{"report_id":"87704343-a9ce-450e-9587-1bbcd394de16","version":6,"status":"done","tags":[],"date":"2026-04-04T20:25:14Z","url":{"schema":"http","addr":"surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"104.21.92.107","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"title":"Darkstalkers - [Fred Perry] - Stalkers Afterdark xxx | SureFap","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"104.21.92.107","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-09T20:25:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"a.labadena.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"cdn.tapioni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"zatnoh.com","ip":{"addr":"104.21.30.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-10-04","domain_rank":527828,"first_seen":"2022-10-04T14:17:24Z","last_seen":"2026-04-04T05:55:16.743019Z","alert_count":0,"request_count":1,"received_data":640,"sent_data":469,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-29T22:16:18.281815Z","alert_count":0,"request_count":1,"received_data":13082,"sent_data":546,"comment":"","tags":null,"fingerprints":null},{"fqdn":"surefap.org","ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-06-06","domain_rank":0,"first_seen":"2017-07-20T12:23:38Z","last_seen":"2026-04-04T05:55:16.972135Z","alert_count":96,"request_count":32,"received_data":1636065,"sent_data":18319,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"SWFObject","description":"SWFObject is an open-source JavaScript library used to embed Adobe Flash content onto web pages.","website":"https://github.com/swfobject/swfobject","common_platform_enumeration":"","icon":"SWFObject.png","categories":["Miscellaneous"]},{"name":"jQuery Migrate:1.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Liveinternet","description":"","website":"https://liveinternet.ru/rating/","common_platform_enumeration":"","icon":"Liveinternet.png","categories":["Analytics"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]},{"fqdn":"a.labadena.com","ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"domain_registered":"2020-01-21","domain_rank":266368,"first_seen":"2020-05-24T00:28:49Z","last_seen":"2026-04-04T14:38:20.592844Z","alert_count":8,"request_count":8,"received_data":6214,"sent_data":5108,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.tapioni.com","ip":{"addr":"172.66.163.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-05-27","domain_rank":177570,"first_seen":"2021-07-01T10:46:55Z","last_seen":"2026-04-03T12:22:28.526054Z","alert_count":6,"request_count":6,"received_data":485558,"sent_data":2461,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-03-29T22:32:58.732232Z","alert_count":0,"request_count":1,"received_data":18920,"sent_data":449,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"4tymode.win","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-15","domain_rank":0,"first_seen":"2019-08-16T10:42:25Z","last_seen":"2026-04-04T05:55:16.658163Z","alert_count":0,"request_count":8,"received_data":493658,"sent_data":3792,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-29T22:20:07.848058Z","alert_count":0,"request_count":1,"received_data":2483,"sent_data":436,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"informer.yandex.ru","ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"1997-09-23","domain_rank":427730,"first_seen":"2015-07-19T08:35:06Z","last_seen":"2026-04-03T23:52:04.087028Z","alert_count":0,"request_count":1,"received_data":2140,"sent_data":475,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"citadelpathstatue.com","ip":{"addr":"94.242.247.27","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2024-05-17","domain_rank":62367,"first_seen":"2024-05-21T15:29:28Z","last_seen":"2026-03-24T01:25:37.411492Z","alert_count":0,"request_count":1,"received_data":156,"sent_data":440,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"surefap.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7121994eec5320fbe6586463bf9651c2","sha1":"90532aff6d4121954254cdf04994d834f7ec169b","sha256":"48eb8b500ae6a38617b5738d2b3faec481922a7782246e31d2755c034a45cd5d","sha512":"b74a2f03c64e883b9a34de43690429327dfb4aa230a7a6afca8150a16e3d84e98461245ff264c26368d9904562cc34fe219f71f951d364fa5c68c039b76776cd","ssdeep":"192:kZrk/GNyd31svs7wkX8KzJcqSDdAcHX4YE5NLR:srhNyNO0kkMKzFSDdAcIYwLR","tlshash":"2e22c79db29a70625fba35f8617fc11b717a94fc2118d9e4a08c8ed1387dc9d403ab39","size":10056,"data":"","first_seen":"2023-03-07T01:02:37Z","last_seen":"2026-04-05T08:04:36.327291Z","times_seen":42750,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8292b9085e64ebc2da10dd35661fb30e","sha1":"a492573c9fedbe00ce25d0d0165b6b0f4fbd1464","sha256":"b05599e565b2191d450b93155e89352dea81efefd793969726f159581a2c912d","sha512":"ea23b85d68ed90410d22b152f73dc24e46dd91a824c3a1eb11a2eacde37e3e8cd161fc60f4cff93600e8cd17704a76c4b6f1d926f170b4903c18b3ef52829c64","ssdeep":"","tlshash":"d32112d1fbdd50dfd164b0718c1ea6a8702c91303411c872be9499ed515307ed22c6a6","size":1148,"data":"","first_seen":"2026-04-04T20:25:32.631069Z","last_seen":"2026-04-04T20:25:32.631069Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"14ff0a5861713c477bcbb0a8424bef30","sha1":"146d6580ab1063c1685ea6a7bf07a7ebbaa55a53","sha256":"0e791aae33b4c0289124a56fbeb9a4dbcb54b8d4065def6007bad677f452202a","sha512":"1e1a1720ccd0de4789389f2a81136934878fd2e7eb7e1fd73045acb5e6818fa40032683ff6f2246e3f71d919b0d4c3d1358271d1cadbf20f5d3f451f7270b44d","ssdeep":"","tlshash":"76f0a3953cec1435c3b6025957fb611d7416653b1c0ebd25f90d84412f6da7d147b54c","size":455,"data":"","first_seen":"2023-03-07T01:11:59Z","last_seen":"2026-04-04T20:25:32.63233Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"713a7cbd8ceac021316fa41c27a456c6","sha1":"3dd7e6ecebc1f5616a2789b7f76d0448d21e6ee4","sha256":"65cdcb644632e513797835b2d454f2ba074a3eb7c4adf373d6b3c819694d3abe","sha512":"455fa83b181025c7a1c18ce45498bb94d573edc8412915df9f0edaa67e0b3235334050c195dc1ed97f4d495af44cc89fffb28ebde74c41ecbbf3d97dc77aebd8","ssdeep":"","tlshash":"a9f0c6f18e1764dbd0459876e400f5540c27f0f17e21b7ca208d3a3d70c6a16b759357","size":542,"data":"","first_seen":"2023-04-07T07:42:03Z","last_seen":"2026-04-04T20:25:32.633188Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"99e49779edbce5eb7c11ac718ec85f78","sha1":"33eec0444673fb6e896647a5fe860d68271188f7","sha256":"bac76b7aa85fe14a66ec3b68d25138f48902f5596f80976ef13b72c350d93cb9","sha512":"fd82507bdff502fccbd4629e30cc3426f5a4a4a9324a5e9e9e033739dd1df1c0c08f2319a3eaad9c914a51f1738bda8d62ae4d311877b8029b8a868c3d89ce77","ssdeep":"","tlshash":"e9f0dd4b19a2243413e550b9963ffa0cb36f68070980e9205de8c18d7c64fab8d3e6cc","size":627,"data":"","first_seen":"2023-03-07T01:11:59Z","last_seen":"2026-04-04T20:25:32.63409Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"eb0b58ad3e5ac1f5f7d7b421cc34991d","sha1":"bca79e081e781ff98fad9a30f4ba39548ef5cca5","sha256":"eac51e6e94f069385e82bffe45e4eff632037ab191bbc0820cf7921eb08b83bc","sha512":"23813ec23a345fb7436f87b91d0e4e896dcd7c65367112bb97cfc58eed0db5eca30f4afc31a4dc6b1f4ec83abcdb3fb5217a6bdadfdfd93df824fe935e44e796","ssdeep":"","tlshash":"d3a002b779c2203c4a2679a86319754ef96f095487e0285857026630a0713e76609049","size":63,"data":"","first_seen":"2023-03-07T01:11:59Z","last_seen":"2026-04-04T20:25:32.634686Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-05T07:46:15.836565Z","times_seen":771904,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a44ca5c21ce00aa90b41d07b7433f328","sha1":"27dfc5b7884464bef26ab64c819be03d91b64a94","sha256":"ca177a3f08e85984c19e7761a4b5244e7e44b0d1e697f37dc1effffe3498b021","sha512":"047bb675d584aafc9ab1f2e5c7e7caca089d572cf15afab003ec1f0c9adc16aacc87e835daaaf455352e562c0c5ece77616cfae2fe519b39ae8cfd0379b08bad","ssdeep":"","tlshash":"d7d02b09f5c0015211e732262e2604cd6d5781c13c04a47b456d09fe2ff0c74981ff4c","size":261,"data":"","first_seen":"2023-03-07T01:11:59Z","last_seen":"2026-04-04T20:25:32.637429Z","times_seen":836,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"068b34d1dda886c2a1cc02b959a6ea19","sha1":"eed3fe69ebd956db46a031671f01d21778add329","sha256":"353425478de473a83cc824e9c7ea989d31718bede3d70cfd0c39989466680cc3","sha512":"c5969b30a81666487a864453ace8b51850dcb9ecb34faa0589beb2b8475dfa56e38645fa51e59b50c317e60ea44747d2e3c90dabcac774cf83e3450fff835857","ssdeep":"","tlshash":"ace02b46aa6f1626d7c3167701369785e46d02a51c0458267c0c58c66791e06ed3dbcc","size":413,"data":"","first_seen":"2023-03-07T01:11:59Z","last_seen":"2026-04-04T20:25:32.638219Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7e5f642980d9f7c3c8f507eed95b6b1d","sha1":"0a758ad38d8c4b86ab53cb0d2a532b18b14ecbc8","sha256":"fa15b4c944c38edcc758133ddc2f5cec546de14e1a4796f72ede50bcde0436b4","sha512":"630a3f778c32a50c17973d352ba7c690e43a7b8c81e8499e9269e6bfeef9d9b3b8003582af63c1498d6c493ce81a9d97068415db4a92fbd2814611250df1faf2","ssdeep":"","tlshash":"85e0614e347854e555a3b1f733b3450c7412270c9554faa349ad854c2410551449b1dc","size":397,"data":"","first_seen":"2023-03-07T01:11:59Z","last_seen":"2026-04-04T20:25:32.639068Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/wp-content/themes/FinanceDesk/lib/js/superfish.js?ver=5.0.16","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c8070ba6a911bae7047f29e383da334","sha1":"b7b4fdd4a0aa451b888067ef4b69095cfb40dbf2","sha256":"3e9fb74061133f9dc6c809fb777bdcdc8e02b6812ad5bf39aad5f6c69f1b96dd","sha512":"c5d770651a616d9f6ebfc7543f33aab40422dc65eae0c6cdeac741f2f8c26f597ffd8b514145901bd5b29df8d758270b7f0be8187b169b565f08c9451fc7e5d3","ssdeep":"","tlshash":"427173ccf38f7597aa77227e402f1185ab3e8a72e8884c51bc3658585ce895d0792c6c","size":3714,"data":"","first_seen":"2023-03-07T01:03:00Z","last_seen":"2026-04-05T07:31:24.246051Z","times_seen":1121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/wp-content/themes/FinanceDesk/lib/js/jquery.mobilemenu.js?ver=5.0.16","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1679a6e1ac2c7d4a3833d0e0f6817aa","sha1":"6cfedc0f44d365b5b6ac3ac5f7b2f3823affdad1","sha256":"213e63893ec0225742fadfa45cc6a9e8531761a145cd94c989f71082f7d55938","sha512":"c72b361a11b7fccf8c0d5ba22f56b4d9e69b4c5078284dddc6a9bd25ade32078e715c4363eebf43e1f75eeb5b366d679724ed967ca6852e7bc8ca8b2aa77a1bb","ssdeep":"","tlshash":"ea41758cf12e14adc5eb2977962c26c07b7e41659622a42270bc09fc0ed449d53f5fb5","size":1933,"data":"","first_seen":"2023-03-07T01:11:59Z","last_seen":"2026-04-04T20:25:32.59972Z","times_seen":209,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/adgpt.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"172.66.163.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f8ebd47427e9331c335f2b8d456ad84","sha1":"c55ea0bf133f2da48e13b0732f76dce3f310f839","sha256":"5898cc6b4598ed3053f70a3b8c882fa5551272e91b1a26e9cdd7f43be6fbc17c","sha512":"53f635ac4d4a6df08d09da6090e7ca1c937769339266242730b9afa3b1efa91e2111f49e734a96cce70ffe62b6941aa9ab228be3462d217c7e81430399d366d7","ssdeep":"","tlshash":"1c3103eb31a1e9b1078b614c113f1506f5acb4a0a3ade8d5cba5c9647d381484062aee","size":1846,"data":"","first_seen":"2026-03-25T10:27:10.612662Z","last_seen":"2026-04-05T02:43:00.910259Z","times_seen":104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.labadena.com/api/spots/440577?kw=Surefap%2CSurefap.org%2Cfree%2Cpic%2Cporn%2Ctoon%2Cblowjob%2Cboobs%2Cfingering%2Cfuck%2Cnude%2Cpaizuri%2Cporno%2Cpussy%20licking\u0026i=1\u0026url=https%3A%2F%2Fsurefap.org%2Fdarkstalkers%2Fdarkstalkers-fred-perry-stalkers-afterdark%2F\u0026sid=09b26a72-34b1-46c9-81ad-cba4d2748bc4","fqdn":"a.labadena.com","domain":"labadena.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bd0ddafa785ccd0abf3a43231f808c2","sha1":"9d730b9fc0b3db0ab070ac4c4d6f067347739b90","sha256":"031b22e90b2437d69b07f9bf68b89f815f2bd35cde9834f5a5a53a5b884e90b6","sha512":"96ffbb00893f3fb0cff8f9dba477ba6bbcaca1cc8e889936c2d4d4d8cea5d19e7f670c1cafeaf6df34b0bbc27b357acec9f4ac1b1587f173de6238c083c43551","ssdeep":"","tlshash":"af51868486fc6216b61b10b0dd7acf9f651ea240d3154075eeb726aac3cd64c067128a","size":2644,"data":"","first_seen":"2026-04-04T20:25:32.567782Z","last_seen":"2026-04-04T20:25:32.567782Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/wp-includes/js/hoverIntent.min.js?ver=1.8.1","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3dc5811cb7bb6e67b9054c8c39f9f4c9","sha1":"ced11144eb84a14db2b3b0ab92998128c5e88204","sha256":"124f0860b7201dc2fa46889b30ac0e4269e84ac2e71c33dc025ed14ed15bd8f0","sha512":"c7e73c3d0735a6ed46997d76bd081592db532b8ebdbfe0d76bb6aa85202e6a212932fffae35dc2639da29fcc76075849318d33196267119fa2f73658d1f8cee8","ssdeep":"","tlshash":"7411ab8e1b86a88a2383e124e53b38bd7f731e13ec8105567373648e1fdce745302a29","size":1087,"data":"","first_seen":"2023-03-07T01:10:31Z","last_seen":"2026-04-04T20:25:32.609313Z","times_seen":1065,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/wp-includes/js/swfobject.js?ver=2.2-20120417","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffdba2cff497d701684657e329871f5","sha1":"693465e9d9376fd4d2fcd45ffc24f735e1159312","sha256":"5fc71212d5f80194f946cc9239d030aae8b51879ec22bd6f9a793c49e543d1c0","sha512":"5da070d4040661bd167ef22c6f81c7dc6a9ed79f9cc6c662750b9eb3b1f2048e8d782536996ea7c54e961cd514313314ebfa724409cd2f0440d884288c9ecffa","ssdeep":"192:dEBsWGAZvwGxP1hNWwI9V0YOOsFbkRHeZtyIVyX8c727LMoOyXoy7NgvZ4xsnyQ/:dAsWGAZvwGxP1hNWwI9V0YO1NkRHezyV","tlshash":"1122a6aab6483336abc521e144bf894671b0f532558cc1b0c572e4b02e7cca9a5b7f7d","size":10231,"data":"","first_seen":"2023-03-07T01:11:59Z","last_seen":"2026-04-04T20:25:32.609976Z","times_seen":945,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/ip-push.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"172.66.163.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a5ac3d4cb907610322251a453733998","sha1":"41f4e944d02782bd5bac4f15e23660834a98fe0a","sha256":"b931f217d71a13a0ea0a5f399ab7fa87d9c82a7b4d02af1ac55ef8fca163dca6","sha512":"702f7693fb40b41b2664f86720a1d4b932e702b57a42ff2751299e0ddbb6c9220ad99af6e0ee06d4a0eb9bc71ea8db0efce84c9df8e18bc62ac26f13ec3d4a16","ssdeep":"1536:gmoiFa+c41ri/y3ZHeUrfy9mT20dyBU7KhnZgek3nkk2QGFFt7JvgZS6/ae:voiFa+c4+y3ZHezCyBpk","tlshash":"77d3728cbac1b56107a37074023f540af2b73a54748bc8c0f66ad5d06ebe94f6167e6d","size":139234,"data":"","first_seen":"2026-03-26T18:38:07.857164Z","last_seen":"2026-04-04T20:25:32.577512Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.labadena.com/api/users/23307?host=surefap.org\u0026ev=229\u0026wh=1024\u0026ww=1280\u0026uuid=\u0026url=https%3A%2F%2Fsurefap.org%2Fdarkstalkers%2Fdarkstalkers-fred-perry-stalkers-afterdark%2F\u0026sid=09b26a72-34b1-46c9-81ad-cba4d2748bc4\u0026i=1\u0026kw=Surefap%2CSurefap.org%2Cfree%2Cpic%2Cporn%2Ctoon%2Cblowjob%2Cboobs%2Cfingering%2Cfuck%2Cnude%2Cpaizuri%2Cporno%2Cpussy%20licking\u0026url=https%3A%2F%2Fsurefap.org%2Fdarkstalkers%2Fdarkstalkers-fred-perry-stalkers-afterdark%2F","fqdn":"a.labadena.com","domain":"labadena.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"fcdb1b32deb29c351541d8b4fa471c02","sha1":"b4c3f3087cfd4c44f0ae777ba71b7593a714db18","sha256":"6ea95fcc26d2ef84c0bed31e2082277634d6fbe57ddfe04ffebcde290112b87c","sha512":"090a279998cd23af43b4ff6d492bb11c3fe7640b14f164b2e5067fcc04973aae6b3dc2f8c094f78bd101811d94b8e7c69f56008bfacb150465ffb35f4a149b2c","ssdeep":"","tlshash":"4d012d88879ca8f65b8c40b3fd3e0eb6ad8c49352704801bfb24071e14ce18203e41ab","size":688,"data":"","first_seen":"2026-04-04T20:25:32.614223Z","last_seen":"2026-04-04T20:25:32.614223Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/wp-includes/js/comment-reply.min.js?ver=5.0.16","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ef21a469fc37e845d6303fcfea70897","sha1":"a86ec94ec7bee9227bcdf8d6374cabe82ae43e49","sha256":"6b2e2d56e7b0e80d919bc65dd94f8cd95e57ad9298fc4fecc005301ea8339c9f","sha512":"3cb53bb9f6d50c5c01b499619c15947c7b529b52d847afd40b891908cb08d3c1b33cbe0e229b617accda88258b335b240d09e4194cf270050b817ffedec23dc0","ssdeep":"","tlshash":"21111fb431c96c726382d12c17be872a74b1131c7d0942a5c02a64b57264ed75116fed","size":1076,"data":"","first_seen":"2023-03-07T01:03:31Z","last_seen":"2026-04-05T02:48:17.217408Z","times_seen":2284,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/wp-includes/js/wp-embed.min.js?ver=5.0.16","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"570ae0f3c201604926ea599d3d1f6c04","sha1":"2c29243a73660964d4712b969d2a15e27777bc14","sha256":"5138d39633dc69fcd0ed7f33a5e38dc339123f682fa7f5242066879c2bbc8c9b","sha512":"44583f156e95aa16d20ed8db8421001d9b7257b56b4fff1e0378760406b4d6eb2b1315d28ad4f3f489a7733814b2fb2dddf8f28004daaeee8d9bf4ea22a2742e","ssdeep":"","tlshash":"c021661a3228943758db51d3bc4535cad2d11fed6c0115d24e78cc45e6e4f935d69fe0","size":1391,"data":"","first_seen":"2023-03-07T01:02:19Z","last_seen":"2026-04-04T20:25:32.549586Z","times_seen":961,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/v2-banner.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"172.66.163.