{"report_id":"8ea094bd-90ef-45d9-b0f3-ddddf28edba6","version":6,"status":"done","tags":[],"date":"2025-10-11T16:56:49Z","url":{"schema":"http","addr":"saint2.su/embed/wI9pt65GQqO","fqdn":"saint2.su","domain":"saint2.su","tld":"su"},"ip":{"addr":"104.21.6.177","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"saint2.su/embed/wI9pt65GQqO","fqdn":"saint2.su","domain":"saint2.su","tld":"su"},"title":"Natalya_Neidhart_Pussy_720p.mp4"},"submit":{"url":{"schema":"http","addr":"saint2.su/embed/wI9pt65GQqO","fqdn":"saint2.su","domain":"saint2.su","tld":"su"},"ip":{"addr":"104.21.6.177","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-15T16:56:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"saint2.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"thumbs.saint2.cr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.plyr.io","ip":{"addr":"104.26.13.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-02-16","domain_rank":65563,"first_seen":"2015-03-05T06:48:14Z","last_seen":"2025-10-06T03:09:00.183121Z","alert_count":0,"request_count":3,"received_data":153643,"sent_data":1260,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"androidduvetscribble.com","ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-03-12","domain_rank":72185,"first_seen":"2025-05-19T23:31:49.928325Z","last_seen":"2025-10-08T21:47:29.208712Z","alert_count":0,"request_count":5,"received_data":162592,"sent_data":3813,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"acquiredeceasedundress.com","ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-03-12","domain_rank":41880,"first_seen":"2025-04-19T03:19:09.484578Z","last_seen":"2025-09-27T11:30:55.294469Z","alert_count":0,"request_count":5,"received_data":188224,"sent_data":4791,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.bunny.net","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"1999-11-22","domain_rank":56787,"first_seen":"2022-03-21T07:38:02Z","last_seen":"2025-10-05T22:42:05.929333Z","alert_count":0,"request_count":2,"received_data":23981,"sent_data":952,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"saint2.su","ip":{"addr":"104.21.6.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-02-05","domain_rank":84416,"first_seen":"2024-02-05T14:02:28Z","last_seen":"2025-09-27T21:25:45.410023Z","alert_count":5,"request_count":5,"received_data":95573,"sent_data":2490,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Plyr:3.7.8","description":"Plyr is a simple, lightweight, accessible and customizable HTML5, YouTube and Vimeo media player that supports modern browsers.","website":"https://plyr.io","common_platform_enumeration":"","icon":"Plyr.png","categories":["Video players"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"nucaqgnita.com","ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-05-28","domain_rank":0,"first_seen":"2025-10-11T12:36:20.853286Z","last_seen":"2025-10-11T12:36:20.853286Z","alert_count":0,"request_count":1,"received_data":1572,"sent_data":529,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.pncloudfl.com","ip":{"addr":"104.20.30.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-04-20","domain_rank":95245,"first_seen":"2021-06-07T14:28:03Z","last_seen":"2025-10-06T14:42:12.054187Z","alert_count":0,"request_count":2,"received_data":63384,"sent_data":888,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-10-05T22:15:09.164871Z","alert_count":0,"request_count":2,"received_data":292756,"sent_data":874,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"thumbs.saint2.cr","ip":{"addr":"186.2.163.148","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-10-23","domain_rank":1397262,"first_seen":"2025-03-04T22:33:49.284664Z","last_seen":"2025-09-10T21:58:02.418917Z","alert_count":1,"request_count":1,"received_data":47529,"sent_data":455,"comment":"","tags":null,"fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2849239b95f5a9a2aea3f6ed9420bb88","sha1":"af32f706407ab08f800c5e697cce92466e735847","sha256":"1fe2bb5390a75e5d61e72c107cab528fc3c29a837d69aab7d200e1dbb5dcd239","sha512":"9ffe201d6ddab4cdd0a9171b0a7e9ec26a7170b00719a0e3a4406ee3165de3b3745b6a10fbaabba1cdcf5ecb6b2585dc6cd535387750d53ee900ffa08b962ef2","ssdeep":"6144:rJshNVlG+TCtlFhTzeKpzcYmD2zK8E1JEjPx+WK+978FyW48L/dCaYeNzIPfTvI4:HjzcYmD4Y0Px+WK+978FyMhr+PfcA+up","tlshash":"9154a3d9f78d112e423231aaac2e12cdb77cd171560458aefd4d597c24a083d83baf7a","size":288580,"data":"","first_seen":"2023-03-07T01:14:59Z","last_seen":"2026-04-05T10:07:39.213022Z","times_seen":6799,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acquiredeceasedundress.com/check.html","fqdn":"acquiredeceasedundress.com","domain":"acquiredeceasedundress.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8f2e0cd22b41fa7c9212af0b11f449d3","sha1":"6c552632a2eeaa712496444594c3e8c68eadbbb0","sha256":"d7ca5af269e02e5109a61ef55df0196e2206204d6c742daba5a153defc097fda","sha512":"c90bb9984fc0b2a5374129cb10fc509e937ba565063e2530578430fb0329f8058c145c914de139fa166d8530cfff9799a8c78aa1ad2752d9ec72e24c0fed477c","ssdeep":"","tlshash":"d201685934f5684d5127b630255b22182d32a40325cbd94efb2cdb301f825a7eca8aef","size":762,"data":"","first_seen":"2025-03-07T08:34:13.499254Z","last_seen":"2026-03-04T07:06:03.173543Z","times_seen":7245,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saint2.su/embed/wI9pt65GQqO","fqdn":"saint2.su","domain":"saint2.su","tld":"su"},"ip":{"addr":"104.21.6.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a8301569a77173e9771ace2a3d1ccfb0","sha1":"6c27de0c01ed8bc74c61bc5bf0bd233f97cd8f87","sha256":"46f8fd8a41835f2836dee5e7306aa51c05dddf911c3b855225d34ec4258d6bb1","sha512":"430f3c7f70dd985470155503f77a8205d9d57e8b8a26624f07872fa9c4be4a053b919197d9be96dc9e588a70755ff49bf7815c0fa0efcce06ad8e65b46435ef9","ssdeep":"","tlshash":"0821ce2eaef614b02663b13d1f6eb05430b390432914dc427a9c92405f54b6874bb9d9","size":1142,"data":"","first_seen":"2025-06-19T16:47:32.586148Z","last_seen":"2025-11-22T23:58:21.265541Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"androidduvetscribble.com/on.js","fqdn":"androidduvetscribble.com","domain":"androidduvetscribble.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d2ba9025a1ffa5a65d7cfddd99c9ac7","sha1":"0f68e1f23b77d0b37122318b6f4f5a7c10d9a920","sha256":"c1fffea56db0637cae573b6e0d6d5e1ca8ba1d1252a692387468f1b9714c940b","sha512":"78ff4e913c8a021c4094518e663a5d6e86da2eb3a415db8199e688f3432c2831f9cf4aaebab916b9ce3260f5ccab164dded096b06a51f445f16615bd954a2a2a","ssdeep":"1536:CU9l/IpfZoTFRhGVYczEsbdQaW2Jk54E9JNxt42wP4JAY9J19WJn844Q+Uo9f/Ac:CUHw+kzVKaWok6EbU84gjP","tlshash":"6fe3968cf64a2c368b52a2ac146fa246d73668d1e55ff0c0b0e3c1a81bf5d0dd165fb9","size":152016,"data":"","first_seen":"2025-10-09T15:17:23.881563Z","last_seen":"2025-10-13T11:08:39.926631Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acquiredeceasedundress.com/get/2069097?id=2069097\u0026jp=_clqquxwseafnoistnzlnof\u0026dr=102\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.607-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=XOL63ADsf\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=l56tfCxaHR0cHM6Ly9zYWludDIuc3UvZW1iZWQvd0k5cHQ2NUdRcU8\u0026afid=4337481235047936\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pi=W1oqmg\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0\u0026freq=0","fqdn":"acquiredeceasedundress.com","domain":"acquiredeceasedundress.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c9961b1d01811aa65508952b88c93d0","sha1":"68e55688a9078613581927fd4402f17545c3fdc0","sha256":"62523c5d192cdd924921f2079d475e9f1713f6432155aba0c828d8f59e9078a0","sha512":"eddf2a5670320f5170c4a4200ab7b8f44c35c588d1319aea8325f2bb6aea67a9794cb584043a53d00abf746c218fb6e90c74b8c3296aee99a36f633058d98818","ssdeep":"","tlshash":"0e512ab0c08afacc6684cfe59f7e4f4a1a40c4949f7b861fd065e10c661b9f4c709288","size":2980,"data":"","first_seen":"2025-10-11T16:56:52.238565Z","last_seen":"2025-10-11T16:56:52.238565Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saint2.su/embed/wI9pt65GQqO","fqdn":"saint2.su","domain":"saint2.su","tld":"su"},"ip":{"addr":"104.21.6.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"974e54b3a920b721b8dd4f2371a34034","sha1":"04b7ad13a56c61fcc5241626f551ff203ab6ede7","sha256":"f60161cd38a5d72a354e4f625ad3c450a2bbed9bb78c79fd9ddd38ca0278e71b","sha512":"020894ea1d322541437e9be897f1a4cc2c6543a4884606b678a7370b3883d1776c56c6abe0579a7224592a05da4fdb6e3c051d0b9af2aaf88a63ab35251cc826","ssdeep":"","tlshash":"f631fb7b223f44215563049e437f6149352310179c80fe95f55ec708efacb6ec5768aa","size":1792,"data":"","first_seen":"2025-10-11T16:56:52.256106Z","last_seen":"2025-10-11T16:56:52.256106Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acquiredeceasedundress.com/in.js","fqdn":"acquiredeceasedundress.com","domain":"acquiredeceasedundress.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"18a6525c9a26b7be8a3ebc940578fd4f","sha1":"c87ea649028d57c4868a1685ab659c97e339bf49","sha256":"bc2f001eefad6970430285b602ad9e5a476e03785c3079af39fa2af2ebbfdd88","sha512":"49587abf00a99cb129699b7c35cdb4cf01af3a05fc432edf603b28fc77f7ddeb1d723c20ea635a3d6751034838c71649324dac3cf975207905abcdce171e45f6","ssdeep":"1536:bhvxCdFm3G/kvUlg/+ZTvYCxM96mdqIGD4AtcSBsbrVFQQNT1QI5SSwIB4J7TO38:bhAd2PfdShtcasbD3vANTOiRXvAK","tlshash":"3e04718deb8330327162b42b94fb992db1319cf1b0bd5487c4e3d1a9e9b67079131a67","size":179269,"data":"","first_seen":"2025-10-09T13:45:48.023542Z","last_seen":"2025-10-12T21:31:03.853094Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"androidduvetscribble.com/get/2069095?id=2069095\u0026jp=_cliictlyhqtbapapdhruvi\u0026dr=49\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.607-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=XOL63ADsf\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=br4olhraHR0cHM6Ly9zYWludDIuc3UvZW1iZWQvd0k5cHQ2NUdRcU8\u0026afid=2930106351537664\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pi=W1oqmg\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0","fqdn":"androidduvetscribble.com","domain":"androidduvetscribble.