrv.com","ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2023-08-01","domain_rank":51490,"first_seen":"2023-08-04T16:18:00Z","last_seen":"2025-12-30T09:00:06.745142Z","alert_count":33,"request_count":11,"received_data":2044911,"sent_data":9215,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"intelligenceadx.com","ip":{"addr":"208.95.114.100","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2020-04-18","domain_rank":61654,"first_seen":"2020-04-19T20:09:16Z","last_seen":"2026-01-02T01:16:13.736987Z","alert_count":1,"request_count":1,"received_data":257,"sent_data":1726,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-12-28T22:17:36.419718Z","alert_count":0,"request_count":2,"received_data":867846,"sent_data":860,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"hornyhill.com","ip":{"addr":"104.21.59.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-10","domain_rank":0,"first_seen":"2025-12-12T22:30:10.671599Z","last_seen":"2025-12-27T00:45:09.318085Z","alert_count":0,"request_count":1,"received_data":38126,"sent_data":490,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c2b8d5e27d1690de0b77ab7ca2b6a7fe","sha1":"b985b766d8dc27cbb6e9db8467a10446c89e4a35","sha256":"dca71a0dd47d29b2e8fc05a733bc8e315dc294b96a6cddf534f1c65f2b2e9e13","sha512":"ff00044ee95fe38c5126744977dc6c5e2ce98372c07cb56558fbb6bc0006f925712e5b3da3b232f75fae2c7af37d5299062e9dcb9923e3fcc67fb0790b9d5fcf","ssdeep":"","tlshash":"ce41de0da9f3606295337079db9fa60830b15113100ace14fdcce2d85f9413a9a7aedc","size":2149,"data":"","first_seen":"2025-11-07T18:27:21.533315Z","last_seen":"2026-01-04T09:18:31.118203Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"476b43130f4da0758e51a26ea93e733d","sha1":"5eac9c53e9cc1410e58f6f0bdc85528acab30736","sha256":"b19d05a8d492320ab4db4d74ea0e9e90374bed47a18e805f8018ebb00af0c23c","sha512":"d7b6af5bbc8185dfa58fccd8be30e14c79aed4aba53d8824cc066465690837c5f2d173bc3bb78eda33f9ae91ac0434fbb63d4d4c906e1874cc614ecf72ac4291","ssdeep":"","tlshash":"547000088202202a003828028282a220223ca82080028020000a020228002032ba08c8","size":22,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-03-06T11:55:01.506782Z","times_seen":22784,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a97ae6bd4dc972c26de801f868a79d5c","sha1":"cf1a46aa575a9718f8d4154813a7892317e7f8bf","sha256":"51c1083130407a8772738aa2380eb5a583240a47d98f2204b124c06fd11aabd5","sha512":"f16b7e511db0f35f83e9380c46a6173de1ca6aebbcf4aec1be6efd8d0cb669fc9a07c4e7702149f0421425109c35a9cd041347677ccaed445c978296502e78a8","ssdeep":"","tlshash":"51600003030c0000c00000030c003000fc333c0c3c0c30000c0030000000f033cccf3c","size":17,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-01T14:36:47.464445Z","times_seen":20795,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f80d9a22521fa3fd654292fdea7f09c","sha1":"6c8d9ac1d9dc6cc24930dfb567c9d13340e88e5e","sha256":"100a951679b1fa65c8dc5d70ee3c3d89dc47fb07a4b3cb4015b1d43e3afaad72","sha512":"5529e873489b07f50be54cf0b5b15512ee904b6d8f42b1cb8eed4d76bb922f9892d1adf89ef156f084bbccee894004be3e4efdd1d99f6e66938e58dfc12f2ee0","ssdeep":"192:rWpjyX8E1MzeTgGjzvlNhQPJzXdQyrY+s4PAL3:KQzTfvUXdQyER44L3","tlshash":"dc22e8cb3f4532a50226395218dff9fb10a85ea12c446d6453316ae47f30badbe27d03","size":10366,"data":"","first_seen":"2026-01-03T06:50:39.529728Z","last_seen":"2026-01-03T07:25:16.001246Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwplayer.core.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"34de47681547f88d2a251419d61d4a2d","sha1":"e9c03590ad2eb86eeee8b0032f345fbeb32bc4c1","sha256":"5a8861552d8484bac63cb929ef4b4e9f2f76726aef84032c76a75b76da4e7ddc","sha512":"96c8659af1758ddc35ee64cf835f983cddb190d2dff7884b86dd259faab6d824c3330d04f2b056f77989be023b1703c9e0e339ce805c0ec480812d2988c305ea","ssdeep":"3072:B5ozmmILBerJhsy7v22m79sTkvpkHkfeKJyuaU:X7DBerJh/aLLkEfPJn","tlshash":"45e33b753181623651da93da72674201a33a45897406c7acff2cedea1c3e88771f6fb8","size":143406,"data":"","first_seen":"2025-10-07T08:25:20.374415Z","last_seen":"2026-02-25T20:14:13.377962Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"039f5d1ce5d769e6e7253dff408227ec","sha1":"b93855471d9f1bba4a7904f74c44bcad18489921","sha256":"befb33460e76a122d36175a8b2b3de93a4ab10f5ca82b0cf6ddac9a61542e5d1","sha512":"3080931f18d85411f49e5d89437304ba08dd63674d693a0900fc57af8e7beb19ae34de7e7a1932d1ad0f39000d548d7ea35ba99d4817335d2a6712e8fc58f251","ssdeep":"192:cqSfHLz2OBr8nD3v375v6vroNf6+3vR3ihX1fEQ8v:cZm0vqmq","tlshash":"d822cf0c7b664575a4d361aeebbbc5006e297467e205dc007cec89d9ff403b4a8d798b","size":10656,"data":"","first_seen":"2025-12-19T23:45:08.442428Z","last_seen":"2026-01-04T09:18:31.119175Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.pemsrv.com/ad-provider.js","fqdn":"a.pemsrv.com","domain":"pemsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b6a035a8d534745768f430968527ddc","sha1":"9aadc21458924cf509e9e4cd443e12dd21c1a24d","sha256":"fa1550d32fff4d3ae5d6e1061002ce4b162cf5d8602828d8537edf417fb19d3d","sha512":"fc3e8f5e9b0b7a862cce263a82a12a31bcf9e310f3931861c90376815e30d7aedfb38ddf18fc91689083c1acea845bbb7cc8f51a843688d622be1b9c6c1d9c74","ssdeep":"3072:cWYjf7+28VOk2DG2cUMaElwnRlqI1fsBHisiEolY4o/CXMzpo:U+28VOk262lElwnRjfs4sXJpo","tlshash":"3b045d993792307441d3a11da9ff53093371506ab80f4884bb4dd8a427adeea51a3ffd","size":185361,"data":"","first_seen":"2025-12-11T18:04:56.436466Z","last_seen":"2026-01-14T02:16:11.491697Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d9f9b0f82813d813afe0d450e9fab4d6","sha1":"cb6ce93dd97adc3649f697ff49681f5aaf8b1671","sha256":"d204422e9d49293ab422bfabae9607635876cb30f77215f133603bac691f6f4b","sha512":"849997b396eb218b8bbc788eeb34ec3eb9ab4c809a07ac707a57a5e13baabb69d2c52795403d032f007276109c7f4476daa8255550fa236873e1eb9ba6dba3ba","ssdeep":"","tlshash":"706000c20008802002c200028820a2802832008a20022000c00800000000a0c0222808","size":17,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-03-12T13:30:56.245454Z","times_seen":23634,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4a5b93d4a73132a244fe9e3fc2b5fc14","sha1":"5553a11b321010c421c873ab6445afc05bc9a304","sha256":"d006cba95f6de2f1e6c1bc398b95497ae80dfebe64f9dc8f85e9e2ee30f43d7c","sha512":"b27382c2e9d5befee7de26980b2e7e2ca7b615dea40b4bd7821c54fa244c5d3579575c5feb700a1e65c7b428b24a854358a84082bdb2424d206344d95427e080","ssdeep":"","tlshash":"42217c19f2f00298407bb2084b2fb45c3a3322d7b54a6524b5b94ea87b90d2d7093f5d","size":1253,"data":"","first_seen":"2025-11-07T18:27:21.536546Z","last_seen":"2026-01-04T09:18:31.121099Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"61d9031f2b0da3ac81b6732b6d1ecf83","sha1":"515d4db3d1120a7160d1bc7d93d57f7fbdea1fc4","sha256":"436179ef4964c80a03e62015696ba10c5ae70602c6538d07f50b75f35bd72a27","sha512":"3b6ddafdb73b34756f57d92b3db048d03ac38dd2f96be7d4ba695835470b8ce460e2d6059a84e64f3bc2d5237b6151aad2a649f76ab43a81447182684b5741de","ssdeep":"","tlshash":"b58000b02020a830088e020cb030c3cc3e32000230033000a00c028c0830ec00228f88","size":36,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-03-06T11:55:01.504781Z","times_seen":18663,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3bc7f9f7d37d00ca9299b42f6dce6078","sha1":"b99931b4c7cc77ddf29346ff99c56989621ef932","sha256":"2f7882fec10d3e7caa5359f4d49564472fdd216ee816c35bb82e4c8fa4b1a18e","sha512":"9fd0c470c263ba30401308978d568b5644697ebe6793938ea18cf8eee0470104ce63120fb9f8caacf0e63e53f07b919c8e8e0f5c7c3073782704027b2c084b58","ssdeep":"","tlshash":"47f02721f1f4f608682292f4feaf32881b554407d9409dae78f400125a31dfaa07b9ca","size":474,"data":"","first_seen":"2026-01-03T07:17:14.657756Z","last_seen":"2026-01-03T07:17:14.657756Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"de7507ad26c6c904109c87dd5dfac288","sha1":"952cae1ce6ce1e74b010b31b4357424c12a5960c","sha256":"09f81a5c463b570b389ce0b118a29bf489353d0ae7d47eefee9b9e7b703e0e02","sha512":"bf1e05b722c1990f20aba1abe8aa7bedeb660957e0adc012e757cfa9cd9b4d13b39d5f7d0688bc341f7d630b28c160b3e22dacc0ac0f9f37ed22230e6ffe68b1","ssdeep":"","tlshash":"fba002353403501e20265c517d266a0cf84e9475e198345707070470d0e3c4b5d004c7","size":59,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-04-04T00:12:49.748131Z","times_seen":11352,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/js/jquery-3.min.js?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0efc6eed7034024ac10fc12b1e61694a","sha1":"7add2b37d3de2c0fcee56ed07394205d9a94b38c","sha256":"fe768dfd9bc902810c0546cb4cb65673f0a65ad5102e38c4593b7dbf50172301","sha512":"34c1bec97ac52242070adca8e65cb94f82c728f63ce3b78d41d2d6b0471bb527977c3520b3eff322e8ab9f2534e590f8ebb4a9d7bb57885998bdefed0624d97b","ssdeep":"","tlshash":"e311289829e1b36e65b3209c7037d00af1e341bcb52868259a9cc4f01db0c2d0277e9c","size":1000,"data":"","first_seen":"2025-04-11T01:55:39.97373Z","last_seen":"2026-04-03T15:29:14.579813Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwplayer.core.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"34de47681547f88d2a251419d61d4a2d","sha1":"e9c03590ad2eb86eeee8b0032f345fbeb32bc4c1","sha256":"5a8861552d8484bac63cb929ef4b4e9f2f76726aef84032c76a75b76da4e7ddc","sha512":"96c8659af1758ddc35ee64cf835f983cddb190d2dff7884b86dd259faab6d824c3330d04f2b056f77989be023b1703c9e0e339ce805c0ec480812d2988c305ea","ssdeep":"3072:B5ozmmILBerJhsy7v22m79sTkvpkHkfeKJyuaU:X7DBerJh/aLLkEfPJn","tlshash":"45e33b753181623651da93da72674201a33a45897406c7acff2cedea1c3e88771f6fb8","size":143406,"data":"","first_seen":"2025-10-07T08:25:20.374415Z","last_seen":"2026-02-25T20:14:13.377962Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwplayer.core.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"34de47681547f88d2a251419d61d4a2d","sha1":"e9c03590ad2eb86eeee8b0032f345fbeb32bc4c1","sha256":"5a8861552d8484bac63cb929ef4b4e9f2f76726aef84032c76a75b76da4e7ddc","sha512":"96c8659af1758ddc35ee64cf835f983cddb190d2dff7884b86dd259faab6d824c3330d04f2b056f77989be023b1703c9e0e339ce805c0ec480812d2988c305ea","ssdeep":"3072:B5ozmmILBerJhsy7v22m79sTkvpkHkfeKJyuaU:X7DBerJh/aLLkEfPJn","tlshash":"45e33b753181623651da93da72674201a33a45897406c7acff2cedea1c3e88771f6fb8","size":143406,"data":"","first_seen":"2025-10-07T08:25:20.374415Z","last_seen":"2026-02-25T20:14:13.377962Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/provider.html5.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8e42a735322eb7478a82bf49c357638","sha1":"5ef024f2e798985043d7ecb8bf1752cffeb70e55","sha256":"f18d94cc548a0d5e9c36da9f47164f4df4fbd903a9cf0dc8e3a4545622365ce7","sha512":"6c8d8c6fd93db8ab4d8e5dbf25edc0aa244fb9eaff22201931bc467e87061770ca2e85cb7f8db536143b5766020dc7f35b1394853e4c9e0c48bd40bd15247ebd","ssdeep":"768:B2Smc7dAD/v018QK1XCYClPhaiDXIj9ZvDry8wesUukSJLdXhRwTi++2XzPAjrCW:BnG/v01qBBgJOnqhfwXzpIME9Dfm50HJ","tlshash":"4113f89633d4b433c6d296c261750311533e5e5a7848c4acfa299ecb0d5ac8770fabf9","size":44252,"data":"","first_seen":"2025-10-07T08:25:20.304883Z","last_seen":"2026-02-25T20:14:13.330081Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"de7507ad26c6c904109c87dd5dfac288","sha1":"952cae1ce6ce1e74b010b31b4357424c12a5960c","sha256":"09f81a5c463b570b389ce0b118a29bf489353d0ae7d47eefee9b9e7b703e0e02","sha512":"bf1e05b722c1990f20aba1abe8aa7bedeb660957e0adc012e757cfa9cd9b4d13b39d5f7d0688bc341f7d630b28c160b3e22dacc0ac0f9f37ed22230e6ffe68b1","ssdeep":"","tlshash":"fba002353403501e20265c517d266a0cf84e9475e198345707070470d0e3c4b5d004c7","size":59,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-04-04T00:12:49.748131Z","times_seen":11352,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.intelligenceadx.com/vodometer.min.css","fqdn":"www.intelligenceadx.com","domain":"intelligenceadx.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d32bb7bb80834b5162126241a5347f8","sha1":"f8f587ca3bd7109578d8397030629ea5573c0f6d","sha256":"e84c3b6c831e02e39852f1c48149650765c9e605c2bc3bf3af168986cbc1dc69","sha512":"6b6bac3d6f7dcda7230298f9ef9aedb6b1ade7b305b54cc0a93809d3d7ac23d718b95d3631318ef889906e3059e9f7a70092d30c9cea168de1f74cf97da5e781","ssdeep":"768:bt9rqAYKKGZzFQ9JsQU+YDngZGihfzmMzhYrTsAysncCWcf5k5sigCUFCntlqoDX:bbdZzFQ9JsTgZvfzmMzhYrTscp0ZZ","tlshash":"1b1329aab286282601e742b9503eb317b233051679129458fcb9cdf96e3ddc6117b7fc","size":41946,"data":"","first_seen":"2025-12-30T17:21:40.989856Z","last_seen":"2026-01-04T09:18:31.071497Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/vast.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0deaafb5318980de8c2ee695b76c710","sha1":"5a3734828b24cac1e1cae1645662b3c9dc26cf82","sha256":"cd51410290d2266cda49882fe9d3d5c67aa9bc5b2c3551c7a5fd9e66cfb40908","sha512":"637b3da699f5ba20b0b2a4e900ffee7b74ae8d9eacbe00a48539454125991172e2c09e4eff00f4e8b95a9a700a48cacc235ad55ac7bf01ca2036fc70150c0891","ssdeep":"1536:ulAE+jE0HEekQmIWTuDkjlOYx1sbRuF5V0U2hw2ubBkrzIjpiIPYqdsrVpQRwOaz:uJ+jEQwjlOcSNSvezkyVpeFamsH","tlshash":"c1a308962395e53246e484e960300242b3350a0f7c0a82acf57dfdef5d5ea4b76baf74","size":104600,"data":"","first_seen":"2023-09-16T05:27:40Z","last_seen":"2026-02-25T20:14:13.349587Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwpsrv.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7f3733c71441c1881fc4eabe9c96086","sha1":"8db1f2f35489a41d1fb63af5b9aad52388c58735","sha256":"9f4c0014a4f36c11302077dc073ef529031ce3eebc04c0ca9bc1d7ea0ed95eca","sha512":"daad1df7ab9c84cb7c1a120fe01a007dc14c6a05e73c8c3afb418c19085d08d85c36128e668890e7d9ad2c084ceb9589fb853a7f06fbc0175028ea7ce8a7e7dd","ssdeep":"768:U2Q5c7PRtE8JKCzyQmr1nEXiGdCeMt+uksp3T:1QAPRtE8JKC2JEXiGdCSudpj","tlshash":"ad63e78d3685752a5b6770b8806fb546723d1dd6304dc610ea50eed93c3de6aa233b2c","size":67106,"data":"","first_seen":"2024-04-23T16:41:51Z","last_seen":"2026-02-11T20:51:20.728494Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/vast.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0deaafb5318980de8c2ee695b76c710","sha1":"5a3734828b24cac1e1cae1645662b3c9dc26cf82","sha256":"cd51410290d2266cda49882fe9d3d5c67aa9bc5b2c3551c7a5fd9e66cfb40908","sha512":"637b3da699f5ba20b0b2a4e900ffee7b74ae8d9eacbe00a48539454125991172e2c09e4eff00f4e8b95a9a700a48cacc235ad55ac7bf01ca2036fc70150c0891","ssdeep":"1536:ulAE+jE0HEekQmIWTuDkjlOYx1sbRuF5V0U2hw2ubBkrzIjpiIPYqdsrVpQRwOaz:uJ+jEQwjlOcSNSvezkyVpeFamsH","tlshash":"c1a308962395e53246e484e960300242b3350a0f7c0a82acf57dfdef5d5ea4b76baf74","size":104600,"data":"","first_seen":"2023-09-16T05:27:40Z","last_seen":"2026-02-25T20:14:13.349587Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d5757abfc2dfe2efd4bb1409941cf087","sha1":"a3eb249ef753951d22faa61f87302479aff27023","sha256":"bc9c06f981e7daa0478c449324d4010cdbc3c83c9a95879b99a0b531f5cabb87","sha512":"a21d0aae842d3e854147d43d706f8a72afeb8a045e8c020c6a3f0e61a0c91066b86163539ba9a2827f0a61d53b120a90b5c1ba65875e334a87ceca32b06c0117","ssdeep":"","tlshash":"188000ae80a800202230282a020222a02203e002c882008000ab0300208002b0280c80","size":27,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-03-14T08:01:01.793934Z","times_seen":19591,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwpsrv.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7f3733c71441c1881fc4eabe9c96086","sha1":"8db1f2f35489a41d1fb63af5b9aad52388c58735","sha256":"9f4c0014a4f36c11302077dc073ef529031ce3eebc04c0ca9bc1d7ea0ed95eca","sha512":"daad1df7ab9c84cb7c1a120fe01a007dc14c6a05e73c8c3afb418c19085d08d85c36128e668890e7d9ad2c084ceb9589fb853a7f06fbc0175028ea7ce8a7e7dd","ssdeep":"768:U2Q5c7PRtE8JKCzyQmr1nEXiGdCeMt+uksp3T:1QAPRtE8JKC2JEXiGdCSudpj","tlshash":"ad63e78d3685752a5b6770b8806fb546723d1dd6304dc610ea50eed93c3de6aa233b2c","size":67106,"data":"","first_seen":"2024-04-23T16:41:51Z","last_seen":"2026-02-11T20:51:20.728494Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5f4f87e368f94555357d00f9b7e8ed4c","sha1":"db0173149e571a755cef6a33bb0063382f1b1ba9","sha256":"f997368baa677bfcf69257707de671a58de76eee3cf27855226cc417ec78dad8","sha512":"c99aaf4acc8b400f38f613df5373af1ee8c03a0b51ff5486bff9c2229d600506a00e9292ce6903a830108e5819b4d84509c8792e39d42df9c628110d70169c59","ssdeep":"","tlshash":"2d8004d535c3500447d3115400571cd45034c57115444d404054dc511d55034711545c","size":37,"data":"","first_seen":"2023-08-05T22:12:59Z","last_seen":"2026-04-03T07:01:45.768994Z","times_seen":1154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8b5e8699c1b76c14c38283a27772a3e0","sha1":"8e39b41dbcb6877e9b189351a2c90908abdc7754","sha256":"cfab5312f1cfff1e8162225ab27453306ff627f512bcf18225c0a305ca093e1c","sha512":"66ffa0031cc22b4eec8867f36dcf3d887b021a11ea74f51c2a2eff1ec4cf9eeb44c4e1d5a6c197f29d66546c5f42ef283c54261f6157687237e4dabe1715523d","ssdeep":"","tlshash":"cb700000000228a200fe230e8e82230822282223a28820c820220a2820003232380880","size":25,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-03-06T11:55:01.508546Z","times_seen":22393,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7145e6d4dd187b573a13f0240103f6f0","sha1":"f8e7ff7fd488f675f418011ef8ecca4a822933b5","sha256":"02665a4c106fc96e71ef5a17511cf353ec3f5cccb82ec9fce719b23967728897","sha512":"8fb980002683780ece97cb8cc6679fb9c8c97f543b927fe1efbf4073887176b68be02fd0ffbbc4bec0ebce401d04132fe4d1ab1edab9d006be9493f77bcfc736","ssdeep":"","tlshash":"0d700020000082000b2000032f83b280300a033000c8000002028f32a8e802fc020080","size":25,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-03-06T11:55:01.482966Z","times_seen":21540,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"dca14c896efeb4b80c68c457aea67f39","sha1":"2488a552655a41fbd3f3165ea5b1999f46f25738","sha256":"998158f6df4183edd82539e6dc971d32f50bc7ee075f64d4abc46d3011a9da27","sha512":"56d0ea635f1a8dd9f7bfed6a8e087ec4d8e38bf65eaee1e1262740fc7ce80cf1b45ea861f0d5949b69ecc650427ccc8879f1b7c9af78933ba26d0aa9f704033b","ssdeep":"","tlshash":"ac8000b02a02b830888c220eb030c3c83c30000030033800a22c00cc08b0ec02208e8a","size":37,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-03-06T11:55:01.497655Z","times_seen":18393,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7a837a4ba8ea13b8193945adf0261e19","sha1":"61428cd720ebc0f01c4c017204c313193c22c101","sha256":"28d9693460ce57dd4e01742e50a1baa10cbed3fa6c20c2a69f02424f80fb9a2e","sha512":"abe0e46d98027527a7d2567c4feaece7ad3c1ec94eed8fea59b9eec596cdd4fa39e7776e9dbc4dd6fe777d9b09300d45ba2a49fc9479e0acbdea92ebf5ef940f","ssdeep":"","tlshash":"516000000003c03300300300030f33000030003000030000000c00303003c03c0030c3","size":14,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-01T14:36:47.441265Z","times_seen":23236,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"41310478a380eaf7e07dbad9b4f81a97","sha1":"1714b6ef86e90b5b23e2aaa1e7728ed9c59f4d34","sha256":"848e5342d9196c0f64861ab926a3c5aecce9294750febbd22e5d8df859bdb144","sha512":"7b93f330547524ce01b8f888a8d56c19cd4432fbee43db16aab33fc1aecd77243762c5e7dd5ce767e38c0fdf9d58bc629caf106d77689c1ef90ebeb09406580e","ssdeep":"","tlshash":"d37000000000000b203c00020a023a003003003000880800820808302ae800b802c0a0","size":23,"data":"","first_seen":"2024-02-12T20:00:21Z","last_seen":"2026-03-06T11:55:01.500018Z","times_seen":19951,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6043a0b1ebb36c505a9191b20e11815f","sha1":"6f9cda2539774241dca5f5df2e40b2e83139768e","sha256":"354d474759535f5f0bb63dc6c5ea17455fb3d281aeb3cd6d44c2f3f594c5dec3","sha512":"5a55931f152716ef8803227e0518befc7ec9fdbc66f16aab57824511c7f3a94bfd9b93b4417d6f759d04c517f3d242eec582b49a8d92be6079b88e10a27fb9bb","ssdeep":"","tlshash":"517000a20c0ba0020c228b02838222002020028a288830c220a088203222e0b3028080","size":24,"data":"","first_seen":"2024-05-15T22:21:35Z","last_seen":"2026-03-06T11:55:01.515568Z","times_seen":14363,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bd931315f9ec922d23220a34a506421","sha1":"92eb331739d51c65226b5fdb07ec2d74924f200f","sha256":"28f33740f0a341c823243413c7780d92e7ae39254641174a86a4f51ac805b576","sha512":"26bb36ab577ba2b6486f482177e31992c81c79322070edc9d55af10d7ab8f3e1b9dccc89f7c925a47a68e464f522736c0e64d3d7e4acaa016745e0104bddb167","ssdeep":"3072:cWYjf7+28VOk2DG2cUMaElwnRlqI1fsBHisiEolY4o/CXMXpo:U+28VOk262lElwnRjfs4sXhpo","tlshash":"96045c993792307441d3a11daaff53093371506ab80f4884bb4dd8a427adeea51a3ffd","size":185387,"data":"","first_seen":"2025-12-11T15:18:11.624048Z","last_seen":"2026-01-15T17:17:43.902034Z","times_seen":1441,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"dff932eb62b0ddaac2211366b4b01ebc","sha1":"9dab4d6ec387b84659b55330837eb7377f8d4f90","sha256":"6a95709e3e4f44a0dc86ff470f0d2bb12eb97af1cbd52c67542c43e693392bb6","sha512":"b60004f4b5caf487000de2d2f7ad7844afe6153f3d487d0ad001e009daf990122e3bcdce29b9cc80502df28d3429f0d3fab8fa22923f9f37efdef6cba77f1c54","ssdeep":"","tlshash":"1a9002da71c371009653326c407f188d613988e5288c4940915094922c6503491269ac","size":53,"data":"","first_seen":"2025-01-25T20:39:32.065702Z","last_seen":"2026-04-03T03:15:29.473427Z","times_seen":1321,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b7d8a1a33a77fcd0328d3c709c5a9eb3","sha1":"e8ea90d66488aae87f231079141b02b04cc26f05","sha256":"3f06772f212125287a824492bf133d5fc6ef851b8478c081406f650716869cde","sha512":"b92d0879e95318270c892770db71380d6f66efbeb8e4c9a8155e82b09e66a0a90844a4d0e38ede9b6bd536d8926ab4359e3bcc5266594f04136fa66295bbc9c1","ssdeep":"","tlshash":"f37000082080000200200002020222003202203080c82002a2000a3020ea08b8020080","size":20,"data":"","first_seen":"2023-03-07T16:36:56Z","last_seen":"2026-03-06T11:55:01.489296Z","times_seen":4296,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/provider.html5.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8e42a735322eb7478a82bf49c357638","sha1":"5ef024f2e798985043d7ecb8bf1752cffeb70e55","sha256":"f18d94cc548a0d5e9c36da9f47164f4df4fbd903a9cf0dc8e3a4545622365ce7","sha512":"6c8d8c6fd93db8ab4d8e5dbf25edc0aa244fb9eaff22201931bc467e87061770ca2e85cb7f8db536143b5766020dc7f35b1394853e4c9e0c48bd40bd15247ebd","ssdeep":"768:B2Smc7dAD/v018QK1XCYClPhaiDXIj9ZvDry8wesUukSJLdXhRwTi++2XzPAjrCW:BnG/v01qBBgJOnqhfwXzpIME9Dfm50HJ","tlshash":"4113f89633d4b433c6d296c261750311533e5e5a7848c4acfa299ecb0d5ac8770fabf9","size":44252,"data":"","first_seen":"2025-10-07T08:25:20.304883Z","last_seen":"2026-02-25T20:14:13.330081Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwplayer.controls.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fde4fff33b8be6ebe2530808273fe7b","sha1":"0810766277301777c5fd5fc031040fc5cc315df5","sha256":"ef7d843e4bd08aceacb89d07e82add18b04e2b2a1b4ddb0784c1573374ec9448","sha512":"7aea8e374962935b5a74d86e3d718b2ce0825117c0a1fd3f07294345186e9f28eea3480f04bd190ad4dfed9cccf84c4d07440770ee4f2ecdeb0d185f9055d28a","ssdeep":"1536:BCUKr35YneqmSoQQD/5YIuhhAuUkJrPyoyjQ7ru+7AHYzwC0suZrqlHdDPjmOoRR:B+r35Yer5Yk7REBvB5sYgwmf8q","tlshash":"b9140922614256349ae6c1daa7504b04f73a8141f652deecfd7dedcc849e9ca30fa7b0","size":193500,"data":"","first_seen":"2025-10-07T08:25:20.241872Z","last_seen":"2026-02-25T20:14:13.37576Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intelligenceadx.com/iyoulgdbiotzj?KxEUdAuR=BQNyAAAAAAAACZUAAiZs15-e2aJbn0AKGiG3sWPJTpSnDJktQPhgJq-nVRzMO4bsxvHaUXf_d33TlPkynjsckCBt2HQOmNovgTrCyNHhdit_l8g2UYqikzW-5rYDd_hNyONPjvuf_tL8lJTTrNgPbnbQXyVnlgFRycO499YGAJ4juiMiowRyj5h-l4DMVVleJbcx9Q6r-WKlD_Qcv3-nHQkBJi7TQ43ipMIbAAN8suH8KO7KYRdwYwHL3hv2BvQ43YLtFbqInc6lafqQ95NO80fMrIx6YxmW3iK2SbjtSxj6FZFwUZ4p3ofaR709hKvW38hXd2PJk44vdKQeYfZ2TMbAUUOoTg_amYRrsfwUzwTSO62Rssw_n67r8to5RQJdGJsI_WHHo6AdY_8ih4IlAbo0uPSpEayHVv40_HdbMo0SVN8fsLzHweeU97HVxlM5OOHRNBFGDmQRPNAxXmDjUT13DAew3omS7tm5jVK9qVDLybmsy8Dv_bm1GaVFFI7CxKV7bN11O4ElPIBv3gGiJqjvNQRDe82rFcskyz9xi4zl8symuH4EGcu-_XsHZdCGqlS5Zu2IjHh6rHD72xovC7SQ4qvtF0yScX0SQB8GyTjlZTCm8oCcWQLocrza6YiWBJlf2DHEpPbuD5XA4OxRfhZvxHjU43GyAlxZYRj1o1BHYSMqWL5iGajY2NP_jv6El4AhlK9BYS70JYHKX49TujR5JLleuLVPUbGuTnDs0mbZhbyEgcmOyG4b1FQ0OsOjIjVyjdy1Cdhm68FmOZ6Nv8xpvBKm5XLhKqEIdLdweNkiOaJKlhmpS1XmD-U_qWaGvNR-QfQNQxJsGzB_LP7QwE1Dqq4BvJ-vkhQLO3ldwoZew8iC8Z3NYZGqvNVu45RWpIjZ9rU5AmSNxHi465-iR8snidbC1X1v5jhTex0EhOKE3WCre53WqE0OqM9DLZwiLtVT5BzBxOKLkWhJ2H_3thdVceWG-QFs08p2IcY80GQwYG0H8KxFa5Sx1UdY3Y4ECJlOalp_IWXW7tEacP6YINN8ot81s4-eB3P6mcVq0RxnqGKNNv7JR2ALlEf3kmQ_QcXeceCIQBS69ZRCl8BzmuPySYqWiHbgWaCS6FrrYDhSHB7WLizi-09dZYNupVXhOvYSJW8GWXmlbGnociMhSbZIYUVI8QaxRVbMpxE\u0026yTpFPESD=4\u0026GyfMJYKX=5250359\u0026PQukTmFf=0.0004\u0026VobYzuys=0,0\u0026LFUwAqmv=\u0026hrsGvjfI=\u0026ecgYEjyC=1280,1024,1,1280,1024,0","fqdn":"intelligenceadx.com","domain":"intelligenceadx.com","tld":"com"},"ip":{"addr":"208.95.114.100","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5f0a25e4d3522d56d48ce7bc3e518fb","sha1":"86794caff58f7fee6e684c2ba7195f970a8d6f4c","sha256":"9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5","sha512":"a3a81801f516a4eb11f00d6f56dab0ed4b8a79219e6b4f5436993479f09dae08f14cffbab3327ff66fb39201d8eba1153ae7114f7705a01cc6f0edf840ef1616","ssdeep":"","tlshash":"789002801814116115d1500b8d5159d01259b1a4540801324446ca502dc7883a415774","size":44,"data":"","first_seen":"2023-03-07T01:17:45Z","last_seen":"2026-04-04T03:41:03.044937Z","times_seen":22741,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"dff932eb62b0ddaac2211366b4b01ebc","sha1":"9dab4d6ec387b84659b55330837eb7377f8d4f90","sha256":"6a95709e3e4f44a0dc86ff470f0d2bb12eb97af1cbd52c67542c43e693392bb6","sha512":"b60004f4b5caf487000de2d2f7ad7844afe6153f3d487d0ad001e009daf990122e3bcdce29b9cc80502df28d3429f0d3fab8fa22923f9f37efdef6cba77f1c54","ssdeep":"","tlshash":"1a9002da71c371009653326c407f188d613988e5288c4940915094922c6503491269ac","size":53,"data":"","first_seen":"2025-01-25T20:39:32.065702Z","last_seen":"2026-04-03T03:15:29.473427Z","times_seen":1321,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"67b2371a222c2dc94f01b8579fff4f4d","sha1":"0b0a5e2d11790de282055efe8b8cfd6f4378bbfd","sha256":"dfafe4f2e08c006ec277e8042267c6237512a1a93bfcf57657420d4becc0a97b","sha512":"06a32863a820cca2b2f4460c10c4dc3583687648c909c5f67c746e727ecd4ea6301db1273b40dacdaf397a585ff257eb8c3e226fc023e95d3bda257e02505dfb","ssdeep":"","tlshash":"d4700002880200a8302bc808a3022300200080802882000008888002b0000230808088","size":20,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-03-06T11:55:01.495091Z","times_seen":20840,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"11cc3621e45b2f0b945ccf3c32be2d99","sha1":"65369460879076ce3d2ca049392097e9c15b8149","sha256":"8eab171b0d256cf386d222b71fbf5380f2051b67452dbd83f41401a6216a789c","sha512":"e8af12a7397f87b88e2b71577fbb9be3be97b309345786db07de0c882ef2203a6d2b98a7f74c4f5b065e3d67cdb2c54f23ff7694c9ccc83e22ee93e950e60715","ssdeep":"","tlshash":"8bb009b69262c0b9c4469c9eb13ad6e7397a12143813b327901d49205522e5e2b008a0","size":108,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-03-06T11:55:01.509046Z","times_seen":20073,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-9CBDTHEVHY","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9b500c2f23ad808751dcd8e590de932","sha1":"4ee475543985e279ffe0629d4e4bfe344151279c","sha256":"b890a681d953b429ee63b9222249181a90015936236e61e190e87fbe0b02a0a3","sha512":"4ec945d09efe53a8b5a25920b192a5b4ebf52b2058838905029700835c7018f92cc2b792f670793c32e1b45b3cfbd155d52117e0c2499da5f5c564fab211f369","ssdeep":"6144:RgIe7ma2bulKY/1u99xHDmHYmyBFzvnsyRO6jJWoNPad4FpC1xY:vC8bu7/1mbrnsy39WbMpb","tlshash":"fd941ace73c674269396e078503f118ba57b29e2b45cc896f189cce02d74a9a4277f7c","size":433334,"data":"","first_seen":"2026-01-03T07:17:14.600173Z","last_seen":"2026-01-03T07:17:14.600173Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwpsrv.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7f3733c71441c1881fc4eabe9c96086","sha1":"8db1f2f35489a41d1fb63af5b9aad52388c58735","sha256":"9f4c0014a4f36c11302077dc073ef529031ce3eebc04c0ca9bc1d7ea0ed95eca","sha512":"daad1df7ab9c84cb7c1a120fe01a007dc14c6a05e73c8c3afb418c19085d08d85c36128e668890e7d9ad2c084ceb9589fb853a7f06fbc0175028ea7ce8a7e7dd","ssdeep":"768:U2Q5c7PRtE8JKCzyQmr1nEXiGdCeMt+uksp3T:1QAPRtE8JKC2JEXiGdCSudpj","tlshash":"ad63e78d3685752a5b6770b8806fb546723d1dd6304dc610ea50eed93c3de6aa233b2c","size":67106,"data":"","first_seen":"2024-04-23T16:41:51Z","last_seen":"2026-02-11T20:51:20.728494Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwpsrv.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7f3733c71441c1881fc4eabe9c96086","sha1":"8db1f2f35489a41d1fb63af5b9aad52388c58735","sha256":"9f4c0014a4f36c11302077dc073ef529031ce3eebc04c0ca9bc1d7ea0ed95eca","sha512":"daad1df7ab9c84cb7c1a120fe01a007dc14c6a05e73c8c3afb418c19085d08d85c36128e668890e7d9ad2c084ceb9589fb853a7f06fbc0175028ea7ce8a7e7dd","ssdeep":"768:U2Q5c7PRtE8JKCzyQmr1nEXiGdCeMt+uksp3T:1QAPRtE8JKC2JEXiGdCSudpj","tlshash":"ad63e78d3685752a5b6770b8806fb546723d1dd6304dc610ea50eed93c3de6aa233b2c","size":67106,"data":"","first_seen":"2024-04-23T16:41:51Z","last_seen":"2026-02-11T20:51:20.728494Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/vast.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0deaafb5318980de8c2ee695b76c710","sha1":"5a3734828b24cac1e1cae1645662b3c9dc26cf82","sha256":"cd51410290d2266cda49882fe9d3d5c67aa9bc5b2c3551c7a5fd9e66cfb40908","sha512":"637b3da699f5ba20b0b2a4e900ffee7b74ae8d9eacbe00a48539454125991172e2c09e4eff00f4e8b95a9a700a48cacc235ad55ac7bf01ca2036fc70150c0891","ssdeep":"1536:ulAE+jE0HEekQmIWTuDkjlOYx1sbRuF5V0U2hw2ubBkrzIjpiIPYqdsrVpQRwOaz:uJ+jEQwjlOcSNSvezkyVpeFamsH","tlshash":"c1a308962395e53246e484e960300242b3350a0f7c0a82acf57dfdef5d5ea4b76baf74","size":104600,"data":"","first_seen":"2023-09-16T05:27:40Z","last_seen":"2026-02-25T20:14:13.349587Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5f4f87e368f94555357d00f9b7e8ed4c","sha1":"db0173149e571a755cef6a33bb0063382f1b1ba9","sha256":"f997368baa677bfcf69257707de671a58de76eee3cf27855226cc417ec78dad8","sha512":"c99aaf4acc8b400f38f613df5373af1ee8c03a0b51ff5486bff9c2229d600506a00e9292ce6903a830108e5819b4d84509c8792e39d42df9c628110d70169c59","ssdeep":"","tlshash":"2d8004d535c3500447d3115400571cd45034c57115444d404054dc511d55034711545c","size":37,"data":"","first_seen":"2023-08-05T22:12:59Z","last_seen":"2026-04-03T07:01:45.768994Z","times_seen":1154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bd931315f9ec922d23220a34a506421","sha1":"92eb331739d51c65226b5fdb07ec2d74924f200f","sha256":"28f33740f0a341c823243413c7780d92e7ae39254641174a86a4f51ac805b576","sha512":"26bb36ab577ba2b6486f482177e31992c81c79322070edc9d55af10d7ab8f3e1b9dccc89f7c925a47a68e464f522736c0e64d3d7e4acaa016745e0104bddb167","ssdeep":"3072:cWYjf7+28VOk2DG2cUMaElwnRlqI1fsBHisiEolY4o/CXMXpo:U+28VOk262lElwnRjfs4sXhpo","tlshash":"96045c993792307441d3a11daaff53093371506ab80f4884bb4dd8a427adeea51a3ffd","size":185387,"data":"","first_seen":"2025-12-11T15:18:11.624048Z","last_seen":"2026-01-15T17:17:43.902034Z","times_seen":1441,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"79e362235e366729632e60d6d35f8904","sha1":"69df1a1691b05442e11e2bc5825fc6297b977a92","sha256":"da82a56eb8524f5d12a2afcf2c5d0cb6184f26995167212a0ccb3bc2ba0def36","sha512":"94ca14ccb12238f547249a07134689257dd97639be34d7f466f52741df7176be982d88c5d294dd42a534a32d908533b5eaae33a13cb47ce0cf065d3098d9383d","ssdeep":"","tlshash":"fe60000000000c30000303000c30c3cc3c3f000030033030030c00000c00c003300c00","size":15,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-01T14:36:47.45823Z","times_seen":23587,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwplayer.controls.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fde4fff33b8be6ebe2530808273fe7b","sha1":"0810766277301777c5fd5fc031040fc5cc315df5","sha256":"ef7d843e4bd08aceacb89d07e82add18b04e2b2a1b4ddb0784c1573374ec9448","sha512":"7aea8e374962935b5a74d86e3d718b2ce0825117c0a1fd3f07294345186e9f28eea3480f04bd190ad4dfed9cccf84c4d07440770ee4f2ecdeb0d185f9055d28a","ssdeep":"1536:BCUKr35YneqmSoQQD/5YIuhhAuUkJrPyoyjQ7ru+7AHYzwC0suZrqlHdDPjmOoRR:B+r35Yer5Yk7REBvB5sYgwmf8q","tlshash":"b9140922614256349ae6c1daa7504b04f73a8141f652deecfd7dedcc849e9ca30fa7b0","size":193500,"data":"","first_seen":"2025-10-07T08:25:20.241872Z","last_seen":"2026-02-25T20:14:13.37576Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"de7507ad26c6c904109c87dd5dfac288","sha1":"952cae1ce6ce1e74b010b31b4357424c12a5960c","sha256":"09f81a5c463b570b389ce0b118a29bf489353d0ae7d47eefee9b9e7b703e0e02","sha512":"bf1e05b722c1990f20aba1abe8aa7bedeb660957e0adc012e757cfa9cd9b4d13b39d5f7d0688bc341f7d630b28c160b3e22dacc0ac0f9f37ed22230e6ffe68b1","ssdeep":"","tlshash":"fba002353403501e20265c517d266a0cf84e9475e198345707070470d0e3c4b5d004c7","size":59,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-04-04T00:12:49.748131Z","times_seen":11352,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7545d1da7159ca66338b4c84b69f8ae4","sha1":"0858800340ee5b8c413a1aabc50fb28d0bdf89db","sha256":"7510742fba4d25113b6124987e97cba40776bc5030a6a3678974dc8ba075bf81","sha512":"dbd944acd2868ed6eb1de313c0efe7590f715129f7ca5a9ae5a3dfb9de0035612a248441d9e6c4c1812d8ec4b3de7cd2a5973c4c71887361a2276de1d73fab94","ssdeep":"","tlshash":"af8000088820202a20be0a0e02a3e232220e3022a0020220000f0280380020bb302880","size":26,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-03-06T11:55:01.488245Z","times_seen":22614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"879c12264b74d969b0314e9a9cd1f17d","sha1":"714a5d759f4d1b7d41f8c5526451aef114b33d41","sha256":"28be88d787b6e773eaf5d0818a6c62446ce628dd8ec0659c6f78410588838337","sha512":"3547b27de7764e655bc8749fd5c1166599da57d2a76057e66923476fda692917a9e537a934374c77f361359b9fe94d739bc037044bbcf2648feb43f7ff9f1c7f","ssdeep":"","tlshash":"f7700008e0a03032203a020a228222202a0c2020800000a0080a328028882832380880","size":22,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-03-06T11:55:01.507418Z","times_seen":21973,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"bdc6234a33432c503640ad2f62105dbf","sha1":"2e733c2d4f1953a7ca2231208e8e31edc399ab19","sha256":"61e43d202b6cd0ebf29ac8014115fcb890eb5593c4160b9ae285206ca911bce6","sha512":"ff6da6a9cfa04e9c0e4c8c038b70ff6461de31cf3020ffa062fb50d6507ffb72d431652f7a8eaf7fab316b387a16a0ba5923cb568450f6e5a3eb7c232a3793b6","ssdeep":"","tlshash":"bd70008e020000a0cab220a80a022300b0202c0008022200a0a00008202ee038288080","size":21,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-04-01T14:36:47.455314Z","times_seen":20563,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bd931315f9ec922d23220a34a506421","sha1":"92eb331739d51c65226b5fdb07ec2d74924f200f","sha256":"28f33740f0a341c823243413c7780d92e7ae39254641174a86a4f51ac805b576","sha512":"26bb36ab577ba2b6486f482177e31992c81c79322070edc9d55af10d7ab8f3e1b9dccc89f7c925a47a68e464f522736c0e64d3d7e4acaa016745e0104bddb167","ssdeep":"3072:cWYjf7+28VOk2DG2cUMaElwnRlqI1fsBHisiEolY4o/CXMXpo:U+28VOk262lElwnRjfs4sXhpo","tlshash":"96045c993792307441d3a11daaff53093371506ab80f4884bb4dd8a427adeea51a3ffd","size":185387,"data":"","first_seen":"2025-12-11T15:18:11.624048Z","last_seen":"2026-01-15T17:17:43.902034Z","times_seen":1441,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ab3b4884408bb0261d6b56a7d288fe80","sha1":"b0f370141ada9b591302b575434c255db51ae151","sha256":"e5a13721b456c9e090f80944728fc91767f5ae01b01f59160e73ff2c7cacc587","sha512":"e57cb5cdac6519a8a24e85d5d91f2c6492e282308a94d369619e9455cef8f22a2a6abd62023647fbfa0228b6d3e12da22c280d691cd351608aada9c284ca3a66","ssdeep":"","tlshash":"6c80008ea0803232a2fa02038a822200a2af38ea88008820000a0200288030f232ac8a","size":26,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-03-06T11:55:01.519336Z","times_seen":23027,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"df0f0e3e7f31f2501d7e19833ccb4ddc","sha1":"e551bfcbdd3a7c41875f1a974ad1914604b5969f","sha256":"511e9d231c9360fcb7670f7cbaffb35bf8180f124fc080ebbfa5962d4c8bb089","sha512":"57497c56a50a2a0ed0cd9862fdaf381fbf969bd3048dff24dee46f2dc10139cccfcc4b275d7d74cd3d8f036ada1eabe54d05c4773e80ba797748aeff6c855898","ssdeep":"","tlshash":"b98000f8002300c302300f032b0b3302b033000c3accb0ebba3080303802303f8020c0","size":33,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-03-06T11:55:01.513113Z","times_seen":18131,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"04a9cee8fa5e09c9e3b20842a669071e","sha1":"ef709ce51ec949a171e6ead33986f727115bed2c","sha256":"c008817246577108b73b031a48420a6bc8fa46d936f7fc82c53ac91731d2b02e","sha512":"c64fde8e9e271d47ed812745d7a2d8b639f1b38c31ad5cbb27703fb3b73d3c8685dfeb87e07460c87fb4a9176692ed7dfb3430a464b0703a68d6ae596943ba4f","ssdeep":"","tlshash":"cd01465c38109a2e77f5a5745177ed076826116966146d9bb8dec9112733cc2281339c","size":833,"data":"","first_seen":"2025-12-06T17:17:04.447566Z","last_seen":"2026-01-04T09:18:31.121629Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"66b7666ffc325125eec3d671f2610be3","sha1":"dd1ad2e05334008006d17cebfa5338b2d8a923ac","sha256":"fd06df5ff11f16ae9d4a9d5959e667bc9b728a768ff94513af0a3f007dd249f8","sha512":"da2d8ec9eaf51ba3a766e6f12756a4cacc874ff9514af6bf0e4943071b2016546ff7a169186316ef7394083fac6458d8c1f1aed5b2104dc8fe094762f4ff1595","ssdeep":"768:pt3VKqWqaPdUv3f9KQtmBKkcgxMSy5OFgD9Pa:pZ/f9KVyDI","tlshash":"4123724cb1f61524142330ba8ebf54013626a4274909ed14bddd15f06f88bbefab7fa8","size":48441,"data":"","first_seen":"2026-01-03T07:17:14.672086Z","last_seen":"2026-01-03T07:17:14.672086Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwpsrv.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7f3733c71441c1881fc4eabe9c96086","sha1":"8db1f2f35489a41d1fb63af5b9aad52388c58735","sha256":"9f4c0014a4f36c11302077dc073ef529031ce3eebc04c0ca9bc1d7ea0ed95eca","sha512":"daad1df7ab9c84cb7c1a120fe01a007dc14c6a05e73c8c3afb418c19085d08d85c36128e668890e7d9ad2c084ceb9589fb853a7f06fbc0175028ea7ce8a7e7dd","ssdeep":"768:U2Q5c7PRtE8JKCzyQmr1nEXiGdCeMt+uksp3T:1QAPRtE8JKC2JEXiGdCSudpj","tlshash":"ad63e78d3685752a5b6770b8806fb546723d1dd6304dc610ea50eed93c3de6aa233b2c","size":67106,"data":"","first_seen":"2024-04-23T16:41:51Z","last_seen":"2026-02-11T20:51:20.728494Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/vast.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0deaafb5318980de8c2ee695b76c710","sha1":"5a3734828b24cac1e1cae1645662b3c9dc26cf82","sha256":"cd51410290d2266cda49882fe9d3d5c67aa9bc5b2c3551c7a5fd9e66cfb40908","sha512":"637b3da699f5ba20b0b2a4e900ffee7b74ae8d9eacbe00a48539454125991172e2c09e4eff00f4e8b95a9a700a48cacc235ad55ac7bf01ca2036fc70150c0891","ssdeep":"1536:ulAE+jE0HEekQmIWTuDkjlOYx1sbRuF5V0U2hw2ubBkrzIjpiIPYqdsrVpQRwOaz:uJ+jEQwjlOcSNSvezkyVpeFamsH","tlshash":"c1a308962395e53246e484e960300242b3350a0f7c0a82acf57dfdef5d5ea4b76baf74","size":104600,"data":"","first_seen":"2023-09-16T05:27:40Z","last_seen":"2026-02-25T20:14:13.349587Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwplayer.controls.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fde4fff33b8be6ebe2530808273fe7b","sha1":"0810766277301777c5fd5fc031040fc5cc315df5","sha256":"ef7d843e4bd08aceacb89d07e82add18b04e2b2a1b4ddb0784c1573374ec9448","sha512":"7aea8e374962935b5a74d86e3d718b2ce0825117c0a1fd3f07294345186e9f28eea3480f04bd190ad4dfed9cccf84c4d07440770ee4f2ecdeb0d185f9055d28a","ssdeep":"1536:BCUKr35YneqmSoQQD/5YIuhhAuUkJrPyoyjQ7ru+7AHYzwC0suZrqlHdDPjmOoRR:B+r35Yer5Yk7REBvB5sYgwmf8q","tlshash":"b9140922614256349ae6c1daa7504b04f73a8141f652deecfd7dedcc849e9ca30fa7b0","size":193500,"data":"","first_seen":"2025-10-07T08:25:20.241872Z","last_seen":"2026-02-25T20:14:13.37576Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d3fe699575fdcd2725610bc7390a6338","sha1":"61eac9fdb00066e787c75d5c8b1470f87c4a03c5","sha256":"ed8831fe8eefcacea48420e99639fe048df0bb0bed85f333730cdbf595b0d1f7","sha512":"69ebee2f677dea7393c0514e1e9f5cc004c837dccbd02eeb86f888bf0a6b825a8393069b0e57ed963e5eb6ba7743440a94b471ddd53410d7e25fc8dd5904152e","ssdeep":"","tlshash":"42b012c52791604089531412083a5c80f1b40c601e39cc81600cc4680cdc6b8825e8bc","size":89,"data":"","first_seen":"2023-04-12T00:00:36Z","last_seen":"2026-04-01T22:14:59.367329Z","times_seen":2230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.pemsrv.com/popunder1000.js","fqdn":"a.pemsrv.com","domain":"pemsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"58eeac519be6ceb7f233b62fedfdf016","sha1":"a8b5185c6e336f90988c17b6ae0d3baf33019177","sha256":"b0d0cb74d537af4c1b83a9d78074cd9bca9b9f3bde3aad75ec4d55b3f1095190","sha512":"9ebaefaf8755f013dd4039606d27392cd58e3b0abe895b4a5dcbdcdcb9e9473667f27387090c9eb50cd8d234baa8a52e3ae24d488ccc424e27eef4ad4d9382a5","ssdeep":"3072:drCqGR9VdpPtCgzTNiQ4n8701l21bMpSmu:XGjVdhdQQOe+p5u","tlshash":"66c35140210748e921e2d67e956fb0993c24a823f5e9cda76c05e7c1f8dec99069bdf3","size":122357,"data":"","first_seen":"2025-12-09T14:42:47.636044Z","last_seen":"2026-01-07T12:59:27.51417Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwplayer.core.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"34de47681547f88d2a251419d61d4a2d","sha1":"e9c03590ad2eb86eeee8b0032f345fbeb32bc4c1","sha256":"5a8861552d8484bac63cb929ef4b4e9f2f76726aef84032c76a75b76da4e7ddc","sha512":"96c8659af1758ddc35ee64cf835f983cddb190d2dff7884b86dd259faab6d824c3330d04f2b056f77989be023b1703c9e0e339ce805c0ec480812d2988c305ea","ssdeep":"3072:B5ozmmILBerJhsy7v22m79sTkvpkHkfeKJyuaU:X7DBerJh/aLLkEfPJn","tlshash":"45e33b753181623651da93da72674201a33a45897406c7acff2cedea1c3e88771f6fb8","size":143406,"data":"","first_seen":"2025-10-07T08:25:20.374415Z","last_seen":"2026-02-25T20:14:13.377962Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/provider.html5.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8e42a735322eb7478a82bf49c357638","sha1":"5ef024f2e798985043d7ecb8bf1752cffeb70e55","sha256":"f18d94cc548a0d5e9c36da9f47164f4df4fbd903a9cf0dc8e3a4545622365ce7","sha512":"6c8d8c6fd93db8ab4d8e5dbf25edc0aa244fb9eaff22201931bc467e87061770ca2e85cb7f8db536143b5766020dc7f35b1394853e4c9e0c48bd40bd15247ebd","ssdeep":"768:B2Smc7dAD/v018QK1XCYClPhaiDXIj9ZvDry8wesUukSJLdXhRwTi++2XzPAjrCW:BnG/v01qBBgJOnqhfwXzpIME9Dfm50HJ","tlshash":"4113f89633d4b433c6d296c261750311533e5e5a7848c4acfa299ecb0d5ac8770fabf9","size":44252,"data":"","first_seen":"2025-10-07T08:25:20.304883Z","last_seen":"2026-02-25T20:14:13.330081Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/provider.html5.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8e42a735322eb7478a82bf49c357638","sha1":"5ef024f2e798985043d7ecb8bf1752cffeb70e55","sha256":"f18d94cc548a0d5e9c36da9f47164f4df4fbd903a9cf0dc8e3a4545622365ce7","sha512":"6c8d8c6fd93db8ab4d8e5dbf25edc0aa244fb9eaff22201931bc467e87061770ca2e85cb7f8db536143b5766020dc7f35b1394853e4c9e0c48bd40bd15247ebd","ssdeep":"768:B2Smc7dAD/v018QK1XCYClPhaiDXIj9ZvDry8wesUukSJLdXhRwTi++2XzPAjrCW:BnG/v01qBBgJOnqhfwXzpIME9Dfm50HJ","tlshash":"4113f89633d4b433c6d296c261750311533e5e5a7848c4acfa299ecb0d5ac8770fabf9","size":44252,"data":"","first_seen":"2025-10-07T08:25:20.304883Z","last_seen":"2026-02-25T20:14:13.330081Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwplayer.controls.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fde4fff33b8be6ebe2530808273fe7b","sha1":"0810766277301777c5fd5fc031040fc5cc315df5","sha256":"ef7d843e4bd08aceacb89d07e82add18b04e2b2a1b4ddb0784c1573374ec9448","sha512":"7aea8e374962935b5a74d86e3d718b2ce0825117c0a1fd3f07294345186e9f28eea3480f04bd190ad4dfed9cccf84c4d07440770ee4f2ecdeb0d185f9055d28a","ssdeep":"1536:BCUKr35YneqmSoQQD/5YIuhhAuUkJrPyoyjQ7ru+7AHYzwC0suZrqlHdDPjmOoRR:B+r35Yer5Yk7REBvB5sYgwmf8q","tlshash":"b9140922614256349ae6c1daa7504b04f73a8141f652deecfd7dedcc849e9ca30fa7b0","size":193500,"data":"","first_seen":"2025-10-07T08:25:20.241872Z","last_seen":"2026-02-25T20:14:13.37576Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2a13df946abae1303a44244716007be1","sha1":"56edf6b097c0c75681061221f5e6e74db551b063","sha256":"e18eaf02499bc99e399815241b74b821022eaf60f4bd8e555bca7a06debb8d85","sha512":"d6498d460845f17573432b3f9f09abdb1f7a797974bf8fa4c9422afc9a3f2226c2c75e5a6a6c4f51065d28db6d8a9c8101369f91732fcb9a93b73a7d25b22425","ssdeep":"","tlshash":"bd316d2fb0fd69058633b06a9b2f24086e1b608fae4acd61bdac5ae05f1416c9133695","size":1553,"data":"","first_seen":"2025-11-07T18:27:21.539546Z","last_seen":"2026-01-04T09:18:31.132716Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/emojione/2.1.4/lib/js/emojione.min.js?_=1767424569377","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"64bdc4b744c2e3543601007f10059f5e","sha1":"f1f3d20f28bf0eb93f6d840b61f9d7eb1cc5b943","sha256":"4ee1289e9a934487022e65c2df63495380ffe2545f9964daaa4b85ae48ce1c2b","sha512":"9ea26c85981ce52f0d01ad50a624bd6b9d17d9123d7572e5256a21ad78cf5e4828069cc4bec3fc761b8ccb6cf22dae2349b53f49f3fb18bdd3e6aef9931f5d0f","ssdeep":"1536:lckkkiHC4Mrrb0WxXW8ps922sgTiHiAaBSohHtk:lckkkiirb0WTpzEFBSohHy","tlshash":"5e14e7ae8b604999fec4e40d92db7749f85c3404c6a61661657cc6cf2bbb43a33853ec","size":193321,"data":"","first_seen":"2023-04-09T17:48:37Z","last_seen":"2026-04-03T15:29:14.53092Z","times_seen":213,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5266d584dd38cef0dcf9003d533b34b","sha1":"513a03dc14f47405e55021c612b80c2dfeb3791e","sha256":"6f10547c474bc458f717629fa69326d7e1721c4bdb19974af3e9aa01156af813","sha512":"3078c978269b73df3de9eb88566e1bab3810bf46187c558bbd9daf923287eb2c40b5f6c3933685690ffae102ba1507b59d3486198d8520d74bc61334a642e64e","ssdeep":"","tlshash":"70d0a7e939658c315294014b20b5f7a8267160a066129648c1d8cc2b9a11fd308a155c","size":217,"data":"","first_seen":"2026-01-03T07:17:14.674417Z","last_seen":"2026-01-03T07:17:14.674417Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.pemsrv.com/ad-provider.js","fqdn":"a.pemsrv.com","domain":"pemsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b6a035a8d534745768f430968527ddc","sha1":"9aadc21458924cf509e9e4cd443e12dd21c1a24d","sha256":"fa1550d32fff4d3ae5d6e1061002ce4b162cf5d8602828d8537edf417fb19d3d","sha512":"fc3e8f5e9b0b7a862cce263a82a12a31bcf9e310f3931861c90376815e30d7aedfb38ddf18fc91689083c1acea845bbb7cc8f51a843688d622be1b9c6c1d9c74","ssdeep":"3072:cWYjf7+28VOk2DG2cUMaElwnRlqI1fsBHisiEolY4o/CXMzpo:U+28VOk262lElwnRjfs4sXJpo","tlshash":"3b045d993792307441d3a11da9ff53093371506ab80f4884bb4dd8a427adeea51a3ffd","size":185361,"data":"","first_seen":"2025-12-11T18:04:56.436466Z","last_seen":"2026-01-14T02:16:11.491697Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"dff932eb62b0ddaac2211366b4b01ebc","sha1":"9dab4d6ec387b84659b55330837eb7377f8d4f90","sha256":"6a95709e3e4f44a0dc86ff470f0d2bb12eb97af1cbd52c67542c43e693392bb6","sha512":"b60004f4b5caf487000de2d2f7ad7844afe6153f3d487d0ad001e009daf990122e3bcdce29b9cc80502df28d3429f0d3fab8fa22923f9f37efdef6cba77f1c54","ssdeep":"","tlshash":"1a9002da71c371009653326c407f188d613988e5288c4940915094922c6503491269ac","size":53,"data":"","first_seen":"2025-01-25T20:39:32.065702Z","last_seen":"2026-04-03T03:15:29.473427Z","times_seen":1321,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwplayer.core.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"34de47681547f88d2a251419d61d4a2d","sha1":"e9c03590ad2eb86eeee8b0032f345fbeb32bc4c1","sha256":"5a8861552d8484bac63cb929ef4b4e9f2f76726aef84032c76a75b76da4e7ddc","sha512":"96c8659af1758ddc35ee64cf835f983cddb190d2dff7884b86dd259faab6d824c3330d04f2b056f77989be023b1703c9e0e339ce805c0ec480812d2988c305ea","ssdeep":"3072:B5ozmmILBerJhsy7v22m79sTkvpkHkfeKJyuaU:X7DBerJh/aLLkEfPJn","tlshash":"45e33b753181623651da93da72674201a33a45897406c7acff2cedea1c3e88771f6fb8","size":143406,"data":"","first_seen":"2025-10-07T08:25:20.374415Z","last_seen":"2026-02-25T20:14:13.377962Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/provider.html5.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8e42a735322eb7478a82bf49c357638","sha1":"5ef024f2e798985043d7ecb8bf1752cffeb70e55","sha256":"f18d94cc548a0d5e9c36da9f47164f4df4fbd903a9cf0dc8e3a4545622365ce7","sha512":"6c8d8c6fd93db8ab4d8e5dbf25edc0aa244fb9eaff22201931bc467e87061770ca2e85cb7f8db536143b5766020dc7f35b1394853e4c9e0c48bd40bd15247ebd","ssdeep":"768:B2Smc7dAD/v018QK1XCYClPhaiDXIj9ZvDry8wesUukSJLdXhRwTi++2XzPAjrCW:BnG/v01qBBgJOnqhfwXzpIME9Dfm50HJ","tlshash":"4113f89633d4b433c6d296c261750311533e5e5a7848c4acfa299ecb0d5ac8770fabf9","size":44252,"data":"","first_seen":"2025-10-07T08:25:20.304883Z","last_seen":"2026-02-25T20:14:13.330081Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5f4f87e368f94555357d00f9b7e8ed4c","sha1":"db0173149e571a755cef6a33bb0063382f1b1ba9","sha256":"f997368baa677bfcf69257707de671a58de76eee3cf27855226cc417ec78dad8","sha512":"c99aaf4acc8b400f38f613df5373af1ee8c03a0b51ff5486bff9c2229d600506a00e9292ce6903a830108e5819b4d84509c8792e39d42df9c628110d70169c59","ssdeep":"","tlshash":"2d8004d535c3500447d3115400571cd45034c57115444d404054dc511d55034711545c","size":37,"data":"","first_seen":"2023-08-05T22:12:59Z","last_seen":"2026-04-03T07:01:45.768994Z","times_seen":1154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/vast.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0deaafb5318980de8c2ee695b76c710","sha1":"5a3734828b24cac1e1cae1645662b3c9dc26cf82","sha256":"cd51410290d2266cda49882fe9d3d5c67aa9bc5b2c3551c7a5fd9e66cfb40908","sha512":"637b3da699f5ba20b0b2a4e900ffee7b74ae8d9eacbe00a48539454125991172e2c09e4eff00f4e8b95a9a700a48cacc235ad55ac7bf01ca2036fc70150c0891","ssdeep":"1536:ulAE+jE0HEekQmIWTuDkjlOYx1sbRuF5V0U2hw2ubBkrzIjpiIPYqdsrVpQRwOaz:uJ+jEQwjlOcSNSvezkyVpeFamsH","tlshash":"c1a308962395e53246e484e960300242b3350a0f7c0a82acf57dfdef5d5ea4b76baf74","size":104600,"data":"","first_seen":"2023-09-16T05:27:40Z","last_seen":"2026-02-25T20:14:13.349587Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwplayer.controls.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fde4fff33b8be6ebe2530808273fe7b","sha1":"0810766277301777c5fd5fc031040fc5cc315df5","sha256":"ef7d843e4bd08aceacb89d07e82add18b04e2b2a1b4ddb0784c1573374ec9448","sha512":"7aea8e374962935b5a74d86e3d718b2ce0825117c0a1fd3f07294345186e9f28eea3480f04bd190ad4dfed9cccf84c4d07440770ee4f2ecdeb0d185f9055d28a","ssdeep":"1536:BCUKr35YneqmSoQQD/5YIuhhAuUkJrPyoyjQ7ru+7AHYzwC0suZrqlHdDPjmOoRR:B+r35Yer5Yk7REBvB5sYgwmf8q","tlshash":"b9140922614256349ae6c1daa7504b04f73a8141f652deecfd7dedcc849e9ca30fa7b0","size":193500,"data":"","first_seen":"2025-10-07T08:25:20.241872Z","last_seen":"2026-02-25T20:14:13.37576Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/provider.html5.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8e42a735322eb7478a82bf49c357638","sha1":"5ef024f2e798985043d7ecb8bf1752cffeb70e55","sha256":"f18d94cc548a0d5e9c36da9f47164f4df4fbd903a9cf0dc8e3a4545622365ce7","sha512":"6c8d8c6fd93db8ab4d8e5dbf25edc0aa244fb9eaff22201931bc467e87061770ca2e85cb7f8db536143b5766020dc7f35b1394853e4c9e0c48bd40bd15247ebd","ssdeep":"768:B2Smc7dAD/v018QK1XCYClPhaiDXIj9ZvDry8wesUukSJLdXhRwTi++2XzPAjrCW:BnG/v01qBBgJOnqhfwXzpIME9Dfm50HJ","tlshash":"4113f89633d4b433c6d296c261750311533e5e5a7848c4acfa299ecb0d5ac8770fabf9","size":44252,"data":"","first_seen":"2025-10-07T08:25:20.304883Z","last_seen":"2026-02-25T20:14:13.330081Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2b9acf9223e6d60c206388ea2035fd3a","sha1":"b8ba77d712fa01527c73875a37e290ebc133d924","sha256":"9c27754d9297bf8d4022ded2628940ae5a837c7d7d130b197c3dc80627a453e2","sha512":"897c7c1c5944ff8365edf773b1f724393d637b4381108e108a3d923236782992ac02561ac3982072d8ee3ea1926bec788ca0851ff3bc777e6f5a3948634af3e4","ssdeep":"","tlshash":"a3800000aa2008b0038a22bc008e028c3a3808bcc080088020a8e8aa20b2e808a28b30","size":29,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-03-05T02:41:16.795404Z","times_seen":13538,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/provider.html5.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8e42a735322eb7478a82bf49c357638","sha1":"5ef024f2e798985043d7ecb8bf1752cffeb70e55","sha256":"f18d94cc548a0d5e9c36da9f47164f4df4fbd903a9cf0dc8e3a4545622365ce7","sha512":"6c8d8c6fd93db8ab4d8e5dbf25edc0aa244fb9eaff22201931bc467e87061770ca2e85cb7f8db536143b5766020dc7f35b1394853e4c9e0c48bd40bd15247ebd","ssdeep":"768:B2Smc7dAD/v018QK1XCYClPhaiDXIj9ZvDry8wesUukSJLdXhRwTi++2XzPAjrCW:BnG/v01qBBgJOnqhfwXzpIME9Dfm50HJ","tlshash":"4113f89633d4b433c6d296c261750311533e5e5a7848c4acfa299ecb0d5ac8770fabf9","size":44252,"data":"","first_seen":"2025-10-07T08:25:20.304883Z","last_seen":"2026-02-25T20:14:13.330081Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.iople.com/app.js","fqdn":"cdn.iople.com","domain":"iople.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"90eccb8b37b700c97e87e757461d5d1a","sha1":"0d30619608c9dd29e449791f60d256d95205d896","sha256":"19ce511a0637b725ebffc1e794dd74c3ac19b13bc5c00ecce8499e9b2063bb92","sha512":"3d1ad7548a479125e46ae79415eff7bea68af808731056f3aa9cff5a2fbf2a803e9d93411279bea395c4e0f50202f9a6cb1019b3310da4bda5b11b9683c0ada7","ssdeep":"1536:L24Ny1erT/XuZ3gYCuGn0tqxSDsWI8Za6HMhX20BDbvcQzStYO5CS:Pg1eP+ZGuSSaRks7O5CS","tlshash":"5eb3754661cd22708a8bf333adefacd4ee6f5900756588c7261cc2916925dac40bfdf9","size":111231,"data":"","first_seen":"2025-09-14T03:07:12.749205Z","last_seen":"2026-04-01T17:04:30.92742Z","times_seen":226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwplayer.controls.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fde4fff33b8be6ebe2530808273fe7b","sha1":"0810766277301777c5fd5fc031040fc5cc315df5","sha256":"ef7d843e4bd08aceacb89d07e82add18b04e2b2a1b4ddb0784c1573374ec9448","sha512":"7aea8e374962935b5a74d86e3d718b2ce0825117c0a1fd3f07294345186e9f28eea3480f04bd190ad4dfed9cccf84c4d07440770ee4f2ecdeb0d185f9055d28a","ssdeep":"1536:BCUKr35YneqmSoQQD/5YIuhhAuUkJrPyoyjQ7ru+7AHYzwC0suZrqlHdDPjmOoRR:B+r35Yer5Yk7REBvB5sYgwmf8q","tlshash":"b9140922614256349ae6c1daa7504b04f73a8141f652deecfd7dedcc849e9ca30fa7b0","size":193500,"data":"","first_seen":"2025-10-07T08:25:20.241872Z","last_seen":"2026-02-25T20:14:13.37576Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f3658977c82cf0f6155fd8d317371a7f","sha1":"55ade721f17d3e5e6f4f6594030edf2d3fa46d1c","sha256":"14b35c32d8144645e3c4f54fae8bb57a5f12c8777eae91109d8c09da6ad59460","sha512":"5feb971399c4940f0db00b171d8d7820dd97e0bb10cbe80b390ed3cb7d31c8d3f8a3ed8f39ca3eaa321fd92c72138775c2c1f6ffa2de0e4f75417f98abb2ea66","ssdeep":"","tlshash":"8471e02db0e250694a37753dab7f93543c722007510ace44b89d6ff46f40916e8677ee","size":3494,"data":"","first_seen":"2025-11-07T18:27:21.5402Z","last_seen":"2026-01-04T09:18:31.136817Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e969e6981adb7ab1cb174994a5c8c627","sha1":"5f534a259a6f3754d1d392028fd4cbb344fb6563","sha256":"5cb18f9c0eebf644c0bc27e5224177984121b4c4a3f8189861a6d797a15a2e7a","sha512":"10bbe815bb6e4ade10d00a42a82dd10b668e95e275161cb0a637b2ea95785f8f7fc72b31bb48ac9c1dfad03d811912c0683941a3c09357525f164915d5b033cf","ssdeep":"","tlshash":"a380000a88a8a0222a30a0228c020200202e822080ee208083f2032020c283c022b802","size":30,"data":"","first_seen":"2024-02-12T20:00:22Z","last_seen":"2026-03-06T11:55:01.514986Z","times_seen":20053,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/vast.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0deaafb5318980de8c2ee695b76c710","sha1":"5a3734828b24cac1e1cae1645662b3c9dc26cf82","sha256":"cd51410290d2266cda49882fe9d3d5c67aa9bc5b2c3551c7a5fd9e66cfb40908","sha512":"637b3da699f5ba20b0b2a4e900ffee7b74ae8d9eacbe00a48539454125991172e2c09e4eff00f4e8b95a9a700a48cacc235ad55ac7bf01ca2036fc70150c0891","ssdeep":"1536:ulAE+jE0HEekQmIWTuDkjlOYx1sbRuF5V0U2hw2ubBkrzIjpiIPYqdsrVpQRwOaz:uJ+jEQwjlOcSNSvezkyVpeFamsH","tlshash":"c1a308962395e53246e484e960300242b3350a0f7c0a82acf57dfdef5d5ea4b76baf74","size":104600,"data":"","first_seen":"2023-09-16T05:27:40Z","last_seen":"2026-02-25T20:14:13.349587Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9aa3dc35f8ba994aa0f04a42c4da5062","sha1":"a65df79b7b70e8b8d22a2db929f6598428a827e0","sha256":"89e4c05e12e12f5bdf85a4fb89bad572dd85256091add09fdb9c6e42e703e2bb","sha512":"72ec1d5aaa34463f798b2d2c5976a6221f70e51ea2afff582319f4c8b7e31f4a67ef2a2d39427b4d1cc89ca66c4d4374db662c1137380ce0aad2acfcdbed4d6c","ssdeep":"","tlshash":"ec7000080000a0308808a002882ca3803c20a820b022a008080823080000a020008e0e","size":24,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-03-06T11:55:01.493594Z","times_seen":23251,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6a88d4bd5bd93656328a2f38b4378d0b","sha1":"d2afdc9b1693f0cf62ab6e88bbcf4e20fb62844e","sha256":"3b1758c84d9df642c22e7c547795bd40ff0a9610795e44c90109fa7f9b8016ab","sha512":"c64eb8517871a1b996d76fd0d9982a9726515a003cebbbdf1639067607e2f7697c97f79fc176802c7e560f325e3f39f40c9edecb49e7c1626b95ca0cb8349424","ssdeep":"","tlshash":"687000380a2000000230202200020002008282a0c0a2a8c0222a820002020200282002","size":21,"data":"","first_seen":"2023-03-07T12:58:03Z","last_seen":"2026-03-06T11:55:01.48721Z","times_seen":8444,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"dff932eb62b0ddaac2211366b4b01ebc","sha1":"9dab4d6ec387b84659b55330837eb7377f8d4f90","sha256":"6a95709e3e4f44a0dc86ff470f0d2bb12eb97af1cbd52c67542c43e693392bb6","sha512":"b60004f4b5caf487000de2d2f7ad7844afe6153f3d487d0ad001e009daf990122e3bcdce29b9cc80502df28d3429f0d3fab8fa22923f9f37efdef6cba77f1c54","ssdeep":"","tlshash":"1a9002da71c371009653326c407f188d613988e5288c4940915094922c6503491269ac","size":53,"data":"","first_seen":"2025-01-25T20:39:32.065702Z","last_seen":"2026-04-03T03:15:29.473427Z","times_seen":1321,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwpsrv.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7f3733c71441c1881fc4eabe9c96086","sha1":"8db1f2f35489a41d1fb63af5b9aad52388c58735","sha256":"9f4c0014a4f36c11302077dc073ef529031ce3eebc04c0ca9bc1d7ea0ed95eca","sha512":"daad1df7ab9c84cb7c1a120fe01a007dc14c6a05e73c8c3afb418c19085d08d85c36128e668890e7d9ad2c084ceb9589fb853a7f06fbc0175028ea7ce8a7e7dd","ssdeep":"768:U2Q5c7PRtE8JKCzyQmr1nEXiGdCeMt+uksp3T:1QAPRtE8JKC2JEXiGdCSudpj","tlshash":"ad63e78d3685752a5b6770b8806fb546723d1dd6304dc610ea50eed93c3de6aa233b2c","size":67106,"data":"","first_seen":"2024-04-23T16:41:51Z","last_seen":"2026-02-11T20:51:20.728494Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/js/mztn.js?v=2.19","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"809891680189b28bd549dc485235fa1b","sha1":"55e3b55e8fcf598c9add3cd8564c0d9685e211a1","sha256":"1647185284914402cf6f3aa814c280434b7eee17ad8fa45e90947bb389c33522","sha512":"57cd43f4fb06b2cfe996ae6beffd2313c00f17a617916f4505a89fcf43dfa3d9686d54156528726080f28375e0409dc3b739547856b0f891425d469c408261d0","ssdeep":"384:5isyKwQKCwBD6PKBOiolBpcKBD9NrVG1gxEGB/ySsPFbmEVlqOvBvZ7MNd0Ux4+k:AsyKqD6mMvpcODHwu8F66wjXRwzT","tlshash":"00a20706be75783949db84bd463fd10cf830261bb406d490bd9ce9d4afa0e0a457ebb9","size":22681,"data":"","first_seen":"2025-12-19T23:45:08.36194Z","last_seen":"2026-01-04T09:18:30.992703Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bd931315f9ec922d23220a34a506421","sha1":"92eb331739d51c65226b5fdb07ec2d74924f200f","sha256":"28f33740f0a341c823243413c7780d92e7ae39254641174a86a4f51ac805b576","sha512":"26bb36ab577ba2b6486f482177e31992c81c79322070edc9d55af10d7ab8f3e1b9dccc89f7c925a47a68e464f522736c0e64d3d7e4acaa016745e0104bddb167","ssdeep":"3072:cWYjf7+28VOk2DG2cUMaElwnRlqI1fsBHisiEolY4o/CXMXpo:U+28VOk262lElwnRjfs4sXhpo","tlshash":"96045c993792307441d3a11daaff53093371506ab80f4884bb4dd8a427adeea51a3ffd","size":185387,"data":"","first_seen":"2025-12-11T15:18:11.624048Z","last_seen":"2026-01-15T17:17:43.902034Z","times_seen":1441,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwpsrv.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7f3733c71441c1881fc4eabe9c96086","sha1":"8db1f2f35489a41d1fb63af5b9aad52388c58735","sha256":"9f4c0014a4f36c11302077dc073ef529031ce3eebc04c0ca9bc1d7ea0ed95eca","sha512":"daad1df7ab9c84cb7c1a120fe01a007dc14c6a05e73c8c3afb418c19085d08d85c36128e668890e7d9ad2c084ceb9589fb853a7f06fbc0175028ea7ce8a7e7dd","ssdeep":"768:U2Q5c7PRtE8JKCzyQmr1nEXiGdCeMt+uksp3T:1QAPRtE8JKC2JEXiGdCSudpj","tlshash":"ad63e78d3685752a5b6770b8806fb546723d1dd6304dc610ea50eed93c3de6aa233b2c","size":67106,"data":"","first_seen":"2024-04-23T16:41:51Z","last_seen":"2026-02-11T20:51:20.728494Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwplayer.core.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"34de47681547f88d2a251419d61d4a2d","sha1":"e9c03590ad2eb86eeee8b0032f345fbeb32bc4c1","sha256":"5a8861552d8484bac63cb929ef4b4e9f2f76726aef84032c76a75b76da4e7ddc","sha512":"96c8659af1758ddc35ee64cf835f983cddb190d2dff7884b86dd259faab6d824c3330d04f2b056f77989be023b1703c9e0e339ce805c0ec480812d2988c305ea","ssdeep":"3072:B5ozmmILBerJhsy7v22m79sTkvpkHkfeKJyuaU:X7DBerJh/aLLkEfPJn","tlshash":"45e33b753181623651da93da72674201a33a45897406c7acff2cedea1c3e88771f6fb8","size":143406,"data":"","first_seen":"2025-10-07T08:25:20.374415Z","last_seen":"2026-02-25T20:14:13.377962Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5f4f87e368f94555357d00f9b7e8ed4c","sha1":"db0173149e571a755cef6a33bb0063382f1b1ba9","sha256":"f997368baa677bfcf69257707de671a58de76eee3cf27855226cc417ec78dad8","sha512":"c99aaf4acc8b400f38f613df5373af1ee8c03a0b51ff5486bff9c2229d600506a00e9292ce6903a830108e5819b4d84509c8792e39d42df9c628110d70169c59","ssdeep":"","tlshash":"2d8004d535c3500447d3115400571cd45034c57115444d404054dc511d55034711545c","size":37,"data":"","first_seen":"2023-08-05T22:12:59Z","last_seen":"2026-04-03T07:01:45.768994Z","times_seen":1154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.pemsrv.com/popunder1000.js","fqdn":"a.pemsrv.com","domain":"pemsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"58eeac519be6ceb7f233b62fedfdf016","sha1":"a8b5185c6e336f90988c17b6ae0d3baf33019177","sha256":"b0d0cb74d537af4c1b83a9d78074cd9bca9b9f3bde3aad75ec4d55b3f1095190","sha512":"9ebaefaf8755f013dd4039606d27392cd58e3b0abe895b4a5dcbdcdcb9e9473667f27387090c9eb50cd8d234baa8a52e3ae24d488ccc424e27eef4ad4d9382a5","ssdeep":"3072:drCqGR9VdpPtCgzTNiQ4n8701l21bMpSmu:XGjVdhdQQOe+p5u","tlshash":"66c35140210748e921e2d67e956fb0993c24a823f5e9cda76c05e7c1f8dec99069bdf3","size":122357,"data":"","first_seen":"2025-12-09T14:42:47.636044Z","last_seen":"2026-01-07T12:59:27.51417Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fe99bbf2987d52a27e4d042d61264b5f","sha1":"96bb68de49d3a4146142cce3f02de1ccbf8d0bf6","sha256":"cfe90e4da6c1841088b25b3582dc78b887f3239cdfde633ff426703c6ed538f5","sha512":"9dd74689d8b3460b4da7557d2797047f31cfa1b8522959d152c08f1f48989897e15f026d9b254a7ef61b99b9b18fc002054f29a12a2e30554a68d7815c53f3dd","ssdeep":"","tlshash":"d570000a20a02022082a000082022200288c0082a80800380a008b003c008032222382","size":22,"data":"","first_seen":"2025-03-02T21:04:17.177505Z","last_seen":"2026-03-06T11:55:01.511158Z","times_seen":8483,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bd931315f9ec922d23220a34a506421","sha1":"92eb331739d51c65226b5fdb07ec2d74924f200f","sha256":"28f33740f0a341c823243413c7780d92e7ae39254641174a86a4f51ac805b576","sha512":"26bb36ab577ba2b6486f482177e31992c81c79322070edc9d55af10d7ab8f3e1b9dccc89f7c925a47a68e464f522736c0e64d3d7e4acaa016745e0104bddb167","ssdeep":"3072:cWYjf7+28VOk2DG2cUMaElwnRlqI1fsBHisiEolY4o/CXMXpo:U+28VOk262lElwnRjfs4sXhpo","tlshash":"96045c993792307441d3a11daaff53093371506ab80f4884bb4dd8a427adeea51a3ffd","size":185387,"data":"","first_seen":"2025-12-11T15:18:11.624048Z","last_seen":"2026-01-15T17:17:43.902034Z","times_seen":1441,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ef9e29d830b47e493c51972bb3af3ef6","sha1":"95d6255c5e100dce97da5619be073c8dbf4f00c0","sha256":"fc5a1ffc9513896711ec2c788490995715c8d32ccda8c4e2c68a9bd8cb214e77","sha512":"af408037587ea95e4db5c0412d582ea898d2fb5084e5917048698bc482dd7c3e8854d87fcf3adf508fd8cceef746eab017029aba07aa934184675a6e6c88f0b9","ssdeep":"","tlshash":"a270000000002830080208002020ca8e2a22208022033a00800a000000208802088b0a","size":19,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-03-06T11:55:01.482014Z","times_seen":19081,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwplayer.core.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"34de47681547f88d2a251419d61d4a2d","sha1":"e9c03590ad2eb86eeee8b0032f345fbeb32bc4c1","sha256":"5a8861552d8484bac63cb929ef4b4e9f2f76726aef84032c76a75b76da4e7ddc","sha512":"96c8659af1758ddc35ee64cf835f983cddb190d2dff7884b86dd259faab6d824c3330d04f2b056f77989be023b1703c9e0e339ce805c0ec480812d2988c305ea","ssdeep":"3072:B5ozmmILBerJhsy7v22m79sTkvpkHkfeKJyuaU:X7DBerJh/aLLkEfPJn","tlshash":"45e33b753181623651da93da72674201a33a45897406c7acff2cedea1c3e88771f6fb8","size":143406,"data":"","first_seen":"2025-10-07T08:25:20.374415Z","last_seen":"2026-02-25T20:14:13.377962Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwplayer.controls.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fde4fff33b8be6ebe2530808273fe7b","sha1":"0810766277301777c5fd5fc031040fc5cc315df5","sha256":"ef7d843e4bd08aceacb89d07e82add18b04e2b2a1b4ddb0784c1573374ec9448","sha512":"7aea8e374962935b5a74d86e3d718b2ce0825117c0a1fd3f07294345186e9f28eea3480f04bd190ad4dfed9cccf84c4d07440770ee4f2ecdeb0d185f9055d28a","ssdeep":"1536:BCUKr35YneqmSoQQD/5YIuhhAuUkJrPyoyjQ7ru+7AHYzwC0suZrqlHdDPjmOoRR:B+r35Yer5Yk7REBvB5sYgwmf8q","tlshash":"b9140922614256349ae6c1daa7504b04f73a8141f652deecfd7dedcc849e9ca30fa7b0","size":193500,"data":"","first_seen":"2025-10-07T08:25:20.241872Z","last_seen":"2026-02-25T20:14:13.37576Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwplayer.controls.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fde4fff33b8be6ebe2530808273fe7b","sha1":"0810766277301777c5fd5fc031040fc5cc315df5","sha256":"ef7d843e4bd08aceacb89d07e82add18b04e2b2a1b4ddb0784c1573374ec9448","sha512":"7aea8e374962935b5a74d86e3d718b2ce0825117c0a1fd3f07294345186e9f28eea3480f04bd190ad4dfed9cccf84c4d07440770ee4f2ecdeb0d185f9055d28a","ssdeep":"1536:BCUKr35YneqmSoQQD/5YIuhhAuUkJrPyoyjQ7ru+7AHYzwC0suZrqlHdDPjmOoRR:B+r35Yer5Yk7REBvB5sYgwmf8q","tlshash":"b9140922614256349ae6c1daa7504b04f73a8141f652deecfd7dedcc849e9ca30fa7b0","size":193500,"data":"","first_seen":"2025-10-07T08:25:20.241872Z","last_seen":"2026-02-25T20:14:13.37576Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.pemsrv.com/popunder1000.js","fqdn":"a.pemsrv.com","domain":"pemsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"58eeac519be6ceb7f233b62fedfdf016","sha1":"a8b5185c6e336f90988c17b6ae0d3baf33019177","sha256":"b0d0cb74d537af4c1b83a9d78074cd9bca9b9f3bde3aad75ec4d55b3f1095190","sha512":"9ebaefaf8755f013dd4039606d27392cd58e3b0abe895b4a5dcbdcdcb9e9473667f27387090c9eb50cd8d234baa8a52e3ae24d488ccc424e27eef4ad4d9382a5","ssdeep":"3072:drCqGR9VdpPtCgzTNiQ4n8701l21bMpSmu:XGjVdhdQQOe+p5u","tlshash":"66c35140210748e921e2d67e956fb0993c24a823f5e9cda76c05e7c1f8dec99069bdf3","size":122357,"data":"","first_seen":"2025-12-09T14:42:47.636044Z","last_seen":"2026-01-07T12:59:27.51417Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c24107ca675c86ce400f00f60737bf91","sha1":"915db7d3426c409da4f1c6d58c38d9dfd6ad39be","sha256":"3688d7e88d248ea850c456f0233738d10695a410a3dec97785ca7422c3f562c1","sha512":"0b10c8522a9d3b4cd1b5d63918ca7888bf837bd48c2c456c38e20e215a0c5e1cc38e5248658c54021b1d2337a68dc1f61b17adfbda678078d0d4a8cb4fc56e40","ssdeep":"","tlshash":"2870002002002830880200022020cb8c2a200280280230008208000800208002808a0a","size":20,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-03-06T11:55:01.491972Z","times_seen":18883,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/provider.html5.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8e42a735322eb7478a82bf49c357638","sha1":"5ef024f2e798985043d7ecb8bf1752cffeb70e55","sha256":"f18d94cc548a0d5e9c36da9f47164f4df4fbd903a9cf0dc8e3a4545622365ce7","sha512":"6c8d8c6fd93db8ab4d8e5dbf25edc0aa244fb9eaff22201931bc467e87061770ca2e85cb7f8db536143b5766020dc7f35b1394853e4c9e0c48bd40bd15247ebd","ssdeep":"768:B2Smc7dAD/v018QK1XCYClPhaiDXIj9ZvDry8wesUukSJLdXhRwTi++2XzPAjrCW:BnG/v01qBBgJOnqhfwXzpIME9Dfm50HJ","tlshash":"4113f89633d4b433c6d296c261750311533e5e5a7848c4acfa299ecb0d5ac8770fabf9","size":44252,"data":"","first_seen":"2025-10-07T08:25:20.304883Z","last_seen":"2026-02-25T20:14:13.330081Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2ba9771d6e3fc777df00b528f4c290af","sha1":"75fc79bb365d1357c7bf3a480df0a19b53742749","sha256":"8fdc80b1148ace8683e87fa44e7aac0ec9c3fe2105a519479a24f4989ce313cc","sha512":"d37d58314553b876646f75b015a8fe2cece3084e380c9b42bc2e02c6d1f1b4a93a739a2faca915ca373188076b55a174649bb9df9428c6ac8f450e29076c20c6","ssdeep":"","tlshash":"cdf0682e628714204a6b70a8463f25013df3185f58cee5007d0caee04f218ba870efec","size":446,"data":"","first_seen":"2025-11-07T18:27:21.541144Z","last_seen":"2026-01-04T09:18:31.139626Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"aaf72876f0d5e8a677a383fd45bf938b","sha1":"d8b2ca3c238c933223f4a6313c5c0561f99e0c1c","sha256":"15eb7e222abfc64660d0f94c04053839498df20ea9ac9a13a201701a56ce3bf6","sha512":"c6bec20224539a5319a753a794c7521e7063e76b3d41bac8d7f0159880eaf3ed07c3fc1b0eb4ec285f1970f270f4b0ab68890d5a0ed01e3b1542102ad707f6d7","ssdeep":"","tlshash":"207000080820000820200802220322283822323022cc0002220a083022ea00b80282e2","size":24,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-03-06T11:55:01.498128Z","times_seen":23956,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"be6b25353280fac3960e70c9dcb6804f","sha1":"46c69609a3bb697e60644b18dc85d780c44804ea","sha256":"38be2b1c1c886666cd4ac85d71bb8b65e51d95c7c5f40b0c575f7d196a0442cd","sha512":"cfb553df29882616e097d28e643208df6aae0e005e63b7e7d9310a731135e9e33407ec268f12699208db7dd4fe2e8ba8a49de900e8b0a1a4bd83bd522f2ee953","ssdeep":"","tlshash":"10700008e08020a308380002028223222a0c282080822020002b0280288228baa88a80","size":24,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-03-06T11:55:01.486771Z","times_seen":22174,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/provider.html5.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8e42a735322eb7478a82bf49c357638","sha1":"5ef024f2e798985043d7ecb8bf1752cffeb70e55","sha256":"f18d94cc548a0d5e9c36da9f47164f4df4fbd903a9cf0dc8e3a4545622365ce7","sha512":"6c8d8c6fd93db8ab4d8e5dbf25edc0aa244fb9eaff22201931bc467e87061770ca2e85cb7f8db536143b5766020dc7f35b1394853e4c9e0c48bd40bd15247ebd","ssdeep":"768:B2Smc7dAD/v018QK1XCYClPhaiDXIj9ZvDry8wesUukSJLdXhRwTi++2XzPAjrCW:BnG/v01qBBgJOnqhfwXzpIME9Dfm50HJ","tlshash":"4113f89633d4b433c6d296c261750311533e5e5a7848c4acfa299ecb0d5ac8770fabf9","size":44252,"data":"","first_seen":"2025-10-07T08:25:20.304883Z","last_seen":"2026-02-25T20:14:13.330081Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwplayer.controls.