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"df74c0f70f006110b7ad6576fb94359c","sha1":"0ddc437e20a606eeabdff2cd693e17e36f91926f","sha256":"a64966d37df2395f7a93499bfee1db805326a69e569756a60fa2bd5818704cba","sha512":"3a7e4c548a9a893627975bc04a13f52aa02f045f226a6249c973cc863c292e23b6e69c83c341cea4dc2ac09f4d40ff00733a99b0426220d18b9e81282f6d60df","ssdeep":"768:qqXHdIMNXNiLndxvWlIRsIXAEXnd0iHzloVdxfpQyWiE/6Ua7HO7G+HN8e6bA+OM:q67cLdeMWiT4Jzb+dfA","tlshash":"2013d68d72a6b07583e654b9403f5206f3367558354ac0acf66decd26c3888a9237f7c","size":44803,"data":"","first_seen":"2026-03-23T15:52:36.562671Z","last_seen":"2026-04-04T20:25:32.583975Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/wp-includes/js/jquery/jquery.js?ver=1.12.4","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5ba5044fccc0297be7b262ce669a7c","sha1":"f137ff98ae379e35b0702967d3b6866a0a40e3be","sha256":"cf34e1b87bbfd9d9b185dec994924a496e279d8dc9387ad8d35bc0110134c4d3","sha512":"bab5eb2c4acc0cb1c65e8dedbd6b422480fc20076d6c1b12879cbf1e5b352969e1553a0e878401c2f2b9507b64b02e8abd4c6d1ab7e3d2c06272a491ee712e8a","ssdeep":"1536:HYE1fGBiByJsbfXXeRJ/shgWCeLLccJdZVHk04ssx+/mvaSIFSet43tpXJIGVypf:fsAg0psxTva/FSeKy2bDD5a98HrU","tlshash":"2493e8d9b2d6715287b734a850bf410bb17a98dab80c4c60f058d8e47e78e9d607bf2d","size":96874,"data":"","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-04-05T06:20:04.569879Z","times_seen":8949,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/asg_embed.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"172.66.163.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"89c80bd2be315a5eb9f5970ec947467e","sha1":"fd9270f7ec0a8e1befe03f6db6cb8f4937822841","sha256":"87d01c8bef76418d6b404204277b264234631d383678b08a401d4ea563b99988","sha512":"85f719a41236f2b2f453da499d6e9bd1144254465692199f9591006e4f30d1359355e122dbff802ba35968c3e4a987ab2a154671051ab2ccfd81027c27c4baf9","ssdeep":"3072:zWwOkr1lw8QuIeaEmgBS03lXIWpzXYP2AhMQq:is1l1QzeygYGXD01A","tlshash":"3634b88db5c1b4a187a36174063f281af3773a45744ec480b62ec5d16ebea0e6d27e7c","size":250257,"data":"","first_seen":"2026-03-25T10:27:10.685314Z","last_seen":"2026-04-05T02:43:00.861422Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e9fb2981b0734e4f663b3910c8ef0a45","sha1":"ac9e685178963a680aae25ee5ba3434c8b210397","sha256":"843f9e411838fa5a6d1810784568fd50b0777afabe34800db93c1a46b6e42bd6","sha512":"3bf221983a2a49ab79a73ddfb8f8b76fb941cfad12de38b0feccb4a28cec17b3f16b01b619c0446e8631b28e5792f6da8db0aff75e2c215c75d20004cd259de7","ssdeep":"","tlshash":"8e700008002002ab0880003000a0a0008803020cc02008800e082288200200002ac880","size":19,"data":"","first_seen":"2023-03-07T01:11:59Z","last_seen":"2026-04-04T20:25:32.641149Z","times_seen":281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0c41a979ffe4fedceebb6c2abce3649f","sha1":"c9296c284ca6e8c58abc89ed11257e4870daa662","sha256":"e04a2273a1be36bedd15068aa88752d912851d59ecc68072a73f027a5a8c8785","sha512":"4cd5bf57a7ee2b4761dd5fa095f0945b1c464af9b01eb4bce3192d983d61ddadf40e6321e7aa208faf9e34cb98bc4fc0f9dbccee767d0e1a88682daa2c2aff5a","ssdeep":"","tlshash":"b7f02e24115dc85f823727947c0d31865fee99b61e80db4d3e5c88974a57179a271f0f","size":494,"data":"","first_seen":"2025-09-24T10:44:21.244633Z","last_seen":"2026-04-04T20:25:32.642408Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/sandbox%20eval%20code","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-05T07:46:15.833994Z","times_seen":773461,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/wp-content/plugins/wp-postratings/postratings-js.js?ver=1.82","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"830dae7fb9dfd5ac1879a83dd028083d","sha1":"6be6afca684e3305000879ad71f264f0c6549bd1","sha256":"c42425f18923921089911e70f39c6dd462794df2e42ac0596abc3884da6471fc","sha512":"a9bab7675e178d288189b7f377b332838a6ea8455d75b445e304953cedf269268c0458dd82658fe36f523ea6c7f212167d32dac3cebece0e0400fb5a0f2666ed","ssdeep":"","tlshash":"f2614c78206c66cf8b3630f2e42559216a7d6cb5ba40ce4c965e08d71b5b1683329e1f","size":3329,"data":"","first_seen":"2023-03-07T01:06:47Z","last_seen":"2026-04-04T20:25:32.603436Z","times_seen":1950,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/v2-banner.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"172.66.163.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"df74c0f70f006110b7ad6576fb94359c","sha1":"0ddc437e20a606eeabdff2cd693e17e36f91926f","sha256":"a64966d37df2395f7a93499bfee1db805326a69e569756a60fa2bd5818704cba","sha512":"3a7e4c548a9a893627975bc04a13f52aa02f045f226a6249c973cc863c292e23b6e69c83c341cea4dc2ac09f4d40ff00733a99b0426220d18b9e81282f6d60df","ssdeep":"768:qqXHdIMNXNiLndxvWlIRsIXAEXnd0iHzloVdxfpQyWiE/6Ua7HO7G+HN8e6bA+OM:q67cLdeMWiT4Jzb+dfA","tlshash":"2013d68d72a6b07583e654b9403f5206f3367558354ac0acf66decd26c3888a9237f7c","size":44803,"data":"","first_seen":"2026-03-23T15:52:36.562671Z","last_seen":"2026-04-04T20:25:32.583975Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"db412344b032ca0a1e062bf932fc544d","sha1":"825164631acdfe2db3cc675bfa767c3c0b39c699","sha256":"26f5b379d52beaf488ff2cd439e5a749348d9a9b7b98b9adfb751d0a68241e72","sha512":"ec23bc0abb7d009eae0ff28e13c1dc5764b568f60362ecdc9173c861bece50d3b747be72d48e040bd48118f7dd4e0cbf0b67c4874187f357e0245ab659ff7766","ssdeep":"","tlshash":"eb1148b9b616407590b3254f95bde40847434607bc69bc0af8fc829b0fae10dd0e7e58","size":1062,"data":"","first_seen":"2023-03-07T01:11:59Z","last_seen":"2026-04-04T20:25:32.644687Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/postscribe/2.0.8/postscribe.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"12dd498bf90c536803c2aad708b66c2b","sha1":"5f9363d39a405d1c94328cf2303ff4a05c0ad163","sha256":"c4e20f53f5ef0ed44b783437aa3f4638a9a56cc4aa29ae83ed9212eb2807052a","sha512":"ec593a501ebf74c092e564a1aaf0b477d3da6813c9a88f29d0d2a0db8143bdf19718ba4e6b13f64295b077ca5cb9c13460c30f9f2f35982a82597b22f79ffdd1","ssdeep":"192:l3GySZoj5oOg8pu564aEzn5nVMnyk3sBakk3cx7x0IlQV0Hf1b5SwU+ahpfex/W9:lWytjU64auV0ISjyW5RAe","tlshash":"6f82b38cb295f0b553d710b5403f910fe2366928654ec4d8f288d5ea2c7899d663bf3d","size":17908,"data":"","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-04-05T06:55:19.67229Z","times_seen":7027,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"1471f3d1f3030f8b50d0b67b85d11214","sha1":"606c7cfb9066947d56c5187972bebdb344488991","sha256":"fe229276ed79e456d22c223a6f4ed35e55cb969c3d72abc8d441d51b6f539524","sha512":"f6ce529be923f0e70880cb58d5d9347a29ab92cad5ff3ca6c2058e78adbccd9a1c8295dc9c545dba7ec2662f7cc087c5ba1b6fc0197f6154273aab8488671302","ssdeep":"","tlshash":"41e0263393669c80b28192dff1b07a60083bb1848be2968e1cdd4566502fa5ec5b4ea8","size":348,"data":"","first_seen":"2026-04-04T20:25:32.645339Z","last_seen":"2026-04-04T20:25:32.645339Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"4tymode.win/images/2020/11/16/7b62246f2514466b84abfca1f35390ed.md.jpg","fqdn":"4tymode.win","domain":"4tymode.win","tld":"win"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:52.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4tymode.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 07:52:15 GMT","end":"Thu, 14 May 2026 08:49:22 GMT"},"fingerprint":{"sha1":"7E:22:CD:F7:8D:50:F1:9E:0C:72:03:71:E9:D7:77:BF:9F:3E:CD:01","sha256":"22:CF:06:73:9C:45:57:07:9E:F3:6D:90:47:09:CC:4D:63:CB:C3:29:5E:33:27:93:9D:72:BA:5D:9B:3B:CE:76"}}},"request":{"raw":"GET /images/2020/11/16/7b62246f2514466b84abfca1f35390ed.md.jpg HTTP/1.1\r\nHost: 4tymode.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 20:24:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 58248\r\nserver: cloudflare\r\nlast-modified: Mon, 16 Nov 2020 21:09:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"5fb2ea8c-e388\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=McbwlHsnodNkGSa50WyhzTp28z93KCp3ztrgrKUu9vYdG5aIaX%2BIRXuEHHa2dZ85hdHdkv0W6AOZVYK0IyeoN%2B1bHd3tbH8LfTpWDVhoJAWRuW1hyjqf1qNGQFndEw%3D%3D\"}]}\r\ncf-ray: 9e7309ff4804712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58248,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 300x466, components 3","md5":"b5aa10769138f7f74e387038c09db377","sha1":"c1b911747fbf0ef35c2c6ed292d8460f71bfa341","sha256":"dc785839236d8f61acfd5bc0ad112a43367c4259b909547e7d81294f36b9bdf6","sha512":"59d33fc23b7fb9dbb5782719dde0be29ac2628453d820865ca76bceff10454734de4909871c5985de16d942028cba6ed5b000cfd624ee651254d60cef8f4fe2f","ssdeep":"1536:URx34/hxNqSem6ArxBm1Zb71ChYWo0XydJ0fC9p0l:exI/hLum6SWZb71Ch5o0XwJlp0l","tlshash":"35430190586010efe5529a195ca1be6f93ccdd2e48d2b3b9e0d61fb733d08a390690ad","first_seen":"2026-04-04T20:25:32.520077Z","last_seen":"2026-04-04T20:25:32.520077Z","times_seen":1,"resource_available":false,"data":null}},"time_used":558,"timings":{"blocked":124,"dns":4,"connect":2,"send":0,"wait":148,"receive":131,"ssl":131},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Oswald","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:52.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:41 GMT","end":"Mon, 08 Jun 2026 08:38:40 GMT"},"fingerprint":{"sha1":"03:81:A0:0E:E1:9B:80:A3:BC:CD:F9:25:A5:7B:8A:43:07:22:C6:00","sha256":"73:8D:9A:B1:F0:C3:6E:8F:EE:C0:2F:99:C8:89:24:16:9A:DB:D1:9C:27:5D:8A:7A:A8:2B:0E:10:42:28:53:7F"}}},"request":{"raw":"GET /css?family=Oswald HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 04 Apr 2026 20:24:52 GMT\r\ndate: Sat, 04 Apr 2026 20:24:52 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1797,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"6935270cbe7bf7b3212d51f3582a2af4","sha1":"09b01e6ca7abe871056181a763f1cf6df183cafd","sha256":"9bd52388b5ab746935d9be5f8bb33a5da893e97a3520c4a567153ad8af77233b","sha512":"befad05ae005d97ee75fc1864cd2d36ebe64aa7a0e0671e4de8f6a0980b38650478509a0d5b051f42bbb7034d395f6df65fd9663c065131818ab8cf90b4f11ae","ssdeep":"","tlshash":"9531bba2482b94806b4b1cc733de3d319a4ea216345589219ffd1c6cdcaae261319b9d","first_seen":"2025-09-11T19:44:11.722281Z","last_seen":"2026-04-05T08:04:18.199818Z","times_seen":3706,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":150,"dns":1,"connect":7,"send":0,"wait":22,"receive":0,"ssl":194},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/wp-admin/admin-ajax.php","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:52.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surefap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 11:16:27 GMT","end":"Fri, 26 Jun 2026 12:14:43 GMT"},"fingerprint":{"sha1":"AD:04:25:FB:ED:EF:1B:98:DC:EA:36:C1:A0:C9:92:E4:70:62:99:7A","sha256":"AA:58:DA:C8:10:34:43:C8:E8:F9:30:CC:A8:21:F0:EC:4D:6D:A0:10:3A:B7:B9:9D:D6:1A:AD:C8:E8:D5:86:5C"}}},"request":{"raw":"POST /wp-admin/admin-ajax.php HTTP/1.1\r\nHost: surefap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 54\r\nOrigin: https://surefap.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/\r\nCookie: PHPSESSID=ceec96a7b8e353025e719c038e84a6ea\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":54,"data":"action=update_views_ajax\u0026token=f5e40f1a2a\u0026wpp_id=33841"}},"response":{"raw":"HTTP/3 200 OK\r\npragma: no-cache\r\naccess-control-allow-origin: https://surefap.org\r\naccess-control-allow-credentials: true\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, private, must-revalidate\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: Accept-Encoding,User-Agent\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 04 Apr 2026 20:24:53 GMT\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UtXXIrf6o%2BZdGh4mID8UY9w1Z06HMcYL9zUp3s%2FH5Wtks1edQL851w3gOZqgQDPDrg1abMmS%2F9DGcMfG0FoHIhjDkVV3tAlfCjF%2BPU8Wuwk%2Bmz%2FET7cYGOgLAqUOzg%3D%3D\"}]}\r\ncf-ray: 9e730a01cbc8b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"657f82418fc0e76f8920e992faf76c59","sha1":"3240b02b28c675e4c04804a5f13769ba7414efbd","sha256":"fb2d6c39c7ef954e45639c2eefd9c7ff2fec0cacc62a929021cfdb47485da2a2","sha512":"fecb103a2e11b9458884641a20b108ce27f73b8a46cbb453dbb47a942d9b3987056b4b3a522ce40d8e8dab298224375f7150c108fb5f66d1da1fd0de2aa2bbf0","ssdeep":"","tlshash":"559004cd4101053131771d41530131707155310df7450c10f155d454d01107757c535d","first_seen":"2026-04-04T20:25:32.524171Z","last_seen":"2026-04-04T20:25:32.524171Z","times_seen":1,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":311,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"informer.yandex.ru/informer/37790960/3_0_A8EDFFFF_88CDE7FF_0_pageviews","fqdn":"informer.yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:54.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 13 Jan 2026 21:15:07 GMT","end":"Thu, 25 Jun 2026 20:59:59 GMT"},"fingerprint":{"sha1":"77:D9:43:82:07:FF:48:D3:BA:16:7E:7E:F2:6F:4A:1E:F0:38:14:70","sha256":"4F:23:46:51:0D:F1:FA:D9:9C:39:0B:B0:3C:AA:3B:1E:E7:1A:56:18:24:BD:BA:2D:EA:DB:4A:87:EB:43:86:86"}}},"request":{"raw":"GET /informer/37790960/3_0_A8EDFFFF_88CDE7FF_0_pageviews HTTP/1.1\r\nHost: informer.yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 1652\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nset-cookie: bh=YJbnxc4GahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.ru; Expires=Sun, 09 May 2027 20:24:54 GMT; SameSite=None; Secure\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nlast-modified: Sat, 04-Apr-2026 20:24:54 GMT\r\ncontent-type: image/png\r\nx-xss-protection: 1; mode=block\r\nexpires: Sat, 04-Apr-2026 20:24:54 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1652,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 88 x 31, 8-bit/color RGBA, non-interlaced","md5":"f46433a02b31ae136a3b00bad17cacc9","sha1":"fef8b78e22a25fdf4ef3d15da082177330026d8b","sha256":"6b6d2757b7ce4ef9b96cda174fbfb57bc96ab3e6212be8c6b5f0be3ccbe7f581","sha512":"a45f0c7ac9e756faf978085518e515d9e6847e4d0fea5a9c4b86a0167bd0c106d114a3b1ae75e5e6feff3ea9ad6c3293310072f5dfd18f79eb74c99532bbe3eb","ssdeep":"","tlshash":"11310a79bdda7bcc9ccf71e5d621b188ba273546111c27a480f946549ce232bc67e106","first_seen":"2026-04-04T20:25:32.526756Z","last_seen":"2026-04-04T20:25:32.526756Z","times_seen":1,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":143,"dns":99,"connect":45,"send":0,"wait":50,"receive":0,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/favicon.ico","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:54.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surefap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 11:16:27 GMT","end":"Fri, 26 Jun 2026 12:14:43 GMT"},"fingerprint":{"sha1":"AD:04:25:FB:ED:EF:1B:98:DC:EA:36:C1:A0:C9:92:E4:70:62:99:7A","sha256":"AA:58:DA:C8:10:34:43:C8:E8:F9:30:CC:A8:21:F0:EC:4D:6D:A0:10:3A:B7:B9:9D:D6:1A:AD:C8:E8:D5:86:5C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: surefap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/\r\nCookie: PHPSESSID=ceec96a7b8e353025e719c038e84a6ea\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 02 Oct 2019 10:37:48 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nexpires: Sat, 04 Apr 2026 21:19:59 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 2364\r\ncontent-type: image/x-icon\r\ndate: Sat, 04 Apr 2026 20:24:54 GMT\r\nserver: cloudflare\r\nage: 294\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KNh2%2FJBkGDoKTwq4e7oQF%2FYMQlDwxNCoz8rlc4TMaEd1P8jSXBS9K25UNLLPf3YMb2yiN0Eiupk82Azsj%2FyAopzwx5uleoDL6%2FgsK9gG8Jt5U4IFQS4nduIB19t3fw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9e730a0b4c27b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2341,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"63f742444c21f4cf9695129bc63bc3bf","sha1":"29ec1cb1fdcba521271484aad3bb1028762a9ced","sha256":"c3ee1d7b857d1336cad74602a22e4aabfc6adc9c32421e63e1494c06ac184524","sha512":"6b898d3c3d6b80106729f58425417adb9b4c30e4038757b120a4e7d41c69b7251c377a3f5232c20a9a2cb09f84feb1246a7897e9d67885302653720113e9196c","ssdeep":"","tlshash":"d441186ed119fcee2829c88ab6d6835e39fe699f4c90c1c0f611cd369d744702363115","first_seen":"2023-06-10T06:54:47Z","last_seen":"2026-04-04T20:25:32.528933Z","times_seen":20,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a.labadena.com/api/v2/items/303160?ev=409\u0026kw=Surefap%2CSurefap.org%2Cfree%2Cpic%2Cporn%2Ctoon%2Cblowjob%2Cboobs%2Cfingering%2Cfuck%2Cnude%2Cpaizuri%2Cporno%2Cpussy+licking\u0026sid=09b26a72-34b1-46c9-81ad-cba4d2748bc4\u0026i=1\u0026ab=0\u0026ww=1280\u0026wh=1024\u0026url=https%3A%2F%2Fsurefap.org%2Fdarkstalkers%2Fdarkstalkers-fred-perry-stalkers-afterdark%2F","fqdn":"a.labadena.com","domain":"labadena.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:57.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.labadena.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 23:28:39 GMT","end":"Sun, 31 May 2026 23:28:38 GMT"},"fingerprint":{"sha1":"80:BB:CD:92:6C:A2:5B:EC:58:98:ED:8F:C1:F7:5D:EF:C0:AB:7F:3C","sha256":"0A:52:79:C8:EE:68:42:BA:A5:F4:3C:B4:D1:DD:19:37:30:23:31:A9:B0:7F:09:4D:FC:49:D6:71:E0:D9:E5:16"}}},"request":{"raw":"GET /api/v2/items/303160?ev=409\u0026kw=Surefap%2CSurefap.org%2Cfree%2Cpic%2Cporn%2Ctoon%2Cblowjob%2Cboobs%2Cfingering%2Cfuck%2Cnude%2Cpaizuri%2Cporno%2Cpussy+licking\u0026sid=09b26a72-34b1-46c9-81ad-cba4d2748bc4\u0026i=1\u0026ab=0\u0026ww=1280\u0026wh=1024\u0026url=https%3A%2F%2Fsurefap.org%2Fdarkstalkers%2Fdarkstalkers-fred-perry-stalkers-afterdark%2F HTTP/1.1\r\nHost: a.labadena.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://surefap.org/\r\nOrigin: https://surefap.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 20:24:57 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://surefap.org\r\nset-cookie: nauid=PkMTC5bbDX8qWwnzaR2o; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; Secure; SameSite=None\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-05T07:47:19.139081Z","times_seen":555632,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"a.labadena.