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"104159708207b3fe83d4efe463cc4a9f","sha1":"b42c4f92241dbbf4f3a3bfd82112983a82b49261","sha256":"be412d845cdfbecb3c77da225ab95960530ecc20413f3866f2987cd4a1b4e5db","sha512":"4f1f4ddf3af36a9294e9151cb4ee5cb95d628309117a06dd71ce575bcb26f1d40fa1ceabc9ccc0e5a58b25e8116a78089e6c40336f9fdc2b0a415f10ca4606c3","ssdeep":"","tlshash":"c55174c59493948ccdcfae5f94f9be90205d6ae88cb3804f049b846bd3c59f4420b8de","size":3157,"data":"","first_seen":"2025-10-11T16:56:52.231417Z","last_seen":"2025-10-11T16:56:52.231417Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saint2.su/embed/wI9pt65GQqO","fqdn":"saint2.su","domain":"saint2.su","tld":"su"},"ip":{"addr":"104.21.6.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4f92db108a38ba9e31851391c096fb17","sha1":"eb375f1852ba42e6a85db21e672a5805da7b722c","sha256":"f12731f91e579aeeab6247cd69f7215bdacaa37a340a92335d402d7f047dab8b","sha512":"b565a2d23914d23c7c1d3d203ae8930443491addff2bb0cb318539020b45b41e8a14cc334ca2e5fb3da0d129b3190b4a29f07ba9c47c6f26e0fa394ca3b2d89c","ssdeep":"","tlshash":"2301972fadf62565566371a45b1f290638b213031605ec02bc4d83818fa8a1ca136fdc","size":839,"data":"","first_seen":"2025-06-19T16:47:32.596118Z","last_seen":"2026-01-15T08:09:34.988206Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saint2.su/embed/wI9pt65GQqO","fqdn":"saint2.su","domain":"saint2.su","tld":"su"},"ip":{"addr":"104.21.6.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c272527c8017fb60708cf0e6682d52d4","sha1":"3a1ea77559bda298bbca7377d9c3c3170cca2407","sha256":"4859ba39d2a77cbef6426eec6143ab0a9649d9c1e00934ef0fbb223e94398834","sha512":"c1ca66207ac9b1665173719f9bed3c26cc344ccd4f775a1d14b1210a7ebbee851b975f25256fba163c1186eef66afb71614456d5ba3e257ea6ba72bf2e4a0128","ssdeep":"192:ow9Qot0T8Lg73wjKas5+xRmPkfrhMUwVKp0pAgHL9Tc:ow99k8Lg73gU5+xMkjhlwVCHgG","tlshash":"27f12a7a7343aef607aa0ac6a27f5831e0384b053145c058f5acbc4778668c6d1b2f7b","size":7533,"data":"","first_seen":"2025-07-07T01:07:11.789661Z","last_seen":"2025-10-11T16:56:52.260843Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saint2.su/embed/wI9pt65GQqO","fqdn":"saint2.su","domain":"saint2.su","tld":"su"},"ip":{"addr":"104.21.6.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c411f14872969ebeb757de1397da524","sha1":"1fffea9f5c796e920f7338c2dfc7f2c5d542bbeb","sha256":"263a2f5d8ffdab83f41f57320b9a434af99aa62eed9392f42f38a43e1987f353","sha512":"1678034a2466d7a6e05d0180e00234abdb631327fe50882c7bc0fa182c92ce48e867a42602f4196d7fed05905b0809dfd1c934eaf38f5b9fed330f14abd6ab96","ssdeep":"","tlshash":"6960003030300c3000000c000c000300c0000f0c000000c3c0000003c0000300000300","size":12,"data":"","first_seen":"2025-06-19T16:47:32.597472Z","last_seen":"2025-10-11T16:56:52.261709Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acquiredeceasedundress.com/get/2069097?id=2069097\u0026jp=_clqquxwseafnoistnzlnof\u0026dr=102\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.607-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=XOL63ADsf\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=heJS0OpaHR0cHM6Ly9zYWludDIuc3UvZW1iZWQvd0k5cHQ2NUdRcU8\u0026afid=7715180955507200\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=0\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0\u0026freq=0","fqdn":"acquiredeceasedundress.com","domain":"acquiredeceasedundress.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"bfeeafd1822b1347b97450906d740cc3","sha1":"46a9ed8a92ca0dcbbac1c529ed89b7cdc7b7e4ee","sha256":"df99a7b8811919057b98bfb0b6ba68178ac10238c74566c483a6f71111dab140","sha512":"fdc81dcc6099d0ad2edf7824f5cf4373acf5ac7cf55828a9d2e71045e6fd1c12b9f41492ce8ed25e6c4be82b781239fb4d497122ecc9caa0e3af31210bd2d223","ssdeep":"","tlshash":"f0f08b9498a7c8ef593b6c0e707f4e86b4884d61da274a245441d40aa5b8133bf0311b","size":548,"data":"","first_seen":"2025-10-11T16:56:52.222751Z","last_seen":"2025-10-11T16:56:52.222751Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saint2.su/embed/wI9pt65GQqO","fqdn":"saint2.su","domain":"saint2.su","tld":"su"},"ip":{"addr":"104.21.6.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"47a194f3a25b429963b898c107d55397","sha1":"8699b1aec89fff45e70a76e7197d18439973fd7c","sha256":"e2cef4aeedc78669b832ab8b36dcd0e57817d0bf60c7eb3b9a521e0ad68d085b","sha512":"36d1bc257c0c53d64b21c6f34f01b64f645df28d14423951cb53cd7ef133e64aa735d7966ca0fcbb93a650534efa6798e7630c9451308c9940edc1674339d581","ssdeep":"192:o+xlXSixlLx7XKFTfCkARJW3YhTuYw2Kkk76lHL9T7:o+xlXSWlLx7aFmkAnW3iTbw226pV","tlshash":"74f109be3347ebb703a50cd690bf5630e4794a093096c428f5bcac8738655c291b6e3b","size":7472,"data":"","first_seen":"2025-06-19T16:47:32.601274Z","last_seen":"2025-10-11T16:56:52.263618Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.plyr.io/3.7.8/plyr.js","fqdn":"cdn.plyr.io","domain":"plyr.io","tld":"io"},"ip":{"addr":"104.26.13.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"714122a0383a143c50c9629e2bcb7e1f","sha1":"2ca613d6ba47e5d0c3296375c19708d25a348a55","sha256":"7572410db5bf0c2a553dc8f92e5127d25c8eef78cce7243687ff557aad99e59f","sha512":"277f3ec54e1db2de3b5c71850849ad3ada79bc807145134de3eeee1b2452b5bbf6dac662562d0dfe7a8a48de47a9feaf9cb0cba11942490f2ab6249d362ac194","ssdeep":"1536:NSRp2y6b/csv3QsnBKSEjq1sJKSVxeJle847v4qAze1Q/kuvv3evsD/tBa3J+Pyc:N3TuV6mLmC3a3Umc1tK91","tlshash":"7eb308c3321af63181a659cee025021675398b9a7001c26cfd3cedee692cd4276bbf75","size":113183,"data":"","first_seen":"2024-12-12T04:09:23.185272Z","last_seen":"2026-04-04T01:29:39.40451Z","times_seen":697,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saint2.su/embed/wI9pt65GQqO","fqdn":"saint2.su","domain":"saint2.su","tld":"su"},"ip":{"addr":"104.21.6.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"2c2a7df47e61cf942bb0164e7c09093f","sha1":"0574f4044c1ece617045a22ba5609abdf9c30b03","sha256":"4376d606cb776a90b9759ac4ebb53a5483a9d844f06781bc1dba3061eaf783c4","sha512":"375b2327a4f7dbe4b4d0312c224a6dfc2028065444965f7ce55f7b0df20e9f22af66e55f09cc7374aeffe4e588f350e1afcf2e4ad3d470d25ad1b614e0b7be07","ssdeep":"","tlshash":"875000330000000c000c00000000c00c030000000c33000000000000c0003c03000cc0","size":10,"data":"","first_seen":"2025-07-07T01:07:11.781256Z","last_seen":"2025-10-11T16:56:52.264468Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saint2.su/embed/wI9pt65GQqO","fqdn":"saint2.su","domain":"saint2.su","tld":"su"},"ip":{"addr":"104.21.6.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c79da4b55d281305771598bcd66e24b6","sha1":"76cd17ddb34648b85accd8cb107c0c8e69fe3c4b","sha256":"8e90d5429a61a272f24bcd748ece7ad81970f09b1b84e8284fd9d31442e57e8b","sha512":"708ada9ae100b6095b19ac5258cc71c3d6a2cf7d695fc3a9d52dc3d3879a5096daa3be4ee309acf4e23b3037298c899edd6de598d8e4a3421c16bf98f64fd3f7","ssdeep":"","tlshash":"c141b6e632a1b6b64fe018da842b9030d424279038078cc2d9fc9c537d1ddca687ad1a","size":2018,"data":"","first_seen":"2025-06-19T16:47:32.602591Z","last_seen":"2025-10-11T16:56:52.265219Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"androidduvetscribble.com/check.html","fqdn":"androidduvetscribble.com","domain":"androidduvetscribble.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8f2e0cd22b41fa7c9212af0b11f449d3","sha1":"6c552632a2eeaa712496444594c3e8c68eadbbb0","sha256":"d7ca5af269e02e5109a61ef55df0196e2206204d6c742daba5a153defc097fda","sha512":"c90bb9984fc0b2a5374129cb10fc509e937ba565063e2530578430fb0329f8058c145c914de139fa166d8530cfff9799a8c78aa1ad2752d9ec72e24c0fed477c","ssdeep":"","tlshash":"d201685934f5684d5127b630255b22182d32a40325cbd94efb2cdb301f825a7eca8aef","size":762,"data":"","first_seen":"2025-03-07T08:34:13.499254Z","last_seen":"2026-03-04T07:06:03.173543Z","times_seen":7245,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nucaqgnita.com/en/abwbkyo?hwy=789926\u0026zub=uu\u0026hh=_gdxcdbuastpxengxaxewoq\u0026zwn=1\u0026jf=3\u0026ejvymw=584335\u0026gartzty=upr\u0026hbuakd=127562\u0026id=2069097\u0026tqtiiml=933387","fqdn":"nucaqgnita.com","domain":"nucaqgnita.com","tld":"com"},"ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3ccceac626213f636b3e8f0b5df59b2","sha1":"f70d1afe47f3a2cd7f8c35506f941e9f2593103a","sha256":"e880194b4508c1b17ace0b3bb24340f198d5e30b45e77ca91d2a30b1c60f5637","sha512":"b14f5581bb40823ff23ca7eb6bdb194b82e0045a2edf085ede1fba15bd36094f91d2ef7dac81145f5a31a21d353fbf5c8e9e95d080b73a4842e196ccbfdc35e2","ssdeep":"","tlshash":"3ef0c0a49c1ae9c6a0174e1d14bb1e0a75d86006cb1304bdade4c148411d1b49f93cac","size":535,"data":"","first_seen":"2025-10-11T16:56:52.228375Z","last_seen":"2025-10-11T16:56:52.228375Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"androidduvetscribble.com/get/2069095?id=2069095\u0026jp=_cliictlyhqtbapapdhruvi\u0026dr=49\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.607-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=XOL63ADsf\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=qjHt588aHR0cHM6Ly9zYWludDIuc3UvZW1iZWQvd0k5cHQ2NUdRcU8\u0026afid=7433705978851328\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=0\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0","fqdn":"androidduvetscribble.com","domain":"androidduvetscribble.