{"report_id":"8d65f42a-364f-409d-9ce1-103c4eac707e","version":6,"status":"done","tags":[],"date":"2025-10-13T03:48:40Z","url":{"schema":"http","addr":"fapdrop.com/download/?dldata={\"urls\":[[\"https://workupload.com/file/xeguUD2TLxT\",\"https://gofile.io/d/WmOdiD\",\"https://buzzheavier.com/9tx3untaas0e\"]],\"titles\":[[\"Workupload\",\"Gofile.io\",\"Buzzheavier\"]],\"platforms\":[\"Windows,%20Linux\"]}","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"172.67.216.244","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"title":"Fapdrop"},"submit":{"url":{"schema":"http","addr":"fapdrop.com/download/?dldata={\"urls\":[[\"https://workupload.com/file/xeguUD2TLxT\",\"https://gofile.io/d/WmOdiD\",\"https://buzzheavier.com/9tx3untaas0e\"]],\"titles\":[[\"Workupload\",\"Gofile.io\",\"Buzzheavier\"]],\"platforms\":[\"Windows,%20Linux\"]}","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"172.67.216.244","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-17T03:48:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":12}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"dowryhandgripballot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"dowryhandgripballot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"dowryhandgripballot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-12T22:12:25.402635Z","alert_count":0,"request_count":1,"received_data":7430,"sent_data":550,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fapdrop.com","ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-01-27","domain_rank":2144081,"first_seen":"2019-05-16T15:54:45Z","last_seen":"2025-10-09T23:51:35.680888Z","alert_count":0,"request_count":35,"received_data":1451725,"sent_data":25623,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Kadence WP Blocks","description":"Kadence Blocks is a plugin for WordPress that provides a collection of custom blocks for the WordPress Block Editor, allowing users to create custom layouts and designs for their website without needing to know how to code.","website":"https://www.kadencewp.com/kadence-blocks/","common_platform_enumeration":"","icon":"Kadence WP.svg","categories":["WordPress plugins"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Perfmatters","description":"Perfmatters is a performance optimisation plugin for WordPress websites.","website":"https://perfmatters.io","common_platform_enumeration":"","icon":"Perfmatters.svg","categories":["WordPress plugins","Performance"]},{"name":"PHP:8.3.26","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"cdn.storageimagedisplay.com","ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-09-13","domain_rank":170153,"first_seen":"2024-09-13T12:56:32Z","last_seen":"2025-10-12T22:34:06.069164Z","alert_count":0,"request_count":4,"received_data":287915,"sent_data":1848,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.freesound.org","ip":{"addr":"37.27.227.73","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"domain_registered":"2002-12-21","domain_rank":2992568,"first_seen":"2022-03-14T13:42:09Z","last_seen":"2025-10-09T00:50:59.621706Z","alert_count":0,"request_count":1,"received_data":7228,"sent_data":530,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"poweredby.jads.co","ip":{"addr":"92.222.100.135","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"domain_registered":"2012-05-17","domain_rank":172301,"first_seen":"2019-12-04T10:34:12Z","last_seen":"2025-10-06T17:31:45.254744Z","alert_count":0,"request_count":6,"received_data":24054,"sent_data":2472,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"torchfriendlypay.com","ip":{"addr":"192.243.59.12","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"domain_registered":"2024-09-01","domain_rank":191479,"first_seen":"2025-07-30T13:31:49.539518Z","last_seen":"2025-10-13T01:19:48.704284Z","alert_count":9,"request_count":3,"received_data":14788,"sent_data":6547,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"professionaltrafficmonitor.com","ip":{"addr":"3.125.105.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2025-01-23","domain_rank":16376,"first_seen":"2025-01-25T08:56:07.448138Z","last_seen":"2025-10-12T22:34:05.876953Z","alert_count":0,"request_count":2,"received_data":840,"sent_data":890,"comment":"","tags":null,"fingerprints":null},{"fqdn":"skinnycrawlinglax.com","ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-01","domain_rank":38609,"first_seen":"2025-07-09T22:28:05.771371Z","last_seen":"2025-10-06T03:40:54.177944Z","alert_count":21,"request_count":7,"received_data":37211,"sent_data":13780,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"kettledroopingcontinuation.com","ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"domain_registered":"2024-09-01","domain_rank":196057,"first_seen":"2025-07-30T15:18:19.355595Z","last_seen":"2025-10-12T22:55:24.916727Z","alert_count":12,"request_count":4,"received_data":22015,"sent_data":7052,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-12T22:12:24.910527Z","alert_count":0,"request_count":1,"received_data":3361,"sent_data":485,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"dowryhandgripballot.com","ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-11-27","domain_rank":4687728,"first_seen":"2025-07-22T03:43:08.843641Z","last_seen":"2025-10-09T23:54:05.577824Z","alert_count":15,"request_count":5,"received_data":192673,"sent_data":2250,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"5e543256c480ac577d30f76f9120eb74","sha1":"d5d4cd07616a542891b7ec2d0257b3a24b69856e","sha256":"eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c","sha512":"16a332e891e86030aa9d08ab032fe026c4d4857b64902c386f3ede705373ecf9206f58d712a91a07a63dcbd14f133ab48571bfeb88927995224b299916af8fa5","ssdeep":"","tlshash":"565000000c000000003c0000000c00000000cc33030000f0c0000c0c0c0000003c0000","size":9,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-06-03T18:01:44.068018Z","times_seen":92715,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"90cfb8e974cd2d13e62b84294124be1d","sha1":"eee750f9bdb46c43598bb5a6dc8b25e8a5601a7e","sha256":"4091c04e48e8584f92d72f3eb82c401a586ab4c188e2de4efdaeedcbb3f65c7f","sha512":"21b0d36decbefd2d6a2c82179a3574ab23e0e55ae7803ebf059609e530e343f6f5d32a1c185f03f719c2dd309cd59e5c72720756bb589711fc1a48a547c545b9","ssdeep":"","tlshash":"db411b67748230e26da590be238532533a98c34b0f4d2be67c1f9ec0775022603e8de0","size":2063,"data":"","first_seen":"2025-10-13T03:48:44.646447Z","last_seen":"2025-10-13T03:48:44.646447Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"5e543256c480ac577d30f76f9120eb74","sha1":"d5d4cd07616a542891b7ec2d0257b3a24b69856e","sha256":"eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c","sha512":"16a332e891e86030aa9d08ab032fe026c4d4857b64902c386f3ede705373ecf9206f58d712a91a07a63dcbd14f133ab48571bfeb88927995224b299916af8fa5","ssdeep":"","tlshash":"565000000c000000003c0000000c00000000cc33030000f0c0000c0c0c0000003c0000","size":9,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-06-03T18:01:44.068018Z","times_seen":92715,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"febdcc57b2d22ededfc8579c9043f79e","sha1":"b91abdbfd0d4a74383dad68f9923f07053d514db","sha256":"57d8318f9c27ba9e0a9a78113b8cbf434d5f59edd3ca5308e62021dce755123b","sha512":"1258e0c0c08dc7caa06cdd4e66ba53cfe209405234ef80a20a067f3b88782851ef0dca5006ceed4163cc6ceaa62e0935c0a16ff13324c46fb80bbc0811bd45b0","ssdeep":"","tlshash":"43a002b7b582103c442271b81729758df96f0d54c790289c9b13aa30b0713d75605049","size":64,"data":"","first_seen":"2025-10-02T00:37:09.1126Z","last_seen":"2026-05-30T21:45:09.064397Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a3364a93badc8600da655ff2cb310211","sha1":"e788a29605b3f73cc95a7a7703f0cbc0596b10a0","sha256":"17810be166f0aadd000ba4fe2a6a04ff33be69b2ecb4b6b40fd16290b89e8689","sha512":"030da6184eba99ab6763ee8454f231b3b212f09c890af3d9900a382fbcede870b7eea525bad440ec346947f9bb8c72e0fec8de5fb6d32aff3e0cec0ec1cd6d8b","ssdeep":"","tlshash":"81a002b7b582107c442371b81329758df96f0d5497902a9c5b136a70b0713d7560514a","size":64,"data":"","first_seen":"2025-10-02T00:37:09.140156Z","last_seen":"2026-05-30T21:45:09.067824Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/wp-content/themes/king/layouts/js/sticky-kit.min.js","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"894bf69a88c8406680629c151343ff1e","sha1":"c51154c3433802a7b8d1a7f31e7aad54a3a2abf5","sha256":"7a39f30800c1ef8779686fd48037bb5d95fc6471cefe29e60c61f00ae2a846db","sha512":"0370375c11641aa18b80e38eb540bad194f4a94e3f72ec38598bb5379538aeaf617b965d75971cb8d463477062ee88363deb9a24bf6d6096bbafe76b302f4b50","ssdeep":"","tlshash":"946188d07751b938529da1646bae6501d1aed3bc57738060ee1e98c0185ce6a30f3fdb","size":3268,"data":"","first_seen":"2023-03-07T01:38:25Z","last_seen":"2026-06-03T12:44:12.705369Z","times_seen":5503,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/97/fc/e4/97fce4537c0f81f954d679ccebe0c47c.js","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6062294451a7a581dc74178c7c5a1332","sha1":"c8e09f671561b72bdae9fd3cfeea799629430105","sha256":"c556ffdcc50d996a51234a1dec5ae85925ffa13c788b800be900dc5eb1344d79","sha512":"5b4bcb7d6530bfa8d33d4c769d0934938af4e7842a518556021ed900fad8a06bc39c2d35494586adf34e4d6fe19095b2d41c726b8214746527e04cec9e910594","ssdeep":"192:M/H3P83adOwGuABXfKOBPpzbo3j3rFuuV6:MP/83adOwWp0j3Buz","tlshash":"fbd1a8dc768070800be7e97f776f651ab06a58501c4fe491f003a9e83d6872ed63eac1","size":6293,"data":"","first_seen":"2025-09-26T11:10:49.483616Z","last_seen":"2025-10-14T12:32:44.197235Z","times_seen":1614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/wp-content/plugins/perfmatters/js/analytics-minimal-v4.js","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca272d8b40967105fb697a83138bd811","sha1":"7e99eb7866d0ecbe94e74aff075566df844fede1","sha256":"33e34b6da946e95f38240816f55dd8e6adc7c6f76d48bb7375394aa280ddf083","sha512":"429df9f1151dbcdca575105ca144e5eca60552ceba90dc921ff98b64d40c8b328aa271c1e5230831eaa74f47af12170b2be9948e3de047f0ae05c109109d67a6","ssdeep":"","tlshash":"ab51a91e970a57f746c483c6e4672136d2253075b6818c42766edd653424bf923e3f3d","size":3009,"data":"","first_seen":"2023-11-25T16:58:09Z","last_seen":"2026-05-30T21:45:09.022766Z","times_seen":135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"5e543256c480ac577d30f76f9120eb74","sha1":"d5d4cd07616a542891b7ec2d0257b3a24b69856e","sha256":"eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c","sha512":"16a332e891e86030aa9d08ab032fe026c4d4857b64902c386f3ede705373ecf9206f58d712a91a07a63dcbd14f133ab48571bfeb88927995224b299916af8fa5","ssdeep":"","tlshash":"565000000c000000003c0000000c00000000cc33030000f0c0000c0c0c0000003c0000","size":9,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-06-03T18:01:44.068018Z","times_seen":92715,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/wp-includes/js/jquery/jquery.min.js","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-06-03T17:54:34.592617Z","times_seen":883758,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"44895e26da4702ec5b37b8e9588e5e1d","sha1":"82dd5349890663e40d6e01b6996a43f880ade3ad","sha256":"936a94002f5095ba7396410119e7b263021c43865dec035b119da1fa9f32840d","sha512":"17e0db254b30f1d748391a7eeb2998646c49c0bbdcff34eda9dba9180ccef9dac1ed04c9a5ec6c2362fb4969da1eb61e5b356ac0200dfa4b84b5c7ed504ac803","ssdeep":"","tlshash":"45a002b7b582103c443271b81329758df96f0d548794289c5b136e30b0713d75605049","size":64,"data":"","first_seen":"2025-10-02T00:37:09.1158Z","last_seen":"2026-05-30T21:45:09.049867Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/wp-content/uploads/hummingbird-assets/bbef6c42a379ffe9f271757cf558489d.js","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d8b199e3e18f67bb526b0e17cb5dabc","sha1":"5491f8460bcf50d9817ffffe4257fe1f76aa3d3b","sha256":"999ea7e2db5961d3be8a6703d08927676de7c19b01ac89b668b66f089b0eb535","sha512":"c9e1b19764744610c9de44b60339318bb53ebf0cfaf9df68035d45b99d00f0471f2afa00483660131dfdd428bad0c03bf8469183209e2a7c0737d7e1abc78a52","ssdeep":"","tlshash":"6261bf05197508e20b3e9794eeebe3252319704bff089d66eb287ce68684f556123b89","size":3282,"data":"","first_seen":"2025-10-02T00:37:09.066535Z","last_seen":"2026-05-30T21:45:08.992542Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"6609b77c109dc1772dd47cf4f862a200","sha1":"f7e508cfea1702634d6c66eb8d734ea4e6fa58d9","sha256":"adbcb4133c0b789a56c6097f84ac62505efcc920dfd786c9b9575862db109e3a","sha512":"64a1ccfcecaee34d2175891cec9e148dfd9f4d3c9e5a2fe977a94cbbb11cf3963944b9c8c0bc60cb5713226634d699ed79b50d63c4ed62025b6c28fd5f3bcf96","ssdeep":"","tlshash":"7b31f9bcd3df50fd4710e116097fa7757ea6449984c27083a538b04fa2502345a13af1","size":1524,"data":"","first_seen":"2025-10-13T03:48:44.674028Z","last_seen":"2025-10-13T03:48:44.674028Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"165a06c9457c43c2bc865524650e3654","sha1":"baa2d780c73f8ffc01bb36e534edc05b7f9a9f99","sha256":"ce993cfb34b0cc339f28248683b71379e462fabf8cae9caa55da69443ce39fbd","sha512":"14cdb9172cc3759f387cf78bb85ddf2edd0b27f590f2d7e2edb3471f761dfd0300512517f6947c2b42a95e65686becc67ff432cbb141216eeb0cf0981a15858d","ssdeep":"","tlshash":"e7c08cc55b010c12b242361e9b128389fcc1224a282e2c862a68c030a0c482a4888c88","size":145,"data":"","first_seen":"2025-10-09T23:54:07.859626Z","last_seen":"2026-05-30T21:45:09.066121Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/wp-content/themes/king/layouts/js/magnific-popup/jquery.magnific-popup.min.js","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba6cf724c8bb1cf5b084e79ff230626e","sha1":"f455c5f153f872e52265f87a644ff89fe14a6fb6","sha256":"3fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4","sha512":"22c361e44dde632dedaff2625f6631e2fb02ba3b6487097b48baa09f02cd81fd381ebb7d053f525e52e56655b1f8e2b89ddcc0a002e1b0c35c0a6920823641d7","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst","tlshash":"bd921894f2b2b21383a735b8686f70093a729952ed06c855a55d94d87efcec89037f3c","size":20216,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-03T17:50:27.676927Z","times_seen":65764,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/js/jads.js","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"92.222.100.135","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c344215f7f4c4339ef3ec474fab1d5d2","sha1":"56ae62e74a9560413819f5c829a689f11e0e8d4b","sha256":"4a80819c5ee89f3ea534b99fe485991302abc498d994ba29d5c893ac5d795f79","sha512":"77cb331606c75be717c9e04c1836c9b5c0e8011639b4063784f1159972e826b75c3d46625ca2b9e931e9934fb7febce6b9820cb0ac6692b108ff35de97f5a6e6","ssdeep":"","tlshash":"d971627733557879889b966f10ef6a18317faa310f0688025b9ce864987cdcb057fd84","size":3769,"data":"","first_seen":"2025-02-19T04:42:15.317534Z","last_seen":"2026-06-03T13:53:05.141441Z","times_seen":2503,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"76d627f110a9df87c2190a808db7bb34","sha1":"b0c074b1e0fa1c552ec6262c2e67e5c9dda8473b","sha256":"283271fe1cb8bad46ea2dc9b948787788343f2c1484a99c538840ba94f487236","sha512":"f58799b544a1b70d6ef88fc0f32d02bd047faa2898341cc061004e802674a21f11eb07e432fa394f8a4446d5abe09d0c289a08c7171cc1ec6cd96cd2bd083ab4","ssdeep":"","tlshash":"09f0f0a6afb5363182bbb03d32eee3883835410631058f12385a82814da5d4468be8fa","size":521,"data":"","first_seen":"2024-02-26T22:30:28Z","last_seen":"2026-05-30T21:45:09.09901Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c81532c27b4d24644047451b255969e","sha1":"56352716b9009cd4e5142da3bba28e3c2c351437","sha256":"5c22c9054a71c388be957714336ccb8599ddc3edbbc92e21400aadce70cd7929","sha512":"6b6e8f2b634f6c8f46b28feada58c4ef3897bfe8a917f37ce71268d0437aa8135891b48fb1c0ebf0fcc98a96eb9455cbe15644099d244cfacbbe943b713b420a","ssdeep":"","tlshash":"deb09204a0c0096b1994e151fa42e2a4e3918069bf14cd42f398dd6bea73f40ca51208","size":121,"data":"","first_seen":"2025-10-13T03:48:44.686927Z","last_seen":"2025-10-13T03:48:44.686927Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/wp-includes/js/jquery/jquery-migrate.min.js","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-06-03T17:54:34.523408Z","times_seen":815093,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"abaadb5748801ad2d9af9e3cea6640b3","sha1":"0aab3e9dc321ef5a554fe72f4e466c712500113c","sha256":"0c7dd3791c853b5df7a47f24bb14488b4e760f6425ae482b11afeab248af5834","sha512":"af58cc3bc6fb748536d54ec54b8aa0c6b54c5e21c8e45a8f4054e1445261a106aaf0283e6535677c98e2db68921aeea50017dde76846a48f6c434c417b1bec13","ssdeep":"96:laozNBNjA7k3Ocuv9n7k3Oc21/D6wgCfMEDaH:lXzfj+7u+5b6wgCkCaH","tlshash":"85a10a6daadf60b81523b12e2abea7657d61c00b0480fa43b81cf64b1f207744e67ed5","size":4759,"data":"","first_seen":"2025-10-13T03:48:44.694132Z","last_seen":"2025-10-13T03:48:44.694132Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"bda08131bdea361a824605e65b3b94f3","sha1":"10651d149b2bd59b3404904d5c022e147853830f","sha256":"1ef14bcd873f9ccffad43e6a03a30659f8fc34ad747c0a61c62251a2e5af407a","sha512":"002cf74255a65de99d29b5c43c736d9a8da530f7d81796442f6b56689d5f685f86af5d0dbbf49938d145382a03c6413b9df377cf1ebb238352b2dcb422942b85","ssdeep":"96:zozikTIvF8E6mOftygFmCmw9CLVCGQqx7YbK1Q6UzF1/DiCfMEDaH:kzgaEDKtygTsLVCGQqeK19Uz/biCkCaH","tlshash":"a6a13cf0ade31878256ab0ff45f79508352090172649ffc13c8dd6168f12ee45d99ed8","size":4776,"data":"","first_seen":"2025-10-13T03:48:44.701825Z","last_seen":"2025-10-13T03:48:44.701825Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"dee07cd8a2e6becb86e1554c62035efe","sha1":"1e444c6e7f81aa60b9979a8a6a63e435aa010fa4","sha256":"c89da06902e88af1befd95bbdb16df66212e10dbaaf0407f2d4759bf74a2e59b","sha512":"0f843c912173e75aaae41b8efe45eeff5a1c12c2cc10661177fb068ba700a2f32caf986ef7c513c8739b01f83040462d59ebf3a423ecbc79fd572f534c10e505","ssdeep":"","tlshash":"533107f75937263aa591c1f90b345e2ede60300d82e5d28282e472809b2820027a80f9","size":1585,"data":"","first_seen":"2025-10-13T03:48:44.706313Z","last_seen":"2025-10-13T03:48:44.706313Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dowryhandgripballot.com/373b5a10d390ec502c7d535d6fd9966c/invoke.js","fqdn":"dowryhandgripballot.com","domain":"dowryhandgripballot.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"644fe0de12e0ada503dbb76cc89c0c23","sha1":"86d64efbeb909b1cbc6df6631b98ad42d3ba9552","sha256":"2a078a400da4acaebf2440a33ab44002ce7ac75ea081de446e282e9b18d82990","sha512":"780fad74a662c180705008aa6cbcac8f835c0a08663f26c7882a62a7e2ffc6b64d58f072e0f77f64f14df4a9352240001dfa15b7668014260e6d2d0d21f698af","ssdeep":"768:fkqtSm4OYZ748I6ngkkLXcj3PKFMrj2W+MwgMe:8qtIO248I6ng6CIj2XMw+","tlshash":"f503b88d3f61b85d0796a033723f840ae6ee4e0458dcd8e8e4076ca0fe64755d0b7ea5","size":38367,"data":"","first_seen":"2025-10-13T03:48:44.635086Z","last_seen":"2025-10-13T03:48:44.635086Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"77b58fd09de2bc7a190cb0456971bd1b","sha1":"51d82ce5aba7a220592cfaa0ccd24eefcf970d09","sha256":"7122655176951399e75fe21490598a83c0e3cbc8b7a43b6d8d20308b14aac863","sha512":"eda8cce3c5ffd69a4afffe881ac26cb6bced4565526ea3e10b478db36e0eec0fc038b1bd7455387708130cd1d93be8635dda49c59b72dfd08af5673279bd7927","ssdeep":"192:2FCpBEHTO+GXzmrSLO/MRYqNeqvt2UqbW4qf44dCDZy9qyfcqKQHbDmG3yxCCAO6:0CTVkM2cvt2UasxdsypK0mPu","tlshash":"0a6283dcb2caf57503e3b136522f624af27a2496b40a4811a529dcd17c7884f9277ff8","size":15115,"data":"","first_seen":"2025-06-19T00:24:51.483961Z","last_seen":"2026-05-30T21:45:09.093781Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"febdcc57b2d22ededfc8579c9043f79e","sha1":"b91abdbfd0d4a74383dad68f9923f07053d514db","sha256":"57d8318f9c27ba9e0a9a78113b8cbf434d5f59edd3ca5308e62021dce755123b","sha512":"1258e0c0c08dc7caa06cdd4e66ba53cfe209405234ef80a20a067f3b88782851ef0dca5006ceed4163cc6ceaa62e0935c0a16ff13324c46fb80bbc0811bd45b0","ssdeep":"","tlshash":"43a002b7b582103c442271b81729758df96f0d54c790289c9b13aa30b0713d75605049","size":64,"data":"","first_seen":"2025-10-02T00:37:09.1126Z","last_seen":"2026-05-30T21:45:09.064397Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"efe5dc5bb2fe1f86dcac915c6ab70fc2","sha1":"22ed506a92564fefe13398ae947c72122d71f7c1","sha256":"3f6a347e13d02a1639d2c99e001fae8c9132a3a9d83712d4428110d28c4ccf99","sha512":"9610305ede000ee6210c1afd7549d1881c6152add4f16247ede1654d9f406c4e966cd9944311ddef9d284e2e6c3e9c4d162426eda42d890ef0a56299f203ccd0","ssdeep":"","tlshash":"9d81126a67370a31c2bb636b57efb209352140072946dd4cbd6d8240afe1f1485bbbda","size":3854,"data":"","first_seen":"2025-10-13T03:48:44.716027Z","last_seen":"2025-10-13T03:48:44.716027Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/js/jads.js","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"92.222.100.135","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c344215f7f4c4339ef3ec474fab1d5d2","sha1":"56ae62e74a9560413819f5c829a689f11e0e8d4b","sha256":"4a80819c5ee89f3ea534b99fe485991302abc498d994ba29d5c893ac5d795f79","sha512":"77cb331606c75be717c9e04c1836c9b5c0e8011639b4063784f1159972e826b75c3d46625ca2b9e931e9934fb7febce6b9820cb0ac6692b108ff35de97f5a6e6","ssdeep":"","tlshash":"d971627733557879889b966f10ef6a18317faa310f0688025b9ce864987cdcb057fd84","size":3769,"data":"","first_seen":"2025-02-19T04:42:15.317534Z","last_seen":"2026-06-03T13:53:05.141441Z","times_seen":2503,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/wp-content/uploads/hummingbird-assets/9e6bd87ea6ae0a70558bff65b84331c4.js","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4eedb752d0c6c1184a575dfc0c2fa484","sha1":"4099dd1934d3bf9c5c6e2e3ec0201be068902663","sha256":"8f53efd29df6c29fea64eaabfb44c513fc28c2bf53b2dcd508f859b9591c6301","sha512":"0e23e137199537d1b9fd1ddbe93e740beea2fed9ea84eed519f658f711bb1dedf546931acc2b53bd9013c4fdac2978258aaa3d044c279972a91fce6f25710822","ssdeep":"384:XW6k0qW6XpTYu1e1wrfl1Q123nlW9+1YpfGyCYpVpDHp96mE7Caw:XW6kFW6XpTYu1e1+fl1Q123nlY+oCI3Z","tlshash":"0752b605b0b2b9f7096b626a227ff905b5f13e65d603c051207391ab0ebacd8353772e","size":13952,"data":"","first_seen":"2025-10-02T00:37:09.080575Z","last_seen":"2026-05-30T21:45:09.000699Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"498ef7a370b282a6cf281f7a4dbc33b6","sha1":"b361254b2ab5238c71c9ed431a91fc1d42612bbe","sha256":"304db7ce336653a794495e4364b790723a9c978ec61ce20bc23a72760ac1fb24","sha512":"c1fa18f316bf553842dc1251da2b117aa4b83d46d444355b6cf26966e8533a2ac44911f05551b74121b7c984288a48657e617d17aaea5e9bdd371af76c16f138","ssdeep":"","tlshash":"63b02b40aa402f8360a005f6173035f3c6d313315c20bc4202cdc0c04e95842cc4c243","size":129,"data":"","first_seen":"2025-10-13T03:48:44.722287Z","last_seen":"2025-10-13T03:48:44.722287Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d39951af502c6f79fd2a3a7cbf72a66b","sha1":"b786bd1e5ec152f33ba04683825dc791d37ae397","sha256":"7ebdf0c438e8d72b223170cf0be6dea3ee71e1eb6ba88f209f96f9361ed0beed","sha512":"f1e9be99e4c52184cfc8eee9179fb3aa68bb19a3a1d9b414e7a4ce8e1c46523ab220fe119b1f75cc69eecf06b74154af95bd6e8f3c43f42d40aa49d76c9d0a73","ssdeep":"","tlshash":"dca002bb76d2223c842271a5131a754df96f05168790185457167630a1723f75615089","size":63,"data":"","first_seen":"2024-02-26T22:30:28Z","last_seen":"2026-05-30T21:45:09.092229Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/js/jads.js","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"92.222.100.135","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c344215f7f4c4339ef3ec474fab1d5d2","sha1":"56ae62e74a9560413819f5c829a689f11e0e8d4b","sha256":"4a80819c5ee89f3ea534b99fe485991302abc498d994ba29d5c893ac5d795f79","sha512":"77cb331606c75be717c9e04c1836c9b5c0e8011639b4063784f1159972e826b75c3d46625ca2b9e931e9934fb7febce6b9820cb0ac6692b108ff35de97f5a6e6","ssdeep":"","tlshash":"d971627733557879889b966f10ef6a18317faa310f0688025b9ce864987cdcb057fd84","size":3769,"data":"","first_seen":"2025-02-19T04:42:15.317534Z","last_seen":"2026-06-03T13:53:05.141441Z","times_seen":2503,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/js/jads.js","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"92.222.100.135","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c344215f7f4c4339ef3ec474fab1d5d2","sha1":"56ae62e74a9560413819f5c829a689f11e0e8d4b","sha256":"4a80819c5ee89f3ea534b99fe485991302abc498d994ba29d5c893ac5d795f79","sha512":"77cb331606c75be717c9e04c1836c9b5c0e8011639b4063784f1159972e826b75c3d46625ca2b9e931e9934fb7febce6b9820cb0ac6692b108ff35de97f5a6e6","ssdeep":"","tlshash":"d971627733557879889b966f10ef6a18317faa310f0688025b9ce864987cdcb057fd84","size":3769,"data":"","first_seen":"2025-02-19T04:42:15.317534Z","last_seen":"2026-06-03T13:53:05.141441Z","times_seen":2503,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e0ff7fb84524883faeda98bc8231ed3","sha1":"9b6d0294acbe5f7b59ac244704be7407dee78ecd","sha256":"0226