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/wp-content/uploads/wordpress-popular-posts/38967-featured-269x170.jpg","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:52.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surefap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 11:16:27 GMT","end":"Fri, 26 Jun 2026 12:14:43 GMT"},"fingerprint":{"sha1":"AD:04:25:FB:ED:EF:1B:98:DC:EA:36:C1:A0:C9:92:E4:70:62:99:7A","sha256":"AA:58:DA:C8:10:34:43:C8:E8:F9:30:CC:A8:21:F0:EC:4D:6D:A0:10:3A:B7:B9:9D:D6:1A:AD:C8:E8:D5:86:5C"}}},"request":{"raw":"GET /wp-content/uploads/wordpress-popular-posts/38967-featured-269x170.jpg HTTP/1.1\r\nHost: surefap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/\r\nCookie: PHPSESSID=ceec96a7b8e353025e719c038e84a6ea\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 18 Oct 2022 04:16:07 GMT\r\naccept-ranges: bytes\r\ncontent-length: 22121\r\ncache-control: public, max-age=14400\r\nexpires: Sat, 04 Apr 2026 21:19:56 GMT\r\nvary: User-Agent\r\ncontent-type: image/jpeg\r\ndate: Sat, 04 Apr 2026 20:24:52 GMT\r\nserver: cloudflare\r\nage: 295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8oJ7wPl24mK%2BHUJY06%2FagLG6q%2FMiFMzKlboEtRPGz0Mtb%2BPV8SRiApbtCNKUpbBArjGs5p3qoLIL61CHFuciXdnAJWnB41xDFgG8Tlt7x%2FZXn3PYbqr7dABkKTMbLA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e7309fe5b8fb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22121,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 269x170, components 3","md5":"2ad965afce6c9955a7e615c8235519b9","sha1":"414053a8acae1cd8afcc37dc638ced7955572295","sha256":"8900ff5c6fbbbb7ad002a086675f876f0387d18fc4cb731445004bcbda750551","sha512":"4f71c87c4a73e7b38863689a602604ad817604942586c6b3f7b29415b2457eb32e1788d12893e58f588354c051fcbb65a9d55c3bb429979d2fb0b59020e9f44a","ssdeep":"384:78xic2YPM9za0PQ6PuQowJF5AqPkZF8JR5Hi+AWQq5SyPt5E:78xi9C+FPjPugMZF8JRV5Aty5E","tlshash":"8da2e1915a2e7a4bef89ec6d38f010952008d710ae2425bc76c25da2d84bdf47b12de8","first_seen":"2026-04-04T16:26:31.028944Z","last_seen":"2026-04-04T20:25:32.530583Z","times_seen":3,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/adgpt.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"172.66.163.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:57.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tapioni.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:25:28 GMT","end":"Fri, 12 Jun 2026 01:25:24 GMT"},"fingerprint":{"sha1":"62:27:70:F5:AE:06:D3:FE:9E:7A:DC:6E:CE:F5:F8:8E:BA:63:9F:3F","sha256":"2B:6F:8E:1A:18:6F:7B:FF:07:69:43:A4:69:63:B1:DA:84:E0:FC:E6:37:38:71:CA:F8:33:AF:05:89:A4:74:36"}}},"request":{"raw":"GET /adgpt.js HTTP/1.1\r\nHost: cdn.tapioni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 20:24:57 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 867\r\nserver: cloudflare\r\nlast-modified: Wed, 25 Mar 2026 09:30:30 GMT\r\netag: \"69c3ab36-363\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15768000\r\nage: 883159\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 9e730a1dfab30b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1846,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1846), with no line terminators","md5":"9f8ebd47427e9331c335f2b8d456ad84","sha1":"c55ea0bf133f2da48e13b0732f76dce3f310f839","sha256":"5898cc6b4598ed3053f70a3b8c882fa5551272e91b1a26e9cdd7f43be6fbc17c","sha512":"53f635ac4d4a6df08d09da6090e7ca1c937769339266242730b9afa3b1efa91e2111f49e734a96cce70ffe62b6941aa9ab228be3462d217c7e81430399d366d7","ssdeep":"","tlshash":"1c3103eb31a1e9b1078b614c113f1506f5acb4a0a3ade8d5cba5c9647d381484062aee","first_seen":"2026-03-25T10:27:10.612662Z","last_seen":"2026-04-05T02:43:00.910259Z","times_seen":104,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"cdn.tapioni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a.labadena.com/api/spots/352013?p=1\u0026s1=%subid1%\u0026kw=","fqdn":"a.labadena.com","domain":"labadena.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:57.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.labadena.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 23:28:39 GMT","end":"Sun, 31 May 2026 23:28:38 GMT"},"fingerprint":{"sha1":"80:BB:CD:92:6C:A2:5B:EC:58:98:ED:8F:C1:F7:5D:EF:C0:AB:7F:3C","sha256":"0A:52:79:C8:EE:68:42:BA:A5:F4:3C:B4:D1:DD:19:37:30:23:31:A9:B0:7F:09:4D:FC:49:D6:71:E0:D9:E5:16"}}},"request":{"raw":"GET /api/spots/352013?p=1\u0026s1=%subid1%\u0026kw= HTTP/1.1\r\nHost: a.labadena.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/\r\nCookie: nauid=PV4jt6ydUFWPdMuv5kRz\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 20:24:57 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":74,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"be638b7e20d8ef9e4d91a56917671025","sha1":"3d4a9125fede6cc9c9a65a4d56c4296a13ef674d","sha256":"5d669b1a436940884c13d2056d61ebb1e659080f3d628011aeee7229d3c7818e","sha512":"3ba230c2888e9e0bce81b76b93d115dba9d75e68c264b7609b779f0a70599081da5df7c6ea7e77aea000ef4341cb8e257a7641652f175a51a2381b879ba8935e","ssdeep":"","tlshash":"4aa024775010043c143130504fc43f01017c0c0470054c0471c105d7c5c17c44c45004","first_seen":"2025-08-04T06:13:25.391212Z","last_seen":"2026-04-04T20:25:32.546486Z","times_seen":91,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"a.labadena.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/wp-includes/js/jquery/jquery.js?ver=1.12.4","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:52.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surefap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 11:16:27 GMT","end":"Fri, 26 Jun 2026 12:14:43 GMT"},"fingerprint":{"sha1":"AD:04:25:FB:ED:EF:1B:98:DC:EA:36:C1:A0:C9:92:E4:70:62:99:7A","sha256":"AA:58:DA:C8:10:34:43:C8:E8:F9:30:CC:A8:21:F0:EC:4D:6D:A0:10:3A:B7:B9:9D:D6:1A:AD:C8:E8:D5:86:5C"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.js?ver=1.12.4 HTTP/1.1\r\nHost: surefap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/\r\nCookie: PHPSESSID=ceec96a7b8e353025e719c038e84a6ea\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Sat, 23 Apr 2022 13:01:19 GMT\r\naccept-ranges: bytes\r\ncache-control: private\r\nexpires: Sat, 04 Apr 2026 21:24:52 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 33776\r\ncontent-type: application/javascript\r\ndate: Sat, 04 Apr 2026 20:24:52 GMT\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D4yTDE%2Bm%2FRt1cCD7wqmnuahAaKjci8IK8TouUKIAy6KingjeJmokxVvhCKlGPD4p%2B1ItiZlhdnJAcYWXj3Xiw7m%2FxW6ZuN89Zaq10PQ7rHNplllnsCmI8tjdc1Ohww%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9e7309fe2b82b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96874,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31997)","md5":"dc5ba5044fccc0297be7b262ce669a7c","sha1":"f137ff98ae379e35b0702967d3b6866a0a40e3be","sha256":"cf34e1b87bbfd9d9b185dec994924a496e279d8dc9387ad8d35bc0110134c4d3","sha512":"bab5eb2c4acc0cb1c65e8dedbd6b422480fc20076d6c1b12879cbf1e5b352969e1553a0e878401c2f2b9507b64b02e8abd4c6d1ab7e3d2c06272a491ee712e8a","ssdeep":"1536:HYE1fGBiByJsbfXXeRJ/shgWCeLLccJdZVHk04ssx+/mvaSIFSet43tpXJIGVypf:fsAg0psxTva/FSeKy2bDD5a98HrU","tlshash":"2493e8d9b2d6715287b734a850bf410bb17a98dab80c4c60f058d8e47e78e9d607bf2d","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-04-05T06:20:04.569879Z","times_seen":8949,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/wp-includes/js/wp-embed.min.js?ver=5.0.16","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:52.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surefap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 11:16:27 GMT","end":"Fri, 26 Jun 2026 12:14:43 GMT"},"fingerprint":{"sha1":"AD:04:25:FB:ED:EF:1B:98:DC:EA:36:C1:A0:C9:92:E4:70:62:99:7A","sha256":"AA:58:DA:C8:10:34:43:C8:E8:F9:30:CC:A8:21:F0:EC:4D:6D:A0:10:3A:B7:B9:9D:D6:1A:AD:C8:E8:D5:86:5C"}}},"request":{"raw":"GET /wp-includes/js/wp-embed.min.js?ver=5.0.16 HTTP/1.1\r\nHost: surefap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/\r\nCookie: PHPSESSID=ceec96a7b8e353025e719c038e84a6ea\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Sat, 23 Apr 2022 13:01:19 GMT\r\naccept-ranges: bytes\r\ncache-control: private\r\nexpires: Sat, 04 Apr 2026 21:24:52 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 739\r\ncontent-type: application/javascript\r\ndate: Sat, 04 Apr 2026 20:24:52 GMT\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QtEs3TcLmbBlMSDdlx9mLlrJvmQQMtW56zeyOJ%2BB7AA2H0m%2FR8JYIUpdsHCSjNzj6MNg%2FD4p8C62CnPACHebY3S2jJxNrbHKuYliP7We9OeVoEIQdXNT6NF%2Bq%2Bgsrg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9e7309fe5b90b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1391,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1391), with no line terminators","md5":"570ae0f3c201604926ea599d3d1f6c04","sha1":"2c29243a73660964d4712b969d2a15e27777bc14","sha256":"5138d39633dc69fcd0ed7f33a5e38dc339123f682fa7f5242066879c2bbc8c9b","sha512":"44583f156e95aa16d20ed8db8421001d9b7257b56b4fff1e0378760406b4d6eb2b1315d28ad4f3f489a7733814b2fb2dddf8f28004daaeee8d9bf4ea22a2742e","ssdeep":"","tlshash":"c021661a3228943758db51d3bc4535cad2d11fed6c0115d24e78cc45e6e4f935d69fe0","first_seen":"2023-03-07T01:02:19Z","last_seen":"2026-04-04T20:25:32.549586Z","times_seen":961,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a.labadena.com/api/spots/303150?p=1\u0026s1=%subid1%\u0026kw=","fqdn":"a.labadena.com","domain":"labadena.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:57.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.labadena.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 23:28:39 GMT","end":"Sun, 31 May 2026 23:28:38 GMT"},"fingerprint":{"sha1":"80:BB:CD:92:6C:A2:5B:EC:58:98:ED:8F:C1:F7:5D:EF:C0:AB:7F:3C","sha256":"0A:52:79:C8:EE:68:42:BA:A5:F4:3C:B4:D1:DD:19:37:30:23:31:A9:B0:7F:09:4D:FC:49:D6:71:E0:D9:E5:16"}}},"request":{"raw":"GET /api/spots/303150?p=1\u0026s1=%subid1%\u0026kw= HTTP/1.1\r\nHost: a.labadena.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 20:24:57 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nset-cookie: nauid=PV4jt6ydUFWPdMuv5kRz; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; Secure; SameSite=None\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":74,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"be638b7e20d8ef9e4d91a56917671025","sha1":"3d4a9125fede6cc9c9a65a4d56c4296a13ef674d","sha256":"5d669b1a436940884c13d2056d61ebb1e659080f3d628011aeee7229d3c7818e","sha512":"3ba230c2888e9e0bce81b76b93d115dba9d75e68c264b7609b779f0a70599081da5df7c6ea7e77aea000ef4341cb8e257a7641652f175a51a2381b879ba8935e","ssdeep":"","tlshash":"4aa024775010043c143130504fc43f01017c0c0470054c0471c105d7c5c17c44c45004","first_seen":"2025-08-04T06:13:25.391212Z","last_seen":"2026-04-04T20:25:32.546486Z","times_seen":91,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":62,"dns":1,"connect":26,"send":0,"wait":14,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"a.labadena.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/wp-content/themes/FinanceDesk/images/meta-separator.png","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:57.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surefap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 11:16:27 GMT","end":"Fri, 26 Jun 2026 12:14:43 GMT"},"fingerprint":{"sha1":"AD:04:25:FB:ED:EF:1B:98:DC:EA:36:C1:A0:C9:92:E4:70:62:99:7A","sha256":"AA:58:DA:C8:10:34:43:C8:E8:F9:30:CC:A8:21:F0:EC:4D:6D:A0:10:3A:B7:B9:9D:D6:1A:AD:C8:E8:D5:86:5C"}}},"request":{"raw":"GET /wp-content/themes/FinanceDesk/images/meta-separator.png HTTP/1.1\r\nHost: surefap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/wp-content/themes/FinanceDesk/style.css\r\nCookie: PHPSESSID=ceec96a7b8e353025e719c038e84a6ea; test=test\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 02 Oct 2019 10:47:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 121\r\ncache-control: public, max-age=14400\r\nexpires: Sat, 04 Apr 2026 21:24:57 GMT\r\nvary: User-Agent\r\ncontent-type: image/png\r\ndate: Sat, 04 Apr 2026 20:24:57 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jhWcWzbt%2B3bSvBjwcbk8CExrZgUe7fh3uouS4Osu6p%2BAIO2hg01Wfo%2BPTv7xiTyZvOi3PRWdtPgtjQcwOepyGpVXb4%2FtjMG8EersRaww4gJyDWP9Zly4hq8vfCCEVA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e730a1f8d85b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 9, 8-bit/color RGBA, non-interlaced","md5":"f395c59b99ad9effdd18186e3416b83f","sha1":"31fa705e99763fd0d6183cf20c99e99605a8987f","sha256":"9789e29b9a71fb3ccd4b4456e0601f979c8b613d3a2b34453bdf34ccaf7f0632","sha512":"c13cb3f3650585d9457785a6aea3c99c4fa024b3283b438646dad5781c51340217895aa6c0ed013998966546fc73e8db303cb7739ea398bd8732c85e6fdc4034","ssdeep":"","tlshash":"fab012c2b7ad4eb4c61382b3a0114050d4b3ce81272147e959de893e3f76f049bed603","first_seen":"2023-05-08T17:27:13Z","last_seen":"2026-04-04T20:25:32.550499Z","times_seen":62,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/postscribe/2.0.8/postscribe.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:57.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/postscribe/2.0.8/postscribe.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 20:24:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 5117\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03faa-45f4\"\r\nlast-modified: Mon, 04 May 2020 16:15:38 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 252307\r\nexpires: Thu, 25 Mar 2027 20:24:57 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1MIGaojdGsBmaE69DBS9eSYIMl%2B0jIdLzK1xRPtIxnxV63MK0vHaEQ7SndwfIqE2ZwsLc5%2BngyFk4BQ34IOW1N9S5aX5TzTmkqLj4HFAAe6kDLT8nDaKSCuHANoP%2FPgoA5hXWQCJ\"}]}\r\ncf-ray: 9e730a20097d56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17908,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (17660)","md5":"12dd498bf90c536803c2aad708b66c2b","sha1":"5f9363d39a405d1c94328cf2303ff4a05c0ad163","sha256":"c4e20f53f5ef0ed44b783437aa3f4638a9a56cc4aa29ae83ed9212eb2807052a","sha512":"ec593a501ebf74c092e564a1aaf0b477d3da6813c9a88f29d0d2a0db8143bdf19718ba4e6b13f64295b077ca5cb9c13460c30f9f2f35982a82597b22f79ffdd1","ssdeep":"192:l3GySZoj5oOg8pu564aEzn5nVMnyk3sBakk3cx7x0IlQV0Hf1b5SwU+ahpfex/W9:lWytjU64auV0ISjyW5RAe","tlshash":"6f82b38cb295f0b553d710b5403f910fe2366928654ec4d8f288d5ea2c7899d663bf3d","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-04-05T06:55:19.67229Z","times_seen":7027,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":32,"dns":21,"connect":1,"send":0,"wait":9,"receive":1,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citadelpathstatue.com/pn07uscr/f/tr/zavbn/1987020/lib.js","fqdn":"citadelpathstatue.com","domain":"citadelpathstatue.com","tld":"com"},"ip":{"addr":"94.242.247.27","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:57.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citadelpathstatue.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 17:03:21 GMT","end":"Fri, 29 May 2026 17:03:20 GMT"},"fingerprint":{"sha1":"1D:27:21:9F:1C:51:D0:3A:6E:A5:8F:43:AE:B0:65:75:EB:1B:78:AA","sha256":"72:2F:39:CA:98:0A:28:06:10:1E:17:D1:2A:41:9F:4E:FA:5E:9A:20:07:BB:85:44:E3:3D:B8:5A:2F:D6:33:FE"}}},"request":{"raw":"GET /pn07uscr/f/tr/zavbn/1987020/lib.js HTTP/1.1\r\nHost: citadelpathstatue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 20:24:57 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T07:47:05.597876Z","times_seen":13365748,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":60,"dns":19,"connect":17,"send":0,"wait":18,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-04T20:24:51.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surefap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 11:16:27 GMT","end":"Fri, 26 Jun 2026 12:14:43 GMT"},"fingerprint":{"sha1":"AD:04:25:FB:ED:EF:1B:98:DC:EA:36:C1:A0:C9:92:E4:70:62:99:7A","sha256":"AA:58:DA:C8:10:34:43:C8:E8:F9:30:CC:A8:21:F0:EC:4D:6D:A0:10:3A:B7:B9:9D:D6:1A:AD:C8:E8:D5:86:5C"}}},"request":{"raw":"GET /darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/ HTTP/1.1\r\nHost: surefap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=ceec96a7b8e353025e719c038e84a6ea\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 20:24:51 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, private, must-revalidate\r\npragma: no-cache\r\nlink: \u003chttps://surefap.org/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://surefap.org/?p=33841\u003e; rel=shortlink\r\nvary: Accept-Encoding,User-Agent\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=crkgtJbl7Y3%2FSOctLQI7ecx395l9vMg5F%2FH93DB40v8MwXBBPgMpoAnga4AGEa%2Fzv6j6Dqmk4TWdeCmPfTRKR4EBScXn91WwmopU%2BPqVUJyqTrg5beIymw9cEwVYyA%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e7309facc375693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"SWFObject","description":"SWFObject is an open-source JavaScript library used to embed Adobe Flash content onto web pages.","website":"https://github.com/swfobject/swfobject","common_platform_enumeration":"","icon":"SWFObject.png","categories":["Miscellaneous"]},{"name":"jQuery Migrate:1.