{"report_id":"8fbc13cb-69b5-44a6-9cd6-1c3230c5bfe3","version":6,"status":"done","tags":[],"date":"2025-11-23T07:50:05Z","url":{"schema":"http","addr":"www.av4.cam/v/s/oedy9.com/play/69951-1-1.html/title/A%20young%20man%20and%20two%20cute%20girls%20are%20having%20sex%20in%20the%20hotel%20together.%20They%20are%20very%20good%20at%20sex.%20-%20Ivy%20Cinema%20javroot.com%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[20:42x404p]","fqdn":"www.av4.cam","domain":"av4.cam","tld":"cam"},"ip":{"addr":"172.67.216.97","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.av4.cam/","fqdn":"www.av4.cam","domain":"av4.cam","tld":"cam"},"title":"Hot Videos 人気動画-動画@AV4.us","dom":{"size":804,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (650)","md5":"05593e7cfb401cacca19f7eb28588c5e","sha1":"0230c8e669b2e80ff1c1535153321ef94351d646","sha256":"e39592aeaeb4d95b7931097733d2c608f9ce7ede3d35d926c79dae9e72dd9b77","sha512":"a3ec73cb7924548187c4445bcaedf61ca6acb6f1772148a8ebfb75a7ac6ce114b45058da3ffda8994bf017b557aebd852c0fc1ce9be285c483a971d6bb6b8eea","ssdeep":"","tlshash":"38016d9b1c08c5165610a8c4e8a1f5ec802af51fe960cda5d8e4019d7dc4becdc6b564","dom_hash":"domhashfed59694485a2b1b8da32d7c0553c521","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.av4.cam/v/s/oedy9.com/play/69951-1-1.html/title/A%20young%20man%20and%20two%20cute%20girls%20are%20having%20sex%20in%20the%20hotel%20together.%20They%20are%20very%20good%20at%20sex.%20-%20Ivy%20Cinema%20javroot.com%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[20:42x404p]","fqdn":"www.av4.cam","domain":"av4.cam","tld":"cam"},"ip":{"addr":"172.67.216.97","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-28T07:50:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":7,"urlquery":0,"analyzer":8}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-23T07:49:43Z","timestamp":1763884183,"ip_dst":{"addr":"104.21.18.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.12","port":34880,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2025-11-23T07:49:43.332367+0000\",\"flow_id\":1002792128345161,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":34880,\"dest_ip\":\"104.21.18.180\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"jsjs.jpg4.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3432,\"start\":\"2025-11-23T07:49:43.324681+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-23T07:49:44Z","timestamp":1763884184,"ip_dst":{"addr":"172.18.0.12","port":45426,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"5.61.58.104","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"severity":"medium","alert":"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)","source":"{\"timestamp\":\"2025-11-23T07:49:44.919175+0000\",\"flow_id\":2236001793099932,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"5.61.58.104\",\"src_port\":443,\"dest_ip\":\"172.18.0.12\",\"dest_port\":45426,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2025194,\"rev\":3,\"signature\":\"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2018_01_09\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_16\"]}},\"tls\":{\"subject\":\"CN=djki.xyz\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=R13\",\"serial\":\"05:35:9C:8C:10:56:62:A6:E4:82:88:12:9D:A7:E5:94:86:B6\",\"fingerprint\":\"4c:58:08:fd:86:5f:ba:13:ed:9d:09:84:a8:a1:37:08:62:a3:f1:a9\",\"sni\":\"djki.xyz\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-10-06T00:15:46\",\"notafter\":\"2026-01-04T00:15:45\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"1c9537b8108487575f2043b84071412d\",\"string\":\"771,49200,0-65281-11-16\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1113,\"bytes_toclient\":4013,\"start\":\"2025-11-23T07:49:44.805020+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-23T07:49:44Z","timestamp":1763884184,"ip_dst":{"addr":"43.175.37.140","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.12","port":46108,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Tencent Cloud Storage Domain (myqcloud .com in TLS SNI)","source":"{\"timestamp\":\"2025-11-23T07:49:44.957986+0000\",\"flow_id\":1019675644835306,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":46108,\"dest_ip\":\"43.175.37.140\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2050737,\"rev\":1,\"signature\":\"ET INFO Observed Tencent Cloud Storage Domain (myqcloud .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_02_06\"]}},\"tls\":{\"sni\":\"1259667713.vod2.myqcloud.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":753,\"bytes_toclient\":4378,\"start\":\"2025-11-23T07:49:44.898538+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-23T07:49:44Z","timestamp":1763884184,"ip_dst":{"addr":"43.175.37.140","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.12","port":46092,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Tencent Cloud Storage Domain (myqcloud .com in TLS SNI)","source":"{\"timestamp\":\"2025-11-23T07:49:44.960406+0000\",\"flow_id\":1812200190162235,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":46092,\"dest_ip\":\"43.175.37.140\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2050737,\"rev\":1,\"signature\":\"ET INFO Observed Tencent Cloud Storage Domain (myqcloud .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_02_06\"]}},\"tls\":{\"sni\":\"1259667713.vod2.myqcloud.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":894,\"bytes_toclient\":3148,\"start\":\"2025-11-23T07:49:44.898363+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-23T07:49:44Z","timestamp":1763884184,"ip_dst":{"addr":"43.175.37.140","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.12","port":46090,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Tencent Cloud Storage Domain (myqcloud .com in TLS SNI)","source":"{\"timestamp\":\"2025-11-23T07:49:44.963722+0000\",\"flow_id\":1237885753275440,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":46090,\"dest_ip\":\"43.175.37.140\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2050737,\"rev\":1,\"signature\":\"ET INFO Observed Tencent Cloud Storage Domain (myqcloud .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_02_06\"]}},\"tls\":{\"sni\":\"1259667713.vod2.myqcloud.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":753,\"bytes_toclient\":3148,\"start\":\"2025-11-23T07:49:44.898096+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-23T07:49:46Z","timestamp":1763884186,"ip_dst":{"addr":"43.175.37.140","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.12","port":46120,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Tencent Cloud Storage Domain (myqcloud .com in TLS SNI)","source":"{\"timestamp\":\"2025-11-23T07:49:46.845762+0000\",\"flow_id\":56022422673330,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":46120,\"dest_ip\":\"43.175.37.140\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2050737,\"rev\":1,\"signature\":\"ET INFO Observed Tencent Cloud Storage Domain (myqcloud .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_02_06\"]}},\"tls\":{\"sni\":\"1259667713.vod2.myqcloud.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":894,\"bytes_toclient\":3148,\"start\":\"2025-11-23T07:49:46.677810+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-23T07:49:46Z","timestamp":1763884186,"ip_dst":{"addr":"43.175.37.140","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.12","port":46112,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Tencent Cloud Storage Domain (myqcloud .com in TLS SNI)","source":"{\"timestamp\":\"2025-11-23T07:49:46.849135+0000\",\"flow_id\":1487191425046330,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":46112,\"dest_ip\":\"43.175.37.140\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2050737,\"rev\":1,\"signature\":\"ET INFO Observed Tencent Cloud Storage Domain (myqcloud .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_02_06\"]}},\"tls\":{\"sni\":\"1259667713.vod2.myqcloud.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":894,\"bytes_toclient\":3148,\"start\":\"2025-11-23T07:49:46.677690+0000\"}}"}],"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"fqjpg4.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"timg216.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"fixedjs.4vid.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"img2.gayzyimage.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"jsjj.gazo.space","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-22","alert":"Sinkholed","trigger":"en.vidmo.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"ds2.obmenvsemfiles.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"cndata.jpg4.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"ansuko.net","ip":{"addr":"104.21.54.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-07-04","domain_rank":87799,"first_seen":"2023-07-04T08:10:56Z","last_seen":"2025-11-17T06:19:06.236289Z","alert_count":0,"request_count":4,"received_data":568710,"sent_data":1827,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"okashik.atype.jp","ip":{"addr":"39.110.237.221","port":443,"asn":2527,"as":"Sony Network Communications Inc.","country":"Japan","country_code":"JP"},"domain_registered":"2005-11-20","domain_rank":892667,"first_seen":"2017-04-25T03:14:03Z","last_seen":"2025-11-17T02:56:11.715409Z","alert_count":0,"request_count":1,"received_data":83071,"sent_data":449,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"jsjs.jpg4.icu","ip":{"addr":"104.21.18.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-06-01","domain_rank":0,"first_seen":"2025-11-19T01:17:39.197833Z","last_seen":"2025-11-19T01:17:39.197833Z","alert_count":0,"request_count":1,"received_data":661,"sent_data":415,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ak-br-pic.kwai.net","ip":{"addr":"95.101.11.72","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"1999-10-05","domain_rank":810706,"first_seen":"2019-01-23T00:48:55Z","last_seen":"2025-11-19T01:17:37.447948Z","alert_count":0,"request_count":1,"received_data":9325,"sent_data":557,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"cdn.abcotvs.com","ip":{"addr":"184.25.3.167","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2014-08-26","domain_rank":215301,"first_seen":"2017-06-28T05:29:55Z","last_seen":"2025-11-17T06:19:02.351557Z","alert_count":0,"request_count":1,"received_data":371014,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"cdn5-thumbs.motherlessmedia.com","ip":{"addr":"185.107.92.224","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2008-10-11","domain_rank":905009,"first_seen":"2018-12-23T05:30:23Z","last_seen":"2025-11-17T06:19:02.052615Z","alert_count":0,"request_count":10,"received_data":262144,"sent_data":4558,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty:1.21.4.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fqjpg4.top","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-05-14","domain_rank":162173,"first_seen":"2025-06-28T08:10:55.589739Z","last_seen":"2025-11-17T06:19:03.665414Z","alert_count":8,"request_count":8,"received_data":0,"sent_data":3793,"comment":"","tags":null,"fingerprints":null},{"fqdn":"i.ytimg.