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6d5971537f7769fa205e0da62153d68","sha1":"00f28bf2321fbb69c75e0d5e75b5616833da073a","sha256":"9f04f608c7893cad2663367485ab2dc10c044024b5bce4062260e3296a368378","sha512":"07ed43d9a1f0d2ee2276446cf62f22360937acfa8883d6371a690f97b66a39f642951b001e8273d79260a6a8a8765da5a55f2762d2079ccac8b9309aa2579e94","ssdeep":"","tlshash":"dd4187aedc8dfce8b19a398127ac4ca434802958955729d8a1c5cc5fb31ad39017ecb9","size":2086,"data":"","first_seen":"2025-10-11T16:56:52.236439Z","last_seen":"2025-10-11T16:56:52.236439Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.3.1/jquery.cookie.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"86bfb3ae149e79524eafbcd1cd0a613a","sha1":"4c7b840648637688378d746f24037cfdc7a5d2d0","sha256":"5f8d4cdb53aa201c8dd93712d1342157480d75d03859ea50656ab9ab3d298d30","sha512":"154aefeb8c607ce1a57cd3f27f431ea347f940fd9592b31bc24ba8a21373c78b4a78a29366ee875526571a281229807b06c8d41cdf8c5f902d23c091538b3456","ssdeep":"","tlshash":"a5410fc4bf8d250a066b32927b3b20eda87cff7255585499cc1c66d418a0c26c3afe79","size":2142,"data":"","first_seen":"2023-03-07T12:59:34Z","last_seen":"2026-04-05T06:53:46.272591Z","times_seen":278,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"cdn.plyr.io/3.7.8/plyr.svg","fqdn":"cdn.plyr.io","domain":"plyr.io","tld":"io"},"ip":{"addr":"104.26.13.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://saint2.su/embed/wI9pt65GQqO","date":"2025-10-11T16:56:27.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.plyr.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Sep 2025 23:29:57 GMT","end":"Fri, 12 Dec 2025 00:21:15 GMT"},"fingerprint":{"sha1":"B0:37:28:8F:CC:8C:3F:9C:89:35:B5:54:32:22:ED:1F:E1:FB:98:EF","sha256":"6E:22:6E:A7:8E:6D:29:06:9D:5F:4D:FA:6A:78:3F:C1:79:06:00:36:62:BA:07:AC:21:2F:BF:53:E4:C7:24:F5"}}},"request":{"raw":"GET /3.7.8/plyr.svg HTTP/1.1\r\nHost: cdn.plyr.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://saint2.su/\r\nOrigin: https://saint2.su\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Oct 2025 16:56:27 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nage: 3046811\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncf-cache-status: HIT\r\nlast-modified: Thu, 20 Apr 2023 10:33:44 GMT\r\nvary: Origin, Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TRTvIZNTMtVsEAdzmGuwIdnry%2Fth380cq8Py3AYqrbh8ev56f7y6X27g6hZxwjFwZKeM9XE14gTOq%2FfwsfL0pgMuG7e5SBpt\"}]}\r\netag: W/\"3a727a9b7eef825081d78cc6e48aaadf\"\r\ncontent-encoding: br\r\ncf-ray: 98cfe4126c02b517-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5785,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3a727a9b7eef825081d78cc6e48aaadf","sha1":"bc98e4a347921594352fbae53aaad185c0c7f6b5","sha256":"4846018760f6e11a8a1dea7639a5c75c712f198d978eccf117840820bb8c37d7","sha512":"a685f2c1a709994fbbf25582ccb4996562973e33b859d58225a3388de22410b5a2e2a52a87bda13d5473c3348f1ab7fb8c01010e6778d52276eb649ba03ba308","ssdeep":"96:ym9IR6RryIR6R2syGo0R1J5a6A3jalbI0NSJVUqSnxKfi5aR:yFR6RrRR6RHf1raYlM00JqAyaR","tlshash":"c7c197ffc72483b95c87993ddf33a090318fa1fab4e541b8a1558bb48b975c5e906e10","first_seen":"2023-05-09T20:31:23Z","last_seen":"2026-04-05T11:32:51.376741Z","times_seen":2948,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"androidduvetscribble.com/on.js","fqdn":"androidduvetscribble.com","domain":"androidduvetscribble.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saint2.su/embed/wI9pt65GQqO","date":"2025-10-11T16:56:27.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"androidduvetscribble.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:30:07 GMT","end":"Fri, 07 Nov 2025 14:30:06 GMT"},"fingerprint":{"sha1":"70:EE:3B:A1:38:1F:8F:B3:CA:62:37:23:0A:21:2A:86:6D:5A:3B:26","sha256":"C5:EE:9F:8B:F5:EB:BF:CF:EB:23:84:5C:53:29:1F:8F:EC:18:76:5A:CC:D3:15:96:EA:59:74:20:D6:3B:CE:47"}}},"request":{"raw":"GET /on.js HTTP/1.1\r\nHost: androidduvetscribble.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://saint2.su/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 16:56:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 09 Oct 2025 13:23:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68e7b758-251d0\"\r\nexpires: Sat, 18 Oct 2025 16:56:27 GMT\r\ncache-control: max-age=604800\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":152016,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6d2ba9025a1ffa5a65d7cfddd99c9ac7","sha1":"0f68e1f23b77d0b37122318b6f4f5a7c10d9a920","sha256":"c1fffea56db0637cae573b6e0d6d5e1ca8ba1d1252a692387468f1b9714c940b","sha512":"78ff4e913c8a021c4094518e663a5d6e86da2eb3a415db8199e688f3432c2831f9cf4aaebab916b9ce3260f5ccab164dded096b06a51f445f16615bd954a2a2a","ssdeep":"1536:CU9l/IpfZoTFRhGVYczEsbdQaW2Jk54E9JNxt42wP4JAY9J19WJn844Q+Uo9f/Ac:CUHw+kzVKaWok6EbU84gjP","tlshash":"6fe3968cf64a2c368b52a2ac146fa246d73668d1e55ff0c0b0e3c1a81bf5d0dd165fb9","first_seen":"2025-10-09T15:17:23.881563Z","last_seen":"2025-10-13T11:08:39.926631Z","times_seen":84,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":64,"dns":16,"connect":17,"send":0,"wait":37,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saint2.su/icons/apple-touch-icon.png","fqdn":"saint2.su","domain":"saint2.su","tld":"su"},"ip":{"addr":"104.21.6.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saint2.su/embed/wI9pt65GQqO","date":"2025-10-11T16:56:27.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saint2.su","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 11:29:43 GMT","end":"Tue, 30 Dec 2025 12:28:03 GMT"},"fingerprint":{"sha1":"C4:16:C0:95:65:9E:6B:FE:2A:BD:AF:75:98:04:01:F5:4B:11:93:C3","sha256":"5B:52:EE:68:3D:0B:DA:F0:AC:74:7F:0E:D5:AF:9D:C2:FC:9A:C0:55:67:4D:43:E6:20:CF:5A:84:2C:69:87:D6"}}},"request":{"raw":"GET /icons/apple-touch-icon.png HTTP/1.1\r\nHost: saint2.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://saint2.su/embed/wI9pt65GQqO\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6uffsfht10pqvgth0c7j375265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 11 Oct 2025 16:56:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 19089\r\nlast-modified: Sun, 29 May 2022 00:01:46 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZJFLInw3v8Kj8Wt4p0%2FS6uDr9%2FbXpSlpTFLwaGNeYJl7JXvmYILx1asY3wu9ygeWkS3B6jAqq4GwPR7c%2BYlstVmKnUPp6H0%3D\"}]}\r\netag: \"6292b7ea-4a91\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98cfe4144972b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19089,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"dbb95acc5a518f4f0cb4ea29a376e64c","sha1":"6ece49b91bca3f4b890a4d3536b7ea84b07593bc","sha256":"4f541cb49b8de0d09c94f289d75e32fce004cd6caa74c1d8ef6f618a4caee707","sha512":"9709e610e40bc7bbc021fe9f731f03bae3d4398a00ebf2d5ea8704f61986ccc075f7797b1516a91e534453b251979a4b2598631ee4a892d5c0515d20a51d4161","ssdeep":"384:ROuy0nOpue6h6S4z6LA9ImcG5iT784Y3IgtZJ42f0B5UYqaL:kL0OpueI6RFtiz2BMB5UYV","tlshash":"5d82e129a20147653cc400f886b97cb7265bdff6a960d46ee886f805d05ff426fb94f8","first_seen":"2023-05-14T01:30:08Z","last_seen":"2026-01-15T08:09:34.942835Z","times_seen":67,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"saint2.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saint2.su/icons/favicon-16x16.png","fqdn":"saint2.su","domain":"saint2.su","tld":"su"},"ip":{"addr":"104.21.6.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saint2.su/embed/wI9pt65GQqO","date":"2025-10-11T16:56:27.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saint2.su","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 11:29:43 GMT","end":"Tue, 30 Dec 2025 12:28:03 GMT"},"fingerprint":{"sha1":"C4:16:C0:95:65:9E:6B:FE:2A:BD:AF:75:98:04:01:F5:4B:11:93:C3","sha256":"5B:52:EE:68:3D:0B:DA:F0:AC:74:7F:0E:D5:AF:9D:C2:FC:9A:C0:55:67:4D:43:E6:20:CF:5A:84:2C:69:87:D6"}}},"request":{"raw":"GET /icons/favicon-16x16.png HTTP/1.1\r\nHost: saint2.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://saint2.su/embed/wI9pt65GQqO\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6uffsfht10pqvgth0c7j375265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 11 Oct 2025 16:56:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 610\r\nlast-modified: Sun, 29 May 2022 00:01:46 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DKo4b2BuFaEC%2Bohx3%2Fp%2BK4WzDvS%2FhAYKwkrgKm8CeLyPt07L9Hn7dDOrIKGjqVCYtE4RL6O7epoCREJRlLROqBb8ysyXSow%3D\"}]}\r\netag: \"6292b7ea-262\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\nage: 1002\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98cfe4144973b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":610,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"4ef8321dcb1532430b28ca92ee1484d0","sha1":"59268b58e87b9b50d36d9f389c47e8aca5e3be38","sha256":"e3f9335cb577f4989998a20171ea8af2d2eac5f23603b0523a291ed49eaf47ab","sha512":"13ce349f3532adf4fee333783f16182e50716900aeca727d676fc0a1f811a4089de7ba638725bf7b369179c9adeef26635c486ba047cd29b4bdbb152950b9932","ssdeep":"","tlshash":"63f04750391274a6c7700bd7871dd246f055222ab1817771770e65d5051c7a75d57287","first_seen":"2023-05-14T01:30:08Z","last_seen":"2026-01-15T08:09:34.936536Z","times_seen":67,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"saint2.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acquiredeceasedundress.com/get/2069097?id=2069097\u0026jp=_clqquxwseafnoistnzlnof\u0026dr=102\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.607-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=XOL63ADsf\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=heJS0OpaHR0cHM6Ly9zYWludDIuc3UvZW1iZWQvd0k5cHQ2NUdRcU8\u0026afid=7715180955507200\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=0\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0\u0026freq=0","fqdn":"acquiredeceasedundress.com","domain":"acquiredeceasedundress.