eccc8bdf0c180cee05d129abb37550785d169bb5d22f99725a4d09079b80","sha512":"0de3b9c7557219503a74f94f711a4fbc2538ef2e5c6a62ccd283d9aab616da598a3cac38df0a920c4189ccb3641ea13565f4285aa3a51479aaaf3e6a7e4bf26d","ssdeep":"","tlshash":"e3c08c8a6086b31820abc81b2be0ea80923a8c27204502773bec69400fc27028481b39","size":192,"data":"","first_seen":"2025-10-02T00:37:09.142994Z","last_seen":"2026-05-30T21:45:09.062729Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/97/fc/e4/97fce4537c0f81f954d679ccebe0c47c.js","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"192.243.59.12","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"introduction_type":"scriptElement","is_inline":false,"md5":"6062294451a7a581dc74178c7c5a1332","sha1":"c8e09f671561b72bdae9fd3cfeea799629430105","sha256":"c556ffdcc50d996a51234a1dec5ae85925ffa13c788b800be900dc5eb1344d79","sha512":"5b4bcb7d6530bfa8d33d4c769d0934938af4e7842a518556021ed900fad8a06bc39c2d35494586adf34e4d6fe19095b2d41c726b8214746527e04cec9e910594","ssdeep":"192:M/H3P83adOwGuABXfKOBPpzbo3j3rFuuV6:MP/83adOwWp0j3Buz","tlshash":"fbd1a8dc768070800be7e97f776f651ab06a58501c4fe491f003a9e83d6872ed63eac1","size":6293,"data":"","first_seen":"2025-09-26T11:10:49.483616Z","last_seen":"2025-10-14T12:32:44.197235Z","times_seen":1614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b56a0648f1e9dc03a60880184d4ac7d3","sha1":"c107cddb2640ebfda5da9d6e861c3bd7e7440262","sha256":"97dd761e3f9ba622e5a12d174085a0d1ab4abea686303b6405c4f66880975919","sha512":"18ef56bc9654900ca34161be968db0f647b212436a4c446d614b82e5551d178bf1aec74c003517eab971716b089ea952a8c5f4d8f52095ee8b9c5a2f44eb136f","ssdeep":"96:zoz9kpkiDXVePPVVdY1EnD598G9cDXVePPVVdY1EnD598XUe1/DiCfMEDaH:kz6DwPrdY1EnD8GODwPrdY1EnD8tbiCi","tlshash":"5ca12abe5ed2302421e665bf26baf259b9b2a10fcc1ccc447c0cb2600bc4d705de7a88","size":4794,"data":"","first_seen":"2025-10-13T03:48:44.73643Z","last_seen":"2025-10-13T03:48:44.73643Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"28598c0af7c581815a3f9f8a0a1f4de2","sha1":"f759589bf6a8f5be084e54b9d3b5c6070aff40ad","sha256":"ff46649933d1ce790f2c7cddac4222040a2a6d262f92b2334c9835ea8e38f6a8","sha512":"88c72d4f2068f4aa7dfd4f25856a9ed843a01dfd5a319b974bef6767b42be5736208e63fedf767606f361891458218a4926374cb35f07863265fa5ed66abd840","ssdeep":"","tlshash":"8fa002b7f582103c442671b81329ba8df96f0d548790289c5b236a30f0713d75605049","size":64,"data":"","first_seen":"2025-10-02T00:37:09.135298Z","last_seen":"2026-05-30T21:45:09.046099Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"57f8cd38d693f07bad223ba108734e6e","sha1":"2a29a0265bc8ba8b0c0c57178862e39c1ced05cc","sha256":"797b0ac1870a119c04fc21d3b39573a2cdef90375e548df22347dcd4410cf788","sha512":"b470dc10ea2002f7a8316822ccb2e74a81ce60fecf2eec09e2d7925f3c52518d24a6787ffcdc5d7a02c8707d269ce2fb50eb837bf7620effee0dbeb8d929cee1","ssdeep":"96:apzkpYJ2UFjNPngMHZbBOFjkIcblGo8GJ2x:AwpYJ6MHZbUFmQeEx","tlshash":"9881fe6db2d324b9def3e2350baf720423375187084bc9007d0e93478f41b695aa6bd6","size":4180,"data":"","first_seen":"2025-10-02T00:37:09.137949Z","last_seen":"2026-05-30T21:45:09.03629Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/wp-content/uploads/hummingbird-assets/733fc64d7730f0e651e7a7dcb3c4fc2b.js","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c0b373ce46b0f07a16fff5411b74d9da","sha1":"039c345a905ecf3b8c49808b42e823fc55b61a59","sha256":"010c105dad177c7193cdbc847d031aa7e1c8d9a08ecad908a0a3fe527ad76d4a","sha512":"829e1897cf26e97f3ec23df449dc311faeca453804393429478e6a646d1fc8729d97be4a0356d2bb1fd704dc5b9e8732ce1ef9b901e89fc1a50a2dede596769d","ssdeep":"","tlshash":"a7410e3efa3562f211a32276153bb941b1b23c390112ab0161116c731ebd99f7a6ba5f","size":2018,"data":"","first_seen":"2025-10-02T00:37:09.105503Z","last_seen":"2026-05-30T21:45:09.006565Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/wp-content/themes/king/layouts/js/masonry.pkgd.min.js","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"520e46df77727aaf3d5e799ef241be02","sha1":"d20252cf76c3be8af37a8415d13ad368c762b4d8","sha256":"367d6afdfc741fb48d2d9310e47c3924b693459a74c882c0fc545ec5ed7d55d2","sha512":"25195cbd26405d3f3ee5241002f9255c626ec574e8bb2abca0831a60445941ab01f120431d96946de012b095a9934514adff3d0cfdff69e7cf3eb94c475875c9","ssdeep":"384:cr7mIr/Dh5rA3rzB4rMhr/XWGHW/6rMz1xftF2OUVP4eAnbhfreD6dCBEOav7blM:iSxxGG2/71xftFqVP4eAnI0ROavPSCzo","tlshash":"46b2858f73007425428bf16696af020f7137655c7a4790acba6ad8db1cb984d2037fbd","size":24103,"data":"","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-06-03T15:41:04.557657Z","times_seen":10036,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"a43c1d3320102148294e14cb00d9acf1","sha1":"de8735fe85225269be0dc1ad5e44337c3e03b3b0","sha256":"0423503c86ae017a54845a488d08e5d3eb03cee62557e63022287eeb839fee5e","sha512":"589644a75a9ba841f80a97456584968e3dc3a8ecdd552a45ba9da1467f14d4047f4cd0ed88d5f158dc14ffef5864d96480278d5659c1753b800cc370cf80f74a","ssdeep":"","tlshash":"5941f795f8262cb26ffeb1f704d90764bba4f06549087be9380d5b5acb2149026a1f19","size":2011,"data":"","first_seen":"2025-10-13T03:48:44.753348Z","last_seen":"2025-10-13T03:48:44.753348Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"165a06c9457c43c2bc865524650e3654","sha1":"baa2d780c73f8ffc01bb36e534edc05b7f9a9f99","sha256":"ce993cfb34b0cc339f28248683b71379e462fabf8cae9caa55da69443ce39fbd","sha512":"14cdb9172cc3759f387cf78bb85ddf2edd0b27f590f2d7e2edb3471f761dfd0300512517f6947c2b42a95e65686becc67ff432cbb141216eeb0cf0981a15858d","ssdeep":"","tlshash":"e7c08cc55b010c12b242361e9b128389fcc1224a282e2c862a68c030a0c482a4888c88","size":145,"data":"","first_seen":"2025-10-09T23:54:07.859626Z","last_seen":"2026-05-30T21:45:09.066121Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c39777d90da00dfdfe111476492171d","sha1":"bd8aeb6a7189eddc38e756b2a7083fb71a69e275","sha256":"0aa4964c6717633a2d333bdf1743ba2b8fbc49bc325694378badd452912ebb62","sha512":"997c39aba71e1449f610e6b50289247cdbc5e6e504735545e8eb35e848774d9c7e189da82402053524e75d48df43606f81aacd0087990b68ae70230e37d7fac8","ssdeep":"","tlshash":"11e02bbb67a615700b69f97009be97b8313094281206efc93db905d08a14d59283a4c0","size":403,"data":"","first_seen":"2025-10-02T00:37:09.145382Z","last_seen":"2026-05-30T21:45:09.084156Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dowryhandgripballot.com/373b5a10d390ec502c7d535d6fd9966c/invoke.js","fqdn":"dowryhandgripballot.com","domain":"dowryhandgripballot.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5af70f9f0e7c6f3394476776d9c822e","sha1":"e1e4823b4906050c81278d552096e8d13ad6b33a","sha256":"7c02e7b64a1b443dd9b2155347fe4463788344d71400dde2d7076b6c0f1f7e74","sha512":"d244cd1f86dc26caaaee24a3d12bfc5496b50a6fde3c0876b21d43f0f2e4218ee8a94ebc13749230a6db6631d1a6fa05a2d47377b341afff7f33b0a2a5fbaefc","ssdeep":"768:fkqtSm4OYZ748I6ngkkLXcj3PKFMrj2W+MAgMt:8qtIO248I6ng6CIj2XMAN","tlshash":"ec03c88d3fa1b85d0796a033723f840ae6ee4e4458dcd8e8e4076ca0fe64755d0b7ea5","size":38364,"data":"","first_seen":"2025-10-13T03:48:44.502627Z","last_seen":"2025-10-13T03:48:44.502627Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8019da34f38d9f532e4c7a0dc8ed2c57","sha1":"f2b2e554d5af424d6e49acdba45f903f43f33fd7","sha256":"349fa7e072387c3b2dc3043e2720e827a4e4aef2c8bf946e3aed5f9fa345a614","sha512":"12b513663410503187400328245133f34c2b58192521c8dae4a676a3b53d518ca7b07197384c957ad8ab23777d4752a6e8332385ac3e381b2488dd8f6d22928a","ssdeep":"","tlshash":"1f9004dd4501135041f71300d30f000f11530100d750cd1011cc5413d750d007f30c01","size":40,"data":"","first_seen":"2024-02-26T22:30:28Z","last_seen":"2026-05-30T21:45:09.087926Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"168768983b4949c413f09fb34fb7dea6","sha1":"cf6a09a3e78287ad5c6420cfc40b0ad1bedd0f23","sha256":"9dee4ed55cb696149c104aa74bca9219d1a720e857be65460314fcbdb9e760b4","sha512":"3f976b6dbee5b6122b1098ef8d94394da610f58cdd6d3092b666bfdf8f60e284f4af58d8038d361711e7df4d6331b2b347e280d320a0db23b1fec4e07b34c578","ssdeep":"","tlshash":"268000e88802232083fa0388e20c000f2a8302008b20ce00a0cca822e380c008a38c00","size":32,"data":"","first_seen":"2023-03-07T01:19:08Z","last_seen":"2026-05-30T21:45:09.090156Z","times_seen":557,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dowryhandgripballot.com/635b2315aeb203f10ce386ad75608b09/invoke.js","fqdn":"dowryhandgripballot.com","domain":"dowryhandgripballot.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"69af74b23ccd425339ad78d275f706e5","sha1":"29461529cb9ccc44206b7e35c104482efb6d93f6","sha256":"357175e6b2c88c84c0b646b3177c9adf0b401fa584f95e1bcc80ee72c0fa4141","sha512":"2da3a4ef04a6f9d9bf82af631ef8dbb81677a190e9f5269fbf7af4a86ab5d0cc96a6ed3b57bc8f6325dbf5bd75ec1d1862ebc3962ac1438bb0caafb1252f1c77","ssdeep":"768:fkqtST4OYZ748I6ngkkLXcj3PKFMrj2W+MwgHy:8qtTO248I6ng6CIj2XMwL","tlshash":"7a03c8893fa1b85d0796a033723f840af6ee4e0454dcd8e8e407aca0fe64755d4b7ea5","size":38362,"data":"","first_seen":"2025-10-09T23:54:07.843606Z","last_seen":"2025-10-13T03:48:44.417211Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e137aedb7771709c408484d6ba8a908c","sha1":"d293cc878e22ea3840e0e7356414289d768c59a7","sha256":"e034046d01f95b2e38033178779ed2be0b4e7292cc738a0497c9d1c5ab13a5da","sha512":"5dc4d12e5414361741cc45cb7c6da37cdd519e8a222827a1bcb474f71bdfbe8a495fc33756a277d16103571fd2056f5bfeddf6d71f831eabba64dbcdef14a131","ssdeep":"192:BWq97kzjD0YQeHbhTiOnQ5f/yeUiPCEndOJfd9nAu:Bxmnxu5f6EMl","tlshash":"f0e1634d3df360368123b06f57bbe209213a8117a60acd95bd4c87907f907e5aea1fd9","size":7255,"data":"","first_seen":"2025-10-02T00:37:09.134111Z","last_seen":"2026-05-30T21:45:09.0402Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/wp-content/uploads/hummingbird-assets/8b1d96e03ccc39813b4b5e7b19e6fb69.js","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"83a9afe2247979ea9cdcd0c5fa8e5243","sha1":"1968c348682befa91364113a344e284996b22586","sha256":"33b87f1e03a8aabe88cba683a5c6313d0689de63b1d486cadaedd70aa0cc594d","sha512":"e5b5a254bcf3576f8b3ac68e92b9b7e43e98a35bf2b3177a6fb9c0f10e0109eba550a79a26edcf47878d89bb625d3764192d21b2b113eae7e2a2e6df867f3123","ssdeep":"","tlshash":"e921567b7ca5963528c614d6a875fac97c713574c503d8a0808cec7cb8a8eac1c3155a","size":1407,"data":"","first_seen":"2025-10-02T00:37:09.101543Z","last_seen":"2026-05-30T21:45:09.002095Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"0fb2c32781fef58c589507d81c73e284","sha1":"a50caf12a11a1958508a93548497e8972fa72de9","sha256":"407e88fc6faee950c21428aec8146d346d3ea131831db67d8c6225eadd2acb0f","sha512":"c4f54a6ed9d077a4332fbcb54944603eff6aa5429f352dd7c14785e67d100e1d002946d92aa8ec31c1265a6c49fd8cedf417c2cd05b997ac68ed07aa96f857f0","ssdeep":"","tlshash":"7b3107fe12d5345c62f48aa626aaf6f6daf6298fcc2e88241015206080cc8226ac3360","size":1542,"data":"","first_seen":"2025-10-13T03:48:44.780476Z","last_seen":"2025-10-13T03:48:44.780476Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/js/jads.js","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"92.222.100.135","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c344215f7f4c4339ef3ec474fab1d5d2","sha1":"56ae62e74a9560413819f5c829a689f11e0e8d4b","sha256":"4a80819c5ee89f3ea534b99fe485991302abc498d994ba29d5c893ac5d795f79","sha512":"77cb331606c75be717c9e04c1836c9b5c0e8011639b4063784f1159972e826b75c3d46625ca2b9e931e9934fb7febce6b9820cb0ac6692b108ff35de97f5a6e6","ssdeep":"","tlshash":"d971627733557879889b966f10ef6a18317faa310f0688025b9ce864987cdcb057fd84","size":3769,"data":"","first_seen":"2025-02-19T04:42:15.317534Z","last_seen":"2026-06-03T13:53:05.141441Z","times_seen":2503,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e0ff7fb84524883faeda98bc8231ed3","sha1":"9b6d0294acbe5f7b59ac244704be7407dee78ecd","sha256":"0226eccc8bdf0c180cee05d129abb37550785d169bb5d22f99725a4d09079b80","sha512":"0de3b9c7557219503a74f94f711a4fbc2538ef2e5c6a62ccd283d9aab616da598a3cac38df0a920c4189ccb3641ea13565f4285aa3a51479aaaf3e6a7e4bf26d","ssdeep":"","tlshash":"e3c08c8a6086b31820abc81b2be0ea80923a8c27204502773bec69400fc27028481b39","size":192,"data":"","first_seen":"2025-10-02T00:37:09.142994Z","last_seen":"2026-05-30T21:45:09.062729Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/wp-content/themes/king/layouts/js/bootstrap.min.js","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a17e5845ea4e5fc5ad1d0f4095824ae7","sha1":"6077febdbf1b2e54070db4b5e78e672ef3dde6ac","sha256":"4e2ddac89724f72970e14fd526bbef3b92a8ae38826f918c2523a2ddc66797de","sha512":"7e778b748da433430b10dad48c204cafe6d33a478f9b01052bd9b3114267c23d40087061679bb8ed1e796a9be6ed75429f2a58f54f10f1eb1edfa15332a84b7a","ssdeep":"384:5QIDKGPZXNxmu4328zfeB+WNSxzNTPWhVRbGJRGpGzzwvD5+I9iA6B:5QIRPZXN8m8jeBbc9NTIVyIS4oOiA6B","tlshash":"b5b2a64ab23132b147efa1f1511b0a0d72356a3de946906c7869d6f22cb9c48336bf7d","size":24763,"data":"","first_seen":"2023-03-07T17:51:55Z","last_seen":"2026-05-30T21:45:09.004555Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9bc816687ea29ad78e916921470f4712","sha1":"e24f70fee95e464277a035cd705ae718a9469a78","sha256":"9e0be68afbe6aff3040e8ae954c86c247efcbdf811b0cbe28ea95b0a154acf0b","sha512":"cd93cafade8ceef50cd377da02e0710680a8efea36383dd3e8266020fc31c67de1d803fd723fac48dc5f5d5f95224cd0668642f451f1cab7e99e71d43414dfe2","ssdeep":"","tlshash":"31c04c4f6a441836a625784e778533d1edc94a2b79a65729254554c061cb226d48084a","size":145,"data":"","first_seen":"2025-10-09T23:54:07.87307Z","last_seen":"2026-05-30T21:45:09.041192Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dowryhandgripballot.com/635b2315aeb203f10ce386ad75608b09/invoke.js","fqdn":"dowryhandgripballot.com","domain":"dowryhandgripballot.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b257695e0073357df485446c330b0beb","sha1":"797e3f1c35def77bd9b940da68a6651ac7ef85fb","sha256":"64465aa80d7fd339dbf18a24f5c1014f74a98045bb9b1f727530b9fe60f83f53","sha512":"018fe4050e23d2c773c0bff1788b1bc681a4448217566e688c1a55c5ebe657d342ef116dd5b6567bf2df4d12ffd008d70d9f26f80721891796cfe4292518940f","ssdeep":"768:fkqtST4OYZ748I6ngkkLXcj3PKFMrj2W+MogHM:8qtTO248I6ng6CIj2XMoP","tlshash":"6803c88d3fa1b85d0796a033723f840ae6ee4e0454dcd8e8e4076ca0fe68755d4b7ea5","size":38389,"data":"","first_seen":"2025-10-13T03:48:44.523198Z","last_seen":"2025-10-13T03:48:44.523198Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/wp-content/themes/king/layouts/js/js.cookie.min.js","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f4a6fe904517658e996ead3ab6f73d6","sha1":"6661581652ed1e4171c3f2fc53668c914a2c219e","sha256":"b5c1a679368da537e7b0f6880801ab32fe84b38b900acdbc1fdbe8cd6a86c4c8","sha512":"872872a1aed89226b03ce80cd22983789e2dc7e57d3debb6754e8edc68418775d7fcd362011bc43c9a5992d77ab4e33937801d99c6ac17456f358d307b148d75","ssdeep":"","tlshash":"7c31b8de3095689a07070431073f2207f2ba5a36edddc8d04364e4f21a70a2901e7f7b","size":1685,"data":"","first_seen":"2023-03-07T13:02:52Z","last_seen":"2026-06-02T22:34:59.369111Z","times_seen":776,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9bc816687ea29ad78e916921470f4712","sha1":"e24f70fee95e464277a035cd705ae718a9469a78","sha256":"9e0be68afbe6aff3040e8ae954c86c247efcbdf811b0cbe28ea95b0a154acf0b","sha512":"cd93cafade8ceef50cd377da02e0710680a8efea36383dd3e8266020fc31c67de1d803fd723fac48dc5f5d5f95224cd0668642f451f1cab7e99e71d43414dfe2","ssdeep":"","tlshash":"31c04c4f6a441836a625784e778533d1edc94a2b79a65729254554c061cb226d48084a","size":145,"data":"","first_seen":"2025-10-09T23:54:07.87307Z","last_seen":"2026-05-30T21:45:09.041192Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"5e543256c480ac577d30f76f9120eb74","sha1":"d5d4cd07616a542891b7ec2d0257b3a24b69856e","sha256":"eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c","sha512":"16a332e891e86030aa9d08ab032fe026c4d4857b64902c386f3ede705373ecf9206f58d712a91a07a63dcbd14f133ab48571bfeb88927995224b299916af8fa5","ssdeep":"","tlshash":"565000000c000000003c0000000c00000000cc33030000f0c0000c0c0c0000003c0000","size":9,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-06-03T18:01:44.068018Z","times_seen":92715,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"5e543256c480ac577d30f76f9120eb74","sha1":"d5d4cd07616a542891b7ec2d0257b3a24b69856e","sha256":"eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c","sha512":"16a332e891e86030aa9d08ab032fe026c4d4857b64902c386f3ede705373ecf9206f58d712a91a07a63dcbd14f133ab48571bfeb88927995224b299916af8fa5","ssdeep":"","tlshash":"565000000c000000003c0000000c00000000cc33030000f0c0000c0c0c0000003c0000","size":9,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-06-03T18:01:44.068018Z","times_seen":92715,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a64965b36a774b4d1da597c7a1154f1e","sha1":"73278ba8e2b6c9b3eaa8d181c63f02c8cfbc2995","sha256":"be1c37c0ba0a8d32e03178505e42ef52dfa84c034ef2a3569d770c7ef15861c1","sha512":"d400d12f296b5b6928709b3d9f19ebbf13a52b3ed9cb847892e0c89fb3909eacb465dcd4bb3dda2f5bef6d07c163750988c1b7d6e7eb1b2ee54961910b2eb604","ssdeep":"","tlshash":"7ea002b7b582103c442275b4132a758dfd6f0d6487a0689c57026a32b2713d75605059","size":64,"data":"","first_seen":"2025-10-02T00:37:09.156813Z","last_seen":"2026-05-30T21:45:09.048654Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3fab4fef53137b8f920887b131ce1356","sha1":"97089d44413e1e5b1cc5958cc5c561cae355690c","sha256":"f8b944012f3761366c9176149aa482f6c53584487788851883916ed6cabe057c","sha512":"824b7044f7a9cda42e740f3a31324ee5ea5240650dc307bf6061330831cb8cc22ee0e9683b05d414b5a65a37fd70926aa09747f6dab50d89106f7afda05b385a","ssdeep":"","tlshash":"0ba002b7b582103c442275b41329758df97f0d9487a0289c57026a72a4713d75605049","size":64,"data":"","first_seen":"2025-10-02T00:37:09.141509Z","last_seen":"2026-05-30T21:45:09.074169Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"f2fd0eec022dcaf46f8091dc3ede3ecb","sha1":"8c6e09c38bb54886ee00cfd2cd4c8935e949634c","sha256":"d243024bfc232af9197f7f9f70582a84537d0d22b157bac0ab4dac643894776f","sha512":"b7a51cf0fcebc4ef4940875c5b3c647b64babf0caccc5c0a1d99d23b55e533fa97ab3102fd90d116500b0a1f1f0c675000d7c018334f5e07f0ed769a0a75d2c2","ssdeep":"","tlshash":"0241f9be21d6341055f666b31699f3a5adbba587cd1c8884380d265103c886615e7a44","size":2020,"data":"","first_seen":"2025-10-13T03:48:44.800253Z","last_seen":"2025-10-13T03:48:44.800253Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/js/jads.js","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"92.222.100.135","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c344215f7f4c4339ef3ec474fab1d5d2","sha1":"56ae62e74a9560413819f5c829a689f11e0e8d4b","sha256":"4a80819c5ee89f3ea534b99fe485991302abc498d994ba29d5c893ac5d795f79","sha512":"77cb331606c75be717c9e04c1836c9b5c0e8011639b4063784f1159972e826b75c3d46625ca2b9e931e9934fb7febce6b9820cb0ac6692b108ff35de97f5a6e6","ssdeep":"","tlshash":"d971627733557879889b966f10ef6a18317faa310f0688025b9ce864987cdcb057fd84","size":3769,"data":"","first_seen":"2025-02-19T04:42:15.317534Z","last_seen":"2026-06-03T13:53:05.141441Z","times_seen":2503,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4f412c2cf67e9ffd0450cfbd2a4d7af","sha1":"6bf49435c3c8b945132761bddbfdc3ff338e1358","sha256":"6d8355dd3ec3a32fbb324d2011f8be0b81807e5cbdf801aee49833991e604131","sha512":"e666cc388656bbbbad04da45e4533792ee992c2624bf753a0d778afd5dacbfdce14c022650dbea29c4ab15b61e92f1616b911fc1cb8827eeb13529be4e94c7a7","ssdeep":"","tlshash":"e8c08ccd0183b2041093d0274ba0cc08a1265d57200a24a33ffc92204fc0b0588dab79","size":191,"data":"","first_seen":"2025-10-02T00:37:09.127153Z","last_seen":"2026-05-30T21:45:09.056092Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"7402754dee92a49f9d02f56eb5eff352","sha1":"6354ad974fedd8e35ec0639137a4619e9781d4cd","sha256":"8305a6d9f3015146af5fb10c2dab8bbccdeafe0425c289bde27ed6df2e0bb8b1","sha512":"c50b4c7ba990b392888887e4da28a4cca044ba9aa68ceba33f08ba4bb93bde7278fbbb2a2cf274db8c903df4f417908d2f33706794aa4b1e4ad30de5f0406bc3","ssdeep":"","tlshash":"4931fcb1145328ac029554efc947b40c361b059133e796c06aafd91381478d4a20f864","size":1533,"data":"","first_seen":"2025-10-13T03:48:44.814968Z","last_seen":"2025-10-13T03:48:44.814968Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"38376caca2acefc7f25d8c2fae2db229","sha1":"bf51435891a89c26c6cef648ed7ac5c5b60fc35f","sha256":"7a14ee8b5c33cf1a8554151cb1f92bee555fad52efd164d00cf605cd7eba9d02","sha512":"28b25dc401333869771e7d3822f857eb3cd098ee878b0d1551834d173120b55fccbf19229471c1abe46a55cfb3c6dd61dbf2385ef779a5de5d1d4811ebb12b51","ssdeep":"","tlshash":"efd02b23adc35e8750cf56d428341f1391ea2a29a813980629ccda444e41e4a6cb8589","size":277,"data":"","first_seen":"2025-10-02T00:37:09.159918Z","last_seen":"2025-11-28T06:48:58.167345Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c0c3b020d81e56653500405f385e45c5","sha1":"0e8f7df834af610303b99c9cff3a750ed8635212","sha256":"154c67b0e1e0fd1955d17441f7faaf85663d4bf5055ad8e7a8b2788af192d882","sha512":"3bcfd9ff2a2eda422da4ec5a46686efd8ddd2e158ef69cbb7e706d3f520d6e3ec7aa06525478f849825ced76246f33210f9b521560efb982b40a2a3c2990667a","ssdeep":"","tlshash":"b5f0dc77f696243b09f886a13a8f4301b43070350044650af93c4268b6b9c5f783d3c0","size":455,"data":"","first_seen":"2025-10-02T00:37:09.118179Z","last_seen":"2026-05-30T21:45:09.090905Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"92b9bd114a5811c0ff2e59859556cd9d","sha1":"4bb2e7c5b877325c31269bf282834076493f00c3","sha256":"7abf9e6f8ab825af017dbcbaab533e4534035f5ae0883e056130e247eda2b801","sha512":"194c3bd9139ad4583212167a03f2a835cc30caa9f5417b563250fba261e4648fe829b5ffe53a788aa4f637db5bc280365728971491b6b4a03cbb71796612ba6a","ssdeep":"","tlshash":"762136eec3160824290b119147696b47b81a4747e4cba619365f03848fdda8eb1acbae","size":1111,"data":"","first_seen":"2025-10-02T00:37:09.158631Z","last_seen":"2026-05-30T21:45:09.04336Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"975ab015f85014161bb62fb643209aa0","sha1":"96347318da87456611f2356038d7cb015dbe5b9e","sha256":"110009af775c3c9ac5f777530e9a3cbd2c4d0baa2c202f416dbb3899abc2fc73","sha512":"4ec4157c44008165fa99a98f0088f634b9667389d11d560805f282dca2552a558dd04285daea7a6797bd534adacd478e87a811a717d562d62dc76e53d9b1d5ce","ssdeep":"","tlshash":"0641e97df2df30b10963f2361a9eb7653d69c09604c07183782cba4b17602740367e82","size":2002,"data":"","first_seen":"2025-10-13T03:48:44.830902Z","last_seen":"2025-10-13T03:48:44.830902Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"24dc835e3db55928f8660952bf07c55c","sha1":"e239d5436522147836c613467e498b708902d1d3","sha256":"1ee42c52a28f85974f2ef7700110a25c36a86fea2880cf281a18ee5e5306c4e5","sha512":"4ac146f2243d7bce582979063894e203d3706984c558505546b9a670b96f64255f5d5ec9a88e5cbb17793bbb0b69007ce9778fbceaaed359285c8a5c2fc3ee24","ssdeep":"96:laozKzxBNk3vOo+ydc1zJh95mUrneXDuBLKTaz+sFf1/D6wgCfMEDaH:lXzaEOo+ydcBCqe8+sF9b6wgCkCaH","tlshash":"87a14aa72da22075a862a0be33b166167d50d10f0b48df83b99dfbc05f207600bf8ce4","size":4881,"data":"","first_seen":"2025-10-13T03:48:44.83524Z","last_seen":"2025-10-13T03:48:44.83524Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"5e543256c480ac577d30f76f9120eb74","sha1":"d5d4cd07616a542891b7ec2d0257b3a24b69856e","sha256":"eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c","sha512":"16a332e891e86030aa9d08ab032fe026c4d4857b64902c386f3ede705373ecf9206f58d712a91a07a63dcbd14f133ab48571bfeb88927995224b299916af8fa5","ssdeep":"","tlshash":"565000000c000000003c0000000c00000000cc33030000f0c0000c0c0c0000003c0000","size":9,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-06-03T18:01:44.068018Z","times_seen":92715,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a9ececb6c63e21a4afa48f01e7a92bc1","sha1":"9ad033565894e1cf354fe011b4506a579538dbc0","sha256":"a3770fa3f919f22dc6c8247194d3c94fe0834246221ba0528d1ab4fecb4d0eb0","sha512":"08ca9c8d0be59f5d70adc38e1addf362e6481b6d1657f58e03c1fdc62b5d9130a403b9d407c95ff9d2bbe7ffd48873244ff65edf2b32485c38962e8a78a95c01","ssdeep":"","tlshash":"738000a2088008ac002002080a0eb20b3082c8a0223000228200220aa0a8aa322ee082","size":29,"data":"","first_seen":"2024-04-17T17:15:58Z","last_seen":"2026-05-30T21:45:09.054065Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"44895e26da4702ec5b37b8e9588e5e1d","sha1":"82dd5349890663e40d6e01b6996a43f880ade3ad","sha256":"936a94002f5095ba7396410119e7b263021c43865dec035b119da1fa9f32840d","sha512":"17e0db254b30f1d748391a7eeb2998646c49c0bbdcff34eda9dba9180ccef9dac1ed04c9a5ec6c2362fb4969da1eb61e5b356ac0200dfa4b84b5c7ed504ac803","ssdeep":"","tlshash":"45a002b7b582103c443271b81329758df96f0d548794289c5b136e30b0713d75605049","size":64,"data":"","first_seen":"2025-10-02T00:37:09.1158Z","last_seen":"2026-05-30T21:45:09.049867Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4f412c2cf67e9ffd0450cfbd2a4d7af","sha1":"6bf49435c3c8b945132761bddbfdc3ff338e1358","sha256":"6d8355dd3ec3a32fbb324d2011f8be0b81807e5cbdf801aee49833991e604131","sha512":"e666cc388656bbbbad04da45e4533792ee992c2624bf753a0d778afd5dacbfdce14c022650dbea29c4ab15b61e92f1616b911fc1cb8827eeb13529be4e94c7a7","ssdeep":"","tlshash":"e8c08ccd0183b2041093d0274ba0cc08a1265d57200a24a33ffc92204fc0b0588dab79","size":191,"data":"","first_seen":"2025-10-02T00:37:09.127153Z","last_seen":"2026-05-30T21:45:09.056092Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"febdcc57b2d22ededfc8579c9043f79e","sha1":"b91abdbfd0d4a74383dad68f9923f07053d514db","sha256":"57d8318f9c27ba9e0a9a78113b8cbf434d5f59edd3ca5308e62021dce755123b","sha512":"1258e0c0c08dc7caa06cdd4e66ba53cfe209405234ef80a20a067f3b88782851ef0dca5006ceed4163cc6ceaa62e0935c0a16ff13324c46fb80bbc0811bd45b0","ssdeep":"","tlshash":"43a002b7b582103c442271b81729758df96f0d54c790289c9b13aa30b0713d75605049","size":64,"data":"","first_seen":"2025-10-02T00:37:09.1126Z","last_seen":"2026-05-30T21:45:09.064397Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fapdrop.com/wp-content/themes/king/layouts/font-awesome/webfonts/fa-brands-400.woff2","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:12.