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2007-12-11","domain_rank":436,"first_seen":"2012-10-03T19:11:04Z","last_seen":"2025-11-16T23:02:01.149989Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":445,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.pussyboy.net","ip":{"addr":"104.21.95.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2000-04-28","domain_rank":2613,"first_seen":"2015-08-22T18:30:33Z","last_seen":"2025-11-21T01:16:22.312434Z","alert_count":0,"request_count":2,"received_data":33166,"sent_data":950,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pizdauz.cc","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2019-11-26","domain_rank":285428,"first_seen":"2019-12-21T16:37:52Z","last_seen":"2025-11-14T08:40:44.075492Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":465,"comment":"","tags":null,"fingerprints":null},{"fqdn":"img.tnaflix.com","ip":{"addr":"156.146.33.140","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"domain_registered":"2007-02-18","domain_rank":508372,"first_seen":"2021-07-31T15:01:03Z","last_seen":"2025-11-19T08:50:42.838277Z","alert_count":0,"request_count":1,"received_data":21360,"sent_data":466,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"www.155pic.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-08-05","domain_rank":7218460,"first_seen":"2022-10-23T02:49:15Z","last_seen":"2025-11-19T08:50:03.400602Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":454,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.elog-ch.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2006-05-17","domain_rank":1006142,"first_seen":"2017-02-15T14:05:58Z","last_seen":"2025-11-17T02:00:00.794251Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":455,"comment":"","tags":null,"fingerprints":null},{"fqdn":"as2.ftcdn.net","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2010-11-08","domain_rank":219876,"first_seen":"2015-07-06T07:59:51Z","last_seen":"2025-11-17T01:59:58.757461Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":491,"comment":"","tags":null,"fingerprints":null},{"fqdn":"i.dailymail.co.uk","ip":{"addr":"2.18.172.250","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"1996-08-01","domain_rank":69335,"first_seen":"2012-05-22T12:34:10Z","last_seen":"2025-11-22T05:53:30.1521Z","alert_count":0,"request_count":1,"received_data":45438,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"i0.wp.com","ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1997-03-28","domain_rank":841,"first_seen":"2013-09-17T06:14:42Z","last_seen":"2025-11-16T23:50:25.704098Z","alert_count":0,"request_count":1,"received_data":111341,"sent_data":469,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"filtradas.com","ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"domain_registered":"2025-04-09","domain_rank":184383,"first_seen":"2025-06-15T07:12:29.914989Z","last_seen":"2025-11-22T18:11:23.237918Z","alert_count":0,"request_count":15,"received_data":1036267,"sent_data":7537,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"e1nn.com","ip":{"addr":"104.21.6.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-02-16","domain_rank":158415,"first_seen":"2019-02-17T22:15:29Z","last_seen":"2025-11-21T01:16:25.168482Z","alert_count":0,"request_count":1,"received_data":38341,"sent_data":429,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdne-pics.youjizz.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2007-10-22","domain_rank":731156,"first_seen":"2017-01-30T06:19:28Z","last_seen":"2025-11-17T06:19:04.305339Z","alert_count":0,"request_count":4,"received_data":0,"sent_data":1856,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.bad.news","ip":{"addr":"104.26.12.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-08-28","domain_rank":3049996,"first_seen":"2025-05-21T07:11:43.074342Z","last_seen":"2025-11-19T01:17:41.725945Z","alert_count":0,"request_count":3,"received_data":123833,"sent_data":1487,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"obmenvsemfiles.net","ip":{"addr":"82.192.80.149","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2020-06-19","domain_rank":114701,"first_seen":"2020-06-19T20:50:24Z","last_seen":"2025-11-14T08:40:45.365825Z","alert_count":0,"request_count":1,"received_data":244,"sent_data":489,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"img.lvv2.com","ip":{"addr":"172.67.186.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-07-31","domain_rank":2200261,"first_seen":"2018-06-19T22:11:24Z","last_seen":"2025-11-21T22:45:30.167502Z","alert_count":0,"request_count":1,"received_data":12873,"sent_data":440,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"filmesporno.xxx","ip":{"addr":"192.124.249.88","port":443,"asn":30148,"as":"SUCURI-SEC","country":"United States","country_code":"US"},"domain_registered":"2018-07-24","domain_rank":10355,"first_seen":"2019-03-31T05:29:58Z","last_seen":"2025-11-21T22:45:33.753542Z","alert_count":0,"request_count":3,"received_data":52239,"sent_data":1412,"comment":"","tags":null,"fingerprints":[{"name":"Sucuri","description":"Sucuri is a cybersecurity company that provides website security solutions and services.","website":"https://sucuri.net/","common_platform_enumeration":"","icon":"sucuri.svg","categories":["CDN","Security"]}]},{"fqdn":"cdn.2beeg.me","ip":{"addr":"172.67.184.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-30","domain_rank":4574514,"first_seen":"2020-12-19T09:44:39Z","last_seen":"2025-11-21T15:05:47.374939Z","alert_count":0,"request_count":1,"received_data":7350,"sent_data":467,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"img.apian088.sbs","ip":{"addr":"172.67.163.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-15","domain_rank":4180399,"first_seen":"2025-07-19T07:04:29.096235Z","last_seen":"2025-11-19T01:17:40.213347Z","alert_count":0,"request_count":5,"received_data":64443,"sent_data":2273,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jwplayer.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2007-09-17","domain_rank":18072,"first_seen":"2017-09-15T13:17:43Z","last_seen":"2025-11-17T14:19:45.092831Z","alert_count":0,"request_count":3,"received_data":0,"sent_data":1380,"comment":"","tags":null,"fingerprints":null},{"fqdn":"xporncool.net","ip":{"addr":"79.141.164.151","port":443,"asn":59711,"as":"HZ Hosting Ltd","country":"The Netherlands","country_code":"NL"},"domain_registered":"2023-10-13","domain_rank":791704,"first_seen":"2025-09-16T14:17:46.580558Z","last_seen":"2025-11-19T08:50:01.714306Z","alert_count":0,"request_count":1,"received_data":53343,"sent_data":452,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"images.embed-player.space","ip":{"addr":"51.77.85.40","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"domain_registered":"2016-12-02","domain_rank":3894588,"first_seen":"2021-05-27T18:53:58Z","last_seen":"2025-11-22T13:23:18.181806Z","alert_count":0,"request_count":1,"received_data":23554,"sent_data":458,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"i1.wp.com","ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1997-03-28","domain_rank":44421,"first_seen":"2012-09-27T05:17:34Z","last_seen":"2025-11-17T06:53:26.347477Z","alert_count":0,"request_count":2,"received_data":15509,"sent_data":982,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"zoobeegnet.z00.monster","ip":{"addr":"148.113.152.129","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"domain_registered":"2019-08-26","domain_rank":6869254,"first_seen":"2020-08-26T01:13:52Z","last_seen":"2025-11-17T01:59:57.778239Z","alert_count":0,"request_count":1,"received_data":15029,"sent_data":455,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"vidmo.pro","ip":{"addr":"89.248.193.244","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2022-04-10","domain_rank":59347,"first_seen":"2019-07-12T22:27:24Z","last_seen":"2025-11-17T06:19:00.460919Z","alert_count":0,"request_count":1,"received_data":10787,"sent_data":477,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"xvideosrei.com","ip":{"addr":"192.124.249.3","port":443,"asn":30148,"as":"SUCURI-SEC","country":"United States","country_code":"US"},"domain_registered":"2017-09-21","domain_rank":80835,"first_seen":"2018-01-03T10:28:29Z","last_seen":"2025-11-15T09:19:06.249807Z","alert_count":0,"request_count":1,"received_data":16887,"sent_data":477,"comment":"","tags":null,"fingerprints":[{"name":"Sucuri","description":"Sucuri is a cybersecurity company that provides website security solutions and services.","website":"https://sucuri.net/","common_platform_enumeration":"","icon":"sucuri.svg","categories":["CDN","Security"]}]},{"fqdn":"img.empflix.com","ip":{"addr":"156.146.33.140","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"domain_registered":"2008-01-08","domain_rank":4694701,"first_seen":"2021-08-11T08:36:00Z","last_seen":"2025-11-17T01:59:59.909098Z","alert_count":0,"request_count":1,"received_data":15479,"sent_data":466,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"img.redwap-cdn.com","ip":{"addr":"172.67.128.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-01-27","domain_rank":3022826,"first_seen":"2019-01-28T01:00:21Z","last_seen":"2025-11-19T01:17:41.651229Z","alert_count":0,"request_count":1,"received_data":23952,"sent_data":451,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cn.xszav.club","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":135993,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":32178,"sent_data":427,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"159i.net","ip":{"addr":"104.21.68.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-11-06","domain_rank":162531,"first_seen":"2025-05-20T07:09:11.067593Z","last_seen":"2025-11-19T01:17:36.065891Z","alert_count":0,"request_count":1,"received_data":66272,"sent_data":457,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.ekkofilm.dk","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2002-12-18","domain_rank":1269056,"first_seen":"2017-01-31T08:59:34Z","last_seen":"2025-11-17T02:56:23.477909Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":469,"comment":"","tags":null,"fingerprints":null},{"fqdn":"zh.pornoingyen.net","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":0,"sent_data":461,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.mypornhere.com","ip":{"addr":"51.91.119.144","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"domain_registered":"2018-08-12","domain_rank":1005268,"first_seen":"2019-10-27T03:41:31Z","last_seen":"2025-11-13T07:57:14.835221Z","alert_count":0,"request_count":1,"received_data":87667,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]},{"fqdn":"sbzytpimg1.com","ip":{"addr":"154.44.14.125","port":3519,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"domain_registered":"2024-04-24","domain_rank":160397,"first_seen":"2024-07-25T07:47:58Z","last_seen":"2025-11-18T20:17:25.622555Z","alert_count":0,"request_count":1,"received_data":216,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.av4.cam","ip":{"addr":"104.21.51.