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Liveinternet","description":"","website":"https://liveinternet.ru/rating/","common_platform_enumeration":"","icon":"Liveinternet.png","categories":["Analytics"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":84779,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1463), with CRLF, LF line terminators","md5":"3b1f9c4be8065c4cd47926a40c3bd361","sha1":"c90b9f13f614acfc3ef61d0fe1dae8da8aa5bf92","sha256":"1128823aa32e0f2a54b70a4362b48aa590299592cd562b42ae49e06cba4bd867","sha512":"b09b7a05e413e0deaed609415ca67a9aa9548695511d00bdc8ec3438682f9d877fd2b5c75f95f96202a4ad7e657459873d607bb063eeb65cf481b2a7038049fb","ssdeep":"768:5AXCDeMTV7Xt8ytkg9knmfDNI8lJdx7kt7G0N74YyKAARM2CS:5AXCDeMTVztgmfbYgQ74YyKAAR3","tlshash":"a4834b303a46b83fc4a735d374945adfaaf58ac2c500978df1f847a41fe6d68daa3124","first_seen":"2026-04-04T20:25:32.553028Z","last_seen":"2026-04-04T20:25:32.553028Z","times_seen":1,"resource_available":true,"data":null}},"time_used":277,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/wp-content/themes/FinanceDesk/lib/js/superfish.js?ver=5.0.16","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:52.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surefap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 11:16:27 GMT","end":"Fri, 26 Jun 2026 12:14:43 GMT"},"fingerprint":{"sha1":"AD:04:25:FB:ED:EF:1B:98:DC:EA:36:C1:A0:C9:92:E4:70:62:99:7A","sha256":"AA:58:DA:C8:10:34:43:C8:E8:F9:30:CC:A8:21:F0:EC:4D:6D:A0:10:3A:B7:B9:9D:D6:1A:AD:C8:E8:D5:86:5C"}}},"request":{"raw":"GET /wp-content/themes/FinanceDesk/lib/js/superfish.js?ver=5.0.16 HTTP/1.1\r\nHost: surefap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/\r\nCookie: PHPSESSID=ceec96a7b8e353025e719c038e84a6ea\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 02 Oct 2019 10:47:40 GMT\r\naccept-ranges: bytes\r\ncache-control: private\r\nexpires: Sat, 04 Apr 2026 21:24:52 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 1514\r\ncontent-type: application/javascript\r\ndate: Sat, 04 Apr 2026 20:24:52 GMT\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2KK9G914KD%2BXheHMCQutquriaKvulktdS8iFsRGupTCIxMcyLkuyq5t%2BQ3yr075cC3ux4Us0t8chPgI23QQQZd2a5MIvcfOGzedKWRlx65CLEUPUao2TgVxOi0xUiQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9e7309fe3b84b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3714,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"8c8070ba6a911bae7047f29e383da334","sha1":"b7b4fdd4a0aa451b888067ef4b69095cfb40dbf2","sha256":"3e9fb74061133f9dc6c809fb777bdcdc8e02b6812ad5bf39aad5f6c69f1b96dd","sha512":"c5d770651a616d9f6ebfc7543f33aab40422dc65eae0c6cdeac741f2f8c26f597ffd8b514145901bd5b29df8d758270b7f0be8187b169b565f08c9451fc7e5d3","ssdeep":"","tlshash":"427173ccf38f7597aa77227e402f1185ab3e8a72e8884c51bc3658585ce895d0792c6c","first_seen":"2023-03-07T01:03:00Z","last_seen":"2026-04-05T07:31:24.246051Z","times_seen":1121,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a.labadena.com/api/settings/23307","fqdn":"a.labadena.com","domain":"labadena.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:57.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.labadena.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 23:28:39 GMT","end":"Sun, 31 May 2026 23:28:38 GMT"},"fingerprint":{"sha1":"80:BB:CD:92:6C:A2:5B:EC:58:98:ED:8F:C1:F7:5D:EF:C0:AB:7F:3C","sha256":"0A:52:79:C8:EE:68:42:BA:A5:F4:3C:B4:D1:DD:19:37:30:23:31:A9:B0:7F:09:4D:FC:49:D6:71:E0:D9:E5:16"}}},"request":{"raw":"GET /api/settings/23307 HTTP/1.1\r\nHost: a.labadena.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://surefap.org/\r\nOrigin: https://surefap.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 20:24:57 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1be64b6d6652effba7dcf744e90def6a","sha1":"d9fbc7d1fa49fa4733f90a3739882d63972c2352","sha256":"72d79d0ad9a70ef53c1bab65c588d44bffb1a1b5aba0eb2f9f6a886c4c3aec4f","sha512":"ff1aee5b5d4ba25f4f78a0ddc80cd878856815c1ded88b32370c72bff242e73522e6aefb60fa5e53c434f10d2611dab7679152edf9321edc2b656e0265ef7006","ssdeep":"","tlshash":"408004c00dc1545410c010f4434043150103140f535c3304d41d1701147f4d17030150","first_seen":"2023-04-06T10:58:14Z","last_seen":"2026-04-05T02:43:00.83623Z","times_seen":7156,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":61,"dns":1,"connect":27,"send":0,"wait":26,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"a.labadena.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a.labadena.com/api/spots/303150?p=1\u0026s1=%subid1%\u0026kw=","fqdn":"a.labadena.com","domain":"labadena.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:57.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.labadena.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 23:28:39 GMT","end":"Sun, 31 May 2026 23:28:38 GMT"},"fingerprint":{"sha1":"80:BB:CD:92:6C:A2:5B:EC:58:98:ED:8F:C1:F7:5D:EF:C0:AB:7F:3C","sha256":"0A:52:79:C8:EE:68:42:BA:A5:F4:3C:B4:D1:DD:19:37:30:23:31:A9:B0:7F:09:4D:FC:49:D6:71:E0:D9:E5:16"}}},"request":{"raw":"GET /api/spots/303150?p=1\u0026s1=%subid1%\u0026kw= HTTP/1.1\r\nHost: a.labadena.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 20:24:57 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nset-cookie: nauid=vuHOI4tQaZyV7ylvQv78; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; Secure; SameSite=None\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":74,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"be638b7e20d8ef9e4d91a56917671025","sha1":"3d4a9125fede6cc9c9a65a4d56c4296a13ef674d","sha256":"5d669b1a436940884c13d2056d61ebb1e659080f3d628011aeee7229d3c7818e","sha512":"3ba230c2888e9e0bce81b76b93d115dba9d75e68c264b7609b779f0a70599081da5df7c6ea7e77aea000ef4341cb8e257a7641652f175a51a2381b879ba8935e","ssdeep":"","tlshash":"4aa024775010043c143130504fc43f01017c0c0470054c0471c105d7c5c17c44c45004","first_seen":"2025-08-04T06:13:25.391212Z","last_seen":"2026-04-04T20:25:32.546486Z","times_seen":91,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":47,"dns":1,"connect":13,"send":0,"wait":13,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"a.labadena.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/wp-content/themes/FinanceDesk/lib/css/defaults.css","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:52.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surefap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 11:16:27 GMT","end":"Fri, 26 Jun 2026 12:14:43 GMT"},"fingerprint":{"sha1":"AD:04:25:FB:ED:EF:1B:98:DC:EA:36:C1:A0:C9:92:E4:70:62:99:7A","sha256":"AA:58:DA:C8:10:34:43:C8:E8:F9:30:CC:A8:21:F0:EC:4D:6D:A0:10:3A:B7:B9:9D:D6:1A:AD:C8:E8:D5:86:5C"}}},"request":{"raw":"GET /wp-content/themes/FinanceDesk/lib/css/defaults.css HTTP/1.1\r\nHost: surefap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/\r\nCookie: PHPSESSID=ceec96a7b8e353025e719c038e84a6ea\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 02 Oct 2019 10:47:40 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nexpires: Sat, 04 Apr 2026 21:19:56 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 1655\r\ncontent-type: text/css\r\ndate: Sat, 04 Apr 2026 20:24:52 GMT\r\nserver: cloudflare\r\nage: 295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sd0Y21Z5p7oBYcFDXbZF4CN3Mowe2cwO4ar79cKff37sPQTcMxR1c6tMQi4vCx7C6MBOWLp6bQvSuCHr6x0pqrDWGXZDJTg%2BeIkETyp%2BQE3H9XLZ2tyINNhKO01y3Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9e7309fe2b7ab4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5447,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"2767e09f3dd4ad0db8f7c06eed9faa08","sha1":"61d82aa1898a4c8bc7aa1e1907df649ddf8e005c","sha256":"f44e619e83d1bef76e6fa6a61132749c5e3ea038992b079fca9edde31da94c1a","sha512":"52ff209e96157ae9bfed5ff67a892b164b2390486c9a5db69e25628adeb00f5596f1d4ef90b6e8866310ced0244544709dbb76b401da4d1ffc62885271c7dba1","ssdeep":"48:3gTlmNtzjkD+tCaBT7x2pOgzRWcdLJ1JLXWdt15yYSpZpUPyNB6Pw8jVanZLdwOO:3vNtXkwwRpJRGuzNB6BjVanv8aC","tlshash":"d4b131599e473006b7b7e674b7a34667ee884123474180b476c4a6218fb68b842eef8d","first_seen":"2023-04-07T07:42:03Z","last_seen":"2026-04-04T20:25:32.556772Z","times_seen":117,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/wp-content/plugins/wp-pagenavi-style/css/css3_blue_glossy.css?ver=1.0","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:52.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surefap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 11:16:27 GMT","end":"Fri, 26 Jun 2026 12:14:43 GMT"},"fingerprint":{"sha1":"AD:04:25:FB:ED:EF:1B:98:DC:EA:36:C1:A0:C9:92:E4:70:62:99:7A","sha256":"AA:58:DA:C8:10:34:43:C8:E8:F9:30:CC:A8:21:F0:EC:4D:6D:A0:10:3A:B7:B9:9D:D6:1A:AD:C8:E8:D5:86:5C"}}},"request":{"raw":"GET /wp-content/plugins/wp-pagenavi-style/css/css3_blue_glossy.css?ver=1.0 HTTP/1.1\r\nHost: surefap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/\r\nCookie: PHPSESSID=ceec96a7b8e353025e719c038e84a6ea\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 02 Oct 2019 10:42:31 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nexpires: Sat, 04 Apr 2026 21:19:56 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 460\r\ncontent-type: text/css\r\ndate: Sat, 04 Apr 2026 20:24:52 GMT\r\nserver: cloudflare\r\nage: 295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XMhE919qHaD1dK0NGr6OlPtsbO1noz7qFYMPCkhgkGgkFK4yPBG8y2sxm2GRri3oKLRP0sFX88o9qj6oDnZDrCfcuyrBb6S7Gc9cZQMyuqyw6%2Ft4GmsJXxfeJ4zvNw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9e7309fe2b80b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1967,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"7a03fdad3de2a512945b89d95a1b6f17","sha1":"8b467f2b55a0eb7755f7e974e734d06865fbe396","sha256":"8004b8d2bcaa8759f699bf36d6a0e57e471696b368911ea312d160e85cbbcedf","sha512":"b68d69dff31748b161ad5d7414cc9cc02d5939edb494ef0d65edaa3cfa4ed8a0fddef17b0fd9f1c1f90457741e24a31abfb3b0ab036e9250a1265e92675af184","ssdeep":"","tlshash":"c041d723fba454527717459a962673bc3e38882ed7021e75747373b6ef522e31042a11","first_seen":"2023-04-07T07:42:03Z","last_seen":"2026-04-04T20:25:32.557692Z","times_seen":25,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/wp-content/plugins/wordpress-popular-posts/style/wpp.css?ver=3.2.3","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:52.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surefap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 11:16:27 GMT","end":"Fri, 26 Jun 2026 12:14:43 GMT"},"fingerprint":{"sha1":"AD:04:25:FB:ED:EF:1B:98:DC:EA:36:C1:A0:C9:92:E4:70:62:99:7A","sha256":"AA:58:DA:C8:10:34:43:C8:E8:F9:30:CC:A8:21:F0:EC:4D:6D:A0:10:3A:B7:B9:9D:D6:1A:AD:C8:E8:D5:86:5C"}}},"request":{"raw":"GET /wp-content/plugins/wordpress-popular-posts/style/wpp.css?ver=3.2.3 HTTP/1.1\r\nHost: surefap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/\r\nCookie: PHPSESSID=ceec96a7b8e353025e719c038e84a6ea\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 02 Oct 2019 10:42:34 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nexpires: Sat, 04 Apr 2026 21:19:56 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 493\r\ncontent-type: text/css\r\ndate: Sat, 04 Apr 2026 20:24:52 GMT\r\nserver: cloudflare\r\nage: 295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JCM%2Fnad%2Fk%2BNBXYRdY2N6yrcSgmzZHQOR3OaqQmDnTqhgQx17BjoGJF3mZVCGBqqeIm9SioLedv%2BfuJka1%2FFCKdrPbe5qoJeZfkM5LK8nnicRDR0U3E9M7L%2F7LKR6qw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9e7309fe2b7fb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1118,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"a87fb10b147a8580b01e86bbfad73afd","sha1":"daeb84cdb5ecadf414539ef77ad20ef6bbac0f3b","sha256":"7005c5d9f0fe81db619e9dc41245db33c1a586a1e0a676b91869bd4b178c932b","sha512":"d29c5548308114e19d94563e09b2d10885583a2db0cd09831b873e56ebfaf1676c6a3cd93568a9f637c9d12a8e1a825b93d6824eb9b5bdd6b9d266402bb8b8b2","ssdeep":"","tlshash":"8e210574b3ce7009828eab99f1741a91c85cd2b583752ceeb4a9d830dd126d88aed365","first_seen":"2023-04-07T07:42:03Z","last_seen":"2026-04-04T20:25:32.558375Z","times_seen":27,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4tymode.win/images/2020/11/16/7b6d34e1d120c4fa83a1aeefcce10120.md.jpg","fqdn":"4tymode.win","domain":"4tymode.win","tld":"win"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:52.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4tymode.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 07:52:15 GMT","end":"Thu, 14 May 2026 08:49:22 GMT"},"fingerprint":{"sha1":"7E:22:CD:F7:8D:50:F1:9E:0C:72:03:71:E9:D7:77:BF:9F:3E:CD:01","sha256":"22:CF:06:73:9C:45:57:07:9E:F3:6D:90:47:09:CC:4D:63:CB:C3:29:5E:33:27:93:9D:72:BA:5D:9B:3B:CE:76"}}},"request":{"raw":"GET /images/2020/11/16/7b6d34e1d120c4fa83a1aeefcce10120.md.jpg HTTP/1.1\r\nHost: 4tymode.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 20:24:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 47942\r\nserver: cloudflare\r\nlast-modified: Mon, 16 Nov 2020 21:09:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"5fb2ea90-bb46\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jmp8L3CdNc9faFvPLq0NaBMpNpL%2Fbu5OmGLL%2BVzAHpWnlUNFDmEf0LeeE42qkHtnIAZDpvtACvWwaGF%2ByzLF4W4bDYesO08d426HGcWThomJhfaH69%2FPa61JCyqu%2Bg%3D%3D\"}]}\r\ncf-ray: 9e7309ff3fef712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47942,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 300x466, components 3","md5":"e8033b0feb83e1587431daf6857f5efd","sha1":"48bc6f844cc2243c56b7f22c597b22c95be46345","sha256":"0fb995891cf4df04836ab3d97b3e4a811e2007eb183d6ad9a8614932413d5078","sha512":"372d07856962918f67ee909014d700260bc7e87ad47dcd1f6e8c8881ed278018917a4616802fdd6da214fa3b088db831c2354bac1cd05952f6c0d4d214daec75","ssdeep":"768:UEJ84aRRT4V6PUX03y3pt7jANEhJ8pgEwJox7oDFvYZkJe1Mh93dGgRi8J5jTynK:Uk84afTRsIorINcJFoRUtYZue1MH8gT/","tlshash":"9c23f158947543dcea338b384dcf5ddad8c2bda422d147faa4e02e2dfa482e351d6918","first_seen":"2026-04-04T20:25:32.55912Z","last_seen":"2026-04-04T20:25:32.55912Z","times_seen":1,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":97,"dns":0,"connect":0,"send":0,"wait":146,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/wp-content/themes/FinanceDesk/lib/css/reset.css","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:52.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surefap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 11:16:27 GMT","end":"Fri, 26 Jun 2026 12:14:43 GMT"},"fingerprint":{"sha1":"AD:04:25:FB:ED:EF:1B:98:DC:EA:36:C1:A0:C9:92:E4:70:62:99:7A","sha256":"AA:58:DA:C8:10:34:43:C8:E8:F9:30:CC:A8:21:F0:EC:4D:6D:A0:10:3A:B7:B9:9D:D6:1A:AD:C8:E8:D5:86:5C"}}},"request":{"raw":"GET /wp-content/themes/FinanceDesk/lib/css/reset.css HTTP/1.1\r\nHost: surefap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/\r\nCookie: PHPSESSID=ceec96a7b8e353025e719c038e84a6ea\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 02 Oct 2019 10:47:40 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nexpires: Sat, 04 Apr 2026 21:19:56 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 620\r\ncontent-type: text/css\r\ndate: Sat, 04 Apr 2026 20:24:52 GMT\r\nserver: cloudflare\r\nage: 295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PU34AOpROwQFu7iB6JRpmyGd%2BTr6TUvHrfWSylP33PUPMFyeTNTF29EZRj1CYcm1WSIvEV3DVfbTvhr9loAuwg4NqEsFaMsfdL5HaSHE3%2FqhYmJJ3cAfmmzAZMN8Jw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9e7309fe2b79b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1122,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"59cb04df0e0e90b59a2d1ae7efb02e5b","sha1":"29523f64912a95de4292280ed08eac952f45b326","sha256":"f56e00fb627e19fb1be4d7cb356dea6e91fe6988d2f1c4ed0f7d6cc57c43c666","sha512":"178b056857d90dfce254ec5994192f4a32c55e6b9c9ba15097391cffb83822f4cd618e34e08541e94fff0b8e09ed6734932327a4ccd463246d9841b80a3e6110","ssdeep":"","tlshash":"49210d2e962091a48fc5d1b4b231cd28db3852a02e8958f9f48fcb5a145907898e379e","first_seen":"2023-04-07T07:42:03Z","last_seen":"2026-04-04T20:25:32.561675Z","times_seen":217,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/wp-content/plugins/wp-postratings/postratings-css.css?ver=1.82","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:52.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surefap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 11:16:27 GMT","end":"Fri, 26 Jun 2026 12:14:43 GMT"},"fingerprint":{"sha1":"AD:04:25:FB:ED:EF:1B:98:DC:EA:36:C1:A0:C9:92:E4:70:62:99:7A","sha256":"AA:58:DA:C8:10:34:43:C8:E8:F9:30:CC:A8:21:F0:EC:4D:6D:A0:10:3A:B7:B9:9D:D6:1A:AD:C8:E8:D5:86:5C"}}},"request":{"raw":"GET /wp-content/plugins/wp-postratings/postratings-css.css?ver=1.82 HTTP/1.1\r\nHost: surefap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/\r\nCookie: PHPSESSID=ceec96a7b8e353025e719c038e84a6ea\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 02 Oct 2019 10:42:33 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nexpires: Sat, 04 Apr 2026 21:19:56 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 425\r\ncontent-type: text/css\r\ndate: Sat, 04 Apr 2026 20:24:52 GMT\r\nserver: cloudflare\r\nage: 295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PDizT0Ow6RYYyze7zVeqKgDiW45Hud6vXw8m1611gZxYA2eAIM7BQcwVT239ZVMyuTO57qKVdGWuZNXDRRlhG2ciB%2BjKsXN14sXfEzUkHmghlPqZPMOyY4nkogXjRA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9e7309fe2b7eb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1058,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"47cf473fd38816fc7697aa053554d25f","sha1":"dc2dd38ddadc242fd4c14b061b15f7812c0b84b6","sha256":"f4fa0e329d835c2002b7ce101dc42cf29504d962199df50af5f0b514ae6a3166","sha512":"287a708c076e2aa5b53b181b50a6bc6a612631e519f7d82516f49303e89ae689ba3ab8599de32459bea6a520578305d434df2f3a656a8f5997c004efbb7d81c0","ssdeep":"","tlshash":"e1114e79ae0415189d02e2467d89dd00ce7581b76a1d855e3d7c6e3cc383719136deac","first_seen":"2023-04-07T07:42:03Z","last_seen":"2026-04-04T20:25:32.562343Z","times_seen":121,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/wp-content/uploads/2016/10/surefap.org__Stalkers-Afterdark-01-of-08_Gotofap.tk__380669763_2099800850.jpg","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:52.