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapdrop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 17:26:26 GMT","end":"Mon, 29 Dec 2025 18:13:12 GMT"},"fingerprint":{"sha1":"8F:BC:36:F5:00:C6:56:6D:E9:C2:AB:63:8D:15:CD:DD:88:A2:0E:3C","sha256":"A9:67:EE:49:07:CC:75:F3:2F:CE:62:BD:AE:88:20:42:63:B3:B8:78:F3:B1:63:CF:34:9A:87:FE:0F:E9:E3:98"}}},"request":{"raw":"GET /wp-content/themes/king/layouts/font-awesome/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: fapdrop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 14 Oct 2025 03:07:29 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 01 Nov 2023 01:29:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 109808\r\ndate: Mon, 13 Oct 2025 03:48:12 GMT\r\nserver: cloudflare\r\nvary: User-Agent, accept-encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4sc00iP9dqT6NhLm0DYIKUPueojgDkGumwRI9hesLiw5sgTX1hYf2YhYgWMUiOuJ%2FOimHwOXp9N11EIXfvO7%2BKmdKX2iDs9XjA%3D%3D\"}]}\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98dbdc29af84568b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109808,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 109808, version 772.1280","md5":"005c9aa92b564b73b7582cc4f1fa49cb","sha1":"373361ed756b1fe68ce2f5968d467826b6973bb5","sha256":"faae6fc0aa94cc5bde5076647c817a23206096a1cbeda10d1c6f3d89d6163ed1","sha512":"cf057683226d25fab8518295d9a2bbc7261b85a0e911d323f949719b6484beb99843887ac634e58f21988c5af3b8d825b8289cbfe29b2d4e1817016be1499bba","ssdeep":"1536:598+segXMbYt4ZF+jfdgY0q+JtV63kYFF8ChI+2F2aqQPj+QU0yXbO/YvSdE:AeeemxT+kkgeChI+20aqqDhcSK","tlshash":"56b312cbe021d582bdee1c5b69ba14bf61180424427dbe9dc306746bbf16e023d0bd27","first_seen":"2023-08-04T22:28:11Z","last_seen":"2026-06-03T16:58:50.437812Z","times_seen":27766,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/wp-content/plugins/perfmatters/js/analytics-minimal-v4.js","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:32.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapdrop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 17:26:26 GMT","end":"Mon, 29 Dec 2025 18:13:12 GMT"},"fingerprint":{"sha1":"8F:BC:36:F5:00:C6:56:6D:E9:C2:AB:63:8D:15:CD:DD:88:A2:0E:3C","sha256":"A9:67:EE:49:07:CC:75:F3:2F:CE:62:BD:AE:88:20:42:63:B3:B8:78:F3:B1:63:CF:34:9A:87:FE:0F:E9:E3:98"}}},"request":{"raw":"GET /wp-content/plugins/perfmatters/js/analytics-minimal-v4.js HTTP/1.1\r\nHost: fapdrop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 16 Jul 2024 23:32:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1357\r\ndate: Mon, 13 Oct 2025 03:48:32 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rGdxECeq%2BXH%2Ba3P8kMg%2BAUO7J9WbbUFTQwSjs%2BDPGc5%2FsAhF1ysiWscM6hkuktFkRBxY3PqcTctYAA6tJ7niJUFer8t6wH4H6A%3D%3D\"}]}\r\netag: \r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98dbdca808e9568b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3009,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (3009), with no line terminators","md5":"ca272d8b40967105fb697a83138bd811","sha1":"7e99eb7866d0ecbe94e74aff075566df844fede1","sha256":"33e34b6da946e95f38240816f55dd8e6adc7c6f76d48bb7375394aa280ddf083","sha512":"429df9f1151dbcdca575105ca144e5eca60552ceba90dc921ff98b64d40c8b328aa271c1e5230831eaa74f47af12170b2be9948e3de047f0ae05c109109d67a6","ssdeep":"","tlshash":"ab51a91e970a57f746c483c6e4672136d2253075b6818c42766edd653424bf923e3f3d","first_seen":"2023-11-25T16:58:09Z","last_seen":"2026-05-30T21:45:09.022766Z","times_seen":135,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/97/fc/e4/97fce4537c0f81f954d679ccebe0c47c.js","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:33.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 22:00:34 GMT","end":"Tue, 25 Nov 2025 22:00:33 GMT"},"fingerprint":{"sha1":"FC:5B:24:E2:ED:A9:65:69:CA:97:74:44:F8:E9:93:1A:50:E7:73:C1","sha256":"26:1B:F8:72:30:B2:C4:49:6A:2E:E7:A5:FC:26:35:74:02:CB:56:D1:F7:7E:A5:5E:89:65:A9:B4:1F:1F:DB:8F"}}},"request":{"raw":"GET /97/fc/e4/97fce4537c0f81f954d679ccebe0c47c.js HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Mon, 13 Oct 2025 03:48:33 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3430\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 5e9135cbea34a7d0a7f628a66d3f9203\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6293,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6293), with no line terminators","md5":"6062294451a7a581dc74178c7c5a1332","sha1":"c8e09f671561b72bdae9fd3cfeea799629430105","sha256":"c556ffdcc50d996a51234a1dec5ae85925ffa13c788b800be900dc5eb1344d79","sha512":"5b4bcb7d6530bfa8d33d4c769d0934938af4e7842a518556021ed900fad8a06bc39c2d35494586adf34e4d6fe19095b2d41c726b8214746527e04cec9e910594","ssdeep":"192:M/H3P83adOwGuABXfKOBPpzbo3j3rFuuV6:MP/83adOwWp0j3Buz","tlshash":"fbd1a8dc768070800be7e97f776f651ab06a58501c4fe491f003a9e83d6872ed63eac1","first_seen":"2025-09-26T11:10:49.483616Z","last_seen":"2025-10-14T12:32:44.197235Z","times_seen":1614,"resource_available":true,"data":null}},"time_used":700,"timings":{"blocked":302,"dns":15,"connect":93,"send":0,"wait":98,"receive":0,"ssl":190},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/watch.1445529373509.js?key=635b2315aeb203f10ce386ad75608b09\u0026kw=%5B%22fapdrop%22%5D\u0026refer=https%3A%2F%2Ffapdrop.com%2Fdownload%2F%3Fdldata%3D%7B%2522urls%2522%3A%5B%5B%2522https%3A%2F%2Fworkupload.com%2Ffile%2FxeguUD2TLxT%2522%2C%2522https%3A%2F%2Fgofile.io%2Fd%2FWmOdiD%2522%2C%2522https%3A%2F%2Fbuzzheavier.com%2F9tx3untaas0e%2522%5D%5D%2C%2522titles%2522%3A%5B%5B%2522Workupload%2522%2C%2522Gofile.io%2522%2C%2522Buzzheavier%2522%5D%5D%2C%2522platforms%2522%3A%5B%2522Windows%2C%2520Linux%2522%5D%7D\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=6691d477-6294-430c-9206-8dacbe7d7ec2%3A3%3A1","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:33.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 21:34:59 GMT","end":"Tue, 25 Nov 2025 21:34:58 GMT"},"fingerprint":{"sha1":"E4:24:47:01:B7:F3:A1:0B:CF:EA:36:36:30:C1:21:5D:9E:A1:7B:BE","sha256":"EE:DD:A9:31:87:F8:15:E5:A4:69:BA:E8:17:29:F1:0D:59:DC:1E:48:E2:EB:2F:1D:FE:D6:5C:C0:5F:03:5B:01"}}},"request":{"raw":"GET /watch.1445529373509.js?key=635b2315aeb203f10ce386ad75608b09\u0026kw=%5B%22fapdrop%22%5D\u0026refer=https%3A%2F%2Ffapdrop.com%2Fdownload%2F%3Fdldata%3D%7B%2522urls%2522%3A%5B%5B%2522https%3A%2F%2Fworkupload.com%2Ffile%2FxeguUD2TLxT%2522%2C%2522https%3A%2F%2Fgofile.io%2Fd%2FWmOdiD%2522%2C%2522https%3A%2F%2Fbuzzheavier.com%2F9tx3untaas0e%2522%5D%5D%2C%2522titles%2522%3A%5B%5B%2522Workupload%2522%2C%2522Gofile.io%2522%2C%2522Buzzheavier%2522%5D%5D%2C%2522platforms%2522%3A%5B%2522Windows%2C%2520Linux%2522%5D%7D\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=6691d477-6294-430c-9206-8dacbe7d7ec2%3A3%3A1 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://fapdrop.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.19.5\r\nDate: Mon, 13 Oct 2025 03:48:33 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nAccess-Control-Allow-Origin: https://fapdrop.com\r\nAccess-Control-Allow-Credentials: true\r\nLocation: https://kettledroopingcontinuation.com/watch.1445529373509.js?dev=e\u0026key=635b2315aeb203f10ce386ad75608b09\u0026kw=%5B%22fapdrop%22%5D\u0026pst=1760327373\u0026rb=\u0026refer=https%3A%2F%2Ffapdrop.com%2Fdownload%2F%3Fdldata%3D%7B%2522urls%2522%3A%5B%5B%2522https%3A%2F%2Fworkupload.com%2Ffile%2FxeguUD2TLxT%2522%2C%2522https%3A%2F%2Fgofile.io%2Fd%2FWmOdiD%2522%2C%2522https%3A%2F%2Fbuzzheavier.com%2F9tx3untaas0e%2522%5D%5D%2C%2522titles%2522%3A%5B%5B%2522Workupload%2522%2C%2522Gofile.io%2522%2C%2522Buzzheavier%2522%5D%5D%2C%2522platforms%2522%3A%5B%2522Windows%2C%2520Linux%2522%5D%7D\u0026res=14.3095\u0026rmtc=t\u0026shu=a3ee93882cf17e2e0fe0f19bbfd2153c924bf47590a234166e437fe63b6d19775316e52bfc0e3bba716868794caf4567895ae04bc0d6d361cf02094b98db572e42390a82bc9fb3a8edce2d72789fefca7e19962c219ca6d8412444\u0026tz=0\u0026uuid=6691d477-6294-430c-9206-8dacbe7d7ec2%3A3%3A1\r\nSet-Cookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.3jBLGPh4jx0Icz51Xlb06rStZS0jDuEqMW4tpBnC3KU; expires=Mon, 13 Oct 2025 03:49:33 GMT; path=/; secure; SameSite=None\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 5c94e4a39e6e2c9710a79b2d31855c36\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4826,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":678,"timings":{"blocked":289,"dns":1,"connect":92,"send":0,"wait":101,"receive":0,"ssl":191},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Orbitron:wght@500\u0026family=Manrope:wght@400\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:12.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:42:00 GMT","end":"Mon, 15 Dec 2025 08:41:59 GMT"},"fingerprint":{"sha1":"E9:4F:AE:49:69:8C:15:95:B2:F7:9C:C0:6F:DA:FF:C6:06:1A:22:46","sha256":"89:56:CA:FF:85:BC:CA:ED:64:3B:13:28:77:62:7B:0C:FD:25:AB:78:F3:7E:B5:34:21:E4:79:F2:F9:D2:8C:E7"}}},"request":{"raw":"GET /css2?family=Orbitron:wght@500\u0026family=Manrope:wght@400\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 13 Oct 2025 03:48:12 GMT\r\ndate: Mon, 13 Oct 2025 03:48:12 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2675,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"bef2f633aa8bb58639928f152db51b80","sha1":"97a1edde0d928c3f9141a2d161d4942c3949bec5","sha256":"336e5e0d72adca7e9b0f9078ff45adfca945df46ee3c36d7b16300ffddf55a1d","sha512":"53753bb9fd75cb00450c529cee3a3f7231ad737adcafd479b262aca5a6647d3b64d643f21171b120890d2393da343ce0e7d630c050b09e36df805da2eb8a8acc","ssdeep":"","tlshash":"ec51bda1001be600eb470cc263ce7e39be0e61452446d5ba5bfe188c9cdbc227366f5e","first_seen":"2025-10-02T00:37:09.073684Z","last_seen":"2026-05-30T21:45:09.013954Z","times_seen":22,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":69,"dns":1,"connect":16,"send":0,"wait":35,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/wp-includes/css/dist/block-library/style.min.css","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:12.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapdrop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 17:26:26 GMT","end":"Mon, 29 Dec 2025 18:13:12 GMT"},"fingerprint":{"sha1":"8F:BC:36:F5:00:C6:56:6D:E9:C2:AB:63:8D:15:CD:DD:88:A2:0E:3C","sha256":"A9:67:EE:49:07:CC:75:F3:2F:CE:62:BD:AE:88:20:42:63:B3:B8:78:F3:B1:63:CF:34:9A:87:FE:0F:E9:E3:98"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css HTTP/1.1\r\nHost: fapdrop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 14 Oct 2025 02:49:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 15 Jul 2025 20:45:41 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 14360\r\ndate: Mon, 13 Oct 2025 03:48:12 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kz447KM4SbOHnKx6urjYfLdckpQOek26bExvT2CExbC2yH0HXsomwjqj2cCdw0meC3GZefp9%2BFAjVWUa4r%2Bv7ubl970uEZgmmQ%3D%3D\"}]}\r\nage: 493994\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98dbdc29bf89568b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":116345,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55654)","md5":"a06b3af98203ddc303997e0e0caaff83","sha1":"04c3e7de74a890d18014588c4e1f077a52d79acc","sha256":"838ede31a58a3cdb411d6dd7f13cbe65d4a26193d9fa31882854e63938f12bac","sha512":"4ce1079b8dc07043b0201dc74f5888b50aa530a4e604eecd7673e225946de62c421b290a707014ddaf4366591f8c4767737b5689bc44d57eb0a11aef905cead9","ssdeep":"3072:seeJu1iQg5MG7x+qehvP0x2pck2qkA3Pu:b1iQg5MG7x+qehvP0x2pck2lA2","tlshash":"34b3615417b4dcf935ffa73a5e4ee248a503aa41c68a57ebe066d190618ca490cf3f0f","first_seen":"2025-07-15T17:03:07.843749Z","last_seen":"2026-06-03T17:49:59.94612Z","times_seen":173741,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/b7/09/c5/b709c5ad6d7ca4b6de0d4b139433b86e/1756656476.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:34.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 02:32:56 GMT","end":"Sun, 07 Dec 2025 02:32:55 GMT"},"fingerprint":{"sha1":"F2:37:25:60:C4:34:06:EB:37:74:9F:D1:9C:FE:63:47:1F:30:4C:58","sha256":"AA:72:28:9B:C9:B7:77:AB:D7:89:4F:AC:CB:86:72:85:1D:1B:E5:15:4D:07:7B:D9:77:0F:D5:BE:92:06:8D:71"}}},"request":{"raw":"GET /cti/b7/09/c5/b709c5ad6d7ca4b6de0d4b139433b86e/1756656476.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 03:48:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 96055\r\nserver: nginx/1.21.6\r\nlast-modified: Sun, 31 Aug 2025 16:07:56 GMT\r\netag: \"68b4735c-17737\"\r\nexpires: Wed, 15 Oct 2025 03:48:34 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96055,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.3 (Macintosh), datetime=2025:08:30 15:39:44], progressive, precision 8, 300x250, components 3","md5":"cea1c2522ea23ff9805589bf49a8ae56","sha1":"d1575105c86e29e931c25250fc7295c5271cf084","sha256":"dff393c9f862d48bc9b68a9ec83e1a7326748a3d92a5916884961dfef0c8f0ea","sha512":"b7980259b7a0dd40cbd2b7d979d1ff304508460793fec5edfb60f07f7019ba81c297ab707b885f9f9ae1a7ed5de25dbf2e0daab75ffa0bf8d3e5d81cc77d1d66","ssdeep":"1536:6KgbTzLNKgbTzLsmSuBjRbi+ZbXB6iAcHUfhdFKj2vwsBLqG+UbP5D5:hg3zwg3zYuTbi+ZbR6iA3Jmj8sG+UT","tlshash":"c99302a85797daf3fdf0a1707081df4d2122bd46e2a3625ebd9c2706bb7435b498b041","first_seen":"2025-09-02T18:14:58.777112Z","last_seen":"2026-05-17T22:13:05.075222Z","times_seen":1166,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.freesound.org/previews/791/791510_5287430-lq.mp3","fqdn":"cdn.freesound.org","domain":"freesound.org","tld":"org"},"ip":{"addr":"37.27.227.73","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:12.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.freesound.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 15:15:35 GMT","end":"Fri, 12 Dec 2025 15:15:34 GMT"},"fingerprint":{"sha1":"60:8C:72:7E:50:7A:25:7F:AA:59:D6:05:63:72:F2:F6:91:09:35:C4","sha256":"69:BF:ED:49:38:B4:8F:E1:2B:2C:2F:69:88:07:41:F9:42:58:9D:17:3F:A5:D9:80:1E:87:C1:BD:2B:E8:9E:B0"}}},"request":{"raw":"GET /previews/791/791510_5287430-lq.mp3 HTTP/1.1\r\nHost: cdn.freesound.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 13 Oct 2025 03:48:12 GMT\r\nContent-Type: audio/mpeg\r\nContent-Length: 6696\r\nLast-Modified: Sat, 08 Mar 2025 16:40:46 GMT\r\nConnection: keep-alive\r\nETag: \"67cc730e-1a28\"\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nContent-Range: bytes 0-6695/6696\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6696,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 48 kHz, Monaural","md5":"1ef5250b54a5aba2cb51211fd480186a","sha1":"69076bd466bb5949abc611d51541e7c40994e9f5","sha256":"e220ba62d512ce00266746a8db22febd64cc2f3229ff8225c6767a0af12a0b8a","sha512":"6e4554e74f61599bc9d70e9826ff927ac368fd2a2dcf3a601424e57777438186bb3867488afc76513b5c6ee0b785e8369544dec68d3143c5eaa9807454eba536","ssdeep":"192:OgqWvPW3Se1xFSuFKYFGW/ikaUWv3lszV8:OgVvoSY1qW/Tazq6","tlshash":"c6d17de31e9fb206d40d2bf9378524d138d63c667c0640ed5c856bf918b7b4ce786058","first_seen":"2025-10-02T00:37:09.111575Z","last_seen":"2026-05-30T21:45:08.973701Z","times_seen":22,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":66,"dns":11,"connect":27,"send":0,"wait":44,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/cf-fonts/v/unbounded/5.0.18/latin/wght/normal.woff2","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:12.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapdrop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 17:26:26 GMT","end":"Mon, 29 Dec 2025 18:13:12 GMT"},"fingerprint":{"sha1":"8F:BC:36:F5:00:C6:56:6D:E9:C2:AB:63:8D:15:CD:DD:88:A2:0E:3C","sha256":"A9:67:EE:49:07:CC:75:F3:2F:CE:62:BD:AE:88:20:42:63:B3:B8:78:F3:B1:63:CF:34:9A:87:FE:0F:E9:E3:98"}}},"request":{"raw":"GET /cf-fonts/v/unbounded/5.0.18/latin/wght/normal.woff2 HTTP/1.1\r\nHost: fapdrop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Oct 2025 03:48:12 GMT\r\ncontent-length: 50992\r\ncontent-type: font/woff2\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZUtsG03%2BynhC%2BjKVt3BdkI6lEyDxkOBfF1loE0xeHnMzDvjSw7IxUBP1EuzN9VlLMSlyY3ObV8%2BRH4snzv5kScwNla9QPjOF2w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 98dbdc2b0f95568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50992,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50992, version 1.0","md5":"b11589bda16ed6367979ecf1cd021460","sha1":"7df26fbde4cbed6c5e57256c9606079ae728ae14","sha256":"09882553419f80b4008503e40ebb0635cad43aae20361f3fa11924f01ed68719","sha512":"73cf4f9a9e30e8037167d595b50b552067b42d8d1f69a8d6b8c63a3250794a2a49a9da03c15ace7c6c5e781ad2ce4164ad289afcfe011a2c3e0daa887495a7af","ssdeep":"1536:xIuf8UL/vzwin+A+Y5clqq5t9lE2tBYRhi1UE:xIuUUL/vj+svYtnEEBY4t","tlshash":"7b3302ac6ed04508d0cba737041a53cea6f68ec30916c67a7b30f997849daf2dd992c5","first_seen":"2024-10-15T22:19:18.262089Z","last_seen":"2026-05-23T00:17:34.447132Z","times_seen":109,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/wp-content/themes/king/layouts/js/sticky-kit.min.js","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:32.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapdrop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 17:26:26 GMT","end":"Mon, 29 Dec 2025 18:13:12 GMT"},"fingerprint":{"sha1":"8F:BC:36:F5:00:C6:56:6D:E9:C2:AB:63:8D:15:CD:DD:88:A2:0E:3C","sha256":"A9:67:EE:49:07:CC:75:F3:2F:CE:62:BD:AE:88:20:42:63:B3:B8:78:F3:B1:63:CF:34:9A:87:FE:0F:E9:E3:98"}}},"request":{"raw":"GET /wp-content/themes/king/layouts/js/sticky-kit.min.js HTTP/1.1\r\nHost: fapdrop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 19 Jan 2020 20:13:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1307\r\ndate: Mon, 13 Oct 2025 03:48:32 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FLbY4W4cex1qBcXfcAk70L7cl3trzM2n9RpkM%2BCuuITYfW5RN%2BtqHl8%2B27bjr5m5vPTHAF2j4uHeeAAK4Imw4oOmLGs9p7NwlA%3D%3D\"}]}\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98dbdca808e3568b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3268,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (546)","md5":"894bf69a88c8406680629c151343ff1e","sha1":"c51154c3433802a7b8d1a7f31e7aad54a3a2abf5","sha256":"7a39f30800c1ef8779686fd48037bb5d95fc6471cefe29e60c61f00ae2a846db","sha512":"0370375c11641aa18b80e38eb540bad194f4a94e3f72ec38598bb5379538aeaf617b965d75971cb8d463477062ee88363deb9a24bf6d6096bbafe76b302f4b50","ssdeep":"","tlshash":"946188d07751b938529da1646bae6501d1aed3bc57738060ee1e98c0185ce6a30f3fdb","first_seen":"2023-03-07T01:38:25Z","last_seen":"2026-06-03T12:44:12.705369Z","times_seen":5503,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/wp-content/themes/king/layouts/js/js.cookie.min.js","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:32.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapdrop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 17:26:26 GMT","end":"Mon, 29 Dec 2025 18:13:12 GMT"},"fingerprint":{"sha1":"8F:BC:36:F5:00:C6:56:6D:E9:C2:AB:63:8D:15:CD:DD:88:A2:0E:3C","sha256":"A9:67:EE:49:07:CC:75:F3:2F:CE:62:BD:AE:88:20:42:63:B3:B8:78:F3:B1:63:CF:34:9A:87:FE:0F:E9:E3:98"}}},"request":{"raw":"GET /wp-content/themes/king/layouts/js/js.cookie.min.js HTTP/1.1\r\nHost: fapdrop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 01 Oct 2020 17:47:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 763\r\ndate: Mon, 13 Oct 2025 03:48:32 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7MiJc9Km2XppooDEuKlR8SyPKBARlwxgp%2FAllYrpCSjknA1VAqAmmHX2540lsS2rVD%2BZE7isbICtyjg2Ub2C4db50ul649y%2Fug%3D%3D\"}]}\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98dbdca808e5568b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1685,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1649)","md5":"4f4a6fe904517658e996ead3ab6f73d6","sha1":"6661581652ed1e4171c3f2fc53668c914a2c219e","sha256":"b5c1a679368da537e7b0f6880801ab32fe84b38b900acdbc1fdbe8cd6a86c4c8","sha512":"872872a1aed89226b03ce80cd22983789e2dc7e57d3debb6754e8edc68418775d7fcd362011bc43c9a5992d77ab4e33937801d99c6ac17456f358d307b148d75","ssdeep":"","tlshash":"7c31b8de3095689a07070431073f2207f2ba5a36edddc8d04364e4f21a70a2901e7f7b","first_seen":"2023-03-07T13:02:52Z","last_seen":"2026-06-02T22:34:59.369111Z","times_seen":776,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/js/jads.js","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"92.222.100.135","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:32.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.jads.co","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Feb 2025 00:00:00 GMT","end":"Thu, 27 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"24:45:97:41:80:9C:3B:CE:BB:C3:B5:53:C5:0D:8C:BB:21:C9:56:20","sha256":"5F:96:09:03:1A:50:90:73:9C:60:3F:2D:35:D7:F2:4D:95:02:C6:38:BC:AB:88:FA:78:A4:8B:85:16:CB:F0:57"}}},"request":{"raw":"GET /js/jads.js HTTP/1.1\r\nHost: poweredby.jads.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 13 Oct 2025 03:48:32 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3769\r\nLast-Modified: Fri, 07 Mar 2025 18:31:37 GMT\r\nConnection: close\r\nETag: \"67cb3b89-eb9\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3769,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3769), with no line terminators","md5":"c344215f7f4c4339ef3ec474fab1d5d2","sha1":"56ae62e74a9560413819f5c829a689f11e0e8d4b","sha256":"4a80819c5ee89f3ea534b99fe485991302abc498d994ba29d5c893ac5d795f79","sha512":"77cb331606c75be717c9e04c1836c9b5c0e8011639b4063784f1159972e826b75c3d46625ca2b9e931e9934fb7febce6b9820cb0ac6692b108ff35de97f5a6e6","ssdeep":"","tlshash":"d971627733557879889b966f10ef6a18317faa310f0688025b9ce864987cdcb057fd84","first_seen":"2025-02-19T04:42:15.317534Z","last_seen":"2026-06-03T13:53:05.141441Z","times_seen":2503,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":105,"dns":20,"connect":33,"send":0,"wait":32,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/97/fc/e4/97fce4537c0f81f954d679ccebe0c47c.js","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"192.243.59.12","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:33.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 21:34:59 GMT","end":"Tue, 25 Nov 2025 21:34:58 GMT"},"fingerprint":{"sha1":"E4:24:47:01:B7:F3:A1:0B:CF:EA:36:36:30:C1:21:5D:9E:A1:7B:BE","sha256":"EE:DD:A9:31:87:F8:15:E5:A4:69:BA:E8:17:29:F1:0D:59:DC:1E:48:E2:EB:2F:1D:FE:D6:5C:C0:5F:03:5B:01"}}},"request":{"raw":"GET /97/fc/e4/97fce4537c0f81f954d679ccebe0c47c.js HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Mon, 13 Oct 2025 03:48:33 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3430\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 4be9de543ea3c4ae6cb6b7ca7fb4af48\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6293,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6293), with no line terminators","md5":"6062294451a7a581dc74178c7c5a1332","sha1":"c8e09f671561b72bdae9fd3cfeea799629430105","sha256":"c556ffdcc50d996a51234a1dec5ae85925ffa13c788b800be900dc5eb1344d79","sha512":"5b4bcb7d6530bfa8d33d4c769d0934938af4e7842a518556021ed900fad8a06bc39c2d35494586adf34e4d6fe19095b2d41c726b8214746527e04cec9e910594","ssdeep":"192:M/H3P83adOwGuABXfKOBPpzbo3j3rFuuV6:MP/83adOwWp0j3Buz","tlshash":"fbd1a8dc768070800be7e97f776f651ab06a58501c4fe491f003a9e83d6872ed63eac1","first_seen":"2025-09-26T11:10:49.483616Z","last_seen":"2025-10-14T12:32:44.197235Z","times_seen":1614,"resource_available":true,"data":null}},"time_used":698,"timings":{"blocked":301,"dns":15,"connect":93,"send":0,"wait":95,"receive":0,"ssl":191},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/watch.1445529373509.js?dev=e\u0026key=635b2315aeb203f10ce386ad75608b09\u0026kw=%5B%22fapdrop%22%5D\u0026pst=1760327373\u0026rb=\u0026refer=https%3A%2F%2Ffapdrop.com%2Fdownload%2F%3Fdldata%3D%7B%2522urls%2522%3A%5B%5B%2522https%3A%2F%2Fworkupload.com%2Ffile%2FxeguUD2TLxT%2522%2C%2522https%3A%2F%2Fgofile.io%2Fd%2FWmOdiD%2522%2C%2522https%3A%2F%2Fbuzzheavier.com%2F9tx3untaas0e%2522%5D%5D%2C%2522titles%2522%3A%5B%5B%2522Workupload%2522%2C%2522Gofile.io%2522%2C%2522Buzzheavier%2522%5D%5D%2C%2522platforms%2522%3A%5B%2522Windows%2C%2520Linux%2522%5D%7D\u0026res=14.3095\u0026rmtc=t\u0026shu=a3ee93882cf17e2e0fe0f19bbfd2153c924bf47590a234166e437fe63b6d19775316e52bfc0e3bba716868794caf4567895ae04bc0d6d361cf02094b98db572e42390a82bc9fb3a8edce2d72789fefca7e19962c219ca6d8412444\u0026tz=0\u0026uuid=6691d477-6294-430c-9206-8dacbe7d7ec2%3A3%3A1","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"192.243.59.12","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:33.