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saint2.su/embed/wI9pt65GQqO","date":"2025-10-11T16:56:28.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acquiredeceasedundress.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:31:07 GMT","end":"Fri, 07 Nov 2025 14:31:06 GMT"},"fingerprint":{"sha1":"15:07:DD:67:23:C7:7B:87:9B:08:54:5E:1E:43:E8:17:05:E1:92:66","sha256":"35:46:15:61:52:93:0D:DA:AD:DC:56:41:45:69:28:AD:E8:D9:CA:64:7B:16:D7:B5:AC:2B:54:E0:DE:AD:31:42"}}},"request":{"raw":"GET /get/2069097?id=2069097\u0026jp=_clqquxwseafnoistnzlnof\u0026dr=102\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.607-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=XOL63ADsf\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=heJS0OpaHR0cHM6Ly9zYWludDIuc3UvZW1iZWQvd0k5cHQ2NUdRcU8\u0026afid=7715180955507200\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=0\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: acquiredeceasedundress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://saint2.su/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 16:56:28 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: UID=25101111560810ead265fc4b2ab1e2c172cd; Path=/; Expires=Sat, 14 Nov 2026 16:56:28 GMT; Secure; SameSite=None\nCHCK=1; Path=/; Expires=Sat, 14 Nov 2026 16:56:28 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Sat, 14 Nov 2026 16:56:28 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":548,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (548), with no line terminators","md5":"bfeeafd1822b1347b97450906d740cc3","sha1":"46a9ed8a92ca0dcbbac1c529ed89b7cdc7b7e4ee","sha256":"df99a7b8811919057b98bfb0b6ba68178ac10238c74566c483a6f71111dab140","sha512":"fdc81dcc6099d0ad2edf7824f5cf4373acf5ac7cf55828a9d2e71045e6fd1c12b9f41492ce8ed25e6c4be82b781239fb4d497122ecc9caa0e3af31210bd2d223","ssdeep":"","tlshash":"f0f08b9498a7c8ef593b6c0e707f4e86b4884d61da274a245441d40aa5b8133bf0311b","first_seen":"2025-10-11T16:56:52.222751Z","last_seen":"2025-10-11T16:56:52.222751Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"androidduvetscribble.com/solid.gif?z=2069095\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.607-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=XOL63ADsf\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=qjHt588aHR0cHM6Ly9zYWludDIuc3UvZW1iZWQvd0k5cHQ2NUdRcU8\u0026afid=7433705978851328\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=0\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5","fqdn":"androidduvetscribble.com","domain":"androidduvetscribble.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://saint2.su/embed/wI9pt65GQqO","date":"2025-10-11T16:56:28.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"androidduvetscribble.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:30:07 GMT","end":"Fri, 07 Nov 2025 14:30:06 GMT"},"fingerprint":{"sha1":"70:EE:3B:A1:38:1F:8F:B3:CA:62:37:23:0A:21:2A:86:6D:5A:3B:26","sha256":"C5:EE:9F:8B:F5:EB:BF:CF:EB:23:84:5C:53:29:1F:8F:EC:18:76:5A:CC:D3:15:96:EA:59:74:20:D6:3B:CE:47"}}},"request":{"raw":"POST /solid.gif?z=2069095\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.607-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=XOL63ADsf\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=qjHt588aHR0cHM6Ly9zYWludDIuc3UvZW1iZWQvd0k5cHQ2NUdRcU8\u0026afid=7433705978851328\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=0\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5 HTTP/1.1\r\nHost: androidduvetscribble.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://saint2.su/\r\nOrigin: https://saint2.su\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 16:56:28 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-route-id: stats.tag.loaded\r\nset-cookie: CHCK=1; Path=/; Expires=Sat, 14 Nov 2026 16:56:28 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Sat, 14 Nov 2026 16:56:28 GMT; Secure; SameSite=None\nUID=2510111156c19fbf1f5c824c5e9b6c11042b; Path=/; Expires=Sat, 14 Nov 2026 16:56:28 GMT; Secure; SameSite=None\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"28e463819a210071de3b45ebe7633613","sha1":"6dccd571828ec0912629119cf7eabfea9f33ddbc","sha256":"44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84","sha512":"8a82ac5a7883cd9b74bdb561cf825ce86474e259ad8c445e538d697b0003e3f2b1d6edcd3dc6512f4ad16e9074da204a79938257c457ecf68f4329eac0182e67","ssdeep":"","tlshash":"04900003e280e082c3a0c0300e0ccb802b88a2308a28030fb0fc2baefc3a3a20c23000","first_seen":"2023-04-05T09:26:54Z","last_seen":"2026-04-05T11:28:19.18957Z","times_seen":20482,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.plyr.io/3.7.8/plyr.js","fqdn":"cdn.plyr.io","domain":"plyr.io","tld":"io"},"ip":{"addr":"104.26.13.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saint2.su/embed/wI9pt65GQqO","date":"2025-10-11T16:56:26.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.plyr.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Sep 2025 23:29:57 GMT","end":"Fri, 12 Dec 2025 00:21:15 GMT"},"fingerprint":{"sha1":"B0:37:28:8F:CC:8C:3F:9C:89:35:B5:54:32:22:ED:1F:E1:FB:98:EF","sha256":"6E:22:6E:A7:8E:6D:29:06:9D:5F:4D:FA:6A:78:3F:C1:79:06:00:36:62:BA:07:AC:21:2F:BF:53:E4:C7:24:F5"}}},"request":{"raw":"GET /3.7.8/plyr.js HTTP/1.1\r\nHost: cdn.plyr.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://saint2.su/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Oct 2025 16:56:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nage: 1340612\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncf-cache-status: HIT\r\nlast-modified: Thu, 20 Apr 2023 10:33:44 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KA3BZYgY%2BYlQAxEtOmoKZKcN%2F0DgeJ3k05YrLwgPGZYAHIMuzSiQP%2FKqQMABQIdyYdqZTQHcoDc0%2FrNNGghqQgVEieHAO1SG\"}]}\r\netag: W/\"714122a0383a143c50c9629e2bcb7e1f\"\r\ncontent-encoding: br\r\ncf-ray: 98cfe4109ad1b517-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":113183,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"714122a0383a143c50c9629e2bcb7e1f","sha1":"2ca613d6ba47e5d0c3296375c19708d25a348a55","sha256":"7572410db5bf0c2a553dc8f92e5127d25c8eef78cce7243687ff557aad99e59f","sha512":"277f3ec54e1db2de3b5c71850849ad3ada79bc807145134de3eeee1b2452b5bbf6dac662562d0dfe7a8a48de47a9feaf9cb0cba11942490f2ab6249d362ac194","ssdeep":"1536:NSRp2y6b/csv3QsnBKSEjq1sJKSVxeJle847v4qAze1Q/kuvv3evsD/tBa3J+Pyc:N3TuV6mLmC3a3Umc1tK91","tlshash":"7eb308c3321af63181a659cee025021675398b9a7001c26cfd3cedee692cd4276bbf75","first_seen":"2024-12-12T04:09:23.185272Z","last_seen":"2026-04-04T01:29:39.40451Z","times_seen":697,"resource_available":true,"data":null}},"time_used":496,"timings":{"blocked":241,"dns":25,"connect":1,"send":0,"wait":9,"receive":0,"ssl":216},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nucaqgnita.com/en/abwbkyo?hwy=789926\u0026zub=uu\u0026hh=_gdxcdbuastpxengxaxewoq\u0026zwn=1\u0026jf=3\u0026ejvymw=584335\u0026gartzty=upr\u0026hbuakd=127562\u0026id=2069097\u0026tqtiiml=933387","fqdn":"nucaqgnita.com","domain":"nucaqgnita.com","tld":"com"},"ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saint2.su/embed/wI9pt65GQqO","date":"2025-10-11T16:56:28.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Wed, 28 May 2025 12:05:35 GMT","end":"Sun, 23 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"D5:33:83:B8:5B:6A:A9:2B:2B:8D:5B:6B:69:1E:AF:D5:EF:7A:D7:70","sha256":"B2:BE:B3:FF:3D:A0:4A:98:C5:E2:01:09:18:D8:53:12:93:ED:B7:29:D4:CA:82:8A:73:BB:7D:AD:2F:10:7B:FF"}}},"request":{"raw":"GET /en/abwbkyo?hwy=789926\u0026zub=uu\u0026hh=_gdxcdbuastpxengxaxewoq\u0026zwn=1\u0026jf=3\u0026ejvymw=584335\u0026gartzty=upr\u0026hbuakd=127562\u0026id=2069097\u0026tqtiiml=933387 HTTP/1.1\r\nHost: nucaqgnita.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://saint2.su/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 16:56:28 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: PTS=; Path=/; Expires=Sat, 14 Nov 2026 16:56:28 GMT; Secure; SameSite=None\nUID=251011115652c5603f85e14e49b69bbaae7c; Path=/; Expires=Sat, 14 Nov 2026 16:56:28 GMT; Secure; SameSite=None\nCHCK=1; Path=/; Expires=Sat, 14 Nov 2026 16:56:28 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":535,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (535), with no line terminators","md5":"c3ccceac626213f636b3e8f0b5df59b2","sha1":"f70d1afe47f3a2cd7f8c35506f941e9f2593103a","sha256":"e880194b4508c1b17ace0b3bb24340f198d5e30b45e77ca91d2a30b1c60f5637","sha512":"b14f5581bb40823ff23ca7eb6bdb194b82e0045a2edf085ede1fba15bd36094f91d2ef7dac81145f5a31a21d353fbf5c8e9e95d080b73a4842e196ccbfdc35e2","ssdeep":"","tlshash":"3ef0c0a49c1ae9c6a0174e1d14bb1e0a75d86006cb1304bdade4c148411d1b49f93cac","first_seen":"2025-10-11T16:56:52.228375Z","last_seen":"2025-10-11T16:56:52.228375Z","times_seen":1,"resource_available":true,"data":null}},"time_used":272,"timings":{"blocked":126,"dns":1,"connect":21,"send":0,"wait":18,"receive":0,"ssl":101},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"androidduvetscribble.com/get/2069095?id=2069095\u0026jp=_cliictlyhqtbapapdhruvi\u0026dr=49\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.607-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=XOL63ADsf\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=br4olhraHR0cHM6Ly9zYWludDIuc3UvZW1iZWQvd0k5cHQ2NUdRcU8\u0026afid=2930106351537664\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pi=W1oqmg\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0","fqdn":"androidduvetscribble.com","domain":"androidduvetscribble.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saint2.su/embed/wI9pt65GQqO","date":"2025-10-11T16:56:28.