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surefap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 11:16:27 GMT","end":"Fri, 26 Jun 2026 12:14:43 GMT"},"fingerprint":{"sha1":"AD:04:25:FB:ED:EF:1B:98:DC:EA:36:C1:A0:C9:92:E4:70:62:99:7A","sha256":"AA:58:DA:C8:10:34:43:C8:E8:F9:30:CC:A8:21:F0:EC:4D:6D:A0:10:3A:B7:B9:9D:D6:1A:AD:C8:E8:D5:86:5C"}}},"request":{"raw":"GET /wp-content/uploads/2016/10/surefap.org__Stalkers-Afterdark-01-of-08_Gotofap.tk__380669763_2099800850.jpg HTTP/1.1\r\nHost: surefap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/\r\nCookie: PHPSESSID=ceec96a7b8e353025e719c038e84a6ea\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 02 Oct 2019 10:55:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 650428\r\ncache-control: public, max-age=14400\r\nexpires: Sat, 04 Apr 2026 21:24:52 GMT\r\nvary: User-Agent\r\ncontent-type: image/jpeg\r\ndate: Sat, 04 Apr 2026 20:24:52 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wmSYxUkXHh22x%2FJdS8TshHsfMCkv6wXy%2FGjsOr3YEJkcXKP9G8KmccFqT3evcZlODA9eyycL1v7Cr0%2BXVJwxnbbNC%2FEV7NgAkZFDWNWNfwn6mcIxJb5L%2BePlgD5%2FFg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e7309fe4b87b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":650428,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 150x150, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=8, orientation=upper-left, xresolution=110, yresolution=118, resolutionunit=2, software=Adobe Photoshop CS2 Windows, datetime=2015:09:06 06:20:41], baseline, precision 8, 1013x1575, components 3","md5":"1972989a6165299a287d8e44e7a07c4c","sha1":"6d55b651c187b12323927f12b26ee1da58fc972e","sha256":"146764c2f933ccc2e37404819c74841a56a73bbf6f4420925f93a4191e760858","sha512":"901ebb600b73f7e81bb3825aeace17a80024626b7ac0ac8936b80c7a9cee2370edbcb1d1d4a75152a955e42ef1617ea783b94e3e078fa369a0180ecfefb2a8bc","ssdeep":"12288:+jZGTZboy9ATZYgIcbb8ehXtrYxc4mB8O9Xqi3o2r5CerLH1u02q:2GTlD9QIS8sGbmmO9Rj99","tlshash":"abd422351b191ae1dcc90933ca809df989b2cc5355d65f93fa2daf64bfb8f4048b8129","first_seen":"2026-04-04T20:25:32.563074Z","last_seen":"2026-04-04T20:25:32.563074Z","times_seen":1,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":190,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4tymode.win/images/2020/11/16/c54ae31065117f81dd3b25c0db0980b8.md.jpg","fqdn":"4tymode.win","domain":"4tymode.win","tld":"win"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:52.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4tymode.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 07:52:15 GMT","end":"Thu, 14 May 2026 08:49:22 GMT"},"fingerprint":{"sha1":"7E:22:CD:F7:8D:50:F1:9E:0C:72:03:71:E9:D7:77:BF:9F:3E:CD:01","sha256":"22:CF:06:73:9C:45:57:07:9E:F3:6D:90:47:09:CC:4D:63:CB:C3:29:5E:33:27:93:9D:72:BA:5D:9B:3B:CE:76"}}},"request":{"raw":"GET /images/2020/11/16/c54ae31065117f81dd3b25c0db0980b8.md.jpg HTTP/1.1\r\nHost: 4tymode.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 20:24:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 65334\r\nserver: cloudflare\r\nlast-modified: Mon, 16 Nov 2020 21:09:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"5fb2ea8f-ff36\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u0TIbOtrVCmx4veIniDDVLj91QmRXs7TUWRhA9egwocJRZ8B5811669QWWYtCh3h%2BK%2B38chTJJfInC8vW4pXHg%2B4dH4kAADfcKRg9UFJFxBVhqSBLeP%2Bc7m1%2FA5Suw%3D%3D\"}]}\r\ncf-ray: 9e7309ff3ff1712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65334,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 300x466, components 3","md5":"3a46f3641910a4d99abfb61191a7e70c","sha1":"2ec2169aecc1aa864ab17daa2a84903927ee49c8","sha256":"44bea9be61bd7906267059ddab753d103fc83962925cfa7bc676844dfaf1e50d","sha512":"023a739e2c333dbaee62ee7e93aae7ac9de7482dea0b775d2a7c787565e00deaf8d63b060b814b2a43d8d68445c372b4754d364db9db250b97a6632993205f48","ssdeep":"1536:UWqPMf+pFIwYcZkFZCCqd6gvxbxmohzXkzmiLvdQcrskWs95Hi:jqbpFZYSd6gpbxdhzUtvdAYbHi","tlshash":"f55301ad8296a7e27ce283f755c04e8e81bdad52af5c1d7028c2e4f0d50c95bb5418e5","first_seen":"2026-04-04T20:25:32.564614Z","last_seen":"2026-04-04T20:25:32.564614Z","times_seen":1,"resource_available":false,"data":null}},"time_used":427,"timings":{"blocked":-1,"dns":4,"connect":2,"send":0,"wait":144,"receive":136,"ssl":133},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/wp-content/uploads/wordpress-popular-posts/4684-featured-269x170.jpg","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:52.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surefap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 11:16:27 GMT","end":"Fri, 26 Jun 2026 12:14:43 GMT"},"fingerprint":{"sha1":"AD:04:25:FB:ED:EF:1B:98:DC:EA:36:C1:A0:C9:92:E4:70:62:99:7A","sha256":"AA:58:DA:C8:10:34:43:C8:E8:F9:30:CC:A8:21:F0:EC:4D:6D:A0:10:3A:B7:B9:9D:D6:1A:AD:C8:E8:D5:86:5C"}}},"request":{"raw":"GET /wp-content/uploads/wordpress-popular-posts/4684-featured-269x170.jpg HTTP/1.1\r\nHost: surefap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/\r\nCookie: PHPSESSID=ceec96a7b8e353025e719c038e84a6ea\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 02 Oct 2019 10:55:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 13076\r\ncache-control: public, max-age=14400\r\nexpires: Sat, 04 Apr 2026 21:19:56 GMT\r\nvary: User-Agent\r\ncontent-type: image/jpeg\r\ndate: Sat, 04 Apr 2026 20:24:52 GMT\r\nserver: cloudflare\r\nage: 295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FnCso6YYQ7rS4jFM9qtztmtKYi%2Buf8tKuMsLt4nnhc8qzXkobdeOYngK%2F1GHUfC0VAchwwk8NnmXSxq%2FXZERF7awo6y7O8rorTBDALzpj4RDOurdKVoReDws0ZWReg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e7309fe5b8bb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13076,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75\", baseline, precision 8, 269x170, components 3","md5":"97b9de5eb10be3e0d06765133d81e750","sha1":"72119207590b8f020d5ec6622a0c86388f36a128","sha256":"76600c0112981f50f530a76f039ae376263c773b8446f341b9159e50a25a3db5","sha512":"38e6294dc0863fb5dc0fc125bedd0f6f1e12a8931ed8eed544bd83c0efbff0d37e83226f19072f66661818316b338d464c71c9e80bf414e824dec72f1dce7c87","ssdeep":"192:369cPzphILEejvqriE7sbS+bbFQW0NKJVxDQ5Wfs6RsH0hjweKrQfYDFPUq3:qPEyaisiSIaW04JDo6RFj2rbZ1","tlshash":"b042bf6dcfba5d976b1bd4b53124432ff5025be332186a7805028eb7a27acfd1425e0c","first_seen":"2026-04-04T16:26:31.015579Z","last_seen":"2026-04-04T20:25:32.566843Z","times_seen":3,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a.labadena.com/api/spots/440577?kw=Surefap%2CSurefap.org%2Cfree%2Cpic%2Cporn%2Ctoon%2Cblowjob%2Cboobs%2Cfingering%2Cfuck%2Cnude%2Cpaizuri%2Cporno%2Cpussy%20licking\u0026i=1\u0026url=https%3A%2F%2Fsurefap.org%2Fdarkstalkers%2Fdarkstalkers-fred-perry-stalkers-afterdark%2F\u0026sid=09b26a72-34b1-46c9-81ad-cba4d2748bc4","fqdn":"a.labadena.com","domain":"labadena.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:57.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.labadena.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 23:28:39 GMT","end":"Sun, 31 May 2026 23:28:38 GMT"},"fingerprint":{"sha1":"80:BB:CD:92:6C:A2:5B:EC:58:98:ED:8F:C1:F7:5D:EF:C0:AB:7F:3C","sha256":"0A:52:79:C8:EE:68:42:BA:A5:F4:3C:B4:D1:DD:19:37:30:23:31:A9:B0:7F:09:4D:FC:49:D6:71:E0:D9:E5:16"}}},"request":{"raw":"GET /api/spots/440577?kw=Surefap%2CSurefap.org%2Cfree%2Cpic%2Cporn%2Ctoon%2Cblowjob%2Cboobs%2Cfingering%2Cfuck%2Cnude%2Cpaizuri%2Cporno%2Cpussy%20licking\u0026i=1\u0026url=https%3A%2F%2Fsurefap.org%2Fdarkstalkers%2Fdarkstalkers-fred-perry-stalkers-afterdark%2F\u0026sid=09b26a72-34b1-46c9-81ad-cba4d2748bc4 HTTP/1.1\r\nHost: a.labadena.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 20:24:57 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nset-cookie: nauid=VGFIX2miBymqpgx7GdRu; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; Secure; SameSite=None\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2644,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2069)","md5":"6bd0ddafa785ccd0abf3a43231f808c2","sha1":"9d730b9fc0b3db0ab070ac4c4d6f067347739b90","sha256":"031b22e90b2437d69b07f9bf68b89f815f2bd35cde9834f5a5a53a5b884e90b6","sha512":"96ffbb00893f3fb0cff8f9dba477ba6bbcaca1cc8e889936c2d4d4d8cea5d19e7f670c1cafeaf6df34b0bbc27b357acec9f4ac1b1587f173de6238c083c43551","ssdeep":"","tlshash":"af51868486fc6216b61b10b0dd7acf9f651ea240d3154075eeb726aac3cd64c067128a","first_seen":"2026-04-04T20:25:32.567782Z","last_seen":"2026-04-04T20:25:32.567782Z","times_seen":1,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"a.labadena.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/adgpt.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"172.66.163.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:57.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tapioni.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:25:28 GMT","end":"Fri, 12 Jun 2026 01:25:24 GMT"},"fingerprint":{"sha1":"62:27:70:F5:AE:06:D3:FE:9E:7A:DC:6E:CE:F5:F8:8E:BA:63:9F:3F","sha256":"2B:6F:8E:1A:18:6F:7B:FF:07:69:43:A4:69:63:B1:DA:84:E0:FC:E6:37:38:71:CA:F8:33:AF:05:89:A4:74:36"}}},"request":{"raw":"GET /adgpt.js HTTP/1.1\r\nHost: cdn.tapioni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://surefap.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 20:24:57 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 867\r\nserver: cloudflare\r\nlast-modified: Wed, 25 Mar 2026 09:30:30 GMT\r\netag: \"69c3ab36-363\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15768000\r\nage: 883159\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 9e730a1f9be30b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1846,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1846), with no line terminators","md5":"9f8ebd47427e9331c335f2b8d456ad84","sha1":"c55ea0bf133f2da48e13b0732f76dce3f310f839","sha256":"5898cc6b4598ed3053f70a3b8c882fa5551272e91b1a26e9cdd7f43be6fbc17c","sha512":"53f635ac4d4a6df08d09da6090e7ca1c937769339266242730b9afa3b1efa91e2111f49e734a96cce70ffe62b6941aa9ab228be3462d217c7e81430399d366d7","ssdeep":"","tlshash":"1c3103eb31a1e9b1078b614c113f1506f5acb4a0a3ade8d5cba5c9647d381484062aee","first_seen":"2026-03-25T10:27:10.612662Z","last_seen":"2026-04-05T02:43:00.910259Z","times_seen":104,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"cdn.tapioni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/wp-content/themes/FinanceDesk/style.css","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:52.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surefap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 11:16:27 GMT","end":"Fri, 26 Jun 2026 12:14:43 GMT"},"fingerprint":{"sha1":"AD:04:25:FB:ED:EF:1B:98:DC:EA:36:C1:A0:C9:92:E4:70:62:99:7A","sha256":"AA:58:DA:C8:10:34:43:C8:E8:F9:30:CC:A8:21:F0:EC:4D:6D:A0:10:3A:B7:B9:9D:D6:1A:AD:C8:E8:D5:86:5C"}}},"request":{"raw":"GET /wp-content/themes/FinanceDesk/style.css HTTP/1.1\r\nHost: surefap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/\r\nCookie: PHPSESSID=ceec96a7b8e353025e719c038e84a6ea\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Sat, 13 Feb 2021 23:55:25 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nexpires: Sat, 04 Apr 2026 21:19:56 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 6818\r\ncontent-type: text/css\r\ndate: Sat, 04 Apr 2026 20:24:52 GMT\r\nserver: cloudflare\r\nage: 295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3IDJpz2w5X3uFJmuqWL9BjjAcrNPMIyBK5qAFhODbuaaKyztrKYIUfgkLQEvIcKbsCf7Q50BAXaikgo1qlU7%2FfY6%2FSKmHJQ4vUASw22IDH1T3gb7JpqVDQw75yRhog%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9e7309fe2b7bb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33791,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"34ab5062a1548f36a52b02c363647437","sha1":"29f74960387ee5e1fa9b39bd72c7a98f6f2965b8","sha256":"6847b67d73e4e56b5a25b95eb641b27fe8ecd4ceae37c5806e8434e40da9ca82","sha512":"50bf62898013f135e5fc00241b71468c546851e3b8835b3cae41de62eeecee2da025c80aa327f7b4d19c380cc47f3b75db8d9cbda5a1df12a931c7f9c62e653c","ssdeep":"768:lBkzsEm5Y32TPrhFFBxVFuFg3udwvLCUc9vck3uFavLC6:XkzsEmfTPrhFrEe3udwvLCU63uFavLC6","tlshash":"40e244526fa32805b54fd0a56bbae356f32c4157e50ecdb87e983228cf452d490beb4c","first_seen":"2023-04-07T07:42:03Z","last_seen":"2026-04-04T20:25:32.575517Z","times_seen":24,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a.labadena.com/api/v2/items/303160?ev=409\u0026kw=Surefap%2CSurefap.org%2Cfree%2Cpic%2Cporn%2Ctoon%2Cblowjob%2Cboobs%2Cfingering%2Cfuck%2Cnude%2Cpaizuri%2Cporno%2Cpussy+licking\u0026sid=09b26a72-34b1-46c9-81ad-cba4d2748bc4\u0026i=1\u0026ab=0\u0026ww=1280\u0026wh=1024\u0026url=https%3A%2F%2Fsurefap.org%2Fdarkstalkers%2Fdarkstalkers-fred-perry-stalkers-afterdark%2F","fqdn":"a.labadena.com","domain":"labadena.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:57.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.labadena.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 23:28:39 GMT","end":"Sun, 31 May 2026 23:28:38 GMT"},"fingerprint":{"sha1":"80:BB:CD:92:6C:A2:5B:EC:58:98:ED:8F:C1:F7:5D:EF:C0:AB:7F:3C","sha256":"0A:52:79:C8:EE:68:42:BA:A5:F4:3C:B4:D1:DD:19:37:30:23:31:A9:B0:7F:09:4D:FC:49:D6:71:E0:D9:E5:16"}}},"request":{"raw":"GET /api/v2/items/303160?ev=409\u0026kw=Surefap%2CSurefap.org%2Cfree%2Cpic%2Cporn%2Ctoon%2Cblowjob%2Cboobs%2Cfingering%2Cfuck%2Cnude%2Cpaizuri%2Cporno%2Cpussy+licking\u0026sid=09b26a72-34b1-46c9-81ad-cba4d2748bc4\u0026i=1\u0026ab=0\u0026ww=1280\u0026wh=1024\u0026url=https%3A%2F%2Fsurefap.org%2Fdarkstalkers%2Fdarkstalkers-fred-perry-stalkers-afterdark%2F HTTP/1.1\r\nHost: a.labadena.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://surefap.org/\r\nOrigin: https://surefap.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 20:24:57 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://surefap.org\r\nset-cookie: nauid=2IqSjct5dKsELIMVrm27; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; Secure; SameSite=None\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-05T07:47:19.139081Z","times_seen":555632,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"a.labadena.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/wp-content/plugins/contextual-related-posts/css/default-style.css?ver=5.0.16","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:52.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surefap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 11:16:27 GMT","end":"Fri, 26 Jun 2026 12:14:43 GMT"},"fingerprint":{"sha1":"AD:04:25:FB:ED:EF:1B:98:DC:EA:36:C1:A0:C9:92:E4:70:62:99:7A","sha256":"AA:58:DA:C8:10:34:43:C8:E8:F9:30:CC:A8:21:F0:EC:4D:6D:A0:10:3A:B7:B9:9D:D6:1A:AD:C8:E8:D5:86:5C"}}},"request":{"raw":"GET /wp-content/plugins/contextual-related-posts/css/default-style.css?ver=5.0.16 HTTP/1.1\r\nHost: surefap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/\r\nCookie: PHPSESSID=ceec96a7b8e353025e719c038e84a6ea\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 02 Oct 2019 10:42:40 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nexpires: Sat, 04 Apr 2026 21:19:56 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 520\r\ncontent-type: text/css\r\ndate: Sat, 04 Apr 2026 20:24:52 GMT\r\nserver: cloudflare\r\nage: 295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mu22gCi2fVtPx7rf5Km6cpGtVGrdMmq973wSuLaCk0walzPDX%2FRc0k3BHZJjKlK0zpFzRJtK9o7tbCi36ycjHHTgXtIJRkXg4hEMqiBr26DLP6XvyS6c0TiJ1qTmbA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9e7309fe2b7db4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1363,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"5c2a46d80d8e38b9a9800729a664a6b6","sha1":"0b1463785186ab1a620792b8f43d1751f8c303f6","sha256":"f9e3c4ce5d67e9f988d96615c77f075446e021b9ecef80cfb210dd676b155e79","sha512":"7fdec782e385b822e076da754729853e768adb0562ca7eed00b4f450ccd63c215bbaf489b73129adeb4916e1c2f8e694a45a6aa03f6759a4512d0db39e156f15","ssdeep":"","tlshash":"bc21027500650848b90becd8eb3aa681728f5402572fec2a1a793b3ceb964d743b1349","first_seen":"2023-04-07T07:42:03Z","last_seen":"2026-04-04T20:25:32.576849Z","times_seen":28,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/ip-push.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"172.66.163.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:52.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tapioni.