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-12","domain_rank":0,"first_seen":"2025-10-24T00:05:29.999891Z","last_seen":"2025-11-22T18:11:22.126129Z","alert_count":0,"request_count":1,"received_data":181938,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"sex-studentki.live","ip":{"addr":"104.20.23.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-10-17","domain_rank":9449,"first_seen":"2020-10-17T14:01:22Z","last_seen":"2025-11-17T06:19:06.445041Z","alert_count":0,"request_count":2,"received_data":99441,"sent_data":899,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.sex2021.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2015-12-14","domain_rank":0,"first_seen":"2025-11-21T22:45:34.554556Z","last_seen":"2025-11-21T22:45:34.554556Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":464,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.sexetag.com","ip":{"addr":"104.26.4.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2008-11-19","domain_rank":133399,"first_seen":"2012-12-13T16:47:51Z","last_seen":"2025-11-19T01:17:40.594979Z","alert_count":0,"request_count":1,"received_data":60214,"sent_data":447,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.petal-stone.com","ip":{"addr":"104.21.22.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-06-10","domain_rank":6279537,"first_seen":"2015-04-02T09:57:59Z","last_seen":"2025-11-14T13:08:43.82348Z","alert_count":0,"request_count":1,"received_data":60607,"sent_data":411,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"naturismv.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2012-05-07","domain_rank":171242,"first_seen":"2014-04-08T13:58:23Z","last_seen":"2025-11-15T14:07:05.660241Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":919,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fixedjs.4vid.top","ip":{"addr":"172.67.181.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-03-09","domain_rank":0,"first_seen":"2025-11-19T01:17:38.764851Z","last_seen":"2025-11-19T01:17:38.764851Z","alert_count":1,"request_count":1,"received_data":3326,"sent_data":436,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pix.simozo.net","ip":{"addr":"172.67.151.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-01","domain_rank":6336953,"first_seen":"2020-04-10T16:32:42Z","last_seen":"2025-11-17T02:56:22.299799Z","alert_count":0,"request_count":1,"received_data":16221,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"media.beastythumbs.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2003-04-28","domain_rank":0,"first_seen":"2022-06-03T23:21:22Z","last_seen":"2025-06-06T07:12:44.354693Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":459,"comment":"","tags":null,"fingerprints":null},{"fqdn":"chezcathy.com","ip":{"addr":"138.199.36.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"domain_registered":"2007-03-03","domain_rank":55670,"first_seen":"2012-05-29T12:07:35Z","last_seen":"2025-11-17T06:19:04.424011Z","alert_count":0,"request_count":3,"received_data":33460,"sent_data":1323,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"www.porn100.tv","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2023-03-04","domain_rank":126842,"first_seen":"2023-03-11T17:36:20Z","last_seen":"2025-11-21T22:45:32.842258Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":447,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn1.hotmoza.tv","ip":{"addr":"104.21.70.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-17","domain_rank":3967188,"first_seen":"2018-01-22T21:57:29Z","last_seen":"2025-11-19T01:17:36.034176Z","alert_count":0,"request_count":2,"received_data":33414,"sent_data":944,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"1259667713.vod2.myqcloud.com","ip":{"addr":"43.175.37.140","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"domain_registered":"2013-04-24","domain_rank":6075848,"first_seen":"2021-02-26T18:31:33Z","last_seen":"2025-11-22T18:11:22.145038Z","alert_count":0,"request_count":5,"received_data":0,"sent_data":2663,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.russiaporno.net","ip":{"addr":"78.40.116.26","port":443,"asn":200019,"as":"Alexhost Srl","country":"Sweden","country_code":"SE"},"domain_registered":"2014-12-28","domain_rank":5013354,"first_seen":"2012-11-01T11:58:01Z","last_seen":"2025-11-11T09:42:37.51992Z","alert_count":0,"request_count":1,"received_data":5864,"sent_data":457,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"erota2.com","ip":{"addr":"104.26.4.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-05-31","domain_rank":439658,"first_seen":"2019-04-02T11:04:19Z","last_seen":"2025-11-19T01:17:37.385619Z","alert_count":0,"request_count":1,"received_data":8585,"sent_data":466,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"realincestvideos.org","ip":{"addr":"104.21.1.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-12-31","domain_rank":255039,"first_seen":"2016-01-24T15:59:03Z","last_seen":"2025-11-15T00:36:30.881505Z","alert_count":0,"request_count":1,"received_data":11000,"sent_data":462,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pornodiler.com","ip":{"addr":"91.227.144.56","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2018-04-26","domain_rank":180126,"first_seen":"2013-10-29T21:45:02Z","last_seen":"2025-11-08T17:50:48.463238Z","alert_count":0,"request_count":1,"received_data":35233,"sent_data":413,"comment":"","tags":null,"fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}]},{"fqdn":"555.tourismdaily.ru","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-01-11","domain_rank":958405,"first_seen":"2024-04-26T01:40:42Z","last_seen":"2025-11-12T09:40:13.420584Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":922,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cav105.com","ip":{"addr":"45.145.72.132","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"domain_registered":"2022-07-28","domain_rank":188408,"first_seen":"2015-04-19T16:20:06Z","last_seen":"2025-11-14T13:08:45.823962Z","alert_count":0,"request_count":2,"received_data":150048,"sent_data":930,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"pornoperso.com","ip":{"addr":"104.21.41.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2000-06-06","domain_rank":25644,"first_seen":"2017-06-17T23:41:58Z","last_seen":"2025-11-19T01:17:37.20707Z","alert_count":0,"request_count":1,"received_data":18265,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"jsjj.gazo.space","ip":{"addr":"37.48.77.83","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2017-02-10","domain_rank":0,"first_seen":"2025-11-21T15:05:44.577347Z","last_seen":"2025-11-21T15:05:44.577347Z","alert_count":1,"request_count":1,"received_data":357,"sent_data":417,"comment":"","tags":null,"fingerprints":[{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]},{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]}]},{"fqdn":"gcore-pic.xvideos-cdn.com","ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"domain_registered":"2017-08-25","domain_rank":91016,"first_seen":"2023-11-29T03:20:25Z","last_seen":"2025-11-20T13:25:14.879117Z","alert_count":0,"request_count":2,"received_data":30485,"sent_data":1062,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"media.crazyshit.com","ip":{"addr":"45.133.44.3","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"1999-02-20","domain_rank":2942510,"first_seen":"2019-08-06T22:57:07Z","last_seen":"2025-11-17T06:19:03.937497Z","alert_count":0,"request_count":1,"received_data":208374,"sent_data":453,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.26.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"xxxdino.com","ip":{"addr":"104.21.65.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-03-20","domain_rank":532860,"first_seen":"2013-04-21T04:48:41Z","last_seen":"2025-11-13T07:57:15.72668Z","alert_count":0,"request_count":1,"received_data":25637,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"timg216.top","ip":{"addr":"172.66.155.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-04","domain_rank":157563,"first_seen":"2025-05-11T16:24:46.418762Z","last_seen":"2025-11-19T08:50:02.579961Z","alert_count":6,"request_count":6,"received_data":345249,"sent_data":2902,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"icdn05.4kpornvideos.tv","ip":{"addr":"45.133.44.6","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2019-05-01","domain_rank":4106070,"first_seen":"2022-11-09T12:16:02Z","last_seen":"2025-11-17T02:56:21.050574Z","alert_count":0,"request_count":2,"received_data":107381,"sent_data":894,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ymlporn1.net","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2020-12-07","domain_rank":238038,"first_seen":"2020-12-11T03:21:51Z","last_seen":"2025-11-06T08:40:54.142528Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":1088,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn77-pic.xvideos-cdn.com","ip":{"addr":"185.76.9.7","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2017-08-25","domain_rank":75108,"first_seen":"2018-09-06T22:43:13Z","last_seen":"2025-11-20T14:43:16.256651Z","alert_count":0,"request_count":1,"received_data":12418,"sent_data":531,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"ds2.obmenvsemfiles.net","ip":{"addr":"85.17.28.50","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2020-06-19","domain_rank":4168968,"first_seen":"2020-06-19T20:52:45Z","last_seen":"2025-11-15T05:43:48.540958Z","alert_count":2,"request_count":2,"received_data":17628,"sent_data":959,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"media.afterrape.net","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2015-11-17","domain_rank":0,"first_seen":"2023-07-29T17:28:27Z","last_seen":"2025-01-06T07:14:22.250981Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":456,"comment":"","tags":null,"fingerprints":null},{"fqdn":"matureanimalxxx.com","ip":{"addr":"185.162.130.18","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"The Netherlands","country_code":"NL"},"domain_registered":"2021-05-07","domain_rank":405454,"first_seen":"2021-05-07T17:26:24Z","last_seen":"2025-11-21T22:45:30.308321Z","alert_count":0,"request_count":1,"received_data":10765,"sent_data":456,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.23.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"18-girls-av.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-09-07","domain_rank":527796,"first_seen":"2025-07-07T05:40:26.683079Z","last_seen":"2025-11-17T06:19:01.228769Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":463,"comment":"","tags":null,"fingerprints":null},{"fqdn":"p15-kimg.kwai.net","ip":{"addr":"3.164.230.95","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"1999-10-05","domain_rank":291092,"first_seen":"2024-07-17T21:55:13Z","last_seen":"2025-11-19T08:50:06.0451Z","alert_count":0,"request_count":1,"received_data":21079,"sent_data":648,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"videopreview.chezcathy.com","ip":{"addr":"46.105.70.213","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"domain_registered":"2007-03-03","domain_rank":4588502,"first_seen":"2024-11-08T00:06:20.946875Z","last_seen":"2025-11-15T00:36:32.734788Z","alert_count":0,"request_count":1,"received_data":11103,"sent_data":454,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"i.dgpot.com","ip":{"addr":"104.21.14.