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"androidduvetscribble.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:30:07 GMT","end":"Fri, 07 Nov 2025 14:30:06 GMT"},"fingerprint":{"sha1":"70:EE:3B:A1:38:1F:8F:B3:CA:62:37:23:0A:21:2A:86:6D:5A:3B:26","sha256":"C5:EE:9F:8B:F5:EB:BF:CF:EB:23:84:5C:53:29:1F:8F:EC:18:76:5A:CC:D3:15:96:EA:59:74:20:D6:3B:CE:47"}}},"request":{"raw":"GET /get/2069095?id=2069095\u0026jp=_cliictlyhqtbapapdhruvi\u0026dr=49\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.607-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=XOL63ADsf\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=br4olhraHR0cHM6Ly9zYWludDIuc3UvZW1iZWQvd0k5cHQ2NUdRcU8\u0026afid=2930106351537664\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pi=W1oqmg\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0 HTTP/1.1\r\nHost: androidduvetscribble.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://saint2.su/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cart=1; cart_p=2; CHCK=1; PTS=; UID=2510111156ae4d3e5f25534f1e9ebe3d79e8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 16:56:28 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Sat, 14 Nov 2026 16:56:28 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Sat, 14 Nov 2026 16:56:28 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3157,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3157), with no line terminators","md5":"104159708207b3fe83d4efe463cc4a9f","sha1":"b42c4f92241dbbf4f3a3bfd82112983a82b49261","sha256":"be412d845cdfbecb3c77da225ab95960530ecc20413f3866f2987cd4a1b4e5db","sha512":"4f1f4ddf3af36a9294e9151cb4ee5cb95d628309117a06dd71ce575bcb26f1d40fa1ceabc9ccc0e5a58b25e8116a78089e6c40336f9fdc2b0a415f10ca4606c3","ssdeep":"","tlshash":"c55174c59493948ccdcfae5f94f9be90205d6ae88cb3804f049b846bd3c59f4420b8de","first_seen":"2025-10-11T16:56:52.231417Z","last_seen":"2025-10-11T16:56:52.231417Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acquiredeceasedundress.com/chicken.gif?z=2069097\u0026pb=b57bd789f3e42b62d6aaa9d917194dde1760208988\u0026pbc=TvRnz1KyWbFcqOpo\u0026pbi=89ei53-Ou61cqOpo\u0026pbu=cXI6J2drUNJcqOpo\u0026psp=ahA5jNvx533W3nIzaEeZ8Yc73nfd8A_ZlB_nkbhEZqxUPtwB0tHNkfHhjqZ_jdobsntAdxBdQrbV58B6d9NZyiAAuvn6yMNextr5VZ-P2m9ALMarn87jUyr2KWJYLS4r6PKoIVQdc-Isvs2IGcA4FjgGyrckPClmOQxyYWHUM9IlLtYiZSY2Auhls-yvb7vaBCyD29LOATsusP66xyEWGjS9-7vIF_XPNma21Zo6YqghV8k0q1wID5mfff41QckFIFXJdKKLjk8N-LPdI4kymNa1SY7j_01AaYwINlAGHWH01STMASERnrWF1nJwkoe75CpOUJZR6XNWtAbvw2whkXrZv5X9M4_JaQI3ydqwqXOEG4Yk9iOSttzU9coTEIiYH2CHDW9f6Kc-2j-Waq_kNmflHToHn5KQPFQDg3AZySg7u-qr5tnSEo3ap8KlGbM5ne8KbzvvAv4uWD-amJo9FuP7wEzhQBsUUiA0X3Rhi_ts_iXxlF4cC8aQgz7DS4biJvHlUOOQfXQyZX7O3mC7_P8FGdXSW2ZmFAwRZVBRomgBx4ep9t8BXjPI1qDuHP_zKDFqyV_yw2PpDm4WFndFeo5WE5rjli2rOE7Vo90ctj-nTM7ZcLxzJarpdcbWzJxefYZ9eTmcu54LtA7fyBqxFKkw_DB0Qd0_EZGbjRa7LEnd7i1BOUnHHg1C-GmYkzuHbTWf0Tp-6mD89cJmfb6YWNoGPFRyNiX2bfCHMrf7H3YRYKhEZgZY9zommiuIQJ3HoVfxhd7I-qSUQD6GqXbDOOTRB9m_R4_FODIGuYA_LPY=\u0026freq=0\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.607-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=XOL63ADsf\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=S2Yoxe2aHR0cHM6Ly9zYWludDIuc3UvZW1iZWQvd0k5cHQ2NUdRcU8\u0026afid=7152231002198528\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026tp=0\u0026vp=0\u0026pi=W1oqmg\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5","fqdn":"acquiredeceasedundress.com","domain":"acquiredeceasedundress.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saint2.su/embed/wI9pt65GQqO","date":"2025-10-11T16:56:28.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acquiredeceasedundress.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:31:07 GMT","end":"Fri, 07 Nov 2025 14:31:06 GMT"},"fingerprint":{"sha1":"15:07:DD:67:23:C7:7B:87:9B:08:54:5E:1E:43:E8:17:05:E1:92:66","sha256":"35:46:15:61:52:93:0D:DA:AD:DC:56:41:45:69:28:AD:E8:D9:CA:64:7B:16:D7:B5:AC:2B:54:E0:DE:AD:31:42"}}},"request":{"raw":"GET /chicken.gif?z=2069097\u0026pb=b57bd789f3e42b62d6aaa9d917194dde1760208988\u0026pbc=TvRnz1KyWbFcqOpo\u0026pbi=89ei53-Ou61cqOpo\u0026pbu=cXI6J2drUNJcqOpo\u0026psp=ahA5jNvx533W3nIzaEeZ8Yc73nfd8A_ZlB_nkbhEZqxUPtwB0tHNkfHhjqZ_jdobsntAdxBdQrbV58B6d9NZyiAAuvn6yMNextr5VZ-P2m9ALMarn87jUyr2KWJYLS4r6PKoIVQdc-Isvs2IGcA4FjgGyrckPClmOQxyYWHUM9IlLtYiZSY2Auhls-yvb7vaBCyD29LOATsusP66xyEWGjS9-7vIF_XPNma21Zo6YqghV8k0q1wID5mfff41QckFIFXJdKKLjk8N-LPdI4kymNa1SY7j_01AaYwINlAGHWH01STMASERnrWF1nJwkoe75CpOUJZR6XNWtAbvw2whkXrZv5X9M4_JaQI3ydqwqXOEG4Yk9iOSttzU9coTEIiYH2CHDW9f6Kc-2j-Waq_kNmflHToHn5KQPFQDg3AZySg7u-qr5tnSEo3ap8KlGbM5ne8KbzvvAv4uWD-amJo9FuP7wEzhQBsUUiA0X3Rhi_ts_iXxlF4cC8aQgz7DS4biJvHlUOOQfXQyZX7O3mC7_P8FGdXSW2ZmFAwRZVBRomgBx4ep9t8BXjPI1qDuHP_zKDFqyV_yw2PpDm4WFndFeo5WE5rjli2rOE7Vo90ctj-nTM7ZcLxzJarpdcbWzJxefYZ9eTmcu54LtA7fyBqxFKkw_DB0Qd0_EZGbjRa7LEnd7i1BOUnHHg1C-GmYkzuHbTWf0Tp-6mD89cJmfb6YWNoGPFRyNiX2bfCHMrf7H3YRYKhEZgZY9zommiuIQJ3HoVfxhd7I-qSUQD6GqXbDOOTRB9m_R4_FODIGuYA_LPY=\u0026freq=0\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.607-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=XOL63ADsf\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=S2Yoxe2aHR0cHM6Ly9zYWludDIuc3UvZW1iZWQvd0k5cHQ2NUdRcU8\u0026afid=7152231002198528\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026tp=0\u0026vp=0\u0026pi=W1oqmg\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5 HTTP/1.1\r\nHost: acquiredeceasedundress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cart=1; cart_p=2; UID=25101111560810ead265fc4b2ab1e2c172cd; CHCK=1; PTS=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 16:56:28 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-route-id: stats.impression\r\nset-cookie: BCAI=ABSSFwAAAAAAAAAB; Path=/; Expires=Sun, 12 Oct 2025 16:56:28 GMT; Secure; SameSite=None\nBMI=AB8WUQAAAAAAAAAB; Path=/; Expires=Sun, 12 Oct 2025 16:56:28 GMT; Secure; SameSite=None\nBCRI=wUMr%2BAAAAAAAAAAB; Path=/; Expires=Sun, 12 Oct 2025 16:56:28 GMT; Secure; SameSite=None\nIMC_102=1; Path=/; Expires=Sun, 12 Oct 2025 16:56:28 GMT; Secure; SameSite=None\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"28e463819a210071de3b45ebe7633613","sha1":"6dccd571828ec0912629119cf7eabfea9f33ddbc","sha256":"44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84","sha512":"8a82ac5a7883cd9b74bdb561cf825ce86474e259ad8c445e538d697b0003e3f2b1d6edcd3dc6512f4ad16e9074da204a79938257c457ecf68f4329eac0182e67","ssdeep":"","tlshash":"04900003e280e082c3a0c0300e0ccb802b88a2308a28030fb0fc2baefc3a3a20c23000","first_seen":"2023-04-05T09:26:54Z","last_seen":"2026-04-05T11:28:19.18957Z","times_seen":20482,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.pncloudfl.com/pn/159/4e9/574/1594e95742a74b4d78cb97059ff18a3f1cdbc0cb.png","fqdn":"cdn.pncloudfl.com","domain":"pncloudfl.com","tld":"com"},"ip":{"addr":"104.20.30.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saint2.su/embed/wI9pt65GQqO","date":"2025-10-11T16:56:28.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.pncloudfl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 14 Aug 2025 07:49:13 GMT","end":"Wed, 12 Nov 2025 08:49:12 GMT"},"fingerprint":{"sha1":"53:C1:B1:A0:81:82:67:55:8A:65:59:03:C4:88:B8:86:25:56:63:88","sha256":"AB:A3:11:5C:99:77:7A:FE:E1:33:E4:5D:40:37:93:D6:BB:7D:D3:35:3B:ED:91:F9:87:66:23:2E:EA:7C:3D:B2"}}},"request":{"raw":"GET /pn/159/4e9/574/1594e95742a74b4d78cb97059ff18a3f1cdbc0cb.png HTTP/1.1\r\nHost: cdn.pncloudfl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Oct 2025 16:56:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 62328\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncache-control: max-age=432000\r\ncf-bgj: imgq:100,h2pri\r\naccept-ranges: bytes\r\ncf-polished: origSize=74321\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\netag: e7242897f9459085037ffcbcd74c060f\r\nexpires: Mon, 13 Oct 2025 01:33:05 GMT\r\nlast-modified: Mon, 23 Dec 2019 09:01:22 GMT\r\nx-cdn-host-id: ds7445,ds5833\r\nx-openstack-request-id: tx66dbb085bba94334a9ff4-0066ec1e16\r\nx-proxy-cache: HIT\r\nx-timestamp: 1577091681.42646\r\nx-trans-id: tx66dbb085bba94334a9ff4-0066ec1e16\r\ncf-cache-status: HIT\r\nage: 55403\r\ncf-ray: 98cfe41a6d235a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62328,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGB, non-interlaced","md5":"5bd392cfd1e040ee312e50f74a35fea1","sha1":"2bf0f07c0f48b4db6f0f43a4e6f5d2edbdc049d6","sha256":"143950d2d65d6389ec5f2c655a56d522ad4f875b0431994bf15dceddf18d9d63","sha512":"de37b3907bb8d0584823aec33695e607f423fbd5a95a9708687aef0b1a80cefbc90b6675a00beff0afebfe8617825efe3e9c2ede48b71b9e469ea834fc704635","ssdeep":"1536:AhJQVCLRyGbVwhK2plDeW1AoG4OYBfPGYp895PUhei:Ab3FHuwSDeWA+OYB9Gchei","tlshash":"2e530207814bd458cf9e83cb7f6e52c97ec54389cac4d1b66c99ee2e3ae0431221f991","first_seen":"2025-07-01T18:24:57.390964Z","last_seen":"2025-12-01T08:51:26.270077Z","times_seen":132,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":107,"dns":45,"connect":1,"send":0,"wait":5,"receive":5,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saint2.su/embed/wI9pt65GQqO","date":"2025-10-11T16:56:26.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/jquery/3.6.0/jquery.