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fde4fff33b8be6ebe2530808273fe7b","sha1":"0810766277301777c5fd5fc031040fc5cc315df5","sha256":"ef7d843e4bd08aceacb89d07e82add18b04e2b2a1b4ddb0784c1573374ec9448","sha512":"7aea8e374962935b5a74d86e3d718b2ce0825117c0a1fd3f07294345186e9f28eea3480f04bd190ad4dfed9cccf84c4d07440770ee4f2ecdeb0d185f9055d28a","ssdeep":"1536:BCUKr35YneqmSoQQD/5YIuhhAuUkJrPyoyjQ7ru+7AHYzwC0suZrqlHdDPjmOoRR:B+r35Yer5Yk7REBvB5sYgwmf8q","tlshash":"b9140922614256349ae6c1daa7504b04f73a8141f652deecfd7dedcc849e9ca30fa7b0","size":193500,"data":"","first_seen":"2025-10-07T08:25:20.241872Z","last_seen":"2026-02-25T20:14:13.37576Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fb440b8133f21c3e5d3e39624e7bda94","sha1":"1b46d8568f9bd8a2be944d6a61924a21ec0b6e4f","sha256":"a5e2bc908c3bd3196d273564d073484f9905d13817490eca5aa249e701139cdc","sha512":"f874692932aab2be754d763a3998c5cd3c654a5bcd78c5d839fe0ba506f9a9e563d3cecba0ca71a6b0db35ff94943f6fa8bb0292f10c1aeb7df2704ea6d85fbf","ssdeep":"","tlshash":"047000000000000820200802220322083822223002cc0002220a083022ea00b80282a0","size":20,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-01T14:36:47.456368Z","times_seen":24287,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.pemsrv.com/popunder1000.js","fqdn":"a.pemsrv.com","domain":"pemsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"58eeac519be6ceb7f233b62fedfdf016","sha1":"a8b5185c6e336f90988c17b6ae0d3baf33019177","sha256":"b0d0cb74d537af4c1b83a9d78074cd9bca9b9f3bde3aad75ec4d55b3f1095190","sha512":"9ebaefaf8755f013dd4039606d27392cd58e3b0abe895b4a5dcbdcdcb9e9473667f27387090c9eb50cd8d234baa8a52e3ae24d488ccc424e27eef4ad4d9382a5","ssdeep":"3072:drCqGR9VdpPtCgzTNiQ4n8701l21bMpSmu:XGjVdhdQQOe+p5u","tlshash":"66c35140210748e921e2d67e956fb0993c24a823f5e9cda76c05e7c1f8dec99069bdf3","size":122357,"data":"","first_seen":"2025-12-09T14:42:47.636044Z","last_seen":"2026-01-07T12:59:27.51417Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"javascriptURL","is_inline":false,"md5":"68934a3e9455fa72420237eb05902327","sha1":"7cb6efb98ba5972a9b5090dc2e517fe14d12cb04","sha256":"fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa","sha512":"719fa67eef49c4b2a2b83f0c62bddd88c106aaadb7e21ae057c8802b700e36f81fe3f144812d8b05d66dc663d908b25645e153262cf6d457aa34e684af9e328d","ssdeep":"","tlshash":"aa3000000000000c000000000000000000000000000000000000000030000000000000","size":5,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-04T03:45:10.911493Z","times_seen":66095,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwpsrv.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7f3733c71441c1881fc4eabe9c96086","sha1":"8db1f2f35489a41d1fb63af5b9aad52388c58735","sha256":"9f4c0014a4f36c11302077dc073ef529031ce3eebc04c0ca9bc1d7ea0ed95eca","sha512":"daad1df7ab9c84cb7c1a120fe01a007dc14c6a05e73c8c3afb418c19085d08d85c36128e668890e7d9ad2c084ceb9589fb853a7f06fbc0175028ea7ce8a7e7dd","ssdeep":"768:U2Q5c7PRtE8JKCzyQmr1nEXiGdCeMt+uksp3T:1QAPRtE8JKC2JEXiGdCSudpj","tlshash":"ad63e78d3685752a5b6770b8806fb546723d1dd6304dc610ea50eed93c3de6aa233b2c","size":67106,"data":"","first_seen":"2024-04-23T16:41:51Z","last_seen":"2026-02-11T20:51:20.728494Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/vast.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0deaafb5318980de8c2ee695b76c710","sha1":"5a3734828b24cac1e1cae1645662b3c9dc26cf82","sha256":"cd51410290d2266cda49882fe9d3d5c67aa9bc5b2c3551c7a5fd9e66cfb40908","sha512":"637b3da699f5ba20b0b2a4e900ffee7b74ae8d9eacbe00a48539454125991172e2c09e4eff00f4e8b95a9a700a48cacc235ad55ac7bf01ca2036fc70150c0891","ssdeep":"1536:ulAE+jE0HEekQmIWTuDkjlOYx1sbRuF5V0U2hw2ubBkrzIjpiIPYqdsrVpQRwOaz:uJ+jEQwjlOcSNSvezkyVpeFamsH","tlshash":"c1a308962395e53246e484e960300242b3350a0f7c0a82acf57dfdef5d5ea4b76baf74","size":104600,"data":"","first_seen":"2023-09-16T05:27:40Z","last_seen":"2026-02-25T20:14:13.349587Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/vast.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0deaafb5318980de8c2ee695b76c710","sha1":"5a3734828b24cac1e1cae1645662b3c9dc26cf82","sha256":"cd51410290d2266cda49882fe9d3d5c67aa9bc5b2c3551c7a5fd9e66cfb40908","sha512":"637b3da699f5ba20b0b2a4e900ffee7b74ae8d9eacbe00a48539454125991172e2c09e4eff00f4e8b95a9a700a48cacc235ad55ac7bf01ca2036fc70150c0891","ssdeep":"1536:ulAE+jE0HEekQmIWTuDkjlOYx1sbRuF5V0U2hw2ubBkrzIjpiIPYqdsrVpQRwOaz:uJ+jEQwjlOcSNSvezkyVpeFamsH","tlshash":"c1a308962395e53246e484e960300242b3350a0f7c0a82acf57dfdef5d5ea4b76baf74","size":104600,"data":"","first_seen":"2023-09-16T05:27:40Z","last_seen":"2026-02-25T20:14:13.349587Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwplayer.core.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"34de47681547f88d2a251419d61d4a2d","sha1":"e9c03590ad2eb86eeee8b0032f345fbeb32bc4c1","sha256":"5a8861552d8484bac63cb929ef4b4e9f2f76726aef84032c76a75b76da4e7ddc","sha512":"96c8659af1758ddc35ee64cf835f983cddb190d2dff7884b86dd259faab6d824c3330d04f2b056f77989be023b1703c9e0e339ce805c0ec480812d2988c305ea","ssdeep":"3072:B5ozmmILBerJhsy7v22m79sTkvpkHkfeKJyuaU:X7DBerJh/aLLkEfPJn","tlshash":"45e33b753181623651da93da72674201a33a45897406c7acff2cedea1c3e88771f6fb8","size":143406,"data":"","first_seen":"2025-10-07T08:25:20.374415Z","last_seen":"2026-02-25T20:14:13.377962Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d720eef71edef78b948a643d5712ec07","sha1":"ea5eb334bd6ddb0f04abafb700dc2ecb30070c76","sha256":"2daa1a91b2430e9867296c9cb26d1483785954a9bdd66f79b2c754bab7092cae","sha512":"63368ff1fef849df7f849af23bc2f24698893bd3d58300282427a76665b2d5c94f097d409f93173ad9c36944b4fffc2e37fa03a91f81e4e04f3737f9b73d2d6f","ssdeep":"","tlshash":"5f6000c00000c00c0000ccc3c00300c030000030c0cc3c0003003c3300cf00ccc00033","size":15,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-03-06T11:55:01.51255Z","times_seen":24260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwplayer.core.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"34de47681547f88d2a251419d61d4a2d","sha1":"e9c03590ad2eb86eeee8b0032f345fbeb32bc4c1","sha256":"5a8861552d8484bac63cb929ef4b4e9f2f76726aef84032c76a75b76da4e7ddc","sha512":"96c8659af1758ddc35ee64cf835f983cddb190d2dff7884b86dd259faab6d824c3330d04f2b056f77989be023b1703c9e0e339ce805c0ec480812d2988c305ea","ssdeep":"3072:B5ozmmILBerJhsy7v22m79sTkvpkHkfeKJyuaU:X7DBerJh/aLLkEfPJn","tlshash":"45e33b753181623651da93da72674201a33a45897406c7acff2cedea1c3e88771f6fb8","size":143406,"data":"","first_seen":"2025-10-07T08:25:20.374415Z","last_seen":"2026-02-25T20:14:13.377962Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e018c77e67a96b7f5440da3c7397e35a","sha1":"a090b0a7035556c7f71070fe10c2e37fa15584c5","sha256":"5c5bb18e544cb67f765d8a6d2c774838d3ae95df9b62f25660c64554a7302d8e","sha512":"cfaad7c410b0f14c2c849855f859a973177c6bdeb27ce9e3dfbbb38169a4abd0f66252213aa1885751c54d1ae761fd68af739081e9b7d6875f084c2240874062","ssdeep":"","tlshash":"0a6000c000030030000300303030c3cc3c30003030333000000c3c3f0000f00c003f0c","size":17,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-04-03T22:14:46.558139Z","times_seen":21324,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bd931315f9ec922d23220a34a506421","sha1":"92eb331739d51c65226b5fdb07ec2d74924f200f","sha256":"28f33740f0a341c823243413c7780d92e7ae39254641174a86a4f51ac805b576","sha512":"26bb36ab577ba2b6486f482177e31992c81c79322070edc9d55af10d7ab8f3e1b9dccc89f7c925a47a68e464f522736c0e64d3d7e4acaa016745e0104bddb167","ssdeep":"3072:cWYjf7+28VOk2DG2cUMaElwnRlqI1fsBHisiEolY4o/CXMXpo:U+28VOk262lElwnRjfs4sXhpo","tlshash":"96045c993792307441d3a11daaff53093371506ab80f4884bb4dd8a427adeea51a3ffd","size":185387,"data":"","first_seen":"2025-12-11T15:18:11.624048Z","last_seen":"2026-01-15T17:17:43.902034Z","times_seen":1441,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwpsrv.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7f3733c71441c1881fc4eabe9c96086","sha1":"8db1f2f35489a41d1fb63af5b9aad52388c58735","sha256":"9f4c0014a4f36c11302077dc073ef529031ce3eebc04c0ca9bc1d7ea0ed95eca","sha512":"daad1df7ab9c84cb7c1a120fe01a007dc14c6a05e73c8c3afb418c19085d08d85c36128e668890e7d9ad2c084ceb9589fb853a7f06fbc0175028ea7ce8a7e7dd","ssdeep":"768:U2Q5c7PRtE8JKCzyQmr1nEXiGdCeMt+uksp3T:1QAPRtE8JKC2JEXiGdCSudpj","tlshash":"ad63e78d3685752a5b6770b8806fb546723d1dd6304dc610ea50eed93c3de6aa233b2c","size":67106,"data":"","first_seen":"2024-04-23T16:41:51Z","last_seen":"2026-02-11T20:51:20.728494Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-9CBDTHEVHY","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"644597f443d2596f674e6e3685d2949b","sha1":"d99c14f780673d79c10908414463e396b8dd9760","sha256":"efcbf56c1e278cb4ac8e245cce1f19f89425a15a46233cc01af5a59fb8e614f0","sha512":"4e48bb8412b1c338efdc71dc66ac63c48f6d132de296a98f413718e769dde42718428373fe1b64bc715e75e221f4ce7d4de02d6d311a745f21eee92183750a50","ssdeep":"6144:RjIe7ma2bulKY/1u99xHDmHYmyBFzvnsyRO6jJWoNPad4FpC1xY:uC8bu7/1mbrnsy39WbMpb","tlshash":"dd941ace73c674269396e078503f118ba57b29e2b45cc896f189cce02d74a9a4277f7c","size":433324,"data":"","first_seen":"2026-01-02T21:45:02.481572Z","last_seen":"2026-01-03T07:17:14.622595Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bd931315f9ec922d23220a34a506421","sha1":"92eb331739d51c65226b5fdb07ec2d74924f200f","sha256":"28f33740f0a341c823243413c7780d92e7ae39254641174a86a4f51ac805b576","sha512":"26bb36ab577ba2b6486f482177e31992c81c79322070edc9d55af10d7ab8f3e1b9dccc89f7c925a47a68e464f522736c0e64d3d7e4acaa016745e0104bddb167","ssdeep":"3072:cWYjf7+28VOk2DG2cUMaElwnRlqI1fsBHisiEolY4o/CXMXpo:U+28VOk262lElwnRjfs4sXhpo","tlshash":"96045c993792307441d3a11daaff53093371506ab80f4884bb4dd8a427adeea51a3ffd","size":185387,"data":"","first_seen":"2025-12-11T15:18:11.624048Z","last_seen":"2026-01-15T17:17:43.902034Z","times_seen":1441,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e55434724c4d150c437e404ae56cb35d","sha1":"b97c1fb45b494869ba392d9a239b1ac31532efb3","sha256":"9d5ff5908e51d36d4a2742a703847c3365cf581cc921e366f92d994912a2c26d","sha512":"89fa17961c8712d2707abfe3da339cef42a70b687579ffbe9cb70d4cdc55f66134e38c8f93c5b23b6e6e1ec665448a50f84d53026b9818eb03f520fbabd8e2df","ssdeep":"","tlshash":"4d8000b08002e0e80003882aa02082c328380a2a2002323a022800280002f000000c32","size":26,"data":"","first_seen":"2024-08-19T16:53:21.559314Z","last_seen":"2026-03-05T11:30:37.133938Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/vast.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0deaafb5318980de8c2ee695b76c710","sha1":"5a3734828b24cac1e1cae1645662b3c9dc26cf82","sha256":"cd51410290d2266cda49882fe9d3d5c67aa9bc5b2c3551c7a5fd9e66cfb40908","sha512":"637b3da699f5ba20b0b2a4e900ffee7b74ae8d9eacbe00a48539454125991172e2c09e4eff00f4e8b95a9a700a48cacc235ad55ac7bf01ca2036fc70150c0891","ssdeep":"1536:ulAE+jE0HEekQmIWTuDkjlOYx1sbRuF5V0U2hw2ubBkrzIjpiIPYqdsrVpQRwOaz:uJ+jEQwjlOcSNSvezkyVpeFamsH","tlshash":"c1a308962395e53246e484e960300242b3350a0f7c0a82acf57dfdef5d5ea4b76baf74","size":104600,"data":"","first_seen":"2023-09-16T05:27:40Z","last_seen":"2026-02-25T20:14:13.349587Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7c3309315ce554d7cd97206226bae4c3","sha1":"211654e0b1522e59958900b7f1c234a0acdf5bcf","sha256":"faee444bf5d88ba67a62f4899dd73e121f7511767f023c29b55b2ded4398ec24","sha512":"b61cf68c0f53dcc3826a18cfa1cd37c0ecf6785211c1ccb2cc2aa217c9e53d38ec432e2201e1c21f5fab7a7e6f4ff0b1eb0ae76b06b7eac2f40edb8e9f8e0950","ssdeep":"","tlshash":"ff01280cb5e39012a173703986bf08052932960f040ddea8b87e66e17f24238bb6275c","size":786,"data":"","first_seen":"2025-11-07T18:27:21.54195Z","last_seen":"2026-01-04T09:18:31.143188Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6fa1558f6d24caa152f45d3a1597a97c","sha1":"9119a686cd2d223ee5c5bab06bcdc6667ebb8440","sha256":"92f68565a2781a0fbd595ff5c54717d6b87c6cf19d42c7f3d3d4c81193bb2cb4","sha512":"341876c9fd24668bc85eddb7448d064ad38bfe964665b9a8e247e346a268812e994e4c4db0163bf5ab8fd6371bf9ac34b3f36b9def15565eb17ca7a4584b322a","ssdeep":"","tlshash":"2380000cc0200022802222eaa0c32008a02a8000880280ca8e020a000002ca00a00822","size":26,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-03-05T11:10:16.783113Z","times_seen":14624,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"s.pemsrv.com/venor.php","fqdn":"s.pemsrv.com","domain":"pemsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:10.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pemsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:59:06 GMT","end":"Thu, 26 Mar 2026 11:59:05 GMT"},"fingerprint":{"sha1":"8C:23:43:2A:16:0E:E5:14:D7:54:DB:F5:5F:BB:56:E4:32:AF:3B:BA","sha256":"91:45:ED:F2:0E:35:83:14:E7:B4:0D:2D:8E:1A:A6:05:62:4F:B6:6E:83:8A:0C:D3:BF:D4:8A:1C:A7:19:9D:9C"}}},"request":{"raw":"GET /venor.php HTTP/1.1\r\nHost: s.pemsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 07:16:10 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"c4ca4238a0b923820dcc509a6f75849b","sha1":"356a192b7913b04c54574d18c28d46e6395428ab","sha256":"6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b","sha512":"4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a","ssdeep":"","tlshash":"c70000000c000000c00000300000000000000000000000000000000000000000000030","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-04-04T03:27:21.304181Z","times_seen":104749,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/upload/player/embed.html","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:11.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /upload/player/embed.html HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night; adb_user=true; adb_user_ts=1767424570743; _ga_9CBDTHEVHY=GS2.1.s1767424570$o1$g0$t1767424570$j60$l0$h0; _ga=GA1.1.433107323.1767424571; r=c3RyaW5n; __suvt=707aba6a4b81d92b9e7621f7610e7358; cf_clearance=ee2IjbD4qb1dRrSjfyOFko5FrCPqhl0RDUznSn.AvUI-1767424571-1.2.1.1-hvznDDyyVvd7.wnrg1aJYp.frzz07cclj941BtpzURg5.YGF5CyjdB7yAk5g4gtk0A.JXOyCY97G.pECxoPOIZ4osPHLOi_cKKO8ebAHfbbmKlsov3643ruVyoFlVePgBQwrK10aDIQHFxoe3iF5boFI0VKtZeYBq50jdTLR7BbF8UDhjUXZQreT4Bu1B4kpMshaXRBPz6NkqESmbRxIxB0eFx4_qXPp6uZHVpeSEMA\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:11 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 01 Jan 2026 10:53:44 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c3QC8SdFgafdPbot%2FFzTKklb6tvPCFwCJ3PZvWeQuo%2BPS6Ap4jwA%2FvVF9r100syUGbfxrstYjKzG5WSYCPjN83EpHzNYqrI%3D\"}]}\r\ncf-ray: 9b80b5938b0556c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5306,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7edfd551732c89be86c619b65cf5086e","sha1":"a89cc7dc15731596113006bdc78915c0d2c1f8b0","sha256":"ee5a19a135af309ecda0d0dd0036db6cb94ebedb9c69e95f0c6c43992764d5df","sha512":"c7a62bc053fef2516c8d357d09f60951aa92ad7a4b19b75e3aff2452d506065f5a27452d3c2bc9104e5d314bd6c45060778d94614056fef93b219ec32e105db7","ssdeep":"96:g3m+dvrRamyi9XTzsEcWzsE1zPfTYSGBPFWMMWXyVb9SRN21xb3MS6:am+dvF/yi9XTzsEcWzsEZYSGB1xyXoIC","tlshash":"60b14406be375038405391fd5bfbe20c753560479942de48bb9ca6948f7c7b86866bcc","first_seen":"2026-01-03T07:17:14.54609Z","last_seen":"2026-01-04T09:18:31.02287Z","times_seen":5,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/player/plugins/jump/jump-forward.min.js?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/player/plugins/jump/jump-forward.min.js?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 29 Sep 2017 00:41:42 GMT\r\nvary: Accept-Encoding\r\netag: \"59cd96c6-6e6\"\r\nexpires: Sat, 03 Jan 2026 17:46:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 5375\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kc1imqowrEBg%2BziHBhYwu014axrYT7NpvU%2Bhzzgl4usKEXR22J5KPsU3vtRyF5NrJw4yavrDf0r1LrmMK%2B3EOi9e77UQToo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b582caad56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1766,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1496)","md5":"7e22c1aded6b2f1c4cb6d1c39d5e7e91","sha1":"f94881ab82efc24581cd1117d05ce897b1f25bfa","sha256":"5beaf60cecf4a9bf5c4e2f084f863319af38bffacfbfff61325c7f153b98ea5c","sha512":"6c4f34840572a5a82530455ff2ff6e8ee5c1e1318651e8ef58dba4adc031c852774432888ea6270b1f7f190061c037b2faae6527f1198a77deb032516ae331da","ssdeep":"","tlshash":"573120d2f2962362174300915096d2af687bc733e04a58008b57a7d01ee9c4fc772f6d","first_seen":"2023-03-07T01:31:54Z","last_seen":"2026-04-03T15:29:14.461903Z","times_seen":205,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/js/Fingerprintjs2/fingerprint2.js?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/js/Fingerprintjs2/fingerprint2.js?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 14 Nov 2018 17:19:12 GMT\r\nvary: Accept-Encoding\r\netag: \"5bec5910-e792\"\r\nexpires: Sat, 03 Jan 2026 17:46:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 5375\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UnQkEtZry9JVyyqCN4E2n2N0p19s58tSLExsn3C40lElcEZK1ueWSZLZCT3W2%2BMuvlqfJSaxFcD02TTID1hutiJ4X8ukCCY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b582fab956c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59282,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (329), with CRLF line terminators","md5":"528279982b55a625f3ba4aaea250b3aa","sha1":"b46be67b88ccdad9f74223961e926ab69d958f4a","sha256":"73e3b90859ce39211a0ea003641423eecc64ea4e87db532c9932f3217fb11ccf","sha512":"930547ad930819ffa479ab060b42d9ceac5da3cc78b43ad6ae77c56ee7973630705f402e3d3f60aeed66fbd0274d598b73b44198437544215a1228c4d5ebd838","ssdeep":"768:HR9xD6jhG4luwGyJuUOkQkzAYT5ZLSwMajTqDUMXz661i2uOPbltklfo97Fh1:vxD6VJEw1Jujh4MGwi2/PbltklC1","tlshash":"c54309aa295531250a7373b6a72fa808fa324173d159c0417dbdc7906ff0915a2befec","first_seen":"2023-03-07T16:16:44Z","last_seen":"2026-04-03T15:29:14.330405Z","times_seen":198,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.pemsrv.com/v1/api.php","fqdn":"s.pemsrv.com","domain":"pemsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:10.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pemsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:59:06 GMT","end":"Thu, 26 Mar 2026 11:59:05 GMT"},"fingerprint":{"sha1":"8C:23:43:2A:16:0E:E5:14:D7:54:DB:F5:5F:BB:56:E4:32:AF:3B:BA","sha256":"91:45:ED:F2:0E:35:83:14:E7:B4:0D:2D:8E:1A:A6:05:62:4F:B6:6E:83:8A:0C:D3:BF:D4:8A:1C:A7:19:9D:9C"}}},"request":{"raw":"POST /v1/api.php HTTP/1.1\r\nHost: s.pemsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 416\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":416,"data":"{\"user\":{\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en-US\",\"referer\":\"https://hqfap.com/search?keyword=owk/\",\"consumer\":\"ad-provider\",\"gdpr\":{\"gdpr\":0},\"screen_resolution\":\"1280x1024\",\"window_orientation\":\"landscape\",\"cookies\":[],\"scr_info\":\"YXN5bmN8fDM%3D\"},\"zones\":[{\"custom_targeting\":{},\"id\":5791126,\"extra_params\":{\"first_request\":true,\"zone_type\":33}}]}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 07:16:10 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://hqfap.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Authorization, Content-Type\r\nAccess-Control-Request-Method: POST\r\nSet-Cookie: __uvt=s%3A32%3A%22ce90d43c22593e225cd3301e2364078a%22%3B; expires=Mon, 03 Jan 2028 07:16:10 GMT; Max-Age=63072000; path=/; domain=pemsrv.com; secure; SameSite=None\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":780,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ccfe2f2ca69d4d21ca44371b84f270fa","sha1":"66e3186dcb8acfb303d782188df53f2fd786b366","sha256":"4d2ca86b2d950baf518d4941c1bd887e8938d967c28851be6ec08e120c4fcd01","sha512":"6519709ff02b7f996b21e64fc03e27577b4dea874e3bd782519dddb9bf8a8a979b93aa68b6a83b88e00cac48f0e2e5532bdf8bbe2dbc6d6c91a5486f31e41032","ssdeep":"","tlshash":"ee01bda4fb445cb8d659da4ebe8e3967428577375ec90dda8194847c029e318234473a","first_seen":"2026-01-03T07:17:14.548669Z","last_seen":"2026-01-03T07:17:14.548669Z","times_seen":1,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.pemsrv.com/venor.php","fqdn":"s.pemsrv.com","domain":"pemsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:10.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pemsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:59:06 GMT","end":"Thu, 26 Mar 2026 11:59:05 GMT"},"fingerprint":{"sha1":"8C:23:43:2A:16:0E:E5:14:D7:54:DB:F5:5F:BB:56:E4:32:AF:3B:BA","sha256":"91:45:ED:F2:0E:35:83:14:E7:B4:0D:2D:8E:1A:A6:05:62:4F:B6:6E:83:8A:0C:D3:BF:D4:8A:1C:A7:19:9D:9C"}}},"request":{"raw":"GET /venor.php HTTP/1.1\r\nHost: s.pemsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 07:16:10 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"c4ca4238a0b923820dcc509a6f75849b","sha1":"356a192b7913b04c54574d18c28d46e6395428ab","sha256":"6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b","sha512":"4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a","ssdeep":"","tlshash":"c70000000c000000c00000300000000000000000000000000000000000000000000030","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-04-04T03:27:21.304181Z","times_seen":104749,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":77,"dns":5,"connect":22,"send":0,"wait":23,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/d39f91d70ce1/main.js?","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:10.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/d39f91d70ce1/main.js? HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night; adb_user=true; adb_user_ts=1767424570743; _ga_9CBDTHEVHY=GS2.1.s1767424570$o1$g0$t1767424570$j60$l0$h0; _ga=GA1.1.433107323.1767424571\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 03 Jan 2026 07:16:10 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8nQpszBRs7tIrPFEc0SwwOI%2FW0W2HLLpeXZOogV00SMnfNr7ASWHAK0mPry%2BfnF7SNz3MOjI%2FVMEB8E54Gs6ITUeCgXRXTOWwVuQB0fH6VLSa51q9mCoi0Xty7Q%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncf-ray: 9b80b5903af256c0-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1394\u0026min_rtt=0\u0026rtt_var=652\u0026sent=500\u0026recv=103\u0026lost=0\u0026retrans=0\u0026sent_bytes=494755\u0026recv_bytes=27537\u0026delivery_rate=16311222\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=28967\u0026ss_exit_bw=5731691\u0026ss_exit_reason=2\u0026cwnd=31644\u0026unsent_bytes=0\u0026cid=178eee71f578331e\u0026ts=2464\u0026inflight_dur=178\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10366,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10366), with no line terminators","md5":"5f80d9a22521fa3fd654292fdea7f09c","sha1":"6c8d9ac1d9dc6cc24930dfb567c9d13340e88e5e","sha256":"100a951679b1fa65c8dc5d70ee3c3d89dc47fb07a4b3cb4015b1d43e3afaad72","sha512":"5529e873489b07f50be54cf0b5b15512ee904b6d8f42b1cb8eed4d76bb922f9892d1adf89ef156f084bbccee894004be3e4efdd1d99f6e66938e58dfc12f2ee0","ssdeep":"192:rWpjyX8E1MzeTgGjzvlNhQPJzXdQyrY+s4PAL3:KQzTfvUXdQyER44L3","tlshash":"dc22e8cb3f4532a50226395218dff9fb10a85ea12c446d6453316ae47f30badbe27d03","first_seen":"2026-01-03T06:50:39.529728Z","last_seen":"2026-01-03T07:25:16.001246Z","times_seen":5,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prd.jwpltx.com/v1/jwplayer6/ping.gif?h=1253560464\u0026e=ana\u0026n=7326176840091787\u0026aid=GCCG\u0026emi=1qy86lusoo1w\u0026id=Instream\u0026pli=zyv1wllg724b\u0026pv=8.28.0\u0026tv=4.0.5\u0026sa=1767424584050","fqdn":"prd.jwpltx.com","domain":"jwpltx.com","tld":"com"},"ip":{"addr":"108.157.229.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:24.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwpltx.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 12 Aug 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E8:9B:D4:42:32:9F:5E:14:C3:36:B5:09:FC:A2:0B:37:DF:D5:E2:D3","sha256":"D1:64:5C:F3:5A:AF:D7:5F:2E:91:2F:C7:B1:E4:F2:91:3C:5A:1E:B9:C2:E9:10:17:7E:59:CF:EC:E6:A0:80:5D"}}},"request":{"raw":"GET /v1/jwplayer6/ping.gif?h=1253560464\u0026e=ana\u0026n=7326176840091787\u0026aid=GCCG\u0026emi=1qy86lusoo1w\u0026id=Instream\u0026pli=zyv1wllg724b\u0026pv=8.28.0\u0026tv=4.0.5\u0026sa=1767424584050 HTTP/1.1\r\nHost: prd.jwpltx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 03 Jan 2026 07:16:24 GMT\r\nserver: nginx\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d9ef81045d0cf909bd3143957da09138.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: kDZyuuh89nn8c1kCLEfEUaAuOYoEdBdU_f1O5PtL44RoLIwhpvQ2eA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":444,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":444,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/player/plugins/quality/quality.min.js?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/player/plugins/quality/quality.min.js?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 27 Jul 2022 18:39:40 GMT\r\nvary: Accept-Encoding\r\netag: \"62e1866c-147c\"\r\nexpires: Sat, 03 Jan 2026 17:46:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 5375\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4qjLtFgsekdtwAQfijBDFuvyYTt4eGrEC%2FVAue5AyyfJfQs%2BR2Dt2%2FayXgJfMsz5e6kHaSIwQL0Oco2O4qqeDowLEZYywvE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b582dab356c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5244,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4974)","md5":"f0be51d428c324ff45fe1f5e714ff4ce","sha1":"80b5234c4cadf8ae9e7a35161eefab33a57e73fd","sha256":"b296b60121d957ed1c675508332cb632bc925ac4b9155357cc683acea9b2eea2","sha512":"74ef3dbf96133158fe6a5474d09ff93b8a1a7aad5bbd257b2aa556fa15044f8d40a97a38709279d3c8559eb516445dbf5f89799384efe68e75f13d4c8d2692d1","ssdeep":"96:isGfe9No/Wy5d9McI3VkpvPipEc2OVJeuCoHh7+9TyhbM0rS9ca2s+izqMZJWn:r9NGWqd9rI3VkV2AOneunHh08RS9cfSs","tlshash":"eab1b7aa74c02b374057a1f73d1fa66af0b2c758e41e64b0d425d3c52ca8dca9153dab","first_seen":"2023-03-07T01:31:54Z","last_seen":"2026-04-03T15:29:14.356711Z","times_seen":202,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prxycdn.servequake.com/imgcdn.php?src=https://www.xmegadrive.com/contents/videos_screenshots/338000/338696/preview.jpg","fqdn":"prxycdn.servequake.com","domain":"prxycdn.servequake.com","tld":"servequake.com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:11.335Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /imgcdn.php?src=https://www.xmegadrive.com/contents/videos_screenshots/338000/338696/preview.jpg HTTP/1.1\r\nHost: prxycdn.servequake.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":7006,"timings":{"blocked":7006,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"prxycdn.servequake.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwplayer.controls.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.28.0/jwplayer.controls.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, immutable\r\nlast-modified: Tue, 22 Aug 2023 18:19:07 GMT\r\netag: \"1fde4fff33b8be6ebe2530808273fe7b\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 03 Jan 2026 07:16:14 GMT\r\nage: 1388015\r\nx-served-by: cache-lga21946-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 3, 213\r\nx-timer: S1767424574.145953,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 45480\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":193500,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65143)","md5":"1fde4fff33b8be6ebe2530808273fe7b","sha1":"0810766277301777c5fd5fc031040fc5cc315df5","sha256":"ef7d843e4bd08aceacb89d07e82add18b04e2b2a1b4ddb0784c1573374ec9448","sha512":"7aea8e374962935b5a74d86e3d718b2ce0825117c0a1fd3f07294345186e9f28eea3480f04bd190ad4dfed9cccf84c4d07440770ee4f2ecdeb0d185f9055d28a","ssdeep":"1536:BCUKr35YneqmSoQQD/5YIuhhAuUkJrPyoyjQ7ru+7AHYzwC0suZrqlHdDPjmOoRR:B+r35Yer5Yk7REBvB5sYgwmf8q","tlshash":"b9140922614256349ae6c1daa7504b04f73a8141f652deecfd7dedcc849e9ca30fa7b0","first_seen":"2025-10-07T08:25:20.241872Z","last_seen":"2026-02-25T20:14:13.37576Z","times_seen":40,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/css/bootstrap-toggle.min.css?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/css/bootstrap-toggle.min.css?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 29 Aug 2022 18:22:00 GMT\r\nvary: Accept-Encoding\r\netag: \"630d03c8-651\"\r\nexpires: Sat, 03 Jan 2026 17:46:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 5375\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XVtLaC6dvh6ePFuxaWIAS5iLj5poYn3XACVmFeapm8HOg5x3qysKwYeNEZHcRs7kCJ36mbO%2BXgy%2BSdczt7E0qHhm8LUjncY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b582aaa456c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1617,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"7aae819ba91f13d2d7273ee6ce974b74","sha1":"976795c5ae077896ca35563e7df991a5dae9ad73","sha256":"32b6bd114ad09d6db53d212ba8ff32c2f22f6042781938fef73fff8b3f0f718e","sha512":"a2cfb49f22f5e9cdb4313d150f89d948e994d7bf2a2dd9e52300326333d525987280ed936d6250dc5da6b9a85824fd120c76103fe1243beaa01fc6c246877d96","ssdeep":"","tlshash":"9a317c33355431ba9427d002e7722e99f8b8500fb7ef0c86f187e8528b5cf4425229ec","first_seen":"2023-05-07T18:40:35Z","last_seen":"2026-04-03T15:29:14.335873Z","times_seen":185,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/js/facebook.min.js?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/js/facebook.min.js?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Aug 2022 18:25:32 GMT\r\nvary: Accept-Encoding\r\netag: \"630d049c-161b\"\r\nexpires: Sat, 03 Jan 2026 17:46:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 5375\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I54l8S4hWOm6lEqTIO5hGNrPcjZum8aADiTYuew8lCE0QJRl1JV72XcRCQxSQhCMh6V5t0LNpY1cy9nkjhmprRDGomODfbs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b582eab556c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5659,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5378), with CRLF line terminators","md5":"38d8087e93323beea4816bacd88a3fd2","sha1":"e9f7b0d4849fcea337eb0e5fccd2c786ca3bcbb7","sha256":"5f227aa52bfb5e46d3b2a86ff7eea2176977660bb9e4c709702b586ac41ab5a6","sha512":"c93fcedbd576d789a9f86996e611181eef239cf8fd6fc4071f9d273d3386426d7c8f2dfad268ce837b86045e1efc72d40a864d252ac8b6091a798ae4f643b2fc","ssdeep":"96:XsRlLdZW4qVYIFuNYbDpYAfT/bvytdUkXEXZ70H2fqgiHc2n/aj+vcrF52kyxy5v:wlfWxoabDDfT/bvytdUMhcsW52kyxyXp","tlshash":"6ec1b78db24eb2064a4351fb55af2f0a243a1ba50019d8508472cef6bd79e48443ff8c","first_seen":"2023-03-07T16:21:58Z","last_seen":"2026-04-03T15:29:14.452375Z","times_seen":149,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/v1/api.php","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:10.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"POST /v1/api.php HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 415\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":415,"data":"{\"user\":{\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en-US\",\"referer\":\"https://hqfap.com/search?keyword=owk/\",\"consumer\":\"ad-provider\",\"gdpr\":{\"gdpr\":0},\"screen_resolution\":\"1280x1024\",\"window_orientation\":\"landscape\",\"cookies\":[],\"scr_info\":\"YXN5bmN8fDM%3D\"},\"zones\":[{\"custom_targeting\":{},\"id\":5790952,\"extra_params\":{\"first_request\":true,\"zone_type\":2}}]}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 07:16:10 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://hqfap.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Authorization, Content-Type\r\nAccess-Control-Request-Method: POST\r\nSet-Cookie: __uvt=s%3A32%3A%22925e26b1713588fc7997c61c32aef480%22%3B; expires=Mon, 03 Jan 2028 07:16:10 GMT; Max-Age=63072000; path=/; domain=magsrv.com; secure; SameSite=None\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":821,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fc590f09a49de76d57e8645befe5ea39","sha1":"1e57d05acaf47116dada81c3adebd45ca6d8a8d9","sha256":"9e4b68772afb8d345d1e75ea9f3ffea3dc9e3f20239681f97d8c320198cd8e34","sha512":"d6d89bc958f74bad0dd18cd0d2de9ff9e5773bdd550642f5c79da0c059236b03c5da26919a7e004b7573a66178b66fa92764d923b23e55b4a9a35415f0bcfa1f","ssdeep":"","tlshash":"c601b17abf40887cfac055cf1f516565be89b117e78698954494d474d0fc728204277d","first_seen":"2026-01-03T07:17:14.555273Z","last_seen":"2026-01-03T07:17:14.555273Z","times_seen":1,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":110,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prd.jwpltx.com/v1/jwplayer6/ping.gif?h=871301368\u0026e=e\u0026n=3288242768821585\u0026abc=0\u0026aid=GCCG\u0026amp=0\u0026at=1\u0026c=0\u0026ccp=0\u0026cp=1\u0026d=1\u0026eb=0\u0026ed=6\u0026emi=9mkwx2zm6m3k\u0026i=1\u0026id=Instream\u0026lid=rl4tk51vgb9o\u0026lsa=read\u0026mt=1\u0026pbd=1\u0026pbr=1\u0026pgi=163x7gv17gng\u0026ph=0\u0026pii=0\u0026pl=125\u0026plc=1\u0026pli=gd10pu14ug45\u0026pp=html5\u0026prc=2\u0026ps=1\u0026pss=1\u0026pt=Owk%2F%20Porn%20Videos%20for%20Free%20in%20Full%20HD%20%231\u0026pu=https%3A%2F%2Fhqfap.com%2Fsearch%3Fkeyword%3Dowk%2F\u0026pv=8.28.0\u0026pyc=0\u0026s=0\u0026sdk=0\u0026stc=1\u0026stpe=0\u0026tv=4.0.5\u0026vb=0\u0026vi=0\u0026vl=90\u0026wd=300\u0026ab=1\u0026cae=0\u0026cb=0\u0026cdid=jwplayer-container1\u0026cme=0\u0026dd=1\u0026dnt=1\u0026flc=0\u0026fv=\u0026ga=0\u0026lng=en\u0026mk=mp4\u0026mu=https%3A%2F%2Fhqfap.com%2Fupload%2Fvideos%2FInstream.mp4\u0026pbc=0\u0026pd=2\u0026pdr=\u0026plng=en\u0026plt=2650\u0026pni=0\u0026po=0\u0026sp=0\u0026st=1340\u0026sa=1767424574039","fqdn":"prd.jwpltx.com","domain":"jwpltx.com","tld":"com"},"ip":{"addr":"108.157.229.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:15.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwpltx.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 12 Aug 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E8:9B:D4:42:32:9F:5E:14:C3:36:B5:09:FC:A2:0B:37:DF:D5:E2:D3","sha256":"D1:64:5C:F3:5A:AF:D7:5F:2E:91:2F:C7:B1:E4:F2:91:3C:5A:1E:B9:C2:E9:10:17:7E:59:CF:EC:E6:A0:80:5D"}}},"request":{"raw":"GET /v1/jwplayer6/ping.gif?h=871301368\u0026e=e\u0026n=3288242768821585\u0026abc=0\u0026aid=GCCG\u0026amp=0\u0026at=1\u0026c=0\u0026ccp=0\u0026cp=1\u0026d=1\u0026eb=0\u0026ed=6\u0026emi=9mkwx2zm6m3k\u0026i=1\u0026id=Instream\u0026lid=rl4tk51vgb9o\u0026lsa=read\u0026mt=1\u0026pbd=1\u0026pbr=1\u0026pgi=163x7gv17gng\u0026ph=0\u0026pii=0\u0026pl=125\u0026plc=1\u0026pli=gd10pu14ug45\u0026pp=html5\u0026prc=2\u0026ps=1\u0026pss=1\u0026pt=Owk%2F%20Porn%20Videos%20for%20Free%20in%20Full%20HD%20%231\u0026pu=https%3A%2F%2Fhqfap.com%2Fsearch%3Fkeyword%3Dowk%2F\u0026pv=8.28.0\u0026pyc=0\u0026s=0\u0026sdk=0\u0026stc=1\u0026stpe=0\u0026tv=4.0.5\u0026vb=0\u0026vi=0\u0026vl=90\u0026wd=300\u0026ab=1\u0026cae=0\u0026cb=0\u0026cdid=jwplayer-container1\u0026cme=0\u0026dd=1\u0026dnt=1\u0026flc=0\u0026fv=\u0026ga=0\u0026lng=en\u0026mk=mp4\u0026mu=https%3A%2F%2Fhqfap.com%2Fupload%2Fvideos%2FInstream.mp4\u0026pbc=0\u0026pd=2\u0026pdr=\u0026plng=en\u0026plt=2650\u0026pni=0\u0026po=0\u0026sp=0\u0026st=1340\u0026sa=1767424574039 HTTP/1.1\r\nHost: prd.jwpltx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 03 Jan 2026 07:16:15 GMT\r\nserver: nginx\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d9ef81045d0cf909bd3143957da09138.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: lp3k0yzqCs219USd0qCavOr1g7vPtwE69ccq-L6xgdGEQxs6CygmWw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/aj/views?hash=043f01c37bd01eb1f6d3981fe75e0719ff2cb5ee\u0026type_=set","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:11.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"POST /aj/views?hash=043f01c37bd01eb1f6d3981fe75e0719ff2cb5ee\u0026type_=set HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 85\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night; adb_user=true; adb_user_ts=1767424570743; _ga_9CBDTHEVHY=GS2.1.s1767424570$o1$g0$t1767424570$j60$l0$h0; _ga=GA1.1.433107323.1767424571; r=c3RyaW5n; __suvt=707aba6a4b81d92b9e7621f7610e7358; cf_clearance=ee2IjbD4qb1dRrSjfyOFko5FrCPqhl0RDUznSn.AvUI-1767424571-1.2.1.1-hvznDDyyVvd7.wnrg1aJYp.frzz07cclj941BtpzURg5.YGF5CyjdB7yAk5g4gtk0A.JXOyCY97G.pECxoPOIZ4osPHLOi_cKKO8ebAHfbbmKlsov3643ruVyoFlVePgBQwrK10aDIQHFxoe3iF5boFI0VKtZeYBq50jdTLR7BbF8UDhjUXZQreT4Bu1B4kpMshaXRBPz6NkqESmbRxIxB0eFx4_qXPp6uZHVpeSEMA\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":85,"data":"hash=043f01c37bd01eb1f6d3981fe75e0719ff2cb5ee\u0026finger=2df6e1dcde09ec19e5806ea6bd8f8b1a"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:11 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mpVM5Ur7Rg8BTCwfs1yTp5Exicsud5i1pqBIS0CnY%2FCDwqcrJiaH%2B%2B8enuNNAzOd5JcJCDTH51CYUYFAi7aPiqrCGoxaRck%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b5931afa56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fb73e69a9fd01112a226adc3b9e19562","sha1":"425b14a75bd362f060607ac708161eda7feadbaf","sha256":"7cd85494eb375cc958155aca095fd0bae01e24f777c4ce4059e2edb82324618c","sha512":"b2bafbadf7e84bf4f5b74463f26096b30cea33491a757eacf1943f334b3d9891c2fdf91f0004f0df0d0ea87a5bdcd76e7ee4979c5459e66038659afaf8e9f3b9","ssdeep":"","tlshash":"2860000f0c00f0003cc00c0000c300303f333f00030f00c0000c003003030c0c00cc00","first_seen":"2023-04-16T00:40:25Z","last_seen":"2026-04-03T23:32:33.708528Z","times_seen":2124,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/upload/player/embed.html","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:11.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /upload/player/embed.html HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night; adb_user=true; adb_user_ts=1767424570743; _ga_9CBDTHEVHY=GS2.1.s1767424570$o1$g0$t1767424570$j60$l0$h0; _ga=GA1.1.433107323.1767424571; r=c3RyaW5n; __suvt=707aba6a4b81d92b9e7621f7610e7358; cf_clearance=ee2IjbD4qb1dRrSjfyOFko5FrCPqhl0RDUznSn.AvUI-1767424571-1.2.1.1-hvznDDyyVvd7.wnrg1aJYp.frzz07cclj941BtpzURg5.YGF5CyjdB7yAk5g4gtk0A.JXOyCY97G.pECxoPOIZ4osPHLOi_cKKO8ebAHfbbmKlsov3643ruVyoFlVePgBQwrK10aDIQHFxoe3iF5boFI0VKtZeYBq50jdTLR7BbF8UDhjUXZQreT4Bu1B4kpMshaXRBPz6NkqESmbRxIxB0eFx4_qXPp6uZHVpeSEMA\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:11 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 01 Jan 2026 10:53:44 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RDvLG5UWO%2Bg6lJrv5iQbmy34ZVLg%2B8A7RZ3Daqdy9yoxvejx%2BLmXA57YOR1%2B%2FteUD0AU00ij9bIQluxujdwZNMt%2BrwlSnLg%3D\"}]}\r\ncf-ray: 9b80b593cb0a56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5306,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7edfd551732c89be86c619b65cf5086e","sha1":"a89cc7dc15731596113006bdc78915c0d2c1f8b0","sha256":"ee5a19a135af309ecda0d0dd0036db6cb94ebedb9c69e95f0c6c43992764d5df","sha512":"c7a62bc053fef2516c8d357d09f60951aa92ad7a4b19b75e3aff2452d506065f5a27452d3c2bc9104e5d314bd6c45060778d94614056fef93b219ec32e105db7","ssdeep":"96:g3m+dvrRamyi9XTzsEcWzsE1zPfTYSGBPFWMMWXyVb9SRN21xb3MS6:am+dvF/yi9XTzsEcWzsEZYSGB1xyXoIC","tlshash":"60b14406be375038405391fd5bfbe20c753560479942de48bb9ca6948f7c7b86866bcc","first_seen":"2026-01-03T07:17:14.54609Z","last_seen":"2026-01-04T09:18:31.02287Z","times_seen":5,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4.adsco.re/","fqdn":"4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:11.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 03 Jan 2026 07:16:11 GMT\r\nContent-Type: text/plain;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Methods: GET, HEAD, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type\r\nAccess-Control-Allow-Origin: https://hqfap.com\r\nAccess-Control-Expose-Headers: *\r\nAccess-Control-Max-Age: 2592000\r\nCache-Control: private, max-age=300, immutable, stale-if-error=300, stale-while-revalidate=300\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":26,"send":0,"wait":27,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/v1/api.php","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:10.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"POST /v1/api.php HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 415\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":415,"data":"{\"user\":{\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en-US\",\"referer\":\"https://hqfap.com/search?keyword=owk/\",\"consumer\":\"ad-provider\",\"gdpr\":{\"gdpr\":0},\"screen_resolution\":\"1280x1024\",\"window_orientation\":\"landscape\",\"cookies\":[],\"scr_info\":\"YXN5bmN8fDM%3D\"},\"zones\":[{\"custom_targeting\":{},\"id\":5790954,\"extra_params\":{\"first_request\":true,\"zone_type\":2}}]}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 07:16:10 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://hqfap.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Authorization, Content-Type\r\nAccess-Control-Request-Method: POST\r\nSet-Cookie: __uvt=s%3A32%3A%22f5e89f5f0acb10656f640583a722ba90%22%3B; expires=Mon, 03 Jan 2028 07:16:10 GMT; Max-Age=63072000; path=/; domain=magsrv.com; secure; SameSite=None\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":821,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0783cda44dad4da10cddfbb2826b9b51","sha1":"4de77e2a86e6a6dcbfac4f73257c64b47a48ba1d","sha256":"75c1c37a59f82b098785120357de47b4f197a9b8b5c9cd6ec04005c1ffdc9549","sha512":"d260981d899f288282f61ab1d161abecb670dbe0c981ec908ef8cbd33b6893c0654aa9d630114b9acbd7fb6b69153c4ba92e2721737e1446ce07efee459dc6d8","ssdeep":"","tlshash":"7401ce7bbf40897ce7c055cf1e457468ae56b117e78588955490d474d1fc724208277e","first_seen":"2026-01-03T07:17:14.557536Z","last_seen":"2026-01-03T07:17:14.557536Z","times_seen":1,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA4VQS05DMQy8Chfo09hOYoc1a5BAHCB5L4EN30qoSD48aVqhig0ZxbFsx2MPg9MOtINcga8pXVPwTEvGEnihGPz27t4D+fNHL+/L+vbiWWAhjSLCqCVo5vFGIzWwR5irCkPYiXIKTAIPcHEMcJQQpqfwx4ebeWmAXYADRwz/SOmMGSc2HAgcPNWQKPZoUjYtiYpU3bQrr1Kt1+wplS2atZQpaCtCXDIgBSSZe5PRDRd7jP5MWcxZwYMNCyjbHAW/2B3/CAXhMfY48Bku++/X1f2i8Ih4XhKT6W/2BL5wp90vL+Vp//k1Z6ITh5xzJwWGVFpqSSVUoy1zzU0TU9dEaCrR/pfGZd2kr5rVrJQNkmrrbdMsQ6nQov0AbHaTAgcCAAA=\u0026cb=e2e_6958c23e0c71a8.51724323","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA4VQS05DMQy8Chfo09hOYoc1a5BAHCB5L4EN30qoSD48aVqhig0ZxbFsx2MPg9MOtINcga8pXVPwTEvGEnihGPz27t4D+fNHL+/L+vbiWWAhjSLCqCVo5vFGIzWwR5irCkPYiXIKTAIPcHEMcJQQpqfwx4ebeWmAXYADRwz/SOmMGSc2HAgcPNWQKPZoUjYtiYpU3bQrr1Kt1+wplS2atZQpaCtCXDIgBSSZe5PRDRd7jP5MWcxZwYMNCyjbHAW/2B3/CAXhMfY48Bku++/X1f2i8Ih4XhKT6W/2BL5wp90vL+Vp//k1Z6ITh5xzJwWGVFpqSSVUoy1zzU0TU9dEaCrR/pfGZd2kr5rVrJQNkmrrbdMsQ6nQov0AbHaTAgcCAAA=\u0026cb=e2e_6958c23e0c71a8.51724323 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nCookie: __uvt=s%3A32%3A%226b4615f583ad7a61a3b7d7f72c3b8fb9%22%3B; c-tag=%7B%22tag-video%22%3A%22v6%7C%7CNOR%7C5764770%7C126691254%7C277106%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C6b4615f583ad7a61a3b7d7f72c3b8fb9%7Cfedf893c02a58d3f8f0c78e77b16b788%7C0%7Chqfap.com%7C%7C%7C20%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1767424571%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C2%7C0%7C0%7Cs.magsrv.com%7C%7C%7C%7Chqfap.com%7C0%7C3071d0a2c5cc3c2a05a9136bfa6b5f33%7Cok%22%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 07:16:14 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://hqfap.com\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/upload/videos/Instream.mp4","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:25.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /upload/videos/Instream.mp4 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/upload/player/embed.html\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night; adb_user=true; adb_user_ts=1767424570743; _ga_9CBDTHEVHY=GS2.1.s1767424570$o1$g0$t1767424570$j60$l0$h0; _ga=GA1.1.433107323.1767424571; r=c3RyaW5n; __suvt=707aba6a4b81d92b9e7621f7610e7358; cf_clearance=ee2IjbD4qb1dRrSjfyOFko5FrCPqhl0RDUznSn.AvUI-1767424571-1.2.1.1-hvznDDyyVvd7.wnrg1aJYp.frzz07cclj941BtpzURg5.YGF5CyjdB7yAk5g4gtk0A.JXOyCY97G.pECxoPOIZ4osPHLOi_cKKO8ebAHfbbmKlsov3643ruVyoFlVePgBQwrK10aDIQHFxoe3iF5boFI0VKtZeYBq50jdTLR7BbF8UDhjUXZQreT4Bu1B4kpMshaXRBPz6NkqESmbRxIxB0eFx4_qXPp6uZHVpeSEMA; __nuvt=6b4615f583ad7a61a3b7d7f72c3b8fb9; _popprepop=1\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:25 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 19092\r\nlast-modified: Fri, 25 Apr 2025 02:29:38 GMT\r\netag: \"680af392-4a94\"\r\nstrict-transport-security: max-age=31536000\r\nage: 158\r\ncontent-range: bytes 0-19091/19092\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ssd7mwMJgFujj42yrfdQQF%2FMbspHZMuw6FobSPhz0EfiiB5fnx1bnGqCOkLKOR%2B62BbuQ%2FiLjRtnsUckr8mbQLEMLCp%2FpzE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b80b5ee1d6856c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19092,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"55b1e12ea01c20e17199043f574555e4","sha1":"6bdf9ddb0d0680ae2aabc31ff90738c1f309c4d5","sha256":"f6449300e17e9d77239e8aa07d8e37c912f707a6af9cec3688528cb94562633f","sha512":"d313cb478dd95b527ad9501e96dd0fe54fed2697321f818d2f2733124d880e2b81a582b2718e8df5d38e577686cba8613a629b0a4b6db96b17fcfb326a579b1e","ssdeep":"384:UcXmExtJcuyz4iElUrowWkMq18QnjnEthMdmBSvkfvUH:hvxPZTflWFMG80zEwUBWIcH","tlshash":"ed82c00b8bea306fceb06638648f51109a0aa463594773d7e25ce39f6df46c18fe7254","first_seen":"2025-12-05T22:01:21.190692Z","last_seen":"2026-02-25T20:14:13.408731Z","times_seen":15,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/js/emoji/emojionearea/dist/emojionearea.js?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/js/emoji/emojionearea/dist/emojionearea.js?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Oct 2018 17:37:36 GMT\r\nvary: Accept-Encoding\r\netag: \"5bd0ade0-672a\"\r\nexpires: Sat, 03 Jan 2026 17:46:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 5375\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OxxS1rb5Bxb3APlYz9q0BQU0fdGWVui6upTX8rfFTs5DBrKqjxLKdE903VKanQXOtlKkyT5K6hHIZVzjvjXVQc2J%2FR%2BLoUo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b582baa856c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26410,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (26410), with no line terminators","md5":"35a4f9a1f3431290735b471748492a79","sha1":"a4025fb7bb526bc78caa334729f06316f5a08c86","sha256":"2b1a46309294553d1386546ce401765b63a81cd47ada9c5280620f23bce6c48e","sha512":"f64039098a56cfe05ecbc3d01c45fc1686ad9a3f8fc6aad45f4f57523db067cdcd15b3c53a1c8053541a6b42a7f7b647f887b31872336960194e5808c791caec","ssdeep":"768:8XsC3KWHnhwlpEbBtvBTnnsja9e6V56+w:23rnepensjaRC+w","tlshash":"06c26c4971806b8712b3617b708f8013b53b4628cb444254e62ad1dd3afe4bc977beea","first_seen":"2023-03-07T01:31:54Z","last_seen":"2026-04-03T15:29:14.493736Z","times_seen":176,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/player/plugins/speed/speed.min.js?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/player/plugins/speed/speed.min.js?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 29 Sep 2017 00:41:06 GMT\r\nvary: Accept-Encoding\r\netag: \"59cd96a2-122d\"\r\nexpires: Sat, 03 Jan 2026 17:46:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 5375\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r%2BsxzrrzohSibnuo6SKEUMgpFpm%2B2AZhnXqjtKRnYseS4gbulH3DxT%2FIGfL8t5TBXRKDPYhvYUR%2F%2FVI3XWJYUsjtVIlfNfU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b582baaa56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4653,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4383)","md5":"822410e7b24d626abdb1135191e9f5f8","sha1":"6d7b2aadb86863c706339273ced1c6a173ebc87e","sha256":"9ecb6adc214bc2ab43aead146f8e1edc8309421e169f93bab590f37ae526237e","sha512":"285ff1dfa90d1a89c70b3d9c6eaadff73bb7ab0dd49edc25310984fc3afa6cc13fe388a52cd86dd67869649bbcfac93161b645d98a2cbd6845abd8f5e68eb57b","ssdeep":"96:isGlg10my5KI9MsZ/zb/ay4UfW5jwkuaukfpAt5k9UpJpbWn:T1bO19KXp5mbW","tlshash":"47a1218431015b3b118b38e2251f521a9473cbbdcc586db0e16aeadd3e94e05819ff6b","first_seen":"2023-03-07T01:31:54Z","last_seen":"2026-04-03T15:29:14.498647Z","times_seen":206,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/v1/api.php","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:10.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"POST /v1/api.php HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 415\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":415,"data":"{\"user\":{\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en-US\",\"referer\":\"https://hqfap.com/search?keyword=owk/\",\"consumer\":\"ad-provider\",\"gdpr\":{\"gdpr\":0},\"screen_resolution\":\"1280x1024\",\"window_orientation\":\"landscape\",\"cookies\":[],\"scr_info\":\"YXN5bmN8fDM%3D\"},\"zones\":[{\"custom_targeting\":{},\"id\":5790952,\"extra_params\":{\"first_request\":true,\"zone_type\":2}}]}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 07:16:10 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://hqfap.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Authorization, Content-Type\r\nAccess-Control-Request-Method: POST\r\nSet-Cookie: __uvt=s%3A32%3A%225dd9255e056962a5a1b189ca38776032%22%3B; expires=Mon, 03 Jan 2028 07:16:10 GMT; Max-Age=63072000; path=/; domain=magsrv.com; secure; SameSite=None\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":821,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"72c2e51ad274b142ecec1cfc5347ed84","sha1":"ee51c6695f19d9c25b650fd868aed0936392bd7f","sha256":"81ab80655cdcf5928b6063178bd35add4c907a4459980dded7f8d15f10b44cb9","sha512":"5cfb170f4e98cb053a263e7a1f54cb4349913d94b29292dcf01e9a47970cdb620ba8158bfa3767cd22deaf1818d0a55d259c456b90da5187180547c57f52fc7e","ssdeep":"","tlshash":"bf01f17abf40c87cfac01acf4f41b554ba96b157e3c688904490d4b4d1fc7242142b3e","first_seen":"2026-01-03T07:17:14.560303Z","last_seen":"2026-01-03T07:17:14.560303Z","times_seen":1,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":102,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/upload/player/embed.html","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:11.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /upload/player/embed.html HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night; adb_user=true; adb_user_ts=1767424570743; _ga_9CBDTHEVHY=GS2.1.s1767424570$o1$g0$t1767424570$j60$l0$h0; _ga=GA1.1.433107323.1767424571; r=c3RyaW5n; __suvt=707aba6a4b81d92b9e7621f7610e7358; cf_clearance=ee2IjbD4qb1dRrSjfyOFko5FrCPqhl0RDUznSn.AvUI-1767424571-1.2.1.1-hvznDDyyVvd7.wnrg1aJYp.frzz07cclj941BtpzURg5.YGF5CyjdB7yAk5g4gtk0A.JXOyCY97G.pECxoPOIZ4osPHLOi_cKKO8ebAHfbbmKlsov3643ruVyoFlVePgBQwrK10aDIQHFxoe3iF5boFI0VKtZeYBq50jdTLR7BbF8UDhjUXZQreT4Bu1B4kpMshaXRBPz6NkqESmbRxIxB0eFx4_qXPp6uZHVpeSEMA\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:11 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 01 Jan 2026 10:53:44 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LHXaADsRhC1%2FlDbiLHUd6wHnaruljJz1guuKXtaowTykI8%2B6GrdCLuhLGd7%2FzF30hiEfm%2BQ5r1E0XlOujXgZLW7Uye3%2FbHA%3D\"}]}\r\ncf-ray: 9b80b593bb0856c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5306,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7edfd551732c89be86c619b65cf5086e","sha1":"a89cc7dc15731596113006bdc78915c0d2c1f8b0","sha256":"ee5a19a135af309ecda0d0dd0036db6cb94ebedb9c69e95f0c6c43992764d5df","sha512":"c7a62bc053fef2516c8d357d09f60951aa92ad7a4b19b75e3aff2452d506065f5a27452d3c2bc9104e5d314bd6c45060778d94614056fef93b219ec32e105db7","ssdeep":"96:g3m+dvrRamyi9XTzsEcWzsE1zPfTYSGBPFWMMWXyVb9SRN21xb3MS6:am+dvF/yi9XTzsEcWzsEZYSGB1xyXoIC","tlshash":"60b14406be375038405391fd5bfbe20c753560479942de48bb9ca6948f7c7b86866bcc","first_seen":"2026-01-03T07:17:14.54609Z","last_seen":"2026-01-04T09:18:31.02287Z","times_seen":5,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/930846/c741f744da7529162198357a42690748fb014a26.mp4","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/930846/c741f744da7529162198357a42690748fb014a26.mp4 HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Sat, 03 Jan 2026 07:16:14 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 17097\r\nlast-modified: Tue, 12 Aug 2025 15:26:49 GMT\r\netag: \"689b5d39-42c9\"\r\nexpires: Wed, 12 Aug 2026 16:55:18 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap01-sec01-prg1-1\r\nx-77-nzt: EwwBX63NDQH3tU69AAwBuUwKEwH3dAEAAAwBw7WvAgG3HwAAAA\r\nx-77-nzt-ray: 2a494a154932a52a63c25869e4b03f0a\r\nx-77-cache: HIT\r\nx-77-age: 12406453\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 0-17096/17097\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":17097,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"f2dc83f6accdef07ea713d8976ab0ed3","sha1":"c741f744da7529162198357a42690748fb014a26","sha256":"a4d6b9f8ec7b52c85d2ec245e2229cb405310c6ab9448f1706021c45b16e43fc","sha512":"d62307878d6870001c9e519d6bb6f1c495405c09156730e2d77bfb29a503a67cd504a45cfb201ac0fc04ebc45359d3790132743a9dbbd904f0386d3eefc96c3c","ssdeep":"384:Qu3qcgKrnz0lRUDFBpbaKAuGSRKB+OfBAfiJMzPyeXSajZ0F7:QuacgKrn4lRUcX+w0pVCaW","tlshash":"df72d0d6db5be9c8d2140bbd800c024ba3935b74fb2be68af04783082d905e55b7e59f","first_seen":"2025-08-15T07:35:09.46546Z","last_seen":"2026-03-18T05:18:20.829044Z","times_seen":312,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"b.adsco.re/p","fqdn":"b.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.16.83.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:14.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"POST /p HTTP/1.1\r\nHost: b.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Length: 2846\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 07:16:14 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-ray: 9b80b5a83f8176ef-OSL\r\nas-p-1: OK lon222\r\nas-p-2: OK\r\nas-p-3: OK\r\naccess-control-max-age: 2592000\r\ncache-control: no-transform\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR\r\naccess-control-allow-origin: https://hqfap.com\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1191,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (1191), with no line terminators","md5":"4b011f736c127a43830b15f3b69c4eb9","sha1":"a3bc8e8ec9387be538f7e2104bee02102fc88502","sha256":"a74658d9309e0ba9dc2ff97cf853c37e2e16254d218c7590d4a9fb096f6ca0fe","sha512":"51509d02135dfbd02ee2cce95d7eee0dd3d5c1aad50c128635ef777cce0418628bce304f4508c47b8427e0088951e8f3597521fec65614c895a5d9e4742978ce","ssdeep":"","tlshash":"3b2107eb0ab2ac430b2039c1237b11856caf418ba8932df51018e04f927a1229b06d2a","first_seen":"2026-01-03T07:17:14.561503Z","last_seen":"2026-01-03T07:17:14.561503Z","times_seen":1,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":19,"connect":3,"send":2,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.pemsrv.com/popunder1000.js","fqdn":"a.pemsrv.com","domain":"pemsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:09.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pemsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Oct 2025 14:38:47 GMT","end":"Sat, 17 Jan 2026 14:38:46 GMT"},"fingerprint":{"sha1":"16:DB:C0:84:B9:67:99:32:B2:65:B9:B4:19:A3:A4:E7:78:E9:46:B2","sha256":"C4:03:5E:C5:AB:57:86:05:02:9F:9E:F3:BD:1B:01:5E:C2:F0:0F:F0:14:40:3E:FF:68:BC:99:E6:3B:D1:2A:F5"}}},"request":{"raw":"GET /popunder1000.js HTTP/1.1\r\nHost: a.pemsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 07:16:09 GMT\r\ncontent-type: application/javascript\r\netag: W/\"a8b5185c6e336f90988c17b6ae0\"\r\nexpires: Wed, 17 Dec 2025 13:23:59 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH31ScAAAwBuUwKCQH3KAAAAAwBJRPCVwG3mQAAAA\r\nx-77-nzt-ray: 2a494a15b75839195ec25869d39f2d20\r\nx-77-cache: HIT\r\nx-77-age: 10197\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":122357,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"58eeac519be6ceb7f233b62fedfdf016","sha1":"a8b5185c6e336f90988c17b6ae0d3baf33019177","sha256":"b0d0cb74d537af4c1b83a9d78074cd9bca9b9f3bde3aad75ec4d55b3f1095190","sha512":"9ebaefaf8755f013dd4039606d27392cd58e3b0abe895b4a5dcbdcdcb9e9473667f27387090c9eb50cd8d234baa8a52e3ae24d488ccc424e27eef4ad4d9382a5","ssdeep":"3072:drCqGR9VdpPtCgzTNiQ4n8701l21bMpSmu:XGjVdhdQQOe+p5u","tlshash":"66c35140210748e921e2d67e956fb0993c24a823f5e9cda76c05e7c1f8dec99069bdf3","first_seen":"2025-12-09T14:42:47.636044Z","last_seen":"2026-01-07T12:59:27.51417Z","times_seen":212,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/upload/player/embed.html","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:11.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /upload/player/embed.html HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night; adb_user=true; adb_user_ts=1767424570743; _ga_9CBDTHEVHY=GS2.1.s1767424570$o1$g0$t1767424570$j60$l0$h0; _ga=GA1.1.433107323.1767424571; r=c3RyaW5n; __suvt=707aba6a4b81d92b9e7621f7610e7358; cf_clearance=ee2IjbD4qb1dRrSjfyOFko5FrCPqhl0RDUznSn.AvUI-1767424571-1.2.1.1-hvznDDyyVvd7.wnrg1aJYp.frzz07cclj941BtpzURg5.YGF5CyjdB7yAk5g4gtk0A.JXOyCY97G.pECxoPOIZ4osPHLOi_cKKO8ebAHfbbmKlsov3643ruVyoFlVePgBQwrK10aDIQHFxoe3iF5boFI0VKtZeYBq50jdTLR7BbF8UDhjUXZQreT4Bu1B4kpMshaXRBPz6NkqESmbRxIxB0eFx4_qXPp6uZHVpeSEMA\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:11 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 01 Jan 2026 10:53:44 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pa5mjJUVc6ih4PeQb46Sm5XWtWOzxFVsI6udmg5jJjRhb1GOaThLyQWh6sBd%2B8XQ3w%2BM%2BmUQ444YFI3Ws21QS3UI%2Fr2evEQ%3D\"}]}\r\ncf-ray: 9b80b5931afb56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5306,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7edfd551732c89be86c619b65cf5086e","sha1":"a89cc7dc15731596113006bdc78915c0d2c1f8b0","sha256":"ee5a19a135af309ecda0d0dd0036db6cb94ebedb9c69e95f0c6c43992764d5df","sha512":"c7a62bc053fef2516c8d357d09f60951aa92ad7a4b19b75e3aff2452d506065f5a27452d3c2bc9104e5d314bd6c45060778d94614056fef93b219ec32e105db7","ssdeep":"96:g3m+dvrRamyi9XTzsEcWzsE1zPfTYSGBPFWMMWXyVb9SRN21xb3MS6:am+dvF/yi9XTzsEcWzsEZYSGB1xyXoIC","tlshash":"60b14406be375038405391fd5bfbe20c753560479942de48bb9ca6948f7c7b86866bcc","first_seen":"2026-01-03T07:17:14.54609Z","last_seen":"2026-01-04T09:18:31.02287Z","times_seen":5,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/upload/player/embed.html","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:11.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /upload/player/embed.html HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night; adb_user=true; adb_user_ts=1767424570743; _ga_9CBDTHEVHY=GS2.1.s1767424570$o1$g0$t1767424570$j60$l0$h0; _ga=GA1.1.433107323.1767424571; r=c3RyaW5n; __suvt=707aba6a4b81d92b9e7621f7610e7358; cf_clearance=ee2IjbD4qb1dRrSjfyOFko5FrCPqhl0RDUznSn.AvUI-1767424571-1.2.1.1-hvznDDyyVvd7.wnrg1aJYp.frzz07cclj941BtpzURg5.YGF5CyjdB7yAk5g4gtk0A.JXOyCY97G.pECxoPOIZ4osPHLOi_cKKO8ebAHfbbmKlsov3643ruVyoFlVePgBQwrK10aDIQHFxoe3iF5boFI0VKtZeYBq50jdTLR7BbF8UDhjUXZQreT4Bu1B4kpMshaXRBPz6NkqESmbRxIxB0eFx4_qXPp6uZHVpeSEMA\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:11 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 01 Jan 2026 10:53:44 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UtUa6XuzxmqPURxmxispRcgNJUb48r8hBmevV6JbsobBT%2BOYNleLzr6%2BvOlIBBwOZpnuvUsg6dy5HnGCEnsvTdpw6Jd0UuU%3D\"}]}\r\ncf-ray: 9b80b5937b0456c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5306,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7edfd551732c89be86c619b65cf5086e","sha1":"a89cc7dc15731596113006bdc78915c0d2c1f8b0","sha256":"ee5a19a135af309ecda0d0dd0036db6cb94ebedb9c69e95f0c6c43992764d5df","sha512":"c7a62bc053fef2516c8d357d09f60951aa92ad7a4b19b75e3aff2452d506065f5a27452d3c2bc9104e5d314bd6c45060778d94614056fef93b219ec32e105db7","ssdeep":"96:g3m+dvrRamyi9XTzsEcWzsE1zPfTYSGBPFWMMWXyVb9SRN21xb3MS6:am+dvF/yi9XTzsEcWzsEZYSGB1xyXoIC","tlshash":"60b14406be375038405391fd5bfbe20c753560479942de48bb9ca6948f7c7b86866bcc","first_seen":"2026-01-03T07:17:14.54609Z","last_seen":"2026-01-04T09:18:31.02287Z","times_seen":5,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/v1/api.php","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"POST /v1/api.php HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 480\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nCookie: __uvt=s%3A32%3A%226b4615f583ad7a61a3b7d7f72c3b8fb9%22%3B; c-tag=%7B%22tag-video%22%3A%22v6%7C%7CNOR%7C5764770%7C126691254%7C277106%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C6b4615f583ad7a61a3b7d7f72c3b8fb9%7Cfedf893c02a58d3f8f0c78e77b16b788%7C0%7Chqfap.com%7C%7C%7C20%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1767424571%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C2%7C0%7C0%7Cs.magsrv.com%7C%7C%7C%7Chqfap.com%7C0%7C3071d0a2c5cc3c2a05a9136bfa6b5f33%7Cok%22%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":480,"data":"{\"user\":{\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en-US\",\"referer\":\"https://hqfap.com/upload/player/embed.html\",\"consumer\":\"ad-provider\",\"gdpr\":{\"gdpr\":0},\"screen_resolution\":\"1280x1024\",\"window_orientation\":\"landscape\",\"cookies\":[{\"name\":\"__suvt\",\"value\":\"707aba6a4b81d92b9e7621f7610e7358\"}],\"scr_info\":\"YXN5bmN8fDM%3D\"},\"zones\":[{\"custom_targeting\":{},\"id\":5817802,\"extra_params\":{\"first_request\":true,\"zone_type\":2}}]}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 07:16:14 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://hqfap.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Authorization, Content-Type\r\nAccess-Control-Request-Method: POST\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2288,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3b55eca12d7f47f3c016eac9533286ea","sha1":"c6506361a02ff327d55d18d499f3ebbf9bba4a8e","sha256":"c0af71d4529327fc6df9e13f3d4dddc3d0b79d7638858a7c5280b9f4de036932","sha512":"9ded0c8808759b649cdf5704621c571272757c6f69af2627357351947000a1e2928a4b30c025eaac97dae84713f1c49354944d8213b106ea7dcc222d43dd6e9f","ssdeep":"","tlshash":"3c413bf6f2c440bffaf159cb6e5b1058ae39355bcf0548c401588898c6bf3680d42ba5","first_seen":"2026-01-03T07:17:14.562906Z","last_seen":"2026-01-03T07:17:14.562906Z","times_seen":1,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.adsco.re/favicon.ico?type=log\u0026code=1000\u0026endpoint=adsco.re\u0026path=p\u0026timeout=1500","fqdn":"c.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.16.83.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:14.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"POST /favicon.ico?type=log\u0026code=1000\u0026endpoint=adsco.re\u0026path=p\u0026timeout=1500 HTTP/1.1\r\nHost: c.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 403 Forbidden\r\ndate: Sat, 03 Jan 2026 07:16:14 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: same-origin\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9b80b5a8180456a2-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/v1/api.php","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"POST /v1/api.php HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 480\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nCookie: __uvt=s%3A32%3A%226b4615f583ad7a61a3b7d7f72c3b8fb9%22%3B; c-tag=%7B%22tag-video%22%3A%22v6%7C%7CNOR%7C5764770%7C126691254%7C277106%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C6b4615f583ad7a61a3b7d7f72c3b8fb9%7Cfedf893c02a58d3f8f0c78e77b16b788%7C0%7Chqfap.com%7C%7C%7C20%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1767424571%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C2%7C0%7C0%7Cs.magsrv.com%7C%7C%7C%7Chqfap.com%7C0%7C3071d0a2c5cc3c2a05a9136bfa6b5f33%7Cok%22%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":480,"data":"{\"user\":{\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en-US\",\"referer\":\"https://hqfap.com/upload/player/embed.html\",\"consumer\":\"ad-provider\",\"gdpr\":{\"gdpr\":0},\"screen_resolution\":\"1280x1024\",\"window_orientation\":\"landscape\",\"cookies\":[{\"name\":\"__suvt\",\"value\":\"707aba6a4b81d92b9e7621f7610e7358\"}],\"scr_info\":\"YXN5bmN8fDM%3D\"},\"zones\":[{\"custom_targeting\":{},\"id\":5817802,\"extra_params\":{\"first_request\":true,\"zone_type\":2}}]}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 07:16:14 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://hqfap.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Authorization, Content-Type\r\nAccess-Control-Request-Method: POST\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2289,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f2c1880d3fe8438297443b22993a97b3","sha1":"c77f9b7b9717a9b6808bffb7d9dac4a3ce5dcdd0","sha256":"b4d475f0bc3846680b16060471b29b272fe525b732e9a0f5fc7939844d8bd917","sha512":"23f5c8db612b48ad512380b3b19729680a0983f2c3e713e6bf64f5ae9a4e14632513750570941b16f47b67e33fd358bf19051da33f00cf5a64fc8c55919c729e","ssdeep":"","tlshash":"d141f9f47bc0a15fe6b06a811f893458bb5d308bcbc36ce0806e7557d8bd2392546f99","first_seen":"2026-01-03T07:17:14.563869Z","last_seen":"2026-01-03T07:17:14.563869Z","times_seen":1,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":1,"connect":23,"send":0,"wait":54,"receive":1,"ssl":37},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/930846/0f103cb665002a4effb3cd8122aabadfb8645db5.mp4","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/930846/0f103cb665002a4effb3cd8122aabadfb8645db5.mp4 HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Sat, 03 Jan 2026 07:16:14 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 14123\r\nlast-modified: Tue, 12 Aug 2025 15:26:50 GMT\r\netag: \"689b5d3a-372b\"\r\nexpires: Wed, 12 Aug 2026 16:54:57 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap02-sec02-prg1-1\r\nx-77-nzt: EwwBX63NDQH3ak69AAwBuUwKDAH33QEAAAwBJRPCLgG3FgAAAA\r\nx-77-nzt-ray: 2a494a154932a52a63c25869caf52009\r\nx-77-cache: HIT\r\nx-77-age: 12406378\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 0-14122/14123\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":14123,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"7367c06e94375b87c4bb2efa456b0f75","sha1":"0f103cb665002a4effb3cd8122aabadfb8645db5","sha256":"260ffdef137c51b4a2cf72d35fae0827d9a27f9b138e2156570dba1fa8f2710e","sha512":"1ed610f8a4457c5d21949aed0d636d6d17eb035c3cfd7fbfbe27a694eb94fdb4ef285652cdaaeec1bfe825cb1dd507cad10c6d2fe8ef7bf77c8cecbdd3459e41","ssdeep":"384:aqzIMZ7SfmtFQBDYyTurHin0GractjFffbDv7:aqzLJ2Cy89Gra+3r","tlshash":"f952bf2aa2959460cb938339e81a0709119b521969ef0f97c9cd9034afed7e09d07a9f","first_seen":"2025-08-14T21:28:37.228619Z","last_seen":"2026-01-04T15:12:12.881253Z","times_seen":182,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ping-meta-prd.jwpltx.com/v1/jwplayer6/ping.gif?h=1153567799\u0026e=xapi\u0026n=4034146483849934\u0026aid=GCCG\u0026emi=1nzz6nc1lsy3\u0026id=Instream\u0026pli=1t3khgl9wth1\u0026pv=8.28.0\u0026tv=4.0.5\u0026ed=6\u0026prs=idle\u0026ph=0\u0026sdk=0\u0026xam=on\u0026xfmp=adComplete\u0026sa=1767424573362","fqdn":"ping-meta-prd.jwpltx.com","domain":"jwpltx.com","tld":"com"},"ip":{"addr":"52.84.50.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwpltx.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 12 Aug 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E8:9B:D4:42:32:9F:5E:14:C3:36:B5:09:FC:A2:0B:37:DF:D5:E2:D3","sha256":"D1:64:5C:F3:5A:AF:D7:5F:2E:91:2F:C7:B1:E4:F2:91:3C:5A:1E:B9:C2:E9:10:17:7E:59:CF:EC:E6:A0:80:5D"}}},"request":{"raw":"GET /v1/jwplayer6/ping.gif?h=1153567799\u0026e=xapi\u0026n=4034146483849934\u0026aid=GCCG\u0026emi=1nzz6nc1lsy3\u0026id=Instream\u0026pli=1t3khgl9wth1\u0026pv=8.28.0\u0026tv=4.0.5\u0026ed=6\u0026prs=idle\u0026ph=0\u0026sdk=0\u0026xam=on\u0026xfmp=adComplete\u0026sa=1767424573362 HTTP/1.1\r\nHost: ping-meta-prd.jwpltx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 03 Jan 2026 07:16:14 GMT\r\nserver: nginx\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 b5699d1b7e44f0e87927693889ab2666.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: vRATj2vVcxQXBKOE7dHhKY9-DlC2M_5atsDD0pfmfVgLKSSBq_dzDg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":45,"connect":1,"send":0,"wait":104,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/js/script.js?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/js/script.js?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 14 Aug 2025 12:50:06 GMT\r\nvary: Accept-Encoding\r\netag: \"689ddb7e-e977\"\r\nexpires: Sat, 03 Jan 2026 17:46:34 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 5374\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GvyLm575Xcp1LKhDuhvFXMDrZXvMCgH%2FFGDGyKbhRJGmm6u6ODkCcfWg6ySrWfXGdr9gkC4qVCwo145zsrwVn6a%2FrqKjClg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b5832ac056c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59767,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32554)","md5":"61b01b7171b769f77e257a562144b232","sha1":"6760170701c8aa2b43b845919962c351d11671dd","sha256":"a88433fdf41443f5ee52d9eeac8d1c59a317d1f2154a50617f37ff54273e81c1","sha512":"378a42b66c74120f3e8db09281c1454d1c305e2a03664af710157aadadbe2dd427897c56a5cab83223eab8aafd3e385f736fa358ad8f9712e6cdf3c877af7e2e","ssdeep":"768:W5kwmI/1f+oWjd4YkOuS23jVwcqA5ABQmTNcYcVNGnsYdXAtMUI8BYCQSvbShkbR:W5iFDFBQmTNfMR4X6DJ15vj","tlshash":"c643fb08e611272584e720f6221ac00d73fbfa7da616c09474dd83ea6f6d81896d7bfd","first_seen":"2025-10-04T21:36:26.982289Z","last_seen":"2026-02-28T22:53:54.710348Z","times_seen":45,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/player/jwplayer/jwplayer.js","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:11.