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-02-19","domain_rank":7208494,"first_seen":"2016-05-04T01:46:25Z","last_seen":"2025-11-19T08:50:44.495408Z","alert_count":0,"request_count":1,"received_data":70191,"sent_data":472,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fmtu.sltusl.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-10-05","domain_rank":0,"first_seen":"2022-10-15T01:24:45Z","last_seen":"2025-11-19T03:01:45.518994Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":479,"comment":"","tags":null,"fingerprints":null},{"fqdn":"stickamvids.net","ip":{"addr":"176.120.75.27","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"United States","country_code":"US"},"domain_registered":"2011-03-02","domain_rank":222913,"first_seen":"2014-10-12T04:57:06Z","last_seen":"2025-11-21T22:45:31.951379Z","alert_count":0,"request_count":3,"received_data":12603,"sent_data":1351,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"taboodude.com","ip":{"addr":"172.67.218.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-01-31","domain_rank":407646,"first_seen":"2019-07-10T02:08:27Z","last_seen":"2025-11-21T01:16:24.521371Z","alert_count":0,"request_count":2,"received_data":39699,"sent_data":940,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"img2.gayzyimage.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-07-25","domain_rank":3140778,"first_seen":"2024-12-14T05:52:43.803415Z","last_seen":"2025-11-21T00:36:57.718781Z","alert_count":1,"request_count":1,"received_data":0,"sent_data":475,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ds.nashobmenfiles.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2018-08-19","domain_rank":4960458,"first_seen":"2018-09-06T13:34:42Z","last_seen":"2025-11-15T05:43:47.037879Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":461,"comment":"","tags":null,"fingerprints":null},{"fqdn":"assets-jpcust.jwpsrv.com","ip":{"addr":"151.101.2.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-10-04","domain_rank":29082,"first_seen":"2015-04-20T18:43:00Z","last_seen":"2025-11-19T23:43:40.925629Z","alert_count":0,"request_count":3,"received_data":1155,"sent_data":1359,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cndata.jpg4.top","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-03-07","domain_rank":0,"first_seen":"2024-04-16T16:48:10Z","last_seen":"2024-04-18T01:26:01Z","alert_count":1,"request_count":1,"received_data":0,"sent_data":510,"comment":"","tags":null,"fingerprints":null},{"fqdn":"avatars.mds.yandex.net","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2000-11-14","domain_rank":37773,"first_seen":"2014-12-15T11:43:59Z","last_seen":"2025-11-19T06:48:34.012028Z","alert_count":0,"request_count":5,"received_data":0,"sent_data":2370,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.arabysexy.mobi","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2017-12-01","domain_rank":5236539,"first_seen":"2020-05-08T16:40:46Z","last_seen":"2025-11-19T08:50:43.774678Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":491,"comment":"","tags":null,"fingerprints":null},{"fqdn":"vdo.x4men.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2018-03-19","domain_rank":4244765,"first_seen":"2023-09-28T06:15:38Z","last_seen":"2025-11-22T18:11:23.360926Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":430,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pornogids.cc","ip":{"addr":"104.21.65.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-07-24","domain_rank":212462,"first_seen":"2024-07-27T09:52:56Z","last_seen":"2025-11-14T08:40:44.670628Z","alert_count":0,"request_count":1,"received_data":551,"sent_data":469,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn2.geefap.com","ip":{"addr":"31.10.5.97","port":443,"asn":207728,"as":"EUROHOSTER Ltd.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2017-09-12","domain_rank":4560962,"first_seen":"2019-09-14T00:30:50Z","last_seen":"2025-11-21T01:16:24.761796Z","alert_count":0,"request_count":3,"received_data":71547,"sent_data":1419,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"mydesii.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-05-27","domain_rank":169957,"first_seen":"2024-07-25T10:11:01Z","last_seen":"2025-11-17T01:59:55.171477Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":482,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pics.pabporn.com","ip":{"addr":"104.21.30.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-09-13","domain_rank":4552472,"first_seen":"2021-09-10T03:01:44Z","last_seen":"2025-11-14T08:40:44.566795Z","alert_count":0,"request_count":1,"received_data":10877,"sent_data":440,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"nimg.ws.126.net","ip":{"addr":"47.246.48.180","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"The Netherlands","country_code":"NL"},"domain_registered":"1998-02-28","domain_rank":701717,"first_seen":"2016-09-29T14:01:41Z","last_seen":"2025-11-22T20:09:54.828456Z","alert_count":0,"request_count":1,"received_data":790,"sent_data":529,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}]},{"fqdn":"blumpkintube.com","ip":{"addr":"104.21.79.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-11-26","domain_rank":91888,"first_seen":"2017-05-23T16:37:55Z","last_seen":"2025-11-17T06:19:03.087038Z","alert_count":0,"request_count":4,"received_data":49175,"sent_data":1790,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"en.vidmo.pro","ip":{"addr":"89.248.193.244","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2022-04-10","domain_rank":122476,"first_seen":"2022-04-11T13:12:45Z","last_seen":"2025-11-15T09:19:06.049447Z","alert_count":5,"request_count":5,"received_data":78298,"sent_data":2400,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pornyc.com","ip":{"addr":"104.21.2.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-05-13","domain_rank":67935,"first_seen":"2017-01-20T12:37:34Z","last_seen":"2025-11-15T14:07:09.819391Z","alert_count":0,"request_count":1,"received_data":13186,"sent_data":437,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ds2.obmenvsemfilesec.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-10-18","domain_rank":0,"first_seen":"2025-11-05T20:11:41.144916Z","last_seen":"2025-11-15T09:19:06.086652Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":495,"comment":"","tags":null,"fingerprints":null},{"fqdn":"sorkab.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2018-06-30","domain_rank":60433,"first_seen":"2021-02-01T01:07:10Z","last_seen":"2025-11-21T22:45:30.217617Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":454,"comment":"","tags":null,"fingerprints":null},{"fqdn":"tiam.jp","ip":{"addr":"23.27.160.201","port":443,"asn":23338,"as":"ASN-DCS-01","country":"United States","country_code":"US"},"domain_registered":"2010-07-11","domain_rank":573687,"first_seen":"2025-09-09T18:46:54.498965Z","last_seen":"2025-11-22T18:11:23.010336Z","alert_count":0,"request_count":1,"received_data":6641,"sent_data":452,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"image.tmdb.org","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2009-09-15","domain_rank":53077,"first_seen":"2021-01-09T06:43:03Z","last_seen":"2025-11-17T15:07:03.424494Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":429,"comment":"","tags":null,"fingerprints":null},{"fqdn":"djki.xyz","ip":{"addr":"5.61.58.104","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-06-20","domain_rank":3523827,"first_seen":"2024-06-24T10:00:31Z","last_seen":"2025-11-10T06:56:22.183221Z","alert_count":0,"request_count":1,"received_data":16523,"sent_data":454,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fapdig.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2017-03-03","domain_rank":199248,"first_seen":"2017-08-25T19:59:36Z","last_seen":"2025-11-19T01:17:38.301363Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":419,"comment":"","tags":null,"fingerprints":null},{"fqdn":"dojki.biz","ip":{"addr":"207.180.194.251","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2020-04-12","domain_rank":335331,"first_seen":"2014-12-13T18:06:21Z","last_seen":"2025-11-15T14:07:06.491541Z","alert_count":0,"request_count":2,"received_data":50405,"sent_data":964,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"thumb.aporntv.com","ip":{"addr":"104.26.1.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-07","domain_rank":3254568,"first_seen":"2018-03-19T05:34:25Z","last_seen":"2025-11-17T06:19:05.015448Z","alert_count":0,"request_count":3,"received_data":32637,"sent_data":1585,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"img2.russkoeporno.tv","ip":{"addr":"172.67.180.196","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-01-18","domain_rank":4128436,"first_seen":"2024-12-03T12:50:28Z","last_seen":"2025-11-21T22:45:35.568705Z","alert_count":0,"request_count":3,"received_data":50201,"sent_data":1344,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"mylen-handmade.ru","ip":{"addr":"172.67.130.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-09-21","domain_rank":397466,"first_seen":"2013-07-12T11:17:57Z","last_seen":"2025-11-21T22:45:31.91304Z","alert_count":0,"request_count":1,"received_data":17533,"sent_data":453,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"uqetyzxa.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-09-17","domain_rank":169320,"first_seen":"2024-09-18T17:57:27Z","last_seen":"2025-11-22T22:57:10.763152Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":882,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.po-kaki-to.com","ip":{"addr":"172.67.144.