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://saint2.su\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Oct 2025 16:56:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 70371\r\ncf-ray: 98cfe40f9c470b4d-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"603e8adc-46744\"\r\nlast-modified: Tue, 02 Mar 2021 18:58:36 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 664930\r\nexpires: Thu, 01 Oct 2026 16:56:26 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=dxOPUotco32xJzZ8kkOdQiN%2F0BNl8jS1lPMT%2F5Nvtd3VvOBbmnP%2B5gAU8V7T1Dw41RBteLlSK7C1kwK0G25guQyFp7ZZfytno8%2FFi2jMAa4B1W9Wb3qK57A6RTkXFKziO7UpqJem\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":288580,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"2849239b95f5a9a2aea3f6ed9420bb88","sha1":"af32f706407ab08f800c5e697cce92466e735847","sha256":"1fe2bb5390a75e5d61e72c107cab528fc3c29a837d69aab7d200e1dbb5dcd239","sha512":"9ffe201d6ddab4cdd0a9171b0a7e9ec26a7170b00719a0e3a4406ee3165de3b3745b6a10fbaabba1cdcf5ecb6b2585dc6cd535387750d53ee900ffa08b962ef2","ssdeep":"6144:rJshNVlG+TCtlFhTzeKpzcYmD2zK8E1JEjPx+WK+978FyW48L/dCaYeNzIPfTvI4:HjzcYmD4Y0Px+WK+978FyMhr+PfcA+up","tlshash":"9154a3d9f78d112e423231aaac2e12cdb77cd171560458aefd4d597c24a083d83baf7a","first_seen":"2023-03-07T01:14:59Z","last_seen":"2026-04-05T10:07:39.213022Z","times_seen":6799,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":94,"dns":1,"connect":1,"send":0,"wait":15,"receive":8,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"androidduvetscribble.com/check.html","fqdn":"androidduvetscribble.com","domain":"androidduvetscribble.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://saint2.su/embed/wI9pt65GQqO","date":"2025-10-11T16:56:27.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"androidduvetscribble.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:30:07 GMT","end":"Fri, 07 Nov 2025 14:30:06 GMT"},"fingerprint":{"sha1":"70:EE:3B:A1:38:1F:8F:B3:CA:62:37:23:0A:21:2A:86:6D:5A:3B:26","sha256":"C5:EE:9F:8B:F5:EB:BF:CF:EB:23:84:5C:53:29:1F:8F:EC:18:76:5A:CC:D3:15:96:EA:59:74:20:D6:3B:CE:47"}}},"request":{"raw":"GET /check.html HTTP/1.1\r\nHost: androidduvetscribble.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://saint2.su/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 16:56:27 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Mon, 22 Sep 2025 06:11:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68d0e8af-39e\"\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":926,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"088dba8e97eede53134c93219f7ebbae","sha1":"adb707654d1fe0af7d0d7a9f55660d22bd3625e4","sha256":"6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff","sha512":"23a1f87731e8aee4658993cd1ce35ec179fea80b89bf52aca7634488f1bdfcf88b9cabca4859481357a9fee06cbb49df64bbe0878b1dae0e5df4fa34003c6d80","ssdeep":"","tlshash":"6211d04934e1684c1127a6301597a2183c32a40315cbd949fb9cd7301f815a7dc596df","first_seen":"2024-11-22T16:59:41.974716Z","last_seen":"2026-03-04T10:11:28.020186Z","times_seen":13721,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"androidduvetscribble.com/get/2069095?id=2069095\u0026jp=_cliictlyhqtbapapdhruvi\u0026dr=49\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.607-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=XOL63ADsf\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=qjHt588aHR0cHM6Ly9zYWludDIuc3UvZW1iZWQvd0k5cHQ2NUdRcU8\u0026afid=7433705978851328\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=0\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0","fqdn":"androidduvetscribble.com","domain":"androidduvetscribble.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saint2.su/embed/wI9pt65GQqO","date":"2025-10-11T16:56:28.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"androidduvetscribble.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:30:07 GMT","end":"Fri, 07 Nov 2025 14:30:06 GMT"},"fingerprint":{"sha1":"70:EE:3B:A1:38:1F:8F:B3:CA:62:37:23:0A:21:2A:86:6D:5A:3B:26","sha256":"C5:EE:9F:8B:F5:EB:BF:CF:EB:23:84:5C:53:29:1F:8F:EC:18:76:5A:CC:D3:15:96:EA:59:74:20:D6:3B:CE:47"}}},"request":{"raw":"GET /get/2069095?id=2069095\u0026jp=_cliictlyhqtbapapdhruvi\u0026dr=49\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.607-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=XOL63ADsf\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=qjHt588aHR0cHM6Ly9zYWludDIuc3UvZW1iZWQvd0k5cHQ2NUdRcU8\u0026afid=7433705978851328\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=0\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0 HTTP/1.1\r\nHost: androidduvetscribble.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://saint2.su/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 16:56:28 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Sat, 14 Nov 2026 16:56:28 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Sat, 14 Nov 2026 16:56:28 GMT; Secure; SameSite=None\nUID=2510111156ae4d3e5f25534f1e9ebe3d79e8; Path=/; Expires=Sat, 14 Nov 2026 16:56:28 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2086,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2086), with no line terminators","md5":"c6d5971537f7769fa205e0da62153d68","sha1":"00f28bf2321fbb69c75e0d5e75b5616833da073a","sha256":"9f04f608c7893cad2663367485ab2dc10c044024b5bce4062260e3296a368378","sha512":"07ed43d9a1f0d2ee2276446cf62f22360937acfa8883d6371a690f97b66a39f642951b001e8273d79260a6a8a8765da5a55f2762d2079ccac8b9309aa2579e94","ssdeep":"","tlshash":"dd4187aedc8dfce8b19a398127ac4ca434802958955729d8a1c5cc5fb31ad39017ecb9","first_seen":"2025-10-11T16:56:52.236439Z","last_seen":"2025-10-11T16:56:52.236439Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acquiredeceasedundress.com/get/2069097?id=2069097\u0026jp=_clqquxwseafnoistnzlnof\u0026dr=102\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.607-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=XOL63ADsf\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=l56tfCxaHR0cHM6Ly9zYWludDIuc3UvZW1iZWQvd0k5cHQ2NUdRcU8\u0026afid=4337481235047936\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pi=W1oqmg\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0\u0026freq=0","fqdn":"acquiredeceasedundress.com","domain":"acquiredeceasedundress.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saint2.su/embed/wI9pt65GQqO","date":"2025-10-11T16:56:28.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acquiredeceasedundress.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:31:07 GMT","end":"Fri, 07 Nov 2025 14:31:06 GMT"},"fingerprint":{"sha1":"15:07:DD:67:23:C7:7B:87:9B:08:54:5E:1E:43:E8:17:05:E1:92:66","sha256":"35:46:15:61:52:93:0D:DA:AD:DC:56:41:45:69:28:AD:E8:D9:CA:64:7B:16:D7:B5:AC:2B:54:E0:DE:AD:31:42"}}},"request":{"raw":"GET /get/2069097?id=2069097\u0026jp=_clqquxwseafnoistnzlnof\u0026dr=102\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.607-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=XOL63ADsf\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=l56tfCxaHR0cHM6Ly9zYWludDIuc3UvZW1iZWQvd0k5cHQ2NUdRcU8\u0026afid=4337481235047936\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pi=W1oqmg\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: acquiredeceasedundress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://saint2.su/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cart=1; cart_p=2; UID=25101111560810ead265fc4b2ab1e2c172cd; CHCK=1; PTS=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 16:56:28 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Sat, 14 Nov 2026 16:56:28 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Sat, 14 Nov 2026 16:56:28 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2980,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2980), with no line terminators","md5":"9c9961b1d01811aa65508952b88c93d0","sha1":"68e55688a9078613581927fd4402f17545c3fdc0","sha256":"62523c5d192cdd924921f2079d475e9f1713f6432155aba0c828d8f59e9078a0","sha512":"eddf2a5670320f5170c4a4200ab7b8f44c35c588d1319aea8325f2bb6aea67a9794cb584043a53d00abf746c218fb6e90c74b8c3296aee99a36f633058d98818","ssdeep":"","tlshash":"0e512ab0c08afacc6684cfe59f7e4f4a1a40c4949f7b861fd065e10c661b9f4c709288","first_seen":"2025-10-11T16:56:52.238565Z","last_seen":"2025-10-11T16:56:52.238565Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.pncloudfl.com/pn/159/4e9/574/1594e95742a74b4d78cb97059ff18a3f1cdbc0cb.png","fqdn":"cdn.pncloudfl.com","domain":"pncloudfl.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saint2.su/embed/wI9pt65GQqO","date":"2025-10-11T16:56:28.430Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /pn/159/4e9/574/1594e95742a74b4d78cb97059ff18a3f1cdbc0cb.png HTTP/1.1\r\nHost: cdn.pncloudfl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://saint2.su/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acquiredeceasedundress.com/in.js","fqdn":"acquiredeceasedundress.com","domain":"acquiredeceasedundress.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saint2.su/embed/wI9pt65GQqO","date":"2025-10-11T16:56:26.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acquiredeceasedundress.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:31:07 GMT","end":"Fri, 07 Nov 2025 14:31:06 GMT"},"fingerprint":{"sha1":"15:07:DD:67:23:C7:7B:87:9B:08:54:5E:1E:43:E8:17:05:E1:92:66","sha256":"35:46:15:61:52:93:0D:DA:AD:DC:56:41:45:69:28:AD:E8:D9:CA:64:7B:16:D7:B5:AC:2B:54:E0:DE:AD:31:42"}}},"request":{"raw":"GET /in.js HTTP/1.1\r\nHost: acquiredeceasedundress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://saint2.su/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 16:56:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 09 Oct 2025 13:23:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68e7b758-2bc45\"\r\nexpires: Sat, 18 Oct 2025 16:56:26 GMT\r\ncache-control: max-age=604800\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":179269,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"18a6525c9a26b7be8a3ebc940578fd4f","sha1":"c87ea649028d57c4868a1685ab659c97e339bf49","sha256":"bc2f001eefad6970430285b602ad9e5a476e03785c3079af39fa2af2ebbfdd88","sha512":"49587abf00a99cb129699b7c35cdb4cf01af3a05fc432edf603b28fc77f7ddeb1d723c20ea635a3d6751034838c71649324dac3cf975207905abcdce171e45f6","ssdeep":"1536:bhvxCdFm3G/kvUlg/+ZTvYCxM96mdqIGD4AtcSBsbrVFQQNT1QI5SSwIB4J7TO38:bhAd2PfdShtcasbD3vANTOiRXvAK","tlshash":"3e04718deb8330327162b42b94fb992db1319cf1b0bd5487c4e3d1a9e9b67079131a67","first_seen":"2025-10-09T13:45:48.023542Z","last_seen":"2025-10-12T21:31:03.853094Z","times_seen":37,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":90,"dns":18,"connect":22,"send":0,"wait":34,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.3.1/jquery.cookie.