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/player/jwplayer/jwplayer.js HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/upload/player/embed.html\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night; adb_user=true; adb_user_ts=1767424570743; _ga_9CBDTHEVHY=GS2.1.s1767424570$o1$g0$t1767424570$j60$l0$h0; _ga=GA1.1.433107323.1767424571; r=c3RyaW5n; __suvt=707aba6a4b81d92b9e7621f7610e7358; cf_clearance=ee2IjbD4qb1dRrSjfyOFko5FrCPqhl0RDUznSn.AvUI-1767424571-1.2.1.1-hvznDDyyVvd7.wnrg1aJYp.frzz07cclj941BtpzURg5.YGF5CyjdB7yAk5g4gtk0A.JXOyCY97G.pECxoPOIZ4osPHLOi_cKKO8ebAHfbbmKlsov3643ruVyoFlVePgBQwrK10aDIQHFxoe3iF5boFI0VKtZeYBq50jdTLR7BbF8UDhjUXZQreT4Bu1B4kpMshaXRBPz6NkqESmbRxIxB0eFx4_qXPp6uZHVpeSEMA\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 31 Jul 2024 16:56:10 GMT\r\nvary: Accept-Encoding\r\netag: \"66aa6caa-1ab86\"\r\nexpires: Sat, 03 Jan 2026 18:00:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 4544\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QMQ4%2FU4rCYnNmToIKjMcdhU0xJ3UAeUITjiZxUPG6%2BopojSAwtIPSXOIJNcMtesAi0KrWPMvGi0iu13YgMgTsSjDsF2EpjM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b5954b1856c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109446,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65144)","md5":"6e5c94c322f1ed5f37be56c1bc238e82","sha1":"f6551ac521a2a3c69c8e7ee3ae3b3ab89f9d6217","sha256":"d44d79b928de5d70dce3be8a2f4e5fd40b958159a2a26b1e596a932e28b89975","sha512":"ee57f923459ab5b39553d260a014d6af902a2e1d92254e1f09d699d6f3a1b0f3a0ad80e85ae649c8b0e79154bfd45bcc5b55803161d93808bce5673396a45f21","ssdeep":"1536:B0rFRlUxyv0CcKnKqkf1QiYKDjAPkMUtbKSrRo1gBUSPgGSP3ECTP+MLdGm/Ggd8:BCvxK91ZauoiUB+MLdGX","tlshash":"c6b309e531c2b4e603e624daa07a4041f23a0945380dd5a4fa6cede63d6b947b177fbc","first_seen":"2023-11-18T19:26:42Z","last_seen":"2026-01-15T03:44:34.886381Z","times_seen":62,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prd.jwpltx.com/v1/jwplayer6/ping.gif?h=-340358974\u0026e=ana\u0026n=8736245359265252\u0026aid=GCCG\u0026emi=62lrb7tla13l\u0026id=Instream\u0026pli=gv3e0xu953gn\u0026pv=8.28.0\u0026tv=4.0.5\u0026sa=1767424583981","fqdn":"prd.jwpltx.com","domain":"jwpltx.com","tld":"com"},"ip":{"addr":"108.157.229.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:23.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwpltx.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 12 Aug 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E8:9B:D4:42:32:9F:5E:14:C3:36:B5:09:FC:A2:0B:37:DF:D5:E2:D3","sha256":"D1:64:5C:F3:5A:AF:D7:5F:2E:91:2F:C7:B1:E4:F2:91:3C:5A:1E:B9:C2:E9:10:17:7E:59:CF:EC:E6:A0:80:5D"}}},"request":{"raw":"GET /v1/jwplayer6/ping.gif?h=-340358974\u0026e=ana\u0026n=8736245359265252\u0026aid=GCCG\u0026emi=62lrb7tla13l\u0026id=Instream\u0026pli=gv3e0xu953gn\u0026pv=8.28.0\u0026tv=4.0.5\u0026sa=1767424583981 HTTP/1.1\r\nHost: prd.jwpltx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 03 Jan 2026 07:16:24 GMT\r\nserver: nginx\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d9ef81045d0cf909bd3143957da09138.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: IYrxfqUAGqNGCSI2EM6o2kpRbup2pvTi43wc4BthNHngV4A3iKm09Q==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/css/material.css?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/css/material.css?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Mon, 29 Aug 2022 18:16:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 03 Jan 2026 17:46:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 5375\r\ncf-cache-status: HIT\r\netag: W/\"630d0298-24e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u5AjhE%2BBPhoCaN9mlBzlDjRhK7aH2Zbn%2FhQuciJUYwkPKPpV3k4w5P8qedRjgs76dBM1q7Spb0oYkByFLeaW5FNfOWtslok%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9b80b5827a9656c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":590,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"776176e9db66349dd158d6153c8eb6d2","sha1":"1dec8a663897aeede2dcfc94e47497c23e789b61","sha256":"5bac5935d4403db69547476ac97dac79a1a58ebec24a2c8fd2593a6a794b5508","sha512":"9eee4ce93f33c42efa2e68e24e44cd40506f01cc22b4e90d98d766acc0fcb9512339037efee4f6b49a545ac3f07521169278e18c40dbce02c9efe5f460aa0dad","ssdeep":"","tlshash":"baf08b29b605ad8541320c52770f3f244e08002f6606c0fabb920e4cbfe3a7a5396b0f","first_seen":"2023-05-07T18:40:35Z","last_seen":"2026-04-03T15:29:14.488005Z","times_seen":117,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/css/bootstrap-select.min.css?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/css/bootstrap-select.min.css?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 27 Dec 2021 14:05:46 GMT\r\nvary: Accept-Encoding\r\netag: \"61c9c83a-2636\"\r\nexpires: Sat, 03 Jan 2026 17:46:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 5375\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=emkRmxoFftEZ5bNbzy1P4pObmgEinaGRxGuj1Tv00Vyndex9RcTFxXnYvfE8aAAHc%2FbOES%2FynIr73SecdZqOYQQJGO41uEs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b582aaa756c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9782,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9542), with CRLF line terminators","md5":"1ee377a624159dd38d10d6d234d8ec53","sha1":"15de2792c08fb08a6301a5b935d6e285accb96f6","sha256":"b094277d07293178d115618d27dfc1581d65eaaedb91062c46a4e8c681e53496","sha512":"26f1d3f88dbc10203c80743e8bc5004e03ade652411bfa69f8a61eed57c82d7ed0f068d2035e587413ca6da9d5506d456a6bd683a5a2a9121f01ac6999a18a28","ssdeep":"96:+dR/CgDohlU20iLoMlpUcyV4Y14UcYTlnR46DXUcc3Uccg:wqgE02V5m1TlnR46DUd","tlshash":"3d12c05db38102b5c1a9802e39c57d6a35dafa14b54640b9b39fe36c1a804473c3bfae","first_seen":"2023-05-07T18:40:35Z","last_seen":"2026-03-27T07:23:32.491694Z","times_seen":184,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:09.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23580\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 31 Dec 2025 12:31:08 GMT\r\nexpires: Thu, 31 Dec 2026 12:31:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 240301\r\nlast-modified: Mon, 15 Sep 2025 17:09:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23580,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23580, version 1.0","md5":"e1b3b5908c9cf23dfb2b9c52b9a023ab","sha1":"fcd4136085f2a03481d9958cc6793a5ed98e714c","sha256":"918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537","sha512":"b2da7ef768385707afed62ca1f178efc6aa14519762e3f270129b3afee4d3782cb991e6fa66b3b08a2f81ff7caba0b4c34c726d952198b2ac4a784b36eb2a828","ssdeep":"384:dRkIAJ8pVwWTW5VVjdVn8+2yvAMdriCEOY0kfW9GkAPqpPHi2vUuUSzB8:dKIAJ8pVHTZ+riY9oCpPHiodUeK","tlshash":"91b2e1ce5d546e3a8028213785c17b488273572e9edf42c6dd83a6263a7092cfd3d96e","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-04-04T03:43:29.451539Z","times_seen":183796,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":87,"dns":4,"connect":7,"send":0,"wait":28,"receive":19,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/vast.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:12.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.28.0/vast.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=86400, immutable\r\nlast-modified: Tue, 22 Aug 2023 18:19:15 GMT\r\netag: \"b0deaafb5318980de8c2ee695b76c710\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\nage: 67295\r\ndate: Sat, 03 Jan 2026 07:16:12 GMT\r\nx-served-by: cache-lga21959-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 128, 0\r\nx-timer: S1767424573.826052,VS0,VE1\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 29522\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":104600,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b0deaafb5318980de8c2ee695b76c710","sha1":"5a3734828b24cac1e1cae1645662b3c9dc26cf82","sha256":"cd51410290d2266cda49882fe9d3d5c67aa9bc5b2c3551c7a5fd9e66cfb40908","sha512":"637b3da699f5ba20b0b2a4e900ffee7b74ae8d9eacbe00a48539454125991172e2c09e4eff00f4e8b95a9a700a48cacc235ad55ac7bf01ca2036fc70150c0891","ssdeep":"1536:ulAE+jE0HEekQmIWTuDkjlOYx1sbRuF5V0U2hw2ubBkrzIjpiIPYqdsrVpQRwOaz:uJ+jEQwjlOcSNSvezkyVpeFamsH","tlshash":"c1a308962395e53246e484e960300242b3350a0f7c0a82acf57dfdef5d5ea4b76baf74","first_seen":"2023-09-16T05:27:40Z","last_seen":"2026-02-25T20:14:13.349587Z","times_seen":58,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":52,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/v1/api.php","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:10.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"POST /v1/api.php HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 416\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":416,"data":"{\"user\":{\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en-US\",\"referer\":\"https://hqfap.com/search?keyword=owk/\",\"consumer\":\"ad-provider\",\"gdpr\":{\"gdpr\":0},\"screen_resolution\":\"1280x1024\",\"window_orientation\":\"landscape\",\"cookies\":[],\"scr_info\":\"YXN5bmN8fDM%3D\"},\"zones\":[{\"custom_targeting\":{},\"id\":5790962,\"extra_params\":{\"first_request\":true,\"zone_type\":31}}]}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 07:16:10 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://hqfap.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Authorization, Content-Type\r\nAccess-Control-Request-Method: POST\r\nSet-Cookie: __uvt=s%3A32%3A%226b4615f583ad7a61a3b7d7f72c3b8fb9%22%3B; expires=Mon, 03 Jan 2028 07:16:10 GMT; Max-Age=63072000; path=/; domain=magsrv.com; secure; SameSite=None\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":512,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5dc5db233b83d3910fedb50db807eea8","sha1":"21e059be4089cf8308e0f9a00e961b8c42003909","sha256":"f26889705ff270b5c1c57018b8ac7cb36e0b078dcb111b89b55313e5dd3e0fe5","sha512":"4e3daa2ee00e66799642a1053650e764e189559a67d4f5dd881588bce7c5fd485dc93c7aa5ebab558330e9da3d7f7b782c2ca72e057dac506f082da25b2b4b4e","ssdeep":"","tlshash":"1ef0c9a8f680883cd5a01bde4d043c08f68c31a70ac94c95c04a45b8e6e86640042be2","first_seen":"2026-01-03T07:17:14.570647Z","last_seen":"2026-01-03T07:17:14.570647Z","times_seen":1,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":121,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/js/lib/notifIt/notifIt/js/notifIt.min.js?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/js/lib/notifIt/notifIt/js/notifIt.min.js?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 16 Oct 2017 01:01:32 GMT\r\nvary: Accept-Encoding\r\netag: \"59e404ec-1df2\"\r\nexpires: Sat, 03 Jan 2026 17:46:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 5375\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BTCJJ5twJx9baBu0pwmZ9Rd7Sd2m2h395%2BDV%2BsDvMh70cS1sciIr0sdV790qktQ7LomiYXyUWhBJLgC5x2CCZKXwKx%2FQQ8Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b5829aa356c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7666,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7665)","md5":"e14828abfd54a1ad947075b4aa0ff94b","sha1":"9c9fbdfbd5d27c9e5d7c49c9cd2416ba405f3de4","sha256":"0c0f44f2683578c6ceb8fa66603d4a9e7cd0fa4d3e142c6da57b01b8ef80a24a","sha512":"1a238e8c0ca07b265a51e6102ffd4bc069935da0b44fe98b981d16b6ba5b7f64f1419764a2719a83bcceb0f0d203d857f8ef317f44989dbfbc4bc5ac9fcdf4f7","ssdeep":"96:18q9ZftPvUArGrMr2rYrZrzyJMp2wwoLxwy27wNwx2jwQiwj6mvg9rmYbESr+bXC:uqBIMWIviPHY56AEjH","tlshash":"d1f195cd59b31a5a4bb3d66b817e610a08728ce35b0d07a5eff4254c3986a8113bbed4","first_seen":"2023-03-07T01:31:54Z","last_seen":"2026-04-03T15:29:14.508529Z","times_seen":207,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/930846/1df47daaad71dcfb94e815a54cacf98027a2c302.gif","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/930846/1df47daaad71dcfb94e815a54cacf98027a2c302.gif HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 07:16:14 GMT\r\ncontent-type: image/gif\r\ncontent-length: 110096\r\nlast-modified: Tue, 12 Aug 2025 15:26:50 GMT\r\netag: \"689b5d3a-1ae10\"\r\nexpires: Wed, 12 Aug 2026 16:46:18 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap02-sec01-prg1-1\r\nx-77-nzt: EwwBX63NDQH3dzq9AAwBuUwKDAH3kBQAAAwBnJIhJwG3XQMAAA\r\nx-77-nzt-ray: 2a494a154932a52a63c258692ca5980f\r\nx-77-cache: HIT\r\nx-77-age: 12401271\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":110096,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 250","md5":"426e89de0ebab4dc214288b18bbf29eb","sha1":"1df47daaad71dcfb94e815a54cacf98027a2c302","sha256":"12b97d1b9304870f232d3f76012e16be1acfc78cc5e9a116ad582680fbe3d239","sha512":"2cc6498eb273127bfeb4eb7b6608227ca8dd24dbb040a436b4ded8411888b70d09ed999eb73a9ef87a73af2b24d48038f2fa49d3f05a8e4049d50771b2663ab3","ssdeep":"3072:8YA9Hs7tNm+Huox6R1f+NiR6CLrAuvczRr+YKJ:8YAckE6Rd+NCFLrAukdra","tlshash":"57b312e113a4de4931cca14588998f62362c935c2de1a2f4fcdcee26e1b857d4727f62","first_seen":"2023-04-16T07:56:00Z","last_seen":"2026-01-03T23:47:46.323828Z","times_seen":97,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/upload/videos/Instream.mp4","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:26.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /upload/videos/Instream.mp4 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/upload/player/embed.html\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night; adb_user=true; adb_user_ts=1767424570743; _ga_9CBDTHEVHY=GS2.1.s1767424570$o1$g0$t1767424570$j60$l0$h0; _ga=GA1.1.433107323.1767424571; r=c3RyaW5n; __suvt=707aba6a4b81d92b9e7621f7610e7358; cf_clearance=ee2IjbD4qb1dRrSjfyOFko5FrCPqhl0RDUznSn.AvUI-1767424571-1.2.1.1-hvznDDyyVvd7.wnrg1aJYp.frzz07cclj941BtpzURg5.YGF5CyjdB7yAk5g4gtk0A.JXOyCY97G.pECxoPOIZ4osPHLOi_cKKO8ebAHfbbmKlsov3643ruVyoFlVePgBQwrK10aDIQHFxoe3iF5boFI0VKtZeYBq50jdTLR7BbF8UDhjUXZQreT4Bu1B4kpMshaXRBPz6NkqESmbRxIxB0eFx4_qXPp6uZHVpeSEMA; __nuvt=6b4615f583ad7a61a3b7d7f72c3b8fb9; _popprepop=1\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:26 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 19092\r\nlast-modified: Fri, 25 Apr 2025 02:29:38 GMT\r\netag: \"680af392-4a94\"\r\nstrict-transport-security: max-age=31536000\r\nage: 158\r\ncontent-range: bytes 0-19091/19092\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=udybzSOsfdSqOEEjeqG5z6cvJR6cnvCoioXURMLHwHPpI4GKPkhrFooJA7dvMT555Z5rADwULn7SdowsxEfjAOSER8aOUCg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b80b5effd7656c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19092,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"55b1e12ea01c20e17199043f574555e4","sha1":"6bdf9ddb0d0680ae2aabc31ff90738c1f309c4d5","sha256":"f6449300e17e9d77239e8aa07d8e37c912f707a6af9cec3688528cb94562633f","sha512":"d313cb478dd95b527ad9501e96dd0fe54fed2697321f818d2f2733124d880e2b81a582b2718e8df5d38e577686cba8613a629b0a4b6db96b17fcfb326a579b1e","ssdeep":"384:UcXmExtJcuyz4iElUrowWkMq18QnjnEthMdmBSvkfvUH:hvxPZTflWFMG80zEwUBWIcH","tlshash":"ed82c00b8bea306fceb06638648f51109a0aa463594773d7e25ce39f6df46c18fe7254","first_seen":"2025-12-05T22:01:21.190692Z","last_seen":"2026-02-25T20:14:13.408731Z","times_seen":15,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:10.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sat, 03 Jan 2026 07:16:10 GMT\r\npriority: u=3,i=?0\r\ncf-ray: 9b80b58cdae756c0-OSL\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/d39f91d70ce1/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=sVb9Ax0i3z%2BfB0MLlOhH%2FPGP4S41n%2FOheZTdqQEAC1kvJEjwkEesErMSitB7ckr%2BQLYp6WynXjWRpQwkpiobaswGilc8sgMHZLePeH7%2BQe%2BRDBe2xMZno6gNDBg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1489\u0026min_rtt=0\u0026rtt_var=618\u0026sent=498\u0026recv=101\u0026lost=0\u0026retrans=0\u0026sent_bytes=493961\u0026recv_bytes=26993\u0026delivery_rate=16311222\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=28967\u0026ss_exit_bw=5731691\u0026ss_exit_reason=2\u0026cwnd=31644\u0026unsent_bytes=0\u0026cid=178eee71f578331e\u0026ts=1927\u0026inflight_dur=165\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10366,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/v1/api.php","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:10.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"POST /v1/api.php HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 415\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":415,"data":"{\"user\":{\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en-US\",\"referer\":\"https://hqfap.com/search?keyword=owk/\",\"consumer\":\"ad-provider\",\"gdpr\":{\"gdpr\":0},\"screen_resolution\":\"1280x1024\",\"window_orientation\":\"landscape\",\"cookies\":[],\"scr_info\":\"YXN5bmN8fDM%3D\"},\"zones\":[{\"custom_targeting\":{},\"id\":5790954,\"extra_params\":{\"first_request\":true,\"zone_type\":2}}]}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 07:16:10 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://hqfap.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Authorization, Content-Type\r\nAccess-Control-Request-Method: POST\r\nSet-Cookie: __uvt=s%3A32%3A%22eca8a456bfc2a32e397472a31ab18dc4%22%3B; expires=Mon, 03 Jan 2028 07:16:10 GMT; Max-Age=63072000; path=/; domain=magsrv.com; secure; SameSite=None\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":821,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5de4a7b2340d6ce2b5b1bce08c4539ab","sha1":"866bc67416eaa0128fc384a45caeac7ae24d48f9","sha256":"433806b1f54509fea4dff6dd4851bea3dbe3415cf02f396415dc6f876455f82c","sha512":"3f9ccac70709d54392dc9861bb2b18a46e91d8f94f5c9dd70cec260d0b6c981cf98010b5d10f4ecf8a18b624c3aed67d2e076a648bcac14fbc2917ba295a3475","ssdeep":"","tlshash":"9101f13aff40c87ceac045ce5e417468ba46b147e7c998944490d474d1fc724214273d","first_seen":"2026-01-03T07:17:14.573471Z","last_seen":"2026-01-03T07:17:14.573471Z","times_seen":1,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":48,"dns":1,"connect":21,"send":0,"wait":72,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/v1/vast.php?idzone=5766734","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:11.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /v1/vast.php?idzone=5766734 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nCookie: __uvt=s%3A32%3A%226b4615f583ad7a61a3b7d7f72c3b8fb9%22%3B\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 07:16:11 GMT\r\nContent-Type: text/xml;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: c-tag=%7B%22tag-video%22%3A%22v6%7C%7CNOR%7C5766734%7C121114866%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C6b4615f583ad7a61a3b7d7f72c3b8fb9%7Cfedf893c02a58d3f8f0c78e77b16b788%7C0%7Chqfap.com%7C%7C%7C18%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1767424571%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C2%7C0%7C0%7Cs.magsrv.com%7C%7C%7C%7Chqfap.com%7C0%7Cb021361518859740153c06e8cabce0d7%7Cok%22%7D; expires=Thu, 02 Jul 2026 07:16:11 GMT; path=/; domain=.magsrv.com; Secure; SameSite=none\r\nAccess-Control-Allow-Origin: https://hqfap.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: X-CH-VALUES\r\nCache-Control: no-store\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Request-Method: GET\r\nLocation: https://s.magsrv.com/v1/vast.php?idzone=5766292\r\nX-Robots-Tag: noindex, follow\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16228,"size_decoded":0,"mime_type":"text/xml; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"o0o5dapl3enn.s4.adsco.re/","fqdn":"o0o5dapl3enn.s4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"185.200.116.60","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:11.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.s4.adsco.re","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Nov 2025 09:14:21 GMT","end":"Wed, 11 Feb 2026 09:14:20 GMT"},"fingerprint":{"sha1":"7A:03:26:53:17:4A:DA:4B:6B:97:17:4A:3D:39:18:9E:5A:E0:99:3D","sha256":"BC:B6:01:45:97:52:31:7E:50:44:A4:6C:B3:E7:A3:3D:8E:5A:1E:32:79:2D:E0:BF:94:ED:5C:36:3A:0D:94:6E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: o0o5dapl3enn.s4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 07:16:12 GMT\r\ncontent-type: text/html\r\ncontent-length: 0\r\nlast-modified: Tue, 03 Oct 2023 13:29:59 GMT\r\netag: \"651c1757-0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":1081,"timings":{"blocked":-1,"dns":341,"connect":183,"send":0,"wait":184,"receive":0,"ssl":373},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwpsrv.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:12.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.28.0/jwpsrv.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=900, immutable\r\nlast-modified: Wed, 17 Apr 2024 20:18:17 GMT\r\netag: \"d7f3733c71441c1881fc4eabe9c96086\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 03 Jan 2026 07:16:12 GMT\r\nage: 562\r\nx-served-by: cache-lga21963-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 117, 1\r\nx-timer: S1767424573.826126,VS0,VE1\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 19091\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":67106,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d7f3733c71441c1881fc4eabe9c96086","sha1":"8db1f2f35489a41d1fb63af5b9aad52388c58735","sha256":"9f4c0014a4f36c11302077dc073ef529031ce3eebc04c0ca9bc1d7ea0ed95eca","sha512":"daad1df7ab9c84cb7c1a120fe01a007dc14c6a05e73c8c3afb418c19085d08d85c36128e668890e7d9ad2c084ceb9589fb853a7f06fbc0175028ea7ce8a7e7dd","ssdeep":"768:U2Q5c7PRtE8JKCzyQmr1nEXiGdCeMt+uksp3T:1QAPRtE8JKC2JEXiGdCSudpj","tlshash":"ad63e78d3685752a5b6770b8806fb546723d1dd6304dc610ea50eed93c3de6aa233b2c","first_seen":"2024-04-23T16:41:51Z","last_seen":"2026-02-11T20:51:20.728494Z","times_seen":313,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":44,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/930846/79223121d714caefc206917c360bb6aa05e11fb3.gif","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/930846/79223121d714caefc206917c360bb6aa05e11fb3.gif HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 07:16:14 GMT\r\ncontent-type: image/gif\r\ncontent-length: 45734\r\nlast-modified: Tue, 12 Aug 2025 15:26:49 GMT\r\netag: \"689b5d39-b2a6\"\r\nexpires: Wed, 12 Aug 2026 16:46:18 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap01-sec02-prg1-1\r\nx-77-nzt: EwwBX63NDQH3Xzy9AAwBuUwKCQH3CxMAAAwBisclxAG3+gIAAA\r\nx-77-nzt-ray: 2a494a154932a52a63c25869cd282329\r\nx-77-cache: HIT\r\nx-77-age: 12401759\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":45734,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 250","md5":"d01aa397aa0c320ea147a1722f615433","sha1":"79223121d714caefc206917c360bb6aa05e11fb3","sha256":"2ff606fe5d011f64a26b02a96c1a826e9483814a278845d6b57e570856d26d12","sha512":"9eba2db8518aed15c8ecbcdd36045a4f2c213a4b316510634a042f2e27a1f282007444d15f26d3cb0c8d1a8690833989ccf48f33f123c613796ac1733f7629ec","ssdeep":"768:5eaHcY4ACMsem/MUWnwLsIufxLXncw55NncT4YNIIUaU30o5B6wvz:kxY4s8/MUWnwAxNXcwr1cTrNw6or6iz","tlshash":"a423f197ef22dd51774587bca116a454a7a93e7bb9aea24c01c3cfe304b1d280311ddb","first_seen":"2025-11-22T04:56:46.027985Z","last_seen":"2026-03-18T05:18:20.846753Z","times_seen":194,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prd.jwpltx.com/v1/jwplayer6/ping.gif?h=-136094859\u0026e=e\u0026n=4246963819202372\u0026abc=0\u0026aid=GCCG\u0026amp=0\u0026at=1\u0026c=0\u0026ccp=0\u0026cp=1\u0026d=1\u0026eb=0\u0026ed=6\u0026emi=1lruwan1mwwj\u0026i=1\u0026id=Instream\u0026lid=rl4tk51vgb9o\u0026lsa=read\u0026mt=1\u0026pbd=1\u0026pbr=1\u0026pgi=81kb71rwm1fs\u0026ph=0\u0026pii=0\u0026pl=125\u0026plc=1\u0026pli=1gezfp11yk2n\u0026pp=html5\u0026prc=2\u0026ps=1\u0026pss=1\u0026pt=Owk%2F%20Porn%20Videos%20for%20Free%20in%20Full%20HD%20%231\u0026pu=https%3A%2F%2Fhqfap.com%2Fsearch%3Fkeyword%3Dowk%2F\u0026pv=8.28.0\u0026pyc=0\u0026s=0\u0026sdk=0\u0026stc=2\u0026stpe=0\u0026tv=4.0.5\u0026vb=0\u0026vi=0\u0026vl=90\u0026wd=300\u0026ab=1\u0026cae=0\u0026cb=0\u0026cdid=jwplayer-container2\u0026cme=0\u0026dd=1\u0026dnt=1\u0026flc=0\u0026fv=\u0026ga=0\u0026lng=en\u0026mk=mp4\u0026mu=https%3A%2F%2Fhqfap.com%2Fupload%2Fvideos%2FInstream.mp4\u0026pbc=0\u0026pd=2\u0026pdr=\u0026plng=en\u0026plt=1950\u0026pni=0\u0026po=0\u0026sp=0\u0026st=620\u0026sa=1767424573374","fqdn":"prd.jwpltx.com","domain":"jwpltx.com","tld":"com"},"ip":{"addr":"108.157.229.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwpltx.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 12 Aug 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E8:9B:D4:42:32:9F:5E:14:C3:36:B5:09:FC:A2:0B:37:DF:D5:E2:D3","sha256":"D1:64:5C:F3:5A:AF:D7:5F:2E:91:2F:C7:B1:E4:F2:91:3C:5A:1E:B9:C2:E9:10:17:7E:59:CF:EC:E6:A0:80:5D"}}},"request":{"raw":"GET /v1/jwplayer6/ping.gif?h=-136094859\u0026e=e\u0026n=4246963819202372\u0026abc=0\u0026aid=GCCG\u0026amp=0\u0026at=1\u0026c=0\u0026ccp=0\u0026cp=1\u0026d=1\u0026eb=0\u0026ed=6\u0026emi=1lruwan1mwwj\u0026i=1\u0026id=Instream\u0026lid=rl4tk51vgb9o\u0026lsa=read\u0026mt=1\u0026pbd=1\u0026pbr=1\u0026pgi=81kb71rwm1fs\u0026ph=0\u0026pii=0\u0026pl=125\u0026plc=1\u0026pli=1gezfp11yk2n\u0026pp=html5\u0026prc=2\u0026ps=1\u0026pss=1\u0026pt=Owk%2F%20Porn%20Videos%20for%20Free%20in%20Full%20HD%20%231\u0026pu=https%3A%2F%2Fhqfap.com%2Fsearch%3Fkeyword%3Dowk%2F\u0026pv=8.28.0\u0026pyc=0\u0026s=0\u0026sdk=0\u0026stc=2\u0026stpe=0\u0026tv=4.0.5\u0026vb=0\u0026vi=0\u0026vl=90\u0026wd=300\u0026ab=1\u0026cae=0\u0026cb=0\u0026cdid=jwplayer-container2\u0026cme=0\u0026dd=1\u0026dnt=1\u0026flc=0\u0026fv=\u0026ga=0\u0026lng=en\u0026mk=mp4\u0026mu=https%3A%2F%2Fhqfap.com%2Fupload%2Fvideos%2FInstream.mp4\u0026pbc=0\u0026pd=2\u0026pdr=\u0026plng=en\u0026plt=1950\u0026pni=0\u0026po=0\u0026sp=0\u0026st=620\u0026sa=1767424573374 HTTP/1.1\r\nHost: prd.jwpltx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 03 Jan 2026 07:16:14 GMT\r\nserver: nginx\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d9ef81045d0cf909bd3143957da09138.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: JQh0aAsW3os-YA3TXvuWsor_bnBZ2B0UtffvC0ycL59SQtT4JTLNsw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prd.jwpltx.com/v1/jwplayer6/ping.gif?h=-1182301379\u0026e=e\u0026n=4076839100107098\u0026abc=0\u0026aid=GCCG\u0026amp=0\u0026at=1\u0026c=0\u0026ccp=0\u0026cp=1\u0026d=1\u0026eb=0\u0026ed=6\u0026emi=62lrb7tla13l\u0026i=1\u0026id=Instream\u0026lid=rl4tk51vgb9o\u0026lsa=read\u0026mt=1\u0026pbd=1\u0026pbr=1\u0026pgi=itt566gg48sf\u0026ph=0\u0026pii=0\u0026pl=125\u0026plc=1\u0026pli=gv3e0xu953gn\u0026pp=html5\u0026prc=2\u0026ps=1\u0026pss=1\u0026pt=Owk%2F%20Porn%20Videos%20for%20Free%20in%20Full%20HD%20%231\u0026pu=https%3A%2F%2Fhqfap.com%2Fsearch%3Fkeyword%3Dowk%2F\u0026pv=8.28.0\u0026pyc=0\u0026s=0\u0026sdk=0\u0026stc=2\u0026stpe=0\u0026tv=4.0.5\u0026vb=0\u0026vi=0\u0026vl=90\u0026wd=300\u0026ab=1\u0026cae=0\u0026cb=0\u0026cdid=jwplayer-container2\u0026cme=0\u0026dd=1\u0026dnt=1\u0026flc=0\u0026fv=\u0026ga=0\u0026lng=en\u0026mk=mp4\u0026mu=https%3A%2F%2Fhqfap.com%2Fupload%2Fvideos%2FInstream.mp4\u0026pbc=0\u0026pd=2\u0026pdr=\u0026plng=en\u0026plt=2600\u0026pni=0\u0026po=0\u0026sp=0\u0026st=1290\u0026sa=1767424573979","fqdn":"prd.jwpltx.com","domain":"jwpltx.com","tld":"com"},"ip":{"addr":"108.157.229.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwpltx.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 12 Aug 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E8:9B:D4:42:32:9F:5E:14:C3:36:B5:09:FC:A2:0B:37:DF:D5:E2:D3","sha256":"D1:64:5C:F3:5A:AF:D7:5F:2E:91:2F:C7:B1:E4:F2:91:3C:5A:1E:B9:C2:E9:10:17:7E:59:CF:EC:E6:A0:80:5D"}}},"request":{"raw":"GET /v1/jwplayer6/ping.gif?h=-1182301379\u0026e=e\u0026n=4076839100107098\u0026abc=0\u0026aid=GCCG\u0026amp=0\u0026at=1\u0026c=0\u0026ccp=0\u0026cp=1\u0026d=1\u0026eb=0\u0026ed=6\u0026emi=62lrb7tla13l\u0026i=1\u0026id=Instream\u0026lid=rl4tk51vgb9o\u0026lsa=read\u0026mt=1\u0026pbd=1\u0026pbr=1\u0026pgi=itt566gg48sf\u0026ph=0\u0026pii=0\u0026pl=125\u0026plc=1\u0026pli=gv3e0xu953gn\u0026pp=html5\u0026prc=2\u0026ps=1\u0026pss=1\u0026pt=Owk%2F%20Porn%20Videos%20for%20Free%20in%20Full%20HD%20%231\u0026pu=https%3A%2F%2Fhqfap.com%2Fsearch%3Fkeyword%3Dowk%2F\u0026pv=8.28.0\u0026pyc=0\u0026s=0\u0026sdk=0\u0026stc=2\u0026stpe=0\u0026tv=4.0.5\u0026vb=0\u0026vi=0\u0026vl=90\u0026wd=300\u0026ab=1\u0026cae=0\u0026cb=0\u0026cdid=jwplayer-container2\u0026cme=0\u0026dd=1\u0026dnt=1\u0026flc=0\u0026fv=\u0026ga=0\u0026lng=en\u0026mk=mp4\u0026mu=https%3A%2F%2Fhqfap.com%2Fupload%2Fvideos%2FInstream.mp4\u0026pbc=0\u0026pd=2\u0026pdr=\u0026plng=en\u0026plt=2600\u0026pni=0\u0026po=0\u0026sp=0\u0026st=1290\u0026sa=1767424573979 HTTP/1.1\r\nHost: prd.jwpltx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 03 Jan 2026 07:16:14 GMT\r\nserver: nginx\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d9ef81045d0cf909bd3143957da09138.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: dCDjpJ9wM7l5IoWRLv8w8I1MVuBbkD_kj3WGbGYD6ztzejfSEQPHjA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/js/bootstrap.min.js?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/js/bootstrap.min.js?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 02 Apr 2017 16:38:08 GMT\r\nvary: Accept-Encoding\r\netag: \"58e128f0-90b5\"\r\nexpires: Sat, 03 Jan 2026 17:46:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 5375\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X0hjDk67JLGBHMLfvyjlFPuOgHnrnDHNMtLCU08y2l6TbRPzabOA9yeYGl%2B%2BfF9MIWiepRrkmeiFmL%2B87wVF02PwtyVw89Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b582aaa656c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37045,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32033)","md5":"5869c96cc8f19086aee625d670d741f9","sha1":"430a443d74830fe9be26efca431f448c1b3740f9","sha256":"53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef","sha512":"8b3b64a1bb2f9e329f02d4cd7479065630184ebaed942ee61a9ff9e1ce34c28c0eecb854458977815cf3704a8697fa8a5d096d2761f032b74b70d51da3e37f45","ssdeep":"768:o2rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfbx8Gf3Zq7Q:Jg73zhq0GvbJ3ZKQ","tlshash":"b6f28606b23031a147efb1e1525b020e7239696ee906907c78b99af53db9c48717bf3d","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-04-04T03:42:33.951172Z","times_seen":75285,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/v1/api.php","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:10.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"POST /v1/api.php HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 415\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":415,"data":"{\"user\":{\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en-US\",\"referer\":\"https://hqfap.com/search?keyword=owk/\",\"consumer\":\"ad-provider\",\"gdpr\":{\"gdpr\":0},\"screen_resolution\":\"1280x1024\",\"window_orientation\":\"landscape\",\"cookies\":[],\"scr_info\":\"YXN5bmN8fDM%3D\"},\"zones\":[{\"custom_targeting\":{},\"id\":5791130,\"extra_params\":{\"first_request\":true,\"zone_type\":6}}]}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 07:16:10 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://hqfap.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Authorization, Content-Type\r\nAccess-Control-Request-Method: POST\r\nSet-Cookie: __uvt=s%3A32%3A%222aaf4a62955182c9ff44ebc7c986318b%22%3B; expires=Mon, 03 Jan 2028 07:16:10 GMT; Max-Age=63072000; path=/; domain=magsrv.com; secure; SameSite=None\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":922,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e26887863b37903cb4d60b9368a89bb7","sha1":"8b0341319053e6bfd39089e9083908e9571a3a70","sha256":"2e4e28a92c4b4df33612508c524fd33f055d04220d2988df94b3b9e06e3e0f20","sha512":"d9cd43d911fba58c537de7c85cd322899cc9d7a48558131db5c7b9ee8c10c4c8ad295a522344c3259e37f1050b3c0dca903f357edfba650b8cfa27466d4e4af5","ssdeep":"","tlshash":"c8110077ff008c78ff804acf2d5574a4ae56b213a74564954488e4b4e5fd728114373e","first_seen":"2026-01-03T07:17:14.57707Z","last_seen":"2026-01-03T07:17:14.57707Z","times_seen":1,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":57,"dns":1,"connect":22,"send":0,"wait":91,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwplayer.core.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:12.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.28.0/jwplayer.core.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, immutable\r\nlast-modified: Tue, 22 Aug 2023 18:19:08 GMT\r\netag: \"34de47681547f88d2a251419d61d4a2d\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\nage: 1390167\r\ndate: Sat, 03 Jan 2026 07:16:12 GMT\r\nx-served-by: cache-lga21956-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 76, 0\r\nx-timer: S1767424573.825231,VS0,VE1\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 40476\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":143406,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65143)","md5":"34de47681547f88d2a251419d61d4a2d","sha1":"e9c03590ad2eb86eeee8b0032f345fbeb32bc4c1","sha256":"5a8861552d8484bac63cb929ef4b4e9f2f76726aef84032c76a75b76da4e7ddc","sha512":"96c8659af1758ddc35ee64cf835f983cddb190d2dff7884b86dd259faab6d824c3330d04f2b056f77989be023b1703c9e0e339ce805c0ec480812d2988c305ea","ssdeep":"3072:B5ozmmILBerJhsy7v22m79sTkvpkHkfeKJyuaU:X7DBerJh/aLLkEfPJn","tlshash":"45e33b753181623651da93da72674201a33a45897406c7acff2cedea1c3e88771f6fb8","first_seen":"2025-10-07T08:25:20.374415Z","last_seen":"2026-02-25T20:14:13.377962Z","times_seen":40,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":17,"send":0,"wait":14,"receive":14,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwpsrv.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:12.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.28.0/jwpsrv.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=900, immutable\r\nlast-modified: Wed, 17 Apr 2024 20:18:17 GMT\r\netag: \"d7f3733c71441c1881fc4eabe9c96086\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 03 Jan 2026 07:16:12 GMT\r\nage: 562\r\nx-served-by: cache-lga21963-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 117, 7\r\nx-timer: S1767424573.838852,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 19091\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":67106,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d7f3733c71441c1881fc4eabe9c96086","sha1":"8db1f2f35489a41d1fb63af5b9aad52388c58735","sha256":"9f4c0014a4f36c11302077dc073ef529031ce3eebc04c0ca9bc1d7ea0ed95eca","sha512":"daad1df7ab9c84cb7c1a120fe01a007dc14c6a05e73c8c3afb418c19085d08d85c36128e668890e7d9ad2c084ceb9589fb853a7f06fbc0175028ea7ce8a7e7dd","ssdeep":"768:U2Q5c7PRtE8JKCzyQmr1nEXiGdCeMt+uksp3T:1QAPRtE8JKC2JEXiGdCSudpj","tlshash":"ad63e78d3685752a5b6770b8806fb546723d1dd6304dc610ea50eed93c3de6aa233b2c","first_seen":"2024-04-23T16:41:51Z","last_seen":"2026-02-11T20:51:20.728494Z","times_seen":313,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/v1/api.php","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"POST /v1/api.php HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 480\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nCookie: __uvt=s%3A32%3A%226b4615f583ad7a61a3b7d7f72c3b8fb9%22%3B; c-tag=%7B%22tag-video%22%3A%22v6%7C%7CNOR%7C5764770%7C126691254%7C277106%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C6b4615f583ad7a61a3b7d7f72c3b8fb9%7Cfedf893c02a58d3f8f0c78e77b16b788%7C0%7Chqfap.com%7C%7C%7C20%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1767424571%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C2%7C0%7C0%7Cs.magsrv.com%7C%7C%7C%7Chqfap.com%7C0%7C3071d0a2c5cc3c2a05a9136bfa6b5f33%7Cok%22%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":480,"data":"{\"user\":{\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en-US\",\"referer\":\"https://hqfap.com/upload/player/embed.html\",\"consumer\":\"ad-provider\",\"gdpr\":{\"gdpr\":0},\"screen_resolution\":\"1280x1024\",\"window_orientation\":\"landscape\",\"cookies\":[{\"name\":\"__suvt\",\"value\":\"707aba6a4b81d92b9e7621f7610e7358\"}],\"scr_info\":\"YXN5bmN8fDM%3D\"},\"zones\":[{\"custom_targeting\":{},\"id\":5817802,\"extra_params\":{\"first_request\":true,\"zone_type\":2}}]}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 07:16:14 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://hqfap.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Authorization, Content-Type\r\nAccess-Control-Request-Method: POST\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2288,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"82b21e04fe372efcede2906d3668c207","sha1":"f029e0561b6b33efef269782a7ac464203d7f006","sha256":"e6a65160a3d92f1d9ff648a680ea608d1f95493f8362cc61e331729814af6cb7","sha512":"9673635dd70da3bd5c22235356f2e79180d8a2b36dbd65ea2b90bc10bc7d71e4a439dc98a6afed9bbd551d75362dd61469ae468c1b02af50493df2e5d3eaf022","ssdeep":"","tlshash":"6b412bf4bbc0a4aefba06c8a5e487054ffad348fcbd24ce0415d315ec1ba1382404b99","first_seen":"2026-01-03T07:17:14.57864Z","last_seen":"2026-01-03T07:17:14.57864Z","times_seen":1,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":1,"connect":24,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/930846/3e2ba917952c6b0f4d479c7285bff3b74d4c4a26.webp","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/930846/3e2ba917952c6b0f4d479c7285bff3b74d4c4a26.webp HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 07:16:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10714\r\nlast-modified: Tue, 12 Aug 2025 15:26:50 GMT\r\netag: \"689b5d3a-29da\"\r\nexpires: Wed, 12 Aug 2026 16:54:49 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap01-sec01-prg1-1\r\nx-77-nzt: EwwBX63NDQH3SU69AAwBuUwKEwH3FAIAAAwBJRPCLgG3CAAAAA\r\nx-77-nzt-ray: 2a494a154932a52a63c25869c83cb627\r\nx-77-cache: HIT\r\nx-77-age: 12406345\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":10714,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x250, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0d19fb00b18f6bcd0f894e957865e1e7","sha1":"3e2ba917952c6b0f4d479c7285bff3b74d4c4a26","sha256":"1ee392154190ef42f5795dafdaec2e848114f88766efd53ad5c833bb0e053be1","sha512":"0a42ca9f4bc05298acdb22fe0d961ec8bd2197ce06b0b7cea6ad35e252de689d336aad8addcc2c4a7b6deb9f1853226c8149cda36ab07191bbb69d23cdb7cfcd","ssdeep":"192:8ATYRP3azLktOmamfBx6lKfeODCv1UQDmE0i8ydqqtlF6Pdtu8uQvy85MTV:8g2P0kwMx6lKWODCvGQ06cMTvMy85MJ","tlshash":"0022bf9a6d7ebbc0929084b8dd4d63df1456d3f5e3380da211ae487123a68bb04bda74","first_seen":"2025-08-27T23:10:54.143342Z","last_seen":"2026-01-07T11:50:04.320621Z","times_seen":189,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/player/js/mediaelement-and-player.min.js?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/player/js/mediaelement-and-player.min.js?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 06 Aug 2018 17:44:46 GMT\r\nvary: Accept-Encoding\r\netag: \"5b68890e-268b5\"\r\nexpires: Sat, 03 Jan 2026 17:46:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 5375\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bb7ljaibSBiCvKaf0BFNlpEdknN%2FZM9LbWXE9oS4M7ftzj%2BQlN%2FAdpfVl18NoSZw%2FtMoWojAwxCx8wkKDWa2UKQtcewjKQ4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b5829a9f56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157877,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65266)","md5":"ac9ea1fa25ae83a1891bd53ffb25e7a8","sha1":"51eab4eb0459398ac5089a962e1bd3559f8adff7","sha256":"6c6cffd0c316e1df5db32ab70445de7bc7f7efb9e8896c5389b99166a5afbd82","sha512":"b761402d2eb282be4fca4db9cf5c2d8b1a5658f21ee7552248ab2abb60e2794c1dfa2a45f3d6c2eb507bda0920baefb161f7f3f4959c34ecd363f722fe74be76","ssdeep":"3072:Bxhbcpp34fjQLbf5hX7XExzp7+Ni/yAvbLqMWAeDHzNJLbnWLnW1KcjKsz52qdIh:BOi/3dwTO","tlshash":"17f31949714473b286c720ee643f1b1e7137ce69d009d050aa32f9f61eb4f8a916bfa5","first_seen":"2023-03-07T01:31:54Z","last_seen":"2026-04-03T15:29:14.351687Z","times_seen":304,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/upload/player/embed.html","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:11.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /upload/player/embed.html HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night; adb_user=true; adb_user_ts=1767424570743; _ga_9CBDTHEVHY=GS2.1.s1767424570$o1$g0$t1767424570$j60$l0$h0; _ga=GA1.1.433107323.1767424571; r=c3RyaW5n; __suvt=707aba6a4b81d92b9e7621f7610e7358; cf_clearance=ee2IjbD4qb1dRrSjfyOFko5FrCPqhl0RDUznSn.AvUI-1767424571-1.2.1.1-hvznDDyyVvd7.wnrg1aJYp.frzz07cclj941BtpzURg5.YGF5CyjdB7yAk5g4gtk0A.JXOyCY97G.pECxoPOIZ4osPHLOi_cKKO8ebAHfbbmKlsov3643ruVyoFlVePgBQwrK10aDIQHFxoe3iF5boFI0VKtZeYBq50jdTLR7BbF8UDhjUXZQreT4Bu1B4kpMshaXRBPz6NkqESmbRxIxB0eFx4_qXPp6uZHVpeSEMA\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:11 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 01 Jan 2026 10:53:44 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CREV0gW8Ooq4GPZGmyfzpzJmB7LSt9Fu4CsEXtiFitg2Rkzcn6WSlr2WjoeJ83eGTKiWM703bgw3%2B%2FO97NuMMP039s9VAb8%3D\"}]}\r\ncf-ray: 9b80b593db0c56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5306,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7edfd551732c89be86c619b65cf5086e","sha1":"a89cc7dc15731596113006bdc78915c0d2c1f8b0","sha256":"ee5a19a135af309ecda0d0dd0036db6cb94ebedb9c69e95f0c6c43992764d5df","sha512":"c7a62bc053fef2516c8d357d09f60951aa92ad7a4b19b75e3aff2452d506065f5a27452d3c2bc9104e5d314bd6c45060778d94614056fef93b219ec32e105db7","ssdeep":"96:g3m+dvrRamyi9XTzsEcWzsE1zPfTYSGBPFWMMWXyVb9SRN21xb3MS6:am+dvF/yi9XTzsEcWzsEZYSGB1xyXoIC","tlshash":"60b14406be375038405391fd5bfbe20c753560479942de48bb9ca6948f7c7b86866bcc","first_seen":"2026-01-03T07:17:14.54609Z","last_seen":"2026-01-04T09:18:31.02287Z","times_seen":5,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4.adsco.re:2087/","fqdn":"4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":2087,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:11.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 4.adsco.re:2087\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 03 Jan 2026 07:16:11 GMT\r\nContent-Type: text/plain;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Methods: GET, HEAD, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type\r\nAccess-Control-Allow-Origin: https://hqfap.com\r\nAccess-Control-Expose-Headers: *\r\nAccess-Control-Max-Age: 2592000\r\nCache-Control: private, max-age=300, immutable, stale-if-error=300, stale-while-revalidate=300\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":25,"send":0,"wait":26,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prd.jwpltx.com/v1/jwplayer6/ping.gif?h=-432347392\u0026e=e\u0026n=7230094479329038\u0026abc=0\u0026aid=GCCG\u0026amp=0\u0026at=1\u0026c=0\u0026ccp=0\u0026cp=1\u0026d=1\u0026eb=0\u0026ed=6\u0026emi=1ld8uf17ffuf\u0026i=1\u0026id=Instream\u0026lid=rl4tk51vgb9o\u0026lsa=read\u0026mt=1\u0026pbd=1\u0026pbr=1\u0026pgi=rqw5y0iiy3kc\u0026ph=0\u0026pii=0\u0026pl=125\u0026plc=1\u0026pli=sgjq731cjwfn\u0026pp=html5\u0026prc=2\u0026ps=1\u0026pss=1\u0026pt=Owk%2F%20Porn%20Videos%20for%20Free%20in%20Full%20HD%20%231\u0026pu=https%3A%2F%2Fhqfap.com%2Fsearch%3Fkeyword%3Dowk%2F\u0026pv=8.28.0\u0026pyc=0\u0026s=0\u0026sdk=0\u0026stc=1\u0026stpe=0\u0026tv=4.0.5\u0026vb=0\u0026vi=0\u0026vl=90\u0026wd=300\u0026ab=1\u0026cae=0\u0026cb=0\u0026cdid=jwplayer-container1\u0026cme=0\u0026dd=1\u0026dnt=1\u0026flc=0\u0026fv=\u0026ga=0\u0026lng=en\u0026mk=mp4\u0026mu=https%3A%2F%2Fhqfap.com%2Fupload%2Fvideos%2FInstream.mp4\u0026pbc=0\u0026pd=2\u0026pdr=\u0026plng=en\u0026plt=2100\u0026pni=0\u0026po=0\u0026sp=0\u0026st=760\u0026sa=1767424573526","fqdn":"prd.jwpltx.com","domain":"jwpltx.com","tld":"com"},"ip":{"addr":"108.157.229.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwpltx.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 12 Aug 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E8:9B:D4:42:32:9F:5E:14:C3:36:B5:09:FC:A2:0B:37:DF:D5:E2:D3","sha256":"D1:64:5C:F3:5A:AF:D7:5F:2E:91:2F:C7:B1:E4:F2:91:3C:5A:1E:B9:C2:E9:10:17:7E:59:CF:EC:E6:A0:80:5D"}}},"request":{"raw":"GET /v1/jwplayer6/ping.gif?h=-432347392\u0026e=e\u0026n=7230094479329038\u0026abc=0\u0026aid=GCCG\u0026amp=0\u0026at=1\u0026c=0\u0026ccp=0\u0026cp=1\u0026d=1\u0026eb=0\u0026ed=6\u0026emi=1ld8uf17ffuf\u0026i=1\u0026id=Instream\u0026lid=rl4tk51vgb9o\u0026lsa=read\u0026mt=1\u0026pbd=1\u0026pbr=1\u0026pgi=rqw5y0iiy3kc\u0026ph=0\u0026pii=0\u0026pl=125\u0026plc=1\u0026pli=sgjq731cjwfn\u0026pp=html5\u0026prc=2\u0026ps=1\u0026pss=1\u0026pt=Owk%2F%20Porn%20Videos%20for%20Free%20in%20Full%20HD%20%231\u0026pu=https%3A%2F%2Fhqfap.com%2Fsearch%3Fkeyword%3Dowk%2F\u0026pv=8.28.0\u0026pyc=0\u0026s=0\u0026sdk=0\u0026stc=1\u0026stpe=0\u0026tv=4.0.5\u0026vb=0\u0026vi=0\u0026vl=90\u0026wd=300\u0026ab=1\u0026cae=0\u0026cb=0\u0026cdid=jwplayer-container1\u0026cme=0\u0026dd=1\u0026dnt=1\u0026flc=0\u0026fv=\u0026ga=0\u0026lng=en\u0026mk=mp4\u0026mu=https%3A%2F%2Fhqfap.com%2Fupload%2Fvideos%2FInstream.mp4\u0026pbc=0\u0026pd=2\u0026pdr=\u0026plng=en\u0026plt=2100\u0026pni=0\u0026po=0\u0026sp=0\u0026st=760\u0026sa=1767424573526 HTTP/1.1\r\nHost: prd.jwpltx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 03 Jan 2026 07:16:14 GMT\r\nserver: nginx\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d9ef81045d0cf909bd3143957da09138.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: wDZYDYU5EsmUXKsHMcQzG4IPPsJd8pB-AD1Y67bL_KNcjOR5IQavlg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prd.jwpltx.com/v1/jwplayer6/ping.gif?h=-646899599\u0026e=ana\u0026n=5138629220348653\u0026aid=GCCG\u0026emi=788lde14ayu1\u0026id=Instream\u0026pli=zbbca3jiqkh9\u0026pv=8.28.0\u0026tv=4.0.5\u0026sa=1767424583646","fqdn":"prd.jwpltx.com","domain":"jwpltx.com","tld":"com"},"ip":{"addr":"108.157.229.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:23.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwpltx.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 12 Aug 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E8:9B:D4:42:32:9F:5E:14:C3:36:B5:09:FC:A2:0B:37:DF:D5:E2:D3","sha256":"D1:64:5C:F3:5A:AF:D7:5F:2E:91:2F:C7:B1:E4:F2:91:3C:5A:1E:B9:C2:E9:10:17:7E:59:CF:EC:E6:A0:80:5D"}}},"request":{"raw":"GET /v1/jwplayer6/ping.gif?h=-646899599\u0026e=ana\u0026n=5138629220348653\u0026aid=GCCG\u0026emi=788lde14ayu1\u0026id=Instream\u0026pli=zbbca3jiqkh9\u0026pv=8.28.0\u0026tv=4.0.5\u0026sa=1767424583646 HTTP/1.1\r\nHost: prd.jwpltx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 03 Jan 2026 07:16:23 GMT\r\nserver: nginx\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d9ef81045d0cf909bd3143957da09138.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: _qPGR4XK-V2lEAXkP1U1g4g6ORi9B_2IPoGVypx1PxMfqkb_4r0-yQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prd.jwpltx.com/v1/jwplayer6/ping.gif?h=1182105698\u0026e=ana\u0026n=4001987090463651\u0026aid=GCCG\u0026emi=1apuyr1t5yn8\u0026id=Instream\u0026pli=1mjynnpvzayc\u0026pv=8.28.0\u0026tv=4.0.5\u0026sa=1767424583801","fqdn":"prd.jwpltx.com","domain":"jwpltx.com","tld":"com"},"ip":{"addr":"108.157.229.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:23.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwpltx.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 12 Aug 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E8:9B:D4:42:32:9F:5E:14:C3:36:B5:09:FC:A2:0B:37:DF:D5:E2:D3","sha256":"D1:64:5C:F3:5A:AF:D7:5F:2E:91:2F:C7:B1:E4:F2:91:3C:5A:1E:B9:C2:E9:10:17:7E:59:CF:EC:E6:A0:80:5D"}}},"request":{"raw":"GET /v1/jwplayer6/ping.gif?h=1182105698\u0026e=ana\u0026n=4001987090463651\u0026aid=GCCG\u0026emi=1apuyr1t5yn8\u0026id=Instream\u0026pli=1mjynnpvzayc\u0026pv=8.28.0\u0026tv=4.0.5\u0026sa=1767424583801 HTTP/1.1\r\nHost: prd.jwpltx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 03 Jan 2026 07:16:23 GMT\r\nserver: nginx\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d9ef81045d0cf909bd3143957da09138.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: cirmgIeNnZqOZrvY7yTy7qMFtdL5e_Zo2poh0arnQ1GGD_ux18DlAA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/sdkloader/ima3.js?version=3.1.64","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"43:D3:3F:93:6C:4F:F7:67:58:9D:D5:48:20:4C:74:A2:69:DB:13:9F","sha256":"8C:DB:D2:85:E1:AB:12:7B:1D:5A:65:A7:EC:22:67:6F:B3:A6:65:01:28:29:FA:D2:3B:01:8D:10:7E:4D:09:52"}}},"request":{"raw":"GET /js/sdkloader/ima3.js?version=3.1.64 HTTP/1.1\r\nHost: imasdk.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ndate: Sat, 03 Jan 2026 07:16:09 GMT\r\nexpires: Sat, 03 Jan 2026 07:16:09 GMT\r\ncache-control: private, max-age=900, stale-while-revalidate=3600\r\ncontent-type: text/javascript; charset=UTF-8\r\netag: 114347194302008642\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: br\r\nserver: cafe\r\ncontent-length: 145455\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":461806,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2831)","md5":"95cb08ef02778861cbba45b1fdd3f500","sha1":"2ad4214d5ec8c104797df33fbce601992763f76d","sha256":"a74eb7c4b3a55db2be84636e658d4d3164e1cbc9604be0be2969ef637bc0d517","sha512":"bb2cb350c21f265ec8fc0f5865727758b9988c7904dcc457c4ceec3dff050e7dfaf1beb4ef574419496a0a1359f474f5813b66aecdf24eab22a9fac28ba4cd8a","ssdeep":"6144:gz2SPdwdldGlWgZzvfKyBMbvvNeQT2lorPyV:IZrHBK3NxyorPyV","tlshash":"90a4facdb6a674669363f4b5403f014bb23ba866f408886cb649d9e27e7480d4277f7c","first_seen":"2025-12-19T23:45:08.38861Z","last_seen":"2026-01-04T09:18:31.057353Z","times_seen":15,"resource_available":true,"data":null}},"time_used":604,"timings":{"blocked":185,"dns":2,"connect":27,"send":0,"wait":59,"receive":78,"ssl":250},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/favicon.ico","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:10.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:10 GMT\r\ncontent-type: image/x-icon\r\nvary: accept-encoding\r\nlast-modified: Thu, 30 Oct 2025 11:17:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 4509\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6903495e-35de\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JbIgTn1WIkQ2MjdWSxOHOmMVrWTRH0ddRQcghu436sNrYl4RebMElgWiQfh95USdWYWPjMWH%2BFzAChbXMjjgwdJn21XC4Tg%3D\"}]}\r\npriority: u=6,i=?0\r\ncf-ray: 9b80b58ccae656c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13790,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x52, 32 bits/pixel","md5":"4f3e6f0f9fc238c12e3c95ed212b9202","sha1":"7e30d71cef33d026ac6ade26fe14f50cfcf4112a","sha256":"25234fdbb7d9e068719bd456847d70b8d8faa3354e3179c25df919a7e7ea01df","sha512":"a8e22a2f2bfb297fce13b94a8d9ab428c4b26c841b4b60008d1bdfd0784913d106ba8897618b954d756514a8ea7a9320f5ba1078606019af3e6d2b9b7f3d6388","ssdeep":"192:4bD3sGZSP6s/vTjgdVp163ixMGVpwIiep81VI1g6ng8n3yEXbTkCEBZXZ/UMa0de:KD3+jgV1Mpe8PTlEks6ri","tlshash":"eb527833229a14cdc2e6e231e167fcf20f755dc657a8e91b04687db93768991f087e20","first_seen":"2025-11-04T03:53:46.591422Z","last_seen":"2026-01-04T09:18:31.0911Z","times_seen":31,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o0o5dapl3enn.n4.adsco.re/","fqdn":"o0o5dapl3enn.n4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"38.132.109.126","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:11.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.n4.adsco.re","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Nov 2025 09:14:20 GMT","end":"Wed, 11 Feb 2026 09:14:19 GMT"},"fingerprint":{"sha1":"FB:34:12:01:B6:D1:B3:BD:9C:64:10:4B:29:6B:C7:44:FD:21:82:69","sha256":"D8:BD:52:A0:9E:11:2A:7E:51:D4:43:1D:9D:F7:F0:66:68:70:DF:0B:20:4A:38:60:4C:B5:37:82:2C:42:01:6B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: o0o5dapl3enn.n4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 07:16:12 GMT\r\ncontent-type: text/html\r\ncontent-length: 0\r\nlast-modified: Fri, 16 Jun 2023 08:37:42 GMT\r\netag: \"648c1f56-0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":483,"timings":{"blocked":-1,"dns":126,"connect":87,"send":0,"wait":88,"receive":0,"ssl":181},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"u3y8v8u8.aucdn.net/library/886962/1306dbe0f2b1315de9ef7261588f232490953856.mp4","fqdn":"u3y8v8u8.aucdn.net","domain":"aucdn.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:12.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/886962/1306dbe0f2b1315de9ef7261588f232490953856.mp4 HTTP/1.1\r\nHost: u3y8v8u8.aucdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Sat, 03 Jan 2026 07:16:12 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 9421714\r\nlast-modified: Mon, 08 Dec 2025 11:50:20 GMT\r\netag: \"6936bb7c-8fc392\"\r\nexpires: Sat, 12 Dec 2026 11:33:06 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap01-sec02-prg1-1\r\nx-77-nzt: EwwBX63NDQH3lcIcAAwBuUwKAQH3NQIAAAgBT3/Y+AGh\r\nx-77-nzt-ray: 2a494a154932a52a61c25869b951c326\r\nx-77-cache: HIT\r\nx-77-age: 1884821\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 0-9421713/9421714\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":1572864,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"3f70999a311915e51043cb7ff7977ebe","sha1":"cff06f6913495b23dea369fdc1e11be4452e637d","sha256":"e91a4eb0748c3b0a88fd5ba08868e4737dbbc07a9d655ae285594e270259bd4a","sha512":"5912ab82dbb63281601544bb8bcc62fdb7251ea0d9b95783fb3477d2a53bf44f9c4e849242fa1ab3dc5f59d9297abdd5bdabefc4bcc8016ce14f14bd60633ffe","ssdeep":"24576:rtGHsnq8S9MQafiSLxemXOwX2r5YfkaTmIuHBVO:rdZFfiSLxevwmWPYC","tlshash":"93252361b39aa147c8ad073122e467043a50f77696ab40cfe5176b2e8eb0fe44f197d3","first_seen":"2025-12-21T11:21:38.404984Z","last_seen":"2026-01-16T07:42:55.860655Z","times_seen":17,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"u3y8v8u8.aucdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwpsrv.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:12.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.28.0/jwpsrv.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=900, immutable\r\nlast-modified: Wed, 17 Apr 2024 20:18:17 GMT\r\netag: \"d7f3733c71441c1881fc4eabe9c96086\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 03 Jan 2026 07:16:12 GMT\r\nage: 562\r\nx-served-by: cache-lga21963-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 117, 3\r\nx-timer: S1767424573.837592,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 19091\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":67106,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d7f3733c71441c1881fc4eabe9c96086","sha1":"8db1f2f35489a41d1fb63af5b9aad52388c58735","sha256":"9f4c0014a4f36c11302077dc073ef529031ce3eebc04c0ca9bc1d7ea0ed95eca","sha512":"daad1df7ab9c84cb7c1a120fe01a007dc14c6a05e73c8c3afb418c19085d08d85c36128e668890e7d9ad2c084ceb9589fb853a7f06fbc0175028ea7ce8a7e7dd","ssdeep":"768:U2Q5c7PRtE8JKCzyQmr1nEXiGdCeMt+uksp3T:1QAPRtE8JKC2JEXiGdCSudpj","tlshash":"ad63e78d3685752a5b6770b8806fb546723d1dd6304dc610ea50eed93c3de6aa233b2c","first_seen":"2024-04-23T16:41:51Z","last_seen":"2026-02-11T20:51:20.728494Z","times_seen":313,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":45,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"entitlements.jwplayer.com/GCCG.json","fqdn":"entitlements.jwplayer.com","domain":"jwplayer.com","tld":"com"},"ip":{"addr":"65.9.46.54","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwplayer.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Wed, 25 Dec 2024 00:00:00 GMT","end":"Sat, 24 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"73:5F:22:36:72:E7:49:11:8F:B7:80:90:DA:4D:43:52:ED:0A:89:13","sha256":"E0:7A:FC:22:76:89:11:1A:58:F4:9F:05:51:C6:71:29:F8:0B:7B:AB:0B:3B:F9:C3:67:76:84:5E:50:04:C4:DF"}}},"request":{"raw":"GET /GCCG.json HTTP/1.1\r\nHost: entitlements.jwplayer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\ncontent-type: application/json\r\ncontent-length: 71\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 03:08:00 GMT\r\ncache-control: max-age=1800, s-maxage=21060\r\naccess-control-allow-origin: *\r\nx-cache: Error from cloudfront\r\nvia: 1.1 0eaf5f30adcca4475fcc2543288cac08.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: 2HKH8X8E33ysuDLp7d5FcggVcdUFwaICcnj1Cfbf5e7m_L3mLKQ-fw==\r\nage: 14894\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":71,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5534f424f1d6586164a58758f3e2c51a","sha1":"ef37ca3d8831aaad699430dcaa9967469542d602","sha256":"f28df38bea81995fd78f9077bff2dfc9d60ee13b8c414bc426c61c0e1b0bee86","sha512":"de8d4f36c7f0f85b1fb1a52e22e511fd2e52e7ba6010b39947d72eceb752a60b7578be34dc4c44be6add327cef42a82442099d803bcc3251d84ec05d26fe4d15","ssdeep":"","tlshash":"0da0023eec5654030de616dc3cdae44612f4135c1754544c8e8915ac1adfef24f13311","first_seen":"2023-05-03T00:46:19Z","last_seen":"2026-04-03T20:29:48.300285Z","times_seen":982,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/player/css/mejs-dark.css?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/player/css/mejs-dark.css?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 07 Aug 2018 13:21:48 GMT\r\nvary: Accept-Encoding\r\netag: \"5b699cec-11bf\"\r\nexpires: Sat, 03 Jan 2026 17:46:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 5375\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oQk3Duz6sMUiC1C%2F6BQm9QJkwhdnPgv%2FKzZD%2BEEpEIjmST3dTfuOTles40%2FFcnxfky%2FrOpmh0juzU22XshgkVItddgXLW6Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b5829aa156c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4543,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (499)","md5":"2f48ca0ef7f58a6dc3cabd4df62d0fdf","sha1":"612c28f5b364eb588e8ee8acd0b6497f888931ed","sha256":"b66a8eab8376b02990a4878827c48bcaea43b0b334fd624d9bede747c889acd6","sha512":"74e166dd3439222a367396e5c137417dd8006a38067dd61e8d876900a69a906ce04558f390c9bf8d14e26d1a02b7ff1e4f45ddfca17147a67ada8f5dd58cee44","ssdeep":"96:cBZSHOYLil5E5x505sSfBXRdvASelOoywJo4wVUvXlGH:/uTBXRhyoHVYVGH","tlshash":"1b9105b0ef86520ef107c12e24e16b68936f9341eb16977d93bf22b0f1844f51935b95","first_seen":"2023-05-07T18:40:35Z","last_seen":"2026-03-31T14:32:42.459574Z","times_seen":115,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/player/plugins/context-menu/context-menu.min.js?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/player/plugins/context-menu/context-menu.min.js?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 25 Jul 2018 08:23:16 GMT\r\nvary: Accept-Encoding\r\netag: \"5b583374-f40\"\r\nexpires: Sat, 03 Jan 2026 17:46:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 5375\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d%2Bx%2FpfzypOgDwpFkc8epgRmwPx85Iq93Qg0w%2BSYypkXu5JB7qXUrRzhfZw74FYOfreXOy8Zba7Sp9E1ZWOh8a8oREGsE0VU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b582eab656c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3904,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3634)","md5":"cb7cb4deded7b2b4fab93e08d4c02510","sha1":"0eb503626afe9514f48a10f514a0fcf1a5ffb3c0","sha256":"be9d1ad35a4965d4867ff65621b9ffeb475f209379bdeb5fe9eb3e1a2f23e432","sha512":"aa4946b2161e895cae04186f528ae88457f87b2e7a7f562755e3a28cf1970fde25712b5093689505ccba5405a5efbcf41e02333d49d96380c2e0776cecc12a67","ssdeep":"","tlshash":"a58173b9658172703f4f24e6536fb24e237e9b16750ad030103d9cde6ed4d9922e2fa4","first_seen":"2023-03-07T01:31:54Z","last_seen":"2026-03-31T14:32:42.204144Z","times_seen":150,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/css/bootstrap-colorpicker.min.css?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/css/bootstrap-colorpicker.min.css?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Jun 2022 12:18:06 GMT\r\nvary: Accept-Encoding\r\netag: \"62ab1f7e-3325\"\r\nexpires: Sat, 03 Jan 2026 17:46:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 5375\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mVZXFV4SVbtCXb4lXWl5VYOEQIr2lIockd5sW8IlwO6Lb2rbs40WgnHdE3IAmxO18gSdXA9gZJM6KGYHsHljk1vSLYOfD8s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b582faba56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13093,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (12799), with CRLF line terminators","md5":"cc6ce1e79327cada8647befde15d949c","sha1":"6eb5dcb7c14c82c0a90b69a21e9addc00fe5dba5","sha256":"474dc7c697105ca55991a331a804e6219fb73c6c9af4d61cc45daebb2f132383","sha512":"d361bad3646eaaa310faf2b32ecad21a196b3bc7839106b4d5eb39deddc7bf732c46310c0e0900c2e508a19f808e2a9a4c5a9e62f8b7e318eccc6ecd429f0e8d","ssdeep":"384:fD5p20pVHdUbaw5P5+WFpHRO6sAvisAZzY:fVp20bHKEGHRO69isAy","tlshash":"5d4207b5e8cb0d3f6f73822e2109df58281f6567820507b0bba7a519bf4d1556cbe870","first_seen":"2023-05-07T18:40:35Z","last_seen":"2026-04-03T15:29:14.407813Z","times_seen":150,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/js/bootstrap-colorpicker.min.js?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/js/bootstrap-colorpicker.min.js?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Jun 2022 12:18:32 GMT\r\nvary: Accept-Encoding\r\netag: \"62ab1f98-5127\"\r\nexpires: Sat, 03 Jan 2026 17:46:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 5375\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BNWGoBMkSECes%2Bg4KukyyFWKGiQx%2BOqMDHJWtF1Z%2BE%2FjCQAcAhOiBnM5idlAMmjlklWVDFDybaXfkuT7t8TviiZEV%2FWgmsA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b582fabb56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20775,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20685), with CRLF line terminators","md5":"ffdcffa2d5f30068fe1feb7666b4f23a","sha1":"3b3f6d432fe291830182d1d7e8fa02486c02ded8","sha256":"fc337ab2c8ff947138166cdaa7844d1db0a4a3d42d93ce80802a4981174adee2","sha512":"33cedca4dc352d547495d5771b2af31aa1ed9c99ffb7dbcfa0cdeeac226421a75a41bfd8515dc0248775421a27d8f3cd15f6f9074fe32c6f13a317326d84f21b","ssdeep":"384:chRSExSqU0EkyMfX19i6bPY+8bj5cxYVE3255yvxf:UG9VMG5cxYVE3255yvxf","tlshash":"ea92a46ce1c264175b7b42dc2006db05b27ba925f94487bc743e86e4bf68d0862feb74","first_seen":"2023-03-07T16:16:44Z","last_seen":"2026-04-03T15:29:14.554408Z","times_seen":142,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extreme-ip-lookup.com/json/?key=","fqdn":"extreme-ip-lookup.com","domain":"extreme-ip-lookup.com","tld":"com"},"ip":{"addr":"190.2.142.44","port":443,"asn":49981,"as":"WorldStream B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:09.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t1.extreme-dm.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Dec 2025 23:34:43 GMT","end":"Sun, 01 Mar 2026 23:34:42 GMT"},"fingerprint":{"sha1":"52:10:FD:36:F0:A6:63:1C:95:F1:69:66:06:61:1C:45:DE:01:47:9D","sha256":"94:C6:27:D2:E6:29:41:14:14:CC:5C:45:2E:86:B1:A4:71:89:71:E3:37:D3:63:D8:E6:18:E8:01:1B:70:C9:A0"}}},"request":{"raw":"GET /json/?key= HTTP/1.1\r\nHost: extreme-ip-lookup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 07:16:09 GMT\r\ncontent-type: application/json; charset=utf-8;\r\ncontent-length: 432\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\ncache-control: max-age=3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":432,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"70d7eb5e709e324df3c777945f310506","sha1":"37c769d842892140f97ba7021f3a849ca979e58a","sha256":"99b0d3c54c65559c0c608dda95325aeaf25394c51f8dc4b086f0a26bd51c6b3c","sha512":"b16ce3223bcceb95add13d14e1a1f0a6a3dc3b8bd8ed495f1a2387f1224fc1817db761c33286b0ad07a5adaedae9d6431116946650083a31059f47a8755272d2","ssdeep":"","tlshash":"52e09a3a94280d294aa54205688b629a76634f077f05300ddfe9cf08df0d72f02f772d","first_seen":"2023-04-10T17:06:22Z","last_seen":"2026-04-04T00:27:00.781581Z","times_seen":712,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":86,"dns":38,"connect":21,"send":0,"wait":17,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prxycdn.servequake.com/imgcdn.php?src=https://www.xmegadrive.com/contents/videos_screenshots/338000/338678/preview.jpg","fqdn":"prxycdn.servequake.com","domain":"prxycdn.servequake.com","tld":"servequake.com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:11.338Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /imgcdn.php?src=https://www.xmegadrive.com/contents/videos_screenshots/338000/338678/preview.jpg HTTP/1.1\r\nHost: prxycdn.servequake.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":7004,"timings":{"blocked":7004,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"prxycdn.servequake.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwplayer.controls.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.28.0/jwplayer.controls.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, immutable\r\nlast-modified: Tue, 22 Aug 2023 18:19:07 GMT\r\netag: \"1fde4fff33b8be6ebe2530808273fe7b\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 03 Jan 2026 07:16:14 GMT\r\nage: 1388015\r\nx-served-by: cache-lga21946-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 3, 214\r\nx-timer: S1767424574.146113,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 45480\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":193500,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65143)","md5":"1fde4fff33b8be6ebe2530808273fe7b","sha1":"0810766277301777c5fd5fc031040fc5cc315df5","sha256":"ef7d843e4bd08aceacb89d07e82add18b04e2b2a1b4ddb0784c1573374ec9448","sha512":"7aea8e374962935b5a74d86e3d718b2ce0825117c0a1fd3f07294345186e9f28eea3480f04bd190ad4dfed9cccf84c4d07440770ee4f2ecdeb0d185f9055d28a","ssdeep":"1536:BCUKr35YneqmSoQQD/5YIuhhAuUkJrPyoyjQ7ru+7AHYzwC0suZrqlHdDPjmOoRR:B+r35Yer5Yk7REBvB5sYgwmf8q","tlshash":"b9140922614256349ae6c1daa7504b04f73a8141f652deecfd7dedcc849e9ca30fa7b0","first_seen":"2025-10-07T08:25:20.241872Z","last_seen":"2026-02-25T20:14:13.37576Z","times_seen":40,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/css/bootstrap-glyphicons.css?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/css/bootstrap-glyphicons.css?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 29 Aug 2022 18:23:38 GMT\r\nvary: Accept-Encoding\r\netag: \"630d042a-33df\"\r\nexpires: Sat, 03 Jan 2026 17:46:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 5375\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lGUv3GbA%2BzUJLqfXsW8cwDWsvylfWal5SsapfKxisTeqSoGOa7cYHEvDYsJo2JEe4KqZL%2FB%2F1Pg907A%2FrvelGV%2B8hMdA96Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b5825a8f56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13279,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (592), with CRLF line terminators","md5":"ef967f4bb996f27c8686b48258cf99ae","sha1":"124b0bee1e3090ecfb1e9e94c969bed84298215c","sha256":"219df0fd27216e4485c86755944366f23bcffbbdff69b8056068c90db8369413","sha512":"ef874974140c65e9e6641780fd7a42f6bc2e32d10a3601581e2e35ca60ecbfda7d49620eea1f27be73048696dd54f5ef50a63e5771830e77e12ff0decfff4b9b","ssdeep":"192:s/pyCkcNY3i7IG4w+Yb5erIaZGKZH43tdnkTW5w+SUl:XO3I8iHIi2","tlshash":"965293a9f10f11d6b733c443df86e6681d9ff3a089811c51f10ea55c6df623b16c2aaa","first_seen":"2023-05-07T18:40:35Z","last_seen":"2026-04-03T15:29:14.466601Z","times_seen":182,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/player/css/mediaelementplayer.min.css?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/player/css/mediaelementplayer.min.css?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 04 Feb 2020 06:29:38 GMT\r\nvary: Accept-Encoding\r\netag: \"5e390f52-3e42\"\r\nexpires: Sat, 03 Jan 2026 17:46:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 5375\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1g47G%2FaqKGYxggM1UCUeLEMEcKWuaiNG4EwRvKaFhO7LwUXBezTlO1hn2BIGirnT2O1DFpgyoN74hL6cCNwnrgy6CBdUp28%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b5829aa056c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15938,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11407), with CRLF line terminators","md5":"8fe3aa39a2de57676c83677259486af9","sha1":"ab0dc393bd35e561999f1b94c85bb831b66ba2af","sha256":"d1620f0d1243cb0e71762617c3aa953bd4532c80258b0b848a43a05016878eca","sha512":"78e48ae15d1dfffd152a9bb0b362d5f4db2e94ff223a8cae3d38316c0c891e7824afbaa355bb9d3bd005e39d6c2b34eb770587fe215fe9be0f2dbe0f94eb0bb6","ssdeep":"192:nHfpWVtlC5a9O7dF/9aSezdhVFzTD9wGjIMF2JNr9HIeG9FIVGRGGomNrK:8+a9fSmhVFfSgoyFoGRGGomNrK","tlshash":"f96263b19f8c111cf027d12916c147bc932fc343fe22daadb2286678c6851f7966ae07","first_seen":"2023-05-07T18:40:35Z","last_seen":"2026-04-03T15:29:14.338106Z","times_seen":149,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o0o5dapl3enn.l4.adsco.re/","fqdn":"o0o5dapl3enn.l4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"185.200.118.62","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:11.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.l4.adsco.re","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Nov 2025 09:14:30 GMT","end":"Wed, 11 Feb 2026 09:14:29 GMT"},"fingerprint":{"sha1":"44:4A:2D:C5:7F:AC:E8:4E:70:9B:91:5D:F6:AE:99:5F:66:18:51:46","sha256":"3B:1C:F2:20:1E:BC:6C:00:04:8F:3E:30:B9:AC:DE:26:B1:D4:73:CB:C2:6F:2F:F4:1C:E8:C4:A5:FD:38:8D:68"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: o0o5dapl3enn.l4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 07:16:12 GMT\r\ncontent-type: text/html\r\ncontent-length: 0\r\nlast-modified: Fri, 02 Jun 2023 14:03:32 GMT\r\netag: \"6479f6b4-0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":112,"connect":23,"send":0,"wait":24,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prd.jwpltx.com/v1/jwplayer6/ping.gif?h=-1048448970\u0026e=e\u0026n=4058828705399647\u0026abc=0\u0026aid=GCCG\u0026amp=0\u0026at=1\u0026c=0\u0026ccp=0\u0026cp=1\u0026d=1\u0026eb=0\u0026ed=6\u0026emi=788lde14ayu1\u0026i=1\u0026id=Instream\u0026lid=rl4tk51vgb9o\u0026lsa=read\u0026mt=1\u0026pbd=1\u0026pbr=1\u0026pgi=1byqtyc1o5cb\u0026ph=0\u0026pii=0\u0026pl=125\u0026plc=1\u0026pli=zbbca3jiqkh9\u0026pp=html5\u0026prc=2\u0026ps=1\u0026pss=1\u0026pt=Owk%2F%20Porn%20Videos%20for%20Free%20in%20Full%20HD%20%231\u0026pu=https%3A%2F%2Fhqfap.com%2Fsearch%3Fkeyword%3Dowk%2F\u0026pv=8.28.0\u0026pyc=0\u0026s=0\u0026sdk=0\u0026stc=1\u0026stpe=0\u0026tv=4.0.5\u0026vb=0\u0026vi=0\u0026vl=90\u0026wd=300\u0026ab=1\u0026cae=0\u0026cb=0\u0026cdid=jwplayer-container1\u0026cme=0\u0026dd=1\u0026dnt=1\u0026flc=0\u0026fv=\u0026ga=0\u0026lng=en\u0026mk=mp4\u0026mu=https%3A%2F%2Fhqfap.com%2Fupload%2Fvideos%2FInstream.mp4\u0026pbc=0\u0026pd=2\u0026pdr=\u0026plng=en\u0026plt=2300\u0026pni=0\u0026po=0\u0026sp=0\u0026st=910\u0026sa=1767424573643","fqdn":"prd.jwpltx.com","domain":"jwpltx.com","tld":"com"},"ip":{"addr":"108.157.229.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwpltx.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 12 Aug 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E8:9B:D4:42:32:9F:5E:14:C3:36:B5:09:FC:A2:0B:37:DF:D5:E2:D3","sha256":"D1:64:5C:F3:5A:AF:D7:5F:2E:91:2F:C7:B1:E4:F2:91:3C:5A:1E:B9:C2:E9:10:17:7E:59:CF:EC:E6:A0:80:5D"}}},"request":{"raw":"GET /v1/jwplayer6/ping.gif?h=-1048448970\u0026e=e\u0026n=4058828705399647\u0026abc=0\u0026aid=GCCG\u0026amp=0\u0026at=1\u0026c=0\u0026ccp=0\u0026cp=1\u0026d=1\u0026eb=0\u0026ed=6\u0026emi=788lde14ayu1\u0026i=1\u0026id=Instream\u0026lid=rl4tk51vgb9o\u0026lsa=read\u0026mt=1\u0026pbd=1\u0026pbr=1\u0026pgi=1byqtyc1o5cb\u0026ph=0\u0026pii=0\u0026pl=125\u0026plc=1\u0026pli=zbbca3jiqkh9\u0026pp=html5\u0026prc=2\u0026ps=1\u0026pss=1\u0026pt=Owk%2F%20Porn%20Videos%20for%20Free%20in%20Full%20HD%20%231\u0026pu=https%3A%2F%2Fhqfap.com%2Fsearch%3Fkeyword%3Dowk%2F\u0026pv=8.28.0\u0026pyc=0\u0026s=0\u0026sdk=0\u0026stc=1\u0026stpe=0\u0026tv=4.0.5\u0026vb=0\u0026vi=0\u0026vl=90\u0026wd=300\u0026ab=1\u0026cae=0\u0026cb=0\u0026cdid=jwplayer-container1\u0026cme=0\u0026dd=1\u0026dnt=1\u0026flc=0\u0026fv=\u0026ga=0\u0026lng=en\u0026mk=mp4\u0026mu=https%3A%2F%2Fhqfap.com%2Fupload%2Fvideos%2FInstream.mp4\u0026pbc=0\u0026pd=2\u0026pdr=\u0026plng=en\u0026plt=2300\u0026pni=0\u0026po=0\u0026sp=0\u0026st=910\u0026sa=1767424573643 HTTP/1.1\r\nHost: prd.jwpltx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 03 Jan 2026 07:16:14 GMT\r\nserver: nginx\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d9ef81045d0cf909bd3143957da09138.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: OO4eJWSY0M1TglFjlnbi74z1U-drUxM8NCrY1my37_UT4oqeViePlg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":17,"connect":29,"send":0,"wait":129,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prd.jwpltx.com/v1/jwplayer6/ping.gif?h=-446213605\u0026e=ana\u0026n=2505843099801806\u0026aid=GCCG\u0026emi=1gxdlwhi5n42\u0026id=Instream\u0026pli=1hanvqt1mv03\u0026pv=8.28.0\u0026tv=4.0.5\u0026sa=1767424583538","fqdn":"prd.jwpltx.com","domain":"jwpltx.com","tld":"com"},"ip":{"addr":"108.157.229.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:23.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwpltx.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 12 Aug 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E8:9B:D4:42:32:9F:5E:14:C3:36:B5:09:FC:A2:0B:37:DF:D5:E2:D3","sha256":"D1:64:5C:F3:5A:AF:D7:5F:2E:91:2F:C7:B1:E4:F2:91:3C:5A:1E:B9:C2:E9:10:17:7E:59:CF:EC:E6:A0:80:5D"}}},"request":{"raw":"GET /v1/jwplayer6/ping.gif?h=-446213605\u0026e=ana\u0026n=2505843099801806\u0026aid=GCCG\u0026emi=1gxdlwhi5n42\u0026id=Instream\u0026pli=1hanvqt1mv03\u0026pv=8.28.0\u0026tv=4.0.5\u0026sa=1767424583538 HTTP/1.1\r\nHost: prd.jwpltx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 03 Jan 2026 07:16:23 GMT\r\nserver: nginx\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d9ef81045d0cf909bd3143957da09138.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: YJ7PE92wXIhL_4K2wu9uGMqbCzKHrbKLu-UHsgZTTjtDvh04bAGBrw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theporndude.com/favicon-32x32.png","fqdn":"theporndude.com","domain":"theporndude.com","tld":"com"},"ip":{"addr":"172.66.153.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"theporndude.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 18:03:38 GMT","end":"Mon, 09 Feb 2026 19:03:27 GMT"},"fingerprint":{"sha1":"88:A3:F4:E1:95:3C:AD:D9:B0:3C:40:4E:6F:FC:98:EA:BA:CD:62:C6","sha256":"7D:B6:85:30:D9:2F:E3:98:70:AE:E8:87:B1:3C:00:EE:82:A4:67:9D:6E:45:53:E0:61:89:A3:DD:F3:C3:0B:9F"}}},"request":{"raw":"GET /favicon-32x32.png HTTP/1.1\r\nHost: theporndude.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1938\r\nserver: cloudflare\r\ncf-ray: 9b80b5834cdbdfec-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1313909\r\ncache-control: public, max-age=31536000\r\netag: \"b5a-65414875-41fcc378d4858e87;;;\"\r\nexpires: Fri, 26 Dec 2025 02:17:38 GMT\r\nlast-modified: Tue, 31 Oct 2023 18:33:25 GMT\r\nstrict-transport-security: max-age=31536000\r\nvary: accept, Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok\r\npriority: u=4;i=?0,cf-chb=(105;u=5;i=?0)\r\nx-frame-options: allow-from https://webvisor.com/\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1938,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"01979f3fe9a141403fc9fad1003e8abe","sha1":"e8ac1029a6f3cebf31e7e9f4fbe1f2e96ab4c573","sha256":"a85f6e5a07abecb2289072fdf36c4bfa241c072b8b6db3e54d58a9d67499e81d","sha512":"a677d78f59f82cc007b31c6649764458c66bba554d7a6fdbdf2501857a56b5845713351df380e94789c8691ba9b67424dda9e41169bb0d2ab4b026e15a2af4fe","ssdeep":"","tlshash":"64413bb5cd0409054fb611b0d2b64826d885e0521ff3d8056cd177b712747f3ee26d4c","first_seen":"2023-11-05T16:25:21Z","last_seen":"2026-03-25T23:09:58.826404Z","times_seen":133,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/player/plugins/context-menu/context-menu.min.css?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/player/plugins/context-menu/context-menu.min.css?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Wed, 25 Jul 2018 08:23:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 03 Jan 2026 17:46:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 5363\r\ncf-cache-status: HIT\r\netag: W/\"5b58337a-1cf\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BLGNRHeobgMC82WHPPXJ1ZJmnVl2ivllO2gxtetUQ6GFgEVwed%2BkBCEMOwx3plkSY0HqiqHpCJNNhZWDGyMccvWmH%2B1Oy50%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9b80b582fab856c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":463,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (463), with no line terminators","md5":"175d31649f30e314aadfc8619f7c9c56","sha1":"cc00b2b26812faa29955d94bdf3ba572165b1435","sha256":"76786f86afd4829cf6de75e7f5920343da78f2dddd1ad51ad793d65f398bf3a6","sha512":"d2d30d452f1af2c53172e9671077be9c12d66d224fb221c8e1869aba9a84a6feeced7e95694c6daa6a9d1bc59cb8cbcea58d5b48d4accdd2fc819b89edc193f7","ssdeep":"","tlshash":"86f08cb05b5d003cb26db1a89411c6e813268714fa90cab9667c206ce0c19be36e7f01","first_seen":"2023-04-09T17:48:37Z","last_seen":"2026-03-31T14:32:42.28968Z","times_seen":152,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/vast.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:12.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.28.0/vast.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=86400, immutable\r\nlast-modified: Tue, 22 Aug 2023 18:19:15 GMT\r\netag: \"b0deaafb5318980de8c2ee695b76c710\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 03 Jan 2026 07:16:12 GMT\r\nage: 67295\r\nx-served-by: cache-lga21959-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 128, 1\r\nx-timer: S1767424573.826767,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 29522\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":104600,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b0deaafb5318980de8c2ee695b76c710","sha1":"5a3734828b24cac1e1cae1645662b3c9dc26cf82","sha256":"cd51410290d2266cda49882fe9d3d5c67aa9bc5b2c3551c7a5fd9e66cfb40908","sha512":"637b3da699f5ba20b0b2a4e900ffee7b74ae8d9eacbe00a48539454125991172e2c09e4eff00f4e8b95a9a700a48cacc235ad55ac7bf01ca2036fc70150c0891","ssdeep":"1536:ulAE+jE0HEekQmIWTuDkjlOYx1sbRuF5V0U2hw2ubBkrzIjpiIPYqdsrVpQRwOaz:uJ+jEQwjlOcSNSvezkyVpeFamsH","tlshash":"c1a308962395e53246e484e960300242b3350a0f7c0a82acf57dfdef5d5ea4b76baf74","first_seen":"2023-09-16T05:27:40Z","last_seen":"2026-02-25T20:14:13.349587Z","times_seen":58,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":44,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwpsrv.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:12.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.28.0/jwpsrv.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=900, immutable\r\nlast-modified: Wed, 17 Apr 2024 20:18:17 GMT\r\netag: \"d7f3733c71441c1881fc4eabe9c96086\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 03 Jan 2026 07:16:12 GMT\r\nage: 562\r\nx-served-by: cache-lga21963-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 117, 4\r\nx-timer: S1767424573.837927,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 19091\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":67106,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d7f3733c71441c1881fc4eabe9c96086","sha1":"8db1f2f35489a41d1fb63af5b9aad52388c58735","sha256":"9f4c0014a4f36c11302077dc073ef529031ce3eebc04c0ca9bc1d7ea0ed95eca","sha512":"daad1df7ab9c84cb7c1a120fe01a007dc14c6a05e73c8c3afb418c19085d08d85c36128e668890e7d9ad2c084ceb9589fb853a7f06fbc0175028ea7ce8a7e7dd","ssdeep":"768:U2Q5c7PRtE8JKCzyQmr1nEXiGdCeMt+uksp3T:1QAPRtE8JKC2JEXiGdCSudpj","tlshash":"ad63e78d3685752a5b6770b8806fb546723d1dd6304dc610ea50eed93c3de6aa233b2c","first_seen":"2024-04-23T16:41:51Z","last_seen":"2026-02-11T20:51:20.728494Z","times_seen":313,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":42,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"entitlements.jwplayer.com/GCCG.json","fqdn":"entitlements.jwplayer.com","domain":"jwplayer.com","tld":"com"},"ip":{"addr":"65.9.46.54","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwplayer.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Wed, 25 Dec 2024 00:00:00 GMT","end":"Sat, 24 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"73:5F:22:36:72:E7:49:11:8F:B7:80:90:DA:4D:43:52:ED:0A:89:13","sha256":"E0:7A:FC:22:76:89:11:1A:58:F4:9F:05:51:C6:71:29:F8:0B:7B:AB:0B:3B:F9:C3:67:76:84:5E:50:04:C4:DF"}}},"request":{"raw":"GET /GCCG.json HTTP/1.1\r\nHost: entitlements.jwplayer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\ncontent-type: application/json\r\ncontent-length: 71\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 03:08:00 GMT\r\ncache-control: max-age=1800, s-maxage=21060\r\naccess-control-allow-origin: *\r\nx-cache: Error from cloudfront\r\nvia: 1.1 0eaf5f30adcca4475fcc2543288cac08.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: YMA21dThT5h3dTQx-CVTmUSD538ACjzXe34F3_MVt-0whbZERsO7Eg==\r\nage: 14894\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":71,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5534f424f1d6586164a58758f3e2c51a","sha1":"ef37ca3d8831aaad699430dcaa9967469542d602","sha256":"f28df38bea81995fd78f9077bff2dfc9d60ee13b8c414bc426c61c0e1b0bee86","sha512":"de8d4f36c7f0f85b1fb1a52e22e511fd2e52e7ba6010b39947d72eceb752a60b7578be34dc4c44be6add327cef42a82442099d803bcc3251d84ec05d26fe4d15","ssdeep":"","tlshash":"0da0023eec5654030de616dc3cdae44612f4135c1754544c8e8915ac1adfef24f13311","first_seen":"2023-05-03T00:46:19Z","last_seen":"2026-04-03T20:29:48.300285Z","times_seen":982,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA4VQy04DMQz8FX6gq/EjdtIzZ5BAfECyu4ELz0oIJH886bZCFRcyijKyHY89DLYdaAe5Au/J9sRRaCqYlCdKGje3d6EUT++9vk3z63MUQVYbRQTSIHjh8aZMnsGRkMNdGMJBVEyZKIciJDDASVQ35oiH++vt0gCHAF+cMPhRMhhbnDjji8Aa1tQo9ZSlLl6NqjRfvDvP0nJvJczqknJerZD6WoW4FkAqSAr3VUY3XOwx+jMVycEOHmqYwEjbKPjF7vhHSIXH2OMgtnA9fL/MEReFR6TzktiU/mbPGf+lJ53D9FwfDx+f20x00pBz7uTAsMprq1a1ZVoKt7K6MXU3wuqS8v/WROq9eZ/T4kvtog4dFtnMRoum3tIP03so2QcCAAA=\u0026cb=e2e_6958c23ce5f840.50138161","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA4VQy04DMQz8FX6gq/EjdtIzZ5BAfECyu4ELz0oIJH886bZCFRcyijKyHY89DLYdaAe5Au/J9sRRaCqYlCdKGje3d6EUT++9vk3z63MUQVYbRQTSIHjh8aZMnsGRkMNdGMJBVEyZKIciJDDASVQ35oiH++vt0gCHAF+cMPhRMhhbnDjji8Aa1tQo9ZSlLl6NqjRfvDvP0nJvJczqknJerZD6WoW4FkAqSAr3VUY3XOwx+jMVycEOHmqYwEjbKPjF7vhHSIXH2OMgtnA9fL/MEReFR6TzktiU/mbPGf+lJ53D9FwfDx+f20x00pBz7uTAsMprq1a1ZVoKt7K6MXU3wuqS8v/WROq9eZ/T4kvtog4dFtnMRoum3tIP03so2QcCAAA=\u0026cb=e2e_6958c23ce5f840.50138161 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nCookie: __uvt=s%3A32%3A%226b4615f583ad7a61a3b7d7f72c3b8fb9%22%3B; c-tag=%7B%22tag-video%22%3A%22v6%7C%7CNOR%7C5764770%7C126691254%7C277106%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C6b4615f583ad7a61a3b7d7f72c3b8fb9%7Cfedf893c02a58d3f8f0c78e77b16b788%7C0%7Chqfap.com%7C%7C%7C20%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1767424571%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C2%7C0%7C0%7Cs.magsrv.com%7C%7C%7C%7Chqfap.com%7C0%7C3071d0a2c5cc3c2a05a9136bfa6b5f33%7Cok%22%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 07:16:14 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://hqfap.com\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prd.jwpltx.com/v1/jwplayer6/ping.gif?h=-1465573498\u0026e=e\u0026n=9467940907925384\u0026abc=0\u0026aid=GCCG\u0026amp=0\u0026at=1\u0026c=0\u0026ccp=0\u0026cp=1\u0026d=1\u0026eb=0\u0026ed=6\u0026emi=1apuyr1t5yn8\u0026i=1\u0026id=Instream\u0026lid=rl4tk51vgb9o\u0026lsa=read\u0026mt=1\u0026pbd=1\u0026pbr=1\u0026pgi=1svxwgfsa47b\u0026ph=0\u0026pii=0\u0026pl=125\u0026plc=1\u0026pli=1mjynnpvzayc\u0026pp=html5\u0026prc=2\u0026ps=1\u0026pss=1\u0026pt=Owk%2F%20Porn%20Videos%20for%20Free%20in%20Full%20HD%20%231\u0026pu=https%3A%2F%2Fhqfap.com%2Fsearch%3Fkeyword%3Dowk%2F\u0026pv=8.28.0\u0026pyc=0\u0026s=0\u0026sdk=0\u0026stc=1\u0026stpe=0\u0026tv=4.0.5\u0026vb=0\u0026vi=0\u0026vl=90\u0026wd=300\u0026ab=1\u0026cae=0\u0026cb=0\u0026cdid=jwplayer-container1\u0026cme=0\u0026dd=1\u0026dnt=1\u0026flc=0\u0026fv=\u0026ga=0\u0026lng=en\u0026mk=mp4\u0026mu=https%3A%2F%2Fhqfap.com%2Fupload%2Fvideos%2FInstream.mp4\u0026pbc=0\u0026pd=2\u0026pdr=\u0026plng=en\u0026plt=2350\u0026pni=0\u0026po=0\u0026sp=0\u0026st=1000\u0026sa=1767424573799","fqdn":"prd.jwpltx.com","domain":"jwpltx.com","tld":"com"},"ip":{"addr":"108.157.229.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwpltx.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 12 Aug 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E8:9B:D4:42:32:9F:5E:14:C3:36:B5:09:FC:A2:0B:37:DF:D5:E2:D3","sha256":"D1:64:5C:F3:5A:AF:D7:5F:2E:91:2F:C7:B1:E4:F2:91:3C:5A:1E:B9:C2:E9:10:17:7E:59:CF:EC:E6:A0:80:5D"}}},"request":{"raw":"GET /v1/jwplayer6/ping.gif?h=-1465573498\u0026e=e\u0026n=9467940907925384\u0026abc=0\u0026aid=GCCG\u0026amp=0\u0026at=1\u0026c=0\u0026ccp=0\u0026cp=1\u0026d=1\u0026eb=0\u0026ed=6\u0026emi=1apuyr1t5yn8\u0026i=1\u0026id=Instream\u0026lid=rl4tk51vgb9o\u0026lsa=read\u0026mt=1\u0026pbd=1\u0026pbr=1\u0026pgi=1svxwgfsa47b\u0026ph=0\u0026pii=0\u0026pl=125\u0026plc=1\u0026pli=1mjynnpvzayc\u0026pp=html5\u0026prc=2\u0026ps=1\u0026pss=1\u0026pt=Owk%2F%20Porn%20Videos%20for%20Free%20in%20Full%20HD%20%231\u0026pu=https%3A%2F%2Fhqfap.com%2Fsearch%3Fkeyword%3Dowk%2F\u0026pv=8.28.0\u0026pyc=0\u0026s=0\u0026sdk=0\u0026stc=1\u0026stpe=0\u0026tv=4.0.5\u0026vb=0\u0026vi=0\u0026vl=90\u0026wd=300\u0026ab=1\u0026cae=0\u0026cb=0\u0026cdid=jwplayer-container1\u0026cme=0\u0026dd=1\u0026dnt=1\u0026flc=0\u0026fv=\u0026ga=0\u0026lng=en\u0026mk=mp4\u0026mu=https%3A%2F%2Fhqfap.com%2Fupload%2Fvideos%2FInstream.mp4\u0026pbc=0\u0026pd=2\u0026pdr=\u0026plng=en\u0026plt=2350\u0026pni=0\u0026po=0\u0026sp=0\u0026st=1000\u0026sa=1767424573799 HTTP/1.1\r\nHost: prd.jwpltx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 03 Jan 2026 07:16:14 GMT\r\nserver: nginx\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d9ef81045d0cf909bd3143957da09138.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: D9vioRYNdhq3GJdOY51rjp5_1xM3hGs5L03RVq8XfVYWLu3SklHsKg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/896850/e6485655848d1dc59eb786be996bf5363ca87d6d.webp","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:11.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/896850/e6485655848d1dc59eb786be996bf5363ca87d6d.webp HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 07:16:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 68308\r\nlast-modified: Sun, 07 Sep 2025 22:22:44 GMT\r\netag: \"68be05b4-10ad4\"\r\nexpires: Mon, 07 Sep 2026 22:39:01 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap01-sec01-prg1-1\r\nx-77-nzt: EwwBX63NDQH3dFWaAAwBuUwKEwH3718AAAwBJRPCMQG3UwMAAA\r\nx-77-nzt-ray: 2a494a154932a52a60c25869fed3410a\r\nx-77-cache: HIT\r\nx-77-age: 10114420\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":68308,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5702bc5bb111b2a9535bd9342f3fcd4a","sha1":"e6485655848d1dc59eb786be996bf5363ca87d6d","sha256":"983787d70bd0c4f8a194f719f52257a59ff041ca6d311d1d7c8e0f574eb90e78","sha512":"9b30b43d7e757e6704ef1bd84d7ddbb93fa478677a113e9a98266fff92ae23402d44041c12cd75bd8efac40d6c2cda1bbeb948689db1da9ae12676d3db0e781f","ssdeep":"1536:g6Ai4+M5kESU/MLJTE+N875d5OJcTFzYw8AMGyR9maBgzkg3/eoF2Zt:Tg90LJga8Nd5pg7Rof3t2Zt","tlshash":"0f6301915635e4ad30838bcb6bfc9de7251a22fa712c6c51ef064faf29331b9080e01d","first_seen":"2025-09-18T15:24:18.357761Z","last_seen":"2026-01-05T06:46:47.716392Z","times_seen":25,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":72,"dns":41,"connect":7,"send":0,"wait":1,"receive":3,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/player/jwplayer/jwplayer.js","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:11.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/player/jwplayer/jwplayer.js HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/upload/player/embed.html\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night; adb_user=true; adb_user_ts=1767424570743; _ga_9CBDTHEVHY=GS2.1.s1767424570$o1$g0$t1767424570$j60$l0$h0; _ga=GA1.1.433107323.1767424571; r=c3RyaW5n; __suvt=707aba6a4b81d92b9e7621f7610e7358; cf_clearance=ee2IjbD4qb1dRrSjfyOFko5FrCPqhl0RDUznSn.AvUI-1767424571-1.2.1.1-hvznDDyyVvd7.wnrg1aJYp.frzz07cclj941BtpzURg5.YGF5CyjdB7yAk5g4gtk0A.JXOyCY97G.pECxoPOIZ4osPHLOi_cKKO8ebAHfbbmKlsov3643ruVyoFlVePgBQwrK10aDIQHFxoe3iF5boFI0VKtZeYBq50jdTLR7BbF8UDhjUXZQreT4Bu1B4kpMshaXRBPz6NkqESmbRxIxB0eFx4_qXPp6uZHVpeSEMA\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 31 Jul 2024 16:56:10 GMT\r\nvary: Accept-Encoding\r\netag: \"66aa6caa-1ab86\"\r\nexpires: Sat, 03 Jan 2026 18:00:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 4544\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J1GqXU%2FliKbOp4RXVk%2BiyET%2BdhD0woZhKN3xwRqptuyALsNFSb1b7eS3aAmomkx8iDCOWLEG2%2B90Kreist%2BAATZBgRI7Acs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b5954b1756c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109446,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65144)","md5":"6e5c94c322f1ed5f37be56c1bc238e82","sha1":"f6551ac521a2a3c69c8e7ee3ae3b3ab89f9d6217","sha256":"d44d79b928de5d70dce3be8a2f4e5fd40b958159a2a26b1e596a932e28b89975","sha512":"ee57f923459ab5b39553d260a014d6af902a2e1d92254e1f09d699d6f3a1b0f3a0ad80e85ae649c8b0e79154bfd45bcc5b55803161d93808bce5673396a45f21","ssdeep":"1536:B0rFRlUxyv0CcKnKqkf1QiYKDjAPkMUtbKSrRo1gBUSPgGSP3ECTP+MLdGm/Ggd8:BCvxK91ZauoiUB+MLdGX","tlshash":"c6b309e531c2b4e603e624daa07a4041f23a0945380dd5a4fa6cede63d6b947b177fbc","first_seen":"2023-11-18T19:26:42Z","last_seen":"2026-01-15T03:44:34.886381Z","times_seen":62,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prd.jwpltx.com/v1/jwplayer6/ping.gif?h=-1257979908\u0026e=e\u0026n=6757080276297504\u0026abc=0\u0026aid=GCCG\u0026amp=0\u0026at=1\u0026c=0\u0026ccp=0\u0026cp=1\u0026d=1\u0026eb=0\u0026ed=6\u0026emi=csmu5dilxa4e\u0026i=1\u0026id=Instream\u0026lid=rl4tk51vgb9o\u0026lsa=read\u0026mt=1\u0026pbd=1\u0026pbr=1\u0026pgi=1byqtyc1o5cb\u0026ph=0\u0026pii=0\u0026pl=125\u0026plc=1\u0026pli=1oiby9jzaq5q\u0026pp=html5\u0026prc=2\u0026ps=1\u0026pss=1\u0026pt=Owk%2F%20Porn%20Videos%20for%20Free%20in%20Full%20HD%20%231\u0026pu=https%3A%2F%2Fhqfap.com%2Fsearch%3Fkeyword%3Dowk%2F\u0026pv=8.28.0\u0026pyc=0\u0026s=0\u0026sdk=0\u0026stc=2\u0026stpe=0\u0026tv=4.0.5\u0026vb=0\u0026vi=0\u0026vl=90\u0026wd=300\u0026ab=1\u0026cae=0\u0026cb=0\u0026cdid=jwplayer-container2\u0026cme=0\u0026dd=1\u0026dnt=1\u0026flc=0\u0026fv=\u0026ga=0\u0026lng=en\u0026mk=mp4\u0026mu=https%3A%2F%2Fhqfap.com%2Fupload%2Fvideos%2FInstream.mp4\u0026pbc=0\u0026pd=2\u0026pdr=\u0026plng=en\u0026plt=2300\u0026pni=0\u0026po=0\u0026sp=0\u0026st=920\u0026sa=1767424573652","fqdn":"prd.jwpltx.com","domain":"jwpltx.com","tld":"com"},"ip":{"addr":"108.157.229.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwpltx.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 12 Aug 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E8:9B:D4:42:32:9F:5E:14:C3:36:B5:09:FC:A2:0B:37:DF:D5:E2:D3","sha256":"D1:64:5C:F3:5A:AF:D7:5F:2E:91:2F:C7:B1:E4:F2:91:3C:5A:1E:B9:C2:E9:10:17:7E:59:CF:EC:E6:A0:80:5D"}}},"request":{"raw":"GET /v1/jwplayer6/ping.gif?h=-1257979908\u0026e=e\u0026n=6757080276297504\u0026abc=0\u0026aid=GCCG\u0026amp=0\u0026at=1\u0026c=0\u0026ccp=0\u0026cp=1\u0026d=1\u0026eb=0\u0026ed=6\u0026emi=csmu5dilxa4e\u0026i=1\u0026id=Instream\u0026lid=rl4tk51vgb9o\u0026lsa=read\u0026mt=1\u0026pbd=1\u0026pbr=1\u0026pgi=1byqtyc1o5cb\u0026ph=0\u0026pii=0\u0026pl=125\u0026plc=1\u0026pli=1oiby9jzaq5q\u0026pp=html5\u0026prc=2\u0026ps=1\u0026pss=1\u0026pt=Owk%2F%20Porn%20Videos%20for%20Free%20in%20Full%20HD%20%231\u0026pu=https%3A%2F%2Fhqfap.com%2Fsearch%3Fkeyword%3Dowk%2F\u0026pv=8.28.0\u0026pyc=0\u0026s=0\u0026sdk=0\u0026stc=2\u0026stpe=0\u0026tv=4.0.5\u0026vb=0\u0026vi=0\u0026vl=90\u0026wd=300\u0026ab=1\u0026cae=0\u0026cb=0\u0026cdid=jwplayer-container2\u0026cme=0\u0026dd=1\u0026dnt=1\u0026flc=0\u0026fv=\u0026ga=0\u0026lng=en\u0026mk=mp4\u0026mu=https%3A%2F%2Fhqfap.com%2Fupload%2Fvideos%2FInstream.mp4\u0026pbc=0\u0026pd=2\u0026pdr=\u0026plng=en\u0026plt=2300\u0026pni=0\u0026po=0\u0026sp=0\u0026st=920\u0026sa=1767424573652 HTTP/1.1\r\nHost: prd.jwpltx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 03 Jan 2026 07:16:14 GMT\r\nserver: nginx\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d9ef81045d0cf909bd3143957da09138.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: ejBj_GsBwMgG0GlKvagJaGJ0GZbORl28fU4fhP5fSKnndv-D7Vj-xA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":14,"connect":29,"send":0,"wait":128,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/930846/177cf681e77130008beac264ade264940dfe8cff.mp4","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/930846/177cf681e77130008beac264ade264940dfe8cff.mp4 HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Sat, 03 Jan 2026 07:16:14 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 25665\r\nlast-modified: Tue, 12 Aug 2025 15:26:50 GMT\r\netag: \"689b5d3a-6441\"\r\nexpires: Wed, 12 Aug 2026 16:55:19 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap01-sec02-prg1-1\r\nx-77-nzt: EwwBX63NDQH3oU69AAwBuUwKAQH3ogEAAAwBJRPCVwG3BAAAAA\r\nx-77-nzt-ray: 2a494a154932a52a63c258694a040a29\r\nx-77-cache: HIT\r\nx-77-age: 12406433\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 0-25664/25665\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":25665,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"4aa5ceff6add2111fab878b733414587","sha1":"177cf681e77130008beac264ade264940dfe8cff","sha256":"6b26f8250c3330b44cbb5c36a880ba22a8465212fc356fcf092a99a0b04f6b67","sha512":"69bd63c16d3bc2cffb13f04abd7e45ed6da81d0ed0309d03884e0ffdacdf53d3f6b145de5f50e6ac20cd5002303a22401d77f7987d923cda44532c359cef4867","ssdeep":"384:hxW21vIzi0P1UcLbqWJzDReLCRFyO+ql0xG+AYhRSlQLaJEJatOcndIT7:LWU0im1q+zDILCPt+ql0xUYhR4YaU","tlshash":"78b2e0fcbf7a0a22f3c193780ae82e0ed716d59641b532af666357403e1ed742c9144c","first_seen":"2025-08-18T14:29:36.771057Z","last_seen":"2026-01-07T06:46:51.427448Z","times_seen":155,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/930846/1ed93279bc4a72d8df48f896a8ad74dcf1f475e6.gif","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/930846/1ed93279bc4a72d8df48f896a8ad74dcf1f475e6.gif HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 07:16:14 GMT\r\ncontent-type: image/gif\r\ncontent-length: 53650\r\nlast-modified: Fri, 14 Mar 2025 10:57:07 GMT\r\netag: \"67d40b83-d192\"\r\nexpires: Wed, 12 Aug 2026 15:28:20 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap01-sec02-prg1-1\r\nx-77-nzt: EwwBX63NDQH3lTa9AAwBuUwKEwH31RgAAAwBJRPCNAG3QBUAAA\r\nx-77-nzt-ray: 2a494a154932a52a63c258691d227534\r\nx-77-cache: HIT\r\nx-77-age: 12400277\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":53650,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 250","md5":"395291289993729df764da584971064a","sha1":"1ed93279bc4a72d8df48f896a8ad74dcf1f475e6","sha256":"ac555885154f5624d9b1cc59ff9ebb337404c3a40c331a8ef0a7816405a0ada0","sha512":"683042ceac39dda037eb6482d79f9bb3fbe83d8659640590611d536b389d7df1fb0525c6f2c774395d15445d86f68d2a32f74767e930a7bbc921ed4ce17b0d26","ssdeep":"1536:mYZostUikilwrT70UF585EA69B3wPlXv4oMQzkMlnCIZDtK:tmitlwrA5EtdwR4cbnH0","tlshash":"4b3301d314e0c0bedaf71cf0ac7d5cd76c3215e2a08d52313bb49639ba6012e55dae94","first_seen":"2025-11-21T22:12:55.826374Z","last_seen":"2026-01-04T21:57:45.343034Z","times_seen":68,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prd.jwpltx.com/v1/jwplayer6/ping.gif?h=1815485217\u0026e=ana\u0026n=7707302236796870\u0026aid=GCCG\u0026emi=1lruwan1mwwj\u0026id=Instream\u0026pli=1gezfp11yk2n\u0026pv=8.28.0\u0026tv=4.0.5\u0026sa=1767424583377","fqdn":"prd.jwpltx.com","domain":"jwpltx.com","tld":"com"},"ip":{"addr":"108.157.229.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:23.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwpltx.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 12 Aug 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E8:9B:D4:42:32:9F:5E:14:C3:36:B5:09:FC:A2:0B:37:DF:D5:E2:D3","sha256":"D1:64:5C:F3:5A:AF:D7:5F:2E:91:2F:C7:B1:E4:F2:91:3C:5A:1E:B9:C2:E9:10:17:7E:59:CF:EC:E6:A0:80:5D"}}},"request":{"raw":"GET /v1/jwplayer6/ping.gif?h=1815485217\u0026e=ana\u0026n=7707302236796870\u0026aid=GCCG\u0026emi=1lruwan1mwwj\u0026id=Instream\u0026pli=1gezfp11yk2n\u0026pv=8.28.0\u0026tv=4.0.5\u0026sa=1767424583377 HTTP/1.1\r\nHost: prd.jwpltx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 03 Jan 2026 07:16:23 GMT\r\nserver: nginx\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d9ef81045d0cf909bd3143957da09138.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: iEDKJLohYBAkwVFHNZQgj-Gmhw7ovHbS4wvTsrVlHOE53dB6YlClqg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.pemsrv.com/popunder1000.js","fqdn":"a.pemsrv.com","domain":"pemsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:10.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pemsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Oct 2025 14:38:47 GMT","end":"Sat, 17 Jan 2026 14:38:46 GMT"},"fingerprint":{"sha1":"16:DB:C0:84:B9:67:99:32:B2:65:B9:B4:19:A3:A4:E7:78:E9:46:B2","sha256":"C4:03:5E:C5:AB:57:86:05:02:9F:9E:F3:BD:1B:01:5E:C2:F0:0F:F0:14:40:3E:FF:68:BC:99:E6:3B:D1:2A:F5"}}},"request":{"raw":"GET /popunder1000.js HTTP/1.1\r\nHost: a.pemsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 07:16:10 GMT\r\ncontent-type: application/javascript\r\netag: W/\"a8b5185c6e336f90988c17b6ae0\"\r\nexpires: Wed, 17 Dec 2025 13:23:59 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH31icAAAwBuUwKCQH3KAAAAAwBJRPCVwG3mQAAAA\r\nx-77-nzt-ray: 2a494a15b75839195fc258699b122a1d\r\nx-77-cache: HIT\r\nx-77-age: 10198\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":122357,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"58eeac519be6ceb7f233b62fedfdf016","sha1":"a8b5185c6e336f90988c17b6ae0d3baf33019177","sha256":"b0d0cb74d537af4c1b83a9d78074cd9bca9b9f3bde3aad75ec4d55b3f1095190","sha512":"9ebaefaf8755f013dd4039606d27392cd58e3b0abe895b4a5dcbdcdcb9e9473667f27387090c9eb50cd8d234baa8a52e3ae24d488ccc424e27eef4ad4d9382a5","ssdeep":"3072:drCqGR9VdpPtCgzTNiQ4n8701l21bMpSmu:XGjVdhdQQOe+p5u","tlshash":"66c35140210748e921e2d67e956fb0993c24a823f5e9cda76c05e7c1f8dec99069bdf3","first_seen":"2025-12-09T14:42:47.636044Z","last_seen":"2026-01-07T12:59:27.51417Z","times_seen":212,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/player/jwplayer/jwplayer.js","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:11.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/player/jwplayer/jwplayer.js HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/upload/player/embed.html\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night; adb_user=true; adb_user_ts=1767424570743; _ga_9CBDTHEVHY=GS2.1.s1767424570$o1$g0$t1767424570$j60$l0$h0; _ga=GA1.1.433107323.1767424571; r=c3RyaW5n; __suvt=707aba6a4b81d92b9e7621f7610e7358; cf_clearance=ee2IjbD4qb1dRrSjfyOFko5FrCPqhl0RDUznSn.AvUI-1767424571-1.2.1.1-hvznDDyyVvd7.wnrg1aJYp.frzz07cclj941BtpzURg5.YGF5CyjdB7yAk5g4gtk0A.JXOyCY97G.pECxoPOIZ4osPHLOi_cKKO8ebAHfbbmKlsov3643ruVyoFlVePgBQwrK10aDIQHFxoe3iF5boFI0VKtZeYBq50jdTLR7BbF8UDhjUXZQreT4Bu1B4kpMshaXRBPz6NkqESmbRxIxB0eFx4_qXPp6uZHVpeSEMA\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 31 Jul 2024 16:56:10 GMT\r\nvary: Accept-Encoding\r\netag: \"66aa6caa-1ab86\"\r\nexpires: Sat, 03 Jan 2026 18:00:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 4544\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fSd093rXcY2PBYcS9sZ2MRYFx80kN3PgcFcKKGtcW15p%2BGhRbM%2FYEI%2BOgr15bRPAl%2FvzpBPyONAZy0T7aqBAYmDqhJKrzbM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b5952b1456c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109446,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65144)","md5":"6e5c94c322f1ed5f37be56c1bc238e82","sha1":"f6551ac521a2a3c69c8e7ee3ae3b3ab89f9d6217","sha256":"d44d79b928de5d70dce3be8a2f4e5fd40b958159a2a26b1e596a932e28b89975","sha512":"ee57f923459ab5b39553d260a014d6af902a2e1d92254e1f09d699d6f3a1b0f3a0ad80e85ae649c8b0e79154bfd45bcc5b55803161d93808bce5673396a45f21","ssdeep":"1536:B0rFRlUxyv0CcKnKqkf1QiYKDjAPkMUtbKSrRo1gBUSPgGSP3ECTP+MLdGm/Ggd8:BCvxK91ZauoiUB+MLdGX","tlshash":"c6b309e531c2b4e603e624daa07a4041f23a0945380dd5a4fa6cede63d6b947b177fbc","first_seen":"2023-11-18T19:26:42Z","last_seen":"2026-01-15T03:44:34.886381Z","times_seen":62,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/vast.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:12.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.28.0/vast.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=86400, immutable\r\nlast-modified: Tue, 22 Aug 2023 18:19:15 GMT\r\netag: \"b0deaafb5318980de8c2ee695b76c710\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 03 Jan 2026 07:16:12 GMT\r\nage: 67295\r\nx-served-by: cache-lga21959-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 128, 3\r\nx-timer: S1767424573.837462,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 29522\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":104600,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b0deaafb5318980de8c2ee695b76c710","sha1":"5a3734828b24cac1e1cae1645662b3c9dc26cf82","sha256":"cd51410290d2266cda49882fe9d3d5c67aa9bc5b2c3551c7a5fd9e66cfb40908","sha512":"637b3da699f5ba20b0b2a4e900ffee7b74ae8d9eacbe00a48539454125991172e2c09e4eff00f4e8b95a9a700a48cacc235ad55ac7bf01ca2036fc70150c0891","ssdeep":"1536:ulAE+jE0HEekQmIWTuDkjlOYx1sbRuF5V0U2hw2ubBkrzIjpiIPYqdsrVpQRwOaz:uJ+jEQwjlOcSNSvezkyVpeFamsH","tlshash":"c1a308962395e53246e484e960300242b3350a0f7c0a82acf57dfdef5d5ea4b76baf74","first_seen":"2023-09-16T05:27:40Z","last_seen":"2026-02-25T20:14:13.349587Z","times_seen":58,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":40,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwplayer.core.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:12.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.28.0/jwplayer.core.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, immutable\r\nlast-modified: Tue, 22 Aug 2023 18:19:08 GMT\r\netag: \"34de47681547f88d2a251419d61d4a2d\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 03 Jan 2026 07:16:12 GMT\r\nage: 1390167\r\nx-served-by: cache-lga21956-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 76, 8\r\nx-timer: S1767424573.846181,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 40476\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":143406,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65143)","md5":"34de47681547f88d2a251419d61d4a2d","sha1":"e9c03590ad2eb86eeee8b0032f345fbeb32bc4c1","sha256":"5a8861552d8484bac63cb929ef4b4e9f2f76726aef84032c76a75b76da4e7ddc","sha512":"96c8659af1758ddc35ee64cf835f983cddb190d2dff7884b86dd259faab6d824c3330d04f2b056f77989be023b1703c9e0e339ce805c0ec480812d2988c305ea","ssdeep":"3072:B5ozmmILBerJhsy7v22m79sTkvpkHkfeKJyuaU:X7DBerJh/aLLkEfPJn","tlshash":"45e33b753181623651da93da72674201a33a45897406c7acff2cedea1c3e88771f6fb8","first_seen":"2025-10-07T08:25:20.374415Z","last_seen":"2026-02-25T20:14:13.377962Z","times_seen":40,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/930846/bc718cc2686608575603d725ff901ace5270dfdb.gif","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/930846/bc718cc2686608575603d725ff901ace5270dfdb.gif HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 07:16:14 GMT\r\ncontent-type: image/gif\r\ncontent-length: 158682\r\nlast-modified: Tue, 12 Aug 2025 15:26:50 GMT\r\netag: \"689b5d3a-26bda\"\r\nexpires: Wed, 12 Aug 2026 16:46:18 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap02-sec01-prg1-1\r\nx-77-nzt: EwwBX63NDQH33UG9AAwBuUwKDAH3jQ0AAAwBnJIhJwG3+gIAAA\r\nx-77-nzt-ray: 2a494a154932a52a63c258690d634f2e\r\nx-77-cache: HIT\r\nx-77-age: 12403165\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":158682,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 250","md5":"427c479f2c7c3fcc0e6a98a2df4a3202","sha1":"bc718cc2686608575603d725ff901ace5270dfdb","sha256":"d06fa372e57aec38d9076372b9c7aad45e1c8cb40402ab09d47b17195d426fa8","sha512":"a65e1c66ba246b74a7156a94da27fe8a9494975ec62bd31e65966c946791aaee37b75a1d6346b9a3f62e13047d3d3a7144afe6585c6c6b2c944fb0d4820261f6","ssdeep":"3072:142s2ovwsUH5Mq6MCUo4DPSIPiSdu742s2vsUH5rq6MCUo4XPgITiSYug42s2s:1lscsUZMfMCUo4P47lsysUZrfMCUo45P","tlshash":"71f302bac1dc4b5d70fc64b5e5065ac4846d8d899bfd58a6b22dfc63ef22423c738026","first_seen":"2025-11-21T22:12:55.811122Z","last_seen":"2026-01-07T06:46:51.414752Z","times_seen":73,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/v1/api.php","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"POST /v1/api.php HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 480\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nCookie: __uvt=s%3A32%3A%226b4615f583ad7a61a3b7d7f72c3b8fb9%22%3B; c-tag=%7B%22tag-video%22%3A%22v6%7C%7CNOR%7C5764770%7C126691254%7C277106%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C6b4615f583ad7a61a3b7d7f72c3b8fb9%7Cfedf893c02a58d3f8f0c78e77b16b788%7C0%7Chqfap.com%7C%7C%7C20%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1767424571%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C2%7C0%7C0%7Cs.magsrv.com%7C%7C%7C%7Chqfap.com%7C0%7C3071d0a2c5cc3c2a05a9136bfa6b5f33%7Cok%22%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":480,"data":"{\"user\":{\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en-US\",\"referer\":\"https://hqfap.com/upload/player/embed.html\",\"consumer\":\"ad-provider\",\"gdpr\":{\"gdpr\":0},\"screen_resolution\":\"1280x1024\",\"window_orientation\":\"landscape\",\"cookies\":[{\"name\":\"__suvt\",\"value\":\"707aba6a4b81d92b9e7621f7610e7358\"}],\"scr_info\":\"YXN5bmN8fDM%3D\"},\"zones\":[{\"custom_targeting\":{},\"id\":5817802,\"extra_params\":{\"first_request\":true,\"zone_type\":2}}]}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 07:16:14 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://hqfap.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Authorization, Content-Type\r\nAccess-Control-Request-Method: POST\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2288,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d1631137cd12c4860bba183138b43047","sha1":"b60f19eabd21ddec2930f8158e5f3391121a55be","sha256":"448833fb966125772c5691cca1e2d4032059d133c20b14973346d9bb53adbeab","sha512":"3247ffeb1903f53912560908e7868ee04754d24ee2673f6ae380aa6ad6f2133fda929bac6888670adc4f0986317ff14bec3f1674a631e8f9356315a1146280f2","ssdeep":"","tlshash":"2d41d8b939d008bde7e0a7ec0f0d78485d1d39878a855cd1630fd8d8d93e92c2990b1d","first_seen":"2026-01-03T07:17:14.593369Z","last_seen":"2026-01-03T07:17:14.593369Z","times_seen":1,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/player/jwplayer/jwplayer.js","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:11.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/player/jwplayer/jwplayer.js HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/upload/player/embed.html\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night; adb_user=true; adb_user_ts=1767424570743; _ga_9CBDTHEVHY=GS2.1.s1767424570$o1$g0$t1767424570$j60$l0$h0; _ga=GA1.1.433107323.1767424571; r=c3RyaW5n; __suvt=707aba6a4b81d92b9e7621f7610e7358; cf_clearance=ee2IjbD4qb1dRrSjfyOFko5FrCPqhl0RDUznSn.AvUI-1767424571-1.2.1.1-hvznDDyyVvd7.wnrg1aJYp.frzz07cclj941BtpzURg5.YGF5CyjdB7yAk5g4gtk0A.JXOyCY97G.pECxoPOIZ4osPHLOi_cKKO8ebAHfbbmKlsov3643ruVyoFlVePgBQwrK10aDIQHFxoe3iF5boFI0VKtZeYBq50jdTLR7BbF8UDhjUXZQreT4Bu1B4kpMshaXRBPz6NkqESmbRxIxB0eFx4_qXPp6uZHVpeSEMA\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 31 Jul 2024 16:56:10 GMT\r\nvary: Accept-Encoding\r\netag: \"66aa6caa-1ab86\"\r\nexpires: Sat, 03 Jan 2026 18:00:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 4544\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hA0tfBs%2B%2F1zthKzJ8K4QQsxVw%2BArz8FKPuEndpRVfQGb1i%2FMX5V4vTobgpZsImku9NygaNM%2Bl1kX86vCX7NbG5GfknejrdE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b594db1156c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109446,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65144)","md5":"6e5c94c322f1ed5f37be56c1bc238e82","sha1":"f6551ac521a2a3c69c8e7ee3ae3b3ab89f9d6217","sha256":"d44d79b928de5d70dce3be8a2f4e5fd40b958159a2a26b1e596a932e28b89975","sha512":"ee57f923459ab5b39553d260a014d6af902a2e1d92254e1f09d699d6f3a1b0f3a0ad80e85ae649c8b0e79154bfd45bcc5b55803161d93808bce5673396a45f21","ssdeep":"1536:B0rFRlUxyv0CcKnKqkf1QiYKDjAPkMUtbKSrRo1gBUSPgGSP3ECTP+MLdGm/Ggd8:BCvxK91ZauoiUB+MLdGX","tlshash":"c6b309e531c2b4e603e624daa07a4041f23a0945380dd5a4fa6cede63d6b947b177fbc","first_seen":"2023-11-18T19:26:42Z","last_seen":"2026-01-15T03:44:34.886381Z","times_seen":62,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/player/jwplayer/jwplayer.js","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:11.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/player/jwplayer/jwplayer.js HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/upload/player/embed.html\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night; adb_user=true; adb_user_ts=1767424570743; _ga_9CBDTHEVHY=GS2.1.s1767424570$o1$g0$t1767424570$j60$l0$h0; _ga=GA1.1.433107323.1767424571; r=c3RyaW5n; __suvt=707aba6a4b81d92b9e7621f7610e7358; cf_clearance=ee2IjbD4qb1dRrSjfyOFko5FrCPqhl0RDUznSn.AvUI-1767424571-1.2.1.1-hvznDDyyVvd7.wnrg1aJYp.frzz07cclj941BtpzURg5.YGF5CyjdB7yAk5g4gtk0A.JXOyCY97G.pECxoPOIZ4osPHLOi_cKKO8ebAHfbbmKlsov3643ruVyoFlVePgBQwrK10aDIQHFxoe3iF5boFI0VKtZeYBq50jdTLR7BbF8UDhjUXZQreT4Bu1B4kpMshaXRBPz6NkqESmbRxIxB0eFx4_qXPp6uZHVpeSEMA\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 31 Jul 2024 16:56:10 GMT\r\nvary: Accept-Encoding\r\netag: \"66aa6caa-1ab86\"\r\nexpires: Sat, 03 Jan 2026 18:00:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 4544\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yw3lI2jPWh8IuZKtMJF91qXZZLi1BzTWumtpYauu9p11z4bdmhn%2B978HRXLarFVH6pIDdd%2FCPSCdRGoskynzJSy%2F8F%2BQNl8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b5951b1356c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109446,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65144)","md5":"6e5c94c322f1ed5f37be56c1bc238e82","sha1":"f6551ac521a2a3c69c8e7ee3ae3b3ab89f9d6217","sha256":"d44d79b928de5d70dce3be8a2f4e5fd40b958159a2a26b1e596a932e28b89975","sha512":"ee57f923459ab5b39553d260a014d6af902a2e1d92254e1f09d699d6f3a1b0f3a0ad80e85ae649c8b0e79154bfd45bcc5b55803161d93808bce5673396a45f21","ssdeep":"1536:B0rFRlUxyv0CcKnKqkf1QiYKDjAPkMUtbKSrRo1gBUSPgGSP3ECTP+MLdGm/Ggd8:BCvxK91ZauoiUB+MLdGX","tlshash":"c6b309e531c2b4e603e624daa07a4041f23a0945380dd5a4fa6cede63d6b947b177fbc","first_seen":"2023-11-18T19:26:42Z","last_seen":"2026-01-15T03:44:34.886381Z","times_seen":62,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/vast.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:12.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.28.0/vast.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=86400, immutable\r\nlast-modified: Tue, 22 Aug 2023 18:19:15 GMT\r\netag: \"b0deaafb5318980de8c2ee695b76c710\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 03 Jan 2026 07:16:12 GMT\r\nage: 67295\r\nx-served-by: cache-lga21959-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 128, 7\r\nx-timer: S1767424573.944098,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 29522\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":104600,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b0deaafb5318980de8c2ee695b76c710","sha1":"5a3734828b24cac1e1cae1645662b3c9dc26cf82","sha256":"cd51410290d2266cda49882fe9d3d5c67aa9bc5b2c3551c7a5fd9e66cfb40908","sha512":"637b3da699f5ba20b0b2a4e900ffee7b74ae8d9eacbe00a48539454125991172e2c09e4eff00f4e8b95a9a700a48cacc235ad55ac7bf01ca2036fc70150c0891","ssdeep":"1536:ulAE+jE0HEekQmIWTuDkjlOYx1sbRuF5V0U2hw2ubBkrzIjpiIPYqdsrVpQRwOaz:uJ+jEQwjlOcSNSvezkyVpeFamsH","tlshash":"c1a308962395e53246e484e960300242b3350a0f7c0a82acf57dfdef5d5ea4b76baf74","first_seen":"2023-09-16T05:27:40Z","last_seen":"2026-02-25T20:14:13.349587Z","times_seen":58,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":14,"receive":1,"ssl":198},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwplayer.controls.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.28.0/jwplayer.controls.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, immutable\r\nlast-modified: Tue, 22 Aug 2023 18:19:07 GMT\r\netag: \"1fde4fff33b8be6ebe2530808273fe7b\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 03 Jan 2026 07:16:14 GMT\r\nage: 1388015\r\nx-served-by: cache-lga21946-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 3, 219\r\nx-timer: S1767424574.185015,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 45480\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":193500,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65143)","md5":"1fde4fff33b8be6ebe2530808273fe7b","sha1":"0810766277301777c5fd5fc031040fc5cc315df5","sha256":"ef7d843e4bd08aceacb89d07e82add18b04e2b2a1b4ddb0784c1573374ec9448","sha512":"7aea8e374962935b5a74d86e3d718b2ce0825117c0a1fd3f07294345186e9f28eea3480f04bd190ad4dfed9cccf84c4d07440770ee4f2ecdeb0d185f9055d28a","ssdeep":"1536:BCUKr35YneqmSoQQD/5YIuhhAuUkJrPyoyjQ7ru+7AHYzwC0suZrqlHdDPjmOoRR:B+r35Yer5Yk7REBvB5sYgwmf8q","tlshash":"b9140922614256349ae6c1daa7504b04f73a8141f652deecfd7dedcc849e9ca30fa7b0","first_seen":"2025-10-07T08:25:20.241872Z","last_seen":"2026-02-25T20:14:13.37576Z","times_seen":40,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/player/plugins/ads/ads.min.js?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/player/plugins/ads/ads.min.js?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 29 Sep 2017 00:42:12 GMT\r\nvary: Accept-Encoding\r\netag: \"59cd96e4-20e5\"\r\nexpires: Sat, 03 Jan 2026 17:46:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 5375\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KytkA%2BQdioBMmzNlSKO8FKsKbXHxRpGVEdMLJvbADS%2FmiM9g5Fvrbb7bQGF4vloRoae3FFGgv3YhOr%2BrpvVXsU6Fk%2Bbjnn8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b582caaf56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8421,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8151)","md5":"783ba6386351cac3f48f7df356081fe7","sha1":"4b4935b4c7ef6a694f47226ea818689a022d46fb","sha256":"e86a765459ef9893dae48ad85c2c6232131b9db9316784f56b28709a71d7ea76","sha512":"2d2b014b88f169adac3d0342c2131f25267a276a345075987417ffe782100137957ad24097795a6e8c23145bed4609dcf6d2e80601c387e7c6301fc1da9d3c41","ssdeep":"192:UqUA9S9/WaypZLyw/yFio7J0feypH5zHubwxCRiS4AymyiNy23yCNe+MybJlM:UaiyPyKyXyHibw1S4AymyiNy23y4pMyU","tlshash":"3f027091530d5772a2d7a8ffa10d535a447287afe01c44a09c36efce57accc241aeea6","first_seen":"2023-03-07T01:31:54Z","last_seen":"2026-04-03T15:29:14.569538Z","times_seen":198,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.pemsrv.com/popunder1000.js","fqdn":"a.pemsrv.com","domain":"pemsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:09.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pemsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Oct 2025 14:38:47 GMT","end":"Sat, 17 Jan 2026 14:38:46 GMT"},"fingerprint":{"sha1":"16:DB:C0:84:B9:67:99:32:B2:65:B9:B4:19:A3:A4:E7:78:E9:46:B2","sha256":"C4:03:5E:C5:AB:57:86:05:02:9F:9E:F3:BD:1B:01:5E:C2:F0:0F:F0:14:40:3E:FF:68:BC:99:E6:3B:D1:2A:F5"}}},"request":{"raw":"GET /popunder1000.js HTTP/1.1\r\nHost: a.pemsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 07:16:09 GMT\r\ncontent-type: application/javascript\r\netag: W/\"a8b5185c6e336f90988c17b6ae0\"\r\nexpires: Wed, 17 Dec 2025 13:23:59 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH31ScAAAwBuUwKCQH3KAAAAAwBJRPCVwG3mQAAAA\r\nx-77-nzt-ray: 2a494a15b75839195ec25869f78bf01f\r\nx-77-cache: HIT\r\nx-77-age: 10197\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":122357,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"58eeac519be6ceb7f233b62fedfdf016","sha1":"a8b5185c6e336f90988c17b6ae0d3baf33019177","sha256":"b0d0cb74d537af4c1b83a9d78074cd9bca9b9f3bde3aad75ec4d55b3f1095190","sha512":"9ebaefaf8755f013dd4039606d27392cd58e3b0abe895b4a5dcbdcdcb9e9473667f27387090c9eb50cd8d234baa8a52e3ae24d488ccc424e27eef4ad4d9382a5","ssdeep":"3072:drCqGR9VdpPtCgzTNiQ4n8701l21bMpSmu:XGjVdhdQQOe+p5u","tlshash":"66c35140210748e921e2d67e956fb0993c24a823f5e9cda76c05e7c1f8dec99069bdf3","first_seen":"2025-12-09T14:42:47.636044Z","last_seen":"2026-01-07T12:59:27.51417Z","times_seen":212,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6.adsco.re/","fqdn":"6.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.16.83.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:11.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 6.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 07:16:11 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 45\r\ncf-ray: 9b80b5962bd976ef-OSL\r\naccess-control-allow-origin: https://hqfap.com\r\ncache-control: private, max-age=300, immutable, stale-if-error=300, stale-while-revalidate=300\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\naccess-control-max-age: 2592000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":11,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/provider.html5.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:12.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.28.0/provider.html5.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, immutable\r\nlast-modified: Tue, 22 Aug 2023 18:19:11 GMT\r\netag: \"e8e42a735322eb7478a82bf49c357638\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 03 Jan 2026 07:16:12 GMT\r\nage: 2133835\r\nx-served-by: cache-lga21981-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 0, 7\r\nx-timer: S1767424573.839486,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 14698\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":44252,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (43859)","md5":"e8e42a735322eb7478a82bf49c357638","sha1":"5ef024f2e798985043d7ecb8bf1752cffeb70e55","sha256":"f18d94cc548a0d5e9c36da9f47164f4df4fbd903a9cf0dc8e3a4545622365ce7","sha512":"6c8d8c6fd93db8ab4d8e5dbf25edc0aa244fb9eaff22201931bc467e87061770ca2e85cb7f8db536143b5766020dc7f35b1394853e4c9e0c48bd40bd15247ebd","ssdeep":"768:B2Smc7dAD/v018QK1XCYClPhaiDXIj9ZvDry8wesUukSJLdXhRwTi++2XzPAjrCW:BnG/v01qBBgJOnqhfwXzpIME9Dfm50HJ","tlshash":"4113f89633d4b433c6d296c261750311533e5e5a7848c4acfa299ecb0d5ac8770fabf9","first_seen":"2025-10-07T08:25:20.304883Z","last_seen":"2026-02-25T20:14:13.330081Z","times_seen":40,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prd.jwpltx.com/v1/jwplayer6/ping.gif?h=87856825\u0026e=ana\u0026n=7103905329657200\u0026aid=GCCG\u0026emi=1yh78s31i4y2\u0026id=Instream\u0026pli=1ptx20j18oo6\u0026pv=8.28.0\u0026tv=4.0.5\u0026sa=1767424583719","fqdn":"prd.jwpltx.com","domain":"jwpltx.com","tld":"com"},"ip":{"addr":"108.157.229.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:23.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwpltx.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 12 Aug 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E8:9B:D4:42:32:9F:5E:14:C3:36:B5:09:FC:A2:0B:37:DF:D5:E2:D3","sha256":"D1:64:5C:F3:5A:AF:D7:5F:2E:91:2F:C7:B1:E4:F2:91:3C:5A:1E:B9:C2:E9:10:17:7E:59:CF:EC:E6:A0:80:5D"}}},"request":{"raw":"GET /v1/jwplayer6/ping.gif?h=87856825\u0026e=ana\u0026n=7103905329657200\u0026aid=GCCG\u0026emi=1yh78s31i4y2\u0026id=Instream\u0026pli=1ptx20j18oo6\u0026pv=8.28.0\u0026tv=4.0.5\u0026sa=1767424583719 HTTP/1.1\r\nHost: prd.jwpltx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 03 Jan 2026 07:16:23 GMT\r\nserver: nginx\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d9ef81045d0cf909bd3143957da09138.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: pReCQlgUIZWHEwU53FYjNErBVezc8vsrAhpsWY8MGWgFk6i0kEfgIg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/js/jquery.form.min.js?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/js/jquery.form.min.js?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Aug 2015 18:42:16 GMT\r\nvary: Accept-Encoding\r\netag: \"55bfb608-3b90\"\r\nexpires: Sat, 03 Jan 2026 17:46:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 5375\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cNDLzxrXQ4DgdWaO5JWJpSa%2Fm69DjdLk1WM7ah4SWzHky2ccjTQoaB0Di63reSkLb5ZOAF6CE9b6KsHtt2N2ekkOYaxV7FQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b5828a9856c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15248,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14900)","md5":"f448c593c242d134e9733a84c7a4d26c","sha1":"374aa1f8db17575b0e35eabc46ad82062e09106c","sha256":"c90f0e501d2948fbc2b61bffd654fa4ab64741fd48923782419eeb14d3816fb8","sha512":"de133f9ff911db26dd8df4adbe2528fe80722397082b5880cb9d4d930872d71168c4e0a5e95f04b1b5b88da558fe5f04d2f83a649a791ecfaf87d751c6335e2b","ssdeep":"384:spbuKdl8246ZBPw0+vN9FpziTpqd+KeMnQ3bYoZR94kozOE0mZ7oebm6iEII:3UzvPw0+vPziVqdPuj4kcOE0mB9","tlshash":"3b620ae5328050721be674d5896f4147a231a92a054ec0a0ba6cccf51efcd85b173fbd","first_seen":"2023-03-07T01:02:55Z","last_seen":"2026-04-04T02:49:46.620096Z","times_seen":6923,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/cdn-cgi/challenge-platform/h/g/jsd/oneshot/d39f91d70ce1/0.11154532606085395:1767421454:WCbs_3tRiLupqBpZfKnMiduPcsuo_jmBREgc5L3QoBo/9b80b57f6a2d56a2","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:11.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/d39f91d70ce1/0.11154532606085395:1767421454:WCbs_3tRiLupqBpZfKnMiduPcsuo_jmBREgc5L3QoBo/9b80b57f6a2d56a2 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12172\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night; adb_user=true; adb_user_ts=1767424570743; _ga_9CBDTHEVHY=GS2.1.s1767424570$o1$g0$t1767424570$j60$l0$h0; _ga=GA1.1.433107323.1767424571\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12172,"data":"gady+AGxOr2CGCCqCqJKG$7q6qgOqgyG8G6odqhye82bqSJKK0wBl82$d7nq2yKcBqXxPy26qoXXVIqEZXUIqeIAyq2vq2RGrDj2J8Bt1Ok$+rxB2pPG0C-lE1qGKL76jh2jAq1C$Snkq2ortlEvFqlmGquvZeOk0-jGgd-dBhdAQCiAaC$9qYEeG+6kxzyqURJn256WqLb+TK+jq$bQq+jGKeXrqcup$$tq$LpfAuwdD1TLPuZjq$udq2jYaJ0JvIc8q6A5vkTt-ByqvRJrjeiqquE1Q2iqvrBqZumk1B3avCujqKudjuJt2qtgyV7-yvqGi0GAKSRrqq8EQ+GAB-GwuGCZGq2zDyG3EvhqqAarGJjK8EhqvorVAx8xjTWbpUbJvrEAO7WwNO$cLju2DwOOcxkOh5mOqdszot0VQqdBtF+1h6K7OGcrtWg1VdcEKcTsMPdvfo1qlehDqqrIAX5kFIaFveCWdsWjymDCoafpkN$CMZswHmkzoSYRMJrnJCyGA8UIwEOnAgtpwdlBUw2LdD6-We0GMC1x-GAQVD0yp71Hx+1sECOThIMn-GZBcKt1iwHoQt0-2v5g$YV8UJYwfsQ2Hw2Tg2Zt1u618T5cQqNvR$gifpUtgj1ODWoYR5HXVqWKGgsSqa-Dyz2y$39NQ2xLFfTa6dWk1x5G30SA+f92kRoKUb-1qRqDbFexV125owbN-kLBvlecDDKgXDF8kjrl+ojWWVtcm6geguFuUwmP6vbyLVQaoVuTfIbBhIYdGBqlxH+eGe$ek$hAlYgLtlZvB9vw6yj2rKju2x0xoOjB3geeC1+YCqjm91$n-2mxBpLqOt2qeRhb-6-qJqajjsJ9B1h2rYK-YQvyGva8yJAOljJJaYKwYdoayJQeBjvJrBiGevKgXjEj72q2A1lGGn8E9mG1Ahxh1qAp+2GOrGwmMri-2MsXmCIGeN-QrBvYHrGceOjc0y6lIvvaxh2GRD+ILpHhdtzlAklYei7vRriYPRZIwSeUppJJ-1hPA0G7pJxRhSjvsOBsxhRlj7vplIQDAtspe1tJUSxJruXTSkUS2yOH+6wHkt$setv2vQ5yvvMvLUtbvyvYAJXuCG$yNspEdPNHWQpObPpqeVRvkCGbyosea$e0GsldEj6OOWyuNjsY85hhYmxrx8j8hCo$val8Ct8OgAldYv2YOTL-mKaN0NMrJsRtPSwYQ8yjlGEA6xrDyggpSygrQuHjvs8J1eeHJawdx$8DzL1rmHdEAq78it5e6Lz5rguker0ljVJca02q7+mcq8tlPRl8BhzuyjGbDQ-2q8h3zOk8v2h6iEO9Xd2zrhBdoAte3pkfBXv1HvJPOa6jv2HHdnUuyiOmrq2mDJHkGzRh0eWzh2qKif2e15fseEmGASxZi2lMNijB$KbBYnN1D2j5uAG88iJ3nPq1i9li1h9ifw35tPVclJP$GOO7klMyBXY9vacaSHBmo$c7WjZc7s$zc71oaJBcUQDKIMUSG3atTpBqtonXa-pFz7qAMcerYMmD0MF2YUn2NHPTMjGFtF-qe8nOFeqc0Bjd2nGylyeyuMS35n79thwGBkOCawYUSqTGdqf8HlFzyQG6OrYc1qdxljOjSfJeWJj78Lx9Q1e+p5qqRSjrB2v22VYme9Yy7CkGo-dYj7hhyIYS$EJUOr1hhGVoczc$wIxuRo6Qu-$jdhrEmOoNyc6eAAcO$DrBxBo20hH-erSBjPzyQ5zwp8+j-qISZeCPxl7fBXvCiuYdK1ydrtwsxuzVJtyDY+bkVsu1Uz8DYqxso$8wBlq6ZjKORe8DkqisABD76kD8BmspLUc7IExLVOmOjVKADBOnsI7BdtK2whr6gg9GA3T9nByIEeuKtB1q+2q-PE$vD8Ltlj-TroTGpSovkUOoJYx8LMOAEeCqZGFSaIkweIKwBODbBIht8y9hwJYvsGEvydhTKboStS7I7G2hJORrNEpUzQSvUsT9By6BafIr$DmZy2jTzKs$iY2JEB-my2hdbGeTqmB3ebJd+aD9ItzdqgKAYmgvuKrtaShoRxoFjKW32WWxSnsnMVEzJq6D3va8is2AvUwuuK2h3DQtdUBIy1txhuERUX$6hhH8mIcwrjjxd-RjhppdsHnG3pLIpEoXd0XbyehzODyqUJCaplrIpE+I$80zqWiaqC5YOMnLIRHMEk$tEnoDEQCXMEPvUVe2yJCtTvrm6eHKmwnVx9bDKwh9YdOkEe5A6lU-c832RUxVqMtpDf8j6haaP6$0IHyVxRo1vv03Es0In5ypNyVuwyXFh7PwrYmKFA1Rf-b$8Orj+rpxSL$ICq+ThvOpilrkYOIk2YmtJdsBOyLnUwINyGUvrBLGw6sxOgiSzJcOvRd-nVsYUAL+cvEQbmb$cwQ682J5GiNcSstpfnDdEpLsemjaB2Rduq1qvkoQ+QjOAGbRjv6lgaZUdN$d7zwBJlJER5F$URXyZYmzLOGi0XEWjL6$8UAtyIWVQSSB0JrrgN6BGsxAQ1UhHCwf5HQJKr1OXYQYrAT7GgW$EqGYE$fC12fPjd7IvhhX2meAPxb11GWZxw8Jq8aNUD5GCaVjZj0IT9exiJUoUSEbmC0TmXrg0IImqeUj85slDqOioK6vhWMoA2cuHs5UUhlkZQ2IvOBTly6mv1qwoQ7ggJ0K$Y3pwOnLhj85BqgtEkmX7Rxi726DcTCCbZBuOVWaiuRtb80+eGO6wPnIpOBH$MConTrdb9C5sTMZj6mceCYeb1Pqrsa$dVOAd$h1VprwvM2Z0nL8EQhO-$UGjkA6cuWJKs3Q116RiPKAbMhQ$r$elMAdKRkRMyx-$Bv8Xdqfuz28lmcnHuOQWEVi1vazll9rp-A0eUWEDLng8vtLslvf5DY6l9Xj9y$YMYDagZK$NorrZ$TNu6SqOf3NSi28gkjiGCO9H5-aNy0AHqp9CtjAy1rb0IEmqaNOmB-rHyAtclHm9bxzEs6eleiqx9C-QoLag5wXeE$q0HAyjyCljv0rnVz+zrIIfBYnFNvu7Rh3chKzEpJ8FiWK1Bu3QcAlJQQ-t-CE-chOR1zvT68AmRCgTS+YfRKVlj-mPtURXqrVjk38tQSCjIAhs3OUgTMrS7cukycBIJuTd+pPDJXjiOMdHQLMLZprW26TDx9hGs0JQXeYzxzCTAchwe8nriF9nUyxsxhmtDX$z6$8eKrf5aHsLRrXc9tbhRq-p08KaLhyeTIYOpEU+Ns7RLXsV9ZuF1tC7Sel+mqYutOsRem9RV+jF+O+dXQ8jbOIJKQnPxdXb0GPSTmFKnZk+sFJ2xp5Ky8y73lrtCYPWH9SWfrKVZ9eFldruKcxoSbSJRG9Doly6WzxjbIxKaDtZKWEhIj3ZyK-UHm5jfe+KbY+qW8AlMp3UUwh3VyGBds8V8BZ-udilagcfJTkdCJzgn1vnks3QBnCN9trXqSa$mycjUpqYKj318+WMxJz2qYKl9bGfcXUwUY1ITcgt3$g6oq3DmU11gKTIG88tGsGBBig0dn9agATwhICOnlhNyrrCrD2AzRTbBBgFkSKGT6CGQDoIUdtiyGtAaZvbyUcOTiaqgbyuh53pQltVvyejOM3QBlG$G$Vy9mkJomBKotUYepGmUhelxfdNVnhAGX8jyPGBiBk68D3gU8UtqGq$c0K$2h9trCr9O7OK8BOJ3s2QOcgnvGTi3gOJyUz1hrtpTT2utLWokmTD8ei$3KehddxQm0KEcj3CjD9bKLij3dBMzwqeQ5gXksc+k9Vh969gKOm8xtouW3eJ8ai1VtaqkIm1kfVuOECy3aOFmEOA2nnAqc2QicgxzQjjA8ky3sAuTtLLoHdoyscwGOqGLUz8LUgxgY1u2ZO$9POBqJvKBnvjgiosBIAGVXOZdU1NypgdQ6vZouhvThAPagxf8l87GlkbkjWu3TzJUnQlvBU1h1kEgK3OtjB$GdCs89TqkQmcipo+LhWwynqRV929THGmC$3Hdv95VvAJhxCBD9gFoDnweXq53Ud8nvVFgjiS8GC5gnh3qQmFma2hk9QFxJDPz$eji$C5gKWxyoG-LNkVq0AKTptIGuO0dFdGCq3KkJc2hJGtGC8uCq3gU$KptDc3LgU5mQi3LxzOkza7EnCkzUn-qOay28BoW6xIt7DGEAGsGLnNLwVjikL-q1BFm$ewThq$ebvbcYCiDRtCLvG0hG8FgErGimnwGJquyJzReFm7UWjgdkOb1O9igjgU3wGW3HKGTiUBEbDQm1BFG0kQBFx6egjrtOqBV3GMQiqJeEhcCFEIqwLk3pGNrFh6nD8D3xm$vfhpqTrlLGtfEDE1CBIhA0zeIcEjg6hwGHqCXXC6UGO7DUWInOg0yjtVTNy2TFhBkJcFQ0DjGCavqSaJXz952imK3ODhdiIfKjkvUwqekYUwhmeQizTBIUzdyIVS3iK$X89eD8ExyZhrQjtSIjUwrgOzgQAWzpTCxb3eXJksrMelz-hGCmU1qJXhE0IoOQBGAXDmiJCVGoEDv0hOGZ3dWDha2p2Cr0ImL9kq20IsibGzjYKHA0X53f3Isjt6AucLmDIyVIXUnsXjxcXLiO8VGLWio3tEqHKLiWg$v22IAX8St1QzXB+s3jsgLgmUrSafoYxTLwytsHqMGVqVDzmREtaqxitkG6zImqkQ+a2$QhdwAvschInh2wtiOVcIn1IkoBq1BRG6clsFkgU$GfktsFTAmKLHqtIoEAz33lVRc1mE3pncng8lQ$E6+yEJOWe8BoaMg3LDC7tmI1zDOzm8I5rqraiXK7q5K9kIt8V6hfyvh2qIklgxoNof30G1O6XdVNd3sfQFzQT$WJVcaXWJpNgXeZKPkPsVmxypgkqQ3dvz+QB73jDvv2qVA-2jBEnrtd9EO9m5g-s+E3tyWCjOB0GwGRrvGe2m9KcGTMpb91Bvhmnrgdt7AQzxypGesqVcXFUT8BhiafUS8dIGVmT0A2xkGrSOtWWkESaPhxhjzatOG$A9WGT9hpy$q$+atYpxoqQYC8y6syDJy+kzDjpzz1snA0XxmJXFWmSaOwAedjyaEmSIaG3f8RR9pQAvtwTJRUcTzOWOowLnQhGwTFsNILSBBU8GLMjV3VqQ5io1hurQSrmHCKEFKbLAmcBOhvoH+BeynAzO5G+HDZdYSxge8lm79qQB5PKryZK-GQtfTYWfVAq23R8Z+uVzSBLf5uOrIVRDe0yhmwkhX7EXSInioroU8J+k+ioBpUAEVj3VTtqVGnXIRMLh3031rHG1q1ycyuSxhDKWS-SLB2rfWLiADIninVEys5gxhmARssLe8bG1Azz3Xgm5rhyqrygAGM2AITkyIhAXGiAfxfUHauyKp6vRd-cLInpEgfUroHEsOwLGTwzba0grLxyoWF9X9E2eRKVr5iErEQ+9CHCjydSHGYr2hgVBX1crs2DN9ieGn9p8S+2R8epy9batoP3Tqtof5JzApHKk8FODvntnDDkI3zn7xoXFVQpsyfQUxVKiTPR8yuBZi$EQDyomiQ2RqjWsnlQVqSadAzr73aLV2lE0k6825ZhxANEDWaEk+7EJC8BfDzTdW5fXV1rHTpkxUTpyIFmpHmcnh6n0pLSsYbdci8fO+j3BDvqIv0KZs1BoaWm0yCQRaX9Pycm9QN3in2AXWpAJa6k6L9ED8u5122G9o1lVcRqn2YpHTKXHqQR7UOQMUWceE9tQx0Im3jDqEinbhbyPhnrU8D3RHxc9ejcvG0lcxSV0XjBDDdB5ggoZStGBUlQJz3AqrOidmdjWl3HBGqfRdbktl-GmaJcPz+O8h2hdr3TuOflfymiMo+5FAZviaJINA7yMXyYC5URDvxmxHp5qXoSkRHRY5nmAfkhVG3GcrEsbxyXGYQvI2DShpZCl3$W59ok$9b9CXDXyxMsjVmainGT8VaV3eATgoq55W3LCXXXOthJ3q2qVsTDbxrtJqQDR+xmsiVp0XAQvnpqEQihNO1fe8U8E2de0mE2CHtlxXxy7rVVv9$X9AJ8D3$HXWvO$dVOSqAnHXpOpqHOFh99xenqic7n0+otPglYBXuEkHXrg1bdlN+rZGFC0X72JiLfPd7q327R0mYHQmPks+kslHAorgg8wT1yzYMicLGsqC68ULeCxl1lXJvG+NiJhX9RiGBHXqPs5+7NLmG5vtzQQ+NsXWbf6fDceuGT6AxoR+8xdjFNpT2q8lsqvf8a3DSE2DH+spbupfjg6$RsfoIYL5P+vWanjaYNv9ieR36tVGGCfUOfsgG3$5k5g$h5kgvsIH0TmpXUbhGTzUtzcm1GGNapHdoQvWsXpN9k6c6C2UB2TEYRx3s2nQNyuhY2GlDy6dfEUV3DmHQmAJJhF+ExNswHBXOLkHKYDHJ52E+IJhOgOtvEbgf9YAGJYWaWWN7+BxpIsBcVVmHIBX1+Ffx5pZbOR3+AN5-UkChnDcNH3UXQ1G2YXqZ58ODR1qByWx5rnERqYkPszVjiJ9IV6t$qUx6dsl$dlhbprg0h25WHaBUYCbuyZzyHpEOfp$vRDN$Gfq6Xsb5mMyjyZK8iy5wWPGn5ybxoN2jJf+S3TqSN9lrYucCYSaGgJUbT8X1VEqnyXG0pD3JYxUCHHYTb3o7JvrbRaZzth5Q-AfDnGXf5ioGRiG8IIxgK0ma9nePKgAhC7f7R-+HqlmAbnO1BcxPdrE3USzXHnuSN0XOIGOPsLkHWCbnZcgJWLqDkmUAqivYnch3lw2RU2D5EPLkgJUGYUzT6Bn-X8XY1rg$hjTbdmJa+DkSY$Gdpb2Rb+br6WnOSAz1JZLl8+5ZlHJwLeXGUhUmNzYcmA2d6LYEraf+DKRrxWzcrwR8bwsXkX8IvFhG3tqTfbJ8yHoZomcryXI+TOtTsnryuKJhpuB9NIhEGJwsDDvgDftVIl3jwPuy-ZyQ+xVkxhugfH-e+tEXX6UgpKmtmp9CZGJsBdXnGgkL6ySatj31JFm7$NVSZdWO82y68juDsof-yazkf05MoBpggcs0I0+n6FN-CMWw9xNeOPyxa8hPzVKGsKlh+L9JX2q7lXcaxPKUtL$qLWjRptoAOFJRsXRByMYqt-l2g1qFV+bmbCLrySZSfQUfcgUP$MCfmesDJ+27$WeNhLZx0pmqXU2IzkfNg-qsYo51oIu9BJ-66bnA7E6I05Pyvkr+$uhHepfvGGsai5dUK10D39f1w8h5SvGTOZruDqs+YT3M1OfvwkV2I0gaojJxWWOQicgxkbd8gWtiu7iUQFvXEz-Q3J+Yjoql6sSC$EpohGCwXK8nDcGvDJVtxSacB0GvGyQPdTHY6ObW-ZCg6FdsScvV63mgWN0pGu2M96QcYnlrQvlFh3Z8puh6CMXEbMeUWEXHXYXv9l$DkJXTgOtdoAQ$NjNWWBNqbhmJNin7zMzv99+q7IQs2iDwLORbFwF57BqoRMhvuZ6u3--bzA+hWSla6PatUu21Fy9PDm2nLxh++KMtCb5O5eI7gn0jUjwImS6UNvGRLGOApQmn5Nds2KDBymF-hx9DLR65rWF-Ledh9t1rXqr2KY-Cuk2VGUH7l-IeUz6dHdBO9o6qRY19OVGn65CulCabh+6zQDW6r1+SerOnCyCNu-hr8qwSCdjRaEe+tvyHc+KRGMvxcsyX6OgUJ$MsibtujNaGaTyEjDyvOEsh5qcoWYxtKZYljNxTysouuJ3erG5qk8xf7zwjWS1aqTyBj53Yq26KJqImCyX86dv7LpWe8aY6BicjhhgUdADyHsKdrIq2dgdecYBYwubjH2GakArjOdy9A$ikqh2e$AQrbOJ1EyaK7qAVIGqtiwmdyUpsii92y9DBdBwgYe6mqi2jRJd5Qge6vaOaahDO-Ive6lq1OGxSosYODeThha5rBdBQUwIDevOyDBmiy5OvjSaoDhzBNprIh+XWOArE9KQlo6Gqg2oG8R2qDfOjly8yB1ruxC9rbOsqsy8qe8RorYjT2lQMF8xso-uDLeQDi$Y8i7uYGAqcpm309sorBcFhmYgvU8$de9HhQfDRh58B966vwiEh17cdVmgDvgdah$BF9rcOkQz2IDKdGAd-LCD5G-h3CEaskrbO9Biqm-rNOD2RBcBkQ+9ddcCl1y5Kdi6hqd7dKKOjAJwX9lBNUotnbimi9JUe79K9sAnCirG7eR3YHGEV59hoBmuO+iYPioxZjbs-IIi56BjQKdd8-Bmwfv2yBrCqQDveqp11QQBd7mxANYEkLgy5D7bO$LkOQ9$i5B$FYLqzYDn7Cjarox1h6OYce78dCBE19cH-KyilreqVCs8IcaSdnrURKYblqQA9QicVcKD-+jaO68McuXrerIO$AE6KddeuLI6Y7qBbKd7Bi2q3e$OjixRe9o92glMh9Q2jarRYsVeVKgwWIvduw$Qq+qJxryM8UcleKyGm1j8I8$J-rA8aC1aEeQEJrnAvWk1kFdegAyZO0ihj-qDCVO-YGbOzOhqoeqQOayU2$h$sxZqxrHYTOmhW00qeUX2vJgo$FQvsY2IjjLOyiSicC7whvlYqIo7n2$QsbSlxGR1oaCe2Hg5Dim$dE83xx6lY2WiT1X8mmrweCK3KwQGBfbruy+Y5Gma2nYeOr6b5Ggkqb8tIr1Ypl5t-da2qQ0hzSBAAnqWqgylVOm8bB0$Bd0k8G6a2yWCp+j21r6YEhkxKh+RROVkro2jgF$3y2xB7-YEQEIaBdRpgzEEASv$oD8qe-7le2aqGqhyKCDLjoHHit6QBjjYNJDjd1iaYDD2liOOGJGex-JvA8Vlhy6tWdsneB+1+jqRi0qdmmq+CDItHKAmomLutZlcfYk+80D$edj$s89UJosS8zzsrmqCkNxhyKaGHujOl3VIWr--zoqu8UmTJ9oKAc+NH1qkLqEM2aqQOzEojERb++j2tL9IFilrUm29iyBQYdvqBbvYde16hsb2mQw+8BsoYQJYqqqoT9GcGCO5qePO3lpyeG$Ls9QAYbtqUm5AGweIZlDTEYwDn1cGJBY1K8hke5yAxPmPc2QdwBjhmG6yArCMXNlWEsOH+$yT+z8D$2Ty6f$+SW6sGUrFyjyBRDoD3STDtMtSdjcC2E1CG7tgekbC62OzVAhhxR+2PHqwphVgrldJyq7EVlKoDB2redOs6hGzjo1FQvpDMXFlYGntKdBzOsKxX6Bii3jB$CTe-amho8hq2JOsKSYLKltbpKNPBm7NJUR$lBPa2OeTs0Dc9YPdevnYWlzEftMYeoDO2GOTLhjgm0i-GXulBLJqum5t2LdsefAvqraMH5ceEfeIDB7rMeKEsEqihzdnKefTr2kLQxuq1yVQdLz2joA0GJGDyObsyHLjyBqyKRsdeUlMyhykQC8Oo2Vv$qpJcQ$y+xe72vKyoS9FReQOEqgUfj+jkwvclwO1x$y9Ku$5w9zL1xZCgvdb5vjnyIoXcUmsyKXdshYB1GDX-qvcqrALjSdbmuDdfr$y+qUdXjxbsfrul6qQwK3vb$1v8GbOSaUmYJKl-9qMGNbhNR6$9EsLiI3CqxTA6k+2J$BBofDgA8frCLxqQn5exYqx2EEnXBndqu$oj23JGgsnS9uTdfK5eGBp1Vxtw07bnthIbnxo6atZgfEi1Zc3xzdgtW3sTXEpLxLArzz+z0clc9dgXgX+SNRGfyKZ2bEkhnH6XLq9ur6x8vWh$GlcQbRBKBskt$i3nbscBuu-ZzZilcbTsMxV9shSIjnbTBp+Mm2sJj5nAy87EeOCyTGZIhk1bVF-eOjyVc+q0M7zYQjtXyv$PqkuFsWasjHndOFwVqP0suIjn2eGOSnAChDqjaLCpB6M$juImkvryoFlugxy1tXxLCyBU-dxz$BAMNkzyGWemKhIUyQ9ih7couJ6ID7$bep6X2bXDqNyibBbENXeGjgbv6B5qQzESNmE-9LOnetBPquRxFkIkPcdPNTLCsIxT81bi2+eGZiUOaOy2JihhOI+lcEeeE6dS9n$A-ndAp9oXerUhIgdFx83GyTUepjR8Rr5GoaSrOFIjnfroaY8YBue+ZvVmR6Yatku1XRvZAjXqypkoG+qvqkkKDSYfNyseHrIqKi8JEj-X-dIDmKRmwcvhIhyjCIou9GCUjsbyMD9$7C-CqT1PcC8k65ElB$V1pz5OC6RjqwIAccOqAntu6EbDJjinO5R36q1x$F35vGUKJd9SSmox3ma2Ube0Ko13+D8vAzGUyicQgs$nUmuJVyiVBTsSd0j1nwGz$$+sgzNDMcuu+$ub11z1GoKOCQpUvc5chBrjsnlxhhIIaGIUTvuvQU-+vojsRM$lsGYeqAzUmcy+Qlr8hqFzjOTtwqpIQp9xyb7ibVBeAGBIjnFIjHzaQOhgLnMYO9Hg3sQlM+DA5bxG7rv3Im11xS6ii8TsQoBm$qispeOb+eqeSXcnsSnuusly1caMUmo26TeVzrpGpyxc6gN+cuXIkK6m+hVk6QuKoMkL9dtoOe2N-sNtBm2a6126YDS6aTIFi2hbxLyLnUZj3AK1vh2P3mBQjnhxk6CyAXoRepX8Gf6gU3qXqzDaxdatOUXEEUTpjXlgsToSOXUVMqtzW6bIJSpcTXlUrH+dlMy0q$Y-n6$dO$dkBWJjotRLBLoDIicoCfBGYTTmeCDBSCCLd++V$7XBigpXw+Bv3ztIoW+qVn7rqZmUXvUrxFGVJP+oIqanVqUjq$QVocXFc3RX68RwXJIpl8x77TioOPhzpDnIxMTR$SVosGpnMRfg$Zd+UTXizApIV8cyN$3QezxHzdKeCgUTILz9HC7$6QNJmjYWCkSvTOdwU+IOWhs7M8Rt+UHpTzVMsi-wP8Gjt-vhpmM$BwXouXYaAphzRMTPJGjGwhp1MBQY0mNSZWfkft77QyoFXeOqdSMUS1AovpBvOHfgDqpyUjR8vyHA27M$u$spBv0A1URytIO6AZUJOhUuhC$AYt2UmxyTclsd$spDvqk2hTJQQu3SRg9L820BP-lcpJvwYHnsjt5Jsp6vLu5h7wEaU5mGh5pyGxdT8bAssgjJNqB$teqI+HghpMiUDwmZs+ygu$6iz1SV$R+Tvja1UuQCAjgSLvunREEy+u$DRSvDxCwVJSCoAUhUouvKofN8bbRBzVHILBeCjWaRqzOYmLBeTyowRBzRY3XDepyZcpazcy$28RpDohR-o-dtxVMQI$i5Czr$32DoQTuzsYW7Dz+DoGVutS5cWDycBnQHuK8tW5pySREYbo5EvUK$tJOcTHoE+TW3JyT$xPqcvRRTnIwhxOyRZ2+NoVe82DxQ6$v5Wg7IIy6CCpW5sbzu8j5xgwpuUR$qP$1SREYRWu+CTLvrj6M+WUDqwdejHk7TtbmFzI1aj-h$EAk1rqKgtyVteVCnjPWFBIa7a+DKK2Tp2OeqKrsovwOz+aWuz$kcTNYGQoTy39qBd0IPRRLnn$jDIqGg8DdLvg-ypIKwZwmcReWy6He5YSkGP5jVFsJkVbIHOcBsiD8gj2rheOBqqq3-LCdqyjhqZq8esTqehwBubcQOA-7lyDsiWeTjgietOEGXtLqbb$aYXt9BkBmjazugBqqdvy$q7q2AvyDZqTyNmEjv6EgGGxlOToRAsrKuedhfyoB1D6UdCD5yvVg8WuuylBO5qUqF6yqGEMG5jqqDNvbsfwqEivpmJeCqCGmdvwwj$qeKBIHbyxwFluSQgbYHfVzqmB-Xw12kH2jMwyqgXkHfVCOo-BCqLZkfU8rqx9eylWbJfMVZHKYgBl19QqUqGaE-cNPn9DK1ybmG8-Lwy21f3Vvw3kCB2fhhdmjs7Tysir9qFR0qwJ+RmJY9qqGROmrmdU9qpVqBsXxOZt82Tfwy6qeIvZpNA3fXyD8sydKe8qqp6qQeuqC6Obz9OgG9Qr9eAmPXwkLeQeDIsM6kL7QmjkQOrsZpQAQiDnziv$-pKsvLWQyi9m6UXvxEUipaD8VToETAi$ybWnt2lJRYKbmfIV3moOGVib2YqXBnj50ENYjK3HkqJ7FlDQlg2tHMdkq0NDQvyqjGaqrqsD-HYtJ8cpQgm+luyYGECHitcaAmRGOGdlmOiKeIdvRlwOVBVq+q5qnqcqOYE7qjMs9rjx3ozBs27qs9Yr+Uo5BecSqtrqqYdz3HGoOgVw+jTtP37Z-l8EtF9kqF3M6kBKRmdqqGM07B1v5jqG7iqJjl1W$ye8ay21GxqqOMKhQqq"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 03 Jan 2026 07:16:11 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\npriority: u=3,i=?0\r\ncf-ray: 9b80b5910af556c0-OSL\r\ncf-chl-out-s: 8balN5W95GeomfhHnSmnKA==$VCUJ0m8GWl+U6gBTLp2joA==\r\nset-cookie: cf_clearance=ee2IjbD4qb1dRrSjfyOFko5FrCPqhl0RDUznSn.AvUI-1767424571-1.2.1.1-hvznDDyyVvd7.wnrg1aJYp.frzz07cclj941BtpzURg5.YGF5CyjdB7yAk5g4gtk0A.JXOyCY97G.pECxoPOIZ4osPHLOi_cKKO8ebAHfbbmKlsov3643ruVyoFlVePgBQwrK10aDIQHFxoe3iF5boFI0VKtZeYBq50jdTLR7BbF8UDhjUXZQreT4Bu1B4kpMshaXRBPz6NkqESmbRxIxB0eFx4_qXPp6uZHVpeSEMA; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=hqfap.com; Expires=Sun, 03 Jan 2027 07:16:11 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xZkBjuzlwoucolcEBwYkO6xEtBpKMzyy%2BTnKSRk0RdJfMSDQi%2BUWa4yUia8qVL2uXB%2BYdUNhk1V%2FbHag73QihpWklB3Yra65cD3fATsK0b7t62otuaZBvxo%2FUoY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1313\u0026min_rtt=0\u0026rtt_var=652\u0026sent=515\u0026recv=114\u0026lost=0\u0026retrans=0\u0026sent_bytes=500773\u0026recv_bytes=40774\u0026delivery_rate=16311222\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=28967\u0026ss_exit_bw=5731691\u0026ss_exit_reason=2\u0026cwnd=31644\u0026unsent_bytes=0\u0026cid=178eee71f578331e\u0026ts=2598\u0026inflight_dur=180\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/v1/api.php","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:13.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"POST /v1/api.php HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 480\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nCookie: __uvt=s%3A32%3A%226b4615f583ad7a61a3b7d7f72c3b8fb9%22%3B; c-tag=%7B%22tag-video%22%3A%22v6%7C%7CNOR%7C5764770%7C126691254%7C277106%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C6b4615f583ad7a61a3b7d7f72c3b8fb9%7Cfedf893c02a58d3f8f0c78e77b16b788%7C0%7Chqfap.com%7C%7C%7C20%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1767424571%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C2%7C0%7C0%7Cs.magsrv.com%7C%7C%7C%7Chqfap.com%7C0%7C3071d0a2c5cc3c2a05a9136bfa6b5f33%7Cok%22%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":480,"data":"{\"user\":{\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en-US\",\"referer\":\"https://hqfap.com/upload/player/embed.html\",\"consumer\":\"ad-provider\",\"gdpr\":{\"gdpr\":0},\"screen_resolution\":\"1280x1024\",\"window_orientation\":\"landscape\",\"cookies\":[{\"name\":\"__suvt\",\"value\":\"707aba6a4b81d92b9e7621f7610e7358\"}],\"scr_info\":\"YXN5bmN8fDM%3D\"},\"zones\":[{\"custom_targeting\":{},\"id\":5817802,\"extra_params\":{\"first_request\":true,\"zone_type\":2}}]}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 07:16:12 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://hqfap.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Authorization, Content-Type\r\nAccess-Control-Request-Method: POST\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2289,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7ddc532932d948bafad45154c3125645","sha1":"25d06d1e444d0a486fde3c10512f572a226b8b85","sha256":"e72c11cbe616554f6ef550b9024679835107029c9d76405def128519fa36b71f","sha512":"60f086dbd32c28ff9bd287c089f8a196cfd05597b3f180b1a45a5ccb5e5263259679c4e8aca3a7ce765aff2845c074c039561b8ca7116ea423dabe42ad9fd241","ssdeep":"","tlshash":"7541d8327fc0aceacdd03ace5c05185c5b7ab95b4f8a89e3092f45d4e7785181019ba8","first_seen":"2026-01-03T07:17:14.596464Z","last_seen":"2026-01-03T07:17:14.596464Z","times_seen":1,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/v1/api.php","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"POST /v1/api.php HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 480\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nCookie: __uvt=s%3A32%3A%226b4615f583ad7a61a3b7d7f72c3b8fb9%22%3B; c-tag=%7B%22tag-video%22%3A%22v6%7C%7CNOR%7C5764770%7C126691254%7C277106%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C6b4615f583ad7a61a3b7d7f72c3b8fb9%7Cfedf893c02a58d3f8f0c78e77b16b788%7C0%7Chqfap.com%7C%7C%7C20%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1767424571%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C2%7C0%7C0%7Cs.magsrv.com%7C%7C%7C%7Chqfap.com%7C0%7C3071d0a2c5cc3c2a05a9136bfa6b5f33%7Cok%22%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":480,"data":"{\"user\":{\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en-US\",\"referer\":\"https://hqfap.com/upload/player/embed.html\",\"consumer\":\"ad-provider\",\"gdpr\":{\"gdpr\":0},\"screen_resolution\":\"1280x1024\",\"window_orientation\":\"landscape\",\"cookies\":[{\"name\":\"__suvt\",\"value\":\"707aba6a4b81d92b9e7621f7610e7358\"}],\"scr_info\":\"YXN5bmN8fDM%3D\"},\"zones\":[{\"custom_targeting\":{},\"id\":5817802,\"extra_params\":{\"first_request\":true,\"zone_type\":2}}]}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 07:16:14 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://hqfap.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Authorization, Content-Type\r\nAccess-Control-Request-Method: POST\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2285,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"707d999d54dbb63ca89080f5d454afc8","sha1":"94af23948384fc388d3f80e585c0e4f57c4bbbd6","sha256":"1b5a5c9d870ff2b518413d165ecc96cc45bce304490ea9b0cd635f808c570d06","sha512":"9c92650c4ab3f80b02384f772d4dab537cb597c5587acbe2d5b7e59e9d18360fcd080eadce03cdcc9d2a03e6125020de3987625eed57cdfdcc28578d9d49f255","ssdeep":"","tlshash":"354119be76e058f6eff1bacc5f4a1d298f1b7113cb9605da120ccb84c97c1180a1075a","first_seen":"2026-01-03T07:17:14.597274Z","last_seen":"2026-01-03T07:17:14.597274Z","times_seen":1,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":1,"connect":23,"send":0,"wait":185,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adsco.re/p","fqdn":"adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:14.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"POST /p HTTP/1.1\r\nHost: adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Length: 2846\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 03 Jan 2026 07:16:14 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAS-P-1: OK lon123\r\nAS-P-2: OK\r\nAS-P-3: OK\r\nAccess-Control-Max-Age: 2592000\r\nCache-Control: no-transform\r\nAccept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR\r\nAccess-Control-Allow-Origin: https://hqfap.com\r\nAccess-Control-Allow-Credentials: true\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1191,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (1191), with no line terminators","md5":"e7921d1a3c4fff99aeb0f614e82813a8","sha1":"dd354b3152352c1d7996dce070956783ff5d7bfd","sha256":"33b0e81d39f0f82498ecf5c2bb8310d8ab5433ee918cc2846ab6daa12a725190","sha512":"45be695b61e8716f3db9548973f0442105978ad1cd1b6d72fef268345064cceb1d062fcf25fb7a331df26c0b5ce4cbcd34bd69318d57b43dbbe47d43ae29c7c6","ssdeep":"","tlshash":"4721b73d07afb610e9e25631f0808ee22c8ac4bf12258ba52d16d5465166e0ea16e748","first_seen":"2026-01-03T07:17:14.598017Z","last_seen":"2026-01-03T07:17:14.598017Z","times_seen":1,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":1,"connect":27,"send":0,"wait":56,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/js/emoji/emojionearea/dist/emojionearea.min.css?