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-09-18","domain_rank":33483,"first_seen":"2012-07-18T02:37:54Z","last_seen":"2025-11-19T07:29:05.697372Z","alert_count":0,"request_count":3,"received_data":172862,"sent_data":1395,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"jsjs.jpg4.icu/index.php?js=av4\u0026advertisement\u0026","fqdn":"jsjs.jpg4.icu","domain":"jpg4.icu","tld":"icu"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"56632244bf08f0993ac2fccb6d29ed23","sha1":"f2413e16d2b3549e78d553e0f45dca124e3f2f88","sha256":"6fc14ba9cd81745c9c239ec60e4c1cff910a467979bb46b12553db7f8e26cc3f","sha512":"7640950dc312f52735b32ac2703f984636b463e5b1a0d431be008e2d478fdedb70c5cd0b03a2f81d2c88bae7af10118c0b54bbd7e5b669ad2e11a2958bf0e327","ssdeep":"3072:/hV1y+HrO1t7U/KV/d1Ev414EOtsCtJNS63WOVfQzQNt:JPy+H4t7U/KhEvXmOVfQzQNt","tlshash":"5f14e8f67608502951f302a79a718684f833a02b99816884fd1c6d751f78e7f297affc","size":191745,"data":"","first_seen":"2025-11-23T07:50:46.631533Z","last_seen":"2025-11-23T07:50:46.631533Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"8da66cae5fc09ad0ad54710cd4960dbd","sha1":"01ef404d9c252491d6f0cd6900cce145d4b76db1","sha256":"90b1ab53462f9b18c6a0d06704f07055e834c86239bdc87a3708514e9a6b6762","sha512":"5d4f175963755b790e21d7765434cab11676f9d02d4d9fa2885c05dbb2dd665ec871d93e3b7d9f50f79de7ed991f8815f7e6dc1bf82f9b1c70c8d4becf28e953","ssdeep":"","tlshash":"c1b0124b1d0c882f25319c40a552647f0072f0263510caee84b40120dc302cc4420400","size":88,"data":"","first_seen":"2023-03-07T12:02:01Z","last_seen":"2026-05-05T00:58:58.073055Z","times_seen":2427,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"ba2d069a5ce8ce7375ebf3de4090d6ab","sha1":"047efdb45f9ab165220bad539963beafff342c21","sha256":"f9d065cd35e491e424a72fd109f41436dc68807c941b0dac69ef18756b5be44b","sha512":"8f42f09500b77f9a4a064300140e70273f97f89f18fa9916343576c0a585f22f072c75bff915ba21cfcec94719465b509a8d417aba75860b4192627abdcac837","ssdeep":"","tlshash":"10d0a76b0c21b4528a2042e5e067500cc05e980a93d4da6280c794327580bed247d51a","size":232,"data":"","first_seen":"2025-11-19T01:18:40.612848Z","last_seen":"2026-03-15T05:55:43.351877Z","times_seen":337,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"2066fd7785f762defa4309c647717838","sha1":"cc979913963cc4073ce9cbeef4ddfacdd304541f","sha256":"a91c01330e9d777436011362326cb9b2ff0cf8900246f146934993e98192bf44","sha512":"4a2b94de7ef44b4022bc33e945d08204c270e8c326058bd8c263ef7feb57c4147dee9728bd02aa3b78fd3a91c75193b6a8997a6b4a7a443fc1306f5aa9dee862","ssdeep":"","tlshash":"bd8004d453057cf41440c551305d100dfc4500f740f117474441140134145d0300d53f","size":37,"data":"","first_seen":"2025-11-23T07:50:46.633502Z","last_seen":"2025-11-23T21:48:40.830763Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"cdn2.geefap.com/uploads/posts/2018-02/thumbs/375292199_363590515.jpg","fqdn":"cdn2.geefap.com","domain":"geefap.com","tld":"com"},"ip":{"addr":"31.10.5.97","port":443,"asn":207728,"as":"EUROHOSTER Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn2.geefap.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV SSL CA 2","organization":"GoGetSSL"},"validity":{"start":"Tue, 07 Oct 2025 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:E2:65:92:08:22:4C:77:09:5B:C9:25:35:0E:A2:CD:89:EA:8C:7C","sha256":"82:2A:A8:8F:E2:B8:A2:CA:01:FD:DC:F1:C1:AD:8F:F7:85:8D:42:56:12:56:8B:70:B2:FD:44:15:88:B2:59:F4"}}},"request":{"raw":"GET /uploads/posts/2018-02/thumbs/375292199_363590515.jpg HTTP/1.1\r\nHost: cdn2.geefap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 23 Nov 2025 07:49:44 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 30413\r\nLast-Modified: Mon, 12 Feb 2018 03:11:40 GMT\r\nConnection: keep-alive\r\nETag: \"5a8105ec-76cd\"\r\nExpires: Fri, 28 Nov 2025 07:49:44 GMT\r\nCache-Control: max-age=432000\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30413,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 300x420, components 3","md5":"6d295634700c308aeb88b6cf2851e1c8","sha1":"ce8a809fc8c102df62efc49555e1252767c68806","sha256":"25c6b2a497d337c1b5dcca5481344b6989950c897626f522845d38c072884b3a","sha512":"aeb4602df9cf037b1895b1dc0d5ec835ee47963224bd954c4e91798784ee7519a996ee66a4b706302ef711aa03b0c6ec48790a85016d9b8ef77a769e8dc31260","ssdeep":"768:DCFyxCgnok8bBCx6LpDBIohQNzOSRoQ94SERgV:DCcCgnQncfoQiSwgV","tlshash":"75d2e1f91a48f5c17e0fe05554603eb1aac9d7032e6c12991fcc8633a6f2b46f8921ec","first_seen":"2025-04-24T14:39:22.516465Z","last_seen":"2026-01-16T01:24:57.86296Z","times_seen":42,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":371,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w780/5HSuQu9MWCN5AGKr708Oac7bZo0.jpg","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:45.310Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /t/p/w780/5HSuQu9MWCN5AGKr708Oac7bZo0.jpg HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":1362,"timings":{"blocked":1359,"dns":3,"connect":136,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn5-thumbs.motherlessmedia.com/thumbs/1B48054.jpg","fqdn":"cdn5-thumbs.motherlessmedia.com","domain":"motherlessmedia.com","tld":"com"},"ip":{"addr":"185.107.92.224","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.motherlessmedia.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV SSL CA 2","organization":"GoGetSSL"},"validity":{"start":"Mon, 03 Nov 2025 00:00:00 GMT","end":"Tue, 22 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1C:9C:A7:64:1D:50:C4:66:FC:B5:AE:9C:CB:DF:AC:1E:1F:4B:A0:83","sha256":"FD:6F:CF:79:47:AA:EF:54:72:2A:60:E2:1B:57:6B:D6:33:60:E2:67:DA:83:68:95:02:34:5B:66:53:45:A1:0E"}}},"request":{"raw":"GET /thumbs/1B48054.jpg HTTP/1.1\r\nHost: cdn5-thumbs.motherlessmedia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: openresty/1.21.4.1\r\ndate: Sun, 23 Nov 2025 07:49:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24609\r\nvary: x-s-token\r\nlast-modified: Tue, 02 Oct 2018 13:52:53 GMT\r\netag: \"6021-5773f3d0133df\"\r\nx-cache: HIT\r\nx-whom: cdn07\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.21.4.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24609,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 640x480, components 3","md5":"c765c9cb922e7e7ab4215417be0e3bc3","sha1":"94fe058a531285c0a892d63045e33682db40e2b8","sha256":"11609c96e3ba762ab376ddf2c2677882ddbb4a4a21c90a8c4f973a3a72b0c8c8","sha512":"c5318785621abba48a81c298b8b5966685aa3e97c74c7fbff99a695bc9dc515d3c05df4a2c60d90d56e32d782c0773fd75396ce4704017b77185990e44828763","ssdeep":"384:IL4QGL+piXZpzCwxfmnPnF9BRYve7AvX6D6HkSbp1aDYT8O4a:IkPL+pippev1R4e7AyeHFp1asca","tlshash":"ceb2e169ba43f141daffb174017a218207029933a6e6904eca2ddbc35bf1bc5d7950e5","first_seen":"2024-04-29T17:54:50Z","last_seen":"2026-03-03T08:08:10.188436Z","times_seen":59,"resource_available":false,"data":null}},"time_used":2466,"timings":{"blocked":2409,"dns":0,"connect":0,"send":0,"wait":56,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sexetag.com/thumbs/65/65179/player.jpg","fqdn":"www.sexetag.com","domain":"sexetag.com","tld":"com"},"ip":{"addr":"104.26.4.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sexetag.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Nov 2025 02:36:36 GMT","end":"Mon, 02 Feb 2026 03:32:53 GMT"},"fingerprint":{"sha1":"17:7D:76:57:47:18:83:B2:DB:65:5F:FA:DA:B7:95:62:BF:C2:36:8B","sha256":"A8:E0:0E:01:DC:F2:5D:49:91:99:11:7B:70:EA:62:14:75:51:C7:DB:8D:AA:79:89:84:E1:7C:19:98:15:22:21"}}},"request":{"raw":"GET /thumbs/65/65179/player.jpg HTTP/1.1\r\nHost: www.sexetag.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 59465\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pKZKoJOIBjEN5qWE0rTnqWfrE87Q3sOtQ7CEEzBhBL%2B3hHRAzu%2Bib%2F9Q4198DSPuGbsPQmEDT7fZBxT1dfdU5RqVKgEPJwCeMPuHow%3D%3D\"}]}\r\ncache-control: max-age=3888000\r\ncf-bgj: imgq:100,h2pri\r\naccept-ranges: bytes\r\ncf-polished: origSize=60870, status=vary_header_present\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"edc6-57903f9b5a022\"\r\nlast-modified: Thu, 25 Oct 2018 02:01:04 GMT\r\nvary: User-Agent, accept-encoding\r\ncf-cache-status: HIT\r\nage: 193132\r\ncf-ray: 9a2f1262dc780afe-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59465,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 938x528, components 3","md5":"62e7c12f1be83bd0c5e48fa7f6b3d89f","sha1":"b022a7da2bbfe002e68aa2972dba6454bf1228c7","sha256":"81a637591b3ffa99155544e38c87780cb58e0c52f7b8336439f7200b3b0eac44","sha512":"69edcd7af42d7a54675cc272bb9cf8af8029586d6d45d2ad0dd89a96f676eb88ff2982f7533f783dad57142b98945b6d15e3521d7256d9c879eee60e73730b03","ssdeep":"1536:NCF084HxK+Cb53zqtUof1AJAwE60zBe7Y+/iWWDTQGEU1SA:XDKLb5DqtUMVVBk3WDURA","tlshash":"2b430260cd0daa4bd06a71cf5733ce26910fe8649b650c602976e0d4b6d3be254ba36f","first_seen":"2024-12-31T15:54:16.128137Z","last_seen":"2025-11-23T07:50:46.515831Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1735,"timings":{"blocked":302,"dns":4,"connect":4,"send":0,"wait":21,"receive":2,"ssl":1386},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fqjpg4.top/upload/vod/20250611-1/e60a30f0baaaec6a09fb31d109373ea6.png","fqdn":"fqjpg4.top","domain":"fqjpg4.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.473Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /upload/vod/20250611-1/e60a30f0baaaec6a09fb31d109373ea6.png HTTP/1.1\r\nHost: fqjpg4.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":1730,"timings":{"blocked":-1,"dns":41,"connect":143,"send":0,"wait":0,"receive":0,"ssl":1525},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"fqjpg4.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mydesii.com/wp-content/uploads/2024/05/Indian-Virgin-Girl-Fucked-By-Uncle.jpg","fqdn":"mydesii.com","domain":"mydesii.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.483Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2024/05/Indian-Virgin-Girl-Fucked-By-Uncle.jpg HTTP/1.1\r\nHost: mydesii.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":2189,"timings":{"blocked":2187,"dns":2,"connect":2,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.petal-stone.com/video/Part_39.jpg","fqdn":"www.petal-stone.com","domain":"petal-stone.com","tld":"com"},"ip":{"addr":"104.21.22.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:45.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"petal-stone.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Nov 2025 11:25:20 GMT","end":"Fri, 30 Jan 2026 12:23:06 GMT"},"fingerprint":{"sha1":"F6:6A:F3:9C:D7:D2:3A:B9:F2:70:5B:41:D7:7D:61:FA:A2:92:40:75","sha256":"3A:24:C0:C6:15:9C:3B:02:04:B3:2E:37:7A:A2:07:24:14:1B:76:56:77:DC:77:C2:69:5D:2E:B5:E1:04:C7:3D"}}},"request":{"raw":"GET /video/Part_39.jpg HTTP/1.1\r\nHost: www.petal-stone.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 59925\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 17 Apr 2014 14:57:04 GMT\r\netag: \"ea15-4f73e3f027000\"\r\naccept-ranges: bytes\r\nage: 3040\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Jpq0qUQSsM1uJXgjQHi8vxt7VLJ6oN8VAy8pvc5pnH8gefEnhjjlntuLzpIZr%2FRtj%2BlId1QkQXx%2Bi7d5WQswvJeskGzxmtWvfQewCstrPxT\"}]}\r\ncf-ray: 9a2f1265cd1a56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59925,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 763x430, components 3","md5":"68f58a43825256e4e938148df13f4c3d","sha1":"968f208d3c5bafab8753d2d5a781c5d767ffa665","sha256":"5a8c9965780388b7f4756b85ee279d372ddd08bca451060a76500790764ca928","sha512":"d7fc15f89e9c89212f2cb9db295cc04c9a2dd9920a0d03f64a1ff1539ff7e69af745ecc0f3a9bfe586e747ed4949990a6ccea08ea3b6b9a5717ffb7e437e4935","ssdeep":"1536:YN7P7pqE9iEsGCtLkzoGEnq4AVzF84TJXC4fM:CzVqimhQ9F8ufM","tlshash":"32430174ea75520b8d1cff8a0ab54ce91b1a7d40d2f01f7ee21ad662fb194e1a05e1cc","first_seen":"2025-06-25T02:57:29.775431Z","last_seen":"2026-01-15T02:36:37.288128Z","times_seen":8,"resource_available":false,"data":null}},"time_used":2926,"timings":{"blocked":1427,"dns":6,"connect":3,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timg216.top/videos/3b7e9517bbb67ca49fb850b78fa6892072c2567f/cover/5_505_259?ih=1","fqdn":"timg216.top","domain":"timg216.top","tld":"top"},"ip":{"addr":"172.66.155.