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saint2.su/embed/wI9pt65GQqO","date":"2025-10-11T16:56:26.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/jquery-cookie/1.3.1/jquery.cookie.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://saint2.su\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Oct 2025 16:56:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 789\r\ncf-ray: 98cfe40f8c3b0b4d-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec1-85e\"\r\nlast-modified: Mon, 04 May 2020 16:11:45 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 815778\r\nexpires: Thu, 01 Oct 2026 16:56:26 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=shNwZ59MObbj2fS%2B3klZ7tI9nnWRdAoiYAfhk2ZEh%2B6C5HwNgBkFXIZSbpyyZhVXTXAlxlN2Mscl4s5GK4mqaxwPtr7QuXzWq157VfAZPFF5D46mUk%2B4GoNPBDAdvpA6xjo0q1Ps\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2142,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"86bfb3ae149e79524eafbcd1cd0a613a","sha1":"4c7b840648637688378d746f24037cfdc7a5d2d0","sha256":"5f8d4cdb53aa201c8dd93712d1342157480d75d03859ea50656ab9ab3d298d30","sha512":"154aefeb8c607ce1a57cd3f27f431ea347f940fd9592b31bc24ba8a21373c78b4a78a29366ee875526571a281229807b06c8d41cdf8c5f902d23c091538b3456","ssdeep":"","tlshash":"a5410fc4bf8d250a066b32927b3b20eda87cff7255585499cc1c66d418a0c26c3afe79","first_seen":"2023-03-07T12:59:34Z","last_seen":"2026-04-05T06:53:46.272591Z","times_seen":278,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":83,"dns":1,"connect":12,"send":0,"wait":18,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.plyr.io/3.7.8/plyr.css","fqdn":"cdn.plyr.io","domain":"plyr.io","tld":"io"},"ip":{"addr":"104.26.13.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://saint2.su/embed/wI9pt65GQqO","date":"2025-10-11T16:56:26.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.plyr.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Sep 2025 23:29:57 GMT","end":"Fri, 12 Dec 2025 00:21:15 GMT"},"fingerprint":{"sha1":"B0:37:28:8F:CC:8C:3F:9C:89:35:B5:54:32:22:ED:1F:E1:FB:98:EF","sha256":"6E:22:6E:A7:8E:6D:29:06:9D:5F:4D:FA:6A:78:3F:C1:79:06:00:36:62:BA:07:AC:21:2F:BF:53:E4:C7:24:F5"}}},"request":{"raw":"GET /3.7.8/plyr.css HTTP/1.1\r\nHost: cdn.plyr.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://saint2.su/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Oct 2025 16:56:27 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: cloudflare\r\nage: 665015\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncf-cache-status: HIT\r\nlast-modified: Thu, 20 Apr 2023 10:33:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1hellzarcAAL%2FbOyZ7bKgyp0fTYy2JSNTl4GksZ92aa%2FUSJph5RjOb6B8MU0exvh69eGh7efZ0zRtzUK2LhKssMD9OnDTu6W\"}]}\r\netag: W/\"411acf0fd5fe4d42c580db72f82077fd\"\r\ncontent-encoding: br\r\ncf-ray: 98cfe410caf6b517-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32564,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (32562), with no line terminators","md5":"411acf0fd5fe4d42c580db72f82077fd","sha1":"3e9561fb7a2a70b93bb1014f5d958b123fe61764","sha256":"2ee720801746a99015c74144707638048778223b2520c8228b627f7262fb122b","sha512":"c9ec54f61c277b731a2cbd8f1be6090e16b2492f4d59c8facfb32f5034a8321c0d8213e05e072f6205617e3e05318a4f87539fedbb7cfd12b9034ad0f5f3cc3b","ssdeep":"384:fj8gN8LOim80ytg9agvgIgVg0qGAB21RgQ/rp6bVDjg/zy:fnN8LOiyygNbVZ","tlshash":"cde2726179692138f83bd16d37b4c5cd333ca102fdd69aa9f194b76089caaf306b3641","first_seen":"2023-05-28T19:49:37Z","last_seen":"2026-04-05T01:42:32.829182Z","times_seen":1608,"resource_available":false,"data":null}},"time_used":560,"timings":{"blocked":275,"dns":26,"connect":1,"send":0,"wait":9,"receive":0,"ssl":241},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.bunny.net/css?family=rubik:500","fqdn":"fonts.bunny.net","domain":"bunny.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://saint2.su/embed/wI9pt65GQqO","date":"2025-10-11T16:56:26.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fonts.bunny.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 23:10:51 GMT","end":"Thu, 18 Dec 2025 23:10:50 GMT"},"fingerprint":{"sha1":"DF:9D:97:88:1D:C7:EB:71:28:28:BB:4D:03:F0:DA:74:A7:1C:08:06","sha256":"35:56:C5:B2:79:26:95:BC:3B:93:D2:97:4E:81:83:6B:E4:89:64:4C:66:48:82:E7:1B:DA:77:79:CC:58:52:30"}}},"request":{"raw":"GET /css?family=rubik:500 HTTP/1.1\r\nHost: fonts.bunny.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://saint2.su/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Oct 2025 16:56:26 GMT\r\ncontent-type: text/css; charset=utf-8\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 781720\r\ncdn-uid: 3a60ca70-b89d-4cd5-a4b5-34a3468d7e0f\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 23 Sep 2025 15:25:21 GMT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/23/2025 15:25:21\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 896cfdf5cd8733b6554f64f3c336b6c9\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":3025,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (599)","md5":"998ef8085519adb20f64e55df6798c5d","sha1":"370ede060e2ca55155cfab6228c835f68338844b","sha256":"8814c2b349e939499b0a2697870ff9c82c48200c3b87ed98a4cdbc468e64854e","sha512":"c39ebc396b8d2d9ae05336afd049006459984642f00d1596451062b01ee60f6842071081bb8900f39f1de2b722f50011be77476031092e7652c623d07cb98533","ssdeep":"","tlshash":"ce5102f584051040fb872d9373df4d234e1e92063485645d9e289ce8aca5e30a3f37ee","first_seen":"2025-06-19T16:47:32.525695Z","last_seen":"2026-03-02T22:02:37.179319Z","times_seen":22,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":89,"dns":49,"connect":5,"send":0,"wait":3,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saint2.su/assets/saintLogo.png","fqdn":"saint2.su","domain":"saint2.su","tld":"su"},"ip":{"addr":"104.21.6.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saint2.su/embed/wI9pt65GQqO","date":"2025-10-11T16:56:27.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saint2.su","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 11:29:43 GMT","end":"Tue, 30 Dec 2025 12:28:03 GMT"},"fingerprint":{"sha1":"C4:16:C0:95:65:9E:6B:FE:2A:BD:AF:75:98:04:01:F5:4B:11:93:C3","sha256":"5B:52:EE:68:3D:0B:DA:F0:AC:74:7F:0E:D5:AF:9D:C2:FC:9A:C0:55:67:4D:43:E6:20:CF:5A:84:2C:69:87:D6"}}},"request":{"raw":"GET /assets/saintLogo.png HTTP/1.1\r\nHost: saint2.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://saint2.su/embed/wI9pt65GQqO\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6uffsfht10pqvgth0c7j375265\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 11 Oct 2025 16:56:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 41139\r\nlast-modified: Sat, 30 Apr 2022 21:33:16 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4TGSPVjyQEvjjbdeKsyCreGaRiMCgLMFjvDdL0FwbAYTqJRbly3OxRZ5K6CJquzvnQ2Lrb8wSppUeG6kYeLKKp%2FFH3f%2FbB4%3D\"}]}\r\netag: \"626dab1c-a0b3\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\nage: 5316\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98cfe412b96bb4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41139,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1842 x 1228, 8-bit/color RGBA, non-interlaced","md5":"9f0dabe61af44e2f7b87d49e4e7ee074","sha1":"46909887ab5efbaeab1319273ae8adf79548cfa0","sha256":"876e378d0fd81a2398b7634a828c983d334c578ece02066a8c14cbe24c5c687c","sha512":"b7c3f77926de1d29375425b7b61d0dc64a61c95c3a5a1180b9182d3aebc4bfe0cdfb346b4a9b3d14d1f876a6b13025fe2a07f7276de3c18aa26bfd9251331cbc","ssdeep":"768:skIY7pDLtS4lzz30b0IXZZiMBFR1hecJkM7SG:vI2pcIL0b0IXZZiGFRPeGDx","tlshash":"3103e06179e67de1fca790f2b39e8fcc5ab00ec725da998d0df0d4b56d24d02006ae85","first_seen":"2023-10-29T04:42:31Z","last_seen":"2026-01-15T08:09:34.938893Z","times_seen":39,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"saint2.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.bunny.net/rubik/files/rubik-latin-500-normal.woff2","fqdn":"fonts.bunny.net","domain":"bunny.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://saint2.su/embed/wI9pt65GQqO","date":"2025-10-11T16:56:27.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fonts.bunny.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 23:10:51 GMT","end":"Thu, 18 Dec 2025 23:10:50 GMT"},"fingerprint":{"sha1":"DF:9D:97:88:1D:C7:EB:71:28:28:BB:4D:03:F0:DA:74:A7:1C:08:06","sha256":"35:56:C5:B2:79:26:95:BC:3B:93:D2:97:4E:81:83:6B:E4:89:64:4C:66:48:82:E7:1B:DA:77:79:CC:58:52:30"}}},"request":{"raw":"GET /rubik/files/rubik-latin-500-normal.woff2 HTTP/1.1\r\nHost: fonts.bunny.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://saint2.su\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.bunny.