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/js/emoji/emojionearea/dist/emojionearea.min.css?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 24 Sep 2018 11:57:12 GMT\r\nvary: Accept-Encoding\r\netag: \"5ba8d118-4999\"\r\nexpires: Sat, 03 Jan 2026 17:46:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 5375\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rPKbe2hBUZBkapokBGsGyNNifQZeL%2Bm%2FBb3BzSB89IiZkFXylS69GJBhj7XF8%2Bsz2H62P8JTQM1qetCWLqIQmT7l0Xuwgwg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b582baa956c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18841,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (18841), with no line terminators","md5":"37ab8222165563ffa19dbd7a05860708","sha1":"20d16c638eb13d93e8a5fd13edb7c9d98abc0b79","sha256":"1e79789c5020e43da8d92fda6b4838685964cab7fb14aef16d470a69e7dc2991","sha512":"8af5d8a52835ad25091917767954776c3a69e9849d663407074577e6aa4a5da73cfa4a3a4f8bf7c8140abf4e0fb5b2864814427e52536794ca987f19aadad547","ssdeep":"384:dcGhCOqVspxbGJEOlOOMrkqgtl8hxR0+f4i8ttQ8twFxBsGjURfYaTtFa5GW4+/M:GYe","tlshash":"3d82bc18790a0f19e937d50abd8f9e8724364063de920cfa7b96d9bd83879dc0c55783","first_seen":"2023-04-09T17:48:37Z","last_seen":"2026-04-03T15:29:14.491825Z","times_seen":172,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.pemsrv.com/popunder1000.js","fqdn":"a.pemsrv.com","domain":"pemsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:09.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pemsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Oct 2025 14:38:47 GMT","end":"Sat, 17 Jan 2026 14:38:46 GMT"},"fingerprint":{"sha1":"16:DB:C0:84:B9:67:99:32:B2:65:B9:B4:19:A3:A4:E7:78:E9:46:B2","sha256":"C4:03:5E:C5:AB:57:86:05:02:9F:9E:F3:BD:1B:01:5E:C2:F0:0F:F0:14:40:3E:FF:68:BC:99:E6:3B:D1:2A:F5"}}},"request":{"raw":"GET /popunder1000.js HTTP/1.1\r\nHost: a.pemsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 07:16:09 GMT\r\ncontent-type: application/javascript\r\netag: W/\"a8b5185c6e336f90988c17b6ae0\"\r\nexpires: Wed, 17 Dec 2025 13:23:59 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH31ScAAAwBuUwKCQH3KAAAAAwBJRPCVwG3mQAAAA\r\nx-77-nzt-ray: 2a494a15b75839195ec25869a8020f20\r\nx-77-cache: HIT\r\nx-77-age: 10197\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":122357,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"58eeac519be6ceb7f233b62fedfdf016","sha1":"a8b5185c6e336f90988c17b6ae0d3baf33019177","sha256":"b0d0cb74d537af4c1b83a9d78074cd9bca9b9f3bde3aad75ec4d55b3f1095190","sha512":"9ebaefaf8755f013dd4039606d27392cd58e3b0abe895b4a5dcbdcdcb9e9473667f27387090c9eb50cd8d234baa8a52e3ae24d488ccc424e27eef4ad4d9382a5","ssdeep":"3072:drCqGR9VdpPtCgzTNiQ4n8701l21bMpSmu:XGjVdhdQQOe+p5u","tlshash":"66c35140210748e921e2d67e956fb0993c24a823f5e9cda76c05e7c1f8dec99069bdf3","first_seen":"2025-12-09T14:42:47.636044Z","last_seen":"2026-01-07T12:59:27.51417Z","times_seen":212,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/vast.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:12.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.28.0/vast.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=86400, immutable\r\nlast-modified: Tue, 22 Aug 2023 18:19:15 GMT\r\netag: \"b0deaafb5318980de8c2ee695b76c710\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 03 Jan 2026 07:16:13 GMT\r\nage: 67296\r\nx-served-by: cache-lga21959-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 128, 8\r\nx-timer: S1767424573.438961,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 29522\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":104600,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b0deaafb5318980de8c2ee695b76c710","sha1":"5a3734828b24cac1e1cae1645662b3c9dc26cf82","sha256":"cd51410290d2266cda49882fe9d3d5c67aa9bc5b2c3551c7a5fd9e66cfb40908","sha512":"637b3da699f5ba20b0b2a4e900ffee7b74ae8d9eacbe00a48539454125991172e2c09e4eff00f4e8b95a9a700a48cacc235ad55ac7bf01ca2036fc70150c0891","ssdeep":"1536:ulAE+jE0HEekQmIWTuDkjlOYx1sbRuF5V0U2hw2ubBkrzIjpiIPYqdsrVpQRwOaz:uJ+jEQwjlOcSNSvezkyVpeFamsH","tlshash":"c1a308962395e53246e484e960300242b3350a0f7c0a82acf57dfdef5d5ea4b76baf74","first_seen":"2023-09-16T05:27:40Z","last_seen":"2026-02-25T20:14:13.349587Z","times_seen":58,"resource_available":true,"data":null}},"time_used":715,"timings":{"blocked":-1,"dns":0,"connect":26,"send":0,"wait":14,"receive":3,"ssl":669},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prd.jwpltx.com/v1/jwplayer6/ping.gif?h=-568315379\u0026e=ana\u0026n=4512451766106569\u0026aid=GCCG\u0026emi=h5yrq1zk1k3z\u0026id=Instream\u0026pli=1fqxv4zma7n8\u0026pv=8.28.0\u0026tv=4.0.5\u0026sa=1767424583468","fqdn":"prd.jwpltx.com","domain":"jwpltx.com","tld":"com"},"ip":{"addr":"108.157.229.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:23.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwpltx.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 12 Aug 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E8:9B:D4:42:32:9F:5E:14:C3:36:B5:09:FC:A2:0B:37:DF:D5:E2:D3","sha256":"D1:64:5C:F3:5A:AF:D7:5F:2E:91:2F:C7:B1:E4:F2:91:3C:5A:1E:B9:C2:E9:10:17:7E:59:CF:EC:E6:A0:80:5D"}}},"request":{"raw":"GET /v1/jwplayer6/ping.gif?h=-568315379\u0026e=ana\u0026n=4512451766106569\u0026aid=GCCG\u0026emi=h5yrq1zk1k3z\u0026id=Instream\u0026pli=1fqxv4zma7n8\u0026pv=8.28.0\u0026tv=4.0.5\u0026sa=1767424583468 HTTP/1.1\r\nHost: prd.jwpltx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 03 Jan 2026 07:16:23 GMT\r\nserver: nginx\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d9ef81045d0cf909bd3143957da09138.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: L8rqQGiEjR0T8uxYVM8v9EktlJLdV2lVDnVUCHy3reSSQb1TlUktyg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/vast.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:12.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.28.0/vast.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=86400, immutable\r\nlast-modified: Tue, 22 Aug 2023 18:19:15 GMT\r\netag: \"b0deaafb5318980de8c2ee695b76c710\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 03 Jan 2026 07:16:12 GMT\r\nage: 67295\r\nx-served-by: cache-lga21959-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 128, 6\r\nx-timer: S1767424573.842243,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 29522\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":104600,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b0deaafb5318980de8c2ee695b76c710","sha1":"5a3734828b24cac1e1cae1645662b3c9dc26cf82","sha256":"cd51410290d2266cda49882fe9d3d5c67aa9bc5b2c3551c7a5fd9e66cfb40908","sha512":"637b3da699f5ba20b0b2a4e900ffee7b74ae8d9eacbe00a48539454125991172e2c09e4eff00f4e8b95a9a700a48cacc235ad55ac7bf01ca2036fc70150c0891","ssdeep":"1536:ulAE+jE0HEekQmIWTuDkjlOYx1sbRuF5V0U2hw2ubBkrzIjpiIPYqdsrVpQRwOaz:uJ+jEQwjlOcSNSvezkyVpeFamsH","tlshash":"c1a308962395e53246e484e960300242b3350a0f7c0a82acf57dfdef5d5ea4b76baf74","first_seen":"2023-09-16T05:27:40Z","last_seen":"2026-02-25T20:14:13.349587Z","times_seen":58,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"entitlements.jwplayer.com/GCCG.json","fqdn":"entitlements.jwplayer.com","domain":"jwplayer.com","tld":"com"},"ip":{"addr":"65.9.46.54","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwplayer.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Wed, 25 Dec 2024 00:00:00 GMT","end":"Sat, 24 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"73:5F:22:36:72:E7:49:11:8F:B7:80:90:DA:4D:43:52:ED:0A:89:13","sha256":"E0:7A:FC:22:76:89:11:1A:58:F4:9F:05:51:C6:71:29:F8:0B:7B:AB:0B:3B:F9:C3:67:76:84:5E:50:04:C4:DF"}}},"request":{"raw":"GET /GCCG.json HTTP/1.1\r\nHost: entitlements.jwplayer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\ncontent-type: application/json\r\ncontent-length: 71\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 03:08:00 GMT\r\ncache-control: max-age=1800, s-maxage=21060\r\naccess-control-allow-origin: *\r\nx-cache: Error from cloudfront\r\nvia: 1.1 0eaf5f30adcca4475fcc2543288cac08.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: LonnHwfP5RDAB-5xxDMUwDBRYM_uTYc7F_CFtitiGRiUUM6N4ZH3wA==\r\nage: 14894\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":71,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5534f424f1d6586164a58758f3e2c51a","sha1":"ef37ca3d8831aaad699430dcaa9967469542d602","sha256":"f28df38bea81995fd78f9077bff2dfc9d60ee13b8c414bc426c61c0e1b0bee86","sha512":"de8d4f36c7f0f85b1fb1a52e22e511fd2e52e7ba6010b39947d72eceb752a60b7578be34dc4c44be6add327cef42a82442099d803bcc3251d84ec05d26fe4d15","ssdeep":"","tlshash":"0da0023eec5654030de616dc3cdae44612f4135c1754544c8e8915ac1adfef24f13311","first_seen":"2023-05-03T00:46:19Z","last_seen":"2026-04-03T20:29:48.300285Z","times_seen":982,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":2,"connect":12,"send":0,"wait":12,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-9CBDTHEVHY","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:40 GMT","end":"Wed, 25 Feb 2026 15:49:39 GMT"},"fingerprint":{"sha1":"A1:49:37:FE:E0:3E:26:88:A3:64:37:DC:04:D7:8D:D1:D3:F3:91:75","sha256":"BB:61:22:1A:6C:67:5D:C0:C8:A6:73:93:B9:53:82:98:95:54:B5:52:8B:33:FC:08:58:01:D2:3B:FF:E6:35:12"}}},"request":{"raw":"GET /gtag/js?id=G-9CBDTHEVHY HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 03 Jan 2026 07:16:09 GMT\r\nexpires: Sat, 03 Jan 2026 07:16:09 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143079\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":433334,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"c9b500c2f23ad808751dcd8e590de932","sha1":"4ee475543985e279ffe0629d4e4bfe344151279c","sha256":"b890a681d953b429ee63b9222249181a90015936236e61e190e87fbe0b02a0a3","sha512":"4ec945d09efe53a8b5a25920b192a5b4ebf52b2058838905029700835c7018f92cc2b792f670793c32e1b45b3cfbd155d52117e0c2499da5f5c564fab211f369","ssdeep":"6144:RgIe7ma2bulKY/1u99xHDmHYmyBFzvnsyRO6jJWoNPad4FpC1xY:vC8bu7/1mbrnsy39WbMpb","tlshash":"fd941ace73c674269396e078503f118ba57b29e2b45cc896f189cce02d74a9a4277f7c","first_seen":"2026-01-03T07:17:14.600173Z","last_seen":"2026-01-03T07:17:14.600173Z","times_seen":1,"resource_available":true,"data":null}},"time_used":593,"timings":{"blocked":181,"dns":1,"connect":30,"send":0,"wait":57,"receive":78,"ssl":244},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:09.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css?family=Roboto HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 03 Jan 2026 07:16:09 GMT\r\ndate: Sat, 03 Jan 2026 07:16:09 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5548,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"a184459817ea6b023060a60908bdc08d","sha1":"c81ac5b6b33a99cbde546d171b061754395bcdec","sha256":"1d31f469ed26c1fb1b8a2348f329b45c6eb7214c3f5fbdd53e1d4d3062983cec","sha512":"957594779814fd550bc8769c9b9fb9ba97aee892c47ccc587134ce574303689f88cf0073d0ab74b1e313f37dbf80c372d95514979ffe97524cd9aa6ea7975c12","ssdeep":"96:1OEMNjlOEMNGFZKOEMNgOEMNXTOEMNby+aZjzBrgOEMNyubqGIFuV4yOEMNgROEu:cNjsNMNtNXWNbq5NtbqGIwV4DN5NZyNS","tlshash":"27b11da1041b144057835ce223ce7e34fe1f93006145d0b5ebfdab6beddada642a836e","first_seen":"2025-11-19T00:42:22.960951Z","last_seen":"2026-02-19T20:56:21.81198Z","times_seen":7498,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":114,"dns":1,"connect":20,"send":0,"wait":35,"receive":0,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.pemsrv.com/v1/api.php","fqdn":"s.pemsrv.com","domain":"pemsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:10.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pemsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:59:06 GMT","end":"Thu, 26 Mar 2026 11:59:05 GMT"},"fingerprint":{"sha1":"8C:23:43:2A:16:0E:E5:14:D7:54:DB:F5:5F:BB:56:E4:32:AF:3B:BA","sha256":"91:45:ED:F2:0E:35:83:14:E7:B4:0D:2D:8E:1A:A6:05:62:4F:B6:6E:83:8A:0C:D3:BF:D4:8A:1C:A7:19:9D:9C"}}},"request":{"raw":"POST /v1/api.php HTTP/1.1\r\nHost: s.pemsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 416\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":416,"data":"{\"user\":{\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en-US\",\"referer\":\"https://hqfap.com/search?keyword=owk/\",\"consumer\":\"ad-provider\",\"gdpr\":{\"gdpr\":0},\"screen_resolution\":\"1280x1024\",\"window_orientation\":\"landscape\",\"cookies\":[],\"scr_info\":\"YXN5bmN8fDM%3D\"},\"zones\":[{\"custom_targeting\":{},\"id\":5791126,\"extra_params\":{\"first_request\":true,\"zone_type\":33}}]}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 07:16:10 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://hqfap.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Authorization, Content-Type\r\nAccess-Control-Request-Method: POST\r\nSet-Cookie: __uvt=s%3A32%3A%22705b822169a0e6284d7772b478c4ef8b%22%3B; expires=Mon, 03 Jan 2028 07:16:10 GMT; Max-Age=63072000; path=/; domain=pemsrv.com; secure; SameSite=None\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":780,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a7e097c308ec276d1e22ffd65ee7b6bd","sha1":"880ffb302a091cfe18fab7d1439a8b412675ddf3","sha256":"1475039f349e8776c42a6d47af2d67a3b6e1a2724eb0ee2b82e5721da40d76f5","sha512":"02a862e7ae50a88d0dd6254ea0e671f1175d9b289de3286ad5ed37baafc72c173c4fd4d795c491b3a5a31ba60a0742b04cad27e8631035898966dd98bee744dc","ssdeep":"","tlshash":"e30189a4ff445cb8da58da8ead8e38675189b7275ec909da81848878139e3141304736","first_seen":"2026-01-03T07:17:14.601549Z","last_seen":"2026-01-03T07:17:14.601549Z","times_seen":1,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":60,"dns":0,"connect":25,"send":0,"wait":36,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/js/lib/notifIt/notifIt/css/notifIt.min.css?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/js/lib/notifIt/notifIt/css/notifIt.min.css?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 16 Oct 2017 02:54:02 GMT\r\nvary: Accept-Encoding\r\netag: \"59e41f4a-d31\"\r\nexpires: Sat, 03 Jan 2026 17:46:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 5375\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HoAb8bNR4pTjy2KRpzxxytmbGKSNSXq2sKjqACIJfZLy%2Bimk8PZpgSlKmylHvjtmBDYMfuppo1FkEwWHmn3OloTfmFynAm0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b5826a9256c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3377,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"3a9506450e5925fb9a7b4e27e4145ea7","sha1":"cdea0fccd6bc14713593ef910838d675f2297bc7","sha256":"1472b1b55aa78425d87976c56437d8d85dd4d810455d9187d9185110d399df1f","sha512":"15092da38600601bd3bf74ff35c40d67a01daea9c3b64a7157a0c403bfc144f0232e3a7275439dde0c819d368c5d019ce8b59e229ce9c84c47e7fd30d5f4e470","ssdeep":"","tlshash":"8d616facd65e04433036dc1c63f1db92e3e751934b1506ae7be272609fb9db885a15cc","first_seen":"2023-05-07T18:40:35Z","last_seen":"2026-04-03T15:29:14.571529Z","times_seen":145,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/js/swiper-bundle.min.js?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/js/swiper-bundle.min.js?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Aug 2022 17:46:06 GMT\r\nvary: Accept-Encoding\r\netag: \"630cfb5e-22fbe\"\r\nexpires: Sat, 03 Jan 2026 17:46:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 5375\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sd1Hej5PKTy3F9W%2FxV2V9abq2VKmqjuC7ZAhN95u%2B8k3SJxbReylFFhvb%2B9nwfQcExzaN7KtKafXkNaD%2FDmd71ZDCByRnYs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b5830abd56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":143294,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65271), with CRLF line terminators","md5":"b68603943544cf3f3cea8f5b4b4299bf","sha1":"1912415316a501edf7895f10af1fe70a35f6e5b9","sha256":"02107108e23c6f9a93210e9956d5d3a5e024f1081281c39dcdf46b02831d75a2","sha512":"bc6242dc3f8f42f895eeb65be28dee2df22c9b143fef0b5018e7b4a5595232bc85dc15baee3f46e9b24a00aff7c399cff5f4e6d2b153e9785869ecd278481d87","ssdeep":"3072:eJvSjMdkbrYnafpoy9v8cIWyUaV4y+oGeJUqEfrNK/Mx2:eJvSYdkbrYnafpl9v8cIWybV4y+oGMNB","tlshash":"44e3f8896360b1a552e3268b93a9c611e3b51400b409c4e871bd4c9b6d7ed9813ffffe","first_seen":"2023-03-07T12:02:47Z","last_seen":"2026-04-03T15:29:14.404756Z","times_seen":198,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/upload/player/embed.html","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:11.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /upload/player/embed.html HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night; adb_user=true; adb_user_ts=1767424570743; _ga_9CBDTHEVHY=GS2.1.s1767424570$o1$g0$t1767424570$j60$l0$h0; _ga=GA1.1.433107323.1767424571; r=c3RyaW5n; __suvt=707aba6a4b81d92b9e7621f7610e7358; cf_clearance=ee2IjbD4qb1dRrSjfyOFko5FrCPqhl0RDUznSn.AvUI-1767424571-1.2.1.1-hvznDDyyVvd7.wnrg1aJYp.frzz07cclj941BtpzURg5.YGF5CyjdB7yAk5g4gtk0A.JXOyCY97G.pECxoPOIZ4osPHLOi_cKKO8ebAHfbbmKlsov3643ruVyoFlVePgBQwrK10aDIQHFxoe3iF5boFI0VKtZeYBq50jdTLR7BbF8UDhjUXZQreT4Bu1B4kpMshaXRBPz6NkqESmbRxIxB0eFx4_qXPp6uZHVpeSEMA\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:11 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 01 Jan 2026 10:53:44 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KAJw1ZEtSwQFcLzFzh2muDd%2FKx2W%2FoOPW9xwS1weArX3tk7dRNk%2BRoZlhRxd3ZWlwcl%2FqGc1%2FUOPg%2BmEHNEdpOIMnjSrZfc%3D\"}]}\r\ncf-ray: 9b80b593ab0756c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5306,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7edfd551732c89be86c619b65cf5086e","sha1":"a89cc7dc15731596113006bdc78915c0d2c1f8b0","sha256":"ee5a19a135af309ecda0d0dd0036db6cb94ebedb9c69e95f0c6c43992764d5df","sha512":"c7a62bc053fef2516c8d357d09f60951aa92ad7a4b19b75e3aff2452d506065f5a27452d3c2bc9104e5d314bd6c45060778d94614056fef93b219ec32e105db7","ssdeep":"96:g3m+dvrRamyi9XTzsEcWzsE1zPfTYSGBPFWMMWXyVb9SRN21xb3MS6:am+dvF/yi9XTzsEcWzsEZYSGB1xyXoIC","tlshash":"60b14406be375038405391fd5bfbe20c753560479942de48bb9ca6948f7c7b86866bcc","first_seen":"2026-01-03T07:17:14.54609Z","last_seen":"2026-01-04T09:18:31.02287Z","times_seen":5,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/vast.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:12.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.28.0/vast.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=86400, immutable\r\nlast-modified: Tue, 22 Aug 2023 18:19:15 GMT\r\netag: \"b0deaafb5318980de8c2ee695b76c710\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 03 Jan 2026 07:16:12 GMT\r\nage: 67295\r\nx-served-by: cache-lga21959-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 128, 2\r\nx-timer: S1767424573.837412,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 29522\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":104600,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b0deaafb5318980de8c2ee695b76c710","sha1":"5a3734828b24cac1e1cae1645662b3c9dc26cf82","sha256":"cd51410290d2266cda49882fe9d3d5c67aa9bc5b2c3551c7a5fd9e66cfb40908","sha512":"637b3da699f5ba20b0b2a4e900ffee7b74ae8d9eacbe00a48539454125991172e2c09e4eff00f4e8b95a9a700a48cacc235ad55ac7bf01ca2036fc70150c0891","ssdeep":"1536:ulAE+jE0HEekQmIWTuDkjlOYx1sbRuF5V0U2hw2ubBkrzIjpiIPYqdsrVpQRwOaz:uJ+jEQwjlOcSNSvezkyVpeFamsH","tlshash":"c1a308962395e53246e484e960300242b3350a0f7c0a82acf57dfdef5d5ea4b76baf74","first_seen":"2023-09-16T05:27:40Z","last_seen":"2026-02-25T20:14:13.349587Z","times_seen":58,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":37,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwplayer.controls.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.28.0/jwplayer.controls.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, immutable\r\nlast-modified: Tue, 22 Aug 2023 18:19:07 GMT\r\netag: \"1fde4fff33b8be6ebe2530808273fe7b\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 03 Jan 2026 07:16:14 GMT\r\nage: 1388015\r\nx-served-by: cache-lga21946-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 3, 217\r\nx-timer: S1767424574.175665,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 45480\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":193500,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65143)","md5":"1fde4fff33b8be6ebe2530808273fe7b","sha1":"0810766277301777c5fd5fc031040fc5cc315df5","sha256":"ef7d843e4bd08aceacb89d07e82add18b04e2b2a1b4ddb0784c1573374ec9448","sha512":"7aea8e374962935b5a74d86e3d718b2ce0825117c0a1fd3f07294345186e9f28eea3480f04bd190ad4dfed9cccf84c4d07440770ee4f2ecdeb0d185f9055d28a","ssdeep":"1536:BCUKr35YneqmSoQQD/5YIuhhAuUkJrPyoyjQ7ru+7AHYzwC0suZrqlHdDPjmOoRR:B+r35Yer5Yk7REBvB5sYgwmf8q","tlshash":"b9140922614256349ae6c1daa7504b04f73a8141f652deecfd7dedcc849e9ca30fa7b0","first_seen":"2025-10-07T08:25:20.241872Z","last_seen":"2026-02-25T20:14:13.37576Z","times_seen":40,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA4VQS04DMQy9ChfoyJ/EjrtmDRKIAzgzE9jwrYRA8uFxpxWq2JCXyJaf42ebgGQHuAO+Atqj7LGE4WQwFZqwlri5vYuC8fQ+/G2aX5/DGFqRTELIXAQ1SlsbagOKCi1UmYApEE0KIUoUCA5IUOVSNk8hHu6vt4cJCgb4ogrpHyWDYIsjNfhCoBLSi2AdtbEv6oLOXRcdSjP3NrqFiC+1tVUMi67OSG4A7IBsNFbOanAxR9YnNG5BCpRqMKWxrRX4xe74h7EwZdt5ILawH75f5oiLxCPqeUjYlP6yZ6b9uiedw/Tsj4ePz60nPGnwmTttIFel3l289IaLUbdVhXCoIKzKtf2/mhiMfSGzDKC3IWtdTcfIyzj7rD9wFhN5BwIAAA==\u0026cb=e2e_6958c23e1b0038.12121296","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA4VQS04DMQy9ChfoyJ/EjrtmDRKIAzgzE9jwrYRA8uFxpxWq2JCXyJaf42ebgGQHuAO+Atqj7LGE4WQwFZqwlri5vYuC8fQ+/G2aX5/DGFqRTELIXAQ1SlsbagOKCi1UmYApEE0KIUoUCA5IUOVSNk8hHu6vt4cJCgb4ogrpHyWDYIsjNfhCoBLSi2AdtbEv6oLOXRcdSjP3NrqFiC+1tVUMi67OSG4A7IBsNFbOanAxR9YnNG5BCpRqMKWxrRX4xe74h7EwZdt5ILawH75f5oiLxCPqeUjYlP6yZ6b9uiedw/Tsj4ePz60nPGnwmTttIFel3l289IaLUbdVhXCoIKzKtf2/mhiMfSGzDKC3IWtdTcfIyzj7rD9wFhN5BwIAAA==\u0026cb=e2e_6958c23e1b0038.12121296 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nCookie: __uvt=s%3A32%3A%226b4615f583ad7a61a3b7d7f72c3b8fb9%22%3B; c-tag=%7B%22tag-video%22%3A%22v6%7C%7CNOR%7C5764770%7C126691254%7C277106%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C6b4615f583ad7a61a3b7d7f72c3b8fb9%7Cfedf893c02a58d3f8f0c78e77b16b788%7C0%7Chqfap.com%7C%7C%7C20%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1767424571%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C2%7C0%7C0%7Cs.magsrv.com%7C%7C%7C%7Chqfap.com%7C0%7C3071d0a2c5cc3c2a05a9136bfa6b5f33%7Cok%22%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 07:16:14 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://hqfap.com\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prd.jwpltx.com/v1/jwplayer6/ping.gif?h=820448251\u0026e=e\u0026n=6323283529975886\u0026abc=0\u0026aid=GCCG\u0026amp=0\u0026at=1\u0026c=0\u0026ccp=0\u0026cp=1\u0026d=1\u0026eb=0\u0026ed=6\u0026emi=1ek1srtzd876\u0026i=1\u0026id=Instream\u0026lid=rl4tk51vgb9o\u0026lsa=read\u0026mt=1\u0026pbd=1\u0026pbr=1\u0026pgi=16ftqwstul8n\u0026ph=0\u0026pii=0\u0026pl=125\u0026plc=1\u0026pli=ssmwx0rdxk2c\u0026pp=html5\u0026prc=2\u0026ps=1\u0026pss=1\u0026pt=Owk%2F%20Porn%20Videos%20for%20Free%20in%20Full%20HD%20%231\u0026pu=https%3A%2F%2Fhqfap.com%2Fsearch%3Fkeyword%3Dowk%2F\u0026pv=8.28.0\u0026pyc=0\u0026s=0\u0026sdk=0\u0026stc=1\u0026stpe=0\u0026tv=4.0.5\u0026vb=0\u0026vi=0\u0026vl=90\u0026wd=300\u0026ab=1\u0026cae=0\u0026cb=0\u0026cdid=jwplayer-container1\u0026cme=0\u0026dd=1\u0026dnt=1\u0026flc=0\u0026fv=\u0026ga=0\u0026lng=en\u0026mk=mp4\u0026mu=https%3A%2F%2Fhqfap.com%2Fupload%2Fvideos%2FInstream.mp4\u0026pbc=0\u0026pd=2\u0026pdr=\u0026plng=en\u0026plt=2400\u0026pni=0\u0026po=0\u0026sp=0\u0026st=1080\u0026sa=1767424573888","fqdn":"prd.jwpltx.com","domain":"jwpltx.com","tld":"com"},"ip":{"addr":"108.157.229.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:15.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwpltx.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 12 Aug 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E8:9B:D4:42:32:9F:5E:14:C3:36:B5:09:FC:A2:0B:37:DF:D5:E2:D3","sha256":"D1:64:5C:F3:5A:AF:D7:5F:2E:91:2F:C7:B1:E4:F2:91:3C:5A:1E:B9:C2:E9:10:17:7E:59:CF:EC:E6:A0:80:5D"}}},"request":{"raw":"GET /v1/jwplayer6/ping.gif?h=820448251\u0026e=e\u0026n=6323283529975886\u0026abc=0\u0026aid=GCCG\u0026amp=0\u0026at=1\u0026c=0\u0026ccp=0\u0026cp=1\u0026d=1\u0026eb=0\u0026ed=6\u0026emi=1ek1srtzd876\u0026i=1\u0026id=Instream\u0026lid=rl4tk51vgb9o\u0026lsa=read\u0026mt=1\u0026pbd=1\u0026pbr=1\u0026pgi=16ftqwstul8n\u0026ph=0\u0026pii=0\u0026pl=125\u0026plc=1\u0026pli=ssmwx0rdxk2c\u0026pp=html5\u0026prc=2\u0026ps=1\u0026pss=1\u0026pt=Owk%2F%20Porn%20Videos%20for%20Free%20in%20Full%20HD%20%231\u0026pu=https%3A%2F%2Fhqfap.com%2Fsearch%3Fkeyword%3Dowk%2F\u0026pv=8.28.0\u0026pyc=0\u0026s=0\u0026sdk=0\u0026stc=1\u0026stpe=0\u0026tv=4.0.5\u0026vb=0\u0026vi=0\u0026vl=90\u0026wd=300\u0026ab=1\u0026cae=0\u0026cb=0\u0026cdid=jwplayer-container1\u0026cme=0\u0026dd=1\u0026dnt=1\u0026flc=0\u0026fv=\u0026ga=0\u0026lng=en\u0026mk=mp4\u0026mu=https%3A%2F%2Fhqfap.com%2Fupload%2Fvideos%2FInstream.mp4\u0026pbc=0\u0026pd=2\u0026pdr=\u0026plng=en\u0026plt=2400\u0026pni=0\u0026po=0\u0026sp=0\u0026st=1080\u0026sa=1767424573888 HTTP/1.1\r\nHost: prd.jwpltx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 03 Jan 2026 07:16:15 GMT\r\nserver: nginx\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d9ef81045d0cf909bd3143957da09138.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: xNnvdssnis9yk80OmgZiocQd2Uk1_gfnH4ND4bsCuzngHK3IIOA3PQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/upload/videos/Instream.mp4","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:26.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /upload/videos/Instream.mp4 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/upload/player/embed.html\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night; adb_user=true; adb_user_ts=1767424570743; _ga_9CBDTHEVHY=GS2.1.s1767424570$o1$g0$t1767424570$j60$l0$h0; _ga=GA1.1.433107323.1767424571; r=c3RyaW5n; __suvt=707aba6a4b81d92b9e7621f7610e7358; cf_clearance=ee2IjbD4qb1dRrSjfyOFko5FrCPqhl0RDUznSn.AvUI-1767424571-1.2.1.1-hvznDDyyVvd7.wnrg1aJYp.frzz07cclj941BtpzURg5.YGF5CyjdB7yAk5g4gtk0A.JXOyCY97G.pECxoPOIZ4osPHLOi_cKKO8ebAHfbbmKlsov3643ruVyoFlVePgBQwrK10aDIQHFxoe3iF5boFI0VKtZeYBq50jdTLR7BbF8UDhjUXZQreT4Bu1B4kpMshaXRBPz6NkqESmbRxIxB0eFx4_qXPp6uZHVpeSEMA; __nuvt=6b4615f583ad7a61a3b7d7f72c3b8fb9; _popprepop=1\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:26 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 19092\r\nlast-modified: Fri, 25 Apr 2025 02:29:38 GMT\r\netag: \"680af392-4a94\"\r\nstrict-transport-security: max-age=31536000\r\nage: 158\r\ncontent-range: bytes 0-19091/19092\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wNr18mQmHdsUUNnKgICYM1kc96H10OyBqJ1GFdvFh9mVtYXQ2NZjYdQwT2egkHVdiFREHlY744XHGuV4BpjRBlLbH%2BRI2ig%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b80b5efed7556c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19092,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"55b1e12ea01c20e17199043f574555e4","sha1":"6bdf9ddb0d0680ae2aabc31ff90738c1f309c4d5","sha256":"f6449300e17e9d77239e8aa07d8e37c912f707a6af9cec3688528cb94562633f","sha512":"d313cb478dd95b527ad9501e96dd0fe54fed2697321f818d2f2733124d880e2b81a582b2718e8df5d38e577686cba8613a629b0a4b6db96b17fcfb326a579b1e","ssdeep":"384:UcXmExtJcuyz4iElUrowWkMq18QnjnEthMdmBSvkfvUH:hvxPZTflWFMG80zEwUBWIcH","tlshash":"ed82c00b8bea306fceb06638648f51109a0aa463594773d7e25ce39f6df46c18fe7254","first_seen":"2025-12-05T22:01:21.190692Z","last_seen":"2026-02-25T20:14:13.408731Z","times_seen":15,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/player/plugins/ads/ads-i18n.js?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/player/plugins/ads/ads-i18n.js?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 29 Sep 2017 00:42:30 GMT\r\nvary: Accept-Encoding\r\netag: \"59cd96f6-f7b\"\r\nexpires: Sat, 03 Jan 2026 17:46:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 5375\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P74whKx1tzDz8OBerNErMGL3Kll4USZXm0JZ4yuUI6VtYNaLNrjMgzrkHfdEDEAqy09yGLuQmzsYAJYbldetpYuMFmwa4ws%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b582cab156c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3963,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"dffde725c4691b9079c47b0e9c0e80d5","sha1":"c0c816c14db6ad2e0958226e409dafeee7f5358f","sha256":"72f66bb1b123fc7eb1fbecad30ae76eab073db283dd41ccc53668ab9a72b74eb","sha512":"affadb945bce9317d48e2299a13a03ea70a026c2a676d32ddc146b57526afb4660bdfaa76dc6e2f6d02cba38e21c6d2445dd919eab80f945139457295fde338f","ssdeep":"","tlshash":"57817de967bc48433e7ab1947c168f06dcee1b377be18da574a18e0c36a19c73968019","first_seen":"2023-03-07T16:16:44Z","last_seen":"2026-04-03T15:29:14.572661Z","times_seen":198,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:11.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nCookie: __uvt=s%3A32%3A%226b4615f583ad7a61a3b7d7f72c3b8fb9%22%3B; c-tag=%7B%22tag-video%22%3A%22v6%7C%7CNOR%7C5766292%7C121114862%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C6b4615f583ad7a61a3b7d7f72c3b8fb9%7Cfedf893c02a58d3f8f0c78e77b16b788%7C0%7Chqfap.com%7C%7C%7C18%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1767424571%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C2%7C0%7C0%7Cs.magsrv.com%7C%7C%7C%7Chqfap.com%7C0%7C731446fab4a03ce73eb8c1d7b117a13a%7Cok%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 07:16:11 GMT\r\ncontent-type: application/javascript\r\netag: W/\"92eb331739d51c65226b5fdb07e\"\r\nexpires: Wed, 17 Dec 2025 13:24:25 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3vCcAAAwBuUwKEwH3IQAAAAwBJRPCMQG3fwAAAA\r\nx-77-nzt-ray: 2a494a15a726221960c258698044e126\r\nx-77-cache: HIT\r\nx-77-age: 10172\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":185387,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39040)","md5":"6bd931315f9ec922d23220a34a506421","sha1":"92eb331739d51c65226b5fdb07ec2d74924f200f","sha256":"28f33740f0a341c823243413c7780d92e7ae39254641174a86a4f51ac805b576","sha512":"26bb36ab577ba2b6486f482177e31992c81c79322070edc9d55af10d7ab8f3e1b9dccc89f7c925a47a68e464f522736c0e64d3d7e4acaa016745e0104bddb167","ssdeep":"3072:cWYjf7+28VOk2DG2cUMaElwnRlqI1fsBHisiEolY4o/CXMXpo:U+28VOk262lElwnRjfs4sXhpo","tlshash":"96045c993792307441d3a11daaff53093371506ab80f4884bb4dd8a427adeea51a3ffd","first_seen":"2025-12-11T15:18:11.624048Z","last_seen":"2026-01-15T17:17:43.902034Z","times_seen":1441,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:11.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nCookie: __uvt=s%3A32%3A%226b4615f583ad7a61a3b7d7f72c3b8fb9%22%3B; c-tag=%7B%22tag-video%22%3A%22v6%7C%7CNOR%7C5766292%7C121114862%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C6b4615f583ad7a61a3b7d7f72c3b8fb9%7Cfedf893c02a58d3f8f0c78e77b16b788%7C0%7Chqfap.com%7C%7C%7C18%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1767424571%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C2%7C0%7C0%7Cs.magsrv.com%7C%7C%7C%7Chqfap.com%7C0%7C731446fab4a03ce73eb8c1d7b117a13a%7Cok%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 07:16:11 GMT\r\ncontent-type: application/javascript\r\netag: W/\"92eb331739d51c65226b5fdb07e\"\r\nexpires: Wed, 17 Dec 2025 13:24:25 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3vCcAAAwBuUwKEwH3IQAAAAwBJRPCMQG3fwAAAA\r\nx-77-nzt-ray: 2a494a15a726221960c25869580e362c\r\nx-77-cache: HIT\r\nx-77-age: 10172\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":185387,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39040)","md5":"6bd931315f9ec922d23220a34a506421","sha1":"92eb331739d51c65226b5fdb07ec2d74924f200f","sha256":"28f33740f0a341c823243413c7780d92e7ae39254641174a86a4f51ac805b576","sha512":"26bb36ab577ba2b6486f482177e31992c81c79322070edc9d55af10d7ab8f3e1b9dccc89f7c925a47a68e464f522736c0e64d3d7e4acaa016745e0104bddb167","ssdeep":"3072:cWYjf7+28VOk2DG2cUMaElwnRlqI1fsBHisiEolY4o/CXMXpo:U+28VOk262lElwnRjfs4sXhpo","tlshash":"96045c993792307441d3a11daaff53093371506ab80f4884bb4dd8a427adeea51a3ffd","first_seen":"2025-12-11T15:18:11.624048Z","last_seen":"2026-01-15T17:17:43.902034Z","times_seen":1441,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/930846/1ed93279bc4a72d8df48f896a8ad74dcf1f475e6.gif","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/930846/1ed93279bc4a72d8df48f896a8ad74dcf1f475e6.gif HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 07:16:14 GMT\r\ncontent-type: image/gif\r\ncontent-length: 53650\r\nlast-modified: Fri, 14 Mar 2025 10:57:07 GMT\r\netag: \"67d40b83-d192\"\r\nexpires: Wed, 12 Aug 2026 15:28:20 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap01-sec02-prg1-1\r\nx-77-nzt: EwwBX63NDQH3lTa9AAwBuUwKEwH31RgAAAwBJRPCNAG3QBUAAA\r\nx-77-nzt-ray: 2a494a154932a52a63c25869ca371f34\r\nx-77-cache: HIT\r\nx-77-age: 12400277\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":53650,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 250","md5":"395291289993729df764da584971064a","sha1":"1ed93279bc4a72d8df48f896a8ad74dcf1f475e6","sha256":"ac555885154f5624d9b1cc59ff9ebb337404c3a40c331a8ef0a7816405a0ada0","sha512":"683042ceac39dda037eb6482d79f9bb3fbe83d8659640590611d536b389d7df1fb0525c6f2c774395d15445d86f68d2a32f74767e930a7bbc921ed4ce17b0d26","ssdeep":"1536:mYZostUikilwrT70UF585EA69B3wPlXv4oMQzkMlnCIZDtK:tmitlwrA5EtdwR4cbnH0","tlshash":"4b3301d314e0c0bedaf71cf0ac7d5cd76c3215e2a08d52313bb49639ba6012e55dae94","first_seen":"2025-11-21T22:12:55.826374Z","last_seen":"2026-01-04T21:57:45.343034Z","times_seen":68,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/js/bootstrap-select.min.js?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/js/bootstrap-select.min.js?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 27 Dec 2021 14:05:36 GMT\r\nvary: Accept-Encoding\r\netag: \"61c9c830-ada0\"\r\nexpires: Sat, 03 Jan 2026 17:46:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 5375\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wdOXGTIWXlhGavkCS1BWS6fD4OzpnKTYh7H34YFTcafG91rG1pQ%2BD%2BbyHtCInDx%2BUPz8gv991vUvoXJmAmcGUDH79zSuVr4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b582aaa556c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44448,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31980)","md5":"e6dae7400181df8c88bc4d81db1b4be3","sha1":"7352bca6bbd25fd3724000a3bb3296af0499d006","sha256":"044a93731b837447ed975831a4e44c63a912ead47c44920bdd6c5f5ca29323e8","sha512":"c312c9a3284c75bdebf6dd340a9c2f0ec6e09c7a27816d1fce910a4b66345f61fe4e1c947740211d50f5fd21f7ed1192136fe4aebce953eef5137ed7ed457ee3","ssdeep":"768:ISWvV6oXiTpNvZbpyVSKqN6D2IQWMdoM3mo/XiUTcoB8wZqrDLzCbSYPrgG2FpCQ:I1vVdS1NRbpyx2IQWMd7tyOcvwZqnLzN","tlshash":"3e13e74a7111223642ff1097586f959a7537b62ced03c4a470ed8aea26bcd4470fbf36","first_seen":"2023-03-07T01:31:54Z","last_seen":"2026-04-04T02:24:54.017195Z","times_seen":260,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/socket.io/2.0.4/socket.io.js?version=3.1.64","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/socket.io/2.0.4/socket.io.js?version=3.1.64 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 16385\r\ncf-ray: 9b80b58338a523eb-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03fd5-ed3a\"\r\nlast-modified: Mon, 04 May 2020 16:16:21 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1241944\r\nexpires: Thu, 24 Dec 2026 07:16:08 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Axnys7h74Z6E32h3p78XkVGHGvgX9cDaVJ9dUY15o0mtZBld1siOC1o7BlkxvTdQEuDjy2KEkpEnlj4Oein79jF%2BzSHfsou1a28gsz7BJQaVjgaec2heSurmNlXYEqwV4h0zI5bb\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60730,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32045)","md5":"922279e7225bd2e5b4c6d8632d9d69c1","sha1":"9a66091294674fae43ac84cbe22c9a557bf011de","sha256":"58f7853d60f73d94140eba459c333537629a74d57009f352e1c099efc6fbe93f","sha512":"738144dae35e28202d7212c4a4ef728a62fc0ae89fae510c9ce4724cdc344c0906a98a6a0034fca97fc31bf012cbe176f4a51280482b3e275b34f10d5b5ed015","ssdeep":"768:iRBvRdPdJlg4qZ9v0o2djG+UkeL++35VS5/3KFY6/2fdEVD3/DHdl:MBvRjng4Kv0LjGM+3WnfdEF/Bl","tlshash":"5a53b7c4f59170a543e771b6416f020bb23aa82c240981acb759d9f26cfc9de7227f79","first_seen":"2023-03-07T13:03:50Z","last_seen":"2026-04-03T15:29:14.344887Z","times_seen":274,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":9,"receive":1,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/emojione/2.1.4/lib/js/emojione.min.js?_=1767424569377","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:09.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/emojione/2.1.4/lib/js/emojione.min.js?_=1767424569377 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 03 Jan 2026 07:16:09 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 20240\r\ncf-ray: 9b80b587092cb50b-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03e51-2f329\"\r\nlast-modified: Mon, 04 May 2020 16:09:53 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1475752\r\nexpires: Thu, 24 Dec 2026 07:16:09 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Zt1p2iWAQJiGavCmdR23MSYfC0x54nsAOWNpEV%2FsBzknPqfyn9MB73yl6vmZ9kmanxhdjW%2Bo6o4uSbq1ElYt71ZJ7C2Q7BpJ8X7PRtJEKe6wGESpjJTKV2%2FNTqHb7gWPbgEhsPtC\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":193321,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (32024)","md5":"64bdc4b744c2e3543601007f10059f5e","sha1":"f1f3d20f28bf0eb93f6d840b61f9d7eb1cc5b943","sha256":"4ee1289e9a934487022e65c2df63495380ffe2545f9964daaa4b85ae48ce1c2b","sha512":"9ea26c85981ce52f0d01ad50a624bd6b9d17d9123d7572e5256a21ad78cf5e4828069cc4bec3fc761b8ccb6cf22dae2349b53f49f3fb18bdd3e6aef9931f5d0f","ssdeep":"1536:lckkkiHC4Mrrb0WxXW8ps922sgTiHiAaBSohHtk:lckkkiirb0WTpzEFBSohHy","tlshash":"5e14e7ae8b604999fec4e40d92db7749f85c3404c6a61661657cc6cf2bbb43a33853ec","first_seen":"2023-04-09T17:48:37Z","last_seen":"2026-04-03T15:29:14.53092Z","times_seen":213,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.pemsrv.com/v1/api.php","fqdn":"s.pemsrv.com","domain":"pemsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:10.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pemsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:59:06 GMT","end":"Thu, 26 Mar 2026 11:59:05 GMT"},"fingerprint":{"sha1":"8C:23:43:2A:16:0E:E5:14:D7:54:DB:F5:5F:BB:56:E4:32:AF:3B:BA","sha256":"91:45:ED:F2:0E:35:83:14:E7:B4:0D:2D:8E:1A:A6:05:62:4F:B6:6E:83:8A:0C:D3:BF:D4:8A:1C:A7:19:9D:9C"}}},"request":{"raw":"POST /v1/api.php HTTP/1.1\r\nHost: s.pemsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 416\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":416,"data":"{\"user\":{\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en-US\",\"referer\":\"https://hqfap.com/search?keyword=owk/\",\"consumer\":\"ad-provider\",\"gdpr\":{\"gdpr\":0},\"screen_resolution\":\"1280x1024\",\"window_orientation\":\"landscape\",\"cookies\":[],\"scr_info\":\"YXN5bmN8fDM%3D\"},\"zones\":[{\"custom_targeting\":{},\"id\":5791120,\"extra_params\":{\"first_request\":true,\"zone_type\":35}}]}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 07:16:10 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://hqfap.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Authorization, Content-Type\r\nAccess-Control-Request-Method: POST\r\nSet-Cookie: __uvt=s%3A32%3A%22a22cc410dee1c671299224d3c7730057%22%3B; expires=Mon, 03 Jan 2028 07:16:10 GMT; Max-Age=63072000; path=/; domain=pemsrv.com; secure; SameSite=None\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2426,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"416e6ca97159392d4390298cede3aa2f","sha1":"984a78a865c879fb2d12cfd80135b09514cebde2","sha256":"abc76ce44a09681f2a699b15081b85272c68407a05ae137be91b7c4bd0d46d80","sha512":"b8ace9c25a63db6907e17e9041b7e7be9394dfdd29ac96f73d8d714d0cd19625bf033e853b6149a9bfc8ac862687aa758f3bfaf05472522cff94a835209aeb98","ssdeep":"","tlshash":"3e4108f8ba84a4798ee4d9a57dce3c3b5a62381f0d858a6d564846f851bd6381b00360","first_seen":"2026-01-03T07:17:14.609148Z","last_seen":"2026-01-03T07:17:14.609148Z","times_seen":1,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":64,"dns":4,"connect":28,"send":0,"wait":54,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/player/jwplayer/jwplayer.js","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:11.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/player/jwplayer/jwplayer.js HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/upload/player/embed.html\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night; adb_user=true; adb_user_ts=1767424570743; _ga_9CBDTHEVHY=GS2.1.s1767424570$o1$g0$t1767424570$j60$l0$h0; _ga=GA1.1.433107323.1767424571; r=c3RyaW5n; __suvt=707aba6a4b81d92b9e7621f7610e7358; cf_clearance=ee2IjbD4qb1dRrSjfyOFko5FrCPqhl0RDUznSn.AvUI-1767424571-1.2.1.1-hvznDDyyVvd7.wnrg1aJYp.frzz07cclj941BtpzURg5.YGF5CyjdB7yAk5g4gtk0A.JXOyCY97G.pECxoPOIZ4osPHLOi_cKKO8ebAHfbbmKlsov3643ruVyoFlVePgBQwrK10aDIQHFxoe3iF5boFI0VKtZeYBq50jdTLR7BbF8UDhjUXZQreT4Bu1B4kpMshaXRBPz6NkqESmbRxIxB0eFx4_qXPp6uZHVpeSEMA\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 31 Jul 2024 16:56:10 GMT\r\nvary: Accept-Encoding\r\netag: \"66aa6caa-1ab86\"\r\nexpires: Sat, 03 Jan 2026 18:00:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 4544\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eDVTsMWek2hncJ0eovc5LdxbW%2FMA1s8gAR6zBZps9n33ZnLM3uXKVqpsOxhniL43hQICUES9MMun3kxqN2qjQA8F0hqktu4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b5953b1656c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":109446,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65144)","md5":"6e5c94c322f1ed5f37be56c1bc238e82","sha1":"f6551ac521a2a3c69c8e7ee3ae3b3ab89f9d6217","sha256":"d44d79b928de5d70dce3be8a2f4e5fd40b958159a2a26b1e596a932e28b89975","sha512":"ee57f923459ab5b39553d260a014d6af902a2e1d92254e1f09d699d6f3a1b0f3a0ad80e85ae649c8b0e79154bfd45bcc5b55803161d93808bce5673396a45f21","ssdeep":"1536:B0rFRlUxyv0CcKnKqkf1QiYKDjAPkMUtbKSrRo1gBUSPgGSP3ECTP+MLdGm/Ggd8:BCvxK91ZauoiUB+MLdGX","tlshash":"c6b309e531c2b4e603e624daa07a4041f23a0945380dd5a4fa6cede63d6b947b177fbc","first_seen":"2023-11-18T19:26:42Z","last_seen":"2026-01-15T03:44:34.886381Z","times_seen":62,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/930846/177cf681e77130008beac264ade264940dfe8cff.mp4","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/930846/177cf681e77130008beac264ade264940dfe8cff.mp4 HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Sat, 03 Jan 2026 07:16:14 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 25665\r\nlast-modified: Tue, 12 Aug 2025 15:26:50 GMT\r\netag: \"689b5d3a-6441\"\r\nexpires: Wed, 12 Aug 2026 16:55:19 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap01-sec02-prg1-1\r\nx-77-nzt: EwwBX63NDQH3oU69AAwBuUwKAQH3ogEAAAwBJRPCVwG3BAAAAA\r\nx-77-nzt-ray: 2a494a154932a52a63c25869d1d0d92b\r\nx-77-cache: HIT\r\nx-77-age: 12406433\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 0-25664/25665\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":25665,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"4aa5ceff6add2111fab878b733414587","sha1":"177cf681e77130008beac264ade264940dfe8cff","sha256":"6b26f8250c3330b44cbb5c36a880ba22a8465212fc356fcf092a99a0b04f6b67","sha512":"69bd63c16d3bc2cffb13f04abd7e45ed6da81d0ed0309d03884e0ffdacdf53d3f6b145de5f50e6ac20cd5002303a22401d77f7987d923cda44532c359cef4867","ssdeep":"384:hxW21vIzi0P1UcLbqWJzDReLCRFyO+ql0xG+AYhRSlQLaJEJatOcndIT7:LWU0im1q+zDILCPt+ql0xUYhR4YaU","tlshash":"78b2e0fcbf7a0a22f3c193780ae82e0ed716d59641b532af666357403e1ed742c9144c","first_seen":"2025-08-18T14:29:36.771057Z","last_seen":"2026-01-07T06:46:51.427448Z","times_seen":155,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prd.jwpltx.com/v1/jwplayer6/ping.gif?h=1894895144\u0026e=e\u0026n=0632849652132743\u0026abc=0\u0026aid=GCCG\u0026amp=0\u0026at=1\u0026c=0\u0026ccp=0\u0026cp=1\u0026d=1\u0026eb=0\u0026ed=6\u0026emi=17ht6uh1gjz4\u0026i=1\u0026id=Instream\u0026lid=rl4tk51vgb9o\u0026lsa=read\u0026mt=1\u0026pbd=1\u0026pbr=1\u0026pgi=17iqym4718sf\u0026ph=0\u0026pii=0\u0026pl=125\u0026plc=1\u0026pli=hn2x5onm0690\u0026pp=html5\u0026prc=2\u0026ps=1\u0026pss=1\u0026pt=Owk%2F%20Porn%20Videos%20for%20Free%20in%20Full%20HD%20%231\u0026pu=https%3A%2F%2Fhqfap.com%2Fsearch%3Fkeyword%3Dowk%2F\u0026pv=8.28.0\u0026pyc=0\u0026s=0\u0026sdk=0\u0026stc=2\u0026stpe=0\u0026tv=4.0.5\u0026vb=0\u0026vi=0\u0026vl=90\u0026wd=300\u0026ab=1\u0026cae=0\u0026cb=0\u0026cdid=jwplayer-container2\u0026cme=0\u0026dd=1\u0026dnt=1\u0026flc=0\u0026fv=\u0026ga=0\u0026lng=en\u0026mk=mp4\u0026mu=https%3A%2F%2Fhqfap.com%2Fupload%2Fvideos%2FInstream.mp4\u0026pbc=0\u0026pd=2\u0026pdr=\u0026plng=en\u0026plt=2300\u0026pni=0\u0026po=0\u0026sp=0\u0026st=980\u0026sa=1767424573724","fqdn":"prd.jwpltx.com","domain":"jwpltx.com","tld":"com"},"ip":{"addr":"108.157.229.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwpltx.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 12 Aug 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E8:9B:D4:42:32:9F:5E:14:C3:36:B5:09:FC:A2:0B:37:DF:D5:E2:D3","sha256":"D1:64:5C:F3:5A:AF:D7:5F:2E:91:2F:C7:B1:E4:F2:91:3C:5A:1E:B9:C2:E9:10:17:7E:59:CF:EC:E6:A0:80:5D"}}},"request":{"raw":"GET /v1/jwplayer6/ping.gif?h=1894895144\u0026e=e\u0026n=0632849652132743\u0026abc=0\u0026aid=GCCG\u0026amp=0\u0026at=1\u0026c=0\u0026ccp=0\u0026cp=1\u0026d=1\u0026eb=0\u0026ed=6\u0026emi=17ht6uh1gjz4\u0026i=1\u0026id=Instream\u0026lid=rl4tk51vgb9o\u0026lsa=read\u0026mt=1\u0026pbd=1\u0026pbr=1\u0026pgi=17iqym4718sf\u0026ph=0\u0026pii=0\u0026pl=125\u0026plc=1\u0026pli=hn2x5onm0690\u0026pp=html5\u0026prc=2\u0026ps=1\u0026pss=1\u0026pt=Owk%2F%20Porn%20Videos%20for%20Free%20in%20Full%20HD%20%231\u0026pu=https%3A%2F%2Fhqfap.com%2Fsearch%3Fkeyword%3Dowk%2F\u0026pv=8.28.0\u0026pyc=0\u0026s=0\u0026sdk=0\u0026stc=2\u0026stpe=0\u0026tv=4.0.5\u0026vb=0\u0026vi=0\u0026vl=90\u0026wd=300\u0026ab=1\u0026cae=0\u0026cb=0\u0026cdid=jwplayer-container2\u0026cme=0\u0026dd=1\u0026dnt=1\u0026flc=0\u0026fv=\u0026ga=0\u0026lng=en\u0026mk=mp4\u0026mu=https%3A%2F%2Fhqfap.com%2Fupload%2Fvideos%2FInstream.mp4\u0026pbc=0\u0026pd=2\u0026pdr=\u0026plng=en\u0026plt=2300\u0026pni=0\u0026po=0\u0026sp=0\u0026st=980\u0026sa=1767424573724 HTTP/1.1\r\nHost: prd.jwpltx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 03 Jan 2026 07:16:14 GMT\r\nserver: nginx\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d9ef81045d0cf909bd3143957da09138.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: WuAvhqDw07-t21CCSOR-KVKTXmgt2Tbj4aB4ROISh8CXnDB3yIUFrA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/upload/videos/Instream.mp4","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:26.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /upload/videos/Instream.mp4 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/upload/player/embed.html\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night; adb_user=true; adb_user_ts=1767424570743; _ga_9CBDTHEVHY=GS2.1.s1767424570$o1$g0$t1767424570$j60$l0$h0; _ga=GA1.1.433107323.1767424571; r=c3RyaW5n; __suvt=707aba6a4b81d92b9e7621f7610e7358; cf_clearance=ee2IjbD4qb1dRrSjfyOFko5FrCPqhl0RDUznSn.AvUI-1767424571-1.2.1.1-hvznDDyyVvd7.wnrg1aJYp.frzz07cclj941BtpzURg5.YGF5CyjdB7yAk5g4gtk0A.JXOyCY97G.pECxoPOIZ4osPHLOi_cKKO8ebAHfbbmKlsov3643ruVyoFlVePgBQwrK10aDIQHFxoe3iF5boFI0VKtZeYBq50jdTLR7BbF8UDhjUXZQreT4Bu1B4kpMshaXRBPz6NkqESmbRxIxB0eFx4_qXPp6uZHVpeSEMA; __nuvt=6b4615f583ad7a61a3b7d7f72c3b8fb9; _popprepop=1\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:26 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 19092\r\nlast-modified: Fri, 25 Apr 2025 02:29:38 GMT\r\netag: \"680af392-4a94\"\r\nstrict-transport-security: max-age=31536000\r\nage: 158\r\ncontent-range: bytes 0-19091/19092\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G%2F%2FR%2FsUwbuU8yMDV1rNQh7ZFvAiv8yRvl2aQ%2FTL9Zag1%2FtkbeLPy4LGAgu577%2B7aSnl1ehaO8H0WgmAUjxw9xpAQ0xi9AYY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b80b5efcd7356c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19092,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"55b1e12ea01c20e17199043f574555e4","sha1":"6bdf9ddb0d0680ae2aabc31ff90738c1f309c4d5","sha256":"f6449300e17e9d77239e8aa07d8e37c912f707a6af9cec3688528cb94562633f","sha512":"d313cb478dd95b527ad9501e96dd0fe54fed2697321f818d2f2733124d880e2b81a582b2718e8df5d38e577686cba8613a629b0a4b6db96b17fcfb326a579b1e","ssdeep":"384:UcXmExtJcuyz4iElUrowWkMq18QnjnEthMdmBSvkfvUH:hvxPZTflWFMG80zEwUBWIcH","tlshash":"ed82c00b8bea306fceb06638648f51109a0aa463594773d7e25ce39f6df46c18fe7254","first_seen":"2025-12-05T22:01:21.190692Z","last_seen":"2026-02-25T20:14:13.408731Z","times_seen":15,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/css/roboto.css?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/css/roboto.css?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 29 Aug 2022 18:16:06 GMT\r\nvary: Accept-Encoding\r\netag: \"630d0266-1b49\"\r\nexpires: Sat, 03 Jan 2026 17:46:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 5375\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dnXKDwvPvV%2Fr%2B6qZNKnNBa1RmCTHLwz%2BiAJmkl8StOSbLkWZm0Ljl80d2FXhBAXkV8KzA2YUvXgocS0C6AH8Cx7BuxqweVY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b5827a9756c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6985,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"79bf9158dfeb29014944ae0c2402e2e1","sha1":"5144c6d6d44d252b9d7997f8c50247b92194d3fb","sha256":"a90be96ef4b9fe17a3d74e078032a8b782f9aeecd4e7feb43788a6b33ad01452","sha512":"3c7c8367a6fd6c70ca8e8e80ab3c536a5393638df591cdae853e6320696936d088d60410e56c65c46009515d411d4011221aafa09f53ae3146f284e22ea9c7c1","ssdeep":"96:W+mX0FZxGqcfZfgo18NfqvkFZmskONOoK+yNuN+4FZ39C/Aio7ENG:FiROtqv9skONOj+RN+Q9C/AiSx","tlshash":"ade18895000ba86097730cea73cbbd35e90f622511819062bbfd58a8bed7d325379b4e","first_seen":"2023-05-07T18:40:35Z","last_seen":"2026-04-03T15:29:14.351151Z","times_seen":115,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.iople.com/app.js","fqdn":"cdn.iople.com","domain":"iople.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:10.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.iople.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 12:02:46 GMT","end":"Tue, 10 Mar 2026 12:02:45 GMT"},"fingerprint":{"sha1":"A5:83:B3:4F:77:63:68:74:F1:2B:4E:F7:B6:E2:12:04:A7:13:37:21","sha256":"40:2B:3E:98:31:50:8E:52:4D:B3:56:0D:1B:20:70:5B:E3:9F:B4:23:08:F8:C1:A0:B0:DD:7B:8F:90:DA:13:0D"}}},"request":{"raw":"GET /app.js HTTP/1.1\r\nHost: cdn.iople.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 07:16:10 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 244525\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: br\r\netag: \"90eccb8b37b700c97e87e757461d5d1a\"\r\nlast-modified: Wed, 20 Aug 2025 11:43:53 GMT\r\nx-amz-id-2: ceeeUzRsVktTp9ACQvhe59N+L8dybv61a51itRoS44CCjFGZOAIDaU5Rw0VHChv2aLtcxDfr/dhakwhAAvoGilYklZV2U2YI+EfieC0zin8=\r\nx-amz-request-id: DR9YP32EYYTVK7TB\r\nx-amz-server-side-encryption: AES256\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/13/2025 09:13:16\r\ncdn-edgestorageid: 830\r\ncdn-requestid: aadd0236da6fb7b8e3c00e9969de7094\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":111231,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65381)","md5":"90eccb8b37b700c97e87e757461d5d1a","sha1":"0d30619608c9dd29e449791f60d256d95205d896","sha256":"19ce511a0637b725ebffc1e794dd74c3ac19b13bc5c00ecce8499e9b2063bb92","sha512":"3d1ad7548a479125e46ae79415eff7bea68af808731056f3aa9cff5a2fbf2a803e9d93411279bea395c4e0f50202f9a6cb1019b3310da4bda5b11b9683c0ada7","ssdeep":"1536:L24Ny1erT/XuZ3gYCuGn0tqxSDsWI8Za6HMhX20BDbvcQzStYO5CS:Pg1eP+ZGuSSaRks7O5CS","tlshash":"5eb3754661cd22708a8bf333adefacd4ee6f5900756588c7261cc2916925dac40bfdf9","first_seen":"2025-09-14T03:07:12.749205Z","last_seen":"2026-04-01T17:04:30.92742Z","times_seen":226,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":40,"dns":32,"connect":1,"send":0,"wait":1,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/upload/player/embed.html","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:11.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /upload/player/embed.html HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night; adb_user=true; adb_user_ts=1767424570743; _ga_9CBDTHEVHY=GS2.1.s1767424570$o1$g0$t1767424570$j60$l0$h0; _ga=GA1.1.433107323.1767424571; r=c3RyaW5n; __suvt=707aba6a4b81d92b9e7621f7610e7358; cf_clearance=ee2IjbD4qb1dRrSjfyOFko5FrCPqhl0RDUznSn.AvUI-1767424571-1.2.1.1-hvznDDyyVvd7.wnrg1aJYp.frzz07cclj941BtpzURg5.YGF5CyjdB7yAk5g4gtk0A.JXOyCY97G.pECxoPOIZ4osPHLOi_cKKO8ebAHfbbmKlsov3643ruVyoFlVePgBQwrK10aDIQHFxoe3iF5boFI0VKtZeYBq50jdTLR7BbF8UDhjUXZQreT4Bu1B4kpMshaXRBPz6NkqESmbRxIxB0eFx4_qXPp6uZHVpeSEMA\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:11 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 01 Jan 2026 10:53:44 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xIKfD2RXZKRh3FGGhHuEtTDDigzEmbPSvv4HlELSTEtJZFvAsOyf9pPasI%2F7A3kGY0JEMS7T4fGiEYDRnVaj5i5pyBwKhwA%3D\"}]}\r\ncf-ray: 9b80b5939b0656c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5306,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7edfd551732c89be86c619b65cf5086e","sha1":"a89cc7dc15731596113006bdc78915c0d2c1f8b0","sha256":"ee5a19a135af309ecda0d0dd0036db6cb94ebedb9c69e95f0c6c43992764d5df","sha512":"c7a62bc053fef2516c8d357d09f60951aa92ad7a4b19b75e3aff2452d506065f5a27452d3c2bc9104e5d314bd6c45060778d94614056fef93b219ec32e105db7","ssdeep":"96:g3m+dvrRamyi9XTzsEcWzsE1zPfTYSGBPFWMMWXyVb9SRN21xb3MS6:am+dvF/yi9XTzsEcWzsEZYSGB1xyXoIC","tlshash":"60b14406be375038405391fd5bfbe20c753560479942de48bb9ca6948f7c7b86866bcc","first_seen":"2026-01-03T07:17:14.54609Z","last_seen":"2026-01-04T09:18:31.02287Z","times_seen":5,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prd.jwpltx.com/v1/jwplayer6/ping.gif?h=658376485\u0026e=ana\u0026n=2189119292064146\u0026aid=GCCG\u0026emi=1d05kht1hsp2\u0026id=Instream\u0026pli=17pcmalxw8c2\u0026pv=8.28.0\u0026tv=4.0.5\u0026sa=1767424583476","fqdn":"prd.jwpltx.com","domain":"jwpltx.com","tld":"com"},"ip":{"addr":"108.157.229.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:23.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwpltx.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 12 Aug 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E8:9B:D4:42:32:9F:5E:14:C3:36:B5:09:FC:A2:0B:37:DF:D5:E2:D3","sha256":"D1:64:5C:F3:5A:AF:D7:5F:2E:91:2F:C7:B1:E4:F2:91:3C:5A:1E:B9:C2:E9:10:17:7E:59:CF:EC:E6:A0:80:5D"}}},"request":{"raw":"GET /v1/jwplayer6/ping.gif?h=658376485\u0026e=ana\u0026n=2189119292064146\u0026aid=GCCG\u0026emi=1d05kht1hsp2\u0026id=Instream\u0026pli=17pcmalxw8c2\u0026pv=8.28.0\u0026tv=4.0.5\u0026sa=1767424583476 HTTP/1.1\r\nHost: prd.jwpltx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 03 Jan 2026 07:16:23 GMT\r\nserver: nginx\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d9ef81045d0cf909bd3143957da09138.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: 4gpyVoJrWL5So1YEdHzj47fVzMGbsjaFCld4jhhU-eWx_VsWkWeWUw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prd.jwpltx.com/v1/jwplayer6/ping.gif?h=-1068450128\u0026e=ana\u0026n=0491907427202481\u0026aid=GCCG\u0026emi=1u7a1mf1g79n\u0026id=Instream\u0026pli=qw6icbecmfp1\u0026pv=8.28.0\u0026tv=4.0.5\u0026sa=1767424583809","fqdn":"prd.jwpltx.com","domain":"jwpltx.com","tld":"com"},"ip":{"addr":"108.157.229.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:23.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwpltx.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 12 Aug 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E8:9B:D4:42:32:9F:5E:14:C3:36:B5:09:FC:A2:0B:37:DF:D5:E2:D3","sha256":"D1:64:5C:F3:5A:AF:D7:5F:2E:91:2F:C7:B1:E4:F2:91:3C:5A:1E:B9:C2:E9:10:17:7E:59:CF:EC:E6:A0:80:5D"}}},"request":{"raw":"GET /v1/jwplayer6/ping.gif?h=-1068450128\u0026e=ana\u0026n=0491907427202481\u0026aid=GCCG\u0026emi=1u7a1mf1g79n\u0026id=Instream\u0026pli=qw6icbecmfp1\u0026pv=8.28.0\u0026tv=4.0.5\u0026sa=1767424583809 HTTP/1.1\r\nHost: prd.jwpltx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 03 Jan 2026 07:16:23 GMT\r\nserver: nginx\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d9ef81045d0cf909bd3143957da09138.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: tzcmt10ZOoVaoMzEyUvv7OHl4lZS2Mg8FElbDos_E-89L0Bv5E62OA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA4VRSU4DMRD8Ch/IqHqx286ZM0ggHtDOzMCFNRIKUj8ex4kg4oJLtlu9VS8MzhvQBnIF3lLekkalqWJSnihp3NzehVI8va/+Nu1en6MKiubuROi+BKvc/1TICjgSSpgJQziIalYmLqEICXRwEtUhGeLh/npc6uAQ4MAJXT5SBmPoezQOBNbITTOlNRXx2TyTS7PZVuOdtLK2Gjn7nEpZciW1xYXYKyAOksrrIj0bLvro+ZmqlGADdzZMEBuV4AebY4iQCveq+0EMte+/XnYRF45HpHOPGER/rTj3/yuOdz89++P+43OURCcOOdtOA+iTMm+eXVuhuXKri2Wm1TJhMUnl/8n0TXhpjdtsldIye2MR3WkPtqo06zclkDasBgIAAA==\u0026cb=e2e_6958c23e28fe49.32808733","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA4VRSU4DMRD8Ch/IqHqx286ZM0ggHtDOzMCFNRIKUj8ex4kg4oJLtlu9VS8MzhvQBnIF3lLekkalqWJSnihp3NzehVI8va/+Nu1en6MKiubuROi+BKvc/1TICjgSSpgJQziIalYmLqEICXRwEtUhGeLh/npc6uAQ4MAJXT5SBmPoezQOBNbITTOlNRXx2TyTS7PZVuOdtLK2Gjn7nEpZciW1xYXYKyAOksrrIj0bLvro+ZmqlGADdzZMEBuV4AebY4iQCveq+0EMte+/XnYRF45HpHOPGER/rTj3/yuOdz89++P+43OURCcOOdtOA+iTMm+eXVuhuXKri2Wm1TJhMUnl/8n0TXhpjdtsldIye2MR3WkPtqo06zclkDasBgIAAA==\u0026cb=e2e_6958c23e28fe49.32808733 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nCookie: __uvt=s%3A32%3A%226b4615f583ad7a61a3b7d7f72c3b8fb9%22%3B; c-tag=%7B%22tag-video%22%3A%22v6%7C%7CNOR%7C5764770%7C126691254%7C277106%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C6b4615f583ad7a61a3b7d7f72c3b8fb9%7Cfedf893c02a58d3f8f0c78e77b16b788%7C0%7Chqfap.com%7C%7C%7C20%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1767424571%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C2%7C0%7C0%7Cs.magsrv.com%7C%7C%7C%7Chqfap.com%7C0%7C3071d0a2c5cc3c2a05a9136bfa6b5f33%7Cok%22%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 07:16:14 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://hqfap.com\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prd.jwpltx.com/v1/jwplayer6/ping.gif?h=856193977\u0026e=e\u0026n=1934985809094917\u0026abc=0\u0026aid=GCCG\u0026amp=0\u0026at=1\u0026c=0\u0026ccp=0\u0026cp=1\u0026d=1\u0026eb=0\u0026ed=6\u0026emi=1nzz6nc1lsy3\u0026i=1\u0026id=Instream\u0026lid=rl4tk51vgb9o\u0026lsa=read\u0026mt=1\u0026pbd=1\u0026pbr=1\u0026pgi=81kb71rwm1fs\u0026ph=0\u0026pii=0\u0026pl=125\u0026plc=1\u0026pli=1t3khgl9wth1\u0026pp=html5\u0026prc=2\u0026ps=1\u0026pss=1\u0026pt=Owk%2F%20Porn%20Videos%20for%20Free%20in%20Full%20HD%20%231\u0026pu=https%3A%2F%2Fhqfap.com%2Fsearch%3Fkeyword%3Dowk%2F\u0026pv=8.28.0\u0026pyc=0\u0026s=0\u0026sdk=0\u0026stc=1\u0026stpe=0\u0026tv=4.0.5\u0026vb=0\u0026vi=0\u0026vl=90\u0026wd=300\u0026ab=1\u0026cae=0\u0026cb=0\u0026cdid=jwplayer-container1\u0026cme=0\u0026dd=1\u0026dnt=1\u0026flc=0\u0026fv=\u0026ga=0\u0026lng=en\u0026mk=mp4\u0026mu=https%3A%2F%2Fhqfap.com%2Fupload%2Fvideos%2FInstream.mp4\u0026pbc=0\u0026pd=2\u0026pdr=\u0026plng=en\u0026plt=1900\u0026pni=0\u0026po=0\u0026sp=0\u0026st=610\u0026sa=1767424573364","fqdn":"prd.jwpltx.com","domain":"jwpltx.com","tld":"com"},"ip":{"addr":"108.157.229.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwpltx.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 12 Aug 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E8:9B:D4:42:32:9F:5E:14:C3:36:B5:09:FC:A2:0B:37:DF:D5:E2:D3","sha256":"D1:64:5C:F3:5A:AF:D7:5F:2E:91:2F:C7:B1:E4:F2:91:3C:5A:1E:B9:C2:E9:10:17:7E:59:CF:EC:E6:A0:80:5D"}}},"request":{"raw":"GET /v1/jwplayer6/ping.gif?h=856193977\u0026e=e\u0026n=1934985809094917\u0026abc=0\u0026aid=GCCG\u0026amp=0\u0026at=1\u0026c=0\u0026ccp=0\u0026cp=1\u0026d=1\u0026eb=0\u0026ed=6\u0026emi=1nzz6nc1lsy3\u0026i=1\u0026id=Instream\u0026lid=rl4tk51vgb9o\u0026lsa=read\u0026mt=1\u0026pbd=1\u0026pbr=1\u0026pgi=81kb71rwm1fs\u0026ph=0\u0026pii=0\u0026pl=125\u0026plc=1\u0026pli=1t3khgl9wth1\u0026pp=html5\u0026prc=2\u0026ps=1\u0026pss=1\u0026pt=Owk%2F%20Porn%20Videos%20for%20Free%20in%20Full%20HD%20%231\u0026pu=https%3A%2F%2Fhqfap.com%2Fsearch%3Fkeyword%3Dowk%2F\u0026pv=8.28.0\u0026pyc=0\u0026s=0\u0026sdk=0\u0026stc=1\u0026stpe=0\u0026tv=4.0.5\u0026vb=0\u0026vi=0\u0026vl=90\u0026wd=300\u0026ab=1\u0026cae=0\u0026cb=0\u0026cdid=jwplayer-container1\u0026cme=0\u0026dd=1\u0026dnt=1\u0026flc=0\u0026fv=\u0026ga=0\u0026lng=en\u0026mk=mp4\u0026mu=https%3A%2F%2Fhqfap.com%2Fupload%2Fvideos%2FInstream.mp4\u0026pbc=0\u0026pd=2\u0026pdr=\u0026plng=en\u0026plt=1900\u0026pni=0\u0026po=0\u0026sp=0\u0026st=610\u0026sa=1767424573364 HTTP/1.1\r\nHost: prd.jwpltx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 03 Jan 2026 07:16:14 GMT\r\nserver: nginx\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d9ef81045d0cf909bd3143957da09138.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: cixrPNFV01JtyM90vqP15Efxo8xnYiEA6Jm9u-cfVT2m4k_8gwBVmQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/upload/videos/Instream.mp4","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:25.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /upload/videos/Instream.mp4 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/upload/player/embed.html\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night; adb_user=true; adb_user_ts=1767424570743; _ga_9CBDTHEVHY=GS2.1.s1767424570$o1$g0$t1767424570$j60$l0$h0; _ga=GA1.1.433107323.1767424571; r=c3RyaW5n; __suvt=707aba6a4b81d92b9e7621f7610e7358; cf_clearance=ee2IjbD4qb1dRrSjfyOFko5FrCPqhl0RDUznSn.AvUI-1767424571-1.2.1.1-hvznDDyyVvd7.wnrg1aJYp.frzz07cclj941BtpzURg5.YGF5CyjdB7yAk5g4gtk0A.JXOyCY97G.pECxoPOIZ4osPHLOi_cKKO8ebAHfbbmKlsov3643ruVyoFlVePgBQwrK10aDIQHFxoe3iF5boFI0VKtZeYBq50jdTLR7BbF8UDhjUXZQreT4Bu1B4kpMshaXRBPz6NkqESmbRxIxB0eFx4_qXPp6uZHVpeSEMA; __nuvt=6b4615f583ad7a61a3b7d7f72c3b8fb9; _popprepop=1\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:25 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 19092\r\nlast-modified: Fri, 25 Apr 2025 02:29:38 GMT\r\netag: \"680af392-4a94\"\r\nstrict-transport-security: max-age=31536000\r\nage: 158\r\ncontent-range: bytes 0-19091/19092\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fdotVnK5VxcKv%2F9AOxmLmvV390IT3nTSL4FLyQ6OVW4h2dFzg8XdHnKmdAYpOpVgLEIJtFaDN18catEi77DFlaJCaLjDFug%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b80b5ee3d6956c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19092,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"55b1e12ea01c20e17199043f574555e4","sha1":"6bdf9ddb0d0680ae2aabc31ff90738c1f309c4d5","sha256":"f6449300e17e9d77239e8aa07d8e37c912f707a6af9cec3688528cb94562633f","sha512":"d313cb478dd95b527ad9501e96dd0fe54fed2697321f818d2f2733124d880e2b81a582b2718e8df5d38e577686cba8613a629b0a4b6db96b17fcfb326a579b1e","ssdeep":"384:UcXmExtJcuyz4iElUrowWkMq18QnjnEthMdmBSvkfvUH:hvxPZTflWFMG80zEwUBWIcH","tlshash":"ed82c00b8bea306fceb06638648f51109a0aa463594773d7e25ce39f6df46c18fe7254","first_seen":"2025-12-05T22:01:21.190692Z","last_seen":"2026-02-25T20:14:13.408731Z","times_seen":15,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/player/plugins/vast/ads-vast-vpaid.js?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/player/plugins/vast/ads-vast-vpaid.js?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 18 Dec 2017 04:53:40 GMT\r\nvary: Accept-Encoding\r\netag: \"5a3749d4-3307\"\r\nexpires: Sat, 03 Jan 2026 17:46:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 5375\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RV7KkF%2FeEYBLVwL%2Bdv2WEF9HMpU%2Bq3dStDxHeospP3O895fN%2FEMFsq1V%2BGU1QozgwXfXfVBgc0limXF0SQv8U85wmCtOyFw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b582dab256c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13063,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"d9253d461952d3472df640ce75c263ee","sha1":"4b0c5010345b191802e928ba313493ea19852c3d","sha256":"925dfe096a561028b56bed0046324935f64394ad9e60856ca39db932430c2ea7","sha512":"91cb410996b02128ccd2af466609bf00950430fd8ff7b9569f7b911b3cba0ddbbc523f9e4c3ec808a0e6c2bd88fde49a28a3be49c80ef8edce4f0b698aa1f414","ssdeep":"384:kRTOi1aeqpj2Bw2waiDHVNUmbO/70TNmu1ihQuq:KTgC1waiDHvUmbO/4TNmqihy","tlshash":"8e4286998b8c213fa9e5008c59adc0fd67be4477ba5895bbfe14b9710140f2d826cb7c","first_seen":"2023-03-07T16:16:44Z","last_seen":"2026-04-03T15:29:14.540854Z","times_seen":191,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:11.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nCookie: __uvt=s%3A32%3A%226b4615f583ad7a61a3b7d7f72c3b8fb9%22%3B; c-tag=%7B%22tag-video%22%3A%22v6%7C%7CNOR%7C5766292%7C121114862%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C6b4615f583ad7a61a3b7d7f72c3b8fb9%7Cfedf893c02a58d3f8f0c78e77b16b788%7C0%7Chqfap.com%7C%7C%7C18%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1767424571%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C2%7C0%7C0%7Cs.magsrv.com%7C%7C%7C%7Chqfap.com%7C0%7C731446fab4a03ce73eb8c1d7b117a13a%7Cok%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 07:16:11 GMT\r\ncontent-type: application/javascript\r\netag: W/\"92eb331739d51c65226b5fdb07e\"\r\nexpires: Wed, 17 Dec 2025 13:24:25 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3vCcAAAwBuUwKEwH3IQAAAAwBJRPCMQG3fwAAAA\r\nx-77-nzt-ray: 2a494a15a726221960c258698573552a\r\nx-77-cache: HIT\r\nx-77-age: 10172\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":185387,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39040)","md5":"6bd931315f9ec922d23220a34a506421","sha1":"92eb331739d51c65226b5fdb07ec2d74924f200f","sha256":"28f33740f0a341c823243413c7780d92e7ae39254641174a86a4f51ac805b576","sha512":"26bb36ab577ba2b6486f482177e31992c81c79322070edc9d55af10d7ab8f3e1b9dccc89f7c925a47a68e464f522736c0e64d3d7e4acaa016745e0104bddb167","ssdeep":"3072:cWYjf7+28VOk2DG2cUMaElwnRlqI1fsBHisiEolY4o/CXMXpo:U+28VOk262lElwnRjfs4sXhpo","tlshash":"96045c993792307441d3a11daaff53093371506ab80f4884bb4dd8a427adeea51a3ffd","first_seen":"2025-12-11T15:18:11.624048Z","last_seen":"2026-01-15T17:17:43.902034Z","times_seen":1441,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/upload/videos/Instream.mp4","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:26.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /upload/videos/Instream.mp4 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/upload/player/embed.html\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night; adb_user=true; adb_user_ts=1767424570743; _ga_9CBDTHEVHY=GS2.1.s1767424570$o1$g0$t1767424570$j60$l0$h0; _ga=GA1.1.433107323.1767424571; r=c3RyaW5n; __suvt=707aba6a4b81d92b9e7621f7610e7358; cf_clearance=ee2IjbD4qb1dRrSjfyOFko5FrCPqhl0RDUznSn.AvUI-1767424571-1.2.1.1-hvznDDyyVvd7.wnrg1aJYp.frzz07cclj941BtpzURg5.YGF5CyjdB7yAk5g4gtk0A.JXOyCY97G.pECxoPOIZ4osPHLOi_cKKO8ebAHfbbmKlsov3643ruVyoFlVePgBQwrK10aDIQHFxoe3iF5boFI0VKtZeYBq50jdTLR7BbF8UDhjUXZQreT4Bu1B4kpMshaXRBPz6NkqESmbRxIxB0eFx4_qXPp6uZHVpeSEMA; __nuvt=6b4615f583ad7a61a3b7d7f72c3b8fb9; _popprepop=1\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:26 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 19092\r\nlast-modified: Fri, 25 Apr 2025 02:29:38 GMT\r\netag: \"680af392-4a94\"\r\nstrict-transport-security: max-age=31536000\r\nage: 158\r\ncontent-range: bytes 0-19091/19092\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=usEqo0fPSSpiDFDc2DowqgLAQpXqwA0ofyksif33ayoTtU1uGk%2BDPAIDHFFKyPTLdTOxg7e5FAPlHBI7a1r%2BEPUF%2Bxf2uz0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b80b5f01d7756c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19092,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"55b1e12ea01c20e17199043f574555e4","sha1":"6bdf9ddb0d0680ae2aabc31ff90738c1f309c4d5","sha256":"f6449300e17e9d77239e8aa07d8e37c912f707a6af9cec3688528cb94562633f","sha512":"d313cb478dd95b527ad9501e96dd0fe54fed2697321f818d2f2733124d880e2b81a582b2718e8df5d38e577686cba8613a629b0a4b6db96b17fcfb326a579b1e","ssdeep":"384:UcXmExtJcuyz4iElUrowWkMq18QnjnEthMdmBSvkfvUH:hvxPZTflWFMG80zEwUBWIcH","tlshash":"ed82c00b8bea306fceb06638648f51109a0aa463594773d7e25ce39f6df46c18fe7254","first_seen":"2025-12-05T22:01:21.190692Z","last_seen":"2026-02-25T20:14:13.408731Z","times_seen":15,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/img/logo.png?cache=455","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/img/logo.png?cache=455 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 30 Oct 2025 11:16:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69034924-271b\"\r\nexpires: Mon, 19 Jan 2026 05:10:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1217147\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kI7%2FWMlrFwJqKHu6bP7Gnim%2FuXOdOGn0CGG5lfGdeAzr096xHGKih6a6GcXYeiiHWqfa8oyJQ9ew9zoeqWgHwTmjEkkpmJ0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b5832abf56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10011,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 138 x 112, 8-bit/color RGBA, non-interlaced","md5":"3189c8a2b821adaa4359f23886c758f4","sha1":"a020d5949db4507ff065b522a1c28b7d110088ec","sha256":"e8ee3a90b0bf17daf24ce2e45ec9ace203afb968ea71b9738e96dd995c4f5365","sha512":"cf7085038172acd39f5a1a1b24e65f7ccb655b63fefdbc3c348bd1d8807ec980e8ed52a2e44070fd4c1d77f38e3d541d69ecdbfbd906d60fea2c6ef2d89a307c","ssdeep":"192:oQIgSKu1GtjT5H/43NxFDNmDh3EJkj7TbDdCrrYKMA1RGjYw8w:dCKuYj565NmDuJgnbBCrr3MmDdw","tlshash":"6522bfe5e34026ee112dc8a1672dcba7b93ba8eb190be20105cea7427cf43495e55469","first_seen":"2025-11-07T18:27:21.495025Z","last_seen":"2026-01-04T09:18:31.000944Z","times_seen":27,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwplayer.core.