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 21:34:59 GMT","end":"Tue, 25 Nov 2025 21:34:58 GMT"},"fingerprint":{"sha1":"E4:24:47:01:B7:F3:A1:0B:CF:EA:36:36:30:C1:21:5D:9E:A1:7B:BE","sha256":"EE:DD:A9:31:87:F8:15:E5:A4:69:BA:E8:17:29:F1:0D:59:DC:1E:48:E2:EB:2F:1D:FE:D6:5C:C0:5F:03:5B:01"}}},"request":{"raw":"GET /watch.1445529373509.js?dev=e\u0026key=635b2315aeb203f10ce386ad75608b09\u0026kw=%5B%22fapdrop%22%5D\u0026pst=1760327373\u0026rb=\u0026refer=https%3A%2F%2Ffapdrop.com%2Fdownload%2F%3Fdldata%3D%7B%2522urls%2522%3A%5B%5B%2522https%3A%2F%2Fworkupload.com%2Ffile%2FxeguUD2TLxT%2522%2C%2522https%3A%2F%2Fgofile.io%2Fd%2FWmOdiD%2522%2C%2522https%3A%2F%2Fbuzzheavier.com%2F9tx3untaas0e%2522%5D%5D%2C%2522titles%2522%3A%5B%5B%2522Workupload%2522%2C%2522Gofile.io%2522%2C%2522Buzzheavier%2522%5D%5D%2C%2522platforms%2522%3A%5B%2522Windows%2C%2520Linux%2522%5D%7D\u0026res=14.3095\u0026rmtc=t\u0026shu=a3ee93882cf17e2e0fe0f19bbfd2153c924bf47590a234166e437fe63b6d19775316e52bfc0e3bba716868794caf4567895ae04bc0d6d361cf02094b98db572e42390a82bc9fb3a8edce2d72789fefca7e19962c219ca6d8412444\u0026tz=0\u0026uuid=6691d477-6294-430c-9206-8dacbe7d7ec2%3A3%3A1 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://fapdrop.com\r\nReferer: https://fapdrop.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.3jBLGPh4jx0Icz51Xlb06rStZS0jDuEqMW4tpBnC3KU\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Mon, 13 Oct 2025 03:48:33 GMT\r\nContent-Type: text/html\r\nContent-Length: 2279\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nAccess-Control-Allow-Origin: https://fapdrop.com\r\nAccess-Control-Allow-Credentials: true\r\nVary: Accept-Encoding\r\nSet-Cookie: uid_id2=6691d477-6294-430c-9206-8dacbe7d7ec2:3:1; expires=Mon, 20 Oct 2025 03:48:33 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Tue, 14 Oct 2025 03:48:33 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Tue, 14 Oct 2025 03:48:33 GMT; path=/; secure; SameSite=None\npdhtkv23=true; expires=Tue, 14 Oct 2025 03:48:33 GMT; path=/; secure; SameSite=None\nuncs23=1; expires=Tue, 14 Oct 2025 03:48:33 GMT; path=/; secure; SameSite=None\nu_pl15676552=1; expires=Tue, 14 Oct 2025 03:48:33 GMT; path=/; secure; SameSite=None\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 6c260d4f8f9b648948916318c0ebb522\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4826,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (3950)","md5":"9724cfd92e3a48106c073ec277969a80","sha1":"8b76b7eb3f5895d181ef77105a59f5b2ec3b6082","sha256":"df29961f2e30cea17567c287cf4e8258ed8466c6a98db604c140bce89773f6c7","sha512":"06ac634a004f5abec5fe4ed3c1a021ce14e59ce7d8f39e497cf91a0f88c486f18032e2b8598d4a617a053b03072f454b50455b99c25b4ba4b6b3cec9015505fd","ssdeep":"96:Ioz9kpkiDXVePPVVdY1EnD598G9cDXVePPVVdY1EnD598XUe1/DiCfMEDaH:Rz6DwPrdY1EnD8GODwPrdY1EnD8tbiCi","tlshash":"6ca12aba5ed2742821e665bf26b9f259b9b6a10bcd1ccc447c0cb1600bc4d715de7b88","first_seen":"2025-10-13T03:48:44.323687Z","last_seen":"2025-10-13T03:48:44.323687Z","times_seen":1,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":136,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/64/84/55/648455d14351f082406d919c7ded5911/1756656812.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:34.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 02:32:56 GMT","end":"Sun, 07 Dec 2025 02:32:55 GMT"},"fingerprint":{"sha1":"F2:37:25:60:C4:34:06:EB:37:74:9F:D1:9C:FE:63:47:1F:30:4C:58","sha256":"AA:72:28:9B:C9:B7:77:AB:D7:89:4F:AC:CB:86:72:85:1D:1B:E5:15:4D:07:7B:D9:77:0F:D5:BE:92:06:8D:71"}}},"request":{"raw":"GET /cti/64/84/55/648455d14351f082406d919c7ded5911/1756656812.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 03:48:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 53256\r\nserver: nginx/1.21.6\r\nlast-modified: Sun, 31 Aug 2025 16:13:32 GMT\r\netag: \"68b474ac-d008\"\r\nexpires: Wed, 15 Oct 2025 03:48:34 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":53256,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.3 (Macintosh), datetime=2025:08:29 16:43:07], progressive, precision 8, 728x90, components 3","md5":"4c5c2570b33199ffda90981fe1da750e","sha1":"2077252b068c40b2ce598235ab01534aaf2bc897","sha256":"9e4a2e335b033d6caf93236c0905e543b644412d53c49e9af23ffcd1d69c9c60","sha512":"02e9518a66b52533ecf3d50064f86074137e37c0b27d2ca2b2ebf8b212cc95812abd3eb36d7f00c9b7c0d1db702f7fd0c7522b69d2920ac031825d04d1c33cb4","ssdeep":"768:2w+h7WEiSw+h7WSEYyNt1GGJD6G4257X0yhGw3qUxdLoxPCCtfm3EXAcg95UVh:2Rh6CRh6SERt1GGJw25Avwf4PtKEXbga","tlshash":"df33d11cfba6de21fde5d2b410a3ca96b3276b04a3b375907c9d694137f06826d8e112","first_seen":"2025-09-02T16:16:24.139468Z","last_seen":"2026-05-19T08:00:07.84784Z","times_seen":722,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":75,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/wp-content/themes/king/layouts/custom-styles.css","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:12.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapdrop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 17:26:26 GMT","end":"Mon, 29 Dec 2025 18:13:12 GMT"},"fingerprint":{"sha1":"8F:BC:36:F5:00:C6:56:6D:E9:C2:AB:63:8D:15:CD:DD:88:A2:0E:3C","sha256":"A9:67:EE:49:07:CC:75:F3:2F:CE:62:BD:AE:88:20:42:63:B3:B8:78:F3:B1:63:CF:34:9A:87:FE:0F:E9:E3:98"}}},"request":{"raw":"GET /wp-content/themes/king/layouts/custom-styles.css HTTP/1.1\r\nHost: fapdrop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 14 Oct 2025 02:49:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 02 Oct 2025 23:30:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2856\r\ndate: Mon, 13 Oct 2025 03:48:12 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=poWxB8Wv%2BbXwbmaDrcoYpaC7A23%2FT4iOhPDK3cht1BM%2BrsYL%2F73x%2BRDnS4xLRdJtf16X5heS%2B48aS91jFbAwGHtpQwAJ0IQL2w%3D%3D\"}]}\r\nage: 355123\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98dbdc29af86568b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12856,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF, LF line terminators","md5":"65aea4a518d14c3d06d236502212e80e","sha1":"447818ea68097513af78683b9f2f64ac098f8f58","sha256":"d3b97b95ececcbc537a982ccd34be340c668d66f3c9de9ca85bc510c3b70a02c","sha512":"be77cbde8005ee334c21c5fa873ebba052eb641fa1fa933cf0530b416dd6406168486b84156af001459825c95095fda1df72f434295bcf96d4707b94d54b4b62","ssdeep":"192:Dk8RgQWR+SRVP6ZKIiQzTFK4Cf2W0NqtI+RB0Z4RzIZfbYu+h5c5EOFzw:OkNztM4+RB/","tlshash":"6c428365a88120853237c77caf90b505dbdc01d3de8c17dab096b56ecfe08e560baf58","first_seen":"2025-10-02T00:37:09.110552Z","last_seen":"2026-01-07T14:56:57.576579Z","times_seen":12,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/wp-content/themes/king/layouts/font-awesome/css/all.min.css","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:12.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapdrop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 17:26:26 GMT","end":"Mon, 29 Dec 2025 18:13:12 GMT"},"fingerprint":{"sha1":"8F:BC:36:F5:00:C6:56:6D:E9:C2:AB:63:8D:15:CD:DD:88:A2:0E:3C","sha256":"A9:67:EE:49:07:CC:75:F3:2F:CE:62:BD:AE:88:20:42:63:B3:B8:78:F3:B1:63:CF:34:9A:87:FE:0F:E9:E3:98"}}},"request":{"raw":"GET /wp-content/themes/king/layouts/font-awesome/css/all.min.css HTTP/1.1\r\nHost: fapdrop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 14 Oct 2025 02:49:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Nov 2023 01:29:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 21869\r\ndate: Mon, 13 Oct 2025 03:48:12 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ScanQkWTLfxIFO7s7RlC%2FMfM9ZBFIQuk3D%2BbKV2grlb5lifRJMyt62j7ziOOBnEKI2rkH3wXzpKZKafzFlL%2FCb4SWVxO4Tahfw%3D%3D\"}]}\r\nage: 202686\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98dbdc29bf8b568b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":102217,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (52276)","md5":"5222e06b77a1692fa2520a219840e6be","sha1":"8b4236206a8b86af3761a244277663046d7ff7ee","sha256":"0934b1fc0d3a766d41d3adf5e7a115875e66e98ebba408d965a41cf3d2cb4ab5","sha512":"cf780ba5def29277f562835b0b3a9129ce2aca8afc81a294d6a9a7f824a1c5bb81bac00d23d42946884606b7821642b12e17a2e92f424171446db2aea8b8340c","ssdeep":"1536:0wMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuuprrlCq:M709gMGFiyPGuuprlCq","tlshash":"09a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-08-04T22:28:10Z","last_seen":"2026-06-03T17:57:31.413653Z","times_seen":42957,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/cf-fonts/s/nunito/5.0.16/latin/400/italic.woff2","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:12.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapdrop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 17:26:26 GMT","end":"Mon, 29 Dec 2025 18:13:12 GMT"},"fingerprint":{"sha1":"8F:BC:36:F5:00:C6:56:6D:E9:C2:AB:63:8D:15:CD:DD:88:A2:0E:3C","sha256":"A9:67:EE:49:07:CC:75:F3:2F:CE:62:BD:AE:88:20:42:63:B3:B8:78:F3:B1:63:CF:34:9A:87:FE:0F:E9:E3:98"}}},"request":{"raw":"GET /cf-fonts/s/nunito/5.0.16/latin/400/italic.woff2 HTTP/1.1\r\nHost: fapdrop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Oct 2025 03:48:12 GMT\r\ncontent-length: 17152\r\ncontent-type: font/woff2\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gKFji%2FvN%2FVAHLMf1%2FBMA8h6fEcTQ3r0b5jgLgYGEUg4qVXkpUwzDIM2wyK9NsNloiGg46v%2F2xcIrHPTAsTB15Dcbo5CPsbxkDA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 98dbdc2b0f94568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17152,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 17152, version 1.0","md5":"c4ecf26c93e82f86fe595a9bf32842d6","sha1":"b83fc82edffc9bb4c37ac5880d2bd1dcf6786af9","sha256":"e6ecac0ede2ab1bfca774a00d85821dad2b187d76e7faa2deaa4af21b91c9b5e","sha512":"f876fe2a1c48951c7a5ce5844cea06bca7fb19ed83b4c42e3be61c1ef5315c305af8eaf2904e45a483082dd97de9207af0d17aa3be5c61bc9aaf3b7a8b6419e3","ssdeep":"384:3Pk7Z6gIfK4ppenza3oMcb255YdDKX4q3ljRPS/dD25ztU1:M7Z6RKOezHRb00Up31V8hIz61","tlshash":"b772d0c11546f85ec9d7aa350c70ae20d23f391cc134af8a26af89e50c6f06b3374d21","first_seen":"2023-09-17T03:20:56Z","last_seen":"2026-05-19T04:33:44.071243Z","times_seen":95,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/wp-content/themes/king/layouts/js/magnific-popup/jquery.magnific-popup.min.js","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:32.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapdrop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 17:26:26 GMT","end":"Mon, 29 Dec 2025 18:13:12 GMT"},"fingerprint":{"sha1":"8F:BC:36:F5:00:C6:56:6D:E9:C2:AB:63:8D:15:CD:DD:88:A2:0E:3C","sha256":"A9:67:EE:49:07:CC:75:F3:2F:CE:62:BD:AE:88:20:42:63:B3:B8:78:F3:B1:63:CF:34:9A:87:FE:0F:E9:E3:98"}}},"request":{"raw":"GET /wp-content/themes/king/layouts/js/magnific-popup/jquery.magnific-popup.min.js HTTP/1.1\r\nHost: fapdrop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 07 Nov 2021 15:36:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 7043\r\ndate: Mon, 13 Oct 2025 03:48:32 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ejd7Oaqibpf31vdQIFepgDoPbf8HzsxxvW7hzcBzGnfqEX3BEWwI24xQ6zgR1PEWXwE%2BYCyxMxEcyetPPmgfbd2v%2BD%2BLckOQQ%3D%3D\"}]}\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98dbdca808e7568b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":20216,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20087)","md5":"ba6cf724c8bb1cf5b084e79ff230626e","sha1":"f455c5f153f872e52265f87a644ff89fe14a6fb6","sha256":"3fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4","sha512":"22c361e44dde632dedaff2625f6631e2fb02ba3b6487097b48baa09f02cd81fd381ebb7d053f525e52e56655b1f8e2b89ddcc0a002e1b0c35c0a6920823641d7","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst","tlshash":"bd921894f2b2b21383a735b8686f70093a729952ed06c855a55d94d87efcec89037f3c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-03T17:50:27.676927Z","times_seen":65764,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"torchfriendlypay.com/watch.68605308904.js?key=373b5a10d390ec502c7d535d6fd9966c\u0026kw=%5B%22fapdrop%22%5D\u0026refer=https%3A%2F%2Ffapdrop.com%2Fdownload%2F%3Fdldata%3D%7B%2522urls%2522%3A%5B%5B%2522https%3A%2F%2Fworkupload.com%2Ffile%2FxeguUD2TLxT%2522%2C%2522https%3A%2F%2Fgofile.io%2Fd%2FWmOdiD%2522%2C%2522https%3A%2F%2Fbuzzheavier.com%2F9tx3untaas0e%2522%5D%5D%2C%2522titles%2522%3A%5B%5B%2522Workupload%2522%2C%2522Gofile.io%2522%2C%2522Buzzheavier%2522%5D%5D%2C%2522platforms%2522%3A%5B%2522Windows%2C%2520Linux%2522%5D%7D\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=0a8ec9ad-6a09-43c7-812a-10f77ab14180%3A1%3A1","fqdn":"torchfriendlypay.com","domain":"torchfriendlypay.com","tld":"com"},"ip":{"addr":"192.243.59.12","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:33.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"torchfriendlypay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 22:09:22 GMT","end":"Tue, 25 Nov 2025 22:09:21 GMT"},"fingerprint":{"sha1":"11:D6:40:9F:C0:3E:93:5F:D7:10:AB:88:ED:35:EF:8D:BC:BA:B6:BE","sha256":"46:DD:4D:E7:2C:ED:72:DC:3F:71:6D:46:29:34:DC:D7:AC:E1:73:91:92:2F:5C:B4:86:3E:AE:F7:FB:A4:58:10"}}},"request":{"raw":"GET /watch.68605308904.js?key=373b5a10d390ec502c7d535d6fd9966c\u0026kw=%5B%22fapdrop%22%5D\u0026refer=https%3A%2F%2Ffapdrop.com%2Fdownload%2F%3Fdldata%3D%7B%2522urls%2522%3A%5B%5B%2522https%3A%2F%2Fworkupload.com%2Ffile%2FxeguUD2TLxT%2522%2C%2522https%3A%2F%2Fgofile.io%2Fd%2FWmOdiD%2522%2C%2522https%3A%2F%2Fbuzzheavier.com%2F9tx3untaas0e%2522%5D%5D%2C%2522titles%2522%3A%5B%5B%2522Workupload%2522%2C%2522Gofile.io%2522%2C%2522Buzzheavier%2522%5D%5D%2C%2522platforms%2522%3A%5B%2522Windows%2C%2520Linux%2522%5D%7D\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=0a8ec9ad-6a09-43c7-812a-10f77ab14180%3A1%3A1 HTTP/1.1\r\nHost: torchfriendlypay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://fapdrop.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.19.5\r\nDate: Mon, 13 Oct 2025 03:48:33 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nAccess-Control-Allow-Origin: https://fapdrop.com\r\nAccess-Control-Allow-Credentials: true\r\nLocation: https://torchfriendlypay.com/watch.68605308904.js?dev=e\u0026key=373b5a10d390ec502c7d535d6fd9966c\u0026kw=%5B%22fapdrop%22%5D\u0026pst=1760327373\u0026rb=\u0026refer=https%3A%2F%2Ffapdrop.com%2Fdownload%2F%3Fdldata%3D%7B%2522urls%2522%3A%5B%5B%2522https%3A%2F%2Fworkupload.com%2Ffile%2FxeguUD2TLxT%2522%2C%2522https%3A%2F%2Fgofile.io%2Fd%2FWmOdiD%2522%2C%2522https%3A%2F%2Fbuzzheavier.com%2F9tx3untaas0e%2522%5D%5D%2C%2522titles%2522%3A%5B%5B%2522Workupload%2522%2C%2522Gofile.io%2522%2C%2522Buzzheavier%2522%5D%5D%2C%2522platforms%2522%3A%5B%2522Windows%2C%2520Linux%2522%5D%7D\u0026res=14.3095\u0026rmtc=t\u0026shu=2c567af2f68b9a9fe5aa364256df123a0889e0e8b742cbe7c1a100b53442dba1ab9c349c9666301fe39168b46eac346b5117a07ebd9604e36b511e485455014257fc4a4d67e580e48dad4d1b3a5ef54d759ee0b8b8089300b45679\u0026tz=0\u0026uuid=0a8ec9ad-6a09-43c7-812a-10f77ab14180%3A1%3A1\r\nSet-Cookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.1TJUDjGnAnz4HfCbPJebWzg0HQXxKIarBD3RB23w3FQ; expires=Mon, 13 Oct 2025 03:49:33 GMT; path=/; secure; SameSite=None\r\nHost: torchfriendlypay.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 15113078b182f7a1d049606016b1dc3f\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4792,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":673,"timings":{"blocked":288,"dns":1,"connect":94,"send":0,"wait":96,"receive":1,"ssl":189},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"torchfriendlypay.com/watch.68605308904.js?dev=e\u0026key=373b5a10d390ec502c7d535d6fd9966c\u0026kw=%5B%22fapdrop%22%5D\u0026pst=1760327373\u0026rb=\u0026refer=https%3A%2F%2Ffapdrop.com%2Fdownload%2F%3Fdldata%3D%7B%2522urls%2522%3A%5B%5B%2522https%3A%2F%2Fworkupload.com%2Ffile%2FxeguUD2TLxT%2522%2C%2522https%3A%2F%2Fgofile.io%2Fd%2FWmOdiD%2522%2C%2522https%3A%2F%2Fbuzzheavier.com%2F9tx3untaas0e%2522%5D%5D%2C%2522titles%2522%3A%5B%5B%2522Workupload%2522%2C%2522Gofile.io%2522%2C%2522Buzzheavier%2522%5D%5D%2C%2522platforms%2522%3A%5B%2522Windows%2C%2520Linux%2522%5D%7D\u0026res=14.3095\u0026rmtc=t\u0026shu=2c567af2f68b9a9fe5aa364256df123a0889e0e8b742cbe7c1a100b53442dba1ab9c349c9666301fe39168b46eac346b5117a07ebd9604e36b511e485455014257fc4a4d67e580e48dad4d1b3a5ef54d759ee0b8b8089300b45679\u0026tz=0\u0026uuid=0a8ec9ad-6a09-43c7-812a-10f77ab14180%3A1%3A1","fqdn":"torchfriendlypay.com","domain":"torchfriendlypay.com","tld":"com"},"ip":{"addr":"192.243.59.12","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:33.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"torchfriendlypay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 22:09:22 GMT","end":"Tue, 25 Nov 2025 22:09:21 GMT"},"fingerprint":{"sha1":"11:D6:40:9F:C0:3E:93:5F:D7:10:AB:88:ED:35:EF:8D:BC:BA:B6:BE","sha256":"46:DD:4D:E7:2C:ED:72:DC:3F:71:6D:46:29:34:DC:D7:AC:E1:73:91:92:2F:5C:B4:86:3E:AE:F7:FB:A4:58:10"}}},"request":{"raw":"GET /watch.68605308904.js?dev=e\u0026key=373b5a10d390ec502c7d535d6fd9966c\u0026kw=%5B%22fapdrop%22%5D\u0026pst=1760327373\u0026rb=\u0026refer=https%3A%2F%2Ffapdrop.com%2Fdownload%2F%3Fdldata%3D%7B%2522urls%2522%3A%5B%5B%2522https%3A%2F%2Fworkupload.com%2Ffile%2FxeguUD2TLxT%2522%2C%2522https%3A%2F%2Fgofile.io%2Fd%2FWmOdiD%2522%2C%2522https%3A%2F%2Fbuzzheavier.com%2F9tx3untaas0e%2522%5D%5D%2C%2522titles%2522%3A%5B%5B%2522Workupload%2522%2C%2522Gofile.io%2522%2C%2522Buzzheavier%2522%5D%5D%2C%2522platforms%2522%3A%5B%2522Windows%2C%2520Linux%2522%5D%7D\u0026res=14.3095\u0026rmtc=t\u0026shu=2c567af2f68b9a9fe5aa364256df123a0889e0e8b742cbe7c1a100b53442dba1ab9c349c9666301fe39168b46eac346b5117a07ebd9604e36b511e485455014257fc4a4d67e580e48dad4d1b3a5ef54d759ee0b8b8089300b45679\u0026tz=0\u0026uuid=0a8ec9ad-6a09-43c7-812a-10f77ab14180%3A1%3A1 HTTP/1.1\r\nHost: torchfriendlypay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://fapdrop.com\r\nReferer: https://fapdrop.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.1TJUDjGnAnz4HfCbPJebWzg0HQXxKIarBD3RB23w3FQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Mon, 13 Oct 2025 03:48:33 GMT\r\nContent-Type: text/html\r\nContent-Length: 2208\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nAccess-Control-Allow-Origin: https://fapdrop.com\r\nAccess-Control-Allow-Credentials: true\r\nVary: Accept-Encoding\r\nSet-Cookie: uid_id2=0a8ec9ad-6a09-43c7-812a-10f77ab14180:1:1; expires=Mon, 20 Oct 2025 03:48:33 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Tue, 14 Oct 2025 03:48:33 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Tue, 14 Oct 2025 03:48:33 GMT; path=/; secure; SameSite=None\npdhtkv5=true; expires=Tue, 14 Oct 2025 03:48:33 GMT; path=/; secure; SameSite=None\nuncs5=1; expires=Tue, 14 Oct 2025 03:48:33 GMT; path=/; secure; SameSite=None\nu_pl15212618=1; expires=Tue, 14 Oct 2025 03:48:33 GMT; path=/; secure; SameSite=None\r\nHost: torchfriendlypay.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: afd6da3a800fd5beed79826d32cf7d50\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4792,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (3916)","md5":"b20e01d44f0f2cbf7b844961a80c2567","sha1":"7e6245c9e69a0ca36aa21f3b43f3eb3eacb3f875","sha256":"ec882f25054278ffb6d2c9ef98c3944247075fca0fe4e50ef61888837a37647c","sha512":"b813efdcfab53e4200b6b1ff3b0fd7a5230c7d0dbcc38f18034495db8b46bbfae285ab023faf2a03265abd112d038324012fab06027294b3134c79241122962a","ssdeep":"96:oaozNBNjA7k3Ocuv9n7k3Oc21/D6wgCfMEDaH:oXzfj+7u+5b6wgCkCaH","tlshash":"6da10b6daadf60b85513b12f2abea7653d61c00b0580fa43b81cf64b1f207744e67ed9","first_seen":"2025-10-13T03:48:44.38246Z","last_seen":"2025-10-13T03:48:44.38246Z","times_seen":1,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/wp-content/uploads/2021/03/Fapdrop-Logo.svg","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:12.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapdrop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 17:26:26 GMT","end":"Mon, 29 Dec 2025 18:13:12 GMT"},"fingerprint":{"sha1":"8F:BC:36:F5:00:C6:56:6D:E9:C2:AB:63:8D:15:CD:DD:88:A2:0E:3C","sha256":"A9:67:EE:49:07:CC:75:F3:2F:CE:62:BD:AE:88:20:42:63:B3:B8:78:F3:B1:63:CF:34:9A:87:FE:0F:E9:E3:98"}}},"request":{"raw":"GET /wp-content/uploads/2021/03/Fapdrop-Logo.svg HTTP/1.1\r\nHost: fapdrop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 14 Oct 2025 02:49:05 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 18 Mar 2021 14:59:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1851\r\ndate: Mon, 13 Oct 2025 03:48:12 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MfFxnEz%2BeAnBbRKCOeHtdTfQzoBERokD84%2FZkOSJldGRBpyTh56HODjQE99tDKaCzSZ6ZrDXepG%2FuTM6%2FbRs3OXEe5tjs%2BkkIw%3D%3D\"}]}\r\nage: 355122\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98dbdc29bf87568b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5334,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e014b084c59452b5db3cfc1bce3abc7c","sha1":"d40ce289136fd2ec361eacad128227b7f585679d","sha256":"4686929e29fe033fcb210d008ab0bd150f41ff9f37918687a071a05a9136860b","sha512":"ca454966b4e8e831cf21c25751e5973950a068d9ac7e0096d265e99a1fa0c2e557348ca9bb68f66fd0d6fda9c3e489daac8bb69ac0dc44279c6d2688b40c9d56","ssdeep":"96:98ZvQ0ocRgoNg9x8om92xaocnbTQoJlapbR9g9x8orDambscccccccccccccccc3:98uoUg92ov264cccccccccccccccccxM","tlshash":"47b12ea1c545e9f9757e1f50f264e2602d2e6c6e3306dd1cf71107b48d88aa3287ca9e","first_seen":"2025-10-02T00:37:09.063258Z","last_seen":"2026-05-30T21:45:08.971562Z","times_seen":22,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/wp-content/uploads/hummingbird-assets/733fc64d7730f0e651e7a7dcb3c4fc2b.js","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:32.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapdrop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 17:26:26 GMT","end":"Mon, 29 Dec 2025 18:13:12 GMT"},"fingerprint":{"sha1":"8F:BC:36:F5:00:C6:56:6D:E9:C2:AB:63:8D:15:CD:DD:88:A2:0E:3C","sha256":"A9:67:EE:49:07:CC:75:F3:2F:CE:62:BD:AE:88:20:42:63:B3:B8:78:F3:B1:63:CF:34:9A:87:FE:0F:E9:E3:98"}}},"request":{"raw":"GET /wp-content/uploads/hummingbird-assets/733fc64d7730f0e651e7a7dcb3c4fc2b.js HTTP/1.1\r\nHost: fapdrop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 07 Oct 2025 02:46:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 610\r\ndate: Mon, 13 Oct 2025 03:48:32 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TPrDdSdGtrX3d3kMWhKDkYjm5CS9nKlq6WfCOPjHRSIX8eEp%2FYAO6oGf%2BHndIbXEHOVgsVrJMFsPPOcHT1V1k5uOHLe4O9xeEA%3D%3D\"}]}\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98dbdca808e6568b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2018,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1989), with CRLF line terminators","md5":"c0b373ce46b0f07a16fff5411b74d9da","sha1":"039c345a905ecf3b8c49808b42e823fc55b61a59","sha256":"010c105dad177c7193cdbc847d031aa7e1c8d9a08ecad908a0a3fe527ad76d4a","sha512":"829e1897cf26e97f3ec23df449dc311faeca453804393429478e6a646d1fc8729d97be4a0356d2bb1fd704dc5b9e8732ce1ef9b901e89fc1a50a2dede596769d","ssdeep":"","tlshash":"a7410e3efa3562f211a32276153bb941b1b23c390112ab0161116c731ebd99f7a6ba5f","first_seen":"2025-10-02T00:37:09.105503Z","last_seen":"2026-05-30T21:45:09.006565Z","times_seen":22,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dowryhandgripballot.com/57df83d1b9f2ba72d1160debb4f63fa7/invoke.js","fqdn":"dowryhandgripballot.com","domain":"dowryhandgripballot.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:32.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dowryhandgripballot.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 21:21:17 GMT","end":"Tue, 23 Dec 2025 21:21:16 GMT"},"fingerprint":{"sha1":"63:F7:AF:6F:19:7D:8D:4A:AE:70:B1:09:04:E3:4F:F0:6C:E8:F3:16","sha256":"5C:7B:97:61:1C:91:E0:5C:D8:09:E4:4A:87:75:51:08:DE:D8:A1:04:F0:37:55:13:66:23:A1:79:89:8A:3E:EE"}}},"request":{"raw":"GET /57df83d1b9f2ba72d1160debb4f63fa7/invoke.js HTTP/1.1\r\nHost: dowryhandgripballot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Mon, 13 Oct 2025 03:48:33 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 13563\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 6\r\nHost: dowryhandgripballot.