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:25:28 GMT","end":"Fri, 12 Jun 2026 01:25:24 GMT"},"fingerprint":{"sha1":"62:27:70:F5:AE:06:D3:FE:9E:7A:DC:6E:CE:F5:F8:8E:BA:63:9F:3F","sha256":"2B:6F:8E:1A:18:6F:7B:FF:07:69:43:A4:69:63:B1:DA:84:E0:FC:E6:37:38:71:CA:F8:33:AF:05:89:A4:74:36"}}},"request":{"raw":"GET /ip-push.js HTTP/1.1\r\nHost: cdn.tapioni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 20:24:52 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 42448\r\nserver: cloudflare\r\nlast-modified: Wed, 25 Mar 2026 09:30:30 GMT\r\netag: \"69c3ab36-a5d0\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15768000\r\nage: 804496\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 9e7309ff5a7a0b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":139234,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65498), with no line terminators","md5":"7a5ac3d4cb907610322251a453733998","sha1":"41f4e944d02782bd5bac4f15e23660834a98fe0a","sha256":"b931f217d71a13a0ea0a5f399ab7fa87d9c82a7b4d02af1ac55ef8fca163dca6","sha512":"702f7693fb40b41b2664f86720a1d4b932e702b57a42ff2751299e0ddbb6c9220ad99af6e0ee06d4a0eb9bc71ea8db0efce84c9df8e18bc62ac26f13ec3d4a16","ssdeep":"1536:gmoiFa+c41ri/y3ZHeUrfy9mT20dyBU7KhnZgek3nkk2QGFFt7JvgZS6/ae:voiFa+c4+y3ZHezCyBpk","tlshash":"77d3728cbac1b56107a37074023f540af2b73a54748bc8c0f66ad5d06ebe94f6167e6d","first_seen":"2026-03-26T18:38:07.857164Z","last_seen":"2026-04-04T20:25:32.577512Z","times_seen":24,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":4,"connect":30,"send":0,"wait":8,"receive":1,"ssl":122},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"cdn.tapioni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/wp-content/uploads/wordpress-popular-posts/66773-featured-269x170.png","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:52.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surefap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 11:16:27 GMT","end":"Fri, 26 Jun 2026 12:14:43 GMT"},"fingerprint":{"sha1":"AD:04:25:FB:ED:EF:1B:98:DC:EA:36:C1:A0:C9:92:E4:70:62:99:7A","sha256":"AA:58:DA:C8:10:34:43:C8:E8:F9:30:CC:A8:21:F0:EC:4D:6D:A0:10:3A:B7:B9:9D:D6:1A:AD:C8:E8:D5:86:5C"}}},"request":{"raw":"GET /wp-content/uploads/wordpress-popular-posts/66773-featured-269x170.png HTTP/1.1\r\nHost: surefap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/\r\nCookie: PHPSESSID=ceec96a7b8e353025e719c038e84a6ea\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 02 Oct 2019 10:55:45 GMT\r\naccept-ranges: bytes\r\ncontent-length: 55105\r\ncache-control: public, max-age=14400\r\nexpires: Sat, 04 Apr 2026 21:19:56 GMT\r\nvary: User-Agent\r\ncontent-type: image/png\r\ndate: Sat, 04 Apr 2026 20:24:52 GMT\r\nserver: cloudflare\r\nage: 295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dILh4usAxzLQGIXr6kNYA%2Fl7nqzWLKLaACK4d6u6%2BWi7pHyaO2L23BwdsXLJSrXI7cp%2F45IQ1fiDu%2FLFRFqyBWILZCFdRYy%2BXLULZ65GCXqWfkBZegxGD9hIsdA31A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e7309fe5b89b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55105,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 269 x 170, 8-bit/color RGBA, non-interlaced","md5":"aaa3048391d82d00a0cd78944174ca70","sha1":"6a53e2f11ac9990b8c61619e4640813a2e2e611c","sha256":"a134085788458f9af99bd718f345c84e1e2ad1a5b5106790ff6bd7a9bffd0ce8","sha512":"f021194a66adde54e064caecfd16b109445fd168096cdea71a339b10321e3c1f07545f431c224f070344ae665ff33fb27c3606dc6075555fc56a39f7be38f42c","ssdeep":"768:brK4BSL5b8nyuqx7wUxGA7oIP34+Qf7fHc95yP+9aaUWs63Jn4q2THBGNpKlq9H:bGia5onFA7vP34zHc95IaUsmfTHB8T","tlshash":"f433f195df9ec5e95bf7a989281682dcd79b38074f3c3134db4b9ce1b09b098b051c8a","first_seen":"2026-04-04T16:26:31.0043Z","last_seen":"2026-04-04T20:25:32.580655Z","times_seen":3,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/wp-content/uploads/wordpress-popular-posts/4925-featured-269x170.jpg","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:52.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surefap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 11:16:27 GMT","end":"Fri, 26 Jun 2026 12:14:43 GMT"},"fingerprint":{"sha1":"AD:04:25:FB:ED:EF:1B:98:DC:EA:36:C1:A0:C9:92:E4:70:62:99:7A","sha256":"AA:58:DA:C8:10:34:43:C8:E8:F9:30:CC:A8:21:F0:EC:4D:6D:A0:10:3A:B7:B9:9D:D6:1A:AD:C8:E8:D5:86:5C"}}},"request":{"raw":"GET /wp-content/uploads/wordpress-popular-posts/4925-featured-269x170.jpg HTTP/1.1\r\nHost: surefap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/\r\nCookie: PHPSESSID=ceec96a7b8e353025e719c038e84a6ea\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Sat, 04 Apr 2026 16:00:33 GMT\r\naccept-ranges: bytes\r\ncontent-length: 14509\r\ncache-control: public, max-age=14400\r\nexpires: Sat, 04 Apr 2026 21:19:56 GMT\r\nvary: User-Agent\r\ncontent-type: image/jpeg\r\ndate: Sat, 04 Apr 2026 20:24:52 GMT\r\nserver: cloudflare\r\nage: 295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sJSi19%2FdWAFQ0vGhC2OZ6jJjBw9HVaF3Hpu2488ke%2BZCl7sNvo3M8W5zjrWqffUvpPZpRGm5%2FA7lnHw28zt5HrGIzLii9nAs4Q7xFfubAIybhNXc4Y1pt%2BIdbv1d8A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e7309fe5b8cb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14509,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75\", baseline, precision 8, 269x170, components 3","md5":"e2f3ae5b87ad8e4d8d9e1fb8715e0dc8","sha1":"ab93eb3e91390455c72f40e61c6ecb96b17ce4a2","sha256":"be6fb0a929d0b57cdfa9733f0a5d6813efe917419851220d92f674898a40287d","sha512":"180fdcfbf33ec36584be59f3cfef1b7a6d923318db3dbb94cdb398840bd0c9e7d0d6447b92c37696b93dc7200ff75b3a558097843e803aaf32475657b5563182","ssdeep":"384:7R1t9HZdqu9iGaUg1gW+eJ7ODNWNXCOD6Ldu/u2GdRbT:7R1zHZdqOivUgz+kc2XCOGL8/u2GHT","tlshash":"9a52d0620df2472cffabd7b567a534c9b2405aec680ec13b4455de8796e2e7cc1c0152","first_seen":"2026-04-04T16:26:31.025983Z","last_seen":"2026-04-04T20:25:32.581761Z","times_seen":3,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/wp-content/plugins/wp-postratings/images/stars_crystal/rating_over.gif","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:57.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surefap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 11:16:27 GMT","end":"Fri, 26 Jun 2026 12:14:43 GMT"},"fingerprint":{"sha1":"AD:04:25:FB:ED:EF:1B:98:DC:EA:36:C1:A0:C9:92:E4:70:62:99:7A","sha256":"AA:58:DA:C8:10:34:43:C8:E8:F9:30:CC:A8:21:F0:EC:4D:6D:A0:10:3A:B7:B9:9D:D6:1A:AD:C8:E8:D5:86:5C"}}},"request":{"raw":"GET /wp-content/plugins/wp-postratings/images/stars_crystal/rating_over.gif HTTP/1.1\r\nHost: surefap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/\r\nCookie: PHPSESSID=ceec96a7b8e353025e719c038e84a6ea; test=test\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 02 Oct 2019 10:42:33 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1009\r\ncache-control: public, max-age=14400\r\nexpires: Sat, 04 Apr 2026 21:24:57 GMT\r\nvary: User-Agent\r\ncontent-type: image/gif\r\ndate: Sat, 04 Apr 2026 20:24:57 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7pmJKfu9kMkMr9UrSHzpvDut7cGVbrNntnd5yLxe4I72zMKcwtEm8QK9xksswqGEZ2dA6cxU5HVCVcVf5kKsGCmP4JJQ%2BcZiS8pC1VhhqOmN3nAfMTUCIYnjcKTE9A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e730a1fcd87b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1009,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 16 x 16","md5":"358948a0ec900509e53396438fadea91","sha1":"c47bd41c2dfd3879ca398829ac3438fce227dd96","sha256":"d4cc3dfa1061aedf2533cf134f9d584568bc41a25090fb7ce77c5cdbec6c37e6","sha512":"ee1aea438f054866496c34a817fb09e2333f92c5fcb9c15b0a305255d69ec6141812335d797e66398ff312c68191bcb02cde810f365d7e4ec0f74bb257736126","ssdeep":"","tlshash":"8e11942a3f41892fca7802fc284125caff4f9cc511839708ee442106b264e1220ac0ec","first_seen":"2023-04-26T23:00:18Z","last_seen":"2026-04-04T20:25:32.582533Z","times_seen":622,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:52.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surefap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 11:16:27 GMT","end":"Fri, 26 Jun 2026 12:14:43 GMT"},"fingerprint":{"sha1":"AD:04:25:FB:ED:EF:1B:98:DC:EA:36:C1:A0:C9:92:E4:70:62:99:7A","sha256":"AA:58:DA:C8:10:34:43:C8:E8:F9:30:CC:A8:21:F0:EC:4D:6D:A0:10:3A:B7:B9:9D:D6:1A:AD:C8:E8:D5:86:5C"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1\r\nHost: surefap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/\r\nCookie: PHPSESSID=ceec96a7b8e353025e719c038e84a6ea\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 08 Oct 2021 05:21:15 GMT\r\naccept-ranges: bytes\r\ncache-control: private\r\nexpires: Sat, 04 Apr 2026 21:24:52 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 4014\r\ncontent-type: application/javascript\r\ndate: Sat, 04 Apr 2026 20:24:52 GMT\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7lS8BZfjBuB%2FPPrlvNVXi3CTStRsKi%2FjZeejbywmtKvOVlZXLfDjnASAuwUnMsaj2p2YMLsEiIoDXNY3Ay9n7OlDv06vL%2BFfJA%2FvvqpAwjzCU1PPJ%2BYHcZfydEBJcg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9e7309fe2b83b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10056,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9959)","md5":"7121994eec5320fbe6586463bf9651c2","sha1":"90532aff6d4121954254cdf04994d834f7ec169b","sha256":"48eb8b500ae6a38617b5738d2b3faec481922a7782246e31d2755c034a45cd5d","sha512":"b74a2f03c64e883b9a34de43690429327dfb4aa230a7a6afca8150a16e3d84e98461245ff264c26368d9904562cc34fe219f71f951d364fa5c68c039b76776cd","ssdeep":"192:kZrk/GNyd31svs7wkX8KzJcqSDdAcHX4YE5NLR:srhNyNO0kkMKzFSDdAcIYwLR","tlshash":"2e22c79db29a70625fba35f8617fc11b717a94fc2118d9e4a08c8ed1387dc9d403ab39","first_seen":"2023-03-07T01:02:37Z","last_seen":"2026-04-05T08:04:36.327291Z","times_seen":42750,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/v2-banner.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"172.66.163.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:52.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tapioni.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:25:28 GMT","end":"Fri, 12 Jun 2026 01:25:24 GMT"},"fingerprint":{"sha1":"62:27:70:F5:AE:06:D3:FE:9E:7A:DC:6E:CE:F5:F8:8E:BA:63:9F:3F","sha256":"2B:6F:8E:1A:18:6F:7B:FF:07:69:43:A4:69:63:B1:DA:84:E0:FC:E6:37:38:71:CA:F8:33:AF:05:89:A4:74:36"}}},"request":{"raw":"GET /v2-banner.js HTTP/1.1\r\nHost: cdn.tapioni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 20:24:52 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 23 Mar 2026 11:24:27 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\nstrict-transport-security: max-age=15768000\r\nage: 883078\r\ncf-cache-status: HIT\r\netag: W/\"69c122eb-af03\"\r\ncontent-encoding: br\r\ncf-ray: 9e7309ff3a680b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44803,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23136)","md5":"df74c0f70f006110b7ad6576fb94359c","sha1":"0ddc437e20a606eeabdff2cd693e17e36f91926f","sha256":"a64966d37df2395f7a93499bfee1db805326a69e569756a60fa2bd5818704cba","sha512":"3a7e4c548a9a893627975bc04a13f52aa02f045f226a6249c973cc863c292e23b6e69c83c341cea4dc2ac09f4d40ff00733a99b0426220d18b9e81282f6d60df","ssdeep":"768:qqXHdIMNXNiLndxvWlIRsIXAEXnd0iHzloVdxfpQyWiE/6Ua7HO7G+HN8e6bA+OM:q67cLdeMWiT4Jzb+dfA","tlshash":"2013d68d72a6b07583e654b9403f5206f3367558354ac0acf66decd26c3888a9237f7c","first_seen":"2026-03-23T15:52:36.562671Z","last_seen":"2026-04-04T20:25:32.583975Z","times_seen":53,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":120,"dns":1,"connect":10,"send":0,"wait":11,"receive":0,"ssl":138},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"cdn.tapioni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4tymode.win/images/2020/11/16/7ad8c0b9bb4d6388c6a71462c5c85291.md.jpg","fqdn":"4tymode.win","domain":"4tymode.win","tld":"win"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:52.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4tymode.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 07:52:15 GMT","end":"Thu, 14 May 2026 08:49:22 GMT"},"fingerprint":{"sha1":"7E:22:CD:F7:8D:50:F1:9E:0C:72:03:71:E9:D7:77:BF:9F:3E:CD:01","sha256":"22:CF:06:73:9C:45:57:07:9E:F3:6D:90:47:09:CC:4D:63:CB:C3:29:5E:33:27:93:9D:72:BA:5D:9B:3B:CE:76"}}},"request":{"raw":"GET /images/2020/11/16/7ad8c0b9bb4d6388c6a71462c5c85291.md.jpg HTTP/1.1\r\nHost: 4tymode.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 20:24:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 60686\r\nserver: cloudflare\r\nlast-modified: Mon, 16 Nov 2020 21:09:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"5fb2ea8e-ed0e\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YvN%2Bwh6yXg7Y0FpsFK%2FoWP%2BFu%2BnZIftFnwvzaBrMZb7E6Ke3UsCbk7NnxhLf%2F3MZXQ8uEzl96J043o45C5nuhVpirVUaUKhIAeyPjSd3PhEKm%2F4ekmQ67DqI0re6Ww%3D%3D\"}]}\r\ncf-ray: 9e7309ff480c712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60686,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 300x466, components 3","md5":"536e2e928da79d3667d7ed873ab82e08","sha1":"15de16b00653588b535013c23b3315ac0f3b496e","sha256":"4083c011f24d2cafd6d02cbbe81a875033fe458972d37dadcfd2aa2dacbc9f27","sha512":"3251e6b15cbe7f60981189222016ceed9e9f2bffe2710d06360040f9413c459ba29b01eeed5c9120af9af73be4a09dc805e9dad8c5ccf36c0cb650a2a8607323","ssdeep":"1536:UJGZlnhF1rboJ9G+gNvlehurNCTv8SiKtzs:L3nZAwNvUUrNMvXiKY","tlshash":"7f5302cc3cfa5711bc614da965bd0c127bd2e791ceee38bd9af94183b1501a228a3538","first_seen":"2026-04-04T20:25:32.596886Z","last_seen":"2026-04-04T20:25:32.596886Z","times_seen":1,"resource_available":false,"data":null}},"time_used":561,"timings":{"blocked":122,"dns":4,"connect":2,"send":0,"wait":144,"receive":134,"ssl":142},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/v2-banner.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"172.66.163.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:57.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tapioni.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:25:28 GMT","end":"Fri, 12 Jun 2026 01:25:24 GMT"},"fingerprint":{"sha1":"62:27:70:F5:AE:06:D3:FE:9E:7A:DC:6E:CE:F5:F8:8E:BA:63:9F:3F","sha256":"2B:6F:8E:1A:18:6F:7B:FF:07:69:43:A4:69:63:B1:DA:84:E0:FC:E6:37:38:71:CA:F8:33:AF:05:89:A4:74:36"}}},"request":{"raw":"GET /v2-banner.js HTTP/1.1\r\nHost: cdn.tapioni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 20:24:57 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 23 Mar 2026 11:24:27 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\nstrict-transport-security: max-age=15768000\r\nage: 883083\r\ncf-cache-status: HIT\r\netag: W/\"69c122eb-af03\"\r\ncontent-encoding: br\r\ncf-ray: 9e730a1e6b000b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44803,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23136)","md5":"df74c0f70f006110b7ad6576fb94359c","sha1":"0ddc437e20a606eeabdff2cd693e17e36f91926f","sha256":"a64966d37df2395f7a93499bfee1db805326a69e569756a60fa2bd5818704cba","sha512":"3a7e4c548a9a893627975bc04a13f52aa02f045f226a6249c973cc863c292e23b6e69c83c341cea4dc2ac09f4d40ff00733a99b0426220d18b9e81282f6d60df","ssdeep":"768:qqXHdIMNXNiLndxvWlIRsIXAEXnd0iHzloVdxfpQyWiE/6Ua7HO7G+HN8e6bA+OM:q67cLdeMWiT4Jzb+dfA","tlshash":"2013d68d72a6b07583e654b9403f5206f3367558354ac0acf66decd26c3888a9237f7c","first_seen":"2026-03-23T15:52:36.562671Z","last_seen":"2026-04-04T20:25:32.583975Z","times_seen":53,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"cdn.tapioni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/wp-content/themes/FinanceDesk/lib/js/jquery.mobilemenu.js?ver=5.0.16","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:52.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surefap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 11:16:27 GMT","end":"Fri, 26 Jun 2026 12:14:43 GMT"},"fingerprint":{"sha1":"AD:04:25:FB:ED:EF:1B:98:DC:EA:36:C1:A0:C9:92:E4:70:62:99:7A","sha256":"AA:58:DA:C8:10:34:43:C8:E8:F9:30:CC:A8:21:F0:EC:4D:6D:A0:10:3A:B7:B9:9D:D6:1A:AD:C8:E8:D5:86:5C"}}},"request":{"raw":"GET /wp-content/themes/FinanceDesk/lib/js/jquery.mobilemenu.js?ver=5.0.16 HTTP/1.1\r\nHost: surefap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/\r\nCookie: PHPSESSID=ceec96a7b8e353025e719c038e84a6ea\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 02 Oct 2019 10:47:40 GMT\r\naccept-ranges: bytes\r\ncache-control: private\r\nexpires: Sat, 04 Apr 2026 21:24:52 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 825\r\ncontent-type: application/javascript\r\ndate: Sat, 04 Apr 2026 20:24:52 GMT\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XiDHLrn1vMcoJvOKyXopE2DlXA7U7%2F8ZRMSYV4ieINFF8AXq8UvcSkRnOpKfs1yvRCEVtdXUXIRllRRkDNezMoTBd0PhavOTwYbGA1%2FqM799V9v3FuvfmoKc8gPtVQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9e7309fe3b85b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1933,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"d1679a6e1ac2c7d4a3833d0e0f6817aa","sha1":"6cfedc0f44d365b5b6ac3ac5f7b2f3823affdad1","sha256":"213e63893ec0225742fadfa45cc6a9e8531761a145cd94c989f71082f7d55938","sha512":"c72b361a11b7fccf8c0d5ba22f56b4d9e69b4c5078284dddc6a9bd25ade32078e715c4363eebf43e1f75eeb5b366d679724ed967ca6852e7bc8ca8b2aa77a1bb","ssdeep":"","tlshash":"ea41758cf12e14adc5eb2977962c26c07b7e41659622a42270bc09fc0ed449d53f5fb5","first_seen":"2023-03-07T01:11:59Z","last_seen":"2026-04-04T20:25:32.59972Z","times_seen":209,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4tymode.win/images/2020/11/16/bb3d602d248fc84f86b485b62bcdfd26.md.jpg","fqdn":"4tymode.win","domain":"4tymode.win","tld":"win"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:52.