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:12.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.28.0/jwplayer.core.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, immutable\r\nlast-modified: Tue, 22 Aug 2023 18:19:08 GMT\r\netag: \"34de47681547f88d2a251419d61d4a2d\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 03 Jan 2026 07:16:12 GMT\r\nage: 1390167\r\nx-served-by: cache-lga21956-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 76, 6\r\nx-timer: S1767424573.837580,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 40476\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":143406,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65143)","md5":"34de47681547f88d2a251419d61d4a2d","sha1":"e9c03590ad2eb86eeee8b0032f345fbeb32bc4c1","sha256":"5a8861552d8484bac63cb929ef4b4e9f2f76726aef84032c76a75b76da4e7ddc","sha512":"96c8659af1758ddc35ee64cf835f983cddb190d2dff7884b86dd259faab6d824c3330d04f2b056f77989be023b1703c9e0e339ce805c0ec480812d2988c305ea","ssdeep":"3072:B5ozmmILBerJhsy7v22m79sTkvpkHkfeKJyuaU:X7DBerJh/aLLkEfPJn","tlshash":"45e33b753181623651da93da72674201a33a45897406c7acff2cedea1c3e88771f6fb8","first_seen":"2025-10-07T08:25:20.374415Z","last_seen":"2026-02-25T20:14:13.377962Z","times_seen":40,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":45,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prd.jwpltx.com/v1/jwplayer6/ping.gif?h=-1086999992\u0026e=e\u0026n=3190629023470107\u0026abc=0\u0026aid=GCCG\u0026amp=0\u0026at=1\u0026c=0\u0026ccp=0\u0026cp=1\u0026d=1\u0026eb=0\u0026ed=6\u0026emi=1qy86lusoo1w\u0026i=1\u0026id=Instream\u0026lid=rl4tk51vgb9o\u0026lsa=read\u0026mt=1\u0026pbd=1\u0026pbr=1\u0026pgi=163x7gv17gng\u0026ph=0\u0026pii=0\u0026pl=125\u0026plc=1\u0026pli=zyv1wllg724b\u0026pp=html5\u0026prc=2\u0026ps=1\u0026pss=1\u0026pt=Owk%2F%20Porn%20Videos%20for%20Free%20in%20Full%20HD%20%231\u0026pu=https%3A%2F%2Fhqfap.com%2Fsearch%3Fkeyword%3Dowk%2F\u0026pv=8.28.0\u0026pyc=0\u0026s=0\u0026sdk=0\u0026stc=2\u0026stpe=0\u0026tv=4.0.5\u0026vb=0\u0026vi=0\u0026vl=90\u0026wd=300\u0026ab=1\u0026cae=0\u0026cb=0\u0026cdid=jwplayer-container2\u0026cme=0\u0026dd=1\u0026dnt=1\u0026flc=0\u0026fv=\u0026ga=0\u0026lng=en\u0026mk=mp4\u0026mu=https%3A%2F%2Fhqfap.com%2Fupload%2Fvideos%2FInstream.mp4\u0026pbc=0\u0026pd=2\u0026pdr=\u0026plng=en\u0026plt=2650\u0026pni=0\u0026po=0\u0026sp=0\u0026st=1340\u0026sa=1767424574048","fqdn":"prd.jwpltx.com","domain":"jwpltx.com","tld":"com"},"ip":{"addr":"108.157.229.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:15.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwpltx.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 12 Aug 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E8:9B:D4:42:32:9F:5E:14:C3:36:B5:09:FC:A2:0B:37:DF:D5:E2:D3","sha256":"D1:64:5C:F3:5A:AF:D7:5F:2E:91:2F:C7:B1:E4:F2:91:3C:5A:1E:B9:C2:E9:10:17:7E:59:CF:EC:E6:A0:80:5D"}}},"request":{"raw":"GET /v1/jwplayer6/ping.gif?h=-1086999992\u0026e=e\u0026n=3190629023470107\u0026abc=0\u0026aid=GCCG\u0026amp=0\u0026at=1\u0026c=0\u0026ccp=0\u0026cp=1\u0026d=1\u0026eb=0\u0026ed=6\u0026emi=1qy86lusoo1w\u0026i=1\u0026id=Instream\u0026lid=rl4tk51vgb9o\u0026lsa=read\u0026mt=1\u0026pbd=1\u0026pbr=1\u0026pgi=163x7gv17gng\u0026ph=0\u0026pii=0\u0026pl=125\u0026plc=1\u0026pli=zyv1wllg724b\u0026pp=html5\u0026prc=2\u0026ps=1\u0026pss=1\u0026pt=Owk%2F%20Porn%20Videos%20for%20Free%20in%20Full%20HD%20%231\u0026pu=https%3A%2F%2Fhqfap.com%2Fsearch%3Fkeyword%3Dowk%2F\u0026pv=8.28.0\u0026pyc=0\u0026s=0\u0026sdk=0\u0026stc=2\u0026stpe=0\u0026tv=4.0.5\u0026vb=0\u0026vi=0\u0026vl=90\u0026wd=300\u0026ab=1\u0026cae=0\u0026cb=0\u0026cdid=jwplayer-container2\u0026cme=0\u0026dd=1\u0026dnt=1\u0026flc=0\u0026fv=\u0026ga=0\u0026lng=en\u0026mk=mp4\u0026mu=https%3A%2F%2Fhqfap.com%2Fupload%2Fvideos%2FInstream.mp4\u0026pbc=0\u0026pd=2\u0026pdr=\u0026plng=en\u0026plt=2650\u0026pni=0\u0026po=0\u0026sp=0\u0026st=1340\u0026sa=1767424574048 HTTP/1.1\r\nHost: prd.jwpltx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 03 Jan 2026 07:16:15 GMT\r\nserver: nginx\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d9ef81045d0cf909bd3143957da09138.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: zb66UELdCkEfEgst7YUMJw0_V7C1Lssw1n__f7m5lVCTPWRDO51uQw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intelligenceadx.com/iyoulgdbiotzj?KxEUdAuR=BQNyAAAAAAAACZUAAiZs15-e2aJbn0AKGiG3sWPJTpSnDJktQPhgJq-nVRzMO4bsxvHaUXf_d33TlPkynjsckCBt2HQOmNovgTrCyNHhdit_l8g2UYqikzW-5rYDd_hNyONPjvuf_tL8lJTTrNgPbnbQXyVnlgFRycO499YGAJ4juiMiowRyj5h-l4DMVVleJbcx9Q6r-WKlD_Qcv3-nHQkBJi7TQ43ipMIbAAN8suH8KO7KYRdwYwHL3hv2BvQ43YLtFbqInc6lafqQ95NO80fMrIx6YxmW3iK2SbjtSxj6FZFwUZ4p3ofaR709hKvW38hXd2PJk44vdKQeYfZ2TMbAUUOoTg_amYRrsfwUzwTSO62Rssw_n67r8to5RQJdGJsI_WHHo6AdY_8ih4IlAbo0uPSpEayHVv40_HdbMo0SVN8fsLzHweeU97HVxlM5OOHRNBFGDmQRPNAxXmDjUT13DAew3omS7tm5jVK9qVDLybmsy8Dv_bm1GaVFFI7CxKV7bN11O4ElPIBv3gGiJqjvNQRDe82rFcskyz9xi4zl8symuH4EGcu-_XsHZdCGqlS5Zu2IjHh6rHD72xovC7SQ4qvtF0yScX0SQB8GyTjlZTCm8oCcWQLocrza6YiWBJlf2DHEpPbuD5XA4OxRfhZvxHjU43GyAlxZYRj1o1BHYSMqWL5iGajY2NP_jv6El4AhlK9BYS70JYHKX49TujR5JLleuLVPUbGuTnDs0mbZhbyEgcmOyG4b1FQ0OsOjIjVyjdy1Cdhm68FmOZ6Nv8xpvBKm5XLhKqEIdLdweNkiOaJKlhmpS1XmD-U_qWaGvNR-QfQNQxJsGzB_LP7QwE1Dqq4BvJ-vkhQLO3ldwoZew8iC8Z3NYZGqvNVu45RWpIjZ9rU5AmSNxHi465-iR8snidbC1X1v5jhTex0EhOKE3WCre53WqE0OqM9DLZwiLtVT5BzBxOKLkWhJ2H_3thdVceWG-QFs08p2IcY80GQwYG0H8KxFa5Sx1UdY3Y4ECJlOalp_IWXW7tEacP6YINN8ot81s4-eB3P6mcVq0RxnqGKNNv7JR2ALlEf3kmQ_QcXeceCIQBS69ZRCl8BzmuPySYqWiHbgWaCS6FrrYDhSHB7WLizi-09dZYNupVXhOvYSJW8GWXmlbGnociMhSbZIYUVI8QaxRVbMpxE\u0026yTpFPESD=4\u0026GyfMJYKX=5250359\u0026PQukTmFf=0.0004\u0026VobYzuys=0,0\u0026LFUwAqmv=\u0026hrsGvjfI=\u0026ecgYEjyC=1280,1024,1,1280,1024,0","fqdn":"intelligenceadx.com","domain":"intelligenceadx.com","tld":"com"},"ip":{"addr":"208.95.114.100","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:15.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"intelligenceadx.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 04 Apr 2025 00:00:00 GMT","end":"Tue, 05 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BB:72:94:6A:70:D1:57:77:77:94:C0:B2:5D:D9:4B:21:50:01:A9:EA","sha256":"D2:95:A2:80:F9:9D:D0:6A:F9:69:A4:1F:1D:36:37:CF:38:B4:C0:2B:39:B3:6F:8D:3A:38:6E:26:C1:01:2E:F8"}}},"request":{"raw":"GET /iyoulgdbiotzj?KxEUdAuR=BQNyAAAAAAAACZUAAiZs15-e2aJbn0AKGiG3sWPJTpSnDJktQPhgJq-nVRzMO4bsxvHaUXf_d33TlPkynjsckCBt2HQOmNovgTrCyNHhdit_l8g2UYqikzW-5rYDd_hNyONPjvuf_tL8lJTTrNgPbnbQXyVnlgFRycO499YGAJ4juiMiowRyj5h-l4DMVVleJbcx9Q6r-WKlD_Qcv3-nHQkBJi7TQ43ipMIbAAN8suH8KO7KYRdwYwHL3hv2BvQ43YLtFbqInc6lafqQ95NO80fMrIx6YxmW3iK2SbjtSxj6FZFwUZ4p3ofaR709hKvW38hXd2PJk44vdKQeYfZ2TMbAUUOoTg_amYRrsfwUzwTSO62Rssw_n67r8to5RQJdGJsI_WHHo6AdY_8ih4IlAbo0uPSpEayHVv40_HdbMo0SVN8fsLzHweeU97HVxlM5OOHRNBFGDmQRPNAxXmDjUT13DAew3omS7tm5jVK9qVDLybmsy8Dv_bm1GaVFFI7CxKV7bN11O4ElPIBv3gGiJqjvNQRDe82rFcskyz9xi4zl8symuH4EGcu-_XsHZdCGqlS5Zu2IjHh6rHD72xovC7SQ4qvtF0yScX0SQB8GyTjlZTCm8oCcWQLocrza6YiWBJlf2DHEpPbuD5XA4OxRfhZvxHjU43GyAlxZYRj1o1BHYSMqWL5iGajY2NP_jv6El4AhlK9BYS70JYHKX49TujR5JLleuLVPUbGuTnDs0mbZhbyEgcmOyG4b1FQ0OsOjIjVyjdy1Cdhm68FmOZ6Nv8xpvBKm5XLhKqEIdLdweNkiOaJKlhmpS1XmD-U_qWaGvNR-QfQNQxJsGzB_LP7QwE1Dqq4BvJ-vkhQLO3ldwoZew8iC8Z3NYZGqvNVu45RWpIjZ9rU5AmSNxHi465-iR8snidbC1X1v5jhTex0EhOKE3WCre53WqE0OqM9DLZwiLtVT5BzBxOKLkWhJ2H_3thdVceWG-QFs08p2IcY80GQwYG0H8KxFa5Sx1UdY3Y4ECJlOalp_IWXW7tEacP6YINN8ot81s4-eB3P6mcVq0RxnqGKNNv7JR2ALlEf3kmQ_QcXeceCIQBS69ZRCl8BzmuPySYqWiHbgWaCS6FrrYDhSHB7WLizi-09dZYNupVXhOvYSJW8GWXmlbGnociMhSbZIYUVI8QaxRVbMpxE\u0026yTpFPESD=4\u0026GyfMJYKX=5250359\u0026PQukTmFf=0.0004\u0026VobYzuys=0,0\u0026LFUwAqmv=\u0026hrsGvjfI=\u0026ecgYEjyC=1280,1024,1,1280,1024,0 HTTP/1.1\r\nHost: intelligenceadx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\npopads-node: wb9\r\naccess-control-allow-origin: *\r\nasf: 9\r\npopads-ec: ASB\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-length: 44\r\ndate: Sat, 03 Jan 2026 07:16:15 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":44,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"d5f0a25e4d3522d56d48ce7bc3e518fb","sha1":"86794caff58f7fee6e684c2ba7195f970a8d6f4c","sha256":"9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5","sha512":"a3a81801f516a4eb11f00d6f56dab0ed4b8a79219e6b4f5436993479f09dae08f14cffbab3327ff66fb39201d8eba1153ae7114f7705a01cc6f0edf840ef1616","ssdeep":"","tlshash":"789002801814116115d1500b8d5159d01259b1a4540801324446ca502dc7883a415774","first_seen":"2023-03-07T01:17:45Z","last_seen":"2026-04-04T03:41:03.044937Z","times_seen":22741,"resource_available":true,"data":null}},"time_used":418,"timings":{"blocked":-1,"dns":1,"connect":92,"send":0,"wait":115,"receive":0,"ssl":209},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"intelligenceadx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/emojione/2.1.4/assets/sprites/emojione.sprites.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:10.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/emojione/2.1.4/assets/sprites/emojione.sprites.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 03 Jan 2026 07:16:10 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 5627\r\ncf-ray: 9b80b58d2db9b50b-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03e51-1522f\"\r\nlast-modified: Mon, 04 May 2020 16:09:53 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1381733\r\nexpires: Thu, 24 Dec 2026 07:16:10 GMT\r\naccept-ranges: bytes\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=3N1BoGRHra3jRTa95HmTVTeGK8NlElyg6Y8nQIR3D1hyEUA9ObWBUwQPoe9AyFe7fO7Ka%2BBfOaIQ4BwXQam8WnxDRvbU7U0tIz85zGBZRFt8sgBA2EgnfeuDIdPmw72mDD2hz55d\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86575,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"6ee205360cc4efdf4f6de07cf105b6c2","sha1":"de0ad7e43134637597e5f76818d5265836179174","sha256":"704c2c78d408f86ff780e34366cacf853b5a0561ad5e6a7ca759e413e07bcde8","sha512":"2155f690fa6f9b2c548feb34d841f5d1202a541fed510193b5224c1e3ff8aea9b66e4f8e845225698acf9bd60c4779711cf69ad673c5f40f9955f6ecb55bb4de","ssdeep":"384:VCalyrJikNHJb+slIR2EBzRL++QQYkdt18:VC1+QIUE1RL+o8","tlshash":"e783eb0158c2516dfa77ed3561a94f92083a1340dc223e3d1eeb7af923c58e58c67ea7","first_seen":"2023-04-06T13:36:33Z","last_seen":"2026-04-03T15:29:14.340549Z","times_seen":317,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/930846/bc718cc2686608575603d725ff901ace5270dfdb.gif","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:15.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/930846/bc718cc2686608575603d725ff901ace5270dfdb.gif HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 07:16:15 GMT\r\ncontent-type: image/gif\r\ncontent-length: 158682\r\nlast-modified: Tue, 12 Aug 2025 15:26:50 GMT\r\netag: \"689b5d3a-26bda\"\r\nexpires: Wed, 12 Aug 2026 16:46:18 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap02-sec01-prg1-1\r\nx-77-nzt: EwwBX63NDQH33kG9AAwBuUwKDAH3jQ0AAAwBnJIhJwG3+gIAAA\r\nx-77-nzt-ray: 2a494a154932a52a64c25869ce9e8a14\r\nx-77-cache: HIT\r\nx-77-age: 12403166\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":158682,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 250","md5":"427c479f2c7c3fcc0e6a98a2df4a3202","sha1":"bc718cc2686608575603d725ff901ace5270dfdb","sha256":"d06fa372e57aec38d9076372b9c7aad45e1c8cb40402ab09d47b17195d426fa8","sha512":"a65e1c66ba246b74a7156a94da27fe8a9494975ec62bd31e65966c946791aaee37b75a1d6346b9a3f62e13047d3d3a7144afe6585c6c6b2c944fb0d4820261f6","ssdeep":"3072:142s2ovwsUH5Mq6MCUo4DPSIPiSdu742s2vsUH5rq6MCUo4XPgITiSYug42s2s:1lscsUZMfMCUo4P47lsysUZrfMCUo45P","tlshash":"71f302bac1dc4b5d70fc64b5e5065ac4846d8d899bfd58a6b22dfc63ef22423c738026","first_seen":"2025-11-21T22:12:55.811122Z","last_seen":"2026-01-07T06:46:51.414752Z","times_seen":73,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prd.jwpltx.com/v1/jwplayer6/ping.gif?h=966070883\u0026e=ana\u0026n=4777443045949032\u0026aid=GCCG\u0026emi=1ld8uf17ffuf\u0026id=Instream\u0026pli=sgjq731cjwfn\u0026pv=8.28.0\u0026tv=4.0.5\u0026sa=1767424583529","fqdn":"prd.jwpltx.com","domain":"jwpltx.com","tld":"com"},"ip":{"addr":"108.157.229.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:23.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwpltx.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 12 Aug 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E8:9B:D4:42:32:9F:5E:14:C3:36:B5:09:FC:A2:0B:37:DF:D5:E2:D3","sha256":"D1:64:5C:F3:5A:AF:D7:5F:2E:91:2F:C7:B1:E4:F2:91:3C:5A:1E:B9:C2:E9:10:17:7E:59:CF:EC:E6:A0:80:5D"}}},"request":{"raw":"GET /v1/jwplayer6/ping.gif?h=966070883\u0026e=ana\u0026n=4777443045949032\u0026aid=GCCG\u0026emi=1ld8uf17ffuf\u0026id=Instream\u0026pli=sgjq731cjwfn\u0026pv=8.28.0\u0026tv=4.0.5\u0026sa=1767424583529 HTTP/1.1\r\nHost: prd.jwpltx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 03 Jan 2026 07:16:23 GMT\r\nserver: nginx\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d9ef81045d0cf909bd3143957da09138.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: iYfbzCoZBBXwFwjX7FobfizMbykRYtezpgPGFgoi6qoODDwXj3Snng==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/player/jwplayer/jwplayer.js","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:11.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/player/jwplayer/jwplayer.js HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/upload/player/embed.html\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night; adb_user=true; adb_user_ts=1767424570743; _ga_9CBDTHEVHY=GS2.1.s1767424570$o1$g0$t1767424570$j60$l0$h0; _ga=GA1.1.433107323.1767424571; r=c3RyaW5n; __suvt=707aba6a4b81d92b9e7621f7610e7358; cf_clearance=ee2IjbD4qb1dRrSjfyOFko5FrCPqhl0RDUznSn.AvUI-1767424571-1.2.1.1-hvznDDyyVvd7.wnrg1aJYp.frzz07cclj941BtpzURg5.YGF5CyjdB7yAk5g4gtk0A.JXOyCY97G.pECxoPOIZ4osPHLOi_cKKO8ebAHfbbmKlsov3643ruVyoFlVePgBQwrK10aDIQHFxoe3iF5boFI0VKtZeYBq50jdTLR7BbF8UDhjUXZQreT4Bu1B4kpMshaXRBPz6NkqESmbRxIxB0eFx4_qXPp6uZHVpeSEMA\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 31 Jul 2024 16:56:10 GMT\r\nvary: Accept-Encoding\r\netag: \"66aa6caa-1ab86\"\r\nexpires: Sat, 03 Jan 2026 18:00:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 4544\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ss62fUiF8Sg73dk2EyunuCZRvx29XtkenvYlPxdhLrwqaB6V%2B8LqpwV3DedFBaOnKr5hMEsJpYWjB6dSpajw82myCIeu%2FjQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b5956b1956c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109446,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65144)","md5":"6e5c94c322f1ed5f37be56c1bc238e82","sha1":"f6551ac521a2a3c69c8e7ee3ae3b3ab89f9d6217","sha256":"d44d79b928de5d70dce3be8a2f4e5fd40b958159a2a26b1e596a932e28b89975","sha512":"ee57f923459ab5b39553d260a014d6af902a2e1d92254e1f09d699d6f3a1b0f3a0ad80e85ae649c8b0e79154bfd45bcc5b55803161d93808bce5673396a45f21","ssdeep":"1536:B0rFRlUxyv0CcKnKqkf1QiYKDjAPkMUtbKSrRo1gBUSPgGSP3ECTP+MLdGm/Ggd8:BCvxK91ZauoiUB+MLdGX","tlshash":"c6b309e531c2b4e603e624daa07a4041f23a0945380dd5a4fa6cede63d6b947b177fbc","first_seen":"2023-11-18T19:26:42Z","last_seen":"2026-01-15T03:44:34.886381Z","times_seen":62,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA4VRy04DMQz8FX6gq7Gd2EnPnEEC8QF57MKFZyVUJH886W5VVVzIKIpljz22w2DdgXaQG/CedE/BM00ZU+CJYvC7+wcP5C+fS/mY2vurZ0EKOkiEwSVY5vHGRJbAHpHcTBjCTpQ1MJF6gItjgKOEsFoGf3q8XS8NsAtw5IhhnySdsfqJE44EDq41KMUlJindilKRat0W4yY1LTW7aukxpVkzBZuLEJcMSAFJ5mWWUQ1Xc4z6TFmSs4GHGiaQbq3ggt0pRygIj7bHga/ucvh5a+5XxBPieUisSn+j50i6mJvOYXotz4ev77Un2jTkHNs2MFZlpRYtoSbqmWueTZkWU8JsEtP/q/GaRoU2Z+3SuI+PstTBEnrTWWPDL6biabIHAgAA\u0026cb=e2e_6958c23e1e93e3.53802812","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA4VRy04DMQz8FX6gq7Gd2EnPnEEC8QF57MKFZyVUJH886W5VVVzIKIpljz22w2DdgXaQG/CedE/BM00ZU+CJYvC7+wcP5C+fS/mY2vurZ0EKOkiEwSVY5vHGRJbAHpHcTBjCTpQ1MJF6gItjgKOEsFoGf3q8XS8NsAtw5IhhnySdsfqJE44EDq41KMUlJindilKRat0W4yY1LTW7aukxpVkzBZuLEJcMSAFJ5mWWUQ1Xc4z6TFmSs4GHGiaQbq3ggt0pRygIj7bHga/ucvh5a+5XxBPieUisSn+j50i6mJvOYXotz4ev77Un2jTkHNs2MFZlpRYtoSbqmWueTZkWU8JsEtP/q/GaRoU2Z+3SuI+PstTBEnrTWWPDL6biabIHAgAA\u0026cb=e2e_6958c23e1e93e3.53802812 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nCookie: __uvt=s%3A32%3A%226b4615f583ad7a61a3b7d7f72c3b8fb9%22%3B; c-tag=%7B%22tag-video%22%3A%22v6%7C%7CNOR%7C5764770%7C126691254%7C277106%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C6b4615f583ad7a61a3b7d7f72c3b8fb9%7Cfedf893c02a58d3f8f0c78e77b16b788%7C0%7Chqfap.com%7C%7C%7C20%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1767424571%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C2%7C0%7C0%7Cs.magsrv.com%7C%7C%7C%7Chqfap.com%7C0%7C3071d0a2c5cc3c2a05a9136bfa6b5f33%7Cok%22%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 07:16:14 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://hqfap.com\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/930846/35458b02eebbcbda5078f087ddc8d17a7d01a3d1.mp4","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/930846/35458b02eebbcbda5078f087ddc8d17a7d01a3d1.mp4 HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Sat, 03 Jan 2026 07:16:14 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 18743\r\nlast-modified: Fri, 14 Mar 2025 10:57:07 GMT\r\netag: \"67d40b83-4937\"\r\nexpires: Wed, 12 Aug 2026 16:55:07 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap02-sec02-prg1-1\r\nx-77-nzt: EwwBX63NDQH3q069AAwBuUwKAQH3qAEAAAgBw7WvAgGB\r\nx-77-nzt-ray: 2a494a154932a52a63c258696ca8f221\r\nx-77-cache: HIT\r\nx-77-age: 12406443\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 0-18742/18743\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18743,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"aec0362e49eb5970924b5d2aa600f96b","sha1":"35458b02eebbcbda5078f087ddc8d17a7d01a3d1","sha256":"d134b03c6163e41d9b8568f2726446989c109c1bc42605fef4e79b08d48e2eff","sha512":"55feccdf3c3b1b99df4d4c2a9c5b246c2ba9e9e425d628775a8cf1ef3c0ffae29a7f3be72928845c28cb234195b7994889d392d727dbebb7bc5f41914a2c3512","ssdeep":"384:kzPfgH3O1dSz0uG7QXnGAhY988cX3S2RXrDj+pMFSnd/Woz7:kzPfF1d0kQXnGiW2RXCpM+d/","tlshash":"7f82c092b321e49ad2300ebc49b7a65a71232b1f542c65cfb774a0164e730bf5a6cc6c","first_seen":"2025-08-24T06:33:44.645704Z","last_seen":"2026-01-04T21:57:45.347077Z","times_seen":179,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prd.jwpltx.com/v1/jwplayer6/ping.gif?h=-973737738\u0026e=e\u0026n=3391723828786559\u0026abc=0\u0026aid=GCCG\u0026amp=0\u0026at=1\u0026c=0\u0026ccp=0\u0026cp=1\u0026d=1\u0026eb=0\u0026ed=6\u0026emi=1yh78s31i4y2\u0026i=1\u0026id=Instream\u0026lid=rl4tk51vgb9o\u0026lsa=set\u0026mt=1\u0026pbd=1\u0026pbr=1\u0026pgi=17iqym4718sf\u0026ph=0\u0026pii=0\u0026pl=125\u0026plc=1\u0026pli=1ptx20j18oo6\u0026pp=html5\u0026prc=2\u0026ps=1\u0026pss=1\u0026pt=Owk%2F%20Porn%20Videos%20for%20Free%20in%20Full%20HD%20%231\u0026pu=https%3A%2F%2Fhqfap.com%2Fsearch%3Fkeyword%3Dowk%2F\u0026pv=8.28.0\u0026pyc=0\u0026s=0\u0026sdk=0\u0026stc=1\u0026stpe=0\u0026tv=4.0.5\u0026vb=0\u0026vi=0\u0026vl=90\u0026wd=300\u0026ab=1\u0026cae=0\u0026cb=0\u0026cdid=jwplayer-container1\u0026cme=0\u0026dd=1\u0026dnt=1\u0026flc=0\u0026fv=\u0026ga=0\u0026lng=en\u0026mk=mp4\u0026mu=https%3A%2F%2Fhqfap.com%2Fupload%2Fvideos%2FInstream.mp4\u0026pbc=0\u0026pd=2\u0026pdr=\u0026plng=en\u0026plt=2300\u0026pni=0\u0026po=0\u0026sp=0\u0026st=980\u0026sa=1767424573716","fqdn":"prd.jwpltx.com","domain":"jwpltx.com","tld":"com"},"ip":{"addr":"108.157.229.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwpltx.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 12 Aug 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E8:9B:D4:42:32:9F:5E:14:C3:36:B5:09:FC:A2:0B:37:DF:D5:E2:D3","sha256":"D1:64:5C:F3:5A:AF:D7:5F:2E:91:2F:C7:B1:E4:F2:91:3C:5A:1E:B9:C2:E9:10:17:7E:59:CF:EC:E6:A0:80:5D"}}},"request":{"raw":"GET /v1/jwplayer6/ping.gif?h=-973737738\u0026e=e\u0026n=3391723828786559\u0026abc=0\u0026aid=GCCG\u0026amp=0\u0026at=1\u0026c=0\u0026ccp=0\u0026cp=1\u0026d=1\u0026eb=0\u0026ed=6\u0026emi=1yh78s31i4y2\u0026i=1\u0026id=Instream\u0026lid=rl4tk51vgb9o\u0026lsa=set\u0026mt=1\u0026pbd=1\u0026pbr=1\u0026pgi=17iqym4718sf\u0026ph=0\u0026pii=0\u0026pl=125\u0026plc=1\u0026pli=1ptx20j18oo6\u0026pp=html5\u0026prc=2\u0026ps=1\u0026pss=1\u0026pt=Owk%2F%20Porn%20Videos%20for%20Free%20in%20Full%20HD%20%231\u0026pu=https%3A%2F%2Fhqfap.com%2Fsearch%3Fkeyword%3Dowk%2F\u0026pv=8.28.0\u0026pyc=0\u0026s=0\u0026sdk=0\u0026stc=1\u0026stpe=0\u0026tv=4.0.5\u0026vb=0\u0026vi=0\u0026vl=90\u0026wd=300\u0026ab=1\u0026cae=0\u0026cb=0\u0026cdid=jwplayer-container1\u0026cme=0\u0026dd=1\u0026dnt=1\u0026flc=0\u0026fv=\u0026ga=0\u0026lng=en\u0026mk=mp4\u0026mu=https%3A%2F%2Fhqfap.com%2Fupload%2Fvideos%2FInstream.mp4\u0026pbc=0\u0026pd=2\u0026pdr=\u0026plng=en\u0026plt=2300\u0026pni=0\u0026po=0\u0026sp=0\u0026st=980\u0026sa=1767424573716 HTTP/1.1\r\nHost: prd.jwpltx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 03 Jan 2026 07:16:14 GMT\r\nserver: nginx\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d9ef81045d0cf909bd3143957da09138.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: O-Q2AKBqmLWjJsdG6w5_ibqCy2vmhwBEp2X-GBtrQYL8brGCMMTWcg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/upload/player/embed.html","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:11.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /upload/player/embed.html HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night; adb_user=true; adb_user_ts=1767424570743; _ga_9CBDTHEVHY=GS2.1.s1767424570$o1$g0$t1767424570$j60$l0$h0; _ga=GA1.1.433107323.1767424571; r=c3RyaW5n; __suvt=707aba6a4b81d92b9e7621f7610e7358; cf_clearance=ee2IjbD4qb1dRrSjfyOFko5FrCPqhl0RDUznSn.AvUI-1767424571-1.2.1.1-hvznDDyyVvd7.wnrg1aJYp.frzz07cclj941BtpzURg5.YGF5CyjdB7yAk5g4gtk0A.JXOyCY97G.pECxoPOIZ4osPHLOi_cKKO8ebAHfbbmKlsov3643ruVyoFlVePgBQwrK10aDIQHFxoe3iF5boFI0VKtZeYBq50jdTLR7BbF8UDhjUXZQreT4Bu1B4kpMshaXRBPz6NkqESmbRxIxB0eFx4_qXPp6uZHVpeSEMA\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:11 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 01 Jan 2026 10:53:44 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d%2Bz4Kw8wgzFEQ3IAKf4bSuDDgDDpZzWmwHaiCQX7pG9EGjbffw2IONxbGddzXBzulBD2InbVSVscybO7h1Y3CmfWhklz%2BVQ%3D\"}]}\r\ncf-ray: 9b80b593cb0956c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5306,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7edfd551732c89be86c619b65cf5086e","sha1":"a89cc7dc15731596113006bdc78915c0d2c1f8b0","sha256":"ee5a19a135af309ecda0d0dd0036db6cb94ebedb9c69e95f0c6c43992764d5df","sha512":"c7a62bc053fef2516c8d357d09f60951aa92ad7a4b19b75e3aff2452d506065f5a27452d3c2bc9104e5d314bd6c45060778d94614056fef93b219ec32e105db7","ssdeep":"96:g3m+dvrRamyi9XTzsEcWzsE1zPfTYSGBPFWMMWXyVb9SRN21xb3MS6:am+dvF/yi9XTzsEcWzsEZYSGB1xyXoIC","tlshash":"60b14406be375038405391fd5bfbe20c753560479942de48bb9ca6948f7c7b86866bcc","first_seen":"2026-01-03T07:17:14.54609Z","last_seen":"2026-01-04T09:18:31.02287Z","times_seen":5,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:11.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nCookie: __uvt=s%3A32%3A%226b4615f583ad7a61a3b7d7f72c3b8fb9%22%3B; c-tag=%7B%22tag-video%22%3A%22v6%7C%7CNOR%7C5766292%7C121114862%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C6b4615f583ad7a61a3b7d7f72c3b8fb9%7Cfedf893c02a58d3f8f0c78e77b16b788%7C0%7Chqfap.com%7C%7C%7C18%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1767424571%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C2%7C0%7C0%7Cs.magsrv.com%7C%7C%7C%7Chqfap.com%7C0%7C731446fab4a03ce73eb8c1d7b117a13a%7Cok%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 07:16:11 GMT\r\ncontent-type: application/javascript\r\netag: W/\"92eb331739d51c65226b5fdb07e\"\r\nexpires: Wed, 17 Dec 2025 13:24:25 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3vCcAAAwBuUwKEwH3IQAAAAwBJRPCMQG3fwAAAA\r\nx-77-nzt-ray: 2a494a15a726221960c2586959a9822b\r\nx-77-cache: HIT\r\nx-77-age: 10172\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":185387,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39040)","md5":"6bd931315f9ec922d23220a34a506421","sha1":"92eb331739d51c65226b5fdb07ec2d74924f200f","sha256":"28f33740f0a341c823243413c7780d92e7ae39254641174a86a4f51ac805b576","sha512":"26bb36ab577ba2b6486f482177e31992c81c79322070edc9d55af10d7ab8f3e1b9dccc89f7c925a47a68e464f522736c0e64d3d7e4acaa016745e0104bddb167","ssdeep":"3072:cWYjf7+28VOk2DG2cUMaElwnRlqI1fsBHisiEolY4o/CXMXpo:U+28VOk262lElwnRjfs4sXhpo","tlshash":"96045c993792307441d3a11daaff53093371506ab80f4884bb4dd8a427adeea51a3ffd","first_seen":"2025-12-11T15:18:11.624048Z","last_seen":"2026-01-15T17:17:43.902034Z","times_seen":1441,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/provider.html5.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:12.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.28.0/provider.html5.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, immutable\r\nlast-modified: Tue, 22 Aug 2023 18:19:11 GMT\r\netag: \"e8e42a735322eb7478a82bf49c357638\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 03 Jan 2026 07:16:12 GMT\r\nage: 2133835\r\nx-served-by: cache-lga21981-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 0, 5\r\nx-timer: S1767424573.838552,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 14698\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":44252,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (43859)","md5":"e8e42a735322eb7478a82bf49c357638","sha1":"5ef024f2e798985043d7ecb8bf1752cffeb70e55","sha256":"f18d94cc548a0d5e9c36da9f47164f4df4fbd903a9cf0dc8e3a4545622365ce7","sha512":"6c8d8c6fd93db8ab4d8e5dbf25edc0aa244fb9eaff22201931bc467e87061770ca2e85cb7f8db536143b5766020dc7f35b1394853e4c9e0c48bd40bd15247ebd","ssdeep":"768:B2Smc7dAD/v018QK1XCYClPhaiDXIj9ZvDry8wesUukSJLdXhRwTi++2XzPAjrCW:BnG/v01qBBgJOnqhfwXzpIME9Dfm50HJ","tlshash":"4113f89633d4b433c6d296c261750311533e5e5a7848c4acfa299ecb0d5ac8770fabf9","first_seen":"2025-10-07T08:25:20.304883Z","last_seen":"2026-02-25T20:14:13.330081Z","times_seen":40,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":46,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwpsrv.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:12.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.28.0/jwpsrv.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=900, immutable\r\nlast-modified: Wed, 17 Apr 2024 20:18:17 GMT\r\netag: \"d7f3733c71441c1881fc4eabe9c96086\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 03 Jan 2026 07:16:12 GMT\r\nage: 562\r\nx-served-by: cache-lga21963-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 117, 8\r\nx-timer: S1767424573.844349,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 19091\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":67106,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d7f3733c71441c1881fc4eabe9c96086","sha1":"8db1f2f35489a41d1fb63af5b9aad52388c58735","sha256":"9f4c0014a4f36c11302077dc073ef529031ce3eebc04c0ca9bc1d7ea0ed95eca","sha512":"daad1df7ab9c84cb7c1a120fe01a007dc14c6a05e73c8c3afb418c19085d08d85c36128e668890e7d9ad2c084ceb9589fb853a7f06fbc0175028ea7ce8a7e7dd","ssdeep":"768:U2Q5c7PRtE8JKCzyQmr1nEXiGdCeMt+uksp3T:1QAPRtE8JKC2JEXiGdCSudpj","tlshash":"ad63e78d3685752a5b6770b8806fb546723d1dd6304dc610ea50eed93c3de6aa233b2c","first_seen":"2024-04-23T16:41:51Z","last_seen":"2026-02-11T20:51:20.728494Z","times_seen":313,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"entitlements.jwplayer.com/GCCG.json","fqdn":"entitlements.jwplayer.com","domain":"jwplayer.com","tld":"com"},"ip":{"addr":"65.9.46.54","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwplayer.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Wed, 25 Dec 2024 00:00:00 GMT","end":"Sat, 24 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"73:5F:22:36:72:E7:49:11:8F:B7:80:90:DA:4D:43:52:ED:0A:89:13","sha256":"E0:7A:FC:22:76:89:11:1A:58:F4:9F:05:51:C6:71:29:F8:0B:7B:AB:0B:3B:F9:C3:67:76:84:5E:50:04:C4:DF"}}},"request":{"raw":"GET /GCCG.json HTTP/1.1\r\nHost: entitlements.jwplayer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\ncontent-type: application/json\r\ncontent-length: 71\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 03:08:00 GMT\r\ncache-control: max-age=1800, s-maxage=21060\r\naccess-control-allow-origin: *\r\nx-cache: Error from cloudfront\r\nvia: 1.1 0eaf5f30adcca4475fcc2543288cac08.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: crFO_2dA2TIXFyui10q0WZ3lrZLRqQPUsU2H2Ud8kwKFCeXgLRpJhA==\r\nage: 14894\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":71,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5534f424f1d6586164a58758f3e2c51a","sha1":"ef37ca3d8831aaad699430dcaa9967469542d602","sha256":"f28df38bea81995fd78f9077bff2dfc9d60ee13b8c414bc426c61c0e1b0bee86","sha512":"de8d4f36c7f0f85b1fb1a52e22e511fd2e52e7ba6010b39947d72eceb752a60b7578be34dc4c44be6add327cef42a82442099d803bcc3251d84ec05d26fe4d15","ssdeep":"","tlshash":"0da0023eec5654030de616dc3cdae44612f4135c1754544c8e8915ac1adfef24f13311","first_seen":"2023-05-03T00:46:19Z","last_seen":"2026-04-03T20:29:48.300285Z","times_seen":982,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":6,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prd.jwpltx.com/v1/jwplayer6/ping.gif?h=-1276709748\u0026e=ana\u0026n=6729347526958380\u0026aid=GCCG\u0026emi=1ek1srtzd876\u0026id=Instream\u0026pli=ssmwx0rdxk2c\u0026pv=8.28.0\u0026tv=4.0.5\u0026sa=1767424583891","fqdn":"prd.jwpltx.com","domain":"jwpltx.com","tld":"com"},"ip":{"addr":"108.157.229.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:23.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwpltx.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 12 Aug 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E8:9B:D4:42:32:9F:5E:14:C3:36:B5:09:FC:A2:0B:37:DF:D5:E2:D3","sha256":"D1:64:5C:F3:5A:AF:D7:5F:2E:91:2F:C7:B1:E4:F2:91:3C:5A:1E:B9:C2:E9:10:17:7E:59:CF:EC:E6:A0:80:5D"}}},"request":{"raw":"GET /v1/jwplayer6/ping.gif?h=-1276709748\u0026e=ana\u0026n=6729347526958380\u0026aid=GCCG\u0026emi=1ek1srtzd876\u0026id=Instream\u0026pli=ssmwx0rdxk2c\u0026pv=8.28.0\u0026tv=4.0.5\u0026sa=1767424583891 HTTP/1.1\r\nHost: prd.jwpltx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 03 Jan 2026 07:16:23 GMT\r\nserver: nginx\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d9ef81045d0cf909bd3143957da09138.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: 6AOgg-ow6_c060U0deajx6hWWMjru7VDzVfPv4WF5HJuFhSZRtO64g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/css/bootstrap.min.css?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/css/bootstrap.min.css?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 14 Apr 2018 15:31:12 GMT\r\nvary: Accept-Encoding\r\netag: \"5ad21ec0-1c40e\"\r\nexpires: Sat, 03 Jan 2026 17:46:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 5375\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wsclfrju%2BymTqvfZgu4p7O8PzGQx6NUnvx8bhBmb6Yx9wHrKOzWQEKiQh9%2BxyhRhTeYdomQdlcxm%2F%2BieRNxEdspv3roBejA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b5825a9056c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":115726,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65367), with CRLF line terminators","md5":"7c96f7c727eaf9114414b0b166ab6b11","sha1":"a7715725658cd0c6a868aa8e169ff251ef766b5f","sha256":"3162fee070189cad725c62b17a6dd0f30cb570cbc9e0513053fdfbaa73acff5a","sha512":"2c3e79049ef3dc9a5918e70af73cffba187a2793e65e3c9a219b1eb12e149db4ae14ae7a457ede31f1f0f3a5c16ff69691259cc7b8d583fabc42d1f8833dcb2e","ssdeep":"768:B5wGxwdJcjTuXWlJrlMQmdHhAYmQIUYqtAH5mN0lZ2nt52xMCRlG7O2l6yXPwvHp:RwdOFNmdHhAYmFquU0lLTlGi2l6wA","tlshash":"57b3d7a0f21031ea3363c55a72d0ed872259a153e56a4eb7f22f25d84f845cb17b3f1a","first_seen":"2023-05-07T18:40:35Z","last_seen":"2026-03-27T07:23:32.476571Z","times_seen":121,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwpsrv.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:12.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.28.0/jwpsrv.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=900, immutable\r\nlast-modified: Wed, 17 Apr 2024 20:18:17 GMT\r\netag: \"d7f3733c71441c1881fc4eabe9c96086\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 03 Jan 2026 07:16:12 GMT\r\nage: 562\r\nx-served-by: cache-lga21963-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 117, 6\r\nx-timer: S1767424573.838694,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 19091\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":67106,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d7f3733c71441c1881fc4eabe9c96086","sha1":"8db1f2f35489a41d1fb63af5b9aad52388c58735","sha256":"9f4c0014a4f36c11302077dc073ef529031ce3eebc04c0ca9bc1d7ea0ed95eca","sha512":"daad1df7ab9c84cb7c1a120fe01a007dc14c6a05e73c8c3afb418c19085d08d85c36128e668890e7d9ad2c084ceb9589fb853a7f06fbc0175028ea7ce8a7e7dd","ssdeep":"768:U2Q5c7PRtE8JKCzyQmr1nEXiGdCeMt+uksp3T:1QAPRtE8JKC2JEXiGdCSudpj","tlshash":"ad63e78d3685752a5b6770b8806fb546723d1dd6304dc610ea50eed93c3de6aa233b2c","first_seen":"2024-04-23T16:41:51Z","last_seen":"2026-02-11T20:51:20.728494Z","times_seen":313,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":3,"connect":28,"send":0,"wait":36,"receive":27,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwplayer.core.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:12.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.28.0/jwplayer.core.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, immutable\r\nlast-modified: Tue, 22 Aug 2023 18:19:08 GMT\r\netag: \"34de47681547f88d2a251419d61d4a2d\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 03 Jan 2026 07:16:12 GMT\r\nage: 1390167\r\nx-served-by: cache-lga21956-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 76, 1\r\nx-timer: S1767424573.825554,VS0,VE1\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 40476\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":143406,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65143)","md5":"34de47681547f88d2a251419d61d4a2d","sha1":"e9c03590ad2eb86eeee8b0032f345fbeb32bc4c1","sha256":"5a8861552d8484bac63cb929ef4b4e9f2f76726aef84032c76a75b76da4e7ddc","sha512":"96c8659af1758ddc35ee64cf835f983cddb190d2dff7884b86dd259faab6d824c3330d04f2b056f77989be023b1703c9e0e339ce805c0ec480812d2988c305ea","ssdeep":"3072:B5ozmmILBerJhsy7v22m79sTkvpkHkfeKJyuaU:X7DBerJh/aLLkEfPJn","tlshash":"45e33b753181623651da93da72674201a33a45897406c7acff2cedea1c3e88771f6fb8","first_seen":"2025-10-07T08:25:20.374415Z","last_seen":"2026-02-25T20:14:13.377962Z","times_seen":40,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":72,"dns":0,"connect":0,"send":0,"wait":29,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/vast.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:12.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.28.0/vast.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=86400, immutable\r\nlast-modified: Tue, 22 Aug 2023 18:19:15 GMT\r\netag: \"b0deaafb5318980de8c2ee695b76c710\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 03 Jan 2026 07:16:12 GMT\r\nage: 67295\r\nx-served-by: cache-lga21959-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 128, 4\r\nx-timer: S1767424573.837528,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 29522\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":104600,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b0deaafb5318980de8c2ee695b76c710","sha1":"5a3734828b24cac1e1cae1645662b3c9dc26cf82","sha256":"cd51410290d2266cda49882fe9d3d5c67aa9bc5b2c3551c7a5fd9e66cfb40908","sha512":"637b3da699f5ba20b0b2a4e900ffee7b74ae8d9eacbe00a48539454125991172e2c09e4eff00f4e8b95a9a700a48cacc235ad55ac7bf01ca2036fc70150c0891","ssdeep":"1536:ulAE+jE0HEekQmIWTuDkjlOYx1sbRuF5V0U2hw2ubBkrzIjpiIPYqdsrVpQRwOaz:uJ+jEQwjlOcSNSvezkyVpeFamsH","tlshash":"c1a308962395e53246e484e960300242b3350a0f7c0a82acf57dfdef5d5ea4b76baf74","first_seen":"2023-09-16T05:27:40Z","last_seen":"2026-02-25T20:14:13.349587Z","times_seen":58,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":45,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/v1/api.php","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:12.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"POST /v1/api.php HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 480\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nCookie: __uvt=s%3A32%3A%226b4615f583ad7a61a3b7d7f72c3b8fb9%22%3B; c-tag=%7B%22tag-video%22%3A%22v6%7C%7CNOR%7C5764770%7C126691254%7C277106%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C6b4615f583ad7a61a3b7d7f72c3b8fb9%7Cfedf893c02a58d3f8f0c78e77b16b788%7C0%7Chqfap.com%7C%7C%7C20%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1767424571%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C2%7C0%7C0%7Cs.magsrv.com%7C%7C%7C%7Chqfap.com%7C0%7C3071d0a2c5cc3c2a05a9136bfa6b5f33%7Cok%22%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":480,"data":"{\"user\":{\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en-US\",\"referer\":\"https://hqfap.com/upload/player/embed.html\",\"consumer\":\"ad-provider\",\"gdpr\":{\"gdpr\":0},\"screen_resolution\":\"1280x1024\",\"window_orientation\":\"landscape\",\"cookies\":[{\"name\":\"__suvt\",\"value\":\"707aba6a4b81d92b9e7621f7610e7358\"}],\"scr_info\":\"YXN5bmN8fDM%3D\"},\"zones\":[{\"custom_targeting\":{},\"id\":5817802,\"extra_params\":{\"first_request\":true,\"zone_type\":2}}]}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 07:16:12 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://hqfap.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Authorization, Content-Type\r\nAccess-Control-Request-Method: POST\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2290,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1588721356ed831603a9111b6d4ba843","sha1":"2d6c253769c807d17bb7c0a7a89228622bbb3964","sha256":"abdad02142ac410c1f38a54266edccdb55c44566dbba4d5423a075ae801f0df4","sha512":"13017655102bf86c3540970d4e807bfa746a13a27f9f141ab0969f451b2938a7d6fca00b7294341d67e262661942dec4f6ced4625e3a1f73c9b4b5f858fa76e8","ssdeep":"","tlshash":"1341f671f3a4e8fda6e439cc2f4978ecaa2fb50742c18cf6010a6488d53612c2a813d0","first_seen":"2026-01-03T07:17:14.616269Z","last_seen":"2026-01-03T07:17:14.616269Z","times_seen":1,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/930846/35458b02eebbcbda5078f087ddc8d17a7d01a3d1.mp4","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/930846/35458b02eebbcbda5078f087ddc8d17a7d01a3d1.mp4 HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Sat, 03 Jan 2026 07:16:14 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 18743\r\nlast-modified: Fri, 14 Mar 2025 10:57:07 GMT\r\netag: \"67d40b83-4937\"\r\nexpires: Wed, 12 Aug 2026 16:55:07 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap02-sec02-prg1-1\r\nx-77-nzt: EwwBX63NDQH3q069AAwBuUwKAQH3qAEAAAgBw7WvAgGB\r\nx-77-nzt-ray: 2a494a154932a52a63c25869f1bf7322\r\nx-77-cache: HIT\r\nx-77-age: 12406443\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 0-18742/18743\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18743,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"aec0362e49eb5970924b5d2aa600f96b","sha1":"35458b02eebbcbda5078f087ddc8d17a7d01a3d1","sha256":"d134b03c6163e41d9b8568f2726446989c109c1bc42605fef4e79b08d48e2eff","sha512":"55feccdf3c3b1b99df4d4c2a9c5b246c2ba9e9e425d628775a8cf1ef3c0ffae29a7f3be72928845c28cb234195b7994889d392d727dbebb7bc5f41914a2c3512","ssdeep":"384:kzPfgH3O1dSz0uG7QXnGAhY988cX3S2RXrDj+pMFSnd/Woz7:kzPfF1d0kQXnGiW2RXCpM+d/","tlshash":"7f82c092b321e49ad2300ebc49b7a65a71232b1f542c65cfb774a0164e730bf5a6cc6c","first_seen":"2025-08-24T06:33:44.645704Z","last_seen":"2026-01-04T21:57:45.347077Z","times_seen":179,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prd.jwpltx.com/v1/jwplayer6/ping.gif?h=52586667\u0026e=e\u0026n=1019601323381669\u0026abc=0\u0026aid=GCCG\u0026amp=0\u0026at=1\u0026c=0\u0026ccp=0\u0026cp=1\u0026d=1\u0026eb=0\u0026ed=6\u0026emi=1229wxs5j1hm\u0026i=1\u0026id=Instream\u0026lid=rl4tk51vgb9o\u0026lsa=read\u0026mt=1\u0026pbd=1\u0026pbr=1\u0026pgi=itt566gg48sf\u0026ph=0\u0026pii=0\u0026pl=125\u0026plc=1\u0026pli=wgaflv12yqjc\u0026pp=html5\u0026prc=2\u0026ps=1\u0026pss=1\u0026pt=Owk%2F%20Porn%20Videos%20for%20Free%20in%20Full%20HD%20%231\u0026pu=https%3A%2F%2Fhqfap.com%2Fsearch%3Fkeyword%3Dowk%2F\u0026pv=8.28.0\u0026pyc=0\u0026s=0\u0026sdk=0\u0026stc=1\u0026stpe=0\u0026tv=4.0.5\u0026vb=0\u0026vi=0\u0026vl=90\u0026wd=300\u0026ab=1\u0026cae=0\u0026cb=0\u0026cdid=jwplayer-container1\u0026cme=0\u0026dd=1\u0026dnt=1\u0026flc=0\u0026fv=\u0026ga=0\u0026lng=en\u0026mk=mp4\u0026mu=https%3A%2F%2Fhqfap.com%2Fupload%2Fvideos%2FInstream.mp4\u0026pbc=0\u0026pd=2\u0026pdr=\u0026plng=en\u0026plt=2600\u0026pni=0\u0026po=0\u0026sp=0\u0026st=1290\u0026sa=1767424573970","fqdn":"prd.jwpltx.com","domain":"jwpltx.com","tld":"com"},"ip":{"addr":"108.157.229.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwpltx.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 12 Aug 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E8:9B:D4:42:32:9F:5E:14:C3:36:B5:09:FC:A2:0B:37:DF:D5:E2:D3","sha256":"D1:64:5C:F3:5A:AF:D7:5F:2E:91:2F:C7:B1:E4:F2:91:3C:5A:1E:B9:C2:E9:10:17:7E:59:CF:EC:E6:A0:80:5D"}}},"request":{"raw":"GET /v1/jwplayer6/ping.gif?h=52586667\u0026e=e\u0026n=1019601323381669\u0026abc=0\u0026aid=GCCG\u0026amp=0\u0026at=1\u0026c=0\u0026ccp=0\u0026cp=1\u0026d=1\u0026eb=0\u0026ed=6\u0026emi=1229wxs5j1hm\u0026i=1\u0026id=Instream\u0026lid=rl4tk51vgb9o\u0026lsa=read\u0026mt=1\u0026pbd=1\u0026pbr=1\u0026pgi=itt566gg48sf\u0026ph=0\u0026pii=0\u0026pl=125\u0026plc=1\u0026pli=wgaflv12yqjc\u0026pp=html5\u0026prc=2\u0026ps=1\u0026pss=1\u0026pt=Owk%2F%20Porn%20Videos%20for%20Free%20in%20Full%20HD%20%231\u0026pu=https%3A%2F%2Fhqfap.com%2Fsearch%3Fkeyword%3Dowk%2F\u0026pv=8.28.0\u0026pyc=0\u0026s=0\u0026sdk=0\u0026stc=1\u0026stpe=0\u0026tv=4.0.5\u0026vb=0\u0026vi=0\u0026vl=90\u0026wd=300\u0026ab=1\u0026cae=0\u0026cb=0\u0026cdid=jwplayer-container1\u0026cme=0\u0026dd=1\u0026dnt=1\u0026flc=0\u0026fv=\u0026ga=0\u0026lng=en\u0026mk=mp4\u0026mu=https%3A%2F%2Fhqfap.com%2Fupload%2Fvideos%2FInstream.mp4\u0026pbc=0\u0026pd=2\u0026pdr=\u0026plng=en\u0026plt=2600\u0026pni=0\u0026po=0\u0026sp=0\u0026st=1290\u0026sa=1767424573970 HTTP/1.1\r\nHost: prd.jwpltx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 03 Jan 2026 07:16:14 GMT\r\nserver: nginx\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d9ef81045d0cf909bd3143957da09138.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: ta4p60kwoOtujTFJo8VL2jVofY43Kd7Bpi05pBeHp5k4H0DSUmi1pQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/js/tag-it.min.js?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/js/tag-it.min.js?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 05 Apr 2019 16:24:16 GMT\r\nvary: Accept-Encoding\r\netag: \"5ca78130-226a\"\r\nexpires: Sat, 03 Jan 2026 17:46:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 5375\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tGaF1bX%2FCs47FybMuVRzoVzE3sYN6y705H9LVI8FA3Q%2BWrNVr40Nt%2B8T4SGVSUYwwNwu50mSeakcJs8M0uaMiUPWgF8AL8c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b5829a9e56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8810,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (606)","md5":"ecf65dc49d833bb710cafe40a11248ff","sha1":"2ce0d81e18b8ffd6a352e6f9202be21ff6fe6dcc","sha256":"e260f6b3d144fa41726a62b93c24c3da368e5e9b2a3171ad6233466aa41bb55f","sha512":"d5d18aaabb0545540d5add6a002e6d28fcbd3931be79e87b168cbca7b16719ba62f5efcd3d4b94f411ae733ec3905f4a3207fad7eb3951f8c13cd84d2708c82c","ssdeep":"96:Gu+omDzdZJ1RatX86b/Y8lKYVqFpxFXDtrD2XK4VSheyOMi6+UmwRzqNu9:vmPdD1RatXXbgYxazt2K4EQ6+UXRzx","tlshash":"6602514a7347a7f21ae781b491ab514e5339a279da00049cb13bcbdbe43ce505267b3e","first_seen":"2023-03-07T01:31:54Z","last_seen":"2026-04-03T15:29:14.480495Z","times_seen":209,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/js/bootstrap-toggle.min.js?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/js/bootstrap-toggle.min.js?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Aug 2022 18:10:40 GMT\r\nvary: Accept-Encoding\r\netag: \"630d0120-1029\"\r\nexpires: Sat, 03 Jan 2026 17:46:34 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 5374\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DT6jy8gBII2pR9DCgOlkZ80Dyvs1B4OV32U9QJbJPJ84%2BYi%2FcCkuGs2PJJFFLYLmo3fFhAjklgIuIyIMdL8zNVSLRBj1U8I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b5833ac156c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4137,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3690), with CRLF line terminators","md5":"ba3d3758d4e98a9bc77741c1968807cf","sha1":"2f84998c0775c75f16cbd56f1cad827d8736da6b","sha256":"d2630026dc6c1e60f6561bdc55209a4475eb69b5fe2881068bdac5aee5a40334","sha512":"f24aab07fbcc6ba1c16cc5a9db3fa79eeb38050f410947953b921def7396f7cbfb6ae69f82ca84e2c046a69ac322e0454ab122043fea03e6d11287d88c30dc62","ssdeep":"96:F5eST1Ej5uI0ZTponbUF7qpXZPKrjPwT/l/HeoUi:FgST1Ej5uI0ZTponbUF7ciPzi","tlshash":"1d81aa1b313031b7265ac0e6611a510e3125aa7cfa43406c32beedfb6879f263567f36","first_seen":"2023-03-07T16:21:58Z","last_seen":"2026-04-03T15:29:14.444498Z","times_seen":181,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/v1/vast.php?idzone=5764770","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:11.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /v1/vast.php?idzone=5764770 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hqfap.com\r\nReferer: https://hqfap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __uvt=s%3A32%3A%226b4615f583ad7a61a3b7d7f72c3b8fb9%22%3B; c-tag=%7B%22tag-video%22%3A%22v6%7C%7CNOR%7C5766292%7C121114862%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C6b4615f583ad7a61a3b7d7f72c3b8fb9%7Cfedf893c02a58d3f8f0c78e77b16b788%7C0%7Chqfap.com%7C%7C%7C18%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1767424571%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C2%7C0%7C0%7Cs.magsrv.com%7C%7C%7C%7Chqfap.com%7C0%7C731446fab4a03ce73eb8c1d7b117a13a%7Cok%22%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 07:16:11 GMT\r\nContent-Type: text/xml;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: c-tag=%7B%22tag-video%22%3A%22v6%7C%7CNOR%7C5764770%7C126691254%7C277106%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C6b4615f583ad7a61a3b7d7f72c3b8fb9%7Cfedf893c02a58d3f8f0c78e77b16b788%7C0%7Chqfap.com%7C%7C%7C20%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1767424571%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C2%7C0%7C0%7Cs.magsrv.com%7C%7C%7C%7Chqfap.com%7C0%7C3071d0a2c5cc3c2a05a9136bfa6b5f33%7Cok%22%7D; expires=Fri, 03 Apr 2026 07:16:11 GMT; path=/; domain=.magsrv.com; Secure; SameSite=none\r\nAccess-Control-Allow-Origin: https://hqfap.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: X-CH-VALUES\r\nCache-Control: no-store\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Request-Method: GET\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16228,"size_decoded":0,"mime_type":"text/xml; charset=UTF-8","magic":"XML 1.0 document, ASCII text, with very long lines (2202)","md5":"94a7fdd6e6802f8c696d266f4e107f19","sha1":"60724559e965076b7e456be4ddc09e155b910632","sha256":"5cb05ebcd945aab392d119d960961445922c937c00cb9a5639ed67eee9d6a26d","sha512":"bed3383f85f12c2f00d6b2562944ee8688250e759f4664cdb3adf757f1b32bddb7e46abc87ddcbd848d84601fdd69fc17afc13eb05924b81845fa92fe32470dd","ssdeep":"192:uM4+8ZJhQzFOC+8WBozjgniW+8WBozjDh+8WBozjez+8WBozjg7+8WBozjq2cZQo:nARQz3WQgnrWQNWQaWQyWQYZjZF","tlshash":"447239f111e4a73f7611d4f36a85c21dab8718af9cc486abfc5d43822fd68e950e2781","first_seen":"2026-01-03T07:17:14.618276Z","last_seen":"2026-01-03T07:17:14.618276Z","times_seen":1,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:11.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nCookie: __uvt=s%3A32%3A%226b4615f583ad7a61a3b7d7f72c3b8fb9%22%3B; c-tag=%7B%22tag-video%22%3A%22v6%7C%7CNOR%7C5766292%7C121114862%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C6b4615f583ad7a61a3b7d7f72c3b8fb9%7Cfedf893c02a58d3f8f0c78e77b16b788%7C0%7Chqfap.com%7C%7C%7C18%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1767424571%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C2%7C0%7C0%7Cs.magsrv.com%7C%7C%7C%7Chqfap.com%7C0%7C731446fab4a03ce73eb8c1d7b117a13a%7Cok%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 07:16:11 GMT\r\ncontent-type: application/javascript\r\netag: W/\"92eb331739d51c65226b5fdb07e\"\r\nexpires: Wed, 17 Dec 2025 13:24:25 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3vCcAAAwBuUwKEwH3IQAAAAwBJRPCMQG3fwAAAA\r\nx-77-nzt-ray: 2a494a15a726221960c2586959668027\r\nx-77-cache: HIT\r\nx-77-age: 10172\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":185387,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39040)","md5":"6bd931315f9ec922d23220a34a506421","sha1":"92eb331739d51c65226b5fdb07ec2d74924f200f","sha256":"28f33740f0a341c823243413c7780d92e7ae39254641174a86a4f51ac805b576","sha512":"26bb36ab577ba2b6486f482177e31992c81c79322070edc9d55af10d7ab8f3e1b9dccc89f7c925a47a68e464f522736c0e64d3d7e4acaa016745e0104bddb167","ssdeep":"3072:cWYjf7+28VOk2DG2cUMaElwnRlqI1fsBHisiEolY4o/CXMXpo:U+28VOk262lElwnRjfs4sXhpo","tlshash":"96045c993792307441d3a11daaff53093371506ab80f4884bb4dd8a427adeea51a3ffd","first_seen":"2025-12-11T15:18:11.624048Z","last_seen":"2026-01-15T17:17:43.902034Z","times_seen":1441,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/provider.html5.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:12.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.28.0/provider.html5.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, immutable\r\nlast-modified: Tue, 22 Aug 2023 18:19:11 GMT\r\netag: \"e8e42a735322eb7478a82bf49c357638\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 03 Jan 2026 07:16:12 GMT\r\nage: 2133835\r\nx-served-by: cache-lga21981-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 0, 4\r\nx-timer: S1767424573.837372,VS0,VE1\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 14698\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":44252,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (43859)","md5":"e8e42a735322eb7478a82bf49c357638","sha1":"5ef024f2e798985043d7ecb8bf1752cffeb70e55","sha256":"f18d94cc548a0d5e9c36da9f47164f4df4fbd903a9cf0dc8e3a4545622365ce7","sha512":"6c8d8c6fd93db8ab4d8e5dbf25edc0aa244fb9eaff22201931bc467e87061770ca2e85cb7f8db536143b5766020dc7f35b1394853e4c9e0c48bd40bd15247ebd","ssdeep":"768:B2Smc7dAD/v018QK1XCYClPhaiDXIj9ZvDry8wesUukSJLdXhRwTi++2XzPAjrCW:BnG/v01qBBgJOnqhfwXzpIME9Dfm50HJ","tlshash":"4113f89633d4b433c6d296c261750311533e5e5a7848c4acfa299ecb0d5ac8770fabf9","first_seen":"2025-10-07T08:25:20.304883Z","last_seen":"2026-02-25T20:14:13.330081Z","times_seen":40,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":39,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"entitlements.jwplayer.com/GCCG.json","fqdn":"entitlements.jwplayer.com","domain":"jwplayer.com","tld":"com"},"ip":{"addr":"65.9.46.54","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwplayer.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Wed, 25 Dec 2024 00:00:00 GMT","end":"Sat, 24 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"73:5F:22:36:72:E7:49:11:8F:B7:80:90:DA:4D:43:52:ED:0A:89:13","sha256":"E0:7A:FC:22:76:89:11:1A:58:F4:9F:05:51:C6:71:29:F8:0B:7B:AB:0B:3B:F9:C3:67:76:84:5E:50:04:C4:DF"}}},"request":{"raw":"GET /GCCG.json HTTP/1.1\r\nHost: entitlements.jwplayer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\ncontent-type: application/json\r\ncontent-length: 71\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 03:08:00 GMT\r\ncache-control: max-age=1800, s-maxage=21060\r\naccess-control-allow-origin: *\r\nx-cache: Error from cloudfront\r\nvia: 1.1 0eaf5f30adcca4475fcc2543288cac08.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: ZVc3SZM1OK-RjDf_r-RMLq1Mx_x7BP7kJrG3mm4S5aytaVKY7jOSZg==\r\nage: 14894\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":71,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5534f424f1d6586164a58758f3e2c51a","sha1":"ef37ca3d8831aaad699430dcaa9967469542d602","sha256":"f28df38bea81995fd78f9077bff2dfc9d60ee13b8c414bc426c61c0e1b0bee86","sha512":"de8d4f36c7f0f85b1fb1a52e22e511fd2e52e7ba6010b39947d72eceb752a60b7578be34dc4c44be6add327cef42a82442099d803bcc3251d84ec05d26fe4d15","ssdeep":"","tlshash":"0da0023eec5654030de616dc3cdae44612f4135c1754544c8e8915ac1adfef24f13311","first_seen":"2023-05-03T00:46:19Z","last_seen":"2026-04-03T20:29:48.300285Z","times_seen":982,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":2,"connect":20,"send":0,"wait":12,"receive":48,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwplayer.controls.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.28.0/jwplayer.controls.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, immutable\r\nlast-modified: Tue, 22 Aug 2023 18:19:07 GMT\r\netag: \"1fde4fff33b8be6ebe2530808273fe7b\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 03 Jan 2026 07:16:14 GMT\r\nage: 1388015\r\nx-served-by: cache-lga21946-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 3, 215\r\nx-timer: S1767424574.160184,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 45480\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":193500,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65143)","md5":"1fde4fff33b8be6ebe2530808273fe7b","sha1":"0810766277301777c5fd5fc031040fc5cc315df5","sha256":"ef7d843e4bd08aceacb89d07e82add18b04e2b2a1b4ddb0784c1573374ec9448","sha512":"7aea8e374962935b5a74d86e3d718b2ce0825117c0a1fd3f07294345186e9f28eea3480f04bd190ad4dfed9cccf84c4d07440770ee4f2ecdeb0d185f9055d28a","ssdeep":"1536:BCUKr35YneqmSoQQD/5YIuhhAuUkJrPyoyjQ7ru+7AHYzwC0suZrqlHdDPjmOoRR:B+r35Yer5Yk7REBvB5sYgwmf8q","tlshash":"b9140922614256349ae6c1daa7504b04f73a8141f652deecfd7dedcc849e9ca30fa7b0","first_seen":"2025-10-07T08:25:20.241872Z","last_seen":"2026-02-25T20:14:13.37576Z","times_seen":40,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/upload/videos/Instream.mp4","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:25.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /upload/videos/Instream.mp4 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/upload/player/embed.html\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night; adb_user=true; adb_user_ts=1767424570743; _ga_9CBDTHEVHY=GS2.1.s1767424570$o1$g0$t1767424570$j60$l0$h0; _ga=GA1.1.433107323.1767424571; r=c3RyaW5n; __suvt=707aba6a4b81d92b9e7621f7610e7358; cf_clearance=ee2IjbD4qb1dRrSjfyOFko5FrCPqhl0RDUznSn.AvUI-1767424571-1.2.1.1-hvznDDyyVvd7.wnrg1aJYp.frzz07cclj941BtpzURg5.YGF5CyjdB7yAk5g4gtk0A.JXOyCY97G.pECxoPOIZ4osPHLOi_cKKO8ebAHfbbmKlsov3643ruVyoFlVePgBQwrK10aDIQHFxoe3iF5boFI0VKtZeYBq50jdTLR7BbF8UDhjUXZQreT4Bu1B4kpMshaXRBPz6NkqESmbRxIxB0eFx4_qXPp6uZHVpeSEMA; __nuvt=6b4615f583ad7a61a3b7d7f72c3b8fb9; _popprepop=1\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:25 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 19092\r\nlast-modified: Fri, 25 Apr 2025 02:29:38 GMT\r\netag: \"680af392-4a94\"\r\nstrict-transport-security: max-age=31536000\r\nage: 158\r\ncontent-range: bytes 0-19091/19092\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-security-policy-report-only: script-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=KWMrJmoe5MWZ.Wz8kyUFKlILe8xBGM.Baehp9mCakCM-1767424585.8985662-1.0.1.1-7GCJatyIHsOFTq72kcrwUOS07uwaRnSQatBoUqKzGZ6j3v7U9mhL4nCA3lm.fZEoNxGS5ReZEwfEZHzn7pU7Y6eoOXpj9PeN_UOp7dKyqKGEhQ8LzBVNMNez7fe3h5J75oYUpDsQ7V4z14nTpGiokwucxdGBSoU4jjjRB9YSrQE; report-to cf-csp-endpoint\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uSH1eLaSYIoW8fWtsmKvn%2BPQ3m%2FN0gGgVF3TH5Ziasbh7JHuJFiXx1kpKkhe%2BackZbBx%2FkHVP6%2BgoOgtT0s8TOXVrdDXeuE%3D\"}]}, {\"group\":\"cf-csp-endpoint\",\"max_age\":86400,\"endpoints\":[{\"url\":\"https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=KWMrJmoe5MWZ.Wz8kyUFKlILe8xBGM.Baehp9mCakCM-1767424585.8985662-1.0.1.1-7GCJatyIHsOFTq72kcrwUOS07uwaRnSQatBoUqKzGZ6j3v7U9mhL4nCA3lm.fZEoNxGS5ReZEwfEZHzn7pU7Y6eoOXpj9PeN_UOp7dKyqKGEhQ8LzBVNMNez7fe3h5J75oYUpDsQ7V4z14nTpGiokwucxdGBSoU4jjjRB9YSrQE\"}]}\r\ncf-ray: 9b80b5eddd6556c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19092,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"55b1e12ea01c20e17199043f574555e4","sha1":"6bdf9ddb0d0680ae2aabc31ff90738c1f309c4d5","sha256":"f6449300e17e9d77239e8aa07d8e37c912f707a6af9cec3688528cb94562633f","sha512":"d313cb478dd95b527ad9501e96dd0fe54fed2697321f818d2f2733124d880e2b81a582b2718e8df5d38e577686cba8613a629b0a4b6db96b17fcfb326a579b1e","ssdeep":"384:UcXmExtJcuyz4iElUrowWkMq18QnjnEthMdmBSvkfvUH:hvxPZTflWFMG80zEwUBWIcH","tlshash":"ed82c00b8bea306fceb06638648f51109a0aa463594773d7e25ce39f6df46c18fe7254","first_seen":"2025-12-05T22:01:21.190692Z","last_seen":"2026-02-25T20:14:13.408731Z","times_seen":15,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/search?keyword=owk/","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-03T07:16:08.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /search?keyword=owk/ HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; path=/; HttpOnly\n_uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; expires=Tue, 01 Jan 2036 07:16:08 GMT; Max-Age=315360000; path=/\nmode=night; expires=Tue, 01 Jan 2036 07:16:08 GMT; Max-Age=315360000; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L6MgNmXT8QB2mkABm%2FCJOGe7NIVt%2Fh8zm3JCX64gA4q0yfAMZFqshTAZa0uqDssr%2FBXSQhD%2B4ggTc5wynKKM9LFuV3mxWX4%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9b80b57f6a2d56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Socket.io","description":"","website":"https://socket.io","common_platform_enumeration":"","icon":"Socket.io.svg","categories":["JavaScript frameworks"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Material Design Lite","description":"Material Design Lite is a library of components for web developers.","website":"https://getmdl.io","common_platform_enumeration":"","icon":"Material Design Lite.png","categories":["UI frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"SweetAlert2","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]},{"name":"FingerprintJS:2","description":"FingerprintJS is a browser fingerprinting library that queries browser attributes and computes a hashed visitor identifier from them.","website":"https://fingerprintjs.com","common_platform_enumeration":"","icon":"FingerprintJS.svg","categories":["JavaScript libraries","Browser fingerprinting"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Glyphicons","description":"Glyphicons are icon fonts which you can use in your web projects.","website":"https://glyphicons.com","common_platform_enumeration":"","icon":"Glyphicons.png","categories":["Font scripts"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":179442,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (13363), with CRLF, LF line terminators","md5":"3529dd9f30853968873ed9bd160e5040","sha1":"4aa208ea41d217391ee9c642e5118e5a5b61346b","sha256":"c6e31ce330f14a88dba9486aa7a5faf0c4f2f45e88e68445dffa9a3063c8fd39","sha512":"5e771a2aa264e9c3f88457af84deeaef78b525caf82e8ccd62e75eb651e6cb38b373084cf77ef22eaefc1355efedcddf4144a20e2e1e3abd91a246c998eb157b","ssdeep":"3072:pDYv1/H76k66r669LlwoOVQBMfQnpS/hDlUk:pDYv1LLlAfio/ck","tlshash":"8e041b1ab1f89436447353b6ce7b9408fa3b60779502cd50bdac16f0af709a9513fea8","first_seen":"2026-01-03T07:17:14.619247Z","last_seen":"2026-01-03T07:17:14.619247Z","times_seen":1,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":18,"dns":1,"connect":1,"send":0,"wait":222,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:11.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nCookie: __uvt=s%3A32%3A%226b4615f583ad7a61a3b7d7f72c3b8fb9%22%3B; c-tag=%7B%22tag-video%22%3A%22v6%7C%7CNOR%7C5766292%7C121114862%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C6b4615f583ad7a61a3b7d7f72c3b8fb9%7Cfedf893c02a58d3f8f0c78e77b16b788%7C0%7Chqfap.com%7C%7C%7C18%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1767424571%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C2%7C0%7C0%7Cs.magsrv.com%7C%7C%7C%7Chqfap.com%7C0%7C731446fab4a03ce73eb8c1d7b117a13a%7Cok%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 07:16:11 GMT\r\ncontent-type: application/javascript\r\netag: W/\"92eb331739d51c65226b5fdb07e\"\r\nexpires: Wed, 17 Dec 2025 13:24:25 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3vCcAAAwBuUwKEwH3IQAAAAwBJRPCMQG3fwAAAA\r\nx-77-nzt-ray: 2a494a15a726221960c25869cef52d2b\r\nx-77-cache: HIT\r\nx-77-age: 10172\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":185387,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39040)","md5":"6bd931315f9ec922d23220a34a506421","sha1":"92eb331739d51c65226b5fdb07ec2d74924f200f","sha256":"28f33740f0a341c823243413c7780d92e7ae39254641174a86a4f51ac805b576","sha512":"26bb36ab577ba2b6486f482177e31992c81c79322070edc9d55af10d7ab8f3e1b9dccc89f7c925a47a68e464f522736c0e64d3d7e4acaa016745e0104bddb167","ssdeep":"3072:cWYjf7+28VOk2DG2cUMaElwnRlqI1fsBHisiEolY4o/CXMXpo:U+28VOk262lElwnRjfs4sXhpo","tlshash":"96045c993792307441d3a11daaff53093371506ab80f4884bb4dd8a427adeea51a3ffd","first_seen":"2025-12-11T15:18:11.624048Z","last_seen":"2026-01-15T17:17:43.902034Z","times_seen":1441,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.pemsrv.com/v1/api.php","fqdn":"s.pemsrv.com","domain":"pemsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:10.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pemsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:59:06 GMT","end":"Thu, 26 Mar 2026 11:59:05 GMT"},"fingerprint":{"sha1":"8C:23:43:2A:16:0E:E5:14:D7:54:DB:F5:5F:BB:56:E4:32:AF:3B:BA","sha256":"91:45:ED:F2:0E:35:83:14:E7:B4:0D:2D:8E:1A:A6:05:62:4F:B6:6E:83:8A:0C:D3:BF:D4:8A:1C:A7:19:9D:9C"}}},"request":{"raw":"POST /v1/api.php HTTP/1.1\r\nHost: s.pemsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 416\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":416,"data":"{\"user\":{\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en-US\",\"referer\":\"https://hqfap.com/search?keyword=owk/\",\"consumer\":\"ad-provider\",\"gdpr\":{\"gdpr\":0},\"screen_resolution\":\"1280x1024\",\"window_orientation\":\"landscape\",\"cookies\":[],\"scr_info\":\"YXN5bmN8fDM%3D\"},\"zones\":[{\"custom_targeting\":{},\"id\":5791120,\"extra_params\":{\"first_request\":true,\"zone_type\":35}}]}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 07:16:10 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://hqfap.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Authorization, Content-Type\r\nAccess-Control-Request-Method: POST\r\nSet-Cookie: __uvt=s%3A32%3A%22e29b318fbe8c03221f31eea6b88ddadf%22%3B; expires=Mon, 03 Jan 2028 07:16:10 GMT; Max-Age=63072000; path=/; domain=pemsrv.com; secure; SameSite=None\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2425,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"546e09bc0509b8710b88c0ee5dd758c2","sha1":"5d4cd6293dc5434a2e19042429f8b2c2f41e99bf","sha256":"e2a54b5d45ed0c1c668436db3e828c2c45e47b784f44f051279adef40e2bb79a","sha512":"e16701b3c6fe75a7e881a80847944cc85b0d5a93b2f05c2792f3041aefc5234cb434499c65eb1420a32ab20bde6938e7b1070c3a53b91432093d7312598aa655","ssdeep":"","tlshash":"4441fab07fd06c65cbd5e5497d8e202659b27a1befc9cd554044cdbc2afe9240640711","first_seen":"2026-01-03T07:17:14.620322Z","last_seen":"2026-01-03T07:17:14.620322Z","times_seen":1,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/css/jquery-ui.min.css?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/css/jquery-ui.min.css?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 05 Aug 2016 19:50:16 GMT\r\nvary: Accept-Encoding\r\netag: \"57a4edf8-7323\"\r\nexpires: Sat, 03 Jan 2026 17:46:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 5375\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gW73PkJh%2FyeCSB4p4xzS%2FQGtqXQrXxX2j5m5OogX8jSwKNEyzK8V6hSFisgTyMVm1ct9bExx2vJ8uD11%2BqQDE17Z%2Fy8sE0w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b5824a8b56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29475,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (27875)","md5":"de6d3f4cc78829e242fbeb65403fd23b","sha1":"be2465d882fcd94a6a3c5ca25b8942c5c16f9c8f","sha256":"ebcb51a2bf92dfdeb3dfad642eaed2a471dc3452a87d848e3e4e7a8c25347e59","sha512":"db138fba664f216335e8b02e9e33c04daa706a964b08fbab1e7efc28b086808c2d07ac95a0c617149bac1b8f26b836394f605c8df0f6c5e1274950863b5863b0","ssdeep":"384:MCREnR8lOXM1egFMzymUh+4x6GcOzDBSc7nfZBhVtQ:MhjXMFMznURx6GcOzDfBhY","tlshash":"22d23030a5c2253dfe33d13061e11ef4523bc142eda25fbda09ab65953ea8e4c47b971","first_seen":"2023-04-09T17:48:37Z","last_seen":"2026-04-03T15:29:14.528378Z","times_seen":207,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/js/jquery-ui.min.js?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/js/jquery-ui.min.js?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 02 Apr 2017 16:31:28 GMT\r\nvary: Accept-Encoding\r\netag: \"58e12760-3dee4\"\r\nexpires: Sat, 03 Jan 2026 17:46:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 5375\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YbCKiN%2B4mkRE74obWaiwoP77%2Fz2egMl3aOC1hOvwANyD3whfjK3yvNPa7isltPYRM02UEJ9DFP7apUDvMQ5BPeCCmgwbWwY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b5828a9956c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":253668,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32073)","md5":"0a497d4661df7b82feee14332ce0bdaf","sha1":"f77d06b0c5dedef1f1db051a44a2b0d7f233ba3a","sha256":"55accff7b642c2d7a402cbe03c1494c0f14a76bc03dee9d47d219562b6a152a5","sha512":"e036a2057f2bb203a805234b71e43f222c4317eb940d5d2126b417fcc27d470259083a9b129d048c8428746c6cccfb53a7095e9c9ce74768e48035aa8f81ecf8","ssdeep":"3072:FkHOJD1g7SV7opRBXDrtnAcKYvFJi/5PLO1aG0qF2/nwOW16j:qp/KvjOVlFYQ16j","tlshash":"1b44f74d72003a2296dbe2a5103b2a0fa237515da605805cb53dcedf9e7de4431bbfb9","first_seen":"2023-03-07T01:06:22Z","last_seen":"2026-04-04T02:53:23.90382Z","times_seen":11528,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/player/plugins/ads/ads.min.css?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/player/plugins/ads/ads.min.css?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Fri, 29 Sep 2017 00:42:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 03 Jan 2026 17:46:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 5375\r\ncf-cache-status: HIT\r\netag: W/\"59cd96ec-188\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ttYHQXe4j7D5Ve%2F8tdF5uw9PtMXJJBTcGfYZzSLfkc%2BLDzyXKxATHx7VxTh3BtmZiXv2%2F1EMf7oXzxv%2FDF91uptGJb9w%2BM%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9b80b582cab056c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":392,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (392), with no line terminators","md5":"0491290fd4c990ed518bd74e456884bc","sha1":"61bf7c3b57ca932f2514edad57b638eb6e6756ed","sha256":"74a2529896a006eefbb7a947ff7497c8ad0ea2df7e9e7d5ab2842f9a9c0c8317","sha512":"29b1ba7bf3a13ddc0257df8841cd62cde571abbf84669d799ebe8de79bc0536069ae9f839b6feb238eb71f5a6a89ab7cde062f94c453e22bcb201ee84afffd28","ssdeep":"","tlshash":"66e02b70569853e4bf7e61179c41837b11f70344fc13aa6f9234a8e9da890d114fd916","first_seen":"2023-04-09T17:48:37Z","last_seen":"2026-04-03T15:29:14.40659Z","times_seen":199,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-9CBDTHEVHY","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:10.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:40 GMT","end":"Wed, 25 Feb 2026 15:49:39 GMT"},"fingerprint":{"sha1":"A1:49:37:FE:E0:3E:26:88:A3:64:37:DC:04:D7:8D:D1:D3:F3:91:75","sha256":"BB:61:22:1A:6C:67:5D:C0:C8:A6:73:93:B9:53:82:98:95:54:B5:52:8B:33:FC:08:58:01:D2:3B:FF:E6:35:12"}}},"request":{"raw":"GET /gtag/js?id=G-9CBDTHEVHY HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 03 Jan 2026 07:16:10 GMT\r\nexpires: Sat, 03 Jan 2026 07:16:10 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143221\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":433324,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"644597f443d2596f674e6e3685d2949b","sha1":"d99c14f780673d79c10908414463e396b8dd9760","sha256":"efcbf56c1e278cb4ac8e245cce1f19f89425a15a46233cc01af5a59fb8e614f0","sha512":"4e48bb8412b1c338efdc71dc66ac63c48f6d132de296a98f413718e769dde42718428373fe1b64bc715e75e221f4ce7d4de02d6d311a745f21eee92183750a50","ssdeep":"6144:RjIe7ma2bulKY/1u99xHDmHYmyBFzvnsyRO6jJWoNPad4FpC1xY:uC8bu7/1mbrnsy39WbMpb","tlshash":"dd941ace73c674269396e078503f118ba57b29e2b45cc896f189cce02d74a9a4277f7c","first_seen":"2026-01-02T21:45:02.481572Z","last_seen":"2026-01-03T07:17:14.622595Z","times_seen":2,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hornyhill.com/ajax/get_ads_suggest?type=search\u0026mode=list\u0026title=owk%2F\u0026limit=16\u0026page=1","fqdn":"hornyhill.com","domain":"hornyhill.com","tld":"com"},"ip":{"addr":"104.21.59.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:10.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hornyhill.