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: f646157e7bffc992fe2c736b256f6e3f\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":34946,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (34944), with no line terminators","md5":"0e4d9f2ec18337be3a680c6002914a02","sha1":"f39ffc25c6df502a497b554d6414c57ff92ba71b","sha256":"6a8b60707a9e6a9fa1681b27f81112b4b03472e3edb29bcd1b0b6e7586f49ff8","sha512":"c9e8df1f86e4f2f918d19af792dddae28a817b8cc72535048109fffabf049682b8502825803fef982de5369f9205f750529bb1b58ad2ade1199763ce0ca49fdc","ssdeep":"768:Z5N53pWAz9XpKxersvcj/ctcRXklsxTlCMHUdtJJLpp24DQhJEOlhPzpO:t9XpKxjeEtcRXklsiwfGQNs","tlshash":"89f2d698bf20e66d239fb0732e3f910bf1255919b9c9e648e105dc6856ac70ac93ee44","first_seen":"2025-10-13T03:48:44.403459Z","last_seen":"2025-10-13T03:48:44.403459Z","times_seen":1,"resource_available":false,"data":null}},"time_used":775,"timings":{"blocked":282,"dns":19,"connect":92,"send":0,"wait":100,"receive":92,"ssl":186},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"dowryhandgripballot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"dowryhandgripballot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"dowryhandgripballot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dowryhandgripballot.com/635b2315aeb203f10ce386ad75608b09/invoke.js","fqdn":"dowryhandgripballot.com","domain":"dowryhandgripballot.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:33.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dowryhandgripballot.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 21:21:17 GMT","end":"Tue, 23 Dec 2025 21:21:16 GMT"},"fingerprint":{"sha1":"63:F7:AF:6F:19:7D:8D:4A:AE:70:B1:09:04:E3:4F:F0:6C:E8:F3:16","sha256":"5C:7B:97:61:1C:91:E0:5C:D8:09:E4:4A:87:75:51:08:DE:D8:A1:04:F0:37:55:13:66:23:A1:79:89:8A:3E:EE"}}},"request":{"raw":"GET /635b2315aeb203f10ce386ad75608b09/invoke.js HTTP/1.1\r\nHost: dowryhandgripballot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Mon, 13 Oct 2025 03:48:33 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 16285\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: dowryhandgripballot.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 53d9d5ffe12c3e17b0867e121ea0e7d4\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38362,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (38362), with no line terminators","md5":"69af74b23ccd425339ad78d275f706e5","sha1":"29461529cb9ccc44206b7e35c104482efb6d93f6","sha256":"357175e6b2c88c84c0b646b3177c9adf0b401fa584f95e1bcc80ee72c0fa4141","sha512":"2da3a4ef04a6f9d9bf82af631ef8dbb81677a190e9f5269fbf7af4a86ab5d0cc96a6ed3b57bc8f6325dbf5bd75ec1d1862ebc3962ac1438bb0caafb1252f1c77","ssdeep":"768:fkqtST4OYZ748I6ngkkLXcj3PKFMrj2W+MwgHy:8qtTO248I6ng6CIj2XMwL","tlshash":"7a03c8893fa1b85d0796a033723f840af6ee4e0454dcd8e8e407aca0fe64755d4b7ea5","first_seen":"2025-10-09T23:54:07.843606Z","last_seen":"2025-10-13T03:48:44.417211Z","times_seen":2,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":100,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"dowryhandgripballot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"dowryhandgripballot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"dowryhandgripballot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/watch.532781649390.js?dev=e\u0026key=373b5a10d390ec502c7d535d6fd9966c\u0026kw=%5B%22fapdrop%22%5D\u0026pst=1760327373\u0026rb=\u0026refer=https%3A%2F%2Ffapdrop.com%2Fdownload%2F%3Fdldata%3D%7B%2522urls%2522%3A%5B%5B%2522https%3A%2F%2Fworkupload.com%2Ffile%2FxeguUD2TLxT%2522%2C%2522https%3A%2F%2Fgofile.io%2Fd%2FWmOdiD%2522%2C%2522https%3A%2F%2Fbuzzheavier.com%2F9tx3untaas0e%2522%5D%5D%2C%2522titles%2522%3A%5B%5B%2522Workupload%2522%2C%2522Gofile.io%2522%2C%2522Buzzheavier%2522%5D%5D%2C%2522platforms%2522%3A%5B%2522Windows%2C%2520Linux%2522%5D%7D\u0026res=14.3095\u0026rmtc=t\u0026shu=a8f7b6a15c29844c0bb707b1f86a2d0d5ef7763fb64b78b713a8a0864d1b5f2dd1464abcbb0e285c126fda8a55451e8dfd253f48c7ed0c8a976616b61e10a12277ca7e0a3311ab4f50c8688cc5575664a1faf47d7bf2069854be7a\u0026tz=0\u0026uuid=0a8ec9ad-6a09-43c7-812a-10f77ab14180%3A1%3A1","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:34.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 22:00:34 GMT","end":"Tue, 25 Nov 2025 22:00:33 GMT"},"fingerprint":{"sha1":"FC:5B:24:E2:ED:A9:65:69:CA:97:74:44:F8:E9:93:1A:50:E7:73:C1","sha256":"26:1B:F8:72:30:B2:C4:49:6A:2E:E7:A5:FC:26:35:74:02:CB:56:D1:F7:7E:A5:5E:89:65:A9:B4:1F:1F:DB:8F"}}},"request":{"raw":"GET /watch.532781649390.js?dev=e\u0026key=373b5a10d390ec502c7d535d6fd9966c\u0026kw=%5B%22fapdrop%22%5D\u0026pst=1760327373\u0026rb=\u0026refer=https%3A%2F%2Ffapdrop.com%2Fdownload%2F%3Fdldata%3D%7B%2522urls%2522%3A%5B%5B%2522https%3A%2F%2Fworkupload.com%2Ffile%2FxeguUD2TLxT%2522%2C%2522https%3A%2F%2Fgofile.io%2Fd%2FWmOdiD%2522%2C%2522https%3A%2F%2Fbuzzheavier.com%2F9tx3untaas0e%2522%5D%5D%2C%2522titles%2522%3A%5B%5B%2522Workupload%2522%2C%2522Gofile.io%2522%2C%2522Buzzheavier%2522%5D%5D%2C%2522platforms%2522%3A%5B%2522Windows%2C%2520Linux%2522%5D%7D\u0026res=14.3095\u0026rmtc=t\u0026shu=a8f7b6a15c29844c0bb707b1f86a2d0d5ef7763fb64b78b713a8a0864d1b5f2dd1464abcbb0e285c126fda8a55451e8dfd253f48c7ed0c8a976616b61e10a12277ca7e0a3311ab4f50c8688cc5575664a1faf47d7bf2069854be7a\u0026tz=0\u0026uuid=0a8ec9ad-6a09-43c7-812a-10f77ab14180%3A1%3A1 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://fapdrop.com\r\nReferer: https://fapdrop.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.1TJUDjGnAnz4HfCbPJebWzg0HQXxKIarBD3RB23w3FQ; uid_id2=0a8ec9ad-6a09-43c7-812a-10f77ab14180:1:1; pdhtkv=true; uncs=1; pdhtkv23=true; uncs23=1; u_pl15676552=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Mon, 13 Oct 2025 03:48:34 GMT\r\nContent-Type: text/html\r\nContent-Length: 3403\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://fapdrop.com\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=0a8ec9ad-6a09-43c7-812a-10f77ab14180:1:1; expires=Mon, 20 Oct 2025 03:48:34 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Tue, 14 Oct 2025 03:48:34 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Tue, 14 Oct 2025 03:48:34 GMT; path=/; secure; SameSite=None\npdhtkv5=true; expires=Tue, 14 Oct 2025 03:48:34 GMT; path=/; secure; SameSite=None\nuncs5=1; expires=Tue, 14 Oct 2025 03:48:34 GMT; path=/; secure; SameSite=None\nu_pl15212618=1; expires=Tue, 14 Oct 2025 03:48:34 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 30\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: d3361d5bd0e920ea36df65ccf2a1565b\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4914,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (4038)","md5":"f3ca77a2b8045fb28defdf164c100564","sha1":"9f8249e33ec9d35be09c6db3d3c091e977b8188c","sha256":"d9bd5781060ede784721b57508395264935a0b4afb5d0daf1324e22ae13c0620","sha512":"9e53c9f2ac6fad94b3e7186d1a6051c2319b3ffefb0c0b6c8a7134d53a44052e5cb62524664dc9f7b6f07b51caf54e80f30457b022bf13eae67f149644e2c116","ssdeep":"96:oaozKzxBNk3vOo+ydc1zJh95mUrneXDuBLKTaz+sFf1/D6wgCfMEDaH:oXzaEOo+ydcBCqe8+sF9b6wgCkCaH","tlshash":"60a13ba72da25175a862a0be37b166167d50d10f0b48df83b99dfbc05f207601bf89e8","first_seen":"2025-10-13T03:48:44.437376Z","last_seen":"2025-10-13T03:48:44.437376Z","times_seen":1,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/js/jads.js","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"92.222.100.135","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:34.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.jads.co","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Feb 2025 00:00:00 GMT","end":"Thu, 27 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"24:45:97:41:80:9C:3B:CE:BB:C3:B5:53:C5:0D:8C:BB:21:C9:56:20","sha256":"5F:96:09:03:1A:50:90:73:9C:60:3F:2D:35:D7:F2:4D:95:02:C6:38:BC:AB:88:FA:78:A4:8B:85:16:CB:F0:57"}}},"request":{"raw":"GET /js/jads.js HTTP/1.1\r\nHost: poweredby.jads.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 13 Oct 2025 03:48:34 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3769\r\nLast-Modified: Fri, 07 Mar 2025 18:31:37 GMT\r\nConnection: close\r\nETag: \"67cb3b89-eb9\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3769,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3769), with no line terminators","md5":"c344215f7f4c4339ef3ec474fab1d5d2","sha1":"56ae62e74a9560413819f5c829a689f11e0e8d4b","sha256":"4a80819c5ee89f3ea534b99fe485991302abc498d994ba29d5c893ac5d795f79","sha512":"77cb331606c75be717c9e04c1836c9b5c0e8011639b4063784f1159972e826b75c3d46625ca2b9e931e9934fb7febce6b9820cb0ac6692b108ff35de97f5a6e6","ssdeep":"","tlshash":"d971627733557879889b966f10ef6a18317faa310f0688025b9ce864987cdcb057fd84","first_seen":"2025-02-19T04:42:15.317534Z","last_seen":"2026-06-03T13:53:05.141441Z","times_seen":2503,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":106,"dns":1,"connect":33,"send":0,"wait":33,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/wp-includes/js/jquery/jquery-migrate.min.js","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:32.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapdrop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 17:26:26 GMT","end":"Mon, 29 Dec 2025 18:13:12 GMT"},"fingerprint":{"sha1":"8F:BC:36:F5:00:C6:56:6D:E9:C2:AB:63:8D:15:CD:DD:88:A2:0E:3C","sha256":"A9:67:EE:49:07:CC:75:F3:2F:CE:62:BD:AE:88:20:42:63:B3:B8:78:F3:B1:63:CF:34:9A:87:FE:0F:E9:E3:98"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1\r\nHost: fapdrop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 20 Jun 2024 03:33:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 4678\r\ndate: Mon, 13 Oct 2025 03:48:32 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SXPS4SwcQYlJ7S1MOIP2N487M5cgJmUKo7GgErvwqXSHdyO%2Fkvme7OIHVcfhuULt7w%2BCSfYe3a8R%2Bh7Uv3shvL8TeKNfp5BS2Q%3D%3D\"}]}\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98dbdca7f8df568b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-06-03T17:54:34.523408Z","times_seen":815093,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/wp-content/themes/king/layouts/js/bootstrap.min.js","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:32.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapdrop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 17:26:26 GMT","end":"Mon, 29 Dec 2025 18:13:12 GMT"},"fingerprint":{"sha1":"8F:BC:36:F5:00:C6:56:6D:E9:C2:AB:63:8D:15:CD:DD:88:A2:0E:3C","sha256":"A9:67:EE:49:07:CC:75:F3:2F:CE:62:BD:AE:88:20:42:63:B3:B8:78:F3:B1:63:CF:34:9A:87:FE:0F:E9:E3:98"}}},"request":{"raw":"GET /wp-content/themes/king/layouts/js/bootstrap.min.js HTTP/1.1\r\nHost: fapdrop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 07 May 2021 20:14:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 7234\r\ndate: Mon, 13 Oct 2025 03:48:32 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cJZ4TLOg16gJBObnSqTG%2B%2FAgA2HsThJijjU6pcPMPkm4C2ZBzZhMP7XmKVkRWg3WFj7CwNi%2BiKxRXjZePOtXVWFCc2TQVgsTHg%3D%3D\"}]}\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98dbdca808e2568b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":24763,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (24535)","md5":"a17e5845ea4e5fc5ad1d0f4095824ae7","sha1":"6077febdbf1b2e54070db4b5e78e672ef3dde6ac","sha256":"4e2ddac89724f72970e14fd526bbef3b92a8ae38826f918c2523a2ddc66797de","sha512":"7e778b748da433430b10dad48c204cafe6d33a478f9b01052bd9b3114267c23d40087061679bb8ed1e796a9be6ed75429f2a58f54f10f1eb1edfa15332a84b7a","ssdeep":"384:5QIDKGPZXNxmu4328zfeB+WNSxzNTPWhVRbGJRGpGzzwvD5+I9iA6B:5QIRPZXN8m8jeBbc9NTIVyIS4oOiA6B","tlshash":"b5b2a64ab23132b147efa1f1511b0a0d72356a3de946906c7869d6f22cb9c48336bf7d","first_seen":"2023-03-07T17:51:55Z","last_seen":"2026-05-30T21:45:09.004555Z","times_seen":75,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/impr.gif?sid=H4sIAAAAAAAC_1RTP2wcRRefc6Kv-L7iSwiC9goKQPg8uzOzf0iBMCEoIiQhCUqBKN78WXvw3s6ys3vrWBQWkVBE5VBBt37nxIJEiDR0oOhMFwmJS4OLuKFFQggpEh26iyXDk-a935vfFL8385tPt5sDwrCB_UvvuA2b57AkBrT_4jVbaNf6_oWr_YAO6On-NVtE_HR_fZaq0asB4wP6Uv8to9bcUkgDSgMa9M_aymRufWnOoi3vpcEgpQMeDgLBcb36d--bHnrooR4dkGfQ6un_f83eR6smWAy_PWP8Wu3KV94cNjnUrsKR3n2vWCtcW-DwCGZVD7Ni9_A0Oj8l5IsFdMXu4QToRjuzCVDaKVl47jHKYvdQJsrR7adKZY6mQKn_h-1ogibfQwsTVO4GWv0zQVQaL1zEYnjngqtauP6UhRk7Jcef_Im2nZLjj5_FYvjNcm7X-1dc3tTWFR7Xsw7t-gTtygTLZg_rjQW07R6q-hO0-iey9OQ8FsOdiz53aPX-CxQSo1LQixHQdJEzFS8mQQiLAc3iGGTAg4TOr8hmEwTfw2a2bA-brIdN2cOh3u9zmnAVAIuyVKuYcuBcG0nTJKQUUhVjo2bat7Aut1DlW6iqTSyrTVyzt6aEPPoLq-YB-tX977gIM53FzHCaxolIIqEpBypYKoWh0pgoAhCKBkBTJoTUIHiSJCB0lgacpzLloASYWEWhBqpC4EmWJYGgMk1TE9JUJJmSsTImVYwJkQjBIlDMCKV4GmWGBRkoTRORJlGggTItQyHTUHAexBwSFnEIwShjBMuozmiqFXq9gL6ekt67mzjSHbaGYOsJtkCwtQTbmmA76m7r3Ie-u6Nz38jgsIaHlXVjV69sw21Xr5iCIFRbWOlux5Yf-Ruo6mPjjczrsZslkHU3Bqm77fKAnJzb4nd-E9fMfj9iQoYsEGBkSFkWUGVYEoGORUQTSVP0tkPrF-aPuWGn5OSJEZYzr368iBL20Od7qOwJhOZ5hHYchwnCKqYUN4q7GZS6cuVAuSFq12FZH8f6em87PyCnxpevLj-YS_ngl1to1ENyGKiqDsuqww_tjwRX8pvjy64lO5dd68n9i2Vth3YDZu69UkNt_vP12-Z66yp97ozf-up1NSNm8N5V4-vzUGhbrHhyd9lqbaqzrlKGfH_OXzPyUuNXl5uqaMrzl944e25YVsZ764oJgp2S__7xGSo7Jad--HL-M8XL91GVm-jLI53eEZQlwdwSzM3RPsgO_T96eYS3_U1cqXoI9Q0shh2Oqg5HeYeQb6Fvjo3rsnr42iM2D5R5byzziuzIvJrxdr-fMRMqSpM4CliSmYBxrTKR8FRHQBkzWPvp6m-jz_8OAAD__5nziUE3BQAA","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:34.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 22:00:34 GMT","end":"Tue, 25 Nov 2025 22:00:33 GMT"},"fingerprint":{"sha1":"FC:5B:24:E2:ED:A9:65:69:CA:97:74:44:F8:E9:93:1A:50:E7:73:C1","sha256":"26:1B:F8:72:30:B2:C4:49:6A:2E:E7:A5:FC:26:35:74:02:CB:56:D1:F7:7E:A5:5E:89:65:A9:B4:1F:1F:DB:8F"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RTP2wcRRefc6Kv-L7iSwiC9goKQPg8uzOzf0iBMCEoIiQhCUqBKN78WXvw3s6ys3vrWBQWkVBE5VBBt37nxIJEiDR0oOhMFwmJS4OLuKFFQggpEh26iyXDk-a935vfFL8385tPt5sDwrCB_UvvuA2b57AkBrT_4jVbaNf6_oWr_YAO6On-NVtE_HR_fZaq0asB4wP6Uv8to9bcUkgDSgMa9M_aymRufWnOoi3vpcEgpQMeDgLBcb36d--bHnrooR4dkGfQ6un_f83eR6smWAy_PWP8Wu3KV94cNjnUrsKR3n2vWCtcW-DwCGZVD7Ni9_A0Oj8l5IsFdMXu4QToRjuzCVDaKVl47jHKYvdQJsrR7adKZY6mQKn_h-1ogibfQwsTVO4GWv0zQVQaL1zEYnjngqtauP6UhRk7Jcef_Im2nZLjj5_FYvjNcm7X-1dc3tTWFR7Xsw7t-gTtygTLZg_rjQW07R6q-hO0-iey9OQ8FsOdiz53aPX-CxQSo1LQixHQdJEzFS8mQQiLAc3iGGTAg4TOr8hmEwTfw2a2bA-brIdN2cOh3u9zmnAVAIuyVKuYcuBcG0nTJKQUUhVjo2bat7Aut1DlW6iqTSyrTVyzt6aEPPoLq-YB-tX977gIM53FzHCaxolIIqEpBypYKoWh0pgoAhCKBkBTJoTUIHiSJCB0lgacpzLloASYWEWhBqpC4EmWJYGgMk1TE9JUJJmSsTImVYwJkQjBIlDMCKV4GmWGBRkoTRORJlGggTItQyHTUHAexBwSFnEIwShjBMuozmiqFXq9gL6ekt67mzjSHbaGYOsJtkCwtQTbmmA76m7r3Ie-u6Nz38jgsIaHlXVjV69sw21Xr5iCIFRbWOlux5Yf-Ruo6mPjjczrsZslkHU3Bqm77fKAnJzb4nd-E9fMfj9iQoYsEGBkSFkWUGVYEoGORUQTSVP0tkPrF-aPuWGn5OSJEZYzr368iBL20Od7qOwJhOZ5hHYchwnCKqYUN4q7GZS6cuVAuSFq12FZH8f6em87PyCnxpevLj-YS_ngl1to1ENyGKiqDsuqww_tjwRX8pvjy64lO5dd68n9i2Vth3YDZu69UkNt_vP12-Z66yp97ozf-up1NSNm8N5V4-vzUGhbrHhyd9lqbaqzrlKGfH_OXzPyUuNXl5uqaMrzl944e25YVsZ764oJgp2S__7xGSo7Jad--HL-M8XL91GVm-jLI53eEZQlwdwSzM3RPsgO_T96eYS3_U1cqXoI9Q0shh2Oqg5HeYeQb6Fvjo3rsnr42iM2D5R5byzziuzIvJrxdr-fMRMqSpM4CliSmYBxrTKR8FRHQBkzWPvp6m-jz_8OAAD__5nziUE3BQAA HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwIjp7ImlkIjoxNTIxMjYxOCwiayI6IjM3M2I1YTEwZDM5MGVjNTAyYzdkNTM1ZDZmZDk5NjZjIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxMTE4MzI2LCJwaWQiOjE2Mjg2MSwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoxNiwiYWlkIjo1LCJwdCI6NCwicGsiOiJrZmgzaTVlNXEiLCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6MjY2NTYxMTE1LCJpZHMiOiIiLCJpYyI6ZmFsc2UsIm4iOiJEZXNrdG9wLEVtdWxhdG9yIiwidiI6IlVua25vd24iLCJtIjoiVW5rbm93biIsImYiOjEsImZuIjoiRGVza3RvcCIsIm9pZCI6Mzg5MTQsIm9uIjoiV2luZG93cyIsIm92IjoiMTAuMCIsImJpZCI6MTM2OTI1LCJibiI6IkZpcmVmb3giLCJidiI6IjEzNC4wIiwid3YiOmZhbHNlLCJlIjp0cnVlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJ1cCI6dHJ1ZSwiciI6Imh0dHBzOi8vZmFwZHJvcC5jb20vZG93bmxvYWQvP2RsZGF0YT17JTIydXJscyUyMjpbWyUyMmh0dHBzOi8vd29ya3VwbG9hZC5jb20vZmlsZS94ZWd1VUQyVEx4VCUyMiwlMjJodHRwczovL2dvZmlsZS5pby9kL1dtT2RpRCUyMiwlMjJodHRwczovL2J1enpoZWF2aWVyLmNvbS85dHgzdW50YWFzMGUlMjJdXSwlMjJ0aXRsZXMlMjI6W1slMjJXb3JrdXBsb2FkJTIyLCUyMkdvZmlsZS5pbyUyMiwlMjJCdXp6aGVhdmllciUyMl1dLCUyMnBsYXRmb3JtcyUyMjpbJTIyV2luZG93cywlMjBMaW51eCUyMl19IiwiYXIiOltdfX0.1TJUDjGnAnz4HfCbPJebWzg0HQXxKIarBD3RB23w3FQ; uid_id2=0a8ec9ad-6a09-43c7-812a-10f77ab14180:1:1; pdhtkv=true; uncs=1; pdhtkv23=true; uncs23=1; u_pl15676552=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Mon, 13 Oct 2025 03:48:34 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 4\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: c94193069acd98f2739b866395050af3\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-13T03:48:11.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapdrop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 17:26:26 GMT","end":"Mon, 29 Dec 2025 18:13:12 GMT"},"fingerprint":{"sha1":"8F:BC:36:F5:00:C6:56:6D:E9:C2:AB:63:8D:15:CD:DD:88:A2:0E:3C","sha256":"A9:67:EE:49:07:CC:75:F3:2F:CE:62:BD:AE:88:20:42:63:B3:B8:78:F3:B1:63:CF:34:9A:87:FE:0F:E9:E3:98"}}},"request":{"raw":"GET /download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]} HTTP/1.1\r\nHost: fapdrop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 03:48:12 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.3.26\r\ncf-edge-cache: cache, platform=WordPress\r\nx-docket-cache: on; 2474\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GW%2FZshzt2%2F2TSlaNwkd27vLoBqpZXL9diV7GjtI2dinljCg0DkOV8lUOiAwhm%2BLtSHlS4MVY6dg62CJcuV0IE8SoIOUjloU6Ow%3D%3D\"}]}\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncf-ray: 98dbdc23489756b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Kadence WP Blocks","description":"Kadence Blocks is a plugin for WordPress that provides a collection of custom blocks for the WordPress Block Editor, allowing users to create custom layouts and designs for their website without needing to know how to code.","website":"https://www.kadencewp.com/kadence-blocks/","common_platform_enumeration":"","icon":"Kadence WP.svg","categories":["WordPress plugins"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Perfmatters","description":"Perfmatters is a performance optimisation plugin for WordPress websites.","website":"https://perfmatters.io","common_platform_enumeration":"","icon":"Perfmatters.svg","categories":["WordPress plugins","Performance"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.26","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":99613,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6711), with CRLF, LF line terminators","md5":"c664738c526276ae3e7f26cfe4b572ce","sha1":"a5ce729edb8ce2163cceefcc5042a8f7b43fec80","sha256":"2a96c8ba2afefc31996cd1b41f92cc15475aae3ddc622acaf756ba686935bbde","sha512":"25c3d27121d3c25ed84f8e0a696bbfc6c198fc3eb49178f8f52583cdd6a12f1a04151ba3e64137f7b8a33872926584343217c927c5d66bb26a63efa8908a2ee5","ssdeep":"3072:TseBX0KXROobZA3mTwOkjDcuYuEg8ym00O6jnJs0qP/BGtNWamnBoqBpBIBiBKBX:woX0KXROobZA3mTwOkjDcuYuEg8ym00P","tlshash":"7ea34b75685b643181a3c4b373efb70db1298013d60ac915bb7c85e8efe2d5b4262b9c","first_seen":"2025-10-13T03:48:44.455Z","last_seen":"2025-10-13T03:48:44.455Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1205,"timings":{"blocked":185,"dns":12,"connect":1,"send":0,"wait":836,"receive":0,"ssl":169},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/cf-fonts/s/poppins/5.0.11/latin/400/normal.woff2","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:12.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapdrop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 17:26:26 GMT","end":"Mon, 29 Dec 2025 18:13:12 GMT"},"fingerprint":{"sha1":"8F:BC:36:F5:00:C6:56:6D:E9:C2:AB:63:8D:15:CD:DD:88:A2:0E:3C","sha256":"A9:67:EE:49:07:CC:75:F3:2F:CE:62:BD:AE:88:20:42:63:B3:B8:78:F3:B1:63:CF:34:9A:87:FE:0F:E9:E3:98"}}},"request":{"raw":"GET /cf-fonts/s/poppins/5.0.11/latin/400/normal.woff2 HTTP/1.1\r\nHost: fapdrop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Oct 2025 03:48:12 GMT\r\ncontent-length: 7884\r\ncontent-type: font/woff2\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=av5BrDJ8sWoXugj7fBtvTIvr28nFCCdSqdV02Mp90Rc95oy9pXp83fetFKSiOrr5dL1uGvaYjVJLSeB%2F4mMbn7lV4HyJD34DkA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 98dbdc2aff92568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-06-03T17:53:29.702616Z","times_seen":349930,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/cf-fonts/s/nunito/5.0.16/latin/700/normal.woff2","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:12.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapdrop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 17:26:26 GMT","end":"Mon, 29 Dec 2025 18:13:12 GMT"},"fingerprint":{"sha1":"8F:BC:36:F5:00:C6:56:6D:E9:C2:AB:63:8D:15:CD:DD:88:A2:0E:3C","sha256":"A9:67:EE:49:07:CC:75:F3:2F:CE:62:BD:AE:88:20:42:63:B3:B8:78:F3:B1:63:CF:34:9A:87:FE:0F:E9:E3:98"}}},"request":{"raw":"GET /cf-fonts/s/nunito/5.0.16/latin/700/normal.woff2 HTTP/1.1\r\nHost: fapdrop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Oct 2025 03:48:12 GMT\r\ncontent-length: 16312\r\ncontent-type: font/woff2\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q0lG0kdcU1mUAs4tsAjgi6knEdbJ3O2pdFUeM%2BHesUJnmSnrMChIMWkoetvV9wOXgKNcDV%2BM5D1M3ZoP0J9VsEg%2Fu8JHYT1LMQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 98dbdc2b1f98568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16312,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 16312, version 1.0","md5":"920fd123796218b8380e60c91b830e4b","sha1":"c3ae3e4b596edcd96e42e7d3184b9e534608b9c7","sha256":"391d904f3fd470031d9207a2dcece3b27f63be28ec5b2a0a0ee759948705c3bf","sha512":"334d523d6daaafb4cc2651371b4031dfaa62586fc577ed6c322dac85cdfb7cd69acc26e89bd984014d8f700c9e2dc6ee53bfe36e6f61ad15b48e81c9ec2815d9","ssdeep":"384:dz1XPUOKzWM/az5DidLaDvnGVmIHuP71xceZOjoDDa5xU:VpcO04QGr7IOz1uoazU","tlshash":"fe72c0210b165b3cdebe577aab1a7794050a32de460730850b19c9c5bf4d978f4f809b","first_seen":"2023-09-28T15:48:01Z","last_seen":"2026-06-01T20:54:27.556886Z","times_seen":326,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"professionaltrafficmonitor.com/stats","fqdn":"professionaltrafficmonitor.com","domain":"professionaltrafficmonitor.com","tld":"com"},"ip":{"addr":"3.125.105.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:33.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Thu, 30 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6","sha256":"49:03:4C:2C:1B:23:D8:D6:CB:AE:F0:54:61:99:C2:20:F4:FF:87:5E:0B:72:B1:6B:D8:AB:21:49:2D:F2:EC:4A"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: professionaltrafficmonitor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://fapdrop.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 03:48:33 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://fapdrop.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=6691d477-6294-430c-9206-8dacbe7d7ec2:3:1; expires=Thu, 11 Oct 2035 03:48:33 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"158db7e3a6211047389c85aaa2f430fb","sha1":"bb977a206b89094cddb4deb5d065d1966aba7f52","sha256":"2b3722dc97053aff82aabc10f4d35f19637f169164e62184a82fb8d95b20e9ab","sha512":"43aa7c6763a2afb657479388e3bdc204d58ee57dcbba2fddc38270ee680872d16c61b35ff8a9d30deb12791d650156e8b303bdaf83ca770d82eb59641e308921","ssdeep":"","tlshash":"0f900410d130531c5715f550fc5030143014550003dd51344505cf34c35c1110050303","first_seen":"2025-10-13T03:48:44.474648Z","last_seen":"2025-10-13T03:48:44.474648Z","times_seen":1,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":107,"dns":35,"connect":21,"send":0,"wait":21,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/wp-content/uploads/2021/03/Fapdrop-Mobile.svg","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:12.