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4tymode.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 07:52:15 GMT","end":"Thu, 14 May 2026 08:49:22 GMT"},"fingerprint":{"sha1":"7E:22:CD:F7:8D:50:F1:9E:0C:72:03:71:E9:D7:77:BF:9F:3E:CD:01","sha256":"22:CF:06:73:9C:45:57:07:9E:F3:6D:90:47:09:CC:4D:63:CB:C3:29:5E:33:27:93:9D:72:BA:5D:9B:3B:CE:76"}}},"request":{"raw":"GET /images/2020/11/16/bb3d602d248fc84f86b485b62bcdfd26.md.jpg HTTP/1.1\r\nHost: 4tymode.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 20:24:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 62596\r\nserver: cloudflare\r\nlast-modified: Mon, 16 Nov 2020 21:09:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"5fb2ea8f-f484\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O7oaYNs4Bxw8tNGfMP6dUvWG6B%2Fxn89CRC25NcTb2xVXYhO0FcW6tGE6KxY1LP3ztYVlexv5L9ClLGhKJpvPxme2lqH7l3pP73iWKzLnk3P4ukaxxgTqoo3ZyBJLDw%3D%3D\"}]}\r\ncf-ray: 9e7309ff480f712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62596,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 300x466, components 3","md5":"e3a26fdb514ca848b6b0d95409c60c40","sha1":"5b38a411852255df0b5c55c92b483984f9c33df8","sha256":"fa9fe8311b825891a0fd733380bd52dc16e17e63b3411be78acefd656b329347","sha512":"ae35d7c55ee6a5407597f84d6fbb00afe05bb426d9878f19e5065aad613bb3f9b6b12d1fb55fa5d31f6a7214747dd93ff07974c596d07e0d017e087d189de1aa","ssdeep":"1536:U86Tb7PMRB3idZa9mxZOChghBG69ShTl12z7abNwYP5TSVU43xj:oIfSdZ3WqmBX96lQvabBF43xj","tlshash":"4d53022b956104a4737dbae2de5cec03bafc9f510965ecf3c2d276029ac9e00f91512d","first_seen":"2026-04-04T20:25:32.600895Z","last_seen":"2026-04-04T20:25:32.600895Z","times_seen":1,"resource_available":false,"data":null}},"time_used":562,"timings":{"blocked":120,"dns":4,"connect":2,"send":0,"wait":145,"receive":135,"ssl":140},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-04T20:24:51.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surefap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 11:16:27 GMT","end":"Fri, 26 Jun 2026 12:14:43 GMT"},"fingerprint":{"sha1":"AD:04:25:FB:ED:EF:1B:98:DC:EA:36:C1:A0:C9:92:E4:70:62:99:7A","sha256":"AA:58:DA:C8:10:34:43:C8:E8:F9:30:CC:A8:21:F0:EC:4D:6D:A0:10:3A:B7:B9:9D:D6:1A:AD:C8:E8:D5:86:5C"}}},"request":{"raw":"GET /darkstalkers/darkstalkers-fred-perry-stalkers-afterdark HTTP/1.1\r\nHost: surefap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 04 Apr 2026 20:24:51 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, private, must-revalidate\r\npragma: no-cache\r\nset-cookie: PHPSESSID=ceec96a7b8e353025e719c038e84a6ea; path=/\r\nvary: User-Agent\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yleGn%2FpzPCyfsRQci8dCY9O0P1%2BO9y2hRjZxBY4bSfIROdEoyx%2BvRZxWmMYTVlmKBn7APupFIDTPwD%2Fe3CUWN8%2BUUwf9wPAn8vQiaIxQN3%2FBMRcDGI3IH%2FcPSfy3dQ%3D%3D\"}]}\r\ncf-ray: 9e7309f8fa3f5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84779,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T07:47:05.597876Z","times_seen":13365748,"resource_available":true,"data":null}},"time_used":333,"timings":{"blocked":21,"dns":1,"connect":1,"send":0,"wait":290,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/more_comix2.jpg","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:52.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surefap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 11:16:27 GMT","end":"Fri, 26 Jun 2026 12:14:43 GMT"},"fingerprint":{"sha1":"AD:04:25:FB:ED:EF:1B:98:DC:EA:36:C1:A0:C9:92:E4:70:62:99:7A","sha256":"AA:58:DA:C8:10:34:43:C8:E8:F9:30:CC:A8:21:F0:EC:4D:6D:A0:10:3A:B7:B9:9D:D6:1A:AD:C8:E8:D5:86:5C"}}},"request":{"raw":"GET /more_comix2.jpg HTTP/1.1\r\nHost: surefap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/\r\nCookie: PHPSESSID=ceec96a7b8e353025e719c038e84a6ea\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Sun, 30 Jun 2024 12:06:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 199712\r\ncache-control: public, max-age=14400\r\nexpires: Sat, 04 Apr 2026 21:19:56 GMT\r\nvary: User-Agent\r\ncontent-type: image/jpeg\r\ndate: Sat, 04 Apr 2026 20:24:52 GMT\r\nserver: cloudflare\r\nage: 295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wJCQa4BXA0tpC2XdKZ6q7FVs%2BGjjPASKf9bgSpg0bOttU2YhP6xDy20V5c13NvjzGhpyUUIIsfQ%2BiEr9crsLGDX2CQKPW0rMfR6A4SeVR3RQEvlkjSJaa3oi1rDyUA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e7309fe5b88b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":199712,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=3, software=paint.net 4.0.9], baseline, precision 8, 400x483, components 3","md5":"b1b151ed326dda9b7785f449dd4ed014","sha1":"0cbe924abf4f0eff73c25efec2308c041a16f018","sha256":"c5b2e49dee7fd63c58814d81b86ee6b324c43a78cf61f1b7302b31ca01cb93ce","sha512":"5a6b9acf7bc39022f4e972d5a6c6433658f504fe29321e15600cfcfb94c52fcd123f1e6fa4d16908fe9564fa12d34f7af36014863be3757f468c22e88371365c","ssdeep":"6144:JXSkJYRwWwdnDCdjrtc+kLoP0RFojDwttvnUTs:tZY2zgjZkLNRFcQNnUTs","tlshash":"a61413ee9334202e8de397b499fdcb54607060517b41d3a4e8ae63a1c2eda4ec539f5c","first_seen":"2025-09-24T10:44:21.157465Z","last_seen":"2026-04-04T20:25:32.602334Z","times_seen":11,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":134,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/wp-content/plugins/wp-postratings/postratings-js.js?ver=1.82","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:52.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surefap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 11:16:27 GMT","end":"Fri, 26 Jun 2026 12:14:43 GMT"},"fingerprint":{"sha1":"AD:04:25:FB:ED:EF:1B:98:DC:EA:36:C1:A0:C9:92:E4:70:62:99:7A","sha256":"AA:58:DA:C8:10:34:43:C8:E8:F9:30:CC:A8:21:F0:EC:4D:6D:A0:10:3A:B7:B9:9D:D6:1A:AD:C8:E8:D5:86:5C"}}},"request":{"raw":"GET /wp-content/plugins/wp-postratings/postratings-js.js?ver=1.82 HTTP/1.1\r\nHost: surefap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/\r\nCookie: PHPSESSID=ceec96a7b8e353025e719c038e84a6ea\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 02 Oct 2019 10:42:33 GMT\r\naccept-ranges: bytes\r\ncache-control: private\r\nexpires: Sat, 04 Apr 2026 21:24:52 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 752\r\ncontent-type: application/javascript\r\ndate: Sat, 04 Apr 2026 20:24:52 GMT\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ew4cLbDweZ1kV5e50fjP1ECsT26%2FstjQQgIlqvgMJjCHgrGl%2BSePKgr0USyHREu2IACVwVNJnieAH5JVlXaVLOAmUSsxFAjcSIsMRb6k1jbOkj6RZI1l8j0klsPhvw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9e7309fe5b8eb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3329,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (516)","md5":"830dae7fb9dfd5ac1879a83dd028083d","sha1":"6be6afca684e3305000879ad71f264f0c6549bd1","sha256":"c42425f18923921089911e70f39c6dd462794df2e42ac0596abc3884da6471fc","sha512":"a9bab7675e178d288189b7f377b332838a6ea8455d75b445e304953cedf269268c0458dd82658fe36f523ea6c7f212167d32dac3cebece0e0400fb5a0f2666ed","ssdeep":"","tlshash":"f2614c78206c66cf8b3630f2e42559216a7d6cb5ba40ce4c965e08d71b5b1683329e1f","first_seen":"2023-03-07T01:06:47Z","last_seen":"2026-04-04T20:25:32.603436Z","times_seen":1950,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zatnoh.com/pw/waWQiOjExMDQyNzEsInNpZCI6MTE4MDUxMCwid2lkIjo0MTU2ODgsInNyYyI6Mn0=eyJ.js","fqdn":"zatnoh.com","domain":"zatnoh.com","tld":"com"},"ip":{"addr":"104.21.30.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:52.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zatnoh.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 18:50:46 GMT","end":"Wed, 27 May 2026 19:49:35 GMT"},"fingerprint":{"sha1":"FB:09:E8:2F:13:E9:63:DB:81:47:C0:FD:E7:E2:77:C0:B0:5D:E3:0E","sha256":"F6:74:58:1D:EF:BB:CD:44:3A:DD:ED:76:B4:7E:77:4A:15:DB:E0:A3:86:2E:A1:6D:EB:0D:8A:DC:DE:62:CE:EC"}}},"request":{"raw":"GET /pw/waWQiOjExMDQyNzEsInNpZCI6MTE4MDUxMCwid2lkIjo0MTU2ODgsInNyYyI6Mn0=eyJ.js HTTP/1.1\r\nHost: zatnoh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 04 Apr 2026 20:24:52 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\naccess-control-allow-origin: https://surefap.org\r\nage: 295\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FIBTwV9brzoHlru44v2k8koZcyjeSer7bU6iMHdWT7DkPByrDGRUtAGTIcaPhkt3QhJgGL7thbzD5IfpbD%2BHCater1%2BjuXBzIyQ8KhXAJ1gdavSjW9K7nW%2BFkNBr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e7309ff5b4956ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T07:47:05.597876Z","times_seen":13365748,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":9,"receive":0,"ssl":114},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/oswald/v57/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:57.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:40 GMT","end":"Mon, 08 Jun 2026 08:38:39 GMT"},"fingerprint":{"sha1":"93:71:51:4C:A3:35:66:7B:96:98:73:5F:8A:D5:61:38:29:33:E3:58","sha256":"A7:C2:55:50:7A:01:61:98:C7:16:8F:8D:72:97:DD:77:B2:9D:D8:18:29:80:41:DE:61:95:42:E5:0F:79:FE:EF"}}},"request":{"raw":"GET /s/oswald/v57/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://surefap.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 12248\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 03 Apr 2026 21:36:54 GMT\r\nexpires: Sat, 03 Apr 2027 21:36:54 GMT\r\ncache-control: public, max-age=31536000\r\nage: 82083\r\nlast-modified: Wed, 10 Sep 2025 16:46:12 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12248,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12248, version 1.0","md5":"b2a5bf57bad8445af7def71e2f49332a","sha1":"6614389ac1a58764b059d94e2f69c4e182569dd8","sha256":"e902b779e43944c300cf8ae5e4a1affa68cb8a823fd263dd2f479c4cdfbd213c","sha512":"517447cfe5fb1cdfb7700741a2f833bf2bf6b5cdb12ac38a5bfa60d1f630f42da28e05c121cc3ef1bd94cda8172f66ab9613ef18cabdc8b9803bdb3ea46ac628","ssdeep":"192:YqqOjETPdIkWeUa+UZ0eWWo1Cm6Uf3APPEMioaQ3+aZ0YMXFxfzUWEE0uZkSBIg6:Yq5jYjWeUaDiDom6EGZKYUc4kox6","tlshash":"3542b0f44c38691ae32108fc67ec857c0f11516ded1896a42de84f643aee3751772aad","first_seen":"2025-09-11T17:19:09.75806Z","last_seen":"2026-04-05T07:00:36.258222Z","times_seen":8166,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":152,"dns":27,"connect":7,"send":0,"wait":9,"receive":1,"ssl":114},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/wp-includes/css/dist/block-library/style.min.css?ver=5.0.16","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:52.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surefap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 11:16:27 GMT","end":"Fri, 26 Jun 2026 12:14:43 GMT"},"fingerprint":{"sha1":"AD:04:25:FB:ED:EF:1B:98:DC:EA:36:C1:A0:C9:92:E4:70:62:99:7A","sha256":"AA:58:DA:C8:10:34:43:C8:E8:F9:30:CC:A8:21:F0:EC:4D:6D:A0:10:3A:B7:B9:9D:D6:1A:AD:C8:E8:D5:86:5C"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=5.0.16 HTTP/1.1\r\nHost: surefap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/\r\nCookie: PHPSESSID=ceec96a7b8e353025e719c038e84a6ea\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 08 Oct 2021 05:21:15 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nexpires: Sat, 04 Apr 2026 21:19:56 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 4302\r\ncontent-type: text/css\r\ndate: Sat, 04 Apr 2026 20:24:52 GMT\r\nserver: cloudflare\r\nage: 295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hI6i4nF6cQ1hvXiDTc%2FKXyAaV6Aolo5wp7EzgVVaepGClbE%2FdscNhvW%2BcBy69VmiWv6gs4YfE7Ih5C9x3zwWipENI7qIInYuHhmesINHODJYANPbWqUDXcOENzfoVA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9e7309fe2b7cb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25658,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (25658), with no line terminators","md5":"eb1a96949e0ea0d08033d3f941bf1f3e","sha1":"8e8e16cd9105066fe8dc4f80ace8010d060f08f4","sha256":"1698abe528bb1f8e76991814a09aacb0ec7247d421ed2e4ff8f00e3fb1275712","sha512":"2ca7eebaaa23b18909ed397d629d88c8b7c296bb1e790916391c3dc0ef3870cb58f780b71c863f4e169070c87455f1ce7dc48d12896114eac8925c4ee0aa9a69","ssdeep":"384:HM5I3CB9F/Ryk/C/q/c/yKik6ME61tcMLdPoyHxRyM:HM5IfcMLdPoyHxYM","tlshash":"92b21d2563b6ccfd26afb72cdddce2943046a941d68ac7e6f412d050a20c94a5de3f1b","first_seen":"2023-04-07T00:28:24Z","last_seen":"2026-04-05T02:06:53.513867Z","times_seen":1325,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/asg_embed.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"172.66.163.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:52.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tapioni.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:25:28 GMT","end":"Fri, 12 Jun 2026 01:25:24 GMT"},"fingerprint":{"sha1":"62:27:70:F5:AE:06:D3:FE:9E:7A:DC:6E:CE:F5:F8:8E:BA:63:9F:3F","sha256":"2B:6F:8E:1A:18:6F:7B:FF:07:69:43:A4:69:63:B1:DA:84:E0:FC:E6:37:38:71:CA:F8:33:AF:05:89:A4:74:36"}}},"request":{"raw":"GET /asg_embed.js HTTP/1.1\r\nHost: cdn.tapioni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 20:24:52 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 79619\r\nserver: cloudflare\r\nlast-modified: Wed, 25 Mar 2026 09:30:30 GMT\r\netag: \"69c3ab36-13703\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15768000\r\nage: 883153\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 9e7309fe9a000b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":250257,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65503), with no line terminators","md5":"89c80bd2be315a5eb9f5970ec947467e","sha1":"fd9270f7ec0a8e1befe03f6db6cb8f4937822841","sha256":"87d01c8bef76418d6b404204277b264234631d383678b08a401d4ea563b99988","sha512":"85f719a41236f2b2f453da499d6e9bd1144254465692199f9591006e4f30d1359355e122dbff802ba35968c3e4a987ab2a154671051ab2ccfd81027c27c4baf9","ssdeep":"3072:zWwOkr1lw8QuIeaEmgBS03lXIWpzXYP2AhMQq:is1l1QzeygYGXD01A","tlshash":"3634b88db5c1b4a187a36174063f281af3773a45744ec480b62ec5d16ebea0e6d27e7c","first_seen":"2026-03-25T10:27:10.685314Z","last_seen":"2026-04-05T02:43:00.861422Z","times_seen":88,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":26,"dns":0,"connect":1,"send":0,"wait":51,"receive":11,"ssl":58},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"cdn.tapioni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4tymode.win/images/2020/11/16/8d9b4441bc81f007a2907c2f71b2b475.md.jpg","fqdn":"4tymode.win","domain":"4tymode.win","tld":"win"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:52.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4tymode.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 07:52:15 GMT","end":"Thu, 14 May 2026 08:49:22 GMT"},"fingerprint":{"sha1":"7E:22:CD:F7:8D:50:F1:9E:0C:72:03:71:E9:D7:77:BF:9F:3E:CD:01","sha256":"22:CF:06:73:9C:45:57:07:9E:F3:6D:90:47:09:CC:4D:63:CB:C3:29:5E:33:27:93:9D:72:BA:5D:9B:3B:CE:76"}}},"request":{"raw":"GET /images/2020/11/16/8d9b4441bc81f007a2907c2f71b2b475.md.jpg HTTP/1.1\r\nHost: 4tymode.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 20:24:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 63661\r\nserver: cloudflare\r\nlast-modified: Mon, 16 Nov 2020 21:09:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"5fb2ea8f-f8ad\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8wGhAesoGb5BXhicH2wopXjTUtt2jaxifUneTGdSuCezvpgqiRZcCHRFNh9y6RvmX5f8Tr%2Fm64wftmL9rE9AQKHpthHTJ8R8iOjaTgdX6QQ92jKkEaA%2FNwHT3k%2Fk%2Bg%3D%3D\"}]}\r\ncf-ray: 9e7309ff3fed712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63661,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 300x467, components 3","md5":"d8a78bfcecd986822d31fc9367423f0b","sha1":"f807066c2de61e9f71523496e5b7635460e98f2b","sha256":"f322067dd59f728f3b557dae5fbbb8cacf0c5cb115f77fbdad6d3d30ffb74ae8","sha512":"6266e0276bce2b3073406d6b3ed9da00ec0540a5d7e159e8944f2663933c45ac8d698fe68521be83b78addcb51dfdba9c1c83b387e461b8818835b2ff01c18f3","ssdeep":"1536:FA0Ekz+7oNz1o2+5K8rwV7s5Ab2hP1mGz7aMa7hW4pV:K0pzbNzaA8rCQ22ZTzOXc0","tlshash":"1553023cfb9bc3c7382057965caa9e160681d52ac255cf6b72d20bf66405ad3cc68b3d","first_seen":"2026-04-04T20:25:32.606766Z","last_seen":"2026-04-04T20:25:32.606766Z","times_seen":1,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":97,"dns":0,"connect":0,"send":0,"wait":147,"receive":135,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/wp-includes/js/comment-reply.min.js?ver=5.0.16","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:52.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surefap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 11:16:27 GMT","end":"Fri, 26 Jun 2026 12:14:43 GMT"},"fingerprint":{"sha1":"AD:04:25:FB:ED:EF:1B:98:DC:EA:36:C1:A0:C9:92:E4:70:62:99:7A","sha256":"AA:58:DA:C8:10:34:43:C8:E8:F9:30:CC:A8:21:F0:EC:4D:6D:A0:10:3A:B7:B9:9D:D6:1A:AD:C8:E8:D5:86:5C"}}},"request":{"raw":"GET /wp-includes/js/comment-reply.min.js?ver=5.0.16 HTTP/1.1\r\nHost: surefap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/\r\nCookie: PHPSESSID=ceec96a7b8e353025e719c038e84a6ea\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Sat, 23 Apr 2022 13:01:19 GMT\r\naccept-ranges: bytes\r\ncache-control: private\r\nexpires: Sat, 04 Apr 2026 21:24:52 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 580\r\ncontent-type: application/javascript\r\ndate: Sat, 04 Apr 2026 20:24:52 GMT\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jTWqzdlYyrvjsoZ6HtqC4YjlHHbzaSNsprc6JbAFnPa%2BO6kxR9MDdeTvcjj7BaagVlzkRcM4a5VR41UntQU%2Fr7AxiyFR8U%2FTt5Q%2F%2B0L%2BzIZDacCtGG0d5%2BZfYy9kvQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9e7309fe5b91b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1076,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1076), with no line terminators","md5":"9ef21a469fc37e845d6303fcfea70897","sha1":"a86ec94ec7bee9227bcdf8d6374cabe82ae43e49","sha256":"6b2e2d56e7b0e80d919bc65dd94f8cd95e57ad9298fc4fecc005301ea8339c9f","sha512":"3cb53bb9f6d50c5c01b499619c15947c7b529b52d847afd40b891908cb08d3c1b33cbe0e229b617accda88258b335b240d09e4194cf270050b817ffedec23dc0","ssdeep":"","tlshash":"21111fb431c96c726382d12c17be872a74b1131c7d0942a5c02a64b57264ed75116fed","first_seen":"2023-03-07T01:03:31Z","last_seen":"2026-04-05T02:48:17.217408Z","times_seen":2284,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/wp-includes/js/hoverIntent.min.js?ver=1.8.1","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:52.