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Dec 2025 03:53:08 GMT","end":"Tue, 10 Mar 2026 04:51:53 GMT"},"fingerprint":{"sha1":"F4:04:7E:A3:6E:31:BF:3C:95:9F:25:20:09:D1:94:A5:4E:BA:38:D4","sha256":"F7:2A:F4:07:51:14:EB:7F:3A:A5:34:85:E0:1A:9B:26:48:83:2A:C7:38:CD:89:8F:A9:E7:38:CB:08:48:8B:21"}}},"request":{"raw":"GET /ajax/get_ads_suggest?type=search\u0026mode=list\u0026title=owk%2F\u0026limit=16\u0026page=1 HTTP/1.1\r\nHost: hornyhill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hqfap.com/\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 07:16:10 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nset-cookie: lbcount=0; expires=Sat, 03-Jan-2026 16:00:00 GMT; Max-Age=31430; path=/\nci_session=lpp0b0593502fir2su10ovdc26m5v3h4; expires=Sat, 03-Jan-2026 09:16:10 GMT; Max-Age=7200; path=/; HttpOnly; SameSite=Lax\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, no-store, max-age=0, no-cache\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YnUuOXQiStYE65PW%2BFvxjnMM2hyFn2RyjiZDSycHSANp6hSW7g21NQb0JFqNii4oExHNao8%2Fqzxb4aLiRY8xoIyJDuJ0SgbrzTD9HUM%3D\"}]}\r\ncf-ray: 9b80b58ce8648deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37127,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1238cc093a65ffd686506113d50ec049","sha1":"75495647b86bace47a36cd1a97e9d2e8d7ff5b79","sha256":"fdb24341b1da66cc34c36f11a446d944ddf03700474b00c7e6e49ba1442bcafe","sha512":"ade37fd3b1e3638592494cd4b82a077507832786834f9b05c8567dd5ec1b8300a8827d1a97861b330991eaeb80ac06daa1273a764d539d65072eba39e6191520","ssdeep":"384:Yc7mKqJx3KNniGuPGGHIS5LS8ohMoOaBxwhB+fMYBmM8hQBphNzHBTzKEBZTxes0:4d3/9AwBD82747dcNuu6umM","tlshash":"b6f2eda288ee157b0212c6c71d246e1e3e63f049cdf61e02b3ed469ca7dbe91de0b550","first_seen":"2026-01-03T07:17:14.623599Z","last_seen":"2026-01-03T07:17:14.623599Z","times_seen":1,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":16,"dns":1,"connect":1,"send":0,"wait":290,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA4VQS05DMQy8Chfo09hO7Lhr1iCBOEDyPrApFCqhIvnwpK9VVbEhoygj25mxzWDdgDaQO/CWdEscToNjSDxQTvHw+BSJ4u1zqfth/NiFC0rSXkSgFARz7m8uZAUcGSXMhCEcRK6JiVMkhAQ6OEtKKzPEy/P9eqmDQ4AjZ3R+sgzGGicuOBK6hraklJdcpE5Wlao0m2wxHqWVpXmo1imXMqtTsrkKcXVAKkicl1m6Gm7m6PpMLiXYwN0NA8htbQVXbE5/hJJwb7sfxBquh5/3MeKm8IR8GRKr09/sJZOu9OxzGHb19fD1vfZEZw+55M4b6Kuy2qrW1ApNzs1nU6bFlDCb5PL/amKhSUdr2cqo1Vy1lZl64ShjK5P5L3WCKtQHAgAA\u0026cb=e2e_6958c23cd32295.42757169","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA4VQS05DMQy8Chfo09hO7Lhr1iCBOEDyPrApFCqhIvnwpK9VVbEhoygj25mxzWDdgDaQO/CWdEscToNjSDxQTvHw+BSJ4u1zqfth/NiFC0rSXkSgFARz7m8uZAUcGSXMhCEcRK6JiVMkhAQ6OEtKKzPEy/P9eqmDQ4AjZ3R+sgzGGicuOBK6hraklJdcpE5Wlao0m2wxHqWVpXmo1imXMqtTsrkKcXVAKkicl1m6Gm7m6PpMLiXYwN0NA8htbQVXbE5/hJJwb7sfxBquh5/3MeKm8IR8GRKr09/sJZOu9OxzGHb19fD1vfZEZw+55M4b6Kuy2qrW1ApNzs1nU6bFlDCb5PL/amKhSUdr2cqo1Vy1lZl64ShjK5P5L3WCKtQHAgAA\u0026cb=e2e_6958c23cd32295.42757169 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nCookie: __uvt=s%3A32%3A%226b4615f583ad7a61a3b7d7f72c3b8fb9%22%3B; c-tag=%7B%22tag-video%22%3A%22v6%7C%7CNOR%7C5764770%7C126691254%7C277106%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C6b4615f583ad7a61a3b7d7f72c3b8fb9%7Cfedf893c02a58d3f8f0c78e77b16b788%7C0%7Chqfap.com%7C%7C%7C20%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1767424571%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C2%7C0%7C0%7Cs.magsrv.com%7C%7C%7C%7Chqfap.com%7C0%7C3071d0a2c5cc3c2a05a9136bfa6b5f33%7Cok%22%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 07:16:14 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://hqfap.com\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/js/lib/sweetalert2/dist/sweetalert2.js?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/js/lib/sweetalert2/dist/sweetalert2.js?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 16 Oct 2017 01:01:32 GMT\r\nvary: Accept-Encoding\r\netag: \"59e404ec-d542\"\r\nexpires: Sat, 03 Jan 2026 17:46:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 5375\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cVHM3m5kGtJuN5XN3i1WtW1yeJKUjeg77gcYjrAHXQZnegze6ZWb4AFyEzBqDZteUGNFETZqAygQHaSWyyCARXTmR5zYj0c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b5829aa256c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54594,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2206)","md5":"26f51c40a5d1b87799413af218113ceb","sha1":"0bcde4eedbc422482df96529e5b7874b71323c17","sha256":"2e07b9ce9513efb37b45b10510d453af3026ed062c3423c21e57cf6fb0caad02","sha512":"91198836eb58c1642be69963221aea7c62a3b99f4fe691a3d3c949390eb16a315dff9612f530c9b8d647f8045e0f1bfbf09d210bf517934760c4e2748f178f56","ssdeep":"1536:8Km4E29vcP7E1YopstyvkFF9PlbhRd9aqtCIhsPB2:G4Z7Ihsk","tlshash":"2e335e992df621221aab207a57df900979614053b008ee107cbcd6606fe4d745bfaefa","first_seen":"2023-03-07T16:16:44Z","last_seen":"2026-04-03T15:29:14.339256Z","times_seen":211,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.pemsrv.com/ad-provider.js","fqdn":"a.pemsrv.com","domain":"pemsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pemsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Oct 2025 14:38:47 GMT","end":"Sat, 17 Jan 2026 14:38:46 GMT"},"fingerprint":{"sha1":"16:DB:C0:84:B9:67:99:32:B2:65:B9:B4:19:A3:A4:E7:78:E9:46:B2","sha256":"C4:03:5E:C5:AB:57:86:05:02:9F:9E:F3:BD:1B:01:5E:C2:F0:0F:F0:14:40:3E:FF:68:BC:99:E6:3B:D1:2A:F5"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.pemsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: application/javascript\r\netag: W/\"9aadc21458924cf509e9e4cd443\"\r\nexpires: Wed, 17 Dec 2025 13:23:54 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH32CcAAAwBuUwKAQH3RwAAAAwBw7WvAgG3ogAAAA\r\nx-77-nzt-ray: 2a494a15b75839195dc25869fc76e833\r\nx-77-cache: HIT\r\nx-77-age: 10200\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":185361,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39040)","md5":"6b6a035a8d534745768f430968527ddc","sha1":"9aadc21458924cf509e9e4cd443e12dd21c1a24d","sha256":"fa1550d32fff4d3ae5d6e1061002ce4b162cf5d8602828d8537edf417fb19d3d","sha512":"fc3e8f5e9b0b7a862cce263a82a12a31bcf9e310f3931861c90376815e30d7aedfb38ddf18fc91689083c1acea845bbb7cc8f51a843688d622be1b9c6c1d9c74","ssdeep":"3072:cWYjf7+28VOk2DG2cUMaElwnRlqI1fsBHisiEolY4o/CXMzpo:U+28VOk262lElwnRjfs4sXJpo","tlshash":"3b045d993792307441d3a11da9ff53093371506ab80f4884bb4dd8a427adeea51a3ffd","first_seen":"2025-12-11T18:04:56.436466Z","last_seen":"2026-01-14T02:16:11.491697Z","times_seen":88,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":30,"connect":1,"send":0,"wait":1,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/js/mztn.js?v=2.19","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:10.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/js/mztn.js?v=2.19 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 15 Dec 2025 04:12:11 GMT\r\nvary: Accept-Encoding\r\netag: \"693f8a9b-5899\"\r\nexpires: Sat, 03 Jan 2026 17:46:36 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 5374\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FNi9gsC6H0cexYIUmrsphJE9h2VGwwAd9PpQzrPXbaLnAxYI13N%2BWPWJMER7JUn53ow2XWBLqzJA3HF0ML%2FH3BgSWpI9tFs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b58c3ae256c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22681,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13363)","md5":"809891680189b28bd549dc485235fa1b","sha1":"55e3b55e8fcf598c9add3cd8564c0d9685e211a1","sha256":"1647185284914402cf6f3aa814c280434b7eee17ad8fa45e90947bb389c33522","sha512":"57cd43f4fb06b2cfe996ae6beffd2313c00f17a617916f4505a89fcf43dfa3d9686d54156528726080f28375e0409dc3b739547856b0f891425d469c408261d0","ssdeep":"384:5isyKwQKCwBD6PKBOiolBpcKBD9NrVG1gxEGB/ySsPFbmEVlqOvBvZ7MNd0Ux4+k:AsyKqD6mMvpcODHwu8F66wjXRwzT","tlshash":"00a20706be75783949db84bd463fd10cf830261bb406d490bd9ce9d4afa0e0a457ebb9","first_seen":"2025-12-19T23:45:08.36194Z","last_seen":"2026-01-04T09:18:30.992703Z","times_seen":15,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:10.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 07:16:10 GMT\r\ncontent-type: application/javascript\r\netag: W/\"92eb331739d51c65226b5fdb07e\"\r\nexpires: Wed, 17 Dec 2025 13:24:25 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3uycAAAwBuUwKEwH3IQAAAAwBJRPCMQG3fwAAAA\r\nx-77-nzt-ray: 2a494a15a72622195fc25869adf18b1a\r\nx-77-cache: HIT\r\nx-77-age: 10171\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":185387,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39040)","md5":"6bd931315f9ec922d23220a34a506421","sha1":"92eb331739d51c65226b5fdb07ec2d74924f200f","sha256":"28f33740f0a341c823243413c7780d92e7ae39254641174a86a4f51ac805b576","sha512":"26bb36ab577ba2b6486f482177e31992c81c79322070edc9d55af10d7ab8f3e1b9dccc89f7c925a47a68e464f522736c0e64d3d7e4acaa016745e0104bddb167","ssdeep":"3072:cWYjf7+28VOk2DG2cUMaElwnRlqI1fsBHisiEolY4o/CXMXpo:U+28VOk262lElwnRjfs4sXhpo","tlshash":"96045c993792307441d3a11daaff53093371506ab80f4884bb4dd8a427adeea51a3ffd","first_seen":"2025-12-11T15:18:11.624048Z","last_seen":"2026-01-15T17:17:43.902034Z","times_seen":1441,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/930846/177cf681e77130008beac264ade264940dfe8cff.mp4","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/930846/177cf681e77130008beac264ade264940dfe8cff.mp4 HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Sat, 03 Jan 2026 07:16:14 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 25665\r\nlast-modified: Tue, 12 Aug 2025 15:26:50 GMT\r\netag: \"689b5d3a-6441\"\r\nexpires: Wed, 12 Aug 2026 16:55:19 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap01-sec02-prg1-1\r\nx-77-nzt: EwwBX63NDQH3oU69AAwBuUwKAQH3ogEAAAwBJRPCVwG3BAAAAA\r\nx-77-nzt-ray: 2a494a154932a52a63c2586953a4710f\r\nx-77-cache: HIT\r\nx-77-age: 12406433\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 0-25664/25665\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":25665,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"4aa5ceff6add2111fab878b733414587","sha1":"177cf681e77130008beac264ade264940dfe8cff","sha256":"6b26f8250c3330b44cbb5c36a880ba22a8465212fc356fcf092a99a0b04f6b67","sha512":"69bd63c16d3bc2cffb13f04abd7e45ed6da81d0ed0309d03884e0ffdacdf53d3f6b145de5f50e6ac20cd5002303a22401d77f7987d923cda44532c359cef4867","ssdeep":"384:hxW21vIzi0P1UcLbqWJzDReLCRFyO+ql0xG+AYhRSlQLaJEJatOcndIT7:LWU0im1q+zDILCPt+ql0xUYhR4YaU","tlshash":"78b2e0fcbf7a0a22f3c193780ae82e0ed716d59641b532af666357403e1ed742c9144c","first_seen":"2025-08-18T14:29:36.771057Z","last_seen":"2026-01-07T06:46:51.427448Z","times_seen":155,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/provider.html5.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:12.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.28.0/provider.html5.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, immutable\r\nlast-modified: Tue, 22 Aug 2023 18:19:11 GMT\r\netag: \"e8e42a735322eb7478a82bf49c357638\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 03 Jan 2026 07:16:12 GMT\r\nage: 2133835\r\nx-served-by: cache-lga21981-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 0, 6\r\nx-timer: S1767424573.838905,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 14698\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":44252,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (43859)","md5":"e8e42a735322eb7478a82bf49c357638","sha1":"5ef024f2e798985043d7ecb8bf1752cffeb70e55","sha256":"f18d94cc548a0d5e9c36da9f47164f4df4fbd903a9cf0dc8e3a4545622365ce7","sha512":"6c8d8c6fd93db8ab4d8e5dbf25edc0aa244fb9eaff22201931bc467e87061770ca2e85cb7f8db536143b5766020dc7f35b1394853e4c9e0c48bd40bd15247ebd","ssdeep":"768:B2Smc7dAD/v018QK1XCYClPhaiDXIj9ZvDry8wesUukSJLdXhRwTi++2XzPAjrCW:BnG/v01qBBgJOnqhfwXzpIME9Dfm50HJ","tlshash":"4113f89633d4b433c6d296c261750311533e5e5a7848c4acfa299ecb0d5ac8770fabf9","first_seen":"2025-10-07T08:25:20.304883Z","last_seen":"2026-02-25T20:14:13.330081Z","times_seen":40,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":19,"send":0,"wait":36,"receive":18,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwplayer.controls.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.28.0/jwplayer.controls.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, immutable\r\nlast-modified: Tue, 22 Aug 2023 18:19:07 GMT\r\netag: \"1fde4fff33b8be6ebe2530808273fe7b\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 03 Jan 2026 07:16:14 GMT\r\nage: 1388015\r\nx-served-by: cache-lga21946-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 3, 212\r\nx-timer: S1767424574.135773,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 45480\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":193500,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65143)","md5":"1fde4fff33b8be6ebe2530808273fe7b","sha1":"0810766277301777c5fd5fc031040fc5cc315df5","sha256":"ef7d843e4bd08aceacb89d07e82add18b04e2b2a1b4ddb0784c1573374ec9448","sha512":"7aea8e374962935b5a74d86e3d718b2ce0825117c0a1fd3f07294345186e9f28eea3480f04bd190ad4dfed9cccf84c4d07440770ee4f2ecdeb0d185f9055d28a","ssdeep":"1536:BCUKr35YneqmSoQQD/5YIuhhAuUkJrPyoyjQ7ru+7AHYzwC0suZrqlHdDPjmOoRR:B+r35Yer5Yk7REBvB5sYgwmf8q","tlshash":"b9140922614256349ae6c1daa7504b04f73a8141f652deecfd7dedcc849e9ca30fa7b0","first_seen":"2025-10-07T08:25:20.241872Z","last_seen":"2026-02-25T20:14:13.37576Z","times_seen":40,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/upload/videos/Instream.mp4","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:25.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /upload/videos/Instream.mp4 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/upload/player/embed.html\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night; adb_user=true; adb_user_ts=1767424570743; _ga_9CBDTHEVHY=GS2.1.s1767424570$o1$g0$t1767424570$j60$l0$h0; _ga=GA1.1.433107323.1767424571; r=c3RyaW5n; __suvt=707aba6a4b81d92b9e7621f7610e7358; cf_clearance=ee2IjbD4qb1dRrSjfyOFko5FrCPqhl0RDUznSn.AvUI-1767424571-1.2.1.1-hvznDDyyVvd7.wnrg1aJYp.frzz07cclj941BtpzURg5.YGF5CyjdB7yAk5g4gtk0A.JXOyCY97G.pECxoPOIZ4osPHLOi_cKKO8ebAHfbbmKlsov3643ruVyoFlVePgBQwrK10aDIQHFxoe3iF5boFI0VKtZeYBq50jdTLR7BbF8UDhjUXZQreT4Bu1B4kpMshaXRBPz6NkqESmbRxIxB0eFx4_qXPp6uZHVpeSEMA; __nuvt=6b4615f583ad7a61a3b7d7f72c3b8fb9; _popprepop=1\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:25 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 19092\r\nlast-modified: Fri, 25 Apr 2025 02:29:38 GMT\r\netag: \"680af392-4a94\"\r\nstrict-transport-security: max-age=31536000\r\nage: 158\r\ncontent-range: bytes 0-19091/19092\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LQu9NOi1mnyD9HlpTPmvFFljeYP9yxXREsQ9RuO%2FU2KwoCdg6Gld61ioQ5%2BB6BgKr6dr8A%2B3Radh2NUkV%2B173ERg68vwqnc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b80b5ee0d6656c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19092,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"55b1e12ea01c20e17199043f574555e4","sha1":"6bdf9ddb0d0680ae2aabc31ff90738c1f309c4d5","sha256":"f6449300e17e9d77239e8aa07d8e37c912f707a6af9cec3688528cb94562633f","sha512":"d313cb478dd95b527ad9501e96dd0fe54fed2697321f818d2f2733124d880e2b81a582b2718e8df5d38e577686cba8613a629b0a4b6db96b17fcfb326a579b1e","ssdeep":"384:UcXmExtJcuyz4iElUrowWkMq18QnjnEthMdmBSvkfvUH:hvxPZTflWFMG80zEwUBWIcH","tlshash":"ed82c00b8bea306fceb06638648f51109a0aa463594773d7e25ce39f6df46c18fe7254","first_seen":"2025-12-05T22:01:21.190692Z","last_seen":"2026-02-25T20:14:13.408731Z","times_seen":15,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/player/plugins/quality/quality.min.css?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/player/plugins/quality/quality.min.css?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1217,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1217), with no line terminators","md5":"6bd27cf8dc7c148583790b27a01bee54","sha1":"6e692515d0c54e844bf0597f6380887be709bd2b","sha256":"96167bc941b8f729ff53e0657775aecbbde9601c75cc6e28a1ca7c9795ed4f3a","sha512":"18e68096c478d52fd6f6692447164cfecd2313c5d9bc7adcc91e75a4d25b69f96af785d269de490e73225031d33f3177a0cdc20abb0be33d07f3b5b44bcbe08a","ssdeep":"","tlshash":"2221ad58d1d4003aa42bc3be1d462aaff433c353ee5485bb9c2cc120c94e8ed66a5823","first_seen":"2023-04-09T17:48:37Z","last_seen":"2026-04-03T15:29:14.344024Z","times_seen":217,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Lato:300,400,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:09.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css?family=Lato:300,400,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 03 Jan 2026 07:16:09 GMT\r\ndate: Sat, 03 Jan 2026 07:16:09 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2338,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a6a8770e0dec38dbdcac1fc4ca5aed60","sha1":"4f62e8be743a3f9d55f503459acb39e4f53c98b4","sha256":"2ee9a2e1d70e54507bead416d305bd6d6ac85f5aa13b4237691761e40158907e","sha512":"aba16d6509caccb6aece1e7aa4c0296330171eb5ae5cf28c7288726c39a50026524e619712313065780083f653a1c65ef9d7fb78f14a825d2365ac83e373a1ca","ssdeep":"","tlshash":"3641bd91096fb508db830cc212c97d32ef1f625064499835aeff14d8bca7c699362b0d","first_seen":"2025-09-17T05:08:41.336713Z","last_seen":"2026-04-04T03:12:15.671297Z","times_seen":5213,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":117,"dns":0,"connect":7,"send":0,"wait":34,"receive":0,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/896850/e77b70737571c1142157d20830a3442e07be21ad.webp","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:11.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/896850/e77b70737571c1142157d20830a3442e07be21ad.webp HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 07:16:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 61914\r\nlast-modified: Sun, 07 Sep 2025 22:22:42 GMT\r\netag: \"68be05b2-f1da\"\r\nexpires: Mon, 07 Sep 2026 22:43:53 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap01-sec01-prg1-1\r\nx-77-nzt: EwwBX63NDQH3HoKZAAwBuUwKEwH3gjMBAAwBJRPCVwG38gEAAA\r\nx-77-nzt-ray: 2a494a154932a52a60c25869e13c4b0a\r\nx-77-cache: HIT\r\nx-77-age: 10060318\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":61914,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d7e48d6b04a063676d480a8e084d3e98","sha1":"e77b70737571c1142157d20830a3442e07be21ad","sha256":"a832f852a17292838ebcd3ec9ef68c01327d3d6dc166857339d844361779406b","sha512":"7142a0d1902da9f84cf5e9d1fe23ef524fbe823cac391c37aed72b19f498a961861a145a12e9a7718c890c74b61e93714df23dbad3b2ebd2ec0911164bbacd6b","ssdeep":"1536:OxsagoLIkgVBJQQ7DDiZGGkxTsONT0ZzOexGwq:3YHqBJQQHzGk2Ol0ZzNIp","tlshash":"e953024508e6998a0458defe09faf6beb6df902c2514dbbc56306d17a83264dcbf50c3","first_seen":"2025-10-05T18:23:33.888195Z","last_seen":"2026-01-04T09:18:31.095547Z","times_seen":27,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":78,"dns":48,"connect":7,"send":0,"wait":1,"receive":4,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prxycdn.servequake.com/imgcdn.php?src=https://www.xmegadrive.com/contents/videos_screenshots/335000/335708/preview.jpg","fqdn":"prxycdn.servequake.com","domain":"prxycdn.servequake.com","tld":"servequake.com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:11.347Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /imgcdn.php?src=https://www.xmegadrive.com/contents/videos_screenshots/335000/335708/preview.jpg HTTP/1.1\r\nHost: prxycdn.servequake.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":6995,"timings":{"blocked":6994,"dns":1,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"prxycdn.servequake.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"prd.jwpltx.com/v1/jwplayer6/ping.gif?h=-737676361\u0026e=e\u0026n=0648136519011673\u0026abc=0\u0026aid=GCCG\u0026amp=0\u0026at=1\u0026c=0\u0026ccp=0\u0026cp=1\u0026d=1\u0026eb=0\u0026ed=6\u0026emi=h5yrq1zk1k3z\u0026i=1\u0026id=Instream\u0026lid=rl4tk51vgb9o\u0026lsa=read\u0026mt=1\u0026pbd=1\u0026pbr=1\u0026pgi=1mjwte01dio7\u0026ph=0\u0026pii=0\u0026pl=125\u0026plc=1\u0026pli=1fqxv4zma7n8\u0026pp=html5\u0026prc=2\u0026ps=1\u0026pss=1\u0026pt=Owk%2F%20Porn%20Videos%20for%20Free%20in%20Full%20HD%20%231\u0026pu=https%3A%2F%2Fhqfap.com%2Fsearch%3Fkeyword%3Dowk%2F\u0026pv=8.28.0\u0026pyc=0\u0026s=0\u0026sdk=0\u0026stc=1\u0026stpe=0\u0026tv=4.0.5\u0026vb=0\u0026vi=0\u0026vl=90\u0026wd=300\u0026ab=1\u0026cae=0\u0026cb=0\u0026cdid=jwplayer-container1\u0026cme=0\u0026dd=1\u0026dnt=1\u0026flc=0\u0026fv=\u0026ga=0\u0026lng=en\u0026mk=mp4\u0026mu=https%3A%2F%2Fhqfap.com%2Fupload%2Fvideos%2FInstream.mp4\u0026pbc=0\u0026pd=2\u0026pdr=\u0026plng=en\u0026plt=2050\u0026pni=0\u0026po=0\u0026sp=0\u0026st=690\u0026sa=1767424573466","fqdn":"prd.jwpltx.com","domain":"jwpltx.com","tld":"com"},"ip":{"addr":"108.157.229.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwpltx.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 12 Aug 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E8:9B:D4:42:32:9F:5E:14:C3:36:B5:09:FC:A2:0B:37:DF:D5:E2:D3","sha256":"D1:64:5C:F3:5A:AF:D7:5F:2E:91:2F:C7:B1:E4:F2:91:3C:5A:1E:B9:C2:E9:10:17:7E:59:CF:EC:E6:A0:80:5D"}}},"request":{"raw":"GET /v1/jwplayer6/ping.gif?h=-737676361\u0026e=e\u0026n=0648136519011673\u0026abc=0\u0026aid=GCCG\u0026amp=0\u0026at=1\u0026c=0\u0026ccp=0\u0026cp=1\u0026d=1\u0026eb=0\u0026ed=6\u0026emi=h5yrq1zk1k3z\u0026i=1\u0026id=Instream\u0026lid=rl4tk51vgb9o\u0026lsa=read\u0026mt=1\u0026pbd=1\u0026pbr=1\u0026pgi=1mjwte01dio7\u0026ph=0\u0026pii=0\u0026pl=125\u0026plc=1\u0026pli=1fqxv4zma7n8\u0026pp=html5\u0026prc=2\u0026ps=1\u0026pss=1\u0026pt=Owk%2F%20Porn%20Videos%20for%20Free%20in%20Full%20HD%20%231\u0026pu=https%3A%2F%2Fhqfap.com%2Fsearch%3Fkeyword%3Dowk%2F\u0026pv=8.28.0\u0026pyc=0\u0026s=0\u0026sdk=0\u0026stc=1\u0026stpe=0\u0026tv=4.0.5\u0026vb=0\u0026vi=0\u0026vl=90\u0026wd=300\u0026ab=1\u0026cae=0\u0026cb=0\u0026cdid=jwplayer-container1\u0026cme=0\u0026dd=1\u0026dnt=1\u0026flc=0\u0026fv=\u0026ga=0\u0026lng=en\u0026mk=mp4\u0026mu=https%3A%2F%2Fhqfap.com%2Fupload%2Fvideos%2FInstream.mp4\u0026pbc=0\u0026pd=2\u0026pdr=\u0026plng=en\u0026plt=2050\u0026pni=0\u0026po=0\u0026sp=0\u0026st=690\u0026sa=1767424573466 HTTP/1.1\r\nHost: prd.jwpltx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 03 Jan 2026 07:16:14 GMT\r\nserver: nginx\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d9ef81045d0cf909bd3143957da09138.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: shi-YFSdALvG0nroZOuAj7XtOrYjvouYfBe_NtqUiRjUdUiIeXTpaA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":10,"connect":9,"send":0,"wait":136,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prd.jwpltx.com/v1/jwplayer6/ping.gif?h=1918341154\u0026e=ana\u0026n=7758062421824466\u0026aid=GCCG\u0026emi=1229wxs5j1hm\u0026id=Instream\u0026pli=wgaflv12yqjc\u0026pv=8.28.0\u0026tv=4.0.5\u0026sa=1767424583973","fqdn":"prd.jwpltx.com","domain":"jwpltx.com","tld":"com"},"ip":{"addr":"108.157.229.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:23.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwpltx.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 12 Aug 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E8:9B:D4:42:32:9F:5E:14:C3:36:B5:09:FC:A2:0B:37:DF:D5:E2:D3","sha256":"D1:64:5C:F3:5A:AF:D7:5F:2E:91:2F:C7:B1:E4:F2:91:3C:5A:1E:B9:C2:E9:10:17:7E:59:CF:EC:E6:A0:80:5D"}}},"request":{"raw":"GET /v1/jwplayer6/ping.gif?h=1918341154\u0026e=ana\u0026n=7758062421824466\u0026aid=GCCG\u0026emi=1229wxs5j1hm\u0026id=Instream\u0026pli=wgaflv12yqjc\u0026pv=8.28.0\u0026tv=4.0.5\u0026sa=1767424583973 HTTP/1.1\r\nHost: prd.jwpltx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 03 Jan 2026 07:16:24 GMT\r\nserver: nginx\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d9ef81045d0cf909bd3143957da09138.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: GSi1gcqlucb3gTTMlGDdsLGyY9v8DbXfmbjCeXyykEdVIVLT_8vCcA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/player/plugins/speed/speed.min.css?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/player/plugins/speed/speed.min.css?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 29 Sep 2017 00:41:14 GMT\r\nvary: Accept-Encoding\r\netag: \"59cd96aa-584\"\r\nexpires: Sat, 03 Jan 2026 17:46:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 5375\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TJLGmiNePODGYGIyifhXgI3QL3aOJvLLWgSmixifBhrtuJ1GbwpsrxnMSJHkQWCTzecVbQYUp8pwX8umYAUDOQI8ToxfaWo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b582baab56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1412,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1412), with no line terminators","md5":"af26796818af216edda46bf4831eaf65","sha1":"98b9735bc256d4db723ab130ff4b8281d5a179d5","sha256":"3596dcafe5888d9d296aec03eb487378bd66a0fd6d8beabd017311a314833708","sha512":"94c87d4f3ffb89e8e9e993458ec166f7d60fff60d6ecfc9f560ac74d29af2b75dcc1fe5d6ddd417f59e58543e7feeeca2c12fe80cc062ea74fef5012a5776e48","ssdeep":"","tlshash":"0321f86079880b3aa46b71ef1dd2be79e057d393ad148739dd34d32cca448a1721ed16","first_seen":"2023-04-09T17:48:37Z","last_seen":"2026-04-03T15:29:14.491093Z","times_seen":234,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/player/jwplayer/jwplayer.js","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:11.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/player/jwplayer/jwplayer.js HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/upload/player/embed.html\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night; adb_user=true; adb_user_ts=1767424570743; _ga_9CBDTHEVHY=GS2.1.s1767424570$o1$g0$t1767424570$j60$l0$h0; _ga=GA1.1.433107323.1767424571; r=c3RyaW5n; __suvt=707aba6a4b81d92b9e7621f7610e7358; cf_clearance=ee2IjbD4qb1dRrSjfyOFko5FrCPqhl0RDUznSn.AvUI-1767424571-1.2.1.1-hvznDDyyVvd7.wnrg1aJYp.frzz07cclj941BtpzURg5.YGF5CyjdB7yAk5g4gtk0A.JXOyCY97G.pECxoPOIZ4osPHLOi_cKKO8ebAHfbbmKlsov3643ruVyoFlVePgBQwrK10aDIQHFxoe3iF5boFI0VKtZeYBq50jdTLR7BbF8UDhjUXZQreT4Bu1B4kpMshaXRBPz6NkqESmbRxIxB0eFx4_qXPp6uZHVpeSEMA\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 31 Jul 2024 16:56:10 GMT\r\nvary: Accept-Encoding\r\netag: \"66aa6caa-1ab86\"\r\nexpires: Sat, 03 Jan 2026 18:00:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 4544\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xOwrpimyC0Gnl7ZB9cRXmZlSsOCt5z%2B%2FljvG2PLEErpZnu2kofCQ3d7GSJXtfu20vVNuXp6QbBlghQvX5L0SM5ovz7ZDun0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b594db1056c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109446,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65144)","md5":"6e5c94c322f1ed5f37be56c1bc238e82","sha1":"f6551ac521a2a3c69c8e7ee3ae3b3ab89f9d6217","sha256":"d44d79b928de5d70dce3be8a2f4e5fd40b958159a2a26b1e596a932e28b89975","sha512":"ee57f923459ab5b39553d260a014d6af902a2e1d92254e1f09d699d6f3a1b0f3a0ad80e85ae649c8b0e79154bfd45bcc5b55803161d93808bce5673396a45f21","ssdeep":"1536:B0rFRlUxyv0CcKnKqkf1QiYKDjAPkMUtbKSrRo1gBUSPgGSP3ECTP+MLdGm/Ggd8:BCvxK91ZauoiUB+MLdGX","tlshash":"c6b309e531c2b4e603e624daa07a4041f23a0945380dd5a4fa6cede63d6b947b177fbc","first_seen":"2023-11-18T19:26:42Z","last_seen":"2026-01-15T03:44:34.886381Z","times_seen":62,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/v1/api.php","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"POST /v1/api.php HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 480\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nCookie: __uvt=s%3A32%3A%226b4615f583ad7a61a3b7d7f72c3b8fb9%22%3B; c-tag=%7B%22tag-video%22%3A%22v6%7C%7CNOR%7C5764770%7C126691254%7C277106%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C6b4615f583ad7a61a3b7d7f72c3b8fb9%7Cfedf893c02a58d3f8f0c78e77b16b788%7C0%7Chqfap.com%7C%7C%7C20%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1767424571%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C2%7C0%7C0%7Cs.magsrv.com%7C%7C%7C%7Chqfap.com%7C0%7C3071d0a2c5cc3c2a05a9136bfa6b5f33%7Cok%22%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":480,"data":"{\"user\":{\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en-US\",\"referer\":\"https://hqfap.com/upload/player/embed.html\",\"consumer\":\"ad-provider\",\"gdpr\":{\"gdpr\":0},\"screen_resolution\":\"1280x1024\",\"window_orientation\":\"landscape\",\"cookies\":[{\"name\":\"__suvt\",\"value\":\"707aba6a4b81d92b9e7621f7610e7358\"}],\"scr_info\":\"YXN5bmN8fDM%3D\"},\"zones\":[{\"custom_targeting\":{},\"id\":5817802,\"extra_params\":{\"first_request\":true,\"zone_type\":2}}]}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 07:16:13 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://hqfap.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Authorization, Content-Type\r\nAccess-Control-Request-Method: POST\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2288,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bd9cff361a4751444b6832e35e3165c6","sha1":"8b7f433907f6f1b0ff47327ec031146cdb043a6a","sha256":"259b03e5a33a5eb21eb82a953f677b3d41d4891e5575a3c34848a5e145809ec3","sha512":"c7384b891098200c19ef4fea1f80727f3caf0e5c7967d9b6ee586e010d2ecf2bb3b19eaa7d1aeb5d135425d1bfd75743437934d4c2dbe458873aee44757723a5","ssdeep":"","tlshash":"2b41cb793250c8b755e69e9c4e8d399c3d2b32079ac14dd1110e85dfee3912c0741757","first_seen":"2026-01-03T07:17:14.629378Z","last_seen":"2026-01-03T07:17:14.629378Z","times_seen":1,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/v1/api.php","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"POST /v1/api.php HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 480\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nCookie: __uvt=s%3A32%3A%226b4615f583ad7a61a3b7d7f72c3b8fb9%22%3B; c-tag=%7B%22tag-video%22%3A%22v6%7C%7CNOR%7C5764770%7C126691254%7C277106%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C6b4615f583ad7a61a3b7d7f72c3b8fb9%7Cfedf893c02a58d3f8f0c78e77b16b788%7C0%7Chqfap.com%7C%7C%7C20%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1767424571%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C2%7C0%7C0%7Cs.magsrv.com%7C%7C%7C%7Chqfap.com%7C0%7C3071d0a2c5cc3c2a05a9136bfa6b5f33%7Cok%22%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":480,"data":"{\"user\":{\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en-US\",\"referer\":\"https://hqfap.com/upload/player/embed.html\",\"consumer\":\"ad-provider\",\"gdpr\":{\"gdpr\":0},\"screen_resolution\":\"1280x1024\",\"window_orientation\":\"landscape\",\"cookies\":[{\"name\":\"__suvt\",\"value\":\"707aba6a4b81d92b9e7621f7610e7358\"}],\"scr_info\":\"YXN5bmN8fDM%3D\"},\"zones\":[{\"custom_targeting\":{},\"id\":5817802,\"extra_params\":{\"first_request\":true,\"zone_type\":2}}]}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 07:16:14 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://hqfap.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Authorization, Content-Type\r\nAccess-Control-Request-Method: POST\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2287,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3bcac398a7c60d42bb9c101017fbee45","sha1":"6d86ce2e0267cc7a1358e03101ec5c430c4d3abe","sha256":"3ae4bbf7e1af4b88794ff8403b813cd07ce0626efcb425297c7920891a42a3a8","sha512":"386b0ca84e439bccac2432297af8f0330de06c7c6aa272709ee24910bfe53545b04d73a6b4be9b87ddde82084cbdf0ad465e4f3997c1be1d7d6a9c28a19a4051","ssdeep":"","tlshash":"0741cab932e0c8f96ff166cd1f4b3c1cde1a31239f9658c6120cc6c4d93da241a01755","first_seen":"2026-01-03T07:17:14.630559Z","last_seen":"2026-01-03T07:17:14.630559Z","times_seen":1,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":1,"connect":25,"send":0,"wait":92,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/player/plugins/speed/speed-i18n.js?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/player/plugins/speed/speed-i18n.js?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 29 Sep 2017 00:41:28 GMT\r\nvary: Accept-Encoding\r\netag: \"59cd96b8-771\"\r\nexpires: Sat, 03 Jan 2026 17:46:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 5375\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5kdmuhKDr9xPl5nx7l38HmIUXdH94hP8ute60F3osfdrKJBNyc6SY4GYRyU4VcxrHV6UsL9n751GnGzXxTFJbaCRkAIqWMY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b582caac56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1905,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"5e4bbd30be5b520daddaa739a02cb3c2","sha1":"48a15af0763908e0754b9b155bd397b904627b43","sha256":"ea94ddd8f52f977d5a1f8298da9b6c271279b49e4651e2bac51247763a6c3860","sha512":"e2628b548b12fd4b2d8297c56b13dc71156ec06da49da49db7bec3e13c79a5a435ee0c0e17a86d35a0548e88959e65ae83f626e9df9d75438e25ff5525405a48","ssdeep":"","tlshash":"e64103d92bb94a17199db0d48c0a8709a89c573b1bb05d70b229de0c36a15937dbc279","first_seen":"2023-03-07T16:16:44Z","last_seen":"2026-04-03T15:29:14.52917Z","times_seen":199,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.pemsrv.com/ad-provider.js","fqdn":"a.pemsrv.com","domain":"pemsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:09.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pemsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Oct 2025 14:38:47 GMT","end":"Sat, 17 Jan 2026 14:38:46 GMT"},"fingerprint":{"sha1":"16:DB:C0:84:B9:67:99:32:B2:65:B9:B4:19:A3:A4:E7:78:E9:46:B2","sha256":"C4:03:5E:C5:AB:57:86:05:02:9F:9E:F3:BD:1B:01:5E:C2:F0:0F:F0:14:40:3E:FF:68:BC:99:E6:3B:D1:2A:F5"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.pemsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 07:16:09 GMT\r\ncontent-type: application/javascript\r\netag: W/\"9aadc21458924cf509e9e4cd443\"\r\nexpires: Wed, 17 Dec 2025 13:23:54 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH32ScAAAwBuUwKAQH3RwAAAAwBw7WvAgG3ogAAAA\r\nx-77-nzt-ray: 2a494a15b75839195ec25869e70e1d1f\r\nx-77-cache: HIT\r\nx-77-age: 10201\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":185361,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39040)","md5":"6b6a035a8d534745768f430968527ddc","sha1":"9aadc21458924cf509e9e4cd443e12dd21c1a24d","sha256":"fa1550d32fff4d3ae5d6e1061002ce4b162cf5d8602828d8537edf417fb19d3d","sha512":"fc3e8f5e9b0b7a862cce263a82a12a31bcf9e310f3931861c90376815e30d7aedfb38ddf18fc91689083c1acea845bbb7cc8f51a843688d622be1b9c6c1d9c74","ssdeep":"3072:cWYjf7+28VOk2DG2cUMaElwnRlqI1fsBHisiEolY4o/CXMzpo:U+28VOk262lElwnRjfs4sXJpo","tlshash":"3b045d993792307441d3a11da9ff53093371506ab80f4884bb4dd8a427adeea51a3ffd","first_seen":"2025-12-11T18:04:56.436466Z","last_seen":"2026-01-14T02:16:11.491697Z","times_seen":88,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA4VQSU4DQQz8Ch/IqGz35pw5gwTiAe7JDFxYI6Eg+fE4nQgiLnSpuy1vZReDywa0gVyBt1S2lFxpUkyJJ8rJb27vPJE/va/2Ns2vz66ClkokESKXUJXjz41qA3tG81qFIexEWhITN09wcQQ4S0rDqvCH++txKcAuwIEzwj5SOmP4oxoHAicvPRXKa25iu2qFTHrd1bXyLL2tXb0U2+XWlqKU6mJCbAqIgUR5XSS64WKP6M+k0pwrONgwxcw8RsEPNscaoSQcY8eBD7ftv15m94vEI/J5SQymv1GcBfg1x7ufnu1x//E5ZqITh5xjJwVCqmrdiqXeaKfcdamFaa2FsFTJ7X9pPM2qlrWIzNa6iTaeWUqItOgSIn0DCGWIPwcCAAA=\u0026cb=e2e_6958c23e373294.54256265","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA4VQSU4DQQz8Ch/IqGz35pw5gwTiAe7JDFxYI6Eg+fE4nQgiLnSpuy1vZReDywa0gVyBt1S2lFxpUkyJJ8rJb27vPJE/va/2Ns2vz66ClkokESKXUJXjz41qA3tG81qFIexEWhITN09wcQQ4S0rDqvCH++txKcAuwIEzwj5SOmP4oxoHAicvPRXKa25iu2qFTHrd1bXyLL2tXb0U2+XWlqKU6mJCbAqIgUR5XSS64WKP6M+k0pwrONgwxcw8RsEPNscaoSQcY8eBD7ftv15m94vEI/J5SQymv1GcBfg1x7ufnu1x//E5ZqITh5xjJwVCqmrdiqXeaKfcdamFaa2FsFTJ7X9pPM2qlrWIzNa6iTaeWUqItOgSIn0DCGWIPwcCAAA=\u0026cb=e2e_6958c23e373294.54256265 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nCookie: __uvt=s%3A32%3A%226b4615f583ad7a61a3b7d7f72c3b8fb9%22%3B; c-tag=%7B%22tag-video%22%3A%22v6%7C%7CNOR%7C5764770%7C126691254%7C277106%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C6b4615f583ad7a61a3b7d7f72c3b8fb9%7Cfedf893c02a58d3f8f0c78e77b16b788%7C0%7Chqfap.com%7C%7C%7C20%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1767424571%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C2%7C0%7C0%7Cs.magsrv.com%7C%7C%7C%7Chqfap.com%7C0%7C3071d0a2c5cc3c2a05a9136bfa6b5f33%7Cok%22%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 07:16:14 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://hqfap.com\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prd.jwpltx.com/v1/jwplayer6/ping.gif?h=-1886303313\u0026e=e\u0026n=6688307344239954\u0026abc=0\u0026aid=GCCG\u0026amp=0\u0026at=1\u0026c=0\u0026ccp=0\u0026cp=1\u0026d=1\u0026eb=0\u0026ed=6\u0026emi=1u7a1mf1g79n\u0026i=1\u0026id=Instream\u0026lid=rl4tk51vgb9o\u0026lsa=read\u0026mt=1\u0026pbd=1\u0026pbr=1\u0026pgi=1svxwgfsa47b\u0026ph=0\u0026pii=0\u0026pl=125\u0026plc=1\u0026pli=qw6icbecmfp1\u0026pp=html5\u0026prc=2\u0026ps=1\u0026pss=1\u0026pt=Owk%2F%20Porn%20Videos%20for%20Free%20in%20Full%20HD%20%231\u0026pu=https%3A%2F%2Fhqfap.com%2Fsearch%3Fkeyword%3Dowk%2F\u0026pv=8.28.0\u0026pyc=0\u0026s=0\u0026sdk=0\u0026stc=2\u0026stpe=0\u0026tv=4.0.5\u0026vb=0\u0026vi=0\u0026vl=90\u0026wd=300\u0026ab=1\u0026cae=0\u0026cb=0\u0026cdid=jwplayer-container2\u0026cme=0\u0026dd=1\u0026dnt=1\u0026flc=0\u0026fv=\u0026ga=0\u0026lng=en\u0026mk=mp4\u0026mu=https%3A%2F%2Fhqfap.com%2Fupload%2Fvideos%2FInstream.mp4\u0026pbc=0\u0026pd=2\u0026pdr=\u0026plng=en\u0026plt=2350\u0026pni=0\u0026po=0\u0026sp=0\u0026st=1010\u0026sa=1767424573808","fqdn":"prd.jwpltx.com","domain":"jwpltx.com","tld":"com"},"ip":{"addr":"108.157.229.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwpltx.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 12 Aug 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E8:9B:D4:42:32:9F:5E:14:C3:36:B5:09:FC:A2:0B:37:DF:D5:E2:D3","sha256":"D1:64:5C:F3:5A:AF:D7:5F:2E:91:2F:C7:B1:E4:F2:91:3C:5A:1E:B9:C2:E9:10:17:7E:59:CF:EC:E6:A0:80:5D"}}},"request":{"raw":"GET /v1/jwplayer6/ping.gif?h=-1886303313\u0026e=e\u0026n=6688307344239954\u0026abc=0\u0026aid=GCCG\u0026amp=0\u0026at=1\u0026c=0\u0026ccp=0\u0026cp=1\u0026d=1\u0026eb=0\u0026ed=6\u0026emi=1u7a1mf1g79n\u0026i=1\u0026id=Instream\u0026lid=rl4tk51vgb9o\u0026lsa=read\u0026mt=1\u0026pbd=1\u0026pbr=1\u0026pgi=1svxwgfsa47b\u0026ph=0\u0026pii=0\u0026pl=125\u0026plc=1\u0026pli=qw6icbecmfp1\u0026pp=html5\u0026prc=2\u0026ps=1\u0026pss=1\u0026pt=Owk%2F%20Porn%20Videos%20for%20Free%20in%20Full%20HD%20%231\u0026pu=https%3A%2F%2Fhqfap.com%2Fsearch%3Fkeyword%3Dowk%2F\u0026pv=8.28.0\u0026pyc=0\u0026s=0\u0026sdk=0\u0026stc=2\u0026stpe=0\u0026tv=4.0.5\u0026vb=0\u0026vi=0\u0026vl=90\u0026wd=300\u0026ab=1\u0026cae=0\u0026cb=0\u0026cdid=jwplayer-container2\u0026cme=0\u0026dd=1\u0026dnt=1\u0026flc=0\u0026fv=\u0026ga=0\u0026lng=en\u0026mk=mp4\u0026mu=https%3A%2F%2Fhqfap.com%2Fupload%2Fvideos%2FInstream.mp4\u0026pbc=0\u0026pd=2\u0026pdr=\u0026plng=en\u0026plt=2350\u0026pni=0\u0026po=0\u0026sp=0\u0026st=1010\u0026sa=1767424573808 HTTP/1.1\r\nHost: prd.jwpltx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 03 Jan 2026 07:16:14 GMT\r\nserver: nginx\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d9ef81045d0cf909bd3143957da09138.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: HverFfCc4XiBN6mK5hB4MGEqQ8dSBebc72M2tJiw8SxfN3urm5mYLQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/css/jquery.tagit.css?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/css/jquery.tagit.css?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 18 Nov 2014 09:09:30 GMT\r\nvary: Accept-Encoding\r\netag: \"546b0cca-584\"\r\nexpires: Sat, 03 Jan 2026 17:46:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 5375\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h9PzNWei1pth0%2FgHtvsWIR8z7Tq%2BkNLGNnbxmeiqw918NNeKztFGwJzFHOi1DfAtrlcVLPRxDKYZFf4QUGxqMafwTc7RUPk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b5824a8c56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1412,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"eeafc92f84d5c19d3c311ef40d8f5cda","sha1":"184e5ab30cd03b6211046ead0913a15ca24a87b8","sha256":"e573623a64cf35084020aea583f9ec2daa57d25cac5d174e8c97ff95621a1142","sha512":"b6d891f20f406dfaa255421c4b121981c20c6d44b7899b13ae257a773659a341482c5003d47f017f43ac2da4c160f232bbb3a8660995c5a109cb8926063694a2","ssdeep":"","tlshash":"b22111a54b530af3d466c095bff493c3621686235408e019b8aa7944cf67e98c7d473f","first_seen":"2023-04-09T17:48:37Z","last_seen":"2026-04-03T15:29:14.47517Z","times_seen":225,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/js/header.js?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/js/header.js?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Thu, 23 Nov 2017 15:31:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 03 Jan 2026 17:46:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 5375\r\ncf-cache-status: HIT\r\netag: W/\"5a16e9d0-9b\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0kJUvjUGdn7XIZClxCNNsavo09WjCKdBxj3g7TDxneMGrmWMunnmiB6TGvE1ZTXOahI7%2Bw9WWRBUJmTDee%2BPlS9e8EyCaNA%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9b80b5831abe56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":155,"size_decoded":0,"mime_type":"application/javascript","magic":"HTML document, ASCII text","md5":"c77b9a3cc09eadf99c978c19ed927f21","sha1":"5a6d1c2e83df90de2c74d2e26a1003a83dadd1dc","sha256":"a143e8aea38c6e0227188051e09c6e9168978b1770944beef645d65edf78d198","sha512":"5a26f704b9d1ed84b986e5fc85686b882a4770af8f6f818e4e1749274792d870ef08745258f0f316e19604c9c6858b9adc0f295def3b3b43687d394b7f52bee9","ssdeep":"","tlshash":"50c08c168a8f43a3b882d448b32edaa8b47d674125684822028ed02bb0920c254ce190","first_seen":"2023-03-07T16:16:44Z","last_seen":"2026-04-03T15:29:14.489771Z","times_seen":186,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/materialicons/v138/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:11.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/materialicons/v138/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 128552\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 27 Dec 2025 10:44:25 GMT\r\nexpires: Sun, 27 Dec 2026 10:44:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 592306\r\nlast-modified: Thu, 11 Aug 2022 01:42:02 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":128552,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 128552, version 1.0","md5":"c0fc7c57bf4f279bbe878511b67b6bba","sha1":"154bebb8ddcf6d5de32ff5e96c1abb8dc8fc56ad","sha256":"273f4bca58132eb580c0e132ca8f44093978a2a98eae6affe5df61c345fa3b19","sha512":"ce16c8e709fbaa940f14cffe5dcf9587ae54d802a471003afede01d8e6ed2d358e27224cd74b32de5e4c024c07b1426c82862fbf1cec3416f4ce9fae8ed0e785","ssdeep":"3072:yscjV46cpiaqmAbqPQTGUbM9YPXZn3n/47C:DCO6fLip9IXN3nf","tlshash":"6dc3121662959aaae71ad385c884e79b7f7b4408dccce0c96040d8d795f0ba9218b37f","first_seen":"2023-05-09T00:29:02Z","last_seen":"2026-03-31T14:31:06.176019Z","times_seen":97,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":37,"dns":1,"connect":0,"send":0,"wait":22,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"entitlements.jwplayer.com/GCCG.json","fqdn":"entitlements.jwplayer.com","domain":"jwplayer.com","tld":"com"},"ip":{"addr":"65.9.46.54","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwplayer.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Wed, 25 Dec 2024 00:00:00 GMT","end":"Sat, 24 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"73:5F:22:36:72:E7:49:11:8F:B7:80:90:DA:4D:43:52:ED:0A:89:13","sha256":"E0:7A:FC:22:76:89:11:1A:58:F4:9F:05:51:C6:71:29:F8:0B:7B:AB:0B:3B:F9:C3:67:76:84:5E:50:04:C4:DF"}}},"request":{"raw":"GET /GCCG.json HTTP/1.1\r\nHost: entitlements.jwplayer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\ncontent-type: application/json\r\ncontent-length: 71\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 03:08:00 GMT\r\ncache-control: max-age=1800, s-maxage=21060\r\naccess-control-allow-origin: *\r\nx-cache: Error from cloudfront\r\nvia: 1.1 0eaf5f30adcca4475fcc2543288cac08.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: jAPhES7EpwoAGGwZ81OS9Go_JpZurLKGWMP8bqn3PLq2u4Neq5AFQQ==\r\nage: 14894\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":71,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5534f424f1d6586164a58758f3e2c51a","sha1":"ef37ca3d8831aaad699430dcaa9967469542d602","sha256":"f28df38bea81995fd78f9077bff2dfc9d60ee13b8c414bc426c61c0e1b0bee86","sha512":"de8d4f36c7f0f85b1fb1a52e22e511fd2e52e7ba6010b39947d72eceb752a60b7578be34dc4c44be6add327cef42a82442099d803bcc3251d84ec05d26fe4d15","ssdeep":"","tlshash":"0da0023eec5654030de616dc3cdae44612f4135c1754544c8e8915ac1adfef24f13311","first_seen":"2023-05-03T00:46:19Z","last_seen":"2026-04-03T20:29:48.300285Z","times_seen":982,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":10,"connect":14,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/930846/6a9ba2d6141381d6181d25ca7e916d6ae5685f14.gif","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/930846/6a9ba2d6141381d6181d25ca7e916d6ae5685f14.gif HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 07:16:14 GMT\r\ncontent-type: image/gif\r\ncontent-length: 395982\r\nlast-modified: Tue, 12 Aug 2025 15:26:50 GMT\r\netag: \"689b5d3a-60ace\"\r\nexpires: Wed, 12 Aug 2026 16:46:18 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap01-sec02-prg1-1\r\nx-77-nzt: EwwBX63NDQH3Pzm9AAwBuUwKEwH3YxYAAAwBJRPCLgG3wgIAAA\r\nx-77-nzt-ray: 2a494a154932a52a63c2586946d7c432\r\nx-77-cache: HIT\r\nx-77-age: 12400959\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":395982,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 250","md5":"ef1ad684b68362c3015544717ee2e8bc","sha1":"6a9ba2d6141381d6181d25ca7e916d6ae5685f14","sha256":"77545117d77e9e17c413db32c9143498211b6e81e1e5d788c909aeee114c705b","sha512":"b1e74b32e953a9c56cb1ee614ade07af32a1df11891991026db3ad99d6a64f7a25154f6510875ad91341a761eac20940799650860cf2da41cc554f28dd5c4167","ssdeep":"6144:IRxmKjo6YTaE+YWJB1E60otz5seF4cmvMcVOqtVLCNG/l2HYa9WhuMKjqXJPX4e1:4aRSrEMXJfUAqtpCNG/hGWWWV4eAE","tlshash":"f38423af59449a3ef7bd06385a1a36a145c1d04ff804e1ecbf1d17f760acb9141829fa","first_seen":"2025-08-23T16:40:39.5116Z","last_seen":"2026-03-18T05:18:20.894864Z","times_seen":218,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/v1/api.php","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:10.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"POST /v1/api.php HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 415\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":415,"data":"{\"user\":{\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en-US\",\"referer\":\"https://hqfap.com/search?keyword=owk/\",\"consumer\":\"ad-provider\",\"gdpr\":{\"gdpr\":0},\"screen_resolution\":\"1280x1024\",\"window_orientation\":\"landscape\",\"cookies\":[],\"scr_info\":\"YXN5bmN8fDM%3D\"},\"zones\":[{\"custom_targeting\":{},\"id\":5790954,\"extra_params\":{\"first_request\":true,\"zone_type\":2}}]}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 07:16:10 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://hqfap.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Authorization, Content-Type\r\nAccess-Control-Request-Method: POST\r\nSet-Cookie: __uvt=s%3A32%3A%224854174edd43820b8ccdf1e692fbead6%22%3B; expires=Mon, 03 Jan 2028 07:16:10 GMT; Max-Age=63072000; path=/; domain=magsrv.com; secure; SameSite=None\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":821,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2df98658166718c4ebbe21ef1630ce86","sha1":"b2b81bfaf7ec09164406fa5bf8ae50bfec67b5e8","sha256":"2d098495ec80eee6e1f039a9f9330fb7283fcf112aaf77aca0334975bda43efc","sha512":"69e82dbea0ebf9658b8e296e4fc18ac5e60fb447cd304cd534456727282f1b2591d1c57239ef3fc8e22825fa809129304b4a5f5697021384013ee78028d45d9a","ssdeep":"","tlshash":"3a01f17aff40887cea8029ce1e427569ba45b117f78e98904494e4b4e0fc724215277d","first_seen":"2026-01-03T07:17:14.636787Z","last_seen":"2026-01-03T07:17:14.636787Z","times_seen":1,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":57,"dns":1,"connect":23,"send":0,"wait":71,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwpsrv.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:12.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.28.0/jwpsrv.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=900, immutable\r\nlast-modified: Wed, 17 Apr 2024 20:18:17 GMT\r\netag: \"d7f3733c71441c1881fc4eabe9c96086\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 03 Jan 2026 07:16:12 GMT\r\nage: 562\r\nx-served-by: cache-lga21963-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 117, 5\r\nx-timer: S1767424573.837406,VS0,VE1\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 19091\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":67106,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d7f3733c71441c1881fc4eabe9c96086","sha1":"8db1f2f35489a41d1fb63af5b9aad52388c58735","sha256":"9f4c0014a4f36c11302077dc073ef529031ce3eebc04c0ca9bc1d7ea0ed95eca","sha512":"daad1df7ab9c84cb7c1a120fe01a007dc14c6a05e73c8c3afb418c19085d08d85c36128e668890e7d9ad2c084ceb9589fb853a7f06fbc0175028ea7ce8a7e7dd","ssdeep":"768:U2Q5c7PRtE8JKCzyQmr1nEXiGdCeMt+uksp3T:1QAPRtE8JKC2JEXiGdCSudpj","tlshash":"ad63e78d3685752a5b6770b8806fb546723d1dd6304dc610ea50eed93c3de6aa233b2c","first_seen":"2024-04-23T16:41:51Z","last_seen":"2026-02-11T20:51:20.728494Z","times_seen":313,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":39,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/css/custom.style.css?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/css/custom.style.css?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Thu, 23 Nov 2017 15:31:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 03 Jan 2026 17:46:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 5375\r\ncf-cache-status: HIT\r\netag: W/\"5a16e9d0-58\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ODidbnbviMxUA%2BBNKG4%2FsLFTmWPe6TQftO%2F616kPcqt%2Fh91xmY%2BD8ZPxjDEdMMWqVlkI9ouQx874i0aMWi4hkHgTy1vh7Rc%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9b80b5827a9556c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"eed5dc06466c1d1926d0cfea39e0b45c","sha1":"0d12a94fb75ed384e5a07d4b556f56674b3a6c88","sha256":"f2b86e15f15dbc9bec0c92441b0202164f3b7e768aa0febc5e04c084a870ba14","sha512":"657794ce9c59e362e51b013b044624b68c3a6f910bf0ee090f25345e889ff2e9152c959560317894761c40611fe7a8980bf6f12bf053fd331cfefcfb23a5725a","ssdeep":"","tlshash":"47b012479102023a91521004216446386029a54146df8a392c1591662489e4552d5259","first_seen":"2023-04-09T17:48:37Z","last_seen":"2026-04-03T15:29:14.341658Z","times_seen":141,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/provider.html5.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:12.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.28.0/provider.html5.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, immutable\r\nlast-modified: Tue, 22 Aug 2023 18:19:11 GMT\r\netag: \"e8e42a735322eb7478a82bf49c357638\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\nage: 2133835\r\ndate: Sat, 03 Jan 2026 07:16:12 GMT\r\nx-served-by: cache-lga21981-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 0, 0\r\nx-timer: S1767424573.825818,VS0,VE1\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 14698\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":44252,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (43859)","md5":"e8e42a735322eb7478a82bf49c357638","sha1":"5ef024f2e798985043d7ecb8bf1752cffeb70e55","sha256":"f18d94cc548a0d5e9c36da9f47164f4df4fbd903a9cf0dc8e3a4545622365ce7","sha512":"6c8d8c6fd93db8ab4d8e5dbf25edc0aa244fb9eaff22201931bc467e87061770ca2e85cb7f8db536143b5766020dc7f35b1394853e4c9e0c48bd40bd15247ebd","ssdeep":"768:B2Smc7dAD/v018QK1XCYClPhaiDXIj9ZvDry8wesUukSJLdXhRwTi++2XzPAjrCW:BnG/v01qBBgJOnqhfwXzpIME9Dfm50HJ","tlshash":"4113f89633d4b433c6d296c261750311533e5e5a7848c4acfa299ecb0d5ac8770fabf9","first_seen":"2025-10-07T08:25:20.304883Z","last_seen":"2026-02-25T20:14:13.330081Z","times_seen":40,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":70,"dns":0,"connect":0,"send":0,"wait":28,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/provider.html5.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:12.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.28.0/provider.html5.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, immutable\r\nlast-modified: Tue, 22 Aug 2023 18:19:11 GMT\r\netag: \"e8e42a735322eb7478a82bf49c357638\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 03 Jan 2026 07:16:12 GMT\r\nage: 2133835\r\nx-served-by: cache-lga21981-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 0, 8\r\nx-timer: S1767424573.850812,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 14698\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":44252,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (43859)","md5":"e8e42a735322eb7478a82bf49c357638","sha1":"5ef024f2e798985043d7ecb8bf1752cffeb70e55","sha256":"f18d94cc548a0d5e9c36da9f47164f4df4fbd903a9cf0dc8e3a4545622365ce7","sha512":"6c8d8c6fd93db8ab4d8e5dbf25edc0aa244fb9eaff22201931bc467e87061770ca2e85cb7f8db536143b5766020dc7f35b1394853e4c9e0c48bd40bd15247ebd","ssdeep":"768:B2Smc7dAD/v018QK1XCYClPhaiDXIj9ZvDry8wesUukSJLdXhRwTi++2XzPAjrCW:BnG/v01qBBgJOnqhfwXzpIME9Dfm50HJ","tlshash":"4113f89633d4b433c6d296c261750311533e5e5a7848c4acfa299ecb0d5ac8770fabf9","first_seen":"2025-10-07T08:25:20.304883Z","last_seen":"2026-02-25T20:14:13.330081Z","times_seen":40,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prd.jwpltx.com/v1/jwplayer6/ping.gif?h=-149321455\u0026e=e\u0026n=1930301821105967\u0026abc=0\u0026aid=GCCG\u0026amp=0\u0026at=1\u0026c=0\u0026ccp=0\u0026cp=1\u0026d=1\u0026eb=0\u0026ed=6\u0026emi=3siv4mtqk3zo\u0026i=1\u0026id=Instream\u0026lid=rl4tk51vgb9o\u0026lsa=read\u0026mt=1\u0026pbd=1\u0026pbr=1\u0026pgi=16ftqwstul8n\u0026ph=0\u0026pii=0\u0026pl=125\u0026plc=1\u0026pli=1s7cqfhx2e14\u0026pp=html5\u0026prc=2\u0026ps=1\u0026pss=1\u0026pt=Owk%2F%20Porn%20Videos%20for%20Free%20in%20Full%20HD%20%231\u0026pu=https%3A%2F%2Fhqfap.com%2Fsearch%3Fkeyword%3Dowk%2F\u0026pv=8.28.0\u0026pyc=0\u0026s=0\u0026sdk=0\u0026stc=2\u0026stpe=0\u0026tv=4.0.5\u0026vb=0\u0026vi=0\u0026vl=90\u0026wd=300\u0026ab=1\u0026cae=0\u0026cb=0\u0026cdid=jwplayer-container2\u0026cme=0\u0026dd=1\u0026dnt=1\u0026flc=0\u0026fv=\u0026ga=0\u0026lng=en\u0026mk=mp4\u0026mu=https%3A%2F%2Fhqfap.com%2Fupload%2Fvideos%2FInstream.mp4\u0026pbc=0\u0026pd=2\u0026pdr=\u0026plng=en\u0026plt=2450\u0026pni=0\u0026po=0\u0026sp=0\u0026st=1080\u0026sa=1767424573897","fqdn":"prd.jwpltx.com","domain":"jwpltx.com","tld":"com"},"ip":{"addr":"108.157.229.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:15.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwpltx.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 12 Aug 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E8:9B:D4:42:32:9F:5E:14:C3:36:B5:09:FC:A2:0B:37:DF:D5:E2:D3","sha256":"D1:64:5C:F3:5A:AF:D7:5F:2E:91:2F:C7:B1:E4:F2:91:3C:5A:1E:B9:C2:E9:10:17:7E:59:CF:EC:E6:A0:80:5D"}}},"request":{"raw":"GET /v1/jwplayer6/ping.gif?h=-149321455\u0026e=e\u0026n=1930301821105967\u0026abc=0\u0026aid=GCCG\u0026amp=0\u0026at=1\u0026c=0\u0026ccp=0\u0026cp=1\u0026d=1\u0026eb=0\u0026ed=6\u0026emi=3siv4mtqk3zo\u0026i=1\u0026id=Instream\u0026lid=rl4tk51vgb9o\u0026lsa=read\u0026mt=1\u0026pbd=1\u0026pbr=1\u0026pgi=16ftqwstul8n\u0026ph=0\u0026pii=0\u0026pl=125\u0026plc=1\u0026pli=1s7cqfhx2e14\u0026pp=html5\u0026prc=2\u0026ps=1\u0026pss=1\u0026pt=Owk%2F%20Porn%20Videos%20for%20Free%20in%20Full%20HD%20%231\u0026pu=https%3A%2F%2Fhqfap.com%2Fsearch%3Fkeyword%3Dowk%2F\u0026pv=8.28.0\u0026pyc=0\u0026s=0\u0026sdk=0\u0026stc=2\u0026stpe=0\u0026tv=4.0.5\u0026vb=0\u0026vi=0\u0026vl=90\u0026wd=300\u0026ab=1\u0026cae=0\u0026cb=0\u0026cdid=jwplayer-container2\u0026cme=0\u0026dd=1\u0026dnt=1\u0026flc=0\u0026fv=\u0026ga=0\u0026lng=en\u0026mk=mp4\u0026mu=https%3A%2F%2Fhqfap.com%2Fupload%2Fvideos%2FInstream.mp4\u0026pbc=0\u0026pd=2\u0026pdr=\u0026plng=en\u0026plt=2450\u0026pni=0\u0026po=0\u0026sp=0\u0026st=1080\u0026sa=1767424573897 HTTP/1.1\r\nHost: prd.jwpltx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 03 Jan 2026 07:16:15 GMT\r\nserver: nginx\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d9ef81045d0cf909bd3143957da09138.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: IqV_C356UKbIkPsuYkN97n96P4Zzxg0b_WClGtilA6WKksTz2gJxvg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/css/twemoji-awesome.css?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/css/twemoji-awesome.css?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 06 Oct 2015 14:08:02 GMT\r\nvary: Accept-Encoding\r\netag: \"5613d5c2-11c73\"\r\nexpires: Sat, 03 Jan 2026 17:46:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 5375\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1gEp35qQQ%2Be7mZULEEcv%2Bpe6B53FGmoQTlXQmOsOpKKcZfYJN9T%2FqdFjAOVMAkq2j7WBodZvo4F9e70aN2ybCSmN46kkzsc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b5825a8e56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72819,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"504cb65f6dc8116ea966f89fac58eaf2","sha1":"0a07ee01d01f824d26db6a7900b965e52279de1d","sha256":"88be7865697b18ad3611fe75af39ea43e86aac0c1e5b2ebdcd04a534c1e1d5d4","sha512":"6bf6707d0cf4aae996eab799de9c0137279b34a4bb77a7492cd0a586135ab5e09c90b8e92dcace89d589a03be52716b1f2c23a0c2aaf5960105bacee377120ae","ssdeep":"768:UC4XhsBbBW7L6VOw9HvvsUfLgjoSNQ8JOlKrx:UjXhsBAyTHfLgjoSa8prx","tlshash":"e763421be3b3ed977d65c8a9312de90c432d1582c54dcaea6ba535e04cf485be8b1233","first_seen":"2023-04-09T17:48:37Z","last_seen":"2026-04-03T15:29:14.350596Z","times_seen":197,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/js/lib/sweetalert2/dist/sweetalert2.min.css?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/js/lib/sweetalert2/dist/sweetalert2.min.css?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 16 Oct 2017 01:01:32 GMT\r\nvary: Accept-Encoding\r\netag: \"59e404ec-396c\"\r\nexpires: Sat, 03 Jan 2026 17:46:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 5375\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qTon7qE2bgMO88d%2FSKXs2tnECLN6EAxWy2pu4lhDCN9Na3lyqqGIy%2F1PpMuXrDivaeQT7pjVhzlOEbnDVy8npAvi6FtJxJc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b5825a9156c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14700,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14700), with no line terminators","md5":"da1d2585f48ce3cd2b5b160c1941ffa9","sha1":"29f727518b44baeb553a67ac52538ea50108c5fb","sha256":"99a0fa00258ac22e5f6ac7318969a494178eae3dd618902a7e0fd532734598b9","sha512":"58ea02f7710407fb6659688cd2fcceae27e24a1a2051bb6197543b87f63e6cb5cc9ecb49aa33222ec3fd591338a2aacb0ce16cd063a185b3e2270815edb3cdf9","ssdeep":"192:nZh9bb1y+j/3Nfie1gTtPyKC70Zn9npgp73J:nZh9bBy+73pPqTRhZn9G3J","tlshash":"fd62006348c51167e1178f2262cced5929e482536d330edab671f008cf93fad22ab357","first_seen":"2023-04-09T17:48:37Z","last_seen":"2026-04-03T15:29:14.567456Z","times_seen":217,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6u9w4BMUTPHh6UVSwiPGQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:09.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/lato/v25/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23040\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 01 Jan 2026 09:54:26 GMT\r\nexpires: Fri, 01 Jan 2027 09:54:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 163303\r\nlast-modified: Mon, 15 Sep 2025 17:11:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23040,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23040, version 1.0","md5":"de69cf9e514df447d1b0bb16f49d2457","sha1":"2ac78601179c3a63ba3f3f3081556b12ddcaf655","sha256":"c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49","sha512":"4aebb7e54d88827d4a02808f04901c0d09b756c518202b056a6c0f664948f5585221d16967f546e064187c6545acef15d59b68d0a7a59897bd899d3e9dda37b1","ssdeep":"384:adpABC4a0HkBpR1HWtGu06B6lsoAKiwY0HcLKglV6Z+DVb35PJZDdiZeJ1vqYg:0AHa0Ezf2tZn6lsoABwTKK46ZQb3V7wD","tlshash":"fca2e1c05cc1e2d4ae02daf7fda5a4eab4e2f01123a8f65f8f114b75d505993640fe01","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-04-04T03:43:29.494601Z","times_seen":134956,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":81,"dns":1,"connect":20,"send":0,"wait":23,"receive":9,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prxycdn.servequake.com/imgcdn.php?src=https://www.xmegadrive.com/contents/videos_screenshots/335000/335710/preview.jpg","fqdn":"prxycdn.servequake.com","domain":"prxycdn.servequake.com","tld":"servequake.com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:11.346Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /imgcdn.php?src=https://www.xmegadrive.com/contents/videos_screenshots/335000/335710/preview.jpg HTTP/1.1\r\nHost: prxycdn.servequake.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":6995,"timings":{"blocked":6994,"dns":1,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"prxycdn.servequake.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/vast.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:12.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.28.0/vast.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=86400, immutable\r\nlast-modified: Tue, 22 Aug 2023 18:19:15 GMT\r\netag: \"b0deaafb5318980de8c2ee695b76c710\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 03 Jan 2026 07:16:12 GMT\r\nage: 67295\r\nx-served-by: cache-lga21959-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 128, 5\r\nx-timer: S1767424573.838561,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 29522\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":104600,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b0deaafb5318980de8c2ee695b76c710","sha1":"5a3734828b24cac1e1cae1645662b3c9dc26cf82","sha256":"cd51410290d2266cda49882fe9d3d5c67aa9bc5b2c3551c7a5fd9e66cfb40908","sha512":"637b3da699f5ba20b0b2a4e900ffee7b74ae8d9eacbe00a48539454125991172e2c09e4eff00f4e8b95a9a700a48cacc235ad55ac7bf01ca2036fc70150c0891","ssdeep":"1536:ulAE+jE0HEekQmIWTuDkjlOYx1sbRuF5V0U2hw2ubBkrzIjpiIPYqdsrVpQRwOaz:uJ+jEQwjlOcSNSvezkyVpeFamsH","tlshash":"c1a308962395e53246e484e960300242b3350a0f7c0a82acf57dfdef5d5ea4b76baf74","first_seen":"2023-09-16T05:27:40Z","last_seen":"2026-02-25T20:14:13.349587Z","times_seen":58,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/930846/69e06c4fd19ffdb3cad2851bc6f15a804f80c73b.mp4","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/930846/69e06c4fd19ffdb3cad2851bc6f15a804f80c73b.mp4 HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Sat, 03 Jan 2026 07:16:14 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 20732\r\nlast-modified: Tue, 12 Aug 2025 15:26:50 GMT\r\netag: \"689b5d3a-50fc\"\r\nexpires: Wed, 12 Aug 2026 16:54:49 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap02-sec02-prg1-1\r\nx-77-nzt: EwwBX63NDQH3xE69AAwBuUwKAQH3mwEAAAwBJRPCNAG3BgAAAA\r\nx-77-nzt-ray: 2a494a154932a52a63c25869ba37bf1b\r\nx-77-cache: HIT\r\nx-77-age: 12406468\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 0-20731/20732\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":20732,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"060a09be7b994a91e0307beb42a14251","sha1":"69e06c4fd19ffdb3cad2851bc6f15a804f80c73b","sha256":"0033e62e2d9808c691d69742ea0639f7935323e57bf0d278a4ffc6d679281919","sha512":"4c17fde6c0436873b359d491ea09bfd5408351be48004c34f78c1c48d68913b26b2cbead5e0af30cb00d12ba18083fc85051bd8e84187944fdc6201d4b0cace1","ssdeep":"384:SqyqiXWBNaqlAxUYa4xndhF3bKdSANzpEHZev596ywx7:SqZiXWBNaFxTXedSANzpEHZ3","tlshash":"d792d0336b7be8f4cb0164b500e09602765dc21a38b9cbafab514ffe58f47e95d60819","first_seen":"2025-08-14T21:28:46.955013Z","last_seen":"2026-03-18T05:18:20.853045Z","times_seen":325,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prd.jwpltx.com/v1/jwplayer6/ping.gif?h=-1013639491\u0026e=e\u0026n=2652030312037266\u0026abc=0\u0026aid=GCCG\u0026amp=0\u0026at=1\u0026c=0\u0026ccp=0\u0026cp=1\u0026d=1\u0026eb=0\u0026ed=6\u0026emi=1d05kht1hsp2\u0026i=1\u0026id=Instream\u0026lid=rl4tk51vgb9o\u0026lsa=read\u0026mt=1\u0026pbd=1\u0026pbr=1\u0026pgi=1mjwte01dio7\u0026ph=0\u0026pii=0\u0026pl=125\u0026plc=1\u0026pli=17pcmalxw8c2\u0026pp=html5\u0026prc=2\u0026ps=1\u0026pss=1\u0026pt=Owk%2F%20Porn%20Videos%20for%20Free%20in%20Full%20HD%20%231\u0026pu=https%3A%2F%2Fhqfap.com%2Fsearch%3Fkeyword%3Dowk%2F\u0026pv=8.28.0\u0026pyc=0\u0026s=0\u0026sdk=0\u0026stc=2\u0026stpe=0\u0026tv=4.0.5\u0026vb=0\u0026vi=0\u0026vl=90\u0026wd=300\u0026ab=1\u0026cae=0\u0026cb=0\u0026cdid=jwplayer-container2\u0026cme=0\u0026dd=1\u0026dnt=1\u0026flc=0\u0026fv=\u0026ga=0\u0026lng=en\u0026mk=mp4\u0026mu=https%3A%2F%2Fhqfap.com%2Fupload%2Fvideos%2FInstream.mp4\u0026pbc=0\u0026pd=2\u0026pdr=\u0026plng=en\u0026plt=2050\u0026pni=0\u0026po=0\u0026sp=0\u0026st=690\u0026sa=1767424573474","fqdn":"prd.jwpltx.com","domain":"jwpltx.com","tld":"com"},"ip":{"addr":"108.157.229.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwpltx.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 12 Aug 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E8:9B:D4:42:32:9F:5E:14:C3:36:B5:09:FC:A2:0B:37:DF:D5:E2:D3","sha256":"D1:64:5C:F3:5A:AF:D7:5F:2E:91:2F:C7:B1:E4:F2:91:3C:5A:1E:B9:C2:E9:10:17:7E:59:CF:EC:E6:A0:80:5D"}}},"request":{"raw":"GET /v1/jwplayer6/ping.gif?h=-1013639491\u0026e=e\u0026n=2652030312037266\u0026abc=0\u0026aid=GCCG\u0026amp=0\u0026at=1\u0026c=0\u0026ccp=0\u0026cp=1\u0026d=1\u0026eb=0\u0026ed=6\u0026emi=1d05kht1hsp2\u0026i=1\u0026id=Instream\u0026lid=rl4tk51vgb9o\u0026lsa=read\u0026mt=1\u0026pbd=1\u0026pbr=1\u0026pgi=1mjwte01dio7\u0026ph=0\u0026pii=0\u0026pl=125\u0026plc=1\u0026pli=17pcmalxw8c2\u0026pp=html5\u0026prc=2\u0026ps=1\u0026pss=1\u0026pt=Owk%2F%20Porn%20Videos%20for%20Free%20in%20Full%20HD%20%231\u0026pu=https%3A%2F%2Fhqfap.com%2Fsearch%3Fkeyword%3Dowk%2F\u0026pv=8.28.0\u0026pyc=0\u0026s=0\u0026sdk=0\u0026stc=2\u0026stpe=0\u0026tv=4.0.5\u0026vb=0\u0026vi=0\u0026vl=90\u0026wd=300\u0026ab=1\u0026cae=0\u0026cb=0\u0026cdid=jwplayer-container2\u0026cme=0\u0026dd=1\u0026dnt=1\u0026flc=0\u0026fv=\u0026ga=0\u0026lng=en\u0026mk=mp4\u0026mu=https%3A%2F%2Fhqfap.com%2Fupload%2Fvideos%2FInstream.mp4\u0026pbc=0\u0026pd=2\u0026pdr=\u0026plng=en\u0026plt=2050\u0026pni=0\u0026po=0\u0026sp=0\u0026st=690\u0026sa=1767424573474 HTTP/1.1\r\nHost: prd.jwpltx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 03 Jan 2026 07:16:14 GMT\r\nserver: nginx\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d9ef81045d0cf909bd3143957da09138.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: b980yBYdaFDyC2CYqZrpaXxWpxVx7aOTi8_dapYiRJiOK7o9gGbKgg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":4,"connect":9,"send":0,"wait":133,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: application/javascript\r\netag: W/\"92eb331739d51c65226b5fdb07e\"\r\nexpires: Wed, 17 Dec 2025 13:24:25 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3uScAAAwBuUwKEwH3IQAAAAwBJRPCMQG3fwAAAA\r\nx-77-nzt-ray: 2a494a15a72622195dc25869cdba4e33\r\nx-77-cache: HIT\r\nx-77-age: 10169\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":185387,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39040)","md5":"6bd931315f9ec922d23220a34a506421","sha1":"92eb331739d51c65226b5fdb07ec2d74924f200f","sha256":"28f33740f0a341c823243413c7780d92e7ae39254641174a86a4f51ac805b576","sha512":"26bb36ab577ba2b6486f482177e31992c81c79322070edc9d55af10d7ab8f3e1b9dccc89f7c925a47a68e464f522736c0e64d3d7e4acaa016745e0104bddb167","ssdeep":"3072:cWYjf7+28VOk2DG2cUMaElwnRlqI1fsBHisiEolY4o/CXMXpo:U+28VOk262lElwnRjfs4sXhpo","tlshash":"96045c993792307441d3a11daaff53093371506ab80f4884bb4dd8a427adeea51a3ffd","first_seen":"2025-12-11T15:18:11.624048Z","last_seen":"2026-01-15T17:17:43.902034Z","times_seen":1441,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":16,"connect":4,"send":0,"wait":10,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/images/close-icon-circle.png","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:11.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /images/close-icon-circle.png HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 07:16:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 405\r\nlast-modified: Wed, 17 Dec 2025 10:22:04 GMT\r\netag: \"6942844c-195\"\r\nexpires: Sat, 19 Dec 2026 10:45:31 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap02-sec01-prg1-1\r\nx-77-nzt: EwwBX63NDQH3cJUTAAgBuUwKEwFBCAElE8IxAQE\r\nx-77-nzt-ray: 2a494a154932a52a60c25869b041cd09\r\nx-77-cache: HIT\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nx-77-age: 1283440\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":405,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"bc8bf5d1633e548e9a178bf29be30b7b","sha1":"bd290b6eabd73d2c95db053620797503e9178484","sha256":"94f575abdb5c45476f9c2b62bbe06fbfacce9d25e95796ffcd07680bd7c6c0bb","sha512":"9382f398492b21ad1e592b9375768db4736d8eb3dff54868d4387a67ec430a0a106567d874c380d0b8ebb791dc74996ba72931c0a52d20efb8a0cc6312d1c57a","ssdeep":"","tlshash":"c1e0a3e315dd4509afbdaf16551a0221ff773fdea4321a493d90d052559440e055a371","first_seen":"2023-04-13T22:41:38Z","last_seen":"2026-04-04T02:03:46.58731Z","times_seen":2817,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":71,"dns":50,"connect":1,"send":0,"wait":1,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/v1/vast.php?idzone=5766292","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:11.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /v1/vast.php?idzone=5766292 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hqfap.com\r\nReferer: https://hqfap.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __uvt=s%3A32%3A%226b4615f583ad7a61a3b7d7f72c3b8fb9%22%3B; c-tag=%7B%22tag-video%22%3A%22v6%7C%7CNOR%7C5766734%7C121114866%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C6b4615f583ad7a61a3b7d7f72c3b8fb9%7Cfedf893c02a58d3f8f0c78e77b16b788%7C0%7Chqfap.com%7C%7C%7C18%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1767424571%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C2%7C0%7C0%7Cs.magsrv.com%7C%7C%7C%7Chqfap.com%7C0%7Cb021361518859740153c06e8cabce0d7%7Cok%22%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 07:16:11 GMT\r\nContent-Type: text/xml;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: c-tag=%7B%22tag-video%22%3A%22v6%7C%7CNOR%7C5766292%7C121114862%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C6b4615f583ad7a61a3b7d7f72c3b8fb9%7Cfedf893c02a58d3f8f0c78e77b16b788%7C0%7Chqfap.com%7C%7C%7C18%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1767424571%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C2%7C0%7C0%7Cs.magsrv.com%7C%7C%7C%7Chqfap.com%7C0%7C731446fab4a03ce73eb8c1d7b117a13a%7Cok%22%7D; expires=Thu, 02 Jul 2026 07:16:11 GMT; path=/; domain=.magsrv.com; Secure; SameSite=none\r\nAccess-Control-Allow-Origin: https://hqfap.