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapdrop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 17:26:26 GMT","end":"Mon, 29 Dec 2025 18:13:12 GMT"},"fingerprint":{"sha1":"8F:BC:36:F5:00:C6:56:6D:E9:C2:AB:63:8D:15:CD:DD:88:A2:0E:3C","sha256":"A9:67:EE:49:07:CC:75:F3:2F:CE:62:BD:AE:88:20:42:63:B3:B8:78:F3:B1:63:CF:34:9A:87:FE:0F:E9:E3:98"}}},"request":{"raw":"GET /wp-content/uploads/2021/03/Fapdrop-Mobile.svg HTTP/1.1\r\nHost: fapdrop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 14 Oct 2025 02:49:05 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 18 Mar 2021 15:11:33 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 807\r\ndate: Mon, 13 Oct 2025 03:48:12 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iQ50stVwPtnMSIoCwx6zLu%2FyT6lqmRCFXYM4VGVLgX35Mv8BFCBWm2Q8W1DOyYdY84kgDqNOuLOnDdsJ97Tm%2FOIvgZNL0KDoLA%3D%3D\"}]}\r\nage: 493994\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98dbdc29bf88568b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1918,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9b0187cc0013e05ea50ba78cf184dbb3","sha1":"2f8edcb7415e873fc2e7784e4c811c6b05e5f529","sha256":"68b59a5d4bea6c180bac8dcafbead653cfbf4a15d9eaac261667ed704dcdb473","sha512":"1e81af46521fbf059328fe0a9749713a7cc8e7ef1a08ef10111472c1af0e8b7f298cfdb2c5a90fc4917dc3506afb1ad0fa02ef819f658738c69fccf47553011d","ssdeep":"","tlshash":"02415496eba84b109db5c7aec6d1d1000b021033c0684a49baaf53e41b768ef562c7df","first_seen":"2025-10-02T00:37:09.076014Z","last_seen":"2026-05-30T21:45:09.01837Z","times_seen":22,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/wp-content/uploads/hummingbird-assets/60ec3aa3ec2a8917c2c658c71069efd5.css","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:12.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapdrop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 17:26:26 GMT","end":"Mon, 29 Dec 2025 18:13:12 GMT"},"fingerprint":{"sha1":"8F:BC:36:F5:00:C6:56:6D:E9:C2:AB:63:8D:15:CD:DD:88:A2:0E:3C","sha256":"A9:67:EE:49:07:CC:75:F3:2F:CE:62:BD:AE:88:20:42:63:B3:B8:78:F3:B1:63:CF:34:9A:87:FE:0F:E9:E3:98"}}},"request":{"raw":"GET /wp-content/uploads/hummingbird-assets/60ec3aa3ec2a8917c2c658c71069efd5.css HTTP/1.1\r\nHost: fapdrop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 14 Oct 2025 02:49:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 07 Oct 2025 02:45:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 237\r\ndate: Mon, 13 Oct 2025 03:48:12 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MYgYZ3124gkpYaHsta%2BPUEeENN38ORJbnGCGHGVUe2X03rooCjaC5qRWNpAuwvok7VsUYRJcurg90QS4IXXg7tex3cLcNRpC3w%3D%3D\"}]}\r\nage: 202686\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98dbdc29bf8a568b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":713,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (690), with CRLF line terminators","md5":"9a70b8c778806b49e9f32f96cb892731","sha1":"f42d3c46424dff099586e76dcfb44aa1a5deaad9","sha256":"1cf31a6cdf04de8a9daecd3e0fbacb41f3333f476cab8db59d0d10913f20b037","sha512":"8d436c71f156eecfff47e8108df93f3e8cfc7b4f6abf0057b8d0f7bd354d694fe2e47e35ceea8f4ebf1cc94bb8e9208de06a1b054eee9c0dc53ed6f7eb58d206","ssdeep":"","tlshash":"5101f413f5c81155a81686589747bbfe0d3ef4e697010e39ea01f33087819db2ca1a43","first_seen":"2025-07-12T06:43:04.543992Z","last_seen":"2026-05-30T21:45:08.989849Z","times_seen":40,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/wp-content/themes/king/layouts/font-awesome/webfonts/fa-solid-900.woff2","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:12.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapdrop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 17:26:26 GMT","end":"Mon, 29 Dec 2025 18:13:12 GMT"},"fingerprint":{"sha1":"8F:BC:36:F5:00:C6:56:6D:E9:C2:AB:63:8D:15:CD:DD:88:A2:0E:3C","sha256":"A9:67:EE:49:07:CC:75:F3:2F:CE:62:BD:AE:88:20:42:63:B3:B8:78:F3:B1:63:CF:34:9A:87:FE:0F:E9:E3:98"}}},"request":{"raw":"GET /wp-content/themes/king/layouts/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: fapdrop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/wp-content/themes/king/layouts/font-awesome/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 14 Oct 2025 03:07:29 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 01 Nov 2023 01:29:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 150020\r\ndate: Mon, 13 Oct 2025 03:48:12 GMT\r\nserver: cloudflare\r\nvary: User-Agent, accept-encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vGG5ajxScVcvtKknUyCgteTomjejqu57utu4xWZ8QDGwaT0scuhZfkUP5VJP5Eu42zkwsJeQf%2F6NrZ3zQsTo1Mf%2B47NTINWLZw%3D%3D\"}]}\r\nage: 18687\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98dbdc2baf9a568b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150020,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 150020, version 772.1280","md5":"d5e647388e2415268b700d3df2e30a0d","sha1":"97f0942c6627ddd89fb62170e5cac9a2cbd6c98c","sha256":"886c86112a804ef1ddd1cb206af4c8c40e34b73c26652ca231404aa35a6b30d9","sha512":"50b2ffd7537d0424286936cb7ba566004a664f447e4aaac8fa40ceb2850ead6cdb39c957515ae05a07aaeb8f6e3e428c4b95e4efa3edcadc9473e9e200bb47d6","ssdeep":"3072:vPtxURbSTtDXSLXe0itudYTPEnus4blfNUqKrC7ZOBS9C3bzlLX4/NKOTD5:P15Die0UPblfNUqLZg9I/Qk5","tlshash":"03e312e8c98e8e24452e2b975b436d4cfca1c97d77bfba0e2b5401b94f1e0521b34a71","first_seen":"2023-08-04T22:28:10Z","last_seen":"2026-06-03T16:52:12.013856Z","times_seen":36525,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dowryhandgripballot.com/373b5a10d390ec502c7d535d6fd9966c/invoke.js","fqdn":"dowryhandgripballot.com","domain":"dowryhandgripballot.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:32.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dowryhandgripballot.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 21:21:17 GMT","end":"Tue, 23 Dec 2025 21:21:16 GMT"},"fingerprint":{"sha1":"63:F7:AF:6F:19:7D:8D:4A:AE:70:B1:09:04:E3:4F:F0:6C:E8:F3:16","sha256":"5C:7B:97:61:1C:91:E0:5C:D8:09:E4:4A:87:75:51:08:DE:D8:A1:04:F0:37:55:13:66:23:A1:79:89:8A:3E:EE"}}},"request":{"raw":"GET /373b5a10d390ec502c7d535d6fd9966c/invoke.js HTTP/1.1\r\nHost: dowryhandgripballot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Mon, 13 Oct 2025 03:48:33 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 16283\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: dowryhandgripballot.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: def0710a9e869d44f00cf7990d785665\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38364,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (38364), with no line terminators","md5":"f5af70f9f0e7c6f3394476776d9c822e","sha1":"e1e4823b4906050c81278d552096e8d13ad6b33a","sha256":"7c02e7b64a1b443dd9b2155347fe4463788344d71400dde2d7076b6c0f1f7e74","sha512":"d244cd1f86dc26caaaee24a3d12bfc5496b50a6fde3c0876b21d43f0f2e4218ee8a94ebc13749230a6db6631d1a6fa05a2d47377b341afff7f33b0a2a5fbaefc","ssdeep":"768:fkqtSm4OYZ748I6ngkkLXcj3PKFMrj2W+MAgMt:8qtIO248I6ng6CIj2XMAN","tlshash":"ec03c88d3fa1b85d0796a033723f840ae6ee4e4458dcd8e8e4076ca0fe64755d0b7ea5","first_seen":"2025-10-13T03:48:44.502627Z","last_seen":"2025-10-13T03:48:44.502627Z","times_seen":1,"resource_available":true,"data":null}},"time_used":857,"timings":{"blocked":326,"dns":50,"connect":96,"send":0,"wait":97,"receive":93,"ssl":190},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"dowryhandgripballot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"dowryhandgripballot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"dowryhandgripballot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/wp-content/uploads/hummingbird-assets/8b1d96e03ccc39813b4b5e7b19e6fb69.js","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:32.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapdrop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 17:26:26 GMT","end":"Mon, 29 Dec 2025 18:13:12 GMT"},"fingerprint":{"sha1":"8F:BC:36:F5:00:C6:56:6D:E9:C2:AB:63:8D:15:CD:DD:88:A2:0E:3C","sha256":"A9:67:EE:49:07:CC:75:F3:2F:CE:62:BD:AE:88:20:42:63:B3:B8:78:F3:B1:63:CF:34:9A:87:FE:0F:E9:E3:98"}}},"request":{"raw":"GET /wp-content/uploads/hummingbird-assets/8b1d96e03ccc39813b4b5e7b19e6fb69.js HTTP/1.1\r\nHost: fapdrop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 07 Oct 2025 02:46:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 467\r\ndate: Mon, 13 Oct 2025 03:48:32 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i8IW4Vi%2BagALK%2BzR7v5EcxAWdaKbZXg5aOCg6dOj5IV2yALXcdqIz2nmfnavngXx6DueM2Ukp9ul98oCaSrt%2BotAR%2BZLZlhgiA%3D%3D\"}]}\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98dbdca7f8e1568b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1407,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1374), with CRLF line terminators","md5":"83a9afe2247979ea9cdcd0c5fa8e5243","sha1":"1968c348682befa91364113a344e284996b22586","sha256":"33b87f1e03a8aabe88cba683a5c6313d0689de63b1d486cadaedd70aa0cc594d","sha512":"e5b5a254bcf3576f8b3ac68e92b9b7e43e98a35bf2b3177a6fb9c0f10e0109eba550a79a26edcf47878d89bb625d3764192d21b2b113eae7e2a2e6df867f3123","ssdeep":"","tlshash":"e921567b7ca5963528c614d6a875fac97c713574c503d8a0808cec7cb8a8eac1c3155a","first_seen":"2025-10-02T00:37:09.101543Z","last_seen":"2026-05-30T21:45:09.002095Z","times_seen":22,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/watch.1548658696329.js?key=635b2315aeb203f10ce386ad75608b09\u0026kw=%5B%22fapdrop%22%5D\u0026refer=https%3A%2F%2Ffapdrop.com%2Fdownload%2F%3Fdldata%3D%7B%2522urls%2522%3A%5B%5B%2522https%3A%2F%2Fworkupload.com%2Ffile%2FxeguUD2TLxT%2522%2C%2522https%3A%2F%2Fgofile.io%2Fd%2FWmOdiD%2522%2C%2522https%3A%2F%2Fbuzzheavier.com%2F9tx3untaas0e%2522%5D%5D%2C%2522titles%2522%3A%5B%5B%2522Workupload%2522%2C%2522Gofile.io%2522%2C%2522Buzzheavier%2522%5D%5D%2C%2522platforms%2522%3A%5B%2522Windows%2C%2520Linux%2522%5D%7D\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=0a8ec9ad-6a09-43c7-812a-10f77ab14180%3A1%3A1","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:33.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 22:00:34 GMT","end":"Tue, 25 Nov 2025 22:00:33 GMT"},"fingerprint":{"sha1":"FC:5B:24:E2:ED:A9:65:69:CA:97:74:44:F8:E9:93:1A:50:E7:73:C1","sha256":"26:1B:F8:72:30:B2:C4:49:6A:2E:E7:A5:FC:26:35:74:02:CB:56:D1:F7:7E:A5:5E:89:65:A9:B4:1F:1F:DB:8F"}}},"request":{"raw":"GET /watch.1548658696329.js?key=635b2315aeb203f10ce386ad75608b09\u0026kw=%5B%22fapdrop%22%5D\u0026refer=https%3A%2F%2Ffapdrop.com%2Fdownload%2F%3Fdldata%3D%7B%2522urls%2522%3A%5B%5B%2522https%3A%2F%2Fworkupload.com%2Ffile%2FxeguUD2TLxT%2522%2C%2522https%3A%2F%2Fgofile.io%2Fd%2FWmOdiD%2522%2C%2522https%3A%2F%2Fbuzzheavier.com%2F9tx3untaas0e%2522%5D%5D%2C%2522titles%2522%3A%5B%5B%2522Workupload%2522%2C%2522Gofile.io%2522%2C%2522Buzzheavier%2522%5D%5D%2C%2522platforms%2522%3A%5B%2522Windows%2C%2520Linux%2522%5D%7D\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=0a8ec9ad-6a09-43c7-812a-10f77ab14180%3A1%3A1 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://fapdrop.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.21.6\r\nDate: Mon, 13 Oct 2025 03:48:33 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://fapdrop.com\r\naccess-control-allow-credentials: true\r\nlocation: https://skinnycrawlinglax.com/watch.1548658696329.js?dev=e\u0026key=635b2315aeb203f10ce386ad75608b09\u0026kw=%5B%22fapdrop%22%5D\u0026pst=1760327373\u0026rb=\u0026refer=https%3A%2F%2Ffapdrop.com%2Fdownload%2F%3Fdldata%3D%7B%2522urls%2522%3A%5B%5B%2522https%3A%2F%2Fworkupload.com%2Ffile%2FxeguUD2TLxT%2522%2C%2522https%3A%2F%2Fgofile.io%2Fd%2FWmOdiD%2522%2C%2522https%3A%2F%2Fbuzzheavier.com%2F9tx3untaas0e%2522%5D%5D%2C%2522titles%2522%3A%5B%5B%2522Workupload%2522%2C%2522Gofile.io%2522%2C%2522Buzzheavier%2522%5D%5D%2C%2522platforms%2522%3A%5B%2522Windows%2C%2520Linux%2522%5D%7D\u0026res=14.3095\u0026rmtc=t\u0026shu=452fdf73e409785865d04a0539b5e0bee66aa5c01a09355bda54888a5df91449b94ac5ae7c62da0c2a48ff8150b999e20958fcb7cee9c335585536ac3e5cc496fe31facd0859861da03db25b92544174a8364a2aecee53f0df09dc\u0026tz=0\u0026uuid=0a8ec9ad-6a09-43c7-812a-10f77ab14180%3A1%3A1\r\nset-cookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwIjp7ImlkIjoxNTY3NjU1MiwiayI6IjYzNWIyMzE1YWViMjAzZjEwY2UzODZhZDc1NjA4YjA5Iiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxMTE4MzI2LCJwaWQiOjE2Mjg2MSwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoxNiwiYWlkIjoyMywicHQiOjQsInBrIjoiem40dzZkdTFrIiwidCI6MX0sInUiOnsidSI6MSwiYXUiOjEsImQiOnsiaWQiOjI2NjU2MTExNSwiaWRzIjoiIiwiaWMiOmZhbHNlLCJuIjoiRGVza3RvcCxFbXVsYXRvciIsInYiOiJVbmtub3duIiwibSI6IlVua25vd24iLCJmIjoxLCJmbiI6IkRlc2t0b3AiLCJvaWQiOjM4OTE0LCJvbiI6IldpbmRvd3MiLCJvdiI6IjEwLjAiLCJiaWQiOjEzNjkyNSwiYm4iOiJGaXJlZm94IiwiYnYiOiIxMzQuMCIsInd2IjpmYWxzZSwiZSI6dHJ1ZSwiYWIiOmZhbHNlfSwiYyI6eyJpZCI6MTYyLCJjIjoiTk8iLCJuIjoiTm9yd2F5In0sImEiOmZhbHNlLCJjciI6eyJuIjoiQmxpeCBTb2x1dGlvbnMifSwieGYiOiIiLCJpeGYiOmZhbHNlLCJpZ3hmIjpmYWxzZSwidXAiOnRydWUsInIiOiJodHRwczovL2ZhcGRyb3AuY29tL2Rvd25sb2FkLz9kbGRhdGE9eyUyMnVybHMlMjI6W1slMjJodHRwczovL3dvcmt1cGxvYWQuY29tL2ZpbGUveGVndVVEMlRMeFQlMjIsJTIyaHR0cHM6Ly9nb2ZpbGUuaW8vZC9XbU9kaUQlMjIsJTIyaHR0cHM6Ly9idXp6aGVhdmllci5jb20vOXR4M3VudGFhczBlJTIyXV0sJTIydGl0bGVzJTIyOltbJTIyV29ya3VwbG9hZCUyMiwlMjJHb2ZpbGUuaW8lMjIsJTIyQnV6emhlYXZpZXIlMjJdXSwlMjJwbGF0Zm9ybXMlMjI6WyUyMldpbmRvd3MsJTIwTGludXglMjJdfSIsImFyIjpbXX19.3jBLGPh4jx0Icz51Xlb06rStZS0jDuEqMW4tpBnC3KU; expires=Mon, 13 Oct 2025 03:49:33 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 4\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: c27ae1b814cd80af4615808e8b9b051d\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":4808,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":569,"timings":{"blocked":280,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/96/34/ac/9634acb83fcdf3e17fdfeff8277050ef/1756656422.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:33.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 02:32:56 GMT","end":"Sun, 07 Dec 2025 02:32:55 GMT"},"fingerprint":{"sha1":"F2:37:25:60:C4:34:06:EB:37:74:9F:D1:9C:FE:63:47:1F:30:4C:58","sha256":"AA:72:28:9B:C9:B7:77:AB:D7:89:4F:AC:CB:86:72:85:1D:1B:E5:15:4D:07:7B:D9:77:0F:D5:BE:92:06:8D:71"}}},"request":{"raw":"GET /cti/96/34/ac/9634acb83fcdf3e17fdfeff8277050ef/1756656422.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 03:48:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 88669\r\nserver: nginx/1.21.6\r\nlast-modified: Sun, 31 Aug 2025 16:07:03 GMT\r\netag: \"68b47327-15a5d\"\r\nexpires: Wed, 15 Oct 2025 03:48:34 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":88669,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.3 (Macintosh), datetime=2025:08:30 09:52:12], progressive, precision 8, 300x250, components 3","md5":"9bd84ed26d2194b5474eeb4a7853a5f4","sha1":"c15dd30cc3a2fdc855ab4a8cde307cd3d5e0aea3","sha256":"582568b484f7fea73c21631b5982cce91c3ac935d48b14a371919ccc9e07f15f","sha512":"856e3f19d718039e9544e3d86d9ef183678f50d4ca010b3f004a5e908108707af6690c2d375edfd8df61cef98f8367c04cb7358d830ef810d4233d54098c58f8","ssdeep":"1536:Pd+Rw6RTyFd+Rw6RTy4hMWYL1ZrR6PPaYSe0QZWFnbAVwNhyrvJ6S2bnm9+:PsDRTyFsDRTyfBL1Z16XXSe0QMFbiXJS","tlshash":"9e83f1606a688f2ae4a59b7872e8d3f76337a76dc3e35991784c7d123f302600d4d2d2","first_seen":"2025-09-02T16:16:24.150956Z","last_seen":"2026-05-18T07:54:07.811457Z","times_seen":1020,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":43,"dns":1,"connect":19,"send":0,"wait":38,"receive":51,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"torchfriendlypay.com/impr.gif?sid=H4sIAAAAAAAC_1RTP2wcxReec_L7FVCQEER9BQUgfJ7dnf1HCoQJQYGQRElQCkQx_9YevLez7OzeOhZFRCQUUTkV0K2_s2NBIgQNHSg600VC4tLgIm5oKGgQUiQ6dBdLhifte9973xbfm_nm063mgARo-P6ld-2GyXO-FA5o_8VrplC2df0LV_seHdDT_WumiNjp_vosVaNXvYAN6Ev9t7Rcs0s-9Sj1qNc_ayqd2fWlOQtT3ku9QUoHzB94IcN69d_eNT043oMaHZBnYdT0md-y92HkBMXw2zPardW2fOXNYZPz2lYYqd33irXCtgWGRzCresiK3cO_Yd2UkC8WYIvdww1gR9uzDSDMlCw8_wii2D2UCTHaeaJU5NAFhHoa7WgCne_B8AmkvQmjfiGAVLhwEcXwzgVbtfz6E5bP2Ck5_vgvmHZKjj96DsXwm-XcrPev2LypjS0c1rMOZn0CszJB2eyh3liAafcg609g1M9k6fF5FMPtiy63MGr_BcoTLVOuFiNO00UWyHgx8Xy-6NEsjrnwmJfQ-RGZbALuemhmn-mhyXpoyh6Gar_PaMKkx4MoS5WMKeOMKS1omviU8lTGaORM-ybqchMy34SsbqCsbmDN3J4S8vBvVM19uNX9730ZRjHP_CxKRMrTTIecBxHzw0hlnh9wmiSppjoRMfOl0LH0uEepCAPGfCW4x0UqA5bKNIqigHqZDlIvSgSLNJcBi0ToeTGnsRYqjSjTwXyiWRKyMKQe88M4k4wzFcU6TKhmieKKKU8EPNRZyFQcplpTkYiEJmlAqWBhFKdwqgdXE4xUh1YTtI6g5QStIWhrgnbU7ajc-a67o3LXCO-w-oc16Ma2XtniO7Ze0QUBrzZRqW7blB-5m5D1sfFG5tTYzhIXdTfmQnVb5QE5ObfE7_23sab3-0EciJB7VAUp1TKkvoxVGIQqylSaRpGEMx2MW5hf5IaZkpMnRihnPv14EYLvweV7kOYEePM_8HYcUAq-OvZDio3ibsZLVdlyIO0QynYo6-Oor_e28gNyanz56vL9uZYPfm2h5QNyGJBVh7Lq8KH5iWAlvzW-bFuyfdm2jnx3sazN0GzwmXWv1LzW___6HX29tZU6d8ZtfvW6nBEzeO-qdvV5XihTrDhyd9kopauztpKa_HDOXdPiUuNWl5uqaMrzl944e25YVto5Y4sJuJmSp_78DNJMyakfv5w_y_DlzyHLG3DlkU5nCURJkBuCXB_Nuejg_tWLI7zlbmGl6oHXN1EMO4yqDqO8A8834Zpj47qsHrz2MJgHRN4bi7wi2yKvZrzZ72eB9iWlSRx5QZJpL2BKZmHCUhVxGgQatZuu_jG6_U8AAAD__2wPFKw0BQAA","fqdn":"torchfriendlypay.com","domain":"torchfriendlypay.com","tld":"com"},"ip":{"addr":"192.243.59.12","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:33.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"torchfriendlypay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 22:09:22 GMT","end":"Tue, 25 Nov 2025 22:09:21 GMT"},"fingerprint":{"sha1":"11:D6:40:9F:C0:3E:93:5F:D7:10:AB:88:ED:35:EF:8D:BC:BA:B6:BE","sha256":"46:DD:4D:E7:2C:ED:72:DC:3F:71:6D:46:29:34:DC:D7:AC:E1:73:91:92:2F:5C:B4:86:3E:AE:F7:FB:A4:58:10"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RTP2wcxReec_L7FVCQEER9BQUgfJ7dnf1HCoQJQYGQRElQCkQx_9YevLez7OzeOhZFRCQUUTkV0K2_s2NBIgQNHSg600VC4tLgIm5oKGgQUiQ6dBdLhifte9973xbfm_nm063mgARo-P6ld-2GyXO-FA5o_8VrplC2df0LV_seHdDT_WumiNjp_vosVaNXvYAN6Ev9t7Rcs0s-9Sj1qNc_ayqd2fWlOQtT3ku9QUoHzB94IcN69d_eNT043oMaHZBnYdT0md-y92HkBMXw2zPardW2fOXNYZPz2lYYqd33irXCtgWGRzCresiK3cO_Yd2UkC8WYIvdww1gR9uzDSDMlCw8_wii2D2UCTHaeaJU5NAFhHoa7WgCne_B8AmkvQmjfiGAVLhwEcXwzgVbtfz6E5bP2Ck5_vgvmHZKjj96DsXwm-XcrPev2LypjS0c1rMOZn0CszJB2eyh3liAafcg609g1M9k6fF5FMPtiy63MGr_BcoTLVOuFiNO00UWyHgx8Xy-6NEsjrnwmJfQ-RGZbALuemhmn-mhyXpoyh6Gar_PaMKkx4MoS5WMKeOMKS1omviU8lTGaORM-ybqchMy34SsbqCsbmDN3J4S8vBvVM19uNX9730ZRjHP_CxKRMrTTIecBxHzw0hlnh9wmiSppjoRMfOl0LH0uEepCAPGfCW4x0UqA5bKNIqigHqZDlIvSgSLNJcBi0ToeTGnsRYqjSjTwXyiWRKyMKQe88M4k4wzFcU6TKhmieKKKU8EPNRZyFQcplpTkYiEJmlAqWBhFKdwqgdXE4xUh1YTtI6g5QStIWhrgnbU7ajc-a67o3LXCO-w-oc16Ma2XtniO7Ze0QUBrzZRqW7blB-5m5D1sfFG5tTYzhIXdTfmQnVb5QE5ObfE7_23sab3-0EciJB7VAUp1TKkvoxVGIQqylSaRpGEMx2MW5hf5IaZkpMnRihnPv14EYLvweV7kOYEePM_8HYcUAq-OvZDio3ibsZLVdlyIO0QynYo6-Oor_e28gNyanz56vL9uZYPfm2h5QNyGJBVh7Lq8KH5iWAlvzW-bFuyfdm2jnx3sazN0GzwmXWv1LzW___6HX29tZU6d8ZtfvW6nBEzeO-qdvV5XihTrDhyd9kopauztpKa_HDOXdPiUuNWl5uqaMrzl944e25YVto5Y4sJuJmSp_78DNJMyakfv5w_y_DlzyHLG3DlkU5nCURJkBuCXB_Nuejg_tWLI7zlbmGl6oHXN1EMO4yqDqO8A8834Zpj47qsHrz2MJgHRN4bi7wi2yKvZrzZ72eB9iWlSRx5QZJpL2BKZmHCUhVxGgQatZuu_jG6_U8AAAD__2wPFKw0BQAA HTTP/1.1\r\nHost: torchfriendlypay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.1TJUDjGnAnz4HfCbPJebWzg0HQXxKIarBD3RB23w3FQ; uid_id2=0a8ec9ad-6a09-43c7-812a-10f77ab14180:1:1; pdhtkv=true; uncs=1; pdhtkv5=true; uncs5=1; u_pl15212618=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Mon, 13 Oct 2025 03:48:34 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nVary: Origin\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nHost: torchfriendlypay.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 4cd05a763dd31f8f3b548a95485a64a1\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dowryhandgripballot.com/635b2315aeb203f10ce386ad75608b09/invoke.js","fqdn":"dowryhandgripballot.com","domain":"dowryhandgripballot.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:32.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dowryhandgripballot.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 21:21:17 GMT","end":"Tue, 23 Dec 2025 21:21:16 GMT"},"fingerprint":{"sha1":"63:F7:AF:6F:19:7D:8D:4A:AE:70:B1:09:04:E3:4F:F0:6C:E8:F3:16","sha256":"5C:7B:97:61:1C:91:E0:5C:D8:09:E4:4A:87:75:51:08:DE:D8:A1:04:F0:37:55:13:66:23:A1:79:89:8A:3E:EE"}}},"request":{"raw":"GET /635b2315aeb203f10ce386ad75608b09/invoke.js HTTP/1.1\r\nHost: dowryhandgripballot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Mon, 13 Oct 2025 03:48:33 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 16292\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: dowryhandgripballot.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 67c6e6c9b4fab667f13d7cae8edaee47\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":38389,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (38389), with no line terminators","md5":"b257695e0073357df485446c330b0beb","sha1":"797e3f1c35def77bd9b940da68a6651ac7ef85fb","sha256":"64465aa80d7fd339dbf18a24f5c1014f74a98045bb9b1f727530b9fe60f83f53","sha512":"018fe4050e23d2c773c0bff1788b1bc681a4448217566e688c1a55c5ebe657d342ef116dd5b6567bf2df4d12ffd008d70d9f26f80721891796cfe4292518940f","ssdeep":"768:fkqtST4OYZ748I6ngkkLXcj3PKFMrj2W+MogHM:8qtTO248I6ng6CIj2XMoP","tlshash":"6803c88d3fa1b85d0796a033723f840ae6ee4e0454dcd8e8e4076ca0fe68755d4b7ea5","first_seen":"2025-10-13T03:48:44.523198Z","last_seen":"2025-10-13T03:48:44.523198Z","times_seen":1,"resource_available":true,"data":null}},"time_used":851,"timings":{"blocked":325,"dns":49,"connect":96,"send":0,"wait":97,"receive":93,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"dowryhandgripballot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"dowryhandgripballot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"dowryhandgripballot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/wp-content/uploads/hummingbird-assets/bbef6c42a379ffe9f271757cf558489d.js","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:32.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapdrop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 17:26:26 GMT","end":"Mon, 29 Dec 2025 18:13:12 GMT"},"fingerprint":{"sha1":"8F:BC:36:F5:00:C6:56:6D:E9:C2:AB:63:8D:15:CD:DD:88:A2:0E:3C","sha256":"A9:67:EE:49:07:CC:75:F3:2F:CE:62:BD:AE:88:20:42:63:B3:B8:78:F3:B1:63:CF:34:9A:87:FE:0F:E9:E3:98"}}},"request":{"raw":"GET /wp-content/uploads/hummingbird-assets/bbef6c42a379ffe9f271757cf558489d.js HTTP/1.1\r\nHost: fapdrop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 07 Oct 2025 02:45:23 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1038\r\ndate: Mon, 13 Oct 2025 03:48:32 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M7lkdk%2Bliym56tWNgd0ovJbTIUhbcs%2F5vl2YP%2FdCiXBEiFX0HEwEWItTw5GIVT7eLNvTr8N9jvhtR8PO1lWFoLJA243k2FRkWg%3D%3D\"}]}\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98dbdca7f8e0568b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3282,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3257), with CRLF line terminators","md5":"6d8b199e3e18f67bb526b0e17cb5dabc","sha1":"5491f8460bcf50d9817ffffe4257fe1f76aa3d3b","sha256":"999ea7e2db5961d3be8a6703d08927676de7c19b01ac89b668b66f089b0eb535","sha512":"c9e1b19764744610c9de44b60339318bb53ebf0cfaf9df68035d45b99d00f0471f2afa00483660131dfdd428bad0c03bf8469183209e2a7c0737d7e1abc78a52","ssdeep":"","tlshash":"6261bf05197508e20b3e9794eeebe3252319704bff089d66eb287ce68684f556123b89","first_seen":"2025-10-02T00:37:09.066535Z","last_seen":"2026-05-30T21:45:08.992542Z","times_seen":23,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/impr.gif?sid=H4sIAAAAAAAC_1STPWwdxRqG5zjRLe4tbnJzBe0pKABhe3Z29o8UCBOCIkISJUEpEMX8rT14z86ys3vWsSgiIqEICcnpoFu_x4kFCQgaOlBk00VC4qTBRdzQIiGEFIkOHceS4Su-n3mneL7ROx9ttvskRCv2Lr3l1m1RiMVogQ6fv2ZL7To_vHB1GNAFenp4zZYxPz1cm6V6_HIQ8gX6wvANo1bdIqMBpQENhmdtbXK3tnigwlb3s2AhowucLQQRx1r9z9m3A3gxgB7vk__B6ul_f8nfgVU7KEdfnzF-tXHVS6-P2kI0rsZYb79drpauKzE6avN6gLzcPrwN56eEfDoHV24fbgA33pptAGmnZO6Zx5Dl9iEm5PjOU1JZwJSQ-j_oxjswxS6s2IFyN2H1TwRQGhcuohzdveDqTlx_qoqZOiXHn_wB203J8cf_Rzn6aqmwa8Mrrmgb60qPtbyHXduBXd5B1e6iWZ-D7Xahmg9h9Y9k8cl5lKOti75wsHrvuTjOAs2TZD5mGZ_nIVXzGaPxfKqFkibRiVHs4IlsvgPhj6H1A7R2gDYfoK0GGOm9IacpV4EI4zzTKqFccK6NpFnKKBWZStCqGfsGmmoDqtiAqm-gqm9g1d6eEvLoT9TtA_iVvW9FaEwWpilTeZAYZmhuaB5kUuaaBVGoMsZlzpMoo4KFPIhjw8MkN3EoYx1kSRKFQWwiJnNFTSilSII4jdMk40rkPIqTNIuEoVwqqmMdxoHKKaMZl1mqZZQww1mYUZEyqbJchiI1WhmmE5akWW5yJRITZFnMFAsyJWKd8oBxzuH1AL4hGOsenSHoPEEnCDpL0DUE3bi_owvPfH9XF76VwWFlhzXsJ65Z3hR3XLNsSgJRb6DW_Zat3vc3oZpjk_Xc64mbJSGbfiKk7jerfXLywBK_8VtYNXvDOIwkC4NIGMlomAdUmTCNhU6imKaSZvC2h_VzEH6AdTslJ0-MUc18-sE8pNiFL3ah7AmI9lmIbpKwFGIFGcV6eS8Xla5dtaDcCNr1qJrjaK4PNot9cmpy-erSgwOUd3_-BEY9JIcBVfeo6h7v2R8Ilotbk8uuI1uXXefJNxerxo7supg590ojGvOvL9401ztX63Nn_Mbnr6qZMGvvXzW-OS9KbctlT-4tWa1NfdbVypDvzvlrRl5q_cpSW5dtdf7Sa2fPjaraeG9duQNhp-Tfv38MZafk1PefHfzK6MUvoaob8NURp3cEsiIoLEFhjs6F7OH_NsujftPfwnI9gGhuohz1GNc9xkUPUWzAt8cmTVU_fOVReBCQxWAii5psyaKe6XZvmIeGKUrTJA7CNDdByLXKo5RnOhY0DA0aP135dXz7rwAAAP___zmQJTMFAAA=","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"192.243.59.12","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:34.