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surefap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 11:16:27 GMT","end":"Fri, 26 Jun 2026 12:14:43 GMT"},"fingerprint":{"sha1":"AD:04:25:FB:ED:EF:1B:98:DC:EA:36:C1:A0:C9:92:E4:70:62:99:7A","sha256":"AA:58:DA:C8:10:34:43:C8:E8:F9:30:CC:A8:21:F0:EC:4D:6D:A0:10:3A:B7:B9:9D:D6:1A:AD:C8:E8:D5:86:5C"}}},"request":{"raw":"GET /wp-includes/js/hoverIntent.min.js?ver=1.8.1 HTTP/1.1\r\nHost: surefap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/\r\nCookie: PHPSESSID=ceec96a7b8e353025e719c038e84a6ea\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Sat, 23 Apr 2022 13:01:21 GMT\r\naccept-ranges: bytes\r\ncache-control: private\r\nexpires: Sat, 04 Apr 2026 21:24:52 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 464\r\ncontent-type: application/javascript\r\ndate: Sat, 04 Apr 2026 20:24:52 GMT\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=meZp%2FHtCPFTLeYNiKSlL5f%2BlD1mBZH2KbSLQAKHQp6y8ThZFKPsb3pnVlN%2FvwCpCFd7cbGd9Vq8hnkT3Z71UoiufTOUUmt0hC31xvq90FsKOPx8xJr43hjBb%2BCR3tA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9e7309fe5b8db4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1087,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1087), with no line terminators","md5":"3dc5811cb7bb6e67b9054c8c39f9f4c9","sha1":"ced11144eb84a14db2b3b0ab92998128c5e88204","sha256":"124f0860b7201dc2fa46889b30ac0e4269e84ac2e71c33dc025ed14ed15bd8f0","sha512":"c7e73c3d0735a6ed46997d76bd081592db532b8ebdbfe0d76bb6aa85202e6a212932fffae35dc2639da29fcc76075849318d33196267119fa2f73658d1f8cee8","ssdeep":"","tlshash":"7411ab8e1b86a88a2383e124e53b38bd7f731e13ec8105567373648e1fdce745302a29","first_seen":"2023-03-07T01:10:31Z","last_seen":"2026-04-04T20:25:32.609313Z","times_seen":1065,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/wp-includes/js/swfobject.js?ver=2.2-20120417","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:52.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surefap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 11:16:27 GMT","end":"Fri, 26 Jun 2026 12:14:43 GMT"},"fingerprint":{"sha1":"AD:04:25:FB:ED:EF:1B:98:DC:EA:36:C1:A0:C9:92:E4:70:62:99:7A","sha256":"AA:58:DA:C8:10:34:43:C8:E8:F9:30:CC:A8:21:F0:EC:4D:6D:A0:10:3A:B7:B9:9D:D6:1A:AD:C8:E8:D5:86:5C"}}},"request":{"raw":"GET /wp-includes/js/swfobject.js?ver=2.2-20120417 HTTP/1.1\r\nHost: surefap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/\r\nCookie: PHPSESSID=ceec96a7b8e353025e719c038e84a6ea\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 08 Oct 2021 05:21:15 GMT\r\naccept-ranges: bytes\r\ncache-control: private\r\nexpires: Sat, 04 Apr 2026 21:24:52 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 3949\r\ncontent-type: application/javascript\r\ndate: Sat, 04 Apr 2026 20:24:52 GMT\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vLm%2BWHqONS7glvnau3XTlmMdKUlShZRWrHobzc3LKMjvDynxaO2H4DOHh7nEfd8WOeukWw2scCk2H1jr24V0947Fq6FCf3LT85zX1UyBgrq1U8%2F9BiZ04YFOvohXUw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9e7309fe2b81b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10231,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10082)","md5":"9ffdba2cff497d701684657e329871f5","sha1":"693465e9d9376fd4d2fcd45ffc24f735e1159312","sha256":"5fc71212d5f80194f946cc9239d030aae8b51879ec22bd6f9a793c49e543d1c0","sha512":"5da070d4040661bd167ef22c6f81c7dc6a9ed79f9cc6c662750b9eb3b1f2048e8d782536996ea7c54e961cd514313314ebfa724409cd2f0440d884288c9ecffa","ssdeep":"192:dEBsWGAZvwGxP1hNWwI9V0YOOsFbkRHeZtyIVyX8c727LMoOyXoy7NgvZ4xsnyQ/:dAsWGAZvwGxP1hNWwI9V0YO1NkRHezyV","tlshash":"1122a6aab6483336abc521e144bf894671b0f532558cc1b0c572e4b02e7cca9a5b7f7d","first_seen":"2023-03-07T01:11:59Z","last_seen":"2026-04-04T20:25:32.609976Z","times_seen":945,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/ljekdimdzcz.php","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:52.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surefap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 11:16:27 GMT","end":"Fri, 26 Jun 2026 12:14:43 GMT"},"fingerprint":{"sha1":"AD:04:25:FB:ED:EF:1B:98:DC:EA:36:C1:A0:C9:92:E4:70:62:99:7A","sha256":"AA:58:DA:C8:10:34:43:C8:E8:F9:30:CC:A8:21:F0:EC:4D:6D:A0:10:3A:B7:B9:9D:D6:1A:AD:C8:E8:D5:86:5C"}}},"request":{"raw":"GET /ljekdimdzcz.php HTTP/1.1\r\nHost: surefap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/\r\nCookie: PHPSESSID=ceec96a7b8e353025e719c038e84a6ea\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=120, private, must-revalidate\r\nexpires: Sat, 04 Apr 2026 21:24:52 GMT\r\nvary: User-Agent\r\ncontent-length: 0\r\ncontent-type: application/javascript\r\ndate: Sat, 04 Apr 2026 20:24:57 GMT\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3WUKpA8mqJeAv5J28v1Vll2zmGJhfTt1yiTYMbHh09YW84%2F2OEkZKDylJBq1iL0QlYaglgqaJSnObmilA%2BEp7s4seaPyz3iSalZgVlKpGhGld%2BevdL4PZah0DeL0Aw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9e7309fe3b86b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T07:47:05.597876Z","times_seen":13365748,"resource_available":true,"data":null}},"time_used":5057,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5057,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4tymode.win/images/2020/11/16/80662507f49e3c3e1a6ff054f189570c.md.jpg","fqdn":"4tymode.win","domain":"4tymode.win","tld":"win"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:52.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4tymode.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 07:52:15 GMT","end":"Thu, 14 May 2026 08:49:22 GMT"},"fingerprint":{"sha1":"7E:22:CD:F7:8D:50:F1:9E:0C:72:03:71:E9:D7:77:BF:9F:3E:CD:01","sha256":"22:CF:06:73:9C:45:57:07:9E:F3:6D:90:47:09:CC:4D:63:CB:C3:29:5E:33:27:93:9D:72:BA:5D:9B:3B:CE:76"}}},"request":{"raw":"GET /images/2020/11/16/80662507f49e3c3e1a6ff054f189570c.md.jpg HTTP/1.1\r\nHost: 4tymode.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 20:24:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 62290\r\nserver: cloudflare\r\nlast-modified: Mon, 16 Nov 2020 21:09:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"5fb2ea8d-f352\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=11yfxtlpJwpUZljky%2FL%2B179EZX3WTNaNbvkCtae%2FnsSge6JSRHehPZrPbvlch4QfhYnAVpodLLeaqePddxrdULf5Szn51XicWWxSFIWO7RNOPvnp%2FC9aB0qnjFkgnA%3D%3D\"}]}\r\ncf-ray: 9e7309ff480a712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62290,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 300x466, components 3","md5":"99f2b487cb27082c20b141279ac852ed","sha1":"8fc549533fc9689b858d7434be717d3034f912bd","sha256":"71e84506c2a759ec2e8735bcd850509e202e67874b56f04e33f44a32a98de25f","sha512":"f37c6ae7b234c4ba83ac164cf5e56dcd6ff258e1c3ccf00e693fc6fcca7a04de4c052417b628b3b2df5ed69e0ff51b6e35d029961530c28785092678f183e490","ssdeep":"1536:Uaue7qePlEcOT1E2DTlC85NbQeJ4MrWyyEh3UE4:HhuE+O2tCi9CMLh3UH","tlshash":"1f53023b271e26fb358c36da983829269c804c18b7eff397b39d8de6de1490557c0264","first_seen":"2026-04-04T20:25:32.610681Z","last_seen":"2026-04-04T20:25:32.610681Z","times_seen":1,"resource_available":false,"data":null}},"time_used":553,"timings":{"blocked":125,"dns":4,"connect":2,"send":0,"wait":141,"receive":127,"ssl":131},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/wp-content/uploads/wordpress-popular-posts/34438-featured-269x170.jpg","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:52.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surefap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 11:16:27 GMT","end":"Fri, 26 Jun 2026 12:14:43 GMT"},"fingerprint":{"sha1":"AD:04:25:FB:ED:EF:1B:98:DC:EA:36:C1:A0:C9:92:E4:70:62:99:7A","sha256":"AA:58:DA:C8:10:34:43:C8:E8:F9:30:CC:A8:21:F0:EC:4D:6D:A0:10:3A:B7:B9:9D:D6:1A:AD:C8:E8:D5:86:5C"}}},"request":{"raw":"GET /wp-content/uploads/wordpress-popular-posts/34438-featured-269x170.jpg HTTP/1.1\r\nHost: surefap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/\r\nCookie: PHPSESSID=ceec96a7b8e353025e719c038e84a6ea\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 02 Oct 2019 10:55:43 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12267\r\ncache-control: public, max-age=14400\r\nexpires: Sat, 04 Apr 2026 21:19:56 GMT\r\nvary: User-Agent\r\ncontent-type: image/jpeg\r\ndate: Sat, 04 Apr 2026 20:24:52 GMT\r\nserver: cloudflare\r\nage: 295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p2lRN9Sqa%2BRIf5Y5M4a5odnoWu1QQT%2B1oCBe0%2Ft7l835wC9qXos7ZC584bZhuZrVdENwPdBS%2Fr6XaNxRbjITmD%2BwhU5LeC7JNBscdqK18qE33aWZYFqJGizTubu9lA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e7309fe5b8ab4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12267,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75\", baseline, precision 8, 269x170, components 3","md5":"102945c3e7bdc533d0b00864f7e083a4","sha1":"62f14285583048edd2e39c43cd3c7c44f1daf7d0","sha256":"32a2dad73ac77d109913110b1815f4cd472bcc0497e101c006a6e703cb48050d","sha512":"5a571c0a7a951737ffbdd315fb086ee70d90319b53dc8b0ccccec7faf4287a0b1138280e2b3859029863482185b9bd36eeaca55864fadd2c4858a58cf4423c94","ssdeep":"192:36PNdzKjxFGY2ZgrxjfgRBrMV/yTcNuTtYjV7BaVfjFf8oycUkv8tZT+:qPiFY0c2yYNCeVqrN8oycUaYT+","tlshash":"b342d0156a0ec7558b7304aee6b3295363302c19d0bf59702b18ac24edb5c39f46bdcc","first_seen":"2026-04-04T11:05:46.183424Z","last_seen":"2026-04-04T20:25:32.612945Z","times_seen":4,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a.labadena.com/api/users/23307?host=surefap.org\u0026ev=229\u0026wh=1024\u0026ww=1280\u0026uuid=\u0026url=https%3A%2F%2Fsurefap.org%2Fdarkstalkers%2Fdarkstalkers-fred-perry-stalkers-afterdark%2F\u0026sid=09b26a72-34b1-46c9-81ad-cba4d2748bc4\u0026i=1\u0026kw=Surefap%2CSurefap.org%2Cfree%2Cpic%2Cporn%2Ctoon%2Cblowjob%2Cboobs%2Cfingering%2Cfuck%2Cnude%2Cpaizuri%2Cporno%2Cpussy%20licking\u0026url=https%3A%2F%2Fsurefap.org%2Fdarkstalkers%2Fdarkstalkers-fred-perry-stalkers-afterdark%2F","fqdn":"a.labadena.com","domain":"labadena.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:57.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.labadena.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 23:28:39 GMT","end":"Sun, 31 May 2026 23:28:38 GMT"},"fingerprint":{"sha1":"80:BB:CD:92:6C:A2:5B:EC:58:98:ED:8F:C1:F7:5D:EF:C0:AB:7F:3C","sha256":"0A:52:79:C8:EE:68:42:BA:A5:F4:3C:B4:D1:DD:19:37:30:23:31:A9:B0:7F:09:4D:FC:49:D6:71:E0:D9:E5:16"}}},"request":{"raw":"GET /api/users/23307?host=surefap.org\u0026ev=229\u0026wh=1024\u0026ww=1280\u0026uuid=\u0026url=https%3A%2F%2Fsurefap.org%2Fdarkstalkers%2Fdarkstalkers-fred-perry-stalkers-afterdark%2F\u0026sid=09b26a72-34b1-46c9-81ad-cba4d2748bc4\u0026i=1\u0026kw=Surefap%2CSurefap.org%2Cfree%2Cpic%2Cporn%2Ctoon%2Cblowjob%2Cboobs%2Cfingering%2Cfuck%2Cnude%2Cpaizuri%2Cporno%2Cpussy%20licking\u0026url=https%3A%2F%2Fsurefap.org%2Fdarkstalkers%2Fdarkstalkers-fred-perry-stalkers-afterdark%2F HTTP/1.1\r\nHost: a.labadena.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 20:24:57 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nset-cookie: nauid=epnyS925bOH6VpedKB1r; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; Secure; SameSite=None\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":688,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (368)","md5":"fcdb1b32deb29c351541d8b4fa471c02","sha1":"b4c3f3087cfd4c44f0ae777ba71b7593a714db18","sha256":"6ea95fcc26d2ef84c0bed31e2082277634d6fbe57ddfe04ffebcde290112b87c","sha512":"090a279998cd23af43b4ff6d492bb11c3fe7640b14f164b2e5067fcc04973aae6b3dc2f8c094f78bd101811d94b8e7c69f56008bfacb150465ffb35f4a149b2c","ssdeep":"","tlshash":"4d012d88879ca8f65b8c40b3fd3e0eb6ad8c49352704801bfb24071e14ce18203e41ab","first_seen":"2026-04-04T20:25:32.614223Z","last_seen":"2026-04-04T20:25:32.614223Z","times_seen":1,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"a.labadena.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"surefap.org/wp-content/themes/FinanceDesk/images/background_surefap.jpg","fqdn":"surefap.org","domain":"surefap.org","tld":"org"},"ip":{"addr":"172.67.191.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:57.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surefap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 11:16:27 GMT","end":"Fri, 26 Jun 2026 12:14:43 GMT"},"fingerprint":{"sha1":"AD:04:25:FB:ED:EF:1B:98:DC:EA:36:C1:A0:C9:92:E4:70:62:99:7A","sha256":"AA:58:DA:C8:10:34:43:C8:E8:F9:30:CC:A8:21:F0:EC:4D:6D:A0:10:3A:B7:B9:9D:D6:1A:AD:C8:E8:D5:86:5C"}}},"request":{"raw":"GET /wp-content/themes/FinanceDesk/images/background_surefap.jpg HTTP/1.1\r\nHost: surefap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/wp-content/themes/FinanceDesk/style.css\r\nCookie: PHPSESSID=ceec96a7b8e353025e719c038e84a6ea\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 02 Oct 2019 10:47:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 269711\r\ncache-control: public, max-age=14400\r\nexpires: Sat, 04 Apr 2026 21:20:01 GMT\r\nvary: User-Agent\r\ncontent-type: image/jpeg\r\ndate: Sat, 04 Apr 2026 20:24:57 GMT\r\nserver: cloudflare\r\nage: 295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FeanvHuLrKoNomdRVnNfqJXkljWNDagZC66RNJ%2BZdbqm7PEIbXR56nwcpaFbp0uwz2Q8uPHvid4Bwp3sAz7i%2BX%2B%2BsHVj03HH4SuCOWYjWWbXm%2BTXC7XHR5J9iGYuEw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e730a1ddd6db4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":269711,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 4.0.9], baseline, precision 8, 2000x1700, components 3","md5":"d30a4392660ba150ffcb590ecf3b959f","sha1":"917018a795e409303eecc5e560c2cc4db2785978","sha256":"5c0dbdd917d6c17e86dd3a82d570982be15b5f6e6e570fc9408e5939637dc7fa","sha512":"f8ad7ff32b25cc37f2805505da0f915f115fb5825be80e81306ca6380d5551a7e96154b442c62fa67e8d919eb3285e98e3d518ac77222460f919f71b780b0f43","ssdeep":"6144:ZxR7A2AJABujWjhVg0mr4NSBLRfb5T82MKYM3bBR3va5l:Z77A2Buqjhdg4Nu+2YM3NRfa5l","tlshash":"5f447d434c05aac3a52c87d5b98b1dec2e052b1cf5a53eeb06324fdb76602679cdf069","first_seen":"2023-06-10T06:54:47Z","last_seen":"2026-04-04T20:25:32.616515Z","times_seen":19,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"surefap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4tymode.win/images/2020/11/16/5029b2f506cf31456e68bf868ba34a25.md.jpg","fqdn":"4tymode.win","domain":"4tymode.win","tld":"win"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://surefap.org/darkstalkers/darkstalkers-fred-perry-stalkers-afterdark/","date":"2026-04-04T20:24:52.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4tymode.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 07:52:15 GMT","end":"Thu, 14 May 2026 08:49:22 GMT"},"fingerprint":{"sha1":"7E:22:CD:F7:8D:50:F1:9E:0C:72:03:71:E9:D7:77:BF:9F:3E:CD:01","sha256":"22:CF:06:73:9C:45:57:07:9E:F3:6D:90:47:09:CC:4D:63:CB:C3:29:5E:33:27:93:9D:72:BA:5D:9B:3B:CE:76"}}},"request":{"raw":"GET /images/2020/11/16/5029b2f506cf31456e68bf868ba34a25.md.jpg HTTP/1.1\r\nHost: 4tymode.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://surefap.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 20:24:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 67546\r\nserver: cloudflare\r\nlast-modified: Mon, 16 Nov 2020 21:09:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"5fb2ea8d-107da\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1WixxF5n9AGSt1zRfvmdnwaolPARxwa5ozMvSIak6JsNYw3d5uGxk3g24VWW3RBYPqBdFtd3%2B5uLxeO00zI3hCj774Pe6HZbqTqrlTDmoEon5zr7icbqA%2BogFiuKSQ%3D%3D\"}]}\r\ncf-ray: 9e7309ff2fec712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67546,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 300x466, components 3","md5":"f2e1e45b45195129c94f7b440ba6bcdc","sha1":"1fadfcc1e07f6722979433daa9ccaaf8148245e0","sha256":"4effbe89225f05ddd02d4c8ec8478153b48fa73b44625cadaf44edada434162b","sha512":"c66e68ea373b689696d78ff581710d2e430cac048969847813750b932da501b9faf6de3e515006111877604da8ea830ec7865c27698d170db1d786b4fee8c16e","ssdeep":"1536:UzVbk+AupVIjh7tdfTbPQHHTeMRaLxBKgOvG6eaTSiSdUQ:KVrAupV+tZDQHJRaLiOLisUQ","tlshash":"b86301ee210bd6c8a8a640a71c2f09fd58fdcacb816d18c03dea526775914c9d50be8f","first_seen":"2026-04-04T20:25:32.617392Z","last_seen":"2026-04-04T20:25:32.617392Z","times_seen":1,"resource_available":false,"data":null}},"time_used":535,"timings":{"blocked":114,"dns":4,"connect":2,"send":0,"wait":144,"receive":134,"ssl":128},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}