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Oct 2025 16:56:27 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19036\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 781720\r\ncdn-uid: 3a60ca70-b89d-4cd5-a4b5-34a3468d7e0f\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\netag: \"68b238f1-4a5c\"\r\nlast-modified: Fri, 29 Aug 2025 23:34:09 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 318\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/13/2025 09:09:56\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 0967100ae0f8dc7a8af5bed099ad58fa\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":19036,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19036, version 1.0","md5":"0bc31dde989131f3575c4ff67a92049b","sha1":"bf0279d0320442c4fc1bd3614807d74318c251c6","sha256":"54ad302324aa8000449efd8643186deb46777f0ca4d97f10deb9333536933613","sha512":"d3b9d1c820dc57348dc3a69e43151929d876b33ef9f5021b43e0c6e83f5b6baa7673babb955d76e4e531daacb4d762ecc8cc19472396d1a045504f914095ece5","ssdeep":"384:Y+bTvLf3hpF2opQYcvH1crdxCniyH+wHOYb1Wq3lHcY35Vk:TvsopAVmdwnfH+wHXb1WwccVk","tlshash":"6082d1950d85eb18c096e8306765e6f88117be07d0e817877eb13d95214e8daadf383e","first_seen":"2025-06-04T06:48:30.201188Z","last_seen":"2026-04-05T11:46:10.431942Z","times_seen":868,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":38,"dns":19,"connect":1,"send":0,"wait":3,"receive":3,"ssl":3},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acquiredeceasedundress.com/check.html","fqdn":"acquiredeceasedundress.com","domain":"acquiredeceasedundress.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://saint2.su/embed/wI9pt65GQqO","date":"2025-10-11T16:56:27.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acquiredeceasedundress.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:31:07 GMT","end":"Fri, 07 Nov 2025 14:31:06 GMT"},"fingerprint":{"sha1":"15:07:DD:67:23:C7:7B:87:9B:08:54:5E:1E:43:E8:17:05:E1:92:66","sha256":"35:46:15:61:52:93:0D:DA:AD:DC:56:41:45:69:28:AD:E8:D9:CA:64:7B:16:D7:B5:AC:2B:54:E0:DE:AD:31:42"}}},"request":{"raw":"GET /check.html HTTP/1.1\r\nHost: acquiredeceasedundress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://saint2.su/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 16:56:27 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Mon, 22 Sep 2025 06:11:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68d0e8af-39e\"\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":926,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"088dba8e97eede53134c93219f7ebbae","sha1":"adb707654d1fe0af7d0d7a9f55660d22bd3625e4","sha256":"6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff","sha512":"23a1f87731e8aee4658993cd1ce35ec179fea80b89bf52aca7634488f1bdfcf88b9cabca4859481357a9fee06cbb49df64bbe0878b1dae0e5df4fa34003c6d80","ssdeep":"","tlshash":"6211d04934e1684c1127a6301597a2183c32a40315cbd949fb9cd7301f815a7dc596df","first_seen":"2024-11-22T16:59:41.974716Z","last_seen":"2026-03-04T10:11:28.020186Z","times_seen":13721,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs.saint2.cr/thumbs/661585c401b8a-1712686532.jpg","fqdn":"thumbs.saint2.cr","domain":"saint2.cr","tld":"cr"},"ip":{"addr":"186.2.163.148","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saint2.su/embed/wI9pt65GQqO","date":"2025-10-11T16:56:28.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thumbs.saint2.cr","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 Aug 2025 19:23:17 GMT","end":"Sun, 02 Nov 2025 19:23:16 GMT"},"fingerprint":{"sha1":"77:D7:62:FB:D5:F5:20:33:E6:32:86:BE:0F:F9:6C:46:78:92:05:F2","sha256":"5E:81:17:C1:23:91:35:02:6A:B6:E2:20:F9:FF:A6:F1:B1:8B:9F:38:1D:A8:B3:75:BE:86:B2:2C:5A:AF:17:97"}}},"request":{"raw":"GET /thumbs/661585c401b8a-1712686532.jpg HTTP/1.1\r\nHost: thumbs.saint2.cr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://saint2.su/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=JaXXan2XnQLMNj5l; Domain=.saint2.cr; Path=/; Expires=Sat, 11-Oct-2025 17:16:28 GMT\n__ddg10_=1760201788; Domain=.saint2.cr; Path=/; Expires=Sat, 11-Oct-2025 17:16:28 GMT\n__ddg9_=91.90.42.154; Domain=.saint2.cr; Path=/; Expires=Sat, 11-Oct-2025 17:16:28 GMT\n__ddg1_=koNRDV1RUbgVkm08bFIl; Domain=.saint2.cr; HttpOnly; Path=/; Expires=Sun, 11-Oct-2026 16:56:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 11 Oct 2025 16:56:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 46728\r\netag: \"002cf0e0498f9bc2578c43521ecd5c7c\"\r\nlast-modified: Sat, 25 Jan 2025 03:49:07 GMT\r\nvary: Accept-Encoding\r\nage: 82697\r\ncache-control: max-age=31536000\r\nx-proxy-cache: MISS\r\naccept-ranges: bytes\r\nddg-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":46728,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1280x720, components 3","md5":"002cf0e0498f9bc2578c43521ecd5c7c","sha1":"392315dbd06214847247d8992d7c69315785ab1b","sha256":"405c80aafefce319a352a565aa5cc55c689e844747c8e840287d6d6f542a6d62","sha512":"d93773465cac2f6588ab392ccae8a5905c5256bfa4a3a81311747845941e35ab11f565e98362ff4aec234efa747a1fe8c99834b52ad09562596a138be30b3085","ssdeep":"768:5Cv80JG7cq5VqHfFsuCyEt+lmFqDdO2cOdcPxEg2E75AHOHZgw72+vxOJK:U0nPmBCy8FqDdiOderdy+IfA","tlshash":"5c23f29c627b963f2fa51fb5f8a53fe3984b90293e52d8b73d448459308cc072d666e0","first_seen":"2025-10-11T16:56:52.24824Z","last_seen":"2025-10-11T16:56:52.24824Z","times_seen":1,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":79,"dns":20,"connect":28,"send":0,"wait":127,"receive":40,"ssl":41},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"thumbs.saint2.cr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saint2.su/embed/wI9pt65GQqO","fqdn":"saint2.su","domain":"saint2.su","tld":"su"},"ip":{"addr":"104.21.6.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-11T16:56:26.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saint2.su","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 11:29:43 GMT","end":"Tue, 30 Dec 2025 12:28:03 GMT"},"fingerprint":{"sha1":"C4:16:C0:95:65:9E:6B:FE:2A:BD:AF:75:98:04:01:F5:4B:11:93:C3","sha256":"5B:52:EE:68:3D:0B:DA:F0:AC:74:7F:0E:D5:AF:9D:C2:FC:9A:C0:55:67:4D:43:E6:20:CF:5A:84:2C:69:87:D6"}}},"request":{"raw":"GET /embed/wI9pt65GQqO HTTP/1.1\r\nHost: saint2.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Oct 2025 16:56:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T7Ft7J1bYyA365eN3K7sQtWEB3X8IwYLBm5HnGF0OJVmseMrHFDDn%2FoNPhwszeGfDMeChBqbwMjaWed9hxpIxa44In8T0lM%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: PHPSESSID=6uffsfht10pqvgth0c7j375265; Path=/; Domain=saint2.su\r\ncf-ray: 98cfe40d1854568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Plyr:3.7.8","description":"Plyr is a simple, lightweight, accessible and customizable HTML5, YouTube and Vimeo media player that supports modern browsers.","website":"https://plyr.io","common_platform_enumeration":"","icon":"Plyr.png","categories":["Video players"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":24257,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (7573)","md5":"c0e05bba2d93ebba460cdf2eaf51823a","sha1":"f7f9ac4e9f53f52e1fd642c6619a90d675def28f","sha256":"a8c749e49a62a90ee72e59ee3a75360c90383a1c1af6c3060c26a8b80cf8e358","sha512":"2848c3455241b6049305c0b45a233fbbd1a9e964130f1921012cd29f37c4bdf0ec5425dbba7c37703b53170b18c2f8ae38beb7a342ece10343903ef603aaf062","ssdeep":"384:7QEd3A8bcRw99k8Lg73gU5+xMkjhlwVCHg4D+xlXSWlLx7aFmkAnW3iTbw226pZR:7QEd3A8mwjk8M7wUgxXjh+EHg4D+xlXr","tlshash":"8bb25c7b33529bb603a208d6a1bfa434e43552073445c854f4eca9477f69ec6d0b3e7a","first_seen":"2025-10-11T16:56:52.251421Z","last_seen":"2025-10-11T16:56:52.251421Z","times_seen":1,"resource_available":false,"data":null}},"time_used":507,"timings":{"blocked":230,"dns":4,"connect":2,"send":0,"wait":21,"receive":0,"ssl":246},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"saint2.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saint2.su/css/player-additional.css","fqdn":"saint2.su","domain":"saint2.su","tld":"su"},"ip":{"addr":"104.21.6.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://saint2.su/embed/wI9pt65GQqO","date":"2025-10-11T16:56:26.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saint2.su","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 11:29:43 GMT","end":"Tue, 30 Dec 2025 12:28:03 GMT"},"fingerprint":{"sha1":"C4:16:C0:95:65:9E:6B:FE:2A:BD:AF:75:98:04:01:F5:4B:11:93:C3","sha256":"5B:52:EE:68:3D:0B:DA:F0:AC:74:7F:0E:D5:AF:9D:C2:FC:9A:C0:55:67:4D:43:E6:20:CF:5A:84:2C:69:87:D6"}}},"request":{"raw":"GET /css/player-additional.css HTTP/1.1\r\nHost: saint2.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://saint2.su/embed/wI9pt65GQqO\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6uffsfht10pqvgth0c7j375265\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 11 Oct 2025 16:56:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 19 Apr 2024 17:02:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IUzrBObTrw%2BUut6e3GKSovkiAQ%2BbzYCm%2F8IjCzdaQqMeLsgA5w17xyOmbTEJZBkFixBGXgish2AiQnP%2BqTcYhr7N6dfNWdo%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"6622a397-19c7\"\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nage: 2582\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98cfe40f0952b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6599,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"e194d3d68856c327660b808aec8a951b","sha1":"110cac6be49b37530e50f74076b7042d6b75fefb","sha256":"4bb8e34961f5716ecb8cf3e95e6473c4066bdfde2e05e72e5a1f6312ba480120","sha512":"1093fdd18bb83d1f6b1798414860329a16cf2081407fae4088b5727a69fdb156fe0fe62069d4fec78a744e14d09ddd362675169da2089c7996935bc2b3d49ed1","ssdeep":"96:kpr0ETXgSg3tjUFuHkVXF5Rep2poMvDIwkY7zsQdq6+J9fwHRsY:kprTTMtgFuHkAQWMxkYkEq6rRsY","tlshash":"5bd1510378ab1914643748293ffd85957bac8013ba8e5d947bc93314cfc93aac973ac4","first_seen":"2024-04-26T16:37:14Z","last_seen":"2025-10-11T16:56:52.253686Z","times_seen":11,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"saint2.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}