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timg216.top","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 04:28:49 GMT","end":"Wed, 31 Dec 2025 05:27:41 GMT"},"fingerprint":{"sha1":"0A:EF:84:22:E6:0D:56:57:B7:F6:C3:7D:6D:91:EF:17:49:1B:A6:01","sha256":"B5:3B:20:B4:05:8F:49:AA:87:FC:31:5E:8E:7E:0C:C5:77:A9:A2:5E:FA:54:61:41:C2:B4:A3:9D:CA:1B:2B:AA"}}},"request":{"raw":"GET /videos/3b7e9517bbb67ca49fb850b78fa6892072c2567f/cover/5_505_259?ih=1 HTTP/1.1\r\nHost: timg216.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 33874\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Mar 2025 09:26:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"67c6c740-8452\"\r\nexpires: Thu, 13 Nov 2025 17:43:30 GMT\r\ncache-control: public, max-age=31536000, stale-if-error=7200\r\nt-cache: LHIT\r\naccept-ranges: bytes\r\nage: 20377\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EaiCsJXvcwdRyBZFX5GIA%2FSYJyFMqQfoUtnxOYiRcuF09EMJFlkSflwbli2PpM6%2FaAu1lxpt7ZrJfmsxVXtNfESc%2Bf3yheJdCw%3D%3D\"}]}\r\ncf-ray: 9a2f1260cafab505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33874,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc57.107.100\", baseline, precision 8, 505x259, components 3","md5":"ae5c76d82e84c1ecb2185b1e1f616ac5","sha1":"76466b9a9255299abd37ddd61b92d2815cd8705b","sha256":"255a1712d65ad2805c68131f72d4f1f891ee42604a82bbdc2b94ab07b2286d73","sha512":"8145e66020486055bf3b67e6db66ec871e758bbc7fb6c420afe066b988343c8814fc0a6e3b3940158afc61c50c2ac3fe28f39983f27a6cf891bdb00ba5fc248b","ssdeep":"768:eMZ6EMDCeNUudVJbh0VYl1jzP5b2tCwM4lxjgMB13R:em6TbN3VEVYl5P5b2tCwJlx08R","tlshash":"47e2f19c2391d2a158085e74a11d399b9a137fca5894870c3f93cd97f6dc39bed281ce","first_seen":"2025-04-11T22:57:41.382947Z","last_seen":"2026-01-13T23:03:42.651423Z","times_seen":43,"resource_available":false,"data":null}},"time_used":1847,"timings":{"blocked":418,"dns":17,"connect":10,"send":0,"wait":7,"receive":1,"ssl":1376},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"timg216.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"djki.xyz/uploads/posts/2021-07/1627723014_001.jpg","fqdn":"djki.xyz","domain":"djki.xyz","tld":"xyz"},"ip":{"addr":"5.61.58.104","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"djki.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Oct 2025 00:15:46 GMT","end":"Sun, 04 Jan 2026 00:15:45 GMT"},"fingerprint":{"sha1":"4C:58:08:FD:86:5F:BA:13:ED:9D:09:84:A8:A1:37:08:62:A3:F1:A9","sha256":"9D:AA:E6:45:29:6F:A4:D2:44:90:95:D4:44:F4:F7:4B:7C:D7:66:58:D5:FD:5B:F6:FC:DB:2D:1C:5A:F3:0D:25"}}},"request":{"raw":"GET /uploads/posts/2021-07/1627723014_001.jpg HTTP/1.1\r\nHost: djki.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 23 Nov 2025 07:49:46 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 16190\r\nLast-Modified: Thu, 21 Mar 2024 20:38:52 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nETag: \"65fc9adc-3f3e\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nCache-Control: max-age=315360000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16190,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 500x281, components 3","md5":"4636f0115335abed7353e27df7f6320c","sha1":"ba21d91dcc4d3d257f77e27a9abce4950adefcd5","sha256":"78b59c44a224ffd9c20581b891821df5d59954148097cecab65e142efcbd05c2","sha512":"40cb5fd3ece656354691a2d55383e109e578047892313c7129fcab7c5b0144533b2edab562deddafffdc82175c7baa773bf3658a3bab055b9a158aeca37d49b9","ssdeep":"384:JuhQhRFxHalDPD5PYG9LcZ+4nY7kFvxzsmfFs8:JuhQTFxHS5Qy/Gsks8","tlshash":"7272c0ea6aa947ec548a18c71c5e10c3dd2e42a7e5809dd38db043faf9419534cdd6cf","first_seen":"2025-07-02T07:10:22.762894Z","last_seen":"2025-11-23T07:50:46.51788Z","times_seen":5,"resource_available":false,"data":null}},"time_used":2004,"timings":{"blocked":423,"dns":1,"connect":30,"send":0,"wait":67,"receive":0,"ssl":1476},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/optimized/2X/8/81f03e39e064d015735e7058ef88abfc9e2411c1_2_585x1024.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 03:08:59 GMT","end":"Mon, 02 Feb 2026 03:08:58 GMT"},"fingerprint":{"sha1":"E1:A5:18:66:02:A1:30:48:C0:63:B8:0D:A6:A0:6A:4D:49:FB:31:A4","sha256":"F3:EF:EA:51:6F:29:3C:97:1C:9E:B5:C9:DB:69:E9:BE:55:EA:E1:47:AC:EB:1B:EB:A6:2A:5B:B1:74:85:D0:AB"}}},"request":{"raw":"GET /uploads/default/optimized/2X/8/81f03e39e064d015735e7058ef88abfc9e2411c1_2_585x1024.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 07:49:44 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 60031\r\nlast-modified: Tue, 12 Aug 2025 05:15:14 GMT\r\nexpires: Mon, 23 Nov 2026 07:49:44 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":60031,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 585x1024, components 3","md5":"f75e73db9fe9bd2a05b36a7d46a7bbea","sha1":"315058e14d71356b55498a1cb194d44cd19da5bd","sha256":"cd1bd2cc76db43e8ba00d65be20907664e7aa29cc9b484b85490b186067c576a","sha512":"4a04a5664339ea882d7bcfc05ef2a7566d3d1ffc33e329bbbd7e99ba1b38ad8b21e186e22f8a6aea478fb2d8e376caec7e0a626539509ec131a594af94c3b7b8","ssdeep":"1536:x6fyJNmLa7Tc3FlLKEsCqGczf1IwZQ5DfNOM+ExVn:0fyT57IDLTsCEtI/5DfNj+EDn","tlshash":"6043f120890c029f7e794f6d46992e033deff5969b07c644cef13291439ebe6de1890a","first_seen":"2025-10-22T05:41:25.94126Z","last_seen":"2026-01-31T10:39:20.892485Z","times_seen":64,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icdn05.4kpornvideos.tv/24391/1219520_1.jpg","fqdn":"icdn05.4kpornvideos.tv","domain":"4kpornvideos.tv","tld":"tv"},"ip":{"addr":"45.133.44.6","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icdn05.4kpornvideos.tv","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Oct 2025 02:32:58 GMT","end":"Sun, 25 Jan 2026 02:32:57 GMT"},"fingerprint":{"sha1":"B8:0F:7A:C0:15:D4:62:8C:DD:41:EA:7B:26:9A:EE:35:DA:0C:5C:BC","sha256":"F1:6E:D7:9E:83:2C:B7:E9:17:29:7A:78:8E:57:74:A8:0A:F6:F4:67:57:42:05:F6:58:20:83:E1:F1:AB:A3:9A"}}},"request":{"raw":"GET /24391/1219520_1.jpg HTTP/1.1\r\nHost: icdn05.4kpornvideos.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 58297\r\nserver: nginx/1.24.0\r\nx-object-meta-mtime: 1598363936.919189192\r\netag: e2d3fd52b0399b5869a5161b381f3e71\r\nlast-modified: Thu, 03 Nov 2022 20:26:36 GMT\r\nx-timestamp: 1667507195.41685\r\nx-trans-id: tx443871e730b241d08162a-00679021dc\r\nx-openstack-request-id: tx443871e730b241d08162a-00679021dc\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\ncache-control: max-age=2592000\r\nexpires: Tue, 23 Dec 2025 07:49:45 GMT\r\nx-cdn-host-id: ah1004,DS9225\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58297,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x169, components 3","md5":"e2d3fd52b0399b5869a5161b381f3e71","sha1":"f4c507300bb82e3d219957898c2629cd0a148b17","sha256":"f4e6affead845b2f0597dc3acb6b4cc23a52a93962982cd7d2e0f46f46e18fbf","sha512":"3140a916543ea822ba40c44a4f4e333e34327978afff368f08228f06001a05d61cfc2be9e53f978c6a7a7abc795fff55625e0890c0a8aff4306a631c62f804f3","ssdeep":"1536:qarUPsK0blKFdEuiO+jMdVtY0RSKd/4MRPZKETleXk:PoNqlkh+wtHSKVvRoEhD","tlshash":"c64302578618fe78c5467a7d24435728a74490d0c5fa0f2bc622df66eac709fc5ac22f","first_seen":"2024-05-25T01:42:32Z","last_seen":"2026-03-01T16:28:28.580003Z","times_seen":33,"resource_available":false,"data":null}},"time_used":1285,"timings":{"blocked":1213,"dns":0,"connect":0,"send":0,"wait":62,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdig.com/media/videos/tmb/000/029/302/1.jpg","fqdn":"fapdig.com","domain":"fapdig.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:45.338Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /media/videos/tmb/000/029/302/1.jpg HTTP/1.1\r\nHost: fapdig.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":1333,"timings":{"blocked":1331,"dns":2,"connect":1,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naturismv.com/images/junior-miss-pageant-contest-2008-6.jpg","fqdn":"naturismv.com","domain":"naturismv.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:45.181Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/junior-miss-pageant-contest-2008-6.jpg HTTP/1.1\r\nHost: naturismv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mylen-handmade.ru/sexfilme24/wp-content/uploads/2018/01/%E0%B8%8A%E0%B8%AD1.jpg","fqdn":"mylen-handmade.ru","domain":"mylen-handmade.ru","tld":"ru"},"ip":{"addr":"172.67.130.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:45.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mylen-handmade.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Oct 2025 16:09:10 GMT","end":"Sat, 24 Jan 2026 17:07:44 GMT"},"fingerprint":{"sha1":"38:F9:92:68:7B:72:DD:90:60:BA:39:9A:D8:4E:EB:23:CB:7E:97:16","sha256":"F0:9A:04:9E:49:51:B0:EA:45:D4:A2:21:27:AE:95:90:6E:1E:38:2D:AE:AE:F1:15:63:45:D5:A3:D6:D5:26:36"}}},"request":{"raw":"GET /sexfilme24/wp-content/uploads/2018/01/%E0%B8%8A%E0%B8%AD1.jpg HTTP/1.1\r\nHost: mylen-handmade.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:46 GMT\r\ncontent-type: image/jpg\r\ncontent-length: 16876\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 393156\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Tue, 18 Nov 2025 18:37:10 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SpgrL1qGTm2MAHXqINGnk7MXoAeuXww7eyRQyvZfLPNE%2FN%2B44AklcrGiNh5qcj%2BxeDrDVEZ5hz76jViFbK1%2B4mPcnOGbAVbUced45NDz6z8V\"}]}\r\ncf-ray: 9a2f1265f8de8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16876,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x240, components 3","md5":"224d3f7fe8f08a5a3aa8c2d9360929bc","sha1":"d2b3e87fb8e6750cd2d0714e9f26a561b020f142","sha256":"3a483d2a510349fba6cd4e80700f028072472913f62a989e708165c456896cbb","sha512":"7ce314325116183b0bd34b37d45586c1dc61743b0f57954d44d81c10a61830925c5e70ae66f531f648c350d6fa1b1d6174b75571f873b6a173e265cc7b2c1785","ssdeep":"384:NqelTLI2Loe2WJTXO15aqktjVf6iV/cJXGKMqVJIO:NXTLI2Er4f6idKMqVJd","tlshash":"5572d117cbd7bc3cc691543d0ddc44a512c0f846f9568ddac0a436b864be564ff9e88a","first_seen":"2024-06-16T03:37:30Z","last_seen":"2026-01-22T04:57:16.089596Z","times_seen":54,"resource_available":false,"data":null}},"time_used":2999,"timings":{"blocked":1469,"dns":6,"connect":3,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.lvv2.com/images/img/novideo.jpg","fqdn":"img.lvv2.com","domain":"lvv2.com","tld":"com"},"ip":{"addr":"172.67.186.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lvv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 04:37:38 GMT","end":"Sun, 11 Jan 2026 05:35:01 GMT"},"fingerprint":{"sha1":"BB:63:F3:E3:99:BB:F0:7B:02:71:96:16:8A:12:DC:78:E2:36:0C:FF","sha256":"60:28:6D:10:EE:6F:93:C8:3B:7A:2B:61:A4:D7:EE:31:03:47:EF:48:00:C2:6B:86:E2:39:DE:76:E1:BD:5E:F6"}}},"request":{"raw":"GET /images/img/novideo.jpg HTTP/1.1\r\nHost: img.lvv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:44 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12145\r\nserver: cloudflare\r\nlast-modified: Sat, 26 Mar 2022 06:56:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 19 Dec 2025 19:59:24 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nage: 106360\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lVC2duBILxzEkFZLEJ6eUXuX1xqpfyigsgifS4TFKxs9xa%2BtZOXgAvrhcqMcm4EfHlDO8BDG6phmEgGnvskvOEKRJj64SpKDv5Mg8Q%3D%3D\"}]}\r\ncf-ray: 9a2f12563a90a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12145,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 512x286, components 3","md5":"3761d670eff2353eb98ed1f011f07497","sha1":"70c87bbd142ce2b259fac1e95fabb9177c708bc9","sha256":"f2fb652ec55feeac96caf6674941e6736a1fb34298d4882a5144fd184c3a71fb","sha512":"5bc3def889ea0de3277ec3fa3f43595a559069f880c6270050515bea78366bab381c6feea64c7111a054a342184756e462007f90790970323ec2948d5a8081a9","ssdeep":"192:VxaTQ+fbEIwOJZ6S7H0ib6bmhPH2PEL0Y1QentDCPRf4zwktBBp11UktMhS:VE8+zGOW+0ib6buL0YGStDcWPBpME","tlshash":"0942cfacbb8b4785d2e24db2007df1b273a49c4393c166cd97adb877143410be57639a","first_seen":"2025-02-21T07:37:56.318265Z","last_seen":"2026-02-02T16:24:45.385157Z","times_seen":30,"resource_available":false,"data":null}},"time_used":581,"timings":{"blocked":-1,"dns":21,"connect":10,"send":0,"wait":71,"receive":1,"ssl":376},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stickamvids.net/photos/2018/08/10154_0_300.jpg","fqdn":"stickamvids.net","domain":"stickamvids.net","tld":"net"},"ip":{"addr":"176.120.75.27","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stickamvids.