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 21:34:59 GMT","end":"Tue, 25 Nov 2025 21:34:58 GMT"},"fingerprint":{"sha1":"E4:24:47:01:B7:F3:A1:0B:CF:EA:36:36:30:C1:21:5D:9E:A1:7B:BE","sha256":"EE:DD:A9:31:87:F8:15:E5:A4:69:BA:E8:17:29:F1:0D:59:DC:1E:48:E2:EB:2F:1D:FE:D6:5C:C0:5F:03:5B:01"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1STPWwdxRqG5zjRLe4tbnJzBe0pKABhe3Z29o8UCBOCIkISJUEpEMX8rT14z86ys3vWsSgiIqEICcnpoFu_x4kFCQgaOlBk00VC4qTBRdzQIiGEFIkOHceS4Su-n3mneL7ROx9ttvskRCv2Lr3l1m1RiMVogQ6fv2ZL7To_vHB1GNAFenp4zZYxPz1cm6V6_HIQ8gX6wvANo1bdIqMBpQENhmdtbXK3tnigwlb3s2AhowucLQQRx1r9z9m3A3gxgB7vk__B6ul_f8nfgVU7KEdfnzF-tXHVS6-P2kI0rsZYb79drpauKzE6avN6gLzcPrwN56eEfDoHV24fbgA33pptAGmnZO6Zx5Dl9iEm5PjOU1JZwJSQ-j_oxjswxS6s2IFyN2H1TwRQGhcuohzdveDqTlx_qoqZOiXHn_wB203J8cf_Rzn6aqmwa8Mrrmgb60qPtbyHXduBXd5B1e6iWZ-D7Xahmg9h9Y9k8cl5lKOti75wsHrvuTjOAs2TZD5mGZ_nIVXzGaPxfKqFkibRiVHs4IlsvgPhj6H1A7R2gDYfoK0GGOm9IacpV4EI4zzTKqFccK6NpFnKKBWZStCqGfsGmmoDqtiAqm-gqm9g1d6eEvLoT9TtA_iVvW9FaEwWpilTeZAYZmhuaB5kUuaaBVGoMsZlzpMoo4KFPIhjw8MkN3EoYx1kSRKFQWwiJnNFTSilSII4jdMk40rkPIqTNIuEoVwqqmMdxoHKKaMZl1mqZZQww1mYUZEyqbJchiI1WhmmE5akWW5yJRITZFnMFAsyJWKd8oBxzuH1AL4hGOsenSHoPEEnCDpL0DUE3bi_owvPfH9XF76VwWFlhzXsJ65Z3hR3XLNsSgJRb6DW_Zat3vc3oZpjk_Xc64mbJSGbfiKk7jerfXLywBK_8VtYNXvDOIwkC4NIGMlomAdUmTCNhU6imKaSZvC2h_VzEH6AdTslJ0-MUc18-sE8pNiFL3ah7AmI9lmIbpKwFGIFGcV6eS8Xla5dtaDcCNr1qJrjaK4PNot9cmpy-erSgwOUd3_-BEY9JIcBVfeo6h7v2R8Ilotbk8uuI1uXXefJNxerxo7supg590ojGvOvL9401ztX63Nn_Mbnr6qZMGvvXzW-OS9KbctlT-4tWa1NfdbVypDvzvlrRl5q_cpSW5dtdf7Sa2fPjaraeG9duQNhp-Tfv38MZafk1PefHfzK6MUvoaob8NURp3cEsiIoLEFhjs6F7OH_NsujftPfwnI9gGhuohz1GNc9xkUPUWzAt8cmTVU_fOVReBCQxWAii5psyaKe6XZvmIeGKUrTJA7CNDdByLXKo5RnOhY0DA0aP135dXz7rwAAAP___zmQJTMFAAA= HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.3jBLGPh4jx0Icz51Xlb06rStZS0jDuEqMW4tpBnC3KU; uid_id2=6691d477-6294-430c-9206-8dacbe7d7ec2:3:1; pdhtkv=true; uncs=1; pdhtkv23=true; uncs23=1; u_pl15676552=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Mon, 13 Oct 2025 03:48:34 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nVary: Origin\r\nAccess-Control-Allow-Credentials: true\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 62f03c6299001a412b9713546fbc3b7b\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/js/jads.js","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"92.222.100.135","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:34.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.jads.co","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Feb 2025 00:00:00 GMT","end":"Thu, 27 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"24:45:97:41:80:9C:3B:CE:BB:C3:B5:53:C5:0D:8C:BB:21:C9:56:20","sha256":"5F:96:09:03:1A:50:90:73:9C:60:3F:2D:35:D7:F2:4D:95:02:C6:38:BC:AB:88:FA:78:A4:8B:85:16:CB:F0:57"}}},"request":{"raw":"GET /js/jads.js HTTP/1.1\r\nHost: poweredby.jads.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 13 Oct 2025 03:48:34 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3769\r\nLast-Modified: Fri, 07 Mar 2025 18:31:37 GMT\r\nConnection: close\r\nETag: \"67cb3b89-eb9\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3769,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3769), with no line terminators","md5":"c344215f7f4c4339ef3ec474fab1d5d2","sha1":"56ae62e74a9560413819f5c829a689f11e0e8d4b","sha256":"4a80819c5ee89f3ea534b99fe485991302abc498d994ba29d5c893ac5d795f79","sha512":"77cb331606c75be717c9e04c1836c9b5c0e8011639b4063784f1159972e826b75c3d46625ca2b9e931e9934fb7febce6b9820cb0ac6692b108ff35de97f5a6e6","ssdeep":"","tlshash":"d971627733557879889b966f10ef6a18317faa310f0688025b9ce864987cdcb057fd84","first_seen":"2025-02-19T04:42:15.317534Z","last_seen":"2026-06-03T13:53:05.141441Z","times_seen":2503,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":95,"dns":1,"connect":34,"send":0,"wait":34,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/js/jads.js","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"92.222.100.135","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:34.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.jads.co","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Feb 2025 00:00:00 GMT","end":"Thu, 27 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"24:45:97:41:80:9C:3B:CE:BB:C3:B5:53:C5:0D:8C:BB:21:C9:56:20","sha256":"5F:96:09:03:1A:50:90:73:9C:60:3F:2D:35:D7:F2:4D:95:02:C6:38:BC:AB:88:FA:78:A4:8B:85:16:CB:F0:57"}}},"request":{"raw":"GET /js/jads.js HTTP/1.1\r\nHost: poweredby.jads.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 13 Oct 2025 03:48:34 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3769\r\nLast-Modified: Fri, 07 Mar 2025 18:31:37 GMT\r\nConnection: close\r\nETag: \"67cb3b89-eb9\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3769,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3769), with no line terminators","md5":"c344215f7f4c4339ef3ec474fab1d5d2","sha1":"56ae62e74a9560413819f5c829a689f11e0e8d4b","sha256":"4a80819c5ee89f3ea534b99fe485991302abc498d994ba29d5c893ac5d795f79","sha512":"77cb331606c75be717c9e04c1836c9b5c0e8011639b4063784f1159972e826b75c3d46625ca2b9e931e9934fb7febce6b9820cb0ac6692b108ff35de97f5a6e6","ssdeep":"","tlshash":"d971627733557879889b966f10ef6a18317faa310f0688025b9ce864987cdcb057fd84","first_seen":"2025-02-19T04:42:15.317534Z","last_seen":"2026-06-03T13:53:05.141441Z","times_seen":2503,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":93,"dns":1,"connect":33,"send":0,"wait":33,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/wp-content/themes/king/layouts/font-awesome/webfonts/fa-regular-400.woff2","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:12.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapdrop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 17:26:26 GMT","end":"Mon, 29 Dec 2025 18:13:12 GMT"},"fingerprint":{"sha1":"8F:BC:36:F5:00:C6:56:6D:E9:C2:AB:63:8D:15:CD:DD:88:A2:0E:3C","sha256":"A9:67:EE:49:07:CC:75:F3:2F:CE:62:BD:AE:88:20:42:63:B3:B8:78:F3:B1:63:CF:34:9A:87:FE:0F:E9:E3:98"}}},"request":{"raw":"GET /wp-content/themes/king/layouts/font-awesome/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: fapdrop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 14 Oct 2025 03:07:29 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 01 Nov 2023 01:29:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 24488\r\ndate: Mon, 13 Oct 2025 03:48:12 GMT\r\nserver: cloudflare\r\nvary: User-Agent, accept-encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ITaKQDEycZaX2QU8SyTdGsS7TcVYeNpTOQYlwKfCzFmDler%2BR81HEDFGWZe%2FN2nbXZDZtgsjSji0I4y7o%2BRRVlN6B7Tkep4Vfg%3D%3D\"}]}\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98dbdc29af83568b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24488,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24488, version 772.1280","md5":"747442fa76f1d9a31f9a54a2e8a4b448","sha1":"07fc0ae14bb3187839082aed3bca11dfb1e04524","sha256":"9169d8be7a8177e5a92a4d04b6de7f6504b938573bf4da5889871c4f376d3849","sha512":"274dbe5bc31c560d2cc2d15afe5485687b2f7dd0ee24ffed99627310ea36a6a3cc1c91e22368f909d056f4faab051838d469e0bfe8a30169b735aca5eb0f402f","ssdeep":"384:Ok8mTTNu15tM1xuB9dYY7YRHmOdjzUJsAr4p8Oq7kpPyXBpqrhDRBybCpMuT33SI:OGg15tM1xuBYY7YRHmcjzUJJr4p8Oq7a","tlshash":"0cb2df2cebab2746c908513a2ec4deef3dac1b674d0461298c45edece8847281d9c964","first_seen":"2023-08-14T23:16:18Z","last_seen":"2026-06-03T15:38:53.729288Z","times_seen":9078,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/cf-fonts/s/nunito/5.0.16/latin/600/normal.woff2","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:12.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapdrop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 17:26:26 GMT","end":"Mon, 29 Dec 2025 18:13:12 GMT"},"fingerprint":{"sha1":"8F:BC:36:F5:00:C6:56:6D:E9:C2:AB:63:8D:15:CD:DD:88:A2:0E:3C","sha256":"A9:67:EE:49:07:CC:75:F3:2F:CE:62:BD:AE:88:20:42:63:B3:B8:78:F3:B1:63:CF:34:9A:87:FE:0F:E9:E3:98"}}},"request":{"raw":"GET /cf-fonts/s/nunito/5.0.16/latin/600/normal.woff2 HTTP/1.1\r\nHost: fapdrop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Oct 2025 03:48:12 GMT\r\ncontent-length: 16540\r\ncontent-type: font/woff2\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fjLnXtbsDsTJr1Kh9q4v4FFPvzdhRg%2FffINKJmLGtDERWEWCRygdlerwmjj3quSz6FfqURZjw3QPaSvMA4WTrYUsk2pHOuSujA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 98dbdc2b5f99568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16540,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 16540, version 1.0","md5":"3408bc98ea5e9db611ca836a976b2848","sha1":"0fe772d9cca5112704ca31a7f6d13b80624711e1","sha256":"72f4dad9076ee652f90406ad66b457b11fce8de23bcccf06ceb95b1e1c66a5dc","sha512":"2408aeb300f7e84dbb29913cc8c5a1f3744bba86d1b79a66e02110bfc3614345f80b223bce2317825c9de9c6b7f5095d4d69b14c0227e25dd591d1c65a57f0da","ssdeep":"384:kmI3E++6kThgwomv7STo1spRztRrT7+v+jfU5Othbjb/iwpv:kmI3E60h1omjSMIz3f+vkyAjb/zv","tlshash":"f272d02501f2856a9c578e7cfb20bc19f42cbb4caf17ec86425b69f6c5a7c7e0875260","first_seen":"2023-09-16T08:23:16Z","last_seen":"2026-05-31T06:09:47.867169Z","times_seen":216,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/wp-content/themes/king/layouts/font-awesome/webfonts/fa-solid-900.woff2","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:12.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapdrop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 17:26:26 GMT","end":"Mon, 29 Dec 2025 18:13:12 GMT"},"fingerprint":{"sha1":"8F:BC:36:F5:00:C6:56:6D:E9:C2:AB:63:8D:15:CD:DD:88:A2:0E:3C","sha256":"A9:67:EE:49:07:CC:75:F3:2F:CE:62:BD:AE:88:20:42:63:B3:B8:78:F3:B1:63:CF:34:9A:87:FE:0F:E9:E3:98"}}},"request":{"raw":"GET /wp-content/themes/king/layouts/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: fapdrop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/wp-content/themes/king/layouts/font-awesome/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 14 Oct 2025 03:07:29 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 01 Nov 2023 01:29:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 150020\r\ndate: Mon, 13 Oct 2025 03:48:12 GMT\r\nserver: cloudflare\r\nvary: User-Agent, accept-encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tXwNf%2BtrOZRQ2KNzNB6gTE5vPthjf5jJWPg140mKq%2FcEHpwkbCoItC41FoZLGOekyrfnzs6bcgoS7CGRL2tEh6IU821gi9fT%2BQ%3D%3D\"}]}\r\nage: 18687\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98dbdc2baf9b568b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":150020,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 150020, version 772.1280","md5":"d5e647388e2415268b700d3df2e30a0d","sha1":"97f0942c6627ddd89fb62170e5cac9a2cbd6c98c","sha256":"886c86112a804ef1ddd1cb206af4c8c40e34b73c26652ca231404aa35a6b30d9","sha512":"50b2ffd7537d0424286936cb7ba566004a664f447e4aaac8fa40ceb2850ead6cdb39c957515ae05a07aaeb8f6e3e428c4b95e4efa3edcadc9473e9e200bb47d6","ssdeep":"3072:vPtxURbSTtDXSLXe0itudYTPEnus4blfNUqKrC7ZOBS9C3bzlLX4/NKOTD5:P15Die0UPblfNUqLZg9I/Qk5","tlshash":"03e312e8c98e8e24452e2b975b436d4cfca1c97d77bfba0e2b5401b94f1e0521b34a71","first_seen":"2023-08-04T22:28:10Z","last_seen":"2026-06-03T16:52:12.013856Z","times_seen":36525,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/wp-content/themes/king/layouts/js/masonry.pkgd.min.js","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:32.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapdrop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 17:26:26 GMT","end":"Mon, 29 Dec 2025 18:13:12 GMT"},"fingerprint":{"sha1":"8F:BC:36:F5:00:C6:56:6D:E9:C2:AB:63:8D:15:CD:DD:88:A2:0E:3C","sha256":"A9:67:EE:49:07:CC:75:F3:2F:CE:62:BD:AE:88:20:42:63:B3:B8:78:F3:B1:63:CF:34:9A:87:FE:0F:E9:E3:98"}}},"request":{"raw":"GET /wp-content/themes/king/layouts/js/masonry.pkgd.min.js HTTP/1.1\r\nHost: fapdrop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 28 Dec 2021 14:53:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 7094\r\ndate: Mon, 13 Oct 2025 03:48:32 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZVKWRrsXxeji3jdndKxcGMsSCEsTGc4O9eTLxKx5yBZBzGKAFaIZyWk8mQCSITrzXZO9Q6RiaoIMSS5ftNQet1xtSs20cOa2aw%3D%3D\"}]}\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98dbdca808e4568b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24103,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (23966)","md5":"520e46df77727aaf3d5e799ef241be02","sha1":"d20252cf76c3be8af37a8415d13ad368c762b4d8","sha256":"367d6afdfc741fb48d2d9310e47c3924b693459a74c882c0fc545ec5ed7d55d2","sha512":"25195cbd26405d3f3ee5241002f9255c626ec574e8bb2abca0831a60445941ab01f120431d96946de012b095a9934514adff3d0cfdff69e7cf3eb94c475875c9","ssdeep":"384:cr7mIr/Dh5rA3rzB4rMhr/XWGHW/6rMz1xftF2OUVP4eAnbhfreD6dCBEOav7blM:iSxxGG2/71xftFqVP4eAnI0ROavPSCzo","tlshash":"46b2858f73007425428bf16696af020f7137655c7a4790acba6ad8db1cb984d2037fbd","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-06-03T15:41:04.557657Z","times_seen":10036,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"professionaltrafficmonitor.com/stats","fqdn":"professionaltrafficmonitor.com","domain":"professionaltrafficmonitor.com","tld":"com"},"ip":{"addr":"3.125.105.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:33.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Thu, 30 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6","sha256":"49:03:4C:2C:1B:23:D8:D6:CB:AE:F0:54:61:99:C2:20:F4:FF:87:5E:0B:72:B1:6B:D8:AB:21:49:2D:F2:EC:4A"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: professionaltrafficmonitor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://fapdrop.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 03:48:33 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://fapdrop.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=0a8ec9ad-6a09-43c7-812a-10f77ab14180:1:1; expires=Thu, 11 Oct 2035 03:48:33 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"1f29055680eea2d501e53cfbf5a45a7e","sha1":"49b727f54a0bcb27118ad89a757d31878c037eb4","sha256":"ae8511dad69c97b8063b7685f009c58e89cf0571c615e45d4c0f54809589aa75","sha512":"7cbec339f9ef50fff57dabde17b521af34a08209426ed76a96ea1033e725adce3deec70bd39713a9f2086150f6241d34be61c57661f1fdfc33df58217984ed7c","ssdeep":"","tlshash":"6790044cd14555f0d10c5d04710d0c05d0c340170f545151d0345711d5770004350003","first_seen":"2025-10-13T03:48:44.563009Z","last_seen":"2025-10-13T03:48:44.563009Z","times_seen":1,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":75,"dns":1,"connect":23,"send":0,"wait":21,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/wp-includes/js/jquery/jquery.min.js","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:32.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapdrop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 17:26:26 GMT","end":"Mon, 29 Dec 2025 18:13:12 GMT"},"fingerprint":{"sha1":"8F:BC:36:F5:00:C6:56:6D:E9:C2:AB:63:8D:15:CD:DD:88:A2:0E:3C","sha256":"A9:67:EE:49:07:CC:75:F3:2F:CE:62:BD:AE:88:20:42:63:B3:B8:78:F3:B1:63:CF:34:9A:87:FE:0F:E9:E3:98"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js HTTP/1.1\r\nHost: fapdrop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 20 Jun 2024 03:33:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 29744\r\ndate: Mon, 13 Oct 2025 03:48:32 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tr1jK4fqe%2F8px1h2r%2BJybh6IiTOKqR3Il9S%2BaibQB24Tk%2BzqGlNTqmzQdKQQxfkWxRWK4N3cqfPkJ%2BhYBbpDdjhJrBAGDdCYEg%3D%3D\"}]}\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98dbdca7d8de568b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-06-03T17:54:34.592617Z","times_seen":883758,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/cf-fonts/s/nunito/5.0.16/latin/300/normal.woff2","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:12.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapdrop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 17:26:26 GMT","end":"Mon, 29 Dec 2025 18:13:12 GMT"},"fingerprint":{"sha1":"8F:BC:36:F5:00:C6:56:6D:E9:C2:AB:63:8D:15:CD:DD:88:A2:0E:3C","sha256":"A9:67:EE:49:07:CC:75:F3:2F:CE:62:BD:AE:88:20:42:63:B3:B8:78:F3:B1:63:CF:34:9A:87:FE:0F:E9:E3:98"}}},"request":{"raw":"GET /cf-fonts/s/nunito/5.0.16/latin/300/normal.woff2 HTTP/1.1\r\nHost: fapdrop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Oct 2025 03:48:12 GMT\r\ncontent-length: 16068\r\ncontent-type: font/woff2\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JdmNbXPYxUvdr9KilvGNkF4mtESpdzP%2BGP217ZjZyCVmcDUJ2dIzcgfu4ry90naZEOC2LH5od%2FuctBCB0CiGaOhem2d%2B%2FpXLKA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 98dbdc2b1f97568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16068,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 16068, version 1.0","md5":"180e63ab8ae269bbfa72badaeb7ca91a","sha1":"b06165e070b3f1070e5c3166393169c6968f6b6b","sha256":"1ca366bcd4c496c368ba1e6c05c4c5e9281d1fe0bf3a22c362a1b392ca4e1158","sha512":"20b3ab11de32b58548366538ccec72501035f4f4005e039f43d2e24572a6196884e867c3aeb4c2c54305e973bee9702d3c72d50f1a65ac2187bb1625c3370a45","ssdeep":"384:uhlaDpEL2WaM834yHO7/4F9V3FlBcmCmFFNhRUIGI:+UNEL2WnG4sOg9V/BVFxUm","tlshash":"1672e05e51dd14c1d86eaf34a809f80ee5dd0cc48b69be583a14c81e365dda26c6ace8","first_seen":"2023-09-21T01:24:52Z","last_seen":"2026-05-31T14:04:17.809685Z","times_seen":74,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/impr.gif?sid=H4sIAAAAAAAC_1RTPWwcRRSecwIFFCQEUV9BAQifZ_Z_SYEwISgQkpAEpUAIvfmzB-_tLDu7t46hiIhAEZWhAtHsvbvYQCIEDR0oOtNFQuLS4CJuaChoEFIkOnRnS4Ynzfv5vim-N_rm42G9R3ysYffC63bDZBkshT3affqKyaVtXPfc5S6jPXqye8XkUXCyuz5L5eB55gc9-kz3FSXW7JJHGaWMsu5pUypt15fmLJridsp6Ke0FXo-FAa6X_59d3UEHHZSDPfI4Gjl97Hf9Fhoxwbz_3Snl1ipbPPdyv86gsiUO5Pab-Vpumxz7h60uO6jz7YPbaN2UkM8X0ObbBxugHYxnGyA3U7Lw5H3k-faBTOSDm_tKeYYqRy4fxWYwQZXtoIEJCnsdjfyVIAqJ585j3t86Z8sGru6zMGOn5OiDv9E0U3L0_hOY979dzsx695LN6srY3OG6btGsT9CsTLCod7DaWEDT7KCoPkQjfyFLD85i3h-fd5lFI3efopAokYJcjICmi4Ev4sWEebDIqI5j4CxgCZ0_kdETBNfBenZMB2vdwbroYF_udgOaBIKBH-lUipgGEARScZomHqWQihhrMdO-iVWxiSLbRFF-tFXI1WptMK7KWo3rXLgh-2of8vw5uDUDPX_IbtfvFBkLozgKQ2_IsCiv4Zr5dErIvX-wrO-gW939ARId8whYKLw0CQJBOY9pzJlOIvAklaHScRz5mkcBjxMeMx8SoEkUSMZD7UnJgigALjinyktCwbxIS0ggDIOQqURq6YW-DhIRK0lFAmkcRSziEVOMAvO8OBYQKwq-zxjwQIdUJFGSCBGGcRhFATANOohlzLVHozQJA65iQCcX0FVT0nnjGg5ki40i2DiCDRBsDMGmItgM2psyc55rt2Tmas4OqndQ_XZkq5Uh3LTVisoJQrmJpWzHpnjPXUdRHRltaCdHdpaAV-0IuGyHxR45PvfTH91XcU3tdv3Y5yEwKv2UKhFST8Qy9EMZaZmmUSTQmRaNW5i7YMNMyfFjAyxmJv9gETnsoMt2UJhjCPVDCM3IpxRhdeSFFDfyWxoKWdqiJ2wfpW2xqI5idbUzzPbIidHFy8t35lre_u19VOIuOQgUZYtF2eK75meCK9mN0UXbkPFF2zjy_fmiMn2zATPfX6qgUg9_85q62thSnjnlNr9-UcyIWXv7snLVWcilyVccubVspFTlaVsKRX48464ofqF2q8t1mdfF2QsvnT7TL0rlnLH5BMFMySN_fYLCTMmJn76Y_-nw2S9RFNfQFYc6nSXIC4KZIZipQxx4i-4_Mz_sh-4GrpQdhOo65v0WB2WLg6xFyDbR1UdGVVHefeGePw_kWWfEs5KMeVbOeLPb1b7yBKVJHDE_0Yr5gRQ6TIJURkB9X2Hlpqt_Dj77NwAA__-Uvb_ucQUAAA==","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:34.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 22:00:34 GMT","end":"Tue, 25 Nov 2025 22:00:33 GMT"},"fingerprint":{"sha1":"FC:5B:24:E2:ED:A9:65:69:CA:97:74:44:F8:E9:93:1A:50:E7:73:C1","sha256":"26:1B:F8:72:30:B2:C4:49:6A:2E:E7:A5:FC:26:35:74:02:CB:56:D1:F7:7E:A5:5E:89:65:A9:B4:1F:1F:DB:8F"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RTPWwcRRSecwIFFCQEUV9BAQifZ_Z_SYEwISgQkpAEpUAIvfmzB-_tLDu7t46hiIhAEZWhAtHsvbvYQCIEDR0oOtNFQuLS4CJuaChoEFIkOnRnS4Ynzfv5vim-N_rm42G9R3ysYffC63bDZBkshT3affqKyaVtXPfc5S6jPXqye8XkUXCyuz5L5eB55gc9-kz3FSXW7JJHGaWMsu5pUypt15fmLJridsp6Ke0FXo-FAa6X_59d3UEHHZSDPfI4Gjl97Hf9Fhoxwbz_3Snl1ipbPPdyv86gsiUO5Pab-Vpumxz7h60uO6jz7YPbaN2UkM8X0ObbBxugHYxnGyA3U7Lw5H3k-faBTOSDm_tKeYYqRy4fxWYwQZXtoIEJCnsdjfyVIAqJ585j3t86Z8sGru6zMGOn5OiDv9E0U3L0_hOY979dzsx695LN6srY3OG6btGsT9CsTLCod7DaWEDT7KCoPkQjfyFLD85i3h-fd5lFI3efopAokYJcjICmi4Ev4sWEebDIqI5j4CxgCZ0_kdETBNfBenZMB2vdwbroYF_udgOaBIKBH-lUipgGEARScZomHqWQihhrMdO-iVWxiSLbRFF-tFXI1WptMK7KWo3rXLgh-2of8vw5uDUDPX_IbtfvFBkLozgKQ2_IsCiv4Zr5dErIvX-wrO-gW939ARId8whYKLw0CQJBOY9pzJlOIvAklaHScRz5mkcBjxMeMx8SoEkUSMZD7UnJgigALjinyktCwbxIS0ggDIOQqURq6YW-DhIRK0lFAmkcRSziEVOMAvO8OBYQKwq-zxjwQIdUJFGSCBGGcRhFATANOohlzLVHozQJA65iQCcX0FVT0nnjGg5ki40i2DiCDRBsDMGmItgM2psyc55rt2Tmas4OqndQ_XZkq5Uh3LTVisoJQrmJpWzHpnjPXUdRHRltaCdHdpaAV-0IuGyHxR45PvfTH91XcU3tdv3Y5yEwKv2UKhFST8Qy9EMZaZmmUSTQmRaNW5i7YMNMyfFjAyxmJv9gETnsoMt2UJhjCPVDCM3IpxRhdeSFFDfyWxoKWdqiJ2wfpW2xqI5idbUzzPbIidHFy8t35lre_u19VOIuOQgUZYtF2eK75meCK9mN0UXbkPFF2zjy_fmiMn2zATPfX6qgUg9_85q62thSnjnlNr9-UcyIWXv7snLVWcilyVccubVspFTlaVsKRX48464ofqF2q8t1mdfF2QsvnT7TL0rlnLH5BMFMySN_fYLCTMmJn76Y_-nw2S9RFNfQFYc6nSXIC4KZIZipQxx4i-4_Mz_sh-4GrpQdhOo65v0WB2WLg6xFyDbR1UdGVVHefeGePw_kWWfEs5KMeVbOeLPb1b7yBKVJHDE_0Yr5gRQ6TIJURkB9X2Hlpqt_Dj77NwAA__-Uvb_ucQUAAA== HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.1TJUDjGnAnz4HfCbPJebWzg0HQXxKIarBD3RB23w3FQ; uid_id2=0a8ec9ad-6a09-43c7-812a-10f77ab14180:1:1; pdhtkv=true; uncs=1; pdhtkv23=true; uncs23=1; u_pl15676552=1; pdhtkv5=true; uncs5=1; u_pl15212618=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Mon, 13 Oct 2025 03:48:34 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 3\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 85b6edcefc227f99bddf504abbabc631\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/watch.1548658696329.js?dev=e\u0026key=635b2315aeb203f10ce386ad75608b09\u0026kw=%5B%22fapdrop%22%5D\u0026pst=1760327373\u0026rb=\u0026refer=https%3A%2F%2Ffapdrop.com%2Fdownload%2F%3Fdldata%3D%7B%2522urls%2522%3A%5B%5B%2522https%3A%2F%2Fworkupload.com%2Ffile%2FxeguUD2TLxT%2522%2C%2522https%3A%2F%2Fgofile.io%2Fd%2FWmOdiD%2522%2C%2522https%3A%2F%2Fbuzzheavier.com%2F9tx3untaas0e%2522%5D%5D%2C%2522titles%2522%3A%5B%5B%2522Workupload%2522%2C%2522Gofile.io%2522%2C%2522Buzzheavier%2522%5D%5D%2C%2522platforms%2522%3A%5B%2522Windows%2C%2520Linux%2522%5D%7D\u0026res=14.3095\u0026rmtc=t\u0026shu=452fdf73e409785865d04a0539b5e0bee66aa5c01a09355bda54888a5df91449b94ac5ae7c62da0c2a48ff8150b999e20958fcb7cee9c335585536ac3e5cc496fe31facd0859861da03db25b92544174a8364a2aecee53f0df09dc\u0026tz=0\u0026uuid=0a8ec9ad-6a09-43c7-812a-10f77ab14180%3A1%3A1","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:33.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 22:00:34 GMT","end":"Tue, 25 Nov 2025 22:00:33 GMT"},"fingerprint":{"sha1":"FC:5B:24:E2:ED:A9:65:69:CA:97:74:44:F8:E9:93:1A:50:E7:73:C1","sha256":"26:1B:F8:72:30:B2:C4:49:6A:2E:E7:A5:FC:26:35:74:02:CB:56:D1:F7:7E:A5:5E:89:65:A9:B4:1F:1F:DB:8F"}}},"request":{"raw":"GET /watch.1548658696329.js?dev=e\u0026key=635b2315aeb203f10ce386ad75608b09\u0026kw=%5B%22fapdrop%22%5D\u0026pst=1760327373\u0026rb=\u0026refer=https%3A%2F%2Ffapdrop.com%2Fdownload%2F%3Fdldata%3D%7B%2522urls%2522%3A%5B%5B%2522https%3A%2F%2Fworkupload.com%2Ffile%2FxeguUD2TLxT%2522%2C%2522https%3A%2F%2Fgofile.io%2Fd%2FWmOdiD%2522%2C%2522https%3A%2F%2Fbuzzheavier.com%2F9tx3untaas0e%2522%5D%5D%2C%2522titles%2522%3A%5B%5B%2522Workupload%2522%2C%2522Gofile.io%2522%2C%2522Buzzheavier%2522%5D%5D%2C%2522platforms%2522%3A%5B%2522Windows%2C%2520Linux%2522%5D%7D\u0026res=14.3095\u0026rmtc=t\u0026shu=452fdf73e409785865d04a0539b5e0bee66aa5c01a09355bda54888a5df91449b94ac5ae7c62da0c2a48ff8150b999e20958fcb7cee9c335585536ac3e5cc496fe31facd0859861da03db25b92544174a8364a2aecee53f0df09dc\u0026tz=0\u0026uuid=0a8ec9ad-6a09-43c7-812a-10f77ab14180%3A1%3A1 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://fapdrop.com\r\nReferer: https://fapdrop.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.3jBLGPh4jx0Icz51Xlb06rStZS0jDuEqMW4tpBnC3KU\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Mon, 13 Oct 2025 03:48:34 GMT\r\nContent-Type: text/html\r\nContent-Length: 3211\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://fapdrop.com\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=0a8ec9ad-6a09-43c7-812a-10f77ab14180:1:1; expires=Mon, 20 Oct 2025 03:48:34 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Tue, 14 Oct 2025 03:48:34 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Tue, 14 Oct 2025 03:48:34 GMT; path=/; secure; SameSite=None\npdhtkv23=true; expires=Tue, 14 Oct 2025 03:48:34 GMT; path=/; secure; SameSite=None\nuncs23=1; expires=Tue, 14 Oct 2025 03:48:34 GMT; path=/; secure; SameSite=None\nu_pl15676552=1; expires=Tue, 14 Oct 2025 03:48:34 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 28\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: b3e7c8369e8dea3af502dc92d43527ec\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":4808,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (3932)","md5":"ff3a28599267d58695be6be7f6296e6e","sha1":"2553d6c2cbfb1efb4891b809a370ab07f5e1dc53","sha256":"11726615ef4b235fc77f73d92cd22f6fa5b3d4ed4a654b78fe14b5f06c891a07","sha512":"69cbef4ae6fdbcb78ae390de5148ddcdb5f4dc87c86fe32b4ee39e085594088d073a8380cae20c85e5008d6397bf67e7336f07574d542f8a70c5367ae1e37d3c","ssdeep":"96:IozikTIvF8E6mOftygFmCmw9CLVCGQqx7YbK1Q6UzF1/DiCfMEDaH:RzgaEDKtygTsLVCGQqeK19Uz/biCkCaH","tlshash":"f1a12bb1ade21878256a70ff45f795083520a0172649fec13c8dea268f12ee45da9edc","first_seen":"2025-10-13T03:48:44.585176Z","last_seen":"2025-10-13T03:48:44.585176Z","times_seen":1,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":161,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/js/jads.js","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"92.222.100.135","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:34.