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: X-CH-VALUES\r\nCache-Control: no-store\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Request-Method: GET\r\nLocation: https://s.magsrv.com/v1/vast.php?idzone=5764770\r\nX-Robots-Tag: noindex, follow\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16228,"size_decoded":0,"mime_type":"text/xml; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwpsrv.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:12.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.28.0/jwpsrv.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=900, immutable\r\nlast-modified: Wed, 17 Apr 2024 20:18:17 GMT\r\netag: \"d7f3733c71441c1881fc4eabe9c96086\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 03 Jan 2026 07:16:13 GMT\r\nage: 562\r\nx-served-by: cache-lga21963-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 117, 9\r\nx-timer: S1767424573.070205,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 19091\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":67106,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d7f3733c71441c1881fc4eabe9c96086","sha1":"8db1f2f35489a41d1fb63af5b9aad52388c58735","sha256":"9f4c0014a4f36c11302077dc073ef529031ce3eebc04c0ca9bc1d7ea0ed95eca","sha512":"daad1df7ab9c84cb7c1a120fe01a007dc14c6a05e73c8c3afb418c19085d08d85c36128e668890e7d9ad2c084ceb9589fb853a7f06fbc0175028ea7ce8a7e7dd","ssdeep":"768:U2Q5c7PRtE8JKCzyQmr1nEXiGdCeMt+uksp3T:1QAPRtE8JKC2JEXiGdCSudpj","tlshash":"ad63e78d3685752a5b6770b8806fb546723d1dd6304dc610ea50eed93c3de6aa233b2c","first_seen":"2024-04-23T16:41:51Z","last_seen":"2026-02-11T20:51:20.728494Z","times_seen":313,"resource_available":true,"data":null}},"time_used":365,"timings":{"blocked":-1,"dns":1,"connect":30,"send":0,"wait":14,"receive":1,"ssl":318},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwplayer.controls.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.28.0/jwplayer.controls.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, immutable\r\nlast-modified: Tue, 22 Aug 2023 18:19:07 GMT\r\netag: \"1fde4fff33b8be6ebe2530808273fe7b\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 03 Jan 2026 07:16:14 GMT\r\nage: 1388015\r\nx-served-by: cache-lga21946-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 3, 216\r\nx-timer: S1767424574.166150,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 45480\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":193500,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65143)","md5":"1fde4fff33b8be6ebe2530808273fe7b","sha1":"0810766277301777c5fd5fc031040fc5cc315df5","sha256":"ef7d843e4bd08aceacb89d07e82add18b04e2b2a1b4ddb0784c1573374ec9448","sha512":"7aea8e374962935b5a74d86e3d718b2ce0825117c0a1fd3f07294345186e9f28eea3480f04bd190ad4dfed9cccf84c4d07440770ee4f2ecdeb0d185f9055d28a","ssdeep":"1536:BCUKr35YneqmSoQQD/5YIuhhAuUkJrPyoyjQ7ru+7AHYzwC0suZrqlHdDPjmOoRR:B+r35Yer5Yk7REBvB5sYgwmf8q","tlshash":"b9140922614256349ae6c1daa7504b04f73a8141f652deecfd7dedcc849e9ca30fa7b0","first_seen":"2025-10-07T08:25:20.241872Z","last_seen":"2026-02-25T20:14:13.37576Z","times_seen":40,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"entitlements.jwplayer.com/GCCG.json","fqdn":"entitlements.jwplayer.com","domain":"jwplayer.com","tld":"com"},"ip":{"addr":"65.9.46.54","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwplayer.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Wed, 25 Dec 2024 00:00:00 GMT","end":"Sat, 24 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"73:5F:22:36:72:E7:49:11:8F:B7:80:90:DA:4D:43:52:ED:0A:89:13","sha256":"E0:7A:FC:22:76:89:11:1A:58:F4:9F:05:51:C6:71:29:F8:0B:7B:AB:0B:3B:F9:C3:67:76:84:5E:50:04:C4:DF"}}},"request":{"raw":"GET /GCCG.json HTTP/1.1\r\nHost: entitlements.jwplayer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\ncontent-type: application/json\r\ncontent-length: 71\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 03:08:00 GMT\r\ncache-control: max-age=1800, s-maxage=21060\r\naccess-control-allow-origin: *\r\nx-cache: Error from cloudfront\r\nvia: 1.1 0eaf5f30adcca4475fcc2543288cac08.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: pWp0WTgw4hUeq-aG9Fiw32WgRwy96aQF2NZ3guNxNi6epr6qgPlXNw==\r\nage: 14894\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":71,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5534f424f1d6586164a58758f3e2c51a","sha1":"ef37ca3d8831aaad699430dcaa9967469542d602","sha256":"f28df38bea81995fd78f9077bff2dfc9d60ee13b8c414bc426c61c0e1b0bee86","sha512":"de8d4f36c7f0f85b1fb1a52e22e511fd2e52e7ba6010b39947d72eceb752a60b7578be34dc4c44be6add327cef42a82442099d803bcc3251d84ec05d26fe4d15","ssdeep":"","tlshash":"0da0023eec5654030de616dc3cdae44612f4135c1754544c8e8915ac1adfef24f13311","first_seen":"2023-05-03T00:46:19Z","last_seen":"2026-04-03T20:29:48.300285Z","times_seen":982,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prd.jwpltx.com/v1/jwplayer6/ping.gif?h=-553327197\u0026e=ana\u0026n=8042117654015697\u0026aid=GCCG\u0026emi=1nzz6nc1lsy3\u0026id=Instream\u0026pli=1t3khgl9wth1\u0026pv=8.28.0\u0026tv=4.0.5\u0026sa=1767424583369","fqdn":"prd.jwpltx.com","domain":"jwpltx.com","tld":"com"},"ip":{"addr":"108.157.229.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:23.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwpltx.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 12 Aug 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E8:9B:D4:42:32:9F:5E:14:C3:36:B5:09:FC:A2:0B:37:DF:D5:E2:D3","sha256":"D1:64:5C:F3:5A:AF:D7:5F:2E:91:2F:C7:B1:E4:F2:91:3C:5A:1E:B9:C2:E9:10:17:7E:59:CF:EC:E6:A0:80:5D"}}},"request":{"raw":"GET /v1/jwplayer6/ping.gif?h=-553327197\u0026e=ana\u0026n=8042117654015697\u0026aid=GCCG\u0026emi=1nzz6nc1lsy3\u0026id=Instream\u0026pli=1t3khgl9wth1\u0026pv=8.28.0\u0026tv=4.0.5\u0026sa=1767424583369 HTTP/1.1\r\nHost: prd.jwpltx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 03 Jan 2026 07:16:23 GMT\r\nserver: nginx\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d9ef81045d0cf909bd3143957da09138.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: PCcvoky_qxdop6jG0cBJzxiTe0qy9f_YitAgmsHIDc0rGjkELHXhLg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:11.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nCookie: __uvt=s%3A32%3A%226b4615f583ad7a61a3b7d7f72c3b8fb9%22%3B; c-tag=%7B%22tag-video%22%3A%22v6%7C%7CNOR%7C5766292%7C121114862%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C6b4615f583ad7a61a3b7d7f72c3b8fb9%7Cfedf893c02a58d3f8f0c78e77b16b788%7C0%7Chqfap.com%7C%7C%7C18%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1767424571%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C2%7C0%7C0%7Cs.magsrv.com%7C%7C%7C%7Chqfap.com%7C0%7C731446fab4a03ce73eb8c1d7b117a13a%7Cok%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 07:16:11 GMT\r\ncontent-type: application/javascript\r\netag: W/\"92eb331739d51c65226b5fdb07e\"\r\nexpires: Wed, 17 Dec 2025 13:24:25 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3vCcAAAwBuUwKEwH3IQAAAAwBJRPCMQG3fwAAAA\r\nx-77-nzt-ray: 2a494a15a726221960c25869f3852d27\r\nx-77-cache: HIT\r\nx-77-age: 10172\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":185387,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39040)","md5":"6bd931315f9ec922d23220a34a506421","sha1":"92eb331739d51c65226b5fdb07ec2d74924f200f","sha256":"28f33740f0a341c823243413c7780d92e7ae39254641174a86a4f51ac805b576","sha512":"26bb36ab577ba2b6486f482177e31992c81c79322070edc9d55af10d7ab8f3e1b9dccc89f7c925a47a68e464f522736c0e64d3d7e4acaa016745e0104bddb167","ssdeep":"3072:cWYjf7+28VOk2DG2cUMaElwnRlqI1fsBHisiEolY4o/CXMXpo:U+28VOk262lElwnRjfs4sXhpo","tlshash":"96045c993792307441d3a11daaff53093371506ab80f4884bb4dd8a427adeea51a3ffd","first_seen":"2025-12-11T15:18:11.624048Z","last_seen":"2026-01-15T17:17:43.902034Z","times_seen":1441,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwpsrv.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:12.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.28.0/jwpsrv.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=900, immutable\r\nlast-modified: Wed, 17 Apr 2024 20:18:17 GMT\r\netag: \"d7f3733c71441c1881fc4eabe9c96086\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 03 Jan 2026 07:16:12 GMT\r\nage: 562\r\nx-served-by: cache-lga21963-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 117, 2\r\nx-timer: S1767424573.837521,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 19091\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":67106,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d7f3733c71441c1881fc4eabe9c96086","sha1":"8db1f2f35489a41d1fb63af5b9aad52388c58735","sha256":"9f4c0014a4f36c11302077dc073ef529031ce3eebc04c0ca9bc1d7ea0ed95eca","sha512":"daad1df7ab9c84cb7c1a120fe01a007dc14c6a05e73c8c3afb418c19085d08d85c36128e668890e7d9ad2c084ceb9589fb853a7f06fbc0175028ea7ce8a7e7dd","ssdeep":"768:U2Q5c7PRtE8JKCzyQmr1nEXiGdCeMt+uksp3T:1QAPRtE8JKC2JEXiGdCSudpj","tlshash":"ad63e78d3685752a5b6770b8806fb546723d1dd6304dc610ea50eed93c3de6aa233b2c","first_seen":"2024-04-23T16:41:51Z","last_seen":"2026-02-11T20:51:20.728494Z","times_seen":313,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":45,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwplayer.core.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:12.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.28.0/jwplayer.core.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, immutable\r\nlast-modified: Tue, 22 Aug 2023 18:19:08 GMT\r\netag: \"34de47681547f88d2a251419d61d4a2d\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 03 Jan 2026 07:16:12 GMT\r\nage: 1390167\r\nx-served-by: cache-lga21956-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 76, 3\r\nx-timer: S1767424573.837380,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 40476\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":143406,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65143)","md5":"34de47681547f88d2a251419d61d4a2d","sha1":"e9c03590ad2eb86eeee8b0032f345fbeb32bc4c1","sha256":"5a8861552d8484bac63cb929ef4b4e9f2f76726aef84032c76a75b76da4e7ddc","sha512":"96c8659af1758ddc35ee64cf835f983cddb190d2dff7884b86dd259faab6d824c3330d04f2b056f77989be023b1703c9e0e339ce805c0ec480812d2988c305ea","ssdeep":"3072:B5ozmmILBerJhsy7v22m79sTkvpkHkfeKJyuaU:X7DBerJh/aLLkEfPJn","tlshash":"45e33b753181623651da93da72674201a33a45897406c7acff2cedea1c3e88771f6fb8","first_seen":"2025-10-07T08:25:20.374415Z","last_seen":"2026-02-25T20:14:13.377962Z","times_seen":40,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":37,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwplayer.controls.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.28.0/jwplayer.controls.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, immutable\r\nlast-modified: Tue, 22 Aug 2023 18:19:07 GMT\r\netag: \"1fde4fff33b8be6ebe2530808273fe7b\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 03 Jan 2026 07:16:14 GMT\r\nage: 1388015\r\nx-served-by: cache-lga21946-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 3, 218\r\nx-timer: S1767424574.180720,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 45480\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":193500,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65143)","md5":"1fde4fff33b8be6ebe2530808273fe7b","sha1":"0810766277301777c5fd5fc031040fc5cc315df5","sha256":"ef7d843e4bd08aceacb89d07e82add18b04e2b2a1b4ddb0784c1573374ec9448","sha512":"7aea8e374962935b5a74d86e3d718b2ce0825117c0a1fd3f07294345186e9f28eea3480f04bd190ad4dfed9cccf84c4d07440770ee4f2ecdeb0d185f9055d28a","ssdeep":"1536:BCUKr35YneqmSoQQD/5YIuhhAuUkJrPyoyjQ7ru+7AHYzwC0suZrqlHdDPjmOoRR:B+r35Yer5Yk7REBvB5sYgwmf8q","tlshash":"b9140922614256349ae6c1daa7504b04f73a8141f652deecfd7dedcc849e9ca30fa7b0","first_seen":"2025-10-07T08:25:20.241872Z","last_seen":"2026-02-25T20:14:13.37576Z","times_seen":40,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prd.jwpltx.com/v1/jwplayer6/ping.gif?h=-673249674\u0026e=e\u0026n=9094083922140530\u0026abc=0\u0026aid=GCCG\u0026amp=0\u0026at=1\u0026c=0\u0026ccp=0\u0026cp=1\u0026d=1\u0026eb=0\u0026ed=6\u0026emi=1gxdlwhi5n42\u0026i=1\u0026id=Instream\u0026lid=rl4tk51vgb9o\u0026lsa=read\u0026mt=1\u0026pbd=1\u0026pbr=1\u0026pgi=rqw5y0iiy3kc\u0026ph=0\u0026pii=0\u0026pl=125\u0026plc=1\u0026pli=1hanvqt1mv03\u0026pp=html5\u0026prc=2\u0026ps=1\u0026pss=1\u0026pt=Owk%2F%20Porn%20Videos%20for%20Free%20in%20Full%20HD%20%231\u0026pu=https%3A%2F%2Fhqfap.com%2Fsearch%3Fkeyword%3Dowk%2F\u0026pv=8.28.0\u0026pyc=0\u0026s=0\u0026sdk=0\u0026stc=2\u0026stpe=0\u0026tv=4.0.5\u0026vb=0\u0026vi=0\u0026vl=90\u0026wd=300\u0026ab=1\u0026cae=0\u0026cb=0\u0026cdid=jwplayer-container2\u0026cme=0\u0026dd=1\u0026dnt=1\u0026flc=0\u0026fv=\u0026ga=0\u0026lng=en\u0026mk=mp4\u0026mu=https%3A%2F%2Fhqfap.com%2Fupload%2Fvideos%2FInstream.mp4\u0026pbc=0\u0026pd=2\u0026pdr=\u0026plng=en\u0026plt=2100\u0026pni=0\u0026po=0\u0026sp=0\u0026st=770\u0026sa=1767424573536","fqdn":"prd.jwpltx.com","domain":"jwpltx.com","tld":"com"},"ip":{"addr":"108.157.229.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwpltx.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 12 Aug 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E8:9B:D4:42:32:9F:5E:14:C3:36:B5:09:FC:A2:0B:37:DF:D5:E2:D3","sha256":"D1:64:5C:F3:5A:AF:D7:5F:2E:91:2F:C7:B1:E4:F2:91:3C:5A:1E:B9:C2:E9:10:17:7E:59:CF:EC:E6:A0:80:5D"}}},"request":{"raw":"GET /v1/jwplayer6/ping.gif?h=-673249674\u0026e=e\u0026n=9094083922140530\u0026abc=0\u0026aid=GCCG\u0026amp=0\u0026at=1\u0026c=0\u0026ccp=0\u0026cp=1\u0026d=1\u0026eb=0\u0026ed=6\u0026emi=1gxdlwhi5n42\u0026i=1\u0026id=Instream\u0026lid=rl4tk51vgb9o\u0026lsa=read\u0026mt=1\u0026pbd=1\u0026pbr=1\u0026pgi=rqw5y0iiy3kc\u0026ph=0\u0026pii=0\u0026pl=125\u0026plc=1\u0026pli=1hanvqt1mv03\u0026pp=html5\u0026prc=2\u0026ps=1\u0026pss=1\u0026pt=Owk%2F%20Porn%20Videos%20for%20Free%20in%20Full%20HD%20%231\u0026pu=https%3A%2F%2Fhqfap.com%2Fsearch%3Fkeyword%3Dowk%2F\u0026pv=8.28.0\u0026pyc=0\u0026s=0\u0026sdk=0\u0026stc=2\u0026stpe=0\u0026tv=4.0.5\u0026vb=0\u0026vi=0\u0026vl=90\u0026wd=300\u0026ab=1\u0026cae=0\u0026cb=0\u0026cdid=jwplayer-container2\u0026cme=0\u0026dd=1\u0026dnt=1\u0026flc=0\u0026fv=\u0026ga=0\u0026lng=en\u0026mk=mp4\u0026mu=https%3A%2F%2Fhqfap.com%2Fupload%2Fvideos%2FInstream.mp4\u0026pbc=0\u0026pd=2\u0026pdr=\u0026plng=en\u0026plt=2100\u0026pni=0\u0026po=0\u0026sp=0\u0026st=770\u0026sa=1767424573536 HTTP/1.1\r\nHost: prd.jwpltx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 03 Jan 2026 07:16:14 GMT\r\nserver: nginx\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d9ef81045d0cf909bd3143957da09138.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: vKO3RHsoUOt3yNa0m8kdMrgrp4jCZaCA3NjOzFbjx6K3GvlsvAqM4w==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/v1/api.php","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:10.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"POST /v1/api.php HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 415\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":415,"data":"{\"user\":{\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en-US\",\"referer\":\"https://hqfap.com/search?keyword=owk/\",\"consumer\":\"ad-provider\",\"gdpr\":{\"gdpr\":0},\"screen_resolution\":\"1280x1024\",\"window_orientation\":\"landscape\",\"cookies\":[],\"scr_info\":\"YXN5bmN8fDM%3D\"},\"zones\":[{\"custom_targeting\":{},\"id\":5790954,\"extra_params\":{\"first_request\":true,\"zone_type\":2}}]}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 07:16:10 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://hqfap.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Authorization, Content-Type\r\nAccess-Control-Request-Method: POST\r\nSet-Cookie: __uvt=s%3A32%3A%22aa06063a66740e86bc29f61b0122ce23%22%3B; expires=Mon, 03 Jan 2028 07:16:10 GMT; Max-Age=63072000; path=/; domain=magsrv.com; secure; SameSite=None\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":821,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1f735fcc8403c4fc00200295cc8179ce","sha1":"e0eba949e4b85963b213e531ae1691bdf0da7808","sha256":"62760bc0dc4f1f656ca7c327ba9b56f07b96f964502562b89b82abe8e618b440","sha512":"0a16b17d11ca200d8195e32d3d572c8b174b49ff0715a1c41d638c28cc8802fe540d4623779510afdbfbaa38eeba29ce3dd45f2070abd654a9294ddd7d4acd34","ssdeep":"","tlshash":"6f011e3bff40887ce68416ce0e9164a4aa45b127ab8598d00450a4b4d0fc7242181b7e","first_seen":"2026-01-03T07:17:14.642098Z","last_seen":"2026-01-03T07:17:14.642098Z","times_seen":1,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":57,"dns":1,"connect":23,"send":0,"wait":83,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/v1/api.php","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:10.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"POST /v1/api.php HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 415\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":415,"data":"{\"user\":{\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en-US\",\"referer\":\"https://hqfap.com/search?keyword=owk/\",\"consumer\":\"ad-provider\",\"gdpr\":{\"gdpr\":0},\"screen_resolution\":\"1280x1024\",\"window_orientation\":\"landscape\",\"cookies\":[],\"scr_info\":\"YXN5bmN8fDM%3D\"},\"zones\":[{\"custom_targeting\":{},\"id\":5790952,\"extra_params\":{\"first_request\":true,\"zone_type\":2}}]}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 07:16:10 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://hqfap.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Authorization, Content-Type\r\nAccess-Control-Request-Method: POST\r\nSet-Cookie: __uvt=s%3A32%3A%22a807883d0839908b9e4272c34d2d6125%22%3B; expires=Mon, 03 Jan 2028 07:16:10 GMT; Max-Age=63072000; path=/; domain=magsrv.com; secure; SameSite=None\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":821,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"587f7b5c4c6db5f42975d02201a48f34","sha1":"9e048322c431dfc74a78233506407ac62fe10c60","sha256":"674e157baf9044f99c4f3085fef57b11fb17918bbfc3c2e6125655cd0712a377","sha512":"3d888f9df7d2cabde1836a3f658c23961a77d5ba17dd34827a4e67d0acdc6bc50f4392bd3f219b5b6cd1eaeb0cd1e0c0388fafa532a8420c003dad673d76ce0e","ssdeep":"","tlshash":"9b01ce7abf40887ce98056ce4e516064aa46b117e78598954494d4b8d0fc7243182b7e","first_seen":"2026-01-03T07:17:14.643062Z","last_seen":"2026-01-03T07:17:14.643062Z","times_seen":1,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":58,"dns":1,"connect":22,"send":0,"wait":95,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:11.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nCookie: __uvt=s%3A32%3A%226b4615f583ad7a61a3b7d7f72c3b8fb9%22%3B; c-tag=%7B%22tag-video%22%3A%22v6%7C%7CNOR%7C5766292%7C121114862%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C6b4615f583ad7a61a3b7d7f72c3b8fb9%7Cfedf893c02a58d3f8f0c78e77b16b788%7C0%7Chqfap.com%7C%7C%7C18%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1767424571%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C2%7C0%7C0%7Cs.magsrv.com%7C%7C%7C%7Chqfap.com%7C0%7C731446fab4a03ce73eb8c1d7b117a13a%7Cok%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 07:16:11 GMT\r\ncontent-type: application/javascript\r\netag: W/\"92eb331739d51c65226b5fdb07e\"\r\nexpires: Wed, 17 Dec 2025 13:24:25 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3vCcAAAwBuUwKEwH3IQAAAAwBJRPCMQG3fwAAAA\r\nx-77-nzt-ray: 2a494a15a726221960c2586936a6c829\r\nx-77-cache: HIT\r\nx-77-age: 10172\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":185387,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39040)","md5":"6bd931315f9ec922d23220a34a506421","sha1":"92eb331739d51c65226b5fdb07ec2d74924f200f","sha256":"28f33740f0a341c823243413c7780d92e7ae39254641174a86a4f51ac805b576","sha512":"26bb36ab577ba2b6486f482177e31992c81c79322070edc9d55af10d7ab8f3e1b9dccc89f7c925a47a68e464f522736c0e64d3d7e4acaa016745e0104bddb167","ssdeep":"3072:cWYjf7+28VOk2DG2cUMaElwnRlqI1fsBHisiEolY4o/CXMXpo:U+28VOk262lElwnRjfs4sXhpo","tlshash":"96045c993792307441d3a11daaff53093371506ab80f4884bb4dd8a427adeea51a3ffd","first_seen":"2025-12-11T15:18:11.624048Z","last_seen":"2026-01-15T17:17:43.902034Z","times_seen":1441,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwplayer.core.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:12.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.28.0/jwplayer.core.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, immutable\r\nlast-modified: Tue, 22 Aug 2023 18:19:08 GMT\r\netag: \"34de47681547f88d2a251419d61d4a2d\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 03 Jan 2026 07:16:12 GMT\r\nage: 1390167\r\nx-served-by: cache-lga21956-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 76, 2\r\nx-timer: S1767424573.826379,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 40476\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":143406,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65143)","md5":"34de47681547f88d2a251419d61d4a2d","sha1":"e9c03590ad2eb86eeee8b0032f345fbeb32bc4c1","sha256":"5a8861552d8484bac63cb929ef4b4e9f2f76726aef84032c76a75b76da4e7ddc","sha512":"96c8659af1758ddc35ee64cf835f983cddb190d2dff7884b86dd259faab6d824c3330d04f2b056f77989be023b1703c9e0e339ce805c0ec480812d2988c305ea","ssdeep":"3072:B5ozmmILBerJhsy7v22m79sTkvpkHkfeKJyuaU:X7DBerJh/aLLkEfPJn","tlshash":"45e33b753181623651da93da72674201a33a45897406c7acff2cedea1c3e88771f6fb8","first_seen":"2025-10-07T08:25:20.374415Z","last_seen":"2026-02-25T20:14:13.377962Z","times_seen":40,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":47,"dns":0,"connect":0,"send":0,"wait":28,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"entitlements.jwplayer.com/GCCG.json","fqdn":"entitlements.jwplayer.com","domain":"jwplayer.com","tld":"com"},"ip":{"addr":"65.9.46.54","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwplayer.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Wed, 25 Dec 2024 00:00:00 GMT","end":"Sat, 24 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"73:5F:22:36:72:E7:49:11:8F:B7:80:90:DA:4D:43:52:ED:0A:89:13","sha256":"E0:7A:FC:22:76:89:11:1A:58:F4:9F:05:51:C6:71:29:F8:0B:7B:AB:0B:3B:F9:C3:67:76:84:5E:50:04:C4:DF"}}},"request":{"raw":"GET /GCCG.json HTTP/1.1\r\nHost: entitlements.jwplayer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\ncontent-type: application/json\r\ncontent-length: 71\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 03:08:00 GMT\r\ncache-control: max-age=1800, s-maxage=21060\r\naccess-control-allow-origin: *\r\nx-cache: Error from cloudfront\r\nvia: 1.1 0eaf5f30adcca4475fcc2543288cac08.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: 2csg0rUb2qp7wz6JRPugYa2SMHBQ_5IoyXRj0DjzseypXlxYvG6R9A==\r\nage: 14894\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":71,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5534f424f1d6586164a58758f3e2c51a","sha1":"ef37ca3d8831aaad699430dcaa9967469542d602","sha256":"f28df38bea81995fd78f9077bff2dfc9d60ee13b8c414bc426c61c0e1b0bee86","sha512":"de8d4f36c7f0f85b1fb1a52e22e511fd2e52e7ba6010b39947d72eceb752a60b7578be34dc4c44be6add327cef42a82442099d803bcc3251d84ec05d26fe4d15","ssdeep":"","tlshash":"0da0023eec5654030de616dc3cdae44612f4135c1754544c8e8915ac1adfef24f13311","first_seen":"2023-05-03T00:46:19Z","last_seen":"2026-04-03T20:29:48.300285Z","times_seen":982,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":1,"connect":11,"send":0,"wait":12,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/css/style.css?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/css/style.css?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 Aug 2025 13:01:34 GMT\r\nvary: Accept-Encoding\r\netag: \"68b0532e-4137f\"\r\nexpires: Sat, 03 Jan 2026 17:46:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 5375\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4bsQ0BHWWh1FfVSph43iefTvDNreNfN0IciCCBRAPs7NbMftRQXZRo2bnmRxhGhUj5Tyck1qGuEn16gMLmvPaa%2BBVQvkvvA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b5826a9356c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":267135,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (380)","md5":"acc5e9256a921fa77ee12c7112b87b9a","sha1":"f7a39ac5c1b95b77df05708e26e827712cb9a5ff","sha256":"cbe762073816a3e797c0f186970704fc2a5bb6c1bd5089295a6c2c3c3f3d053e","sha512":"874e4d4b178c396f23f7b856501259a12ba35aca24436d75096634dd14593179a74bcfa38c9e2af2abae89ceb9ca22491cbeb295bd796c0508d1684adfce5471","ssdeep":"1536:mtCu7yVMM4UymG9LEGo9REaDhREOh1Edd8915G5j3p72SxdSser4dar4MnpC7Q68:1HOo/FsWrZjweV66VXnqhGX","tlshash":"4644c762f6912504f42bd1a9bde3479a232e8103e60665fcf9d73568cb8e0ec15736ce","first_seen":"2025-10-04T21:36:27.235487Z","last_seen":"2026-02-28T22:53:54.767363Z","times_seen":45,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/provider.html5.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:12.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.28.0/provider.html5.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, immutable\r\nlast-modified: Tue, 22 Aug 2023 18:19:11 GMT\r\netag: \"e8e42a735322eb7478a82bf49c357638\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 03 Jan 2026 07:16:12 GMT\r\nage: 2133835\r\nx-served-by: cache-lga21981-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 0, 2\r\nx-timer: S1767424573.837716,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 14698\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":44252,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (43859)","md5":"e8e42a735322eb7478a82bf49c357638","sha1":"5ef024f2e798985043d7ecb8bf1752cffeb70e55","sha256":"f18d94cc548a0d5e9c36da9f47164f4df4fbd903a9cf0dc8e3a4545622365ce7","sha512":"6c8d8c6fd93db8ab4d8e5dbf25edc0aa244fb9eaff22201931bc467e87061770ca2e85cb7f8db536143b5766020dc7f35b1394853e4c9e0c48bd40bd15247ebd","ssdeep":"768:B2Smc7dAD/v018QK1XCYClPhaiDXIj9ZvDry8wesUukSJLdXhRwTi++2XzPAjrCW:BnG/v01qBBgJOnqhfwXzpIME9Dfm50HJ","tlshash":"4113f89633d4b433c6d296c261750311533e5e5a7848c4acfa299ecb0d5ac8770fabf9","first_seen":"2025-10-07T08:25:20.304883Z","last_seen":"2026-02-25T20:14:13.330081Z","times_seen":40,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":44,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/css/red-mode.css?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/css/red-mode.css?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 30 Oct 2025 13:53:40 GMT\r\nvary: Accept-Encoding\r\netag: \"69036de4-8689\"\r\nexpires: Sat, 03 Jan 2026 17:46:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 5375\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o3dgwblsAppwuYEbGxcKLjVmsjt8oZu4dRlWelJMyi4JvELsiipc5AJtByV6ZVV8s8Qt4TGzXOTwMyBzn5YJFWIWLZ2agho%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b5827a9456c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34441,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (737)","md5":"f9c770c7ae2bce6d3d295139d551af7f","sha1":"d419a69dcd535efc38938959cea749e59ac04555","sha256":"b1bd09cbb17b53842d490bfc33e288c8c38c0b2b81cef6257ff5f69efc703c5c","sha512":"a44d3e60b5d05a7a929e6f846ca2462efae8a220915ca3332ca6e73a4d41944b1d2c2a4c5c222a27d86a86342055fe0eaaeaabbd732745c3875fad4ed1f73782","ssdeep":"384:wKQAvocon6j8ckgJqdjqGJiDnaVzJbgqQiwZzNV9Zel:wYv/on6BkgJCjxZDrQpYl","tlshash":"a5f23312f2d51c0b3063c26d6467ea783b7c5285e1486f7cbb7972fc5b8c58a683a9c1","first_seen":"2025-11-07T18:27:21.37749Z","last_seen":"2026-01-04T09:18:31.110713Z","times_seen":27,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/player/plugins/context-menu/context-menu-i18n.js?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/player/plugins/context-menu/context-menu-i18n.js?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 25 Jul 2018 08:23:26 GMT\r\nvary: Accept-Encoding\r\netag: \"5b58337e-1366\"\r\nexpires: Sat, 03 Jan 2026 17:46:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 5375\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U21MpQGUJBeQz%2BPS2Mq0UAOm61izJ7HxHYvpEAoXwTPLnXjuYLnIz%2F9rxSLDlwM5J1pZ7q7f3yGUa9Fzoef%2FZYpu%2BGfMGyM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b582eab756c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4966,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"abb4406dbd0690b6550a170c3ed6ad6a","sha1":"2b4060b80987e5c91caaebc489436ced419c1b74","sha256":"47b1642f3212bf6d0bcc44b5c1d883501f47c9c8535affc48109bd719a842e5f","sha512":"38c4e0c5b3d882104de91ca5d48912453711dc47bb8df078f3e7aef66a08602fa6a58e71404c3ea88026fb14b9a4218891d0b1c84cf5d65570295133ddbe05d7","ssdeep":"96:ScnO8/O8UOpIFrFp5pI8IxYtJ+XmXJVH187a18U2y1oGP/dPYdY8JmJvyFEGELD0:hvAZeVmK8idU2C/VYdSzT3Txb94tf9x1","tlshash":"86a16bf9ab7a49c31b9b89c9584547c7d8ac273337e19d12b466cd1c36e238b3838479","first_seen":"2023-03-07T16:21:58Z","last_seen":"2026-03-31T14:32:42.460306Z","times_seen":148,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:09.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15920\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 31 Dec 2025 22:35:35 GMT\r\nexpires: Thu, 31 Dec 2026 22:35:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 204034\r\nlast-modified: Wed, 11 May 2022 19:24:45 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15920,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15920, version 1.0","md5":"3a44e06eb954b96aa043227f3534189d","sha1":"23cef6993ddb2b2979e8e7647fc3763694e2ba7d","sha256":"b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e","sha512":"fab970b250dd88064730bd2603c530f3503abb0af4e4095786877f9660a159bf4ad98c5abea2e95eb39ae8c13417736b5772fcb9f87941ff5e0f383cb172997f","ssdeep":"384:sShqOXQlaSchOwK0uFvRqq3xR/xb5OY3aU/lHS9WE2YeK1os:sShJKaScJK0uFvRvxb5OY3aU/lHkmK","tlshash":"cc62cf5c6a901684c67c29b63b6d616be9a1cd50c2ab73904fdba317d30d3a1e0298fd","first_seen":"2023-04-05T08:15:27Z","last_seen":"2026-04-03T23:31:32.655623Z","times_seen":63892,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":75,"dns":2,"connect":21,"send":0,"wait":21,"receive":8,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/player/jwplayer/jwplayer.js","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:11.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/player/jwplayer/jwplayer.js HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/upload/player/embed.html\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night; adb_user=true; adb_user_ts=1767424570743; _ga_9CBDTHEVHY=GS2.1.s1767424570$o1$g0$t1767424570$j60$l0$h0; _ga=GA1.1.433107323.1767424571; r=c3RyaW5n; __suvt=707aba6a4b81d92b9e7621f7610e7358; cf_clearance=ee2IjbD4qb1dRrSjfyOFko5FrCPqhl0RDUznSn.AvUI-1767424571-1.2.1.1-hvznDDyyVvd7.wnrg1aJYp.frzz07cclj941BtpzURg5.YGF5CyjdB7yAk5g4gtk0A.JXOyCY97G.pECxoPOIZ4osPHLOi_cKKO8ebAHfbbmKlsov3643ruVyoFlVePgBQwrK10aDIQHFxoe3iF5boFI0VKtZeYBq50jdTLR7BbF8UDhjUXZQreT4Bu1B4kpMshaXRBPz6NkqESmbRxIxB0eFx4_qXPp6uZHVpeSEMA\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 31 Jul 2024 16:56:10 GMT\r\nvary: Accept-Encoding\r\netag: \"66aa6caa-1ab86\"\r\nexpires: Sat, 03 Jan 2026 18:00:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 4544\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sFQPgiZTx1DccM5FuQscWuZIUiAv2RC%2BfbeeLzzxuS4NnsKZi%2BBLC8gClzVaPeAatMQZ5esczj%2FprmQEMvR0OV4fKLjV1tg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b594eb1256c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109446,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65144)","md5":"6e5c94c322f1ed5f37be56c1bc238e82","sha1":"f6551ac521a2a3c69c8e7ee3ae3b3ab89f9d6217","sha256":"d44d79b928de5d70dce3be8a2f4e5fd40b958159a2a26b1e596a932e28b89975","sha512":"ee57f923459ab5b39553d260a014d6af902a2e1d92254e1f09d699d6f3a1b0f3a0ad80e85ae649c8b0e79154bfd45bcc5b55803161d93808bce5673396a45f21","ssdeep":"1536:B0rFRlUxyv0CcKnKqkf1QiYKDjAPkMUtbKSrRo1gBUSPgGSP3ECTP+MLdGm/Ggd8:BCvxK91ZauoiUB+MLdGX","tlshash":"c6b309e531c2b4e603e624daa07a4041f23a0945380dd5a4fa6cede63d6b947b177fbc","first_seen":"2023-11-18T19:26:42Z","last_seen":"2026-01-15T03:44:34.886381Z","times_seen":62,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"entitlements.jwplayer.com/GCCG.json","fqdn":"entitlements.jwplayer.com","domain":"jwplayer.com","tld":"com"},"ip":{"addr":"65.9.46.54","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwplayer.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Wed, 25 Dec 2024 00:00:00 GMT","end":"Sat, 24 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"73:5F:22:36:72:E7:49:11:8F:B7:80:90:DA:4D:43:52:ED:0A:89:13","sha256":"E0:7A:FC:22:76:89:11:1A:58:F4:9F:05:51:C6:71:29:F8:0B:7B:AB:0B:3B:F9:C3:67:76:84:5E:50:04:C4:DF"}}},"request":{"raw":"GET /GCCG.json HTTP/1.1\r\nHost: entitlements.jwplayer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\ncontent-type: application/json\r\ncontent-length: 71\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 03:08:00 GMT\r\ncache-control: max-age=1800, s-maxage=21060\r\naccess-control-allow-origin: *\r\nx-cache: Error from cloudfront\r\nvia: 1.1 0eaf5f30adcca4475fcc2543288cac08.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: LoVt9A5kYGXfsBR8dAP4Ub6bpr9ALy9eUACmiKHP2ZIzj-yVTBM1xw==\r\nage: 14894\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":71,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5534f424f1d6586164a58758f3e2c51a","sha1":"ef37ca3d8831aaad699430dcaa9967469542d602","sha256":"f28df38bea81995fd78f9077bff2dfc9d60ee13b8c414bc426c61c0e1b0bee86","sha512":"de8d4f36c7f0f85b1fb1a52e22e511fd2e52e7ba6010b39947d72eceb752a60b7578be34dc4c44be6add327cef42a82442099d803bcc3251d84ec05d26fe4d15","ssdeep":"","tlshash":"0da0023eec5654030de616dc3cdae44612f4135c1754544c8e8915ac1adfef24f13311","first_seen":"2023-05-03T00:46:19Z","last_seen":"2026-04-03T20:29:48.300285Z","times_seen":982,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":1,"connect":11,"send":0,"wait":12,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/css/font-awesome-4.7.0/css/font-awesome.min.css?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/css/font-awesome-4.7.0/css/font-awesome.min.css?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 08 Jan 2018 12:37:26 GMT\r\nvary: Accept-Encoding\r\netag: \"5a536606-791a\"\r\nexpires: Sat, 03 Jan 2026 17:46:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 5375\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CxIjA2Br7Qn6KvTBq%2Fe6iCZHJcMBzYr%2BqatSCShg0a96tyXepmKdEZniLt10LHF3ZPpOgs5xroCpEMOBbXRRIasBZj86oi4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b5824a8d56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31002,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30839)","md5":"8e18e9413a99b30bf78367c3fd6a8b53","sha1":"7e99135595cdbf2b788c5bcf5287cbe41d359060","sha256":"421b85a2779bc8860bed63f7426bcd207012e7f346f49bb6c752d26ad028fd17","sha512":"f801953aa09d4ea8719154fffa869f166314e29694a2ca5c6a40d3e19bd1a0d1ced13fecb767736a3e5bba3591b0727fffbdf7349fc9cf7487400ed23655124d","ssdeep":"384:wHA5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:w+lr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"8bd241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-09T17:48:37Z","last_seen":"2026-04-03T15:29:14.45877Z","times_seen":197,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/js/jquery-3.min.js?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/js/jquery-3.min.js?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 04 Jul 2017 11:30:54 GMT\r\nvary: Accept-Encoding\r\netag: \"595b7c6e-15287\"\r\nexpires: Sat, 03 Jan 2026 17:46:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 5363\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=saeZhfngFTtrAotJFpWxTu%2FqrswIz1doWaFAKMr4y9pfFl3bD1Vqz12GAKcsniXnCHnTxgs7mCkaPrSMIRr%2BrncZmCSzXP0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b5828a9a56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86663,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32058), with CRLF line terminators","md5":"473957cfb255a781b42cb2af51d54a3b","sha1":"67bdacbd077ee59f411109fd119ee9f58db15a5f","sha256":"75b707d8761e2bfbd25fbd661f290a4f7fd11c48e1bf53a36dc6bd8a0034fa35","sha512":"20da3fe171c075635ef82f8de57644c7a50be45eb1207d96a51b5eadeaac17ee830b5058d87e88501e20ec41ef897f65cec26a0380eaf49698c6eaa5981d8483","ssdeep":"1536:TNhEyjjTikEJO4edXXe9J578go6MWX2xkjde4c4j2ll2AckaXE46n15HZ+FhFcQ+:Vxc2yji4j2uC/kcQDU8CuE","tlshash":"6183e6d9b2c67062977730b950bf410bb17a98dab44c8c60f158d9d47eb8a8d907bf2c","first_seen":"2023-03-07T01:06:24Z","last_seen":"2026-04-03T15:29:14.497795Z","times_seen":2802,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6.adsco.re:2087/","fqdn":"6.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.16.83.77","port":2087,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:11.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 6.adsco.re:2087\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 07:16:11 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 45\r\ncf-ray: 9b80b5963b375689-OSL\r\naccess-control-allow-origin: https://hqfap.com\r\ncache-control: private, max-age=300, immutable, stale-if-error=300, stale-while-revalidate=300\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\naccess-control-max-age: 2592000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":2087\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":14,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prd.jwpltx.com/v1/jwplayer6/ping.gif?h=230548974\u0026e=ana\u0026n=3236520686500216\u0026aid=GCCG\u0026emi=csmu5dilxa4e\u0026id=Instream\u0026pli=1oiby9jzaq5q\u0026pv=8.28.0\u0026tv=4.0.5\u0026sa=1767424583654","fqdn":"prd.jwpltx.com","domain":"jwpltx.com","tld":"com"},"ip":{"addr":"108.157.229.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:23.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwpltx.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 12 Aug 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E8:9B:D4:42:32:9F:5E:14:C3:36:B5:09:FC:A2:0B:37:DF:D5:E2:D3","sha256":"D1:64:5C:F3:5A:AF:D7:5F:2E:91:2F:C7:B1:E4:F2:91:3C:5A:1E:B9:C2:E9:10:17:7E:59:CF:EC:E6:A0:80:5D"}}},"request":{"raw":"GET /v1/jwplayer6/ping.gif?h=230548974\u0026e=ana\u0026n=3236520686500216\u0026aid=GCCG\u0026emi=csmu5dilxa4e\u0026id=Instream\u0026pli=1oiby9jzaq5q\u0026pv=8.28.0\u0026tv=4.0.5\u0026sa=1767424583654 HTTP/1.1\r\nHost: prd.jwpltx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 03 Jan 2026 07:16:23 GMT\r\nserver: nginx\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d9ef81045d0cf909bd3143957da09138.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: kgv8YnQqVc6okVmOQscdueuShyKD8Hx8YDcRsxCiArcQLBi0wwnx_A==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prd.jwpltx.com/v1/jwplayer6/ping.gif?h=-913763149\u0026e=ana\u0026n=6509345405936245\u0026aid=GCCG\u0026emi=3siv4mtqk3zo\u0026id=Instream\u0026pli=1s7cqfhx2e14\u0026pv=8.28.0\u0026tv=4.0.5\u0026sa=1767424583899","fqdn":"prd.jwpltx.com","domain":"jwpltx.com","tld":"com"},"ip":{"addr":"108.157.229.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:23.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwpltx.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 12 Aug 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E8:9B:D4:42:32:9F:5E:14:C3:36:B5:09:FC:A2:0B:37:DF:D5:E2:D3","sha256":"D1:64:5C:F3:5A:AF:D7:5F:2E:91:2F:C7:B1:E4:F2:91:3C:5A:1E:B9:C2:E9:10:17:7E:59:CF:EC:E6:A0:80:5D"}}},"request":{"raw":"GET /v1/jwplayer6/ping.gif?h=-913763149\u0026e=ana\u0026n=6509345405936245\u0026aid=GCCG\u0026emi=3siv4mtqk3zo\u0026id=Instream\u0026pli=1s7cqfhx2e14\u0026pv=8.28.0\u0026tv=4.0.5\u0026sa=1767424583899 HTTP/1.1\r\nHost: prd.jwpltx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 03 Jan 2026 07:16:23 GMT\r\nserver: nginx\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d9ef81045d0cf909bd3143957da09138.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: cPv4DKXYY5vg9H3Uj7M0fB8ePszKfA01VkMSZ33N_1CgfBNaht3FZg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.intelligenceadx.com/vodometer.min.css","fqdn":"www.intelligenceadx.com","domain":"intelligenceadx.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:09.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1868349309.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 16:39:05 GMT","end":"Tue, 10 Feb 2026 16:39:04 GMT"},"fingerprint":{"sha1":"C4:0D:0B:27:61:6F:77:0A:F6:BE:83:C5:8D:3B:4E:30:A5:64:70:47","sha256":"92:56:EB:06:47:BF:20:23:7A:AE:C9:60:78:79:B6:18:A1:29:A7:13:D1:59:E9:9D:C9:B9:26:FD:7C:7C:FF:36"}}},"request":{"raw":"GET /vodometer.min.css HTTP/1.1\r\nHost: www.intelligenceadx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 07:16:09 GMT\r\ncontent-type: application/x-javascript\r\npopads-node: wb4\r\nexpires: Tue, 06 Jan 2026 12:05:55 GMT\r\naccess-control-allow-origin: https://hqfap.com\r\nlink: \u003chttps://intelligenceadx.com/\u003e;rel=preconnect\r\ncache-control: public, max-age=604800\r\nx-77-nzt: EwwBX63NDQHXXvYEAAwBuUwKCQH3oQoAAAwBJRPCLgG3FgEAAA\r\nx-77-nzt-ray: 2a494a15a3327d1e5ec258695dfd6922\r\nx-77-cache: HIT\r\nx-77-age: 325214\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":41946,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (1568)","md5":"1d32bb7bb80834b5162126241a5347f8","sha1":"f8f587ca3bd7109578d8397030629ea5573c0f6d","sha256":"e84c3b6c831e02e39852f1c48149650765c9e605c2bc3bf3af168986cbc1dc69","sha512":"6b6bac3d6f7dcda7230298f9ef9aedb6b1ade7b305b54cc0a93809d3d7ac23d718b95d3631318ef889906e3059e9f7a70092d30c9cea168de1f74cf97da5e781","ssdeep":"768:bt9rqAYKKGZzFQ9JsQU+YDngZGihfzmMzhYrTsAysncCWcf5k5sigCUFCntlqoDX:bbdZzFQ9JsTgZvfzmMzhYrTscp0ZZ","tlshash":"1b1329aab286282601e742b9503eb317b233051679129458fcb9cdf96e3ddc6117b7fc","first_seen":"2025-12-30T17:21:40.989856Z","last_seen":"2026-01-04T09:18:31.071497Z","times_seen":8,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":46,"dns":33,"connect":1,"send":0,"wait":1,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"www.intelligenceadx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:11.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nCookie: __uvt=s%3A32%3A%226b4615f583ad7a61a3b7d7f72c3b8fb9%22%3B; c-tag=%7B%22tag-video%22%3A%22v6%7C%7CNOR%7C5766292%7C121114862%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C6b4615f583ad7a61a3b7d7f72c3b8fb9%7Cfedf893c02a58d3f8f0c78e77b16b788%7C0%7Chqfap.com%7C%7C%7C18%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1767424571%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C2%7C0%7C0%7Cs.magsrv.com%7C%7C%7C%7Chqfap.com%7C0%7C731446fab4a03ce73eb8c1d7b117a13a%7Cok%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 07:16:11 GMT\r\ncontent-type: application/javascript\r\netag: W/\"92eb331739d51c65226b5fdb07e\"\r\nexpires: Wed, 17 Dec 2025 13:24:25 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3vCcAAAwBuUwKEwH3IQAAAAwBJRPCMQG3fwAAAA\r\nx-77-nzt-ray: 2a494a15a726221960c25869b40da829\r\nx-77-cache: HIT\r\nx-77-age: 10172\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":185387,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39040)","md5":"6bd931315f9ec922d23220a34a506421","sha1":"92eb331739d51c65226b5fdb07ec2d74924f200f","sha256":"28f33740f0a341c823243413c7780d92e7ae39254641174a86a4f51ac805b576","sha512":"26bb36ab577ba2b6486f482177e31992c81c79322070edc9d55af10d7ab8f3e1b9dccc89f7c925a47a68e464f522736c0e64d3d7e4acaa016745e0104bddb167","ssdeep":"3072:cWYjf7+28VOk2DG2cUMaElwnRlqI1fsBHisiEolY4o/CXMXpo:U+28VOk262lElwnRjfs4sXhpo","tlshash":"96045c993792307441d3a11daaff53093371506ab80f4884bb4dd8a427adeea51a3ffd","first_seen":"2025-12-11T15:18:11.624048Z","last_seen":"2026-01-15T17:17:43.902034Z","times_seen":1441,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwplayer.core.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:12.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.28.0/jwplayer.core.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, immutable\r\nlast-modified: Tue, 22 Aug 2023 18:19:08 GMT\r\netag: \"34de47681547f88d2a251419d61d4a2d\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 03 Jan 2026 07:16:12 GMT\r\nage: 1390167\r\nx-served-by: cache-lga21956-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 76, 5\r\nx-timer: S1767424573.837493,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 40476\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":143406,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65143)","md5":"34de47681547f88d2a251419d61d4a2d","sha1":"e9c03590ad2eb86eeee8b0032f345fbeb32bc4c1","sha256":"5a8861552d8484bac63cb929ef4b4e9f2f76726aef84032c76a75b76da4e7ddc","sha512":"96c8659af1758ddc35ee64cf835f983cddb190d2dff7884b86dd259faab6d824c3330d04f2b056f77989be023b1703c9e0e339ce805c0ec480812d2988c305ea","ssdeep":"3072:B5ozmmILBerJhsy7v22m79sTkvpkHkfeKJyuaU:X7DBerJh/aLLkEfPJn","tlshash":"45e33b753181623651da93da72674201a33a45897406c7acff2cedea1c3e88771f6fb8","first_seen":"2025-10-07T08:25:20.374415Z","last_seen":"2026-02-25T20:14:13.377962Z","times_seen":40,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":45,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.pemsrv.com/venor.php","fqdn":"s.pemsrv.com","domain":"pemsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:10.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pemsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:59:06 GMT","end":"Thu, 26 Mar 2026 11:59:05 GMT"},"fingerprint":{"sha1":"8C:23:43:2A:16:0E:E5:14:D7:54:DB:F5:5F:BB:56:E4:32:AF:3B:BA","sha256":"91:45:ED:F2:0E:35:83:14:E7:B4:0D:2D:8E:1A:A6:05:62:4F:B6:6E:83:8A:0C:D3:BF:D4:8A:1C:A7:19:9D:9C"}}},"request":{"raw":"GET /venor.php HTTP/1.1\r\nHost: s.pemsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 07:16:10 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"c4ca4238a0b923820dcc509a6f75849b","sha1":"356a192b7913b04c54574d18c28d46e6395428ab","sha256":"6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b","sha512":"4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a","ssdeep":"","tlshash":"c70000000c000000c00000300000000000000000000000000000000000000000000030","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-04-04T03:27:21.304181Z","times_seen":104749,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/js/footer.js?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/js/footer.js?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Tue, 13 Nov 2018 17:45:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 03 Jan 2026 17:46:34 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 5374\r\ncf-cache-status: HIT\r\netag: W/\"5beb0db2-3e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B35EoZ%2B0Gnx5gsWVYPXBL1Xx115rwW4WwzfIzokLVjqUuI80x3i5m0WQFz%2Fd10j0OjjOosuttv0yJ4nVAa7FBV3J3vDgF%2F8%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9b80b5833ac256c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"da9b6f9931a30eadff5a0786adfdb1be","sha1":"3a0075681cba64f77d185690564e1d5e890df0c1","sha256":"6c0f2f6446cfb45657ae2b57b48eace65e6f9b0c07333c9c6a3e86cdd7f0260a","sha512":"7b1ff07aea1ccb35ca7053ed6f47c00ae204aa6655f67208a2e60c74c616d7b076ea2a71b6763957440bf6a681ff103f967930319f83e903b03fb6880c6abf44","ssdeep":"","tlshash":"cca00235500745755cdf5c04701fa2a4e9fd5f1d5a6582621449813ea1574c5d8cad40","first_seen":"2023-03-07T16:21:58Z","last_seen":"2026-03-31T14:32:42.328203Z","times_seen":145,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/provider.html5.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:12.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.28.0/provider.html5.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, immutable\r\nlast-modified: Tue, 22 Aug 2023 18:19:11 GMT\r\netag: \"e8e42a735322eb7478a82bf49c357638\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 03 Jan 2026 07:16:12 GMT\r\nage: 2133835\r\nx-served-by: cache-lga21981-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 0, 1\r\nx-timer: S1767424573.826473,VS0,VE1\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 14698\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":44252,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (43859)","md5":"e8e42a735322eb7478a82bf49c357638","sha1":"5ef024f2e798985043d7ecb8bf1752cffeb70e55","sha256":"f18d94cc548a0d5e9c36da9f47164f4df4fbd903a9cf0dc8e3a4545622365ce7","sha512":"6c8d8c6fd93db8ab4d8e5dbf25edc0aa244fb9eaff22201931bc467e87061770ca2e85cb7f8db536143b5766020dc7f35b1394853e4c9e0c48bd40bd15247ebd","ssdeep":"768:B2Smc7dAD/v018QK1XCYClPhaiDXIj9ZvDry8wesUukSJLdXhRwTi++2XzPAjrCW:BnG/v01qBBgJOnqhfwXzpIME9Dfm50HJ","tlshash":"4113f89633d4b433c6d296c261750311533e5e5a7848c4acfa299ecb0d5ac8770fabf9","first_seen":"2025-10-07T08:25:20.304883Z","last_seen":"2026-02-25T20:14:13.330081Z","times_seen":40,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":44,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwplayer.core.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:12.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.28.0/jwplayer.core.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, immutable\r\nlast-modified: Tue, 22 Aug 2023 18:19:08 GMT\r\netag: \"34de47681547f88d2a251419d61d4a2d\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 03 Jan 2026 07:16:12 GMT\r\nage: 1390167\r\nx-served-by: cache-lga21956-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 76, 7\r\nx-timer: S1767424573.839080,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 40476\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":143406,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65143)","md5":"34de47681547f88d2a251419d61d4a2d","sha1":"e9c03590ad2eb86eeee8b0032f345fbeb32bc4c1","sha256":"5a8861552d8484bac63cb929ef4b4e9f2f76726aef84032c76a75b76da4e7ddc","sha512":"96c8659af1758ddc35ee64cf835f983cddb190d2dff7884b86dd259faab6d824c3330d04f2b056f77989be023b1703c9e0e339ce805c0ec480812d2988c305ea","ssdeep":"3072:B5ozmmILBerJhsy7v22m79sTkvpkHkfeKJyuaU:X7DBerJh/aLLkEfPJn","tlshash":"45e33b753181623651da93da72674201a33a45897406c7acff2cedea1c3e88771f6fb8","first_seen":"2025-10-07T08:25:20.374415Z","last_seen":"2026-02-25T20:14:13.377962Z","times_seen":40,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA4VQS05DMQy8Chfo0/iTOOmaNUggDpC8JrDhWwkVyYcnTSuo2JBREsu/sYfBcQPaQK7AW4pbEs+0ZCzKCwX1m9s7V/Kn917elvX12bMgaRxJBFInWObxh0SWwB6Q3EwYwk6UozJxcoWLY4CDqE7L4A/31/PSALsABw4Y9pHSGdM/qnEgsHqsGin0kKTsrEQqUm1n3XiVmnrNHmPZhZRazKTWihCXDEgBSebeZHTDxR6jP1OW5GzgwYYFZDZHwQ82xxohFR5jjwOf7rL/elndLxKPCOclMZn+RnEW4Nec7355Lo/7j885E5045Bw7KTCkslJLLFoT7TLX3CwydYuEZhLS/9I45cramia1QKkJS8gUUkeqa5HO32uZERAHAgAA\u0026cb=e2e_6958c23dbd6fc1.09835016","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA4VQS05DMQy8Chfo0/iTOOmaNUggDpC8JrDhWwkVyYcnTSuo2JBREsu/sYfBcQPaQK7AW4pbEs+0ZCzKCwX1m9s7V/Kn917elvX12bMgaRxJBFInWObxh0SWwB6Q3EwYwk6UozJxcoWLY4CDqE7L4A/31/PSALsABw4Y9pHSGdM/qnEgsHqsGin0kKTsrEQqUm1n3XiVmnrNHmPZhZRazKTWihCXDEgBSebeZHTDxR6jP1OW5GzgwYYFZDZHwQ82xxohFR5jjwOf7rL/elndLxKPCOclMZn+RnEW4Nec7355Lo/7j885E5045Bw7KTCkslJLLFoT7TLX3CwydYuEZhLS/9I45cramia1QKkJS8gUUkeqa5HO32uZERAHAgAA\u0026cb=e2e_6958c23dbd6fc1.09835016 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nCookie: __uvt=s%3A32%3A%226b4615f583ad7a61a3b7d7f72c3b8fb9%22%3B; c-tag=%7B%22tag-video%22%3A%22v6%7C%7CNOR%7C5764770%7C126691254%7C277106%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C6b4615f583ad7a61a3b7d7f72c3b8fb9%7Cfedf893c02a58d3f8f0c78e77b16b788%7C0%7Chqfap.com%7C%7C%7C20%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1767424571%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C2%7C0%7C0%7Cs.magsrv.com%7C%7C%7C%7Chqfap.com%7C0%7C3071d0a2c5cc3c2a05a9136bfa6b5f33%7Cok%22%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 07:16:14 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://hqfap.com\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA4VRS05DMQy8Chfo0/iTj7tmDRKIAySvL7DhWwkVyYfHfa2gYkNGUax44hk7DM4b0AZyBd5S3pK60WSYlCdK6je3d67kT++jvU3z67OboGoOEiG4hGIcZ6pUKtgTqpciDGEnsqxMzK5wcQQ4ieoaFfjD/fW6KcAuwIETIj5KOmO9J644EFg9d82URqrSdqVlatLLrozCs/Q6unnObZdqXbKRlqUJcTNAGkiMxyJRDRd9RH0mk+pcwKGGCSK6WsEPNsc3QioctmPB1+u2/3qZ3S+IR6Rzk1iV/mbPmd/wpLOfntvj/uNz9UQnDTnnThOIUZXWW27aK+2Muy0lM42SCUuRVP8fjVv4t1mZR06ILxsdShbsmZa5N/0GBvnCDAcCAAA=\u0026cb=e2e_6958c23e28da44.10922143","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA4VRS05DMQy8Chfo0/iTj7tmDRKIAySvL7DhWwkVyYfHfa2gYkNGUax44hk7DM4b0AZyBd5S3pK60WSYlCdK6je3d67kT++jvU3z67OboGoOEiG4hGIcZ6pUKtgTqpciDGEnsqxMzK5wcQQ4ieoaFfjD/fW6KcAuwIETIj5KOmO9J644EFg9d82URqrSdqVlatLLrozCs/Q6unnObZdqXbKRlqUJcTNAGkiMxyJRDRd9RH0mk+pcwKGGCSK6WsEPNsc3QioctmPB1+u2/3qZ3S+IR6Rzk1iV/mbPmd/wpLOfntvj/uNz9UQnDTnnThOIUZXWW27aK+2Muy0lM42SCUuRVP8fjVv4t1mZR06ILxsdShbsmZa5N/0GBvnCDAcCAAA=\u0026cb=e2e_6958c23e28da44.10922143 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nCookie: __uvt=s%3A32%3A%226b4615f583ad7a61a3b7d7f72c3b8fb9%22%3B; c-tag=%7B%22tag-video%22%3A%22v6%7C%7CNOR%7C5764770%7C126691254%7C277106%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C6b4615f583ad7a61a3b7d7f72c3b8fb9%7Cfedf893c02a58d3f8f0c78e77b16b788%7C0%7Chqfap.com%7C%7C%7C20%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1767424571%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C2%7C0%7C0%7Cs.magsrv.com%7C%7C%7C%7Chqfap.com%7C0%7C3071d0a2c5cc3c2a05a9136bfa6b5f33%7Cok%22%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 07:16:14 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://hqfap.com\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/930846/bc718cc2686608575603d725ff901ace5270dfdb.gif","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:15.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/930846/bc718cc2686608575603d725ff901ace5270dfdb.gif HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 07:16:15 GMT\r\ncontent-type: image/gif\r\ncontent-length: 158682\r\nlast-modified: Tue, 12 Aug 2025 15:26:50 GMT\r\netag: \"689b5d3a-26bda\"\r\nexpires: Wed, 12 Aug 2026 16:46:18 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap02-sec01-prg1-1\r\nx-77-nzt: EwwBX63NDQH33kG9AAwBuUwKDAH3jQ0AAAwBnJIhJwG3+gIAAA\r\nx-77-nzt-ray: 2a494a154932a52a64c25869a5320b00\r\nx-77-cache: HIT\r\nx-77-age: 12403166\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":158682,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 250","md5":"427c479f2c7c3fcc0e6a98a2df4a3202","sha1":"bc718cc2686608575603d725ff901ace5270dfdb","sha256":"d06fa372e57aec38d9076372b9c7aad45e1c8cb40402ab09d47b17195d426fa8","sha512":"a65e1c66ba246b74a7156a94da27fe8a9494975ec62bd31e65966c946791aaee37b75a1d6346b9a3f62e13047d3d3a7144afe6585c6c6b2c944fb0d4820261f6","ssdeep":"3072:142s2ovwsUH5Mq6MCUo4DPSIPiSdu742s2vsUH5rq6MCUo4XPgITiSYug42s2s:1lscsUZMfMCUo4P47lsysUZrfMCUo45P","tlshash":"71f302bac1dc4b5d70fc64b5e5065ac4846d8d899bfd58a6b22dfc63ef22423c738026","first_seen":"2025-11-21T22:12:55.811122Z","last_seen":"2026-01-07T06:46:51.414752Z","times_seen":73,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p.iople.com/dcba/znWaa3gu","fqdn":"p.iople.com","domain":"iople.com","tld":"com"},"ip":{"addr":"138.199.36.8","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:10.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p.iople.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 12:04:46 GMT","end":"Sun, 29 Mar 2026 12:04:45 GMT"},"fingerprint":{"sha1":"DB:EA:0A:4D:C8:12:84:B8:C7:25:6F:23:25:74:D8:23:70:EB:5E:FE","sha256":"EA:5B:BD:F7:1A:E0:7D:23:54:8D:66:0B:B0:CF:BC:40:BC:EB:AF:75:19:A2:1D:BD:2D:0E:94:AD:5C:63:42:0D"}}},"request":{"raw":"GET /dcba/znWaa3gu HTTP/1.1\r\nHost: p.iople.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 03 Jan 2026 07:16:10 GMT\r\nserver: BunnyCDN-DE1-1048\r\ncdn-pullzone: 4321237\r\ncdn-requestcountrycode: NO\r\ncache-control: no-store\r\npragma: no-cache\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 01/03/2026 07:16:10\r\ncdn-edgestorageid: 723\r\ncdn-requestid: 942d0a942f591d567dfae196948e3602\r\ncdn-cache: BYPASS\r\ncdn-status: 204\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":311,"timings":{"blocked":92,"dns":42,"connect":22,"send":0,"wait":127,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"p.iople.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.pemsrv.com/venor.php","fqdn":"s.pemsrv.com","domain":"pemsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:10.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pemsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:59:06 GMT","end":"Thu, 26 Mar 2026 11:59:05 GMT"},"fingerprint":{"sha1":"8C:23:43:2A:16:0E:E5:14:D7:54:DB:F5:5F:BB:56:E4:32:AF:3B:BA","sha256":"91:45:ED:F2:0E:35:83:14:E7:B4:0D:2D:8E:1A:A6:05:62:4F:B6:6E:83:8A:0C:D3:BF:D4:8A:1C:A7:19:9D:9C"}}},"request":{"raw":"GET /venor.php HTTP/1.1\r\nHost: s.pemsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 07:16:10 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"c4ca4238a0b923820dcc509a6f75849b","sha1":"356a192b7913b04c54574d18c28d46e6395428ab","sha256":"6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b","sha512":"4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a","ssdeep":"","tlshash":"c70000000c000000c00000300000000000000000000000000000000000000000000030","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-04-04T03:27:21.304181Z","times_seen":104749,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwplayer.core.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:12.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.28.0/jwplayer.core.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, immutable\r\nlast-modified: Tue, 22 Aug 2023 18:19:08 GMT\r\netag: \"34de47681547f88d2a251419d61d4a2d\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 03 Jan 2026 07:16:12 GMT\r\nage: 1390167\r\nx-served-by: cache-lga21956-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 76, 6\r\nx-timer: S1767424573.837539,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 40476\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":143406,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65143)","md5":"34de47681547f88d2a251419d61d4a2d","sha1":"e9c03590ad2eb86eeee8b0032f345fbeb32bc4c1","sha256":"5a8861552d8484bac63cb929ef4b4e9f2f76726aef84032c76a75b76da4e7ddc","sha512":"96c8659af1758ddc35ee64cf835f983cddb190d2dff7884b86dd259faab6d824c3330d04f2b056f77989be023b1703c9e0e339ce805c0ec480812d2988c305ea","ssdeep":"3072:B5ozmmILBerJhsy7v22m79sTkvpkHkfeKJyuaU:X7DBerJh/aLLkEfPJn","tlshash":"45e33b753181623651da93da72674201a33a45897406c7acff2cedea1c3e88771f6fb8","first_seen":"2025-10-07T08:25:20.374415Z","last_seen":"2026-02-25T20:14:13.377962Z","times_seen":40,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":42,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/provider.html5.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:12.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.28.0/provider.html5.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, immutable\r\nlast-modified: Tue, 22 Aug 2023 18:19:11 GMT\r\netag: \"e8e42a735322eb7478a82bf49c357638\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 03 Jan 2026 07:16:12 GMT\r\nage: 2133835\r\nx-served-by: cache-lga21981-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 0, 3\r\nx-timer: S1767424573.837428,VS0,VE1\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 14698\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":44252,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (43859)","md5":"e8e42a735322eb7478a82bf49c357638","sha1":"5ef024f2e798985043d7ecb8bf1752cffeb70e55","sha256":"f18d94cc548a0d5e9c36da9f47164f4df4fbd903a9cf0dc8e3a4545622365ce7","sha512":"6c8d8c6fd93db8ab4d8e5dbf25edc0aa244fb9eaff22201931bc467e87061770ca2e85cb7f8db536143b5766020dc7f35b1394853e4c9e0c48bd40bd15247ebd","ssdeep":"768:B2Smc7dAD/v018QK1XCYClPhaiDXIj9ZvDry8wesUukSJLdXhRwTi++2XzPAjrCW:BnG/v01qBBgJOnqhfwXzpIME9Dfm50HJ","tlshash":"4113f89633d4b433c6d296c261750311533e5e5a7848c4acfa299ecb0d5ac8770fabf9","first_seen":"2025-10-07T08:25:20.304883Z","last_seen":"2026-02-25T20:14:13.330081Z","times_seen":40,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":39,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prd.jwpltx.com/v1/jwplayer6/ping.gif?h=1739203938\u0026e=ana\u0026n=4029487567217106\u0026aid=GCCG\u0026emi=9mkwx2zm6m3k\u0026id=Instream\u0026pli=gd10pu14ug45\u0026pv=8.28.0\u0026tv=4.0.5\u0026sa=1767424584043","fqdn":"prd.jwpltx.com","domain":"jwpltx.com","tld":"com"},"ip":{"addr":"108.157.229.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:24.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwpltx.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 12 Aug 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E8:9B:D4:42:32:9F:5E:14:C3:36:B5:09:FC:A2:0B:37:DF:D5:E2:D3","sha256":"D1:64:5C:F3:5A:AF:D7:5F:2E:91:2F:C7:B1:E4:F2:91:3C:5A:1E:B9:C2:E9:10:17:7E:59:CF:EC:E6:A0:80:5D"}}},"request":{"raw":"GET /v1/jwplayer6/ping.gif?h=1739203938\u0026e=ana\u0026n=4029487567217106\u0026aid=GCCG\u0026emi=9mkwx2zm6m3k\u0026id=Instream\u0026pli=gd10pu14ug45\u0026pv=8.28.0\u0026tv=4.0.5\u0026sa=1767424584043 HTTP/1.1\r\nHost: prd.jwpltx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 03 Jan 2026 07:16:24 GMT\r\nserver: nginx\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d9ef81045d0cf909bd3143957da09138.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: tS6QIDzQw6Tc_eobtK_-_ZDxqupQLTq4-KwQ4ADlFWucLkdArUKolg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":442,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":442,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/player/plugins/jump/jump-forward.min.css?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/player/plugins/jump/jump-forward.min.css?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Fri, 29 Sep 2017 00:41:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 03 Jan 2026 17:46:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 5375\r\ncf-cache-status: HIT\r\netag: W/\"59cd96d4-af\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=83hqQr5dmWERxUAKCmKrFKXSpGfKiFFMroHmu1i2mOf4dMZOZOF0sSvSi0sKT9RWMjUhJZVLE84iJdGIW8ljECR3OPU9mHw%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9b80b582caae56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":175,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"667220976a29f608f0e469ebb83a5924","sha1":"0d3f5e813c5c3ca141fade9dc8c54c87f3863f0c","sha256":"b6d80f8d83035b00176ce3943d3654abf58c19e6a1aa8fd93fff842aafd05828","sha512":"bc7a2fac3b2587f4993e9c6066a68f754d7fc0b49a4b4d79b8c6079029fb3364deda8e9e74c279924d479a3cbb2cf5e4310cafa647e181a3f95fb0b6732ba23d","ssdeep":"","tlshash":"74c02290fa94761e2107014013a5618030460543e4185e1f9c0239b0e3d90eb270a283","first_seen":"2023-04-09T17:48:37Z","last_seen":"2026-04-03T15:29:14.549721Z","times_seen":237,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/v1/api.php","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:10.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"POST /v1/api.php HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 415\r\nOrigin: https://hqfap.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":415,"data":"{\"user\":{\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en-US\",\"referer\":\"https://hqfap.com/search?keyword=owk/\",\"consumer\":\"ad-provider\",\"gdpr\":{\"gdpr\":0},\"screen_resolution\":\"1280x1024\",\"window_orientation\":\"landscape\",\"cookies\":[],\"scr_info\":\"YXN5bmN8fDM%3D\"},\"zones\":[{\"custom_targeting\":{},\"id\":5790954,\"extra_params\":{\"first_request\":true,\"zone_type\":2}}]}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 07:16:10 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://hqfap.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Authorization, Content-Type\r\nAccess-Control-Request-Method: POST\r\nSet-Cookie: __uvt=s%3A32%3A%22b1cf423217d533f89a24bd9b113111b5%22%3B; expires=Mon, 03 Jan 2028 07:16:10 GMT; Max-Age=63072000; path=/; domain=magsrv.com; secure; SameSite=None\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":821,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"dd24f982c9d466e8b1996e5d6dfc0363","sha1":"88e48f5ba9a57fb843ff73b871c6ec6996ce6b0f","sha256":"a4e95dfce1c7a5028a9ae09a469d193e57962d4bb6262bcb75b3e517e048aff3","sha512":"4b3d02f0d9c3af3d8c02bfeb809032705c649a167966dd6c2d6aecdab39b7e543a26f8b07fdcd40622b83365607bbe0380bda640177fe253a67e2790d61d56f2","ssdeep":"","tlshash":"c101f17abf40c47ceac05acf4e517468ba46b10bf7c698949494e4b4d1fc7243042b7e","first_seen":"2026-01-03T07:17:14.651709Z","last_seen":"2026-01-03T07:17:14.651709Z","times_seen":1,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":66,"dns":1,"connect":22,"send":0,"wait":83,"receive":1,"ssl":49},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.28.0/jwplayer.controls.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.66.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:14.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.28.0/jwplayer.controls.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, immutable\r\nlast-modified: Tue, 22 Aug 2023 18:19:07 GMT\r\netag: \"1fde4fff33b8be6ebe2530808273fe7b\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 03 Jan 2026 07:16:14 GMT\r\nage: 1388015\r\nx-served-by: cache-lga21946-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 3, 220\r\nx-timer: S1767424574.215690,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 45480\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":193500,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65143)","md5":"1fde4fff33b8be6ebe2530808273fe7b","sha1":"0810766277301777c5fd5fc031040fc5cc315df5","sha256":"ef7d843e4bd08aceacb89d07e82add18b04e2b2a1b4ddb0784c1573374ec9448","sha512":"7aea8e374962935b5a74d86e3d718b2ce0825117c0a1fd3f07294345186e9f28eea3480f04bd190ad4dfed9cccf84c4d07440770ee4f2ecdeb0d185f9055d28a","ssdeep":"1536:BCUKr35YneqmSoQQD/5YIuhhAuUkJrPyoyjQ7ru+7AHYzwC0suZrqlHdDPjmOoRR:B+r35Yer5Yk7REBvB5sYgwmf8q","tlshash":"b9140922614256349ae6c1daa7504b04f73a8141f652deecfd7dedcc849e9ca30fa7b0","first_seen":"2025-10-07T08:25:20.241872Z","last_seen":"2026-02-25T20:14:13.37576Z","times_seen":40,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prd.jwpltx.com/v1/jwplayer6/ping.gif?h=2078487717\u0026e=ana\u0026n=4498142371632143\u0026aid=GCCG\u0026emi=17ht6uh1gjz4\u0026id=Instream\u0026pli=hn2x5onm0690\u0026pv=8.28.0\u0026tv=4.0.5\u0026sa=1767424583726","fqdn":"prd.jwpltx.com","domain":"jwpltx.com","tld":"com"},"ip":{"addr":"108.157.229.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hqfap.com/upload/player/embed.html","date":"2026-01-03T07:16:23.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwpltx.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 12 Aug 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E8:9B:D4:42:32:9F:5E:14:C3:36:B5:09:FC:A2:0B:37:DF:D5:E2:D3","sha256":"D1:64:5C:F3:5A:AF:D7:5F:2E:91:2F:C7:B1:E4:F2:91:3C:5A:1E:B9:C2:E9:10:17:7E:59:CF:EC:E6:A0:80:5D"}}},"request":{"raw":"GET /v1/jwplayer6/ping.gif?h=2078487717\u0026e=ana\u0026n=4498142371632143\u0026aid=GCCG\u0026emi=17ht6uh1gjz4\u0026id=Instream\u0026pli=hn2x5onm0690\u0026pv=8.28.0\u0026tv=4.0.5\u0026sa=1767424583726 HTTP/1.1\r\nHost: prd.jwpltx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 03 Jan 2026 07:16:23 GMT\r\nserver: nginx\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d9ef81045d0cf909bd3143957da09138.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: DVIKDMhkLkUY5F0INGVwDIAtJxrf7hNcQVNUhKF1Tu8hjWmonJUcSA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hqfap.com/themes/lite/css/swiper-bundle.min.css?version=3.1.64","fqdn":"hqfap.com","domain":"hqfap.com","tld":"com"},"ip":{"addr":"172.67.157.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hqfap.com/search?keyword=owk/","date":"2026-01-03T07:16:08.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hqfap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 11:16:41 GMT","end":"Wed, 25 Mar 2026 12:15:14 GMT"},"fingerprint":{"sha1":"47:85:9E:AE:13:A7:A4:2A:8A:1C:3F:45:78:95:DC:26:C3:28:2C:4B","sha256":"4D:52:8D:85:C6:DB:FC:96:38:69:CE:A2:BC:BF:F1:71:A3:52:4E:89:6B:92:BC:09:D9:59:75:C6:82:59:83:D6"}}},"request":{"raw":"GET /themes/lite/css/swiper-bundle.min.css?version=3.1.64 HTTP/1.1\r\nHost: hqfap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hqfap.com/search?keyword=owk/\r\nCookie: PHPSESSID=8favco15l2rpnmim0d6tk2hpvo; _uads=a%3A2%3A%7Bs%3A4%3A%26quot%3Bdate%26quot%3B%3Bi%3A1767510968%3Bs%3A5%3A%26quot%3Buaid_%26quot%3B%3Ba%3A0%3A%7B%7D%7D; mode=night\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 03 Jan 2026 07:16:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 29 Aug 2022 18:19:02 GMT\r\nvary: Accept-Encoding\r\netag: \"630d0316-405e\"\r\nexpires: Sat, 03 Jan 2026 17:46:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 5375\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SIsnWK%2B%2FntA7nS8N16ygN%2F9XDYbcN4TLQg4890oEK1Rym0qawLTFuqKOsIlB75zSLjN%2FWkM%2BMRAf%2FhD%2Bk02havDf6LGgKok%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b5830abc56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16478,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16213), with CRLF line terminators","md5":"295a893c7499a9f23b4179bfed895c4b","sha1":"28d4689d54c61bde88d465910a4926281062bafe","sha256":"4e2352310338eeae08cb490fcbb3da33aff603834112346bd81f898aab18d2d9","sha512":"6972905113131daae4e79597648ea10f324c7b3f4c9d79d08c13a030c98a39c17b2a00423d4985b41e23e3c5db67715bdbc59384db07b95ce25a9fb0f5f7c00a","ssdeep":"192:8CC1mUJbiKneTT4bHZ+SKbnxup/a2AMQfHff71eesedOJ9A5Pz+c3At2/6:82UbeTMbHZ+Vnh2AVfHfA4XYz","tlshash":"097234681340282753274f374b71cbb9ddb444d24b93896ea1c0ee88d7b6cb9136f6e9","first_seen":"2023-05-07T18:40:35Z","last_seen":"2026-04-03T15:29:14.445638Z","times_seen":196,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}