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 16:57:17 GMT","end":"Wed, 24 Dec 2025 16:57:16 GMT"},"fingerprint":{"sha1":"D2:71:B6:AD:9A:E3:A7:94:61:10:00:00:11:1F:F6:13:EE:06:62:F2","sha256":"6B:67:31:31:A5:B8:EB:EB:A6:B7:89:2E:24:D5:F6:46:D4:A5:14:A1:5D:CC:28:F8:FA:EC:30:04:BB:46:94:E1"}}},"request":{"raw":"GET /photos/2018/08/10154_0_300.jpg HTTP/1.1\r\nHost: stickamvids.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Sun, 23 Nov 2025 07:49:45 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 7654\r\nLast-Modified: Wed, 14 Feb 2024 13:08:39 GMT\r\nConnection: keep-alive\r\nETag: \"65ccbb57-1de6\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7654,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", progressive, precision 8, 230x172, components 3","md5":"82c048d484eb8b5f689ef43e6f0eff26","sha1":"d8dc0f2792631dd3ccbd053b0a2d69b94ed1f484","sha256":"cd54b0be3add71fe198435d88a5a7b2f5ba00c07c348c2cfec19badf2a3d2f2a","sha512":"f20f086b4c086069b69ef9500a7795bcd3d7b41bb1563e0ab9e91a9e9e52f139c782a183f43a8924a589aa23e546dff835c3b893ed552c7d8774caedab5f06bd","ssdeep":"192:LkrlVdePUKiY+oEYIjOwqnAEs+5+PSN/uu/SpQGNR/TmD:LkRP8ifoEDOwqnq+5n5uuapRpTo","tlshash":"68f17d6837d3526dfb2f0bba681c6445bf808df164146be062875086a9f53d2a9a33d1","first_seen":"2024-10-22T11:16:37.256689Z","last_seen":"2026-01-24T20:33:37.504414Z","times_seen":19,"resource_available":false,"data":null}},"time_used":1749,"timings":{"blocked":-1,"dns":10,"connect":187,"send":0,"wait":100,"receive":0,"ssl":1437},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1259667713.vod2.myqcloud.com/1b256558vodtranshk1259667713/4a30fb7d1397757909700857758/sampleSnapshot/sampleSnapshot_20196_3.jpg","fqdn":"1259667713.vod2.myqcloud.com","domain":"myqcloud.com","tld":"com"},"ip":{"addr":"43.175.37.140","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vod.myqcloud.com","organization":"Tencent Technology (Shenzhen) Company Limited"},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Fri, 04 Jul 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EA:9E:D0:98:B7:67:96:6A:C2:B2:9E:EE:64:AB:E0:97:95:8D:D4:6F","sha256":"F6:E7:E1:91:5B:A5:46:62:73:A0:43:2A:E4:B9:F8:41:E1:4E:9B:86:D8:39:7B:36:BA:33:BB:27:72:D7:1C:C8"}}},"request":{"raw":"GET /1b256558vodtranshk1259667713/4a30fb7d1397757909700857758/sampleSnapshot/sampleSnapshot_20196_3.jpg HTTP/1.1\r\nHost: 1259667713.vod2.myqcloud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":2616,"timings":{"blocked":326,"dns":229,"connect":30,"send":0,"wait":87,"receive":2,"ssl":1919},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sex-studentki.live/images/6207_screen.webp?0","fqdn":"sex-studentki.live","domain":"sex-studentki.live","tld":"live"},"ip":{"addr":"104.20.23.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sex-studentki.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 20:47:56 GMT","end":"Fri, 26 Dec 2025 21:45:00 GMT"},"fingerprint":{"sha1":"5D:B0:C3:42:4B:2A:B2:57:09:62:9D:46:FF:AE:66:52:21:C9:FE:1F","sha256":"83:7D:76:B8:4B:F4:BF:80:6E:F7:DF:A2:40:A4:B8:0F:89:6F:2C:26:24:65:6E:9A:C3:72:D4:58:2F:13:05:CB"}}},"request":{"raw":"GET /images/6207_screen.webp?0 HTTP/1.1\r\nHost: sex-studentki.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 28758\r\nserver: cloudflare\r\nlast-modified: Sat, 11 Dec 2021 13:45:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"61b4ab94-7056\"\r\nexpires: Thu, 27 Nov 2025 07:11:45 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 261480\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1qbKBWRjm5mLt5zSdz7uehtVXMymZ0zkBGQ0oqMUCgKeFUbnB8BJlxJFnL60QuiIlhEVljEV9nOOWPfiGMAbU1ZvFYPUuiqNwV1iegRD8k3PEA%3D%3D\"}]}\r\ncf-ray: 9a2f12636b5c32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28758,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5b75290238385cfe9f2d1f65bff35912","sha1":"02bcdccfa6009f7af080d3c9d7373767d13bb1d5","sha256":"4ff677538c2d4b11104036323a2d36de969280a60faeddf254130d6a0a8bcb11","sha512":"954baf259ab3a13906c7f7c4bdd3b2a46e93a8ae6de839983ec994504b78d4cbe690ecbe40b163da234c7b00caf0fa948760f5b9dd01b902b81884142a46fec1","ssdeep":"768:ivE3Z1yCi+190P5GkUXzALvehBOEjp+Gur:iIrT9IsALv8j4GC","tlshash":"07d2d0291648c981b5ca0f115129dfba0f51be1ea0e6a0c8117e4ccf1ebf77918d95ab","first_seen":"2025-07-08T01:24:13.075861Z","last_seen":"2026-03-01T16:28:28.665237Z","times_seen":64,"resource_available":false,"data":null}},"time_used":1807,"timings":{"blocked":350,"dns":1,"connect":1,"send":0,"wait":8,"receive":1,"ssl":1438},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1259667713.vod2.myqcloud.com/fa6ac7b2vodtransuse1259667713/2156d77f5145403692888459988/sampleSnapshot/sampleSnapshot_20196_1.jpg","fqdn":"1259667713.vod2.myqcloud.com","domain":"myqcloud.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.372Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /fa6ac7b2vodtransuse1259667713/2156d77f5145403692888459988/sampleSnapshot/sampleSnapshot_20196_1.jpg HTTP/1.1\r\nHost: 1259667713.vod2.myqcloud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":520,"timings":{"blocked":362,"dns":158,"connect":30,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uqetyzxa.com/20221002/vxB4Zamp/1.jpg","fqdn":"uqetyzxa.com","domain":"uqetyzxa.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.483Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /20221002/vxB4Zamp/1.jpg HTTP/1.1\r\nHost: uqetyzxa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":2188,"timings":{"blocked":2185,"dns":3,"connect":171,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e1nn.com/vs/11080902.jpg","fqdn":"e1nn.com","domain":"e1nn.com","tld":"com"},"ip":{"addr":"104.21.6.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e1nn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 08:50:05 GMT","end":"Mon, 09 Feb 2026 09:48:30 GMT"},"fingerprint":{"sha1":"E8:01:86:E2:28:C7:E0:75:A8:83:4E:C3:F5:0F:B0:30:DF:F5:F3:09","sha256":"D9:3B:6B:75:EA:5C:3B:32:F3:56:CA:A2:78:22:6D:8C:75:01:33:10:89:40:33:C8:AF:8D:42:41:AE:D9:EE:4B"}}},"request":{"raw":"GET /vs/11080902.jpg HTTP/1.1\r\nHost: e1nn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 37599\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 08 Oct 2019 19:34:50 GMT\r\netag: \"5d9ce4da-92df\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-cache-status: HIT, HIT\r\naccept-ranges: bytes\r\nage: 90021\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RZviuAPrEFVsSH%2FCRZE7OFCZc0VKAWLcgETEh8UBrlxTfklCrG3qxPI4hGMaY%2B2R%2Bs8Eh%2BtoW1MDLVjrg0CXiICZbM3R5A%3D%3D\"}]}\r\ncf-ray: 9a2f125e7959b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37599,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 720x480, components 3","md5":"c126a8ddba07e149a66b56c327d94db3","sha1":"6fa60dfb06ada101fbe7882218b511b4d29bacd5","sha256":"3fe6239cb10efc8e41b9754b64a2cc51308d8367379a726b18e76c49c6b0d336","sha512":"d8a986f3c87450f717669858c9c080b17eec62e8ab7d76baa8cacb3097349571c6ffaa2b9f08c93b1d20343d86e0d48621002509d16bc1bef1ada1c6b949ced5","ssdeep":"768:630V4gikKlRbVJx9ACz5XHPf1kAsClM/IROMxvbxHPOxhtIkKET:63c4gikKlRZJx9zpPfn2/IROMddvOxhZ","tlshash":"d2f2f1954da7810a4d6697b9f101c0d39bb8bb2e63265f62700147cfe9389fdbb04c59","first_seen":"2025-06-30T08:49:08.614725Z","last_seen":"2026-03-01T22:30:17.271273Z","times_seen":25,"resource_available":false,"data":null}},"time_used":1234,"timings":{"blocked":-1,"dns":30,"connect":12,"send":0,"wait":11,"receive":1,"ssl":1167},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.po-kaki-to.com/wp-content/uploads/2022/10/1664600268.jpg","fqdn":"www.po-kaki-to.com","domain":"po-kaki-to.com","tld":"com"},"ip":{"addr":"172.67.144.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"po-kaki-to.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 08:30:35 GMT","end":"Wed, 07 Jan 2026 09:28:52 GMT"},"fingerprint":{"sha1":"46:A0:A7:82:A8:FC:6F:4E:CF:69:F3:2E:E8:AD:ED:95:0F:24:C9:BD","sha256":"F1:E6:5C:0F:67:3A:87:95:FC:DA:25:3B:AD:26:FC:D2:95:E2:7E:D0:42:A7:6B:2C:86:50:CD:5E:13:EA:AF:A7"}}},"request":{"raw":"GET /wp-content/uploads/2022/10/1664600268.jpg HTTP/1.1\r\nHost: www.po-kaki-to.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 54143\r\nserver: cloudflare\r\nlast-modified: Sat, 01 Oct 2022 04:57:48 GMT\r\netag: \"6337c8cc-d37f\"\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nexpires: Thu, 19 Feb 2026 02:25:53 GMT\r\ncache-control: max-age=7776000\r\naccept-ranges: bytes\r\nage: 192230\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xLiDenMdt%2BMio%2FFSFIXwPXEmEkp7q7W7niFeQ46y4tju11Ib2lqOKYWASnzT74T8a5%2B31NaoWmnBX4irOrw3hxO3wVCbkzqkCSMUpbqHYh8%3D\"}]}\r\ncf-ray: 9a2f12529c075688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54143,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 47x47, segment length 16, progressive, precision 8, 800x600, components 3","md5":"44bbd15207e7d161e31f8c5846bc63a8","sha1":"d5aff91ea3978effd0c6eea2f3561fb16ca7e663","sha256":"be6577d2631d2e33116bf14de1f230b762bad914e399c5ea857f835456706d06","sha512":"327c926c769110e08aac446b9b92816e4ef500384d92ee228ff9cb95b5b62d944ffd427fee983e9f411fc6bb5a6c28b19f520fc00cde426c0d996dd8dbf795da","ssdeep":"768:OzmdC0MRZ8CfqAFuQlpsYEt9r03E8fW52wuwxg3L3LcX7SrtTqZX9PQb+M:XERZM+xpsY09l52wlxDiqF9PQ6M","tlshash":"b333f18f59e765c2f978b1f24e336b7777da2f46dccd986a617810b0c27b2e08219241","first_seen":"2025-03-12T03:12:27.415488Z","last_seen":"2026-01-12T17:24:48.702906Z","times_seen":32,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":22,"receive":3,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ansuko.net/wp-content/uploads/2024/06/9424.jpg","fqdn":"ansuko.net","domain":"ansuko.net","tld":"net"},"ip":{"addr":"104.21.54.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ansuko.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 11:42:18 GMT","end":"Tue, 06 Jan 2026 12:39:58 GMT"},"fingerprint":{"sha1":"F5:7A:D2:13:21:CE:EB:03:E2:D6:BE:F2:03:73:1F:55:8F:6B:68:4A","sha256":"4E:51:47:18:74:38:C5:CD:59:59:6B:15:27:21:87:E4:21:5C:E7:A4:96:C3:F6:7A:F3:06:9F:82:BE:6B:3A:65"}}},"request":{"raw":"GET /wp-content/uploads/2024/06/9424.jpg HTTP/1.1\r\nHost: ansuko.