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.jads.co","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Feb 2025 00:00:00 GMT","end":"Thu, 27 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"24:45:97:41:80:9C:3B:CE:BB:C3:B5:53:C5:0D:8C:BB:21:C9:56:20","sha256":"5F:96:09:03:1A:50:90:73:9C:60:3F:2D:35:D7:F2:4D:95:02:C6:38:BC:AB:88:FA:78:A4:8B:85:16:CB:F0:57"}}},"request":{"raw":"GET /js/jads.js HTTP/1.1\r\nHost: poweredby.jads.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 13 Oct 2025 03:48:34 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3769\r\nLast-Modified: Fri, 07 Mar 2025 18:31:37 GMT\r\nConnection: close\r\nETag: \"67cb3b89-eb9\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3769,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3769), with no line terminators","md5":"c344215f7f4c4339ef3ec474fab1d5d2","sha1":"56ae62e74a9560413819f5c829a689f11e0e8d4b","sha256":"4a80819c5ee89f3ea534b99fe485991302abc498d994ba29d5c893ac5d795f79","sha512":"77cb331606c75be717c9e04c1836c9b5c0e8011639b4063784f1159972e826b75c3d46625ca2b9e931e9934fb7febce6b9820cb0ac6692b108ff35de97f5a6e6","ssdeep":"","tlshash":"d971627733557879889b966f10ef6a18317faa310f0688025b9ce864987cdcb057fd84","first_seen":"2025-02-19T04:42:15.317534Z","last_seen":"2026-06-03T13:53:05.141441Z","times_seen":2503,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":104,"dns":1,"connect":32,"send":0,"wait":32,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/js/jads.js","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"92.222.100.135","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:34.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.jads.co","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Feb 2025 00:00:00 GMT","end":"Thu, 27 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"24:45:97:41:80:9C:3B:CE:BB:C3:B5:53:C5:0D:8C:BB:21:C9:56:20","sha256":"5F:96:09:03:1A:50:90:73:9C:60:3F:2D:35:D7:F2:4D:95:02:C6:38:BC:AB:88:FA:78:A4:8B:85:16:CB:F0:57"}}},"request":{"raw":"GET /js/jads.js HTTP/1.1\r\nHost: poweredby.jads.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 13 Oct 2025 03:48:34 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3769\r\nLast-Modified: Fri, 07 Mar 2025 18:31:37 GMT\r\nConnection: close\r\nETag: \"67cb3b89-eb9\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3769,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3769), with no line terminators","md5":"c344215f7f4c4339ef3ec474fab1d5d2","sha1":"56ae62e74a9560413819f5c829a689f11e0e8d4b","sha256":"4a80819c5ee89f3ea534b99fe485991302abc498d994ba29d5c893ac5d795f79","sha512":"77cb331606c75be717c9e04c1836c9b5c0e8011639b4063784f1159972e826b75c3d46625ca2b9e931e9934fb7febce6b9820cb0ac6692b108ff35de97f5a6e6","ssdeep":"","tlshash":"d971627733557879889b966f10ef6a18317faa310f0688025b9ce864987cdcb057fd84","first_seen":"2025-02-19T04:42:15.317534Z","last_seen":"2026-06-03T13:53:05.141441Z","times_seen":2503,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":105,"dns":1,"connect":33,"send":0,"wait":33,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/wp-content/uploads/hummingbird-assets/fe08f3bc6b23b9583451d1d75df993af.css","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:12.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapdrop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 17:26:26 GMT","end":"Mon, 29 Dec 2025 18:13:12 GMT"},"fingerprint":{"sha1":"8F:BC:36:F5:00:C6:56:6D:E9:C2:AB:63:8D:15:CD:DD:88:A2:0E:3C","sha256":"A9:67:EE:49:07:CC:75:F3:2F:CE:62:BD:AE:88:20:42:63:B3:B8:78:F3:B1:63:CF:34:9A:87:FE:0F:E9:E3:98"}}},"request":{"raw":"GET /wp-content/uploads/hummingbird-assets/fe08f3bc6b23b9583451d1d75df993af.css HTTP/1.1\r\nHost: fapdrop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 14 Oct 2025 02:52:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 07 Oct 2025 02:45:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 809\r\ndate: Mon, 13 Oct 2025 03:48:12 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IKgt97A7LcLm%2BW2nMvfPY7UqQzk08oVEw6Yzh2%2BUk7Eq%2B6oWY1chW%2F2nMcEoOJeLkRTec9xcxHed1Oyuw2hvq58BHZXobGr8NA%3D%3D\"}]}\r\nage: 493994\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98dbdc29bf8c568b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2577,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2543), with CRLF line terminators","md5":"b9e357a9fd1c34824e6cee8f45e5bbf9","sha1":"6239875611bdcd40d75f04d10550d6ef9c6ae967","sha256":"cd7fd58e9b511c22112baa986d897585e78f19d8bdbac9d70f3e89bf753c96f2","sha512":"2155934e151bb8002d67775d81bc1fe6da67ff383232400f80c18cf98065d16957c3d66dadbfbd6880db1e2c9c45a0d863a8206e0b26716430a827403bec8b6a","ssdeep":"","tlshash":"545121b05c022074f037da9592e29b28352dc223ea030eef5799695ec3c7ade52f4749","first_seen":"2025-10-02T00:37:09.104227Z","last_seen":"2026-05-30T21:45:08.996811Z","times_seen":22,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/wp-content/uploads/2020/01/cropped-fapdrop-favicon-300x300.png","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:12.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapdrop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 17:26:26 GMT","end":"Mon, 29 Dec 2025 18:13:12 GMT"},"fingerprint":{"sha1":"8F:BC:36:F5:00:C6:56:6D:E9:C2:AB:63:8D:15:CD:DD:88:A2:0E:3C","sha256":"A9:67:EE:49:07:CC:75:F3:2F:CE:62:BD:AE:88:20:42:63:B3:B8:78:F3:B1:63:CF:34:9A:87:FE:0F:E9:E3:98"}}},"request":{"raw":"GET /wp-content/uploads/2020/01/cropped-fapdrop-favicon-300x300.png HTTP/1.1\r\nHost: fapdrop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 14 Oct 2025 23:02:57 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 25 Jan 2020 22:03:09 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10936\r\ndate: Mon, 13 Oct 2025 03:48:12 GMT\r\nserver: cloudflare\r\nvary: User-Agent, accept-encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5bPlJ4PQoDB%2BxDCs8CVCV4hAHMVd2vMMjbPhqXTHSNmjsezh9WhqbYH%2FYP%2FFNZIVNO3Lv3gUx2t%2FfIwYiwkxSF0fHRrU5by%2F6A%3D%3D\"}]}\r\nage: 441995\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98dbdc2c2f9c568b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10936,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit colormap, non-interlaced","md5":"4abcd8126ccba27dacd4d612b93d6f06","sha1":"0b68f448a7e7bcc9523efb7d7460b9e8cc4521e5","sha256":"4e7332ba5b01da3cedefe8cff6311f898910dfe518480055984e7d4c7f6f385b","sha512":"abb0856576f3c2f8d922d99f98f0c6c4be25da96b3faa4e1d9d07554825705bf04c88535bc113bd29654dff8cd381bf7f3325af18f544e4c072a156496c7905f","ssdeep":"192:FMnyeXSt77Y0e5lNDe5+J3y0zddn0FlNMdYfxfWVHJfThWDG0vIpweAra7rfp5B9:FMnyeit70TNDeEJC4dn0w+fWxpTjTpwO","tlshash":"8c32c0ea680f8bfdc59598377d4096934b803cd711a9e649103f9e6152e2d0a0abfe48","first_seen":"2025-10-02T00:37:09.109041Z","last_seen":"2026-05-30T21:45:08.978938Z","times_seen":22,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/wp-content/uploads/hummingbird-assets/9e6bd87ea6ae0a70558bff65b84331c4.js","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:32.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapdrop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 17:26:26 GMT","end":"Mon, 29 Dec 2025 18:13:12 GMT"},"fingerprint":{"sha1":"8F:BC:36:F5:00:C6:56:6D:E9:C2:AB:63:8D:15:CD:DD:88:A2:0E:3C","sha256":"A9:67:EE:49:07:CC:75:F3:2F:CE:62:BD:AE:88:20:42:63:B3:B8:78:F3:B1:63:CF:34:9A:87:FE:0F:E9:E3:98"}}},"request":{"raw":"GET /wp-content/uploads/hummingbird-assets/9e6bd87ea6ae0a70558bff65b84331c4.js HTTP/1.1\r\nHost: fapdrop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 07 Oct 2025 02:46:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 3622\r\ndate: Mon, 13 Oct 2025 03:48:32 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nBDcz%2FtPu7ZvzEBa1nJZfm2s7ych6KRvPBvBjYZF5BNwDi4s4x8Rhfs5T9P2zFg5xhxYt82t6os%2BjcJGPRwSDyTiScprYJRhCw%3D%3D\"}]}\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98dbdca808e8568b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13952,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13914), with CRLF line terminators","md5":"4eedb752d0c6c1184a575dfc0c2fa484","sha1":"4099dd1934d3bf9c5c6e2e3ec0201be068902663","sha256":"8f53efd29df6c29fea64eaabfb44c513fc28c2bf53b2dcd508f859b9591c6301","sha512":"0e23e137199537d1b9fd1ddbe93e740beea2fed9ea84eed519f658f711bb1dedf546931acc2b53bd9013c4fdac2978258aaa3d044c279972a91fce6f25710822","ssdeep":"384:XW6k0qW6XpTYu1e1wrfl1Q123nlW9+1YpfGyCYpVpDHp96mE7Caw:XW6kFW6XpTYu1e1+fl1Q123nlY+oCI3Z","tlshash":"0752b605b0b2b9f7096b626a227ff905b5f13e65d603c051207391ab0ebacd8353772e","first_seen":"2025-10-02T00:37:09.080575Z","last_seen":"2026-05-30T21:45:09.000699Z","times_seen":22,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/81/38/73/81387328b92d5376d3bf6fc70d0962f4/1756656875.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:34.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 02:32:56 GMT","end":"Sun, 07 Dec 2025 02:32:55 GMT"},"fingerprint":{"sha1":"F2:37:25:60:C4:34:06:EB:37:74:9F:D1:9C:FE:63:47:1F:30:4C:58","sha256":"AA:72:28:9B:C9:B7:77:AB:D7:89:4F:AC:CB:86:72:85:1D:1B:E5:15:4D:07:7B:D9:77:0F:D5:BE:92:06:8D:71"}}},"request":{"raw":"GET /cti/81/38/73/81387328b92d5376d3bf6fc70d0962f4/1756656875.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 03:48:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 48533\r\nserver: nginx/1.21.6\r\nlast-modified: Sun, 31 Aug 2025 16:14:36 GMT\r\netag: \"68b474ec-bd95\"\r\nexpires: Wed, 15 Oct 2025 03:48:34 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48533,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.3 (Macintosh), datetime=2025:08:30 12:09:12], progressive, precision 8, 728x90, components 3","md5":"b655968dfbf788c0e508a561a6aa8ad1","sha1":"ee1fd3180c9ba834b04194e37159eb6ac40f0b4a","sha256":"9eb371b5ed2f8d3b721f179e0c2ce793dd445d329f5fa5f9ba9cba61c25a23ec","sha512":"c60e8b3f81379dce1cef22d6b38786c93c703ea022679bd0178382c6ca99fbd83ea2ece9b12bbe7700ef3fd3c102c59dd5f42646a3062b17e3e96bb8e697ddfd","ssdeep":"768:dJx3MijJx3BkpYyE6XdAAjCMAdUVzpnNhCLs2LjenuRPnSdkMNM5gTTOoy:PBlBBkpIAp1pfCLffenuRP4kcMiTry","tlshash":"8e23d01d7b66ad02f8c0c77548f1e3fb6312b558fba366067ddc64813b7a282981c1ca","first_seen":"2025-09-02T18:27:26.497192Z","last_seen":"2026-05-17T19:23:32.915983Z","times_seen":678,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/wp-content/uploads/hummingbird-assets/230e7b8b33dca5d37b4b0b8ef06ab906.css","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:12.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapdrop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 17:26:26 GMT","end":"Mon, 29 Dec 2025 18:13:12 GMT"},"fingerprint":{"sha1":"8F:BC:36:F5:00:C6:56:6D:E9:C2:AB:63:8D:15:CD:DD:88:A2:0E:3C","sha256":"A9:67:EE:49:07:CC:75:F3:2F:CE:62:BD:AE:88:20:42:63:B3:B8:78:F3:B1:63:CF:34:9A:87:FE:0F:E9:E3:98"}}},"request":{"raw":"GET /wp-content/uploads/hummingbird-assets/230e7b8b33dca5d37b4b0b8ef06ab906.css HTTP/1.1\r\nHost: fapdrop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 14 Oct 2025 02:49:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 07 Oct 2025 02:45:19 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 45251\r\ndate: Mon, 13 Oct 2025 03:48:12 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q36f6z6RD4QWzHWqJ4Rp6YilR7q%2BwiWC8wPgvWK3VTfJEa8SsPcW%2Bkbm0YmkgJcrjwt%2FGzfXgjSeCSFuITfGBOrxbVVl%2FYryZg%3D%3D\"}]}\r\nage: 202697\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98dbdc29af85568b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":243623,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65497), with CRLF line terminators","md5":"6cab07a8054be6c46915e016452aff16","sha1":"41957e77d5c7ed3bcda6fca7f9ad31feab1cb874","sha256":"c526c2f7b3104fcea974f5927139de403b9166910f5e7a39f60b0369f91df818","sha512":"f5e52d367b38b0421fd46d737026484092b633c280ed949d69cbf7564f207ba0accd6329a2011554ab574415a060f4db4198ef054f762c9decdd7877319a3e19","ssdeep":"1536:eQduNtbLDVXQzGjfdBYDrKs0ehyHaVyk/INkEGTqsPbszYYp3EYgkQhubh65HXhB:SNtI+fdmgsThXAL6ucjlJ","tlshash":"20349432d69422387037c665e5c07a9ab1b8c103e6230bfef556723bcfd65d62672389","first_seen":"2025-10-09T23:54:07.82031Z","last_seen":"2025-11-28T06:48:58.112487Z","times_seen":8,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/cf-fonts/s/nunito/5.0.16/latin/400/normal.woff2","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:12.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapdrop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 17:26:26 GMT","end":"Mon, 29 Dec 2025 18:13:12 GMT"},"fingerprint":{"sha1":"8F:BC:36:F5:00:C6:56:6D:E9:C2:AB:63:8D:15:CD:DD:88:A2:0E:3C","sha256":"A9:67:EE:49:07:CC:75:F3:2F:CE:62:BD:AE:88:20:42:63:B3:B8:78:F3:B1:63:CF:34:9A:87:FE:0F:E9:E3:98"}}},"request":{"raw":"GET /cf-fonts/s/nunito/5.0.16/latin/400/normal.woff2 HTTP/1.1\r\nHost: fapdrop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Oct 2025 03:48:12 GMT\r\ncontent-length: 16292\r\ncontent-type: font/woff2\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X77LIjk%2FwgoUFu7sDmQ7Kk9D%2B%2BSBG0klsO%2FLVMC9aTK3U2T2qiiLlCCkGB9P2Gxo6SmbNky7nwvhZMCzwSKyLC7KwbohYHnrGg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 98dbdc2b0f93568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16292,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 16292, version 1.0","md5":"ce485a2bdee361bb271bd6d3ce1ee5cd","sha1":"4f9a446275d160cccd6666addee65f849c9c5a50","sha256":"923963e0a56b84c4438f2359121e855e147a01a78a2591c471179cfc9bf0e784","sha512":"1bf2959f7a4673e53317367bcde7fc06c53d8c25ac5055cf988266c256b24dc4ea306dd3b0585685fea84fbf821b2a9a988d86bcb67e3ff88b87523d974d9bf7","ssdeep":"384:wQoF1itcJNQGvehAFXzvSOjtErfSrnyY7Gsk2JnoA7:w3F1VM/hARzPtufSryYSs33","tlshash":"9d72c06f5bf446d1e18f1e51c0598620cc57cbc62d74a6cc3bafe4b01d11bb09617ba1","first_seen":"2023-09-15T15:00:43Z","last_seen":"2026-06-01T20:54:27.533375Z","times_seen":3055,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/wp-content/uploads/2020/01/cropped-fapdrop-favicon-150x150.png","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:12.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapdrop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 17:26:26 GMT","end":"Mon, 29 Dec 2025 18:13:12 GMT"},"fingerprint":{"sha1":"8F:BC:36:F5:00:C6:56:6D:E9:C2:AB:63:8D:15:CD:DD:88:A2:0E:3C","sha256":"A9:67:EE:49:07:CC:75:F3:2F:CE:62:BD:AE:88:20:42:63:B3:B8:78:F3:B1:63:CF:34:9A:87:FE:0F:E9:E3:98"}}},"request":{"raw":"GET /wp-content/uploads/2020/01/cropped-fapdrop-favicon-150x150.png HTTP/1.1\r\nHost: fapdrop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 14 Oct 2025 02:52:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 25 Jan 2020 22:03:09 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3220\r\ndate: Mon, 13 Oct 2025 03:48:12 GMT\r\nserver: cloudflare\r\nvary: User-Agent, accept-encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MMS5c7IlfAutgmXZMgaUpx3JJ729L6lTuiEZIpNq6GT5ARCcZVfXGabaquKHJTTWGrUGZH%2FtN8putePlkjMZJf1Gq8FG3f5nfw%3D%3D\"}]}\r\nage: 437730\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98dbdc2c2f9d568b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":3220,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit colormap, non-interlaced","md5":"407bcb09c4f675de2186570822d03898","sha1":"2f43f8c8560b8c9a2bc7fe0b77ddc086eb6c4f96","sha256":"c8d91571f10550ab2941f38fd94c95350a8e6ee0843ccc3104e9c559e341676b","sha512":"9e97f9a6caef94735258c88e1cc41b74ebfec020dea4256210f1245fb9a5c24171c02e37d26f5877d77bc49462bbd4c78775ec6bb3e83201bd9731013dad42c3","ssdeep":"","tlshash":"5f615dd1f2bdec6305a6536302e33b95df87d140e987e1d6549e86ae40b47f893432c4","first_seen":"2024-02-26T22:30:29Z","last_seen":"2026-05-30T21:45:09.020213Z","times_seen":28,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdrop.com/cf-fonts/v/unbounded/5.0.18/latin/wght/normal.woff2","fqdn":"fapdrop.com","domain":"fapdrop.com","tld":"com"},"ip":{"addr":"104.21.78.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:12.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapdrop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 17:26:26 GMT","end":"Mon, 29 Dec 2025 18:13:12 GMT"},"fingerprint":{"sha1":"8F:BC:36:F5:00:C6:56:6D:E9:C2:AB:63:8D:15:CD:DD:88:A2:0E:3C","sha256":"A9:67:EE:49:07:CC:75:F3:2F:CE:62:BD:AE:88:20:42:63:B3:B8:78:F3:B1:63:CF:34:9A:87:FE:0F:E9:E3:98"}}},"request":{"raw":"GET /cf-fonts/v/unbounded/5.0.18/latin/wght/normal.woff2 HTTP/1.1\r\nHost: fapdrop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Oct 2025 03:48:12 GMT\r\ncontent-length: 50992\r\ncontent-type: font/woff2\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CAuwZPKPAFyvxbGkTXIqZ02EPS6hC9NRIRtU2KRrRcYCd6kEr41BkuRTyLO4IL3lRRx3dSQQztLDNlJAtG7QYijLKQBKqqlgow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 98dbdc2b0f96568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50992,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50992, version 1.0","md5":"b11589bda16ed6367979ecf1cd021460","sha1":"7df26fbde4cbed6c5e57256c9606079ae728ae14","sha256":"09882553419f80b4008503e40ebb0635cad43aae20361f3fa11924f01ed68719","sha512":"73cf4f9a9e30e8037167d595b50b552067b42d8d1f69a8d6b8c63a3250794a2a49a9da03c15ace7c6c5e781ad2ce4164ad289afcfe011a2c3e0daa887495a7af","ssdeep":"1536:xIuf8UL/vzwin+A+Y5clqq5t9lE2tBYRhi1UE:xIuUUL/vj+svYtnEEBY4t","tlshash":"7b3302ac6ed04508d0cba737041a53cea6f68ec30916c67a7b30f997849daf2dd992c5","first_seen":"2024-10-15T22:19:18.262089Z","last_seen":"2026-05-23T00:17:34.447132Z","times_seen":109,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/orbitron/v35/yMJMMIlzdpvBhQQL_SC3X9yhF25-T1nyKS6BoWgz.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:12.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/orbitron/v35/yMJMMIlzdpvBhQQL_SC3X9yhF25-T1nyKS6BoWgz.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://fapdrop.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 6596\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Oct 2025 10:29:29 GMT\r\nexpires: Fri, 09 Oct 2026 10:29:29 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:04:40 GMT\r\ncontent-type: font/woff2\r\nage: 321523\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6596,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 6596, version 1.0","md5":"1967d90b0a095e7bab678006d8e1492d","sha1":"e3065e0f51d7b3d148f372c3343701cb47a0ee8a","sha256":"c13360768270c65d6c97701b100a88993885671dfdfd2a400aa58ea0195381ea","sha512":"513f88643a068cd8c52ca985d2b7f37acd032c51f5007503a19541c3f8425aa492a7535eda9176806fe9943fb535d04c2f8fa606e04ffad3ca621f5dd56c95b7","ssdeep":"192:zTkYFSEEe8jKeKz2NWjIzdalnDYOY+7XMENR:fkxEEk3CNWMzdaD0Q1r","tlshash":"4ad17dab4707da4a922e0f3e1eb1a19ee9099306431cd3697841149cab199262f8c753","first_seen":"2025-07-11T00:12:01.840133Z","last_seen":"2026-05-30T21:45:08.977326Z","times_seen":95,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":79,"dns":0,"connect":41,"send":0,"wait":16,"receive":1,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dowryhandgripballot.com/373b5a10d390ec502c7d535d6fd9966c/invoke.js","fqdn":"dowryhandgripballot.com","domain":"dowryhandgripballot.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:33.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dowryhandgripballot.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 21:21:17 GMT","end":"Tue, 23 Dec 2025 21:21:16 GMT"},"fingerprint":{"sha1":"63:F7:AF:6F:19:7D:8D:4A:AE:70:B1:09:04:E3:4F:F0:6C:E8:F3:16","sha256":"5C:7B:97:61:1C:91:E0:5C:D8:09:E4:4A:87:75:51:08:DE:D8:A1:04:F0:37:55:13:66:23:A1:79:89:8A:3E:EE"}}},"request":{"raw":"GET /373b5a10d390ec502c7d535d6fd9966c/invoke.js HTTP/1.1\r\nHost: dowryhandgripballot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Mon, 13 Oct 2025 03:48:33 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 16288\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 6\r\nHost: dowryhandgripballot.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 89425aee25314a0706d843a1182d0b0b\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38367,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (38367), with no line terminators","md5":"644fe0de12e0ada503dbb76cc89c0c23","sha1":"86d64efbeb909b1cbc6df6631b98ad42d3ba9552","sha256":"2a078a400da4acaebf2440a33ab44002ce7ac75ea081de446e282e9b18d82990","sha512":"780fad74a662c180705008aa6cbcac8f835c0a08663f26c7882a62a7e2ffc6b64d58f072e0f77f64f14df4a9352240001dfa15b7668014260e6d2d0d21f698af","ssdeep":"768:fkqtSm4OYZ748I6ngkkLXcj3PKFMrj2W+MwgMe:8qtIO248I6ng6CIj2XMw+","tlshash":"f503b88d3f61b85d0796a033723f840ae6ee4e0458dcd8e8e4076ca0fe64755d0b7ea5","first_seen":"2025-10-13T03:48:44.635086Z","last_seen":"2025-10-13T03:48:44.635086Z","times_seen":1,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":102,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"dowryhandgripballot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"dowryhandgripballot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"dowryhandgripballot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/watch.532781649390.js?key=373b5a10d390ec502c7d535d6fd9966c\u0026kw=%5B%22fapdrop%22%5D\u0026refer=https%3A%2F%2Ffapdrop.com%2Fdownload%2F%3Fdldata%3D%7B%2522urls%2522%3A%5B%5B%2522https%3A%2F%2Fworkupload.com%2Ffile%2FxeguUD2TLxT%2522%2C%2522https%3A%2F%2Fgofile.io%2Fd%2FWmOdiD%2522%2C%2522https%3A%2F%2Fbuzzheavier.com%2F9tx3untaas0e%2522%5D%5D%2C%2522titles%2522%3A%5B%5B%2522Workupload%2522%2C%2522Gofile.io%2522%2C%2522Buzzheavier%2522%5D%5D%2C%2522platforms%2522%3A%5B%2522Windows%2C%2520Linux%2522%5D%7D\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=0a8ec9ad-6a09-43c7-812a-10f77ab14180%3A1%3A1","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fapdrop.com/download/?dldata={%22urls%22:[[%22https://workupload.com/file/xeguUD2TLxT%22,%22https://gofile.io/d/WmOdiD%22,%22https://buzzheavier.com/9tx3untaas0e%22]],%22titles%22:[[%22Workupload%22,%22Gofile.io%22,%22Buzzheavier%22]],%22platforms%22:[%22Windows,%20Linux%22]}","date":"2025-10-13T03:48:33.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 22:00:34 GMT","end":"Tue, 25 Nov 2025 22:00:33 GMT"},"fingerprint":{"sha1":"FC:5B:24:E2:ED:A9:65:69:CA:97:74:44:F8:E9:93:1A:50:E7:73:C1","sha256":"26:1B:F8:72:30:B2:C4:49:6A:2E:E7:A5:FC:26:35:74:02:CB:56:D1:F7:7E:A5:5E:89:65:A9:B4:1F:1F:DB:8F"}}},"request":{"raw":"GET /watch.532781649390.js?key=373b5a10d390ec502c7d535d6fd9966c\u0026kw=%5B%22fapdrop%22%5D\u0026refer=https%3A%2F%2Ffapdrop.com%2Fdownload%2F%3Fdldata%3D%7B%2522urls%2522%3A%5B%5B%2522https%3A%2F%2Fworkupload.com%2Ffile%2FxeguUD2TLxT%2522%2C%2522https%3A%2F%2Fgofile.io%2Fd%2FWmOdiD%2522%2C%2522https%3A%2F%2Fbuzzheavier.com%2F9tx3untaas0e%2522%5D%5D%2C%2522titles%2522%3A%5B%5B%2522Workupload%2522%2C%2522Gofile.io%2522%2C%2522Buzzheavier%2522%5D%5D%2C%2522platforms%2522%3A%5B%2522Windows%2C%2520Linux%2522%5D%7D\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=0a8ec9ad-6a09-43c7-812a-10f77ab14180%3A1%3A1 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://fapdrop.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fapdrop.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.21.6\r\nDate: Mon, 13 Oct 2025 03:48:33 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://fapdrop.com\r\naccess-control-allow-credentials: true\r\nlocation: https://skinnycrawlinglax.com/watch.532781649390.js?dev=e\u0026key=373b5a10d390ec502c7d535d6fd9966c\u0026kw=%5B%22fapdrop%22%5D\u0026pst=1760327373\u0026rb=\u0026refer=https%3A%2F%2Ffapdrop.com%2Fdownload%2F%3Fdldata%3D%7B%2522urls%2522%3A%5B%5B%2522https%3A%2F%2Fworkupload.com%2Ffile%2FxeguUD2TLxT%2522%2C%2522https%3A%2F%2Fgofile.io%2Fd%2FWmOdiD%2522%2C%2522https%3A%2F%2Fbuzzheavier.com%2F9tx3untaas0e%2522%5D%5D%2C%2522titles%2522%3A%5B%5B%2522Workupload%2522%2C%2522Gofile.io%2522%2C%2522Buzzheavier%2522%5D%5D%2C%2522platforms%2522%3A%5B%2522Windows%2C%2520Linux%2522%5D%7D\u0026res=14.3095\u0026rmtc=t\u0026shu=a8f7b6a15c29844c0bb707b1f86a2d0d5ef7763fb64b78b713a8a0864d1b5f2dd1464abcbb0e285c126fda8a55451e8dfd253f48c7ed0c8a976616b61e10a12277ca7e0a3311ab4f50c8688cc5575664a1faf47d7bf2069854be7a\u0026tz=0\u0026uuid=0a8ec9ad-6a09-43c7-812a-10f77ab14180%3A1%3A1\r\nset-cookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.1TJUDjGnAnz4HfCbPJebWzg0HQXxKIarBD3RB23w3FQ; expires=Mon, 13 Oct 2025 03:49:33 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 3\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 538257b6e1207c520902af495e15f02b\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":4914,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":676,"timings":{"blocked":289,"dns":1,"connect":92,"send":0,"wait":97,"receive":1,"ssl":194},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}