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:43 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 98549\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nlast-modified: Sat, 22 Nov 2025 04:27:14 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5bweSfc3MZ9BBa6xAPJGcQTDH%2FEKBUZShVUT8CDykyKgvt4UNdI2cbwyd071w5ZGmeKC5Wuvcq%2FH%2BORegOZr%2FquQOYLrtYwR\"}]}\r\ncf-ray: 9a2f125498f4b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47407,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 615x396, components 3","md5":"292cd46132e92ecdcbcddd3d49f1cba7","sha1":"8059810b7849d4262d5d16a6eeeef21ae5e355c1","sha256":"30d9e472873c77f811449e280e52905ad4a7d04a71a447e462ba5612484f0646","sha512":"b781120362b3c10dedb921b0d4763384664e06cf21de55172a4352276da3b988db169ac0318369ad0bad015c434a734fa5f9bc17e444622a3c5ea2c829b22fff","ssdeep":"768:1OuocXLfnYBQylnTjnf7HtSPv0HJfS7hZ0NIcATWoC/BId95FrxFM6RLCZ/BP1:15LfnYBQKnPfAn0HJS7hZpYL/G7vs/BN","tlshash":"0423f11d3be8e6c1f751ea42e9ab3f6ec3d26cafb941531309f268b0e341d99d485901","first_seen":"2025-11-03T22:08:46.991792Z","last_seen":"2025-11-30T19:19:25.675198Z","times_seen":5,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":11,"connect":17,"send":0,"wait":13,"receive":0,"ssl":221},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p15-kimg.kwai.net/kimg/EKzM1y8qmQEKAnMzEg1waG90by1vdmVyc2VhGoMBdXBpYy8yMDIyLzA4LzI0LzA3L0JNakF5TWpBNE1qUXdOekkzTVRCZk1UVXdNREF3T1RNNE1ESXpOREEzWHpFMU1ERXdNRFl3TlRBM01qRTJNRjh5WHpNPV9vdXVfQmRmMDNmM2Q5MzNlNTUwZDI4ZmJiZDQyMTQyYmNlMjQzLndlYnA.webp","fqdn":"p15-kimg.kwai.net","domain":"kwai.net","tld":"net"},"ip":{"addr":"3.164.230.95","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kwai.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"40:BE:54:57:6D:45:F7:8E:24:1D:98:F1:55:09:C2:AD:15:88:7F:ED","sha256":"78:0A:E5:01:45:63:BC:19:B9:9F:2A:BA:00:FE:22:2E:1B:6E:09:F6:9B:B5:E7:A5:81:A9:03:00:AE:EC:EE:41"}}},"request":{"raw":"GET /kimg/EKzM1y8qmQEKAnMzEg1waG90by1vdmVyc2VhGoMBdXBpYy8yMDIyLzA4LzI0LzA3L0JNakF5TWpBNE1qUXdOekkzTVRCZk1UVXdNREF3T1RNNE1ESXpOREEzWHpFMU1ERXdNRFl3TlRBM01qRTJNRjh5WHpNPV9vdXVfQmRmMDNmM2Q5MzNlNTUwZDI4ZmJiZDQyMTQyYmNlMjQzLndlYnA.webp HTTP/1.1\r\nHost: p15-kimg.kwai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 20478\r\ndate: Wed, 06 Aug 2025 04:28:11 GMT\r\ncache-control: public, max-age=31536000\r\nkrtid: gwd2db5ba68f074f91bafc6ec6fa1ccb94\r\nexpires: Thu, 06 Aug 2026 04:28:11 GMT\r\nvia: 1.1 f7b7cf90592cf6a380fd34cc45e9c4b4.cloudfront.net (CloudFront), 1.1 88ba1d0c348c5f253432165d46a14a82.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: FRA50-C1, ARN53-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: Y1PBzElxPJv3qvTy_DZXwn93V2wLTT5FfSuQjUPQ0OWIuopAi85e2A==\r\nage: 9429694\r\ntiming-allow-origin: *\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":20478,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 322x574, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"457e0e11ee22b047bd91f452ff600670","sha1":"93c4950f6d3f214fdeb3b72735407cc563cf210b","sha256":"f332037f4e102b108cb8455b94ca204515660fe345b96e4659a06c2fe02149c0","sha512":"2537e1d3c028eb1c0f39050b747b14972745a503017fd7f6549ed996eb0fac2355cb9e6a3f6f35d932fc0e1955791a5184ca76d701400c0787c5bd3fc605024f","ssdeep":"384:ZRy9aOsjATA7hKLUhMcQw1qYfMvAq2G+Cd0IRvH+1JQHfBmuBf8yNi:29Lv6hKwJg92xe0R1JgnM","tlshash":"3a92d1f6f2642117b3f386b19710e9cf7e17c4f1e94a284276044814ee66dc51ecae75","first_seen":"2025-07-16T19:19:11.499684Z","last_seen":"2026-01-08T04:21:04.48614Z","times_seen":21,"resource_available":false,"data":null}},"time_used":1715,"timings":{"blocked":276,"dns":11,"connect":11,"send":0,"wait":25,"receive":1,"ssl":1383},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ymlporn1.net/http://img-egc.xvideos-cdn.com/videos/thumbs/ee/b3/85/eeb385800622166f3318e83834c1eb32/eeb385800622166f3318e83834c1eb32.15.jpg","fqdn":"ymlporn1.net","domain":"ymlporn1.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.537Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /http://img-egc.xvideos-cdn.com/videos/thumbs/ee/b3/85/eeb385800622166f3318e83834c1eb32/eeb385800622166f3318e83834c1eb32.15.jpg HTTP/1.1\r\nHost: ymlporn1.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":2134,"timings":{"blocked":2132,"dns":2,"connect":3,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fqjpg4.top/upload/vod/20240914-1/4291b105b07b5998bcdee3ac0f8a3250.jpg","fqdn":"fqjpg4.top","domain":"fqjpg4.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.532Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20240914-1/4291b105b07b5998bcdee3ac0f8a3250.jpg HTTP/1.1\r\nHost: fqjpg4.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":2139,"timings":{"blocked":2137,"dns":2,"connect":170,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"fqjpg4.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.russiaporno.net/types/videohub/images/245772.jpg","fqdn":"www.russiaporno.net","domain":"russiaporno.net","tld":"net"},"ip":{"addr":"78.40.116.26","port":443,"asn":200019,"as":"Alexhost Srl","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"russiaporno.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Nov 2025 02:35:39 GMT","end":"Wed, 18 Feb 2026 02:35:38 GMT"},"fingerprint":{"sha1":"F7:34:D5:B9:5D:3B:F0:9D:C0:A6:2E:2D:B2:D9:86:76:50:EE:8E:72","sha256":"2E:CF:65:C6:E9:E5:87:8C:B2:8F:35:30:51:3F:C0:59:D8:CC:2A:44:D7:DD:D2:80:5A:E2:C9:42:B7:48:B8:DC"}}},"request":{"raw":"GET /types/videohub/images/245772.jpg HTTP/1.1\r\nHost: www.russiaporno.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sun, 23 Nov 2025 07:49:44 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5553\r\nLast-Modified: Sun, 21 Jun 2015 14:31:51 GMT\r\nConnection: keep-alive\r\nETag: \"5586cad7-15b1\"\r\nExpires: Mon, 23 Nov 2026 07:49:44 GMT\r\nCache-Control: max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5553,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: \"Lavc54.23.100\", baseline, precision 8, 180x135, components 3","md5":"366e0f234c80bef807bccc25728d42de","sha1":"9e62939950ad7189e8d91b4f3b3e5f9230553689","sha256":"2cac0afa17934e2681f91471782319f8705e628cdc1854cbf489f3304f44b847","sha512":"96bd6ed88d8d2eb4b1f4849fec15b5bd816c693ce2ce25d56276767cecf23898e85e3ee9598e361c16f9565cd598d76a5459f137e52484ed97f0d18eb5fd167b","ssdeep":"96:Xy/fl4xRkXOPCsY/dcux/1FHCnmd4tlfOp1H5Gk40LNjr0C:el4xOXRzPxtFVd4tAp53jD","tlshash":"b7b18e82594a4ef47b7d6efb53e80c444cf542a1a1042f8a4ef0a148df7a7e7b57c609","first_seen":"2025-01-09T22:20:44.55764Z","last_seen":"2026-03-03T14:10:03.959892Z","times_seen":51,"resource_available":false,"data":null}},"time_used":974,"timings":{"blocked":10,"dns":4,"connect":68,"send":0,"wait":29,"receive":0,"ssl":823},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/original/1X/6fa3cb3bdb4b741c8316d9421132a354ffc4b4cf.png","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 03:08:59 GMT","end":"Mon, 02 Feb 2026 03:08:58 GMT"},"fingerprint":{"sha1":"E1:A5:18:66:02:A1:30:48:C0:63:B8:0D:A6:A0:6A:4D:49:FB:31:A4","sha256":"F3:EF:EA:51:6F:29:3C:97:1C:9E:B5:C9:DB:69:E9:BE:55:EA:E1:47:AC:EB:1B:EB:A6:2A:5B:B1:74:85:D0:AB"}}},"request":{"raw":"GET /uploads/default/original/1X/6fa3cb3bdb4b741c8316d9421132a354ffc4b4cf.png HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 07:49:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 69080\r\nlast-modified: Sat, 12 Apr 2025 21:43:53 GMT\r\nexpires: Mon, 23 Nov 2026 07:49:43 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69080,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 320 x 180, 8-bit/color RGB, non-interlaced","md5":"725456a1e958492e77d7f8495ccadc63","sha1":"6fa3cb3bdb4b741c8316d9421132a354ffc4b4cf","sha256":"ea15b6d75b5699c036a8403488b3be9d9cc19583ca7c372008a3baaca4b6028c","sha512":"016db7eb2e4fb3fca78c6007eef25629f27a51b9b1fa033a27fd0e9e190d019f85bcba22ee77daa615c0559975e612a21ff01c3e93fc36f0b9e1d054c8093e99","ssdeep":"1536:aFFXRIUbxQvEzR4b42pMHSyRlaec5tL3kS9ythf7:ajBI+xQORY1KbRl8B0x9","tlshash":"2c63012c19c50ae195ceb64ff0b89b6a3c1c68ecbadf421dd86d0c46fca64aad315453","first_seen":"2025-08-05T22:57:37.408381Z","last_seen":"2026-01-14T20:42:53.749231Z","times_seen":17,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dojki.biz/screen/!Podrugi_bez_kompleksov_masturbiruyut_dlya_parny!.mp4.jpg","fqdn":"dojki.biz","domain":"dojki.biz","tld":"biz"},"ip":{"addr":"207.180.194.251","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dojki.biz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Nov 2025 05:02:36 GMT","end":"Wed, 18 Feb 2026 05:02:35 GMT"},"fingerprint":{"sha1":"22:05:71:D6:22:39:F2:CC:8B:FD:57:10:50:39:15:90:2F:28:30:B5","sha256":"D6:99:82:B1:6F:F3:81:17:2F:7D:A4:99:6F:63:E8:54:C8:7E:74:AB:21:D7:57:4F:8C:64:C4:2C:38:F1:54:35"}}},"request":{"raw":"GET /screen/!Podrugi_bez_kompleksov_masturbiruyut_dlya_parny!.mp4.jpg HTTP/1.1\r\nHost: dojki.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 23 Nov 2025 07:49:44 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 43246\r\nLast-Modified: Sat, 21 May 2022 08:48:21 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nETag: \"6288a755-a8ee\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nCache-Control: max-age=315360000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43246,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 608x1080, components 3","md5":"9c1569a6835ed44424ae908ca82b1603","sha1":"a9997267e872a63d5e44b6ae261f6c568b2bddd4","sha256":"cc75d70e2a49bf7ff9b9842395210097b9a0e020d21ee2e281abd933a8d33f61","sha512":"36da75fd4c1b62fba5982122677991ac4205f9e04c4ffa8f663b54d7167b318661e90cc3563dd4da4659482b15d50430835acc997121ab80ac7a29b40f6f9048","ssdeep":"768:vEYKMrIQQr2ia3m9LpkfNYZ6AYotIU9E1nlaN2Gu8ND9h6QDnTRxuA0nEEeSfW+p:voMVF3m9LuE6IhK1nvGnuQrdQA4eSfGm","tlshash":"3d13f11c356da841af58e12885637eebfa2136744d5f3f1054e0f02d9d20eb925d9fb8","first_seen":"2024-12-07T03:44:49.524581Z","last_seen":"2026-01-12T17:24:48.642818Z","times_seen":25,"resource_available":false,"data":null}},"time_used":822,"timings":{"blocked":-1,"dns":20,"connect":57,"send":0,"wait":45,"receive":21,"ssl":655},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filmesporno.xxx/wp-content/uploads/2021/08/14-novinhas.jpg","fqdn":"filmesporno.xxx","domain":"filmesporno.xxx","tld":"xxx"},"ip":{"addr":"192.124.249.88","port":443,"asn":30148,"as":"SUCURI-SEC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filmesporno.xxx","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Sat, 27 Sep 2025 21:02:33 GMT","end":"Fri, 26 Dec 2025 21:02:33 GMT"},"fingerprint":{"sha1":"79:48:A5:80:40:A8:B4:15:7C:D2:0D:0F:2C:B5:08:E9:3E:EE:BE:D6","sha256":"A9:F3:AE:04:9D:B1:F4:5B:74:59:06:12:D3:B4:02:6B:07:EA:4D:4A:89:66:35:24:F3:6E:01:CE:15:12:66:41"}}},"request":{"raw":"GET /wp-content/uploads/2021/08/14-novinhas.jpg HTTP/1.1\r\nHost: filmesporno.xxx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:47:10 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22722\r\nx-sucuri-id: 19032\r\netag: \"611f1ee4-58c2\"\r\nversion: MS25102301\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-served-by: filmesporno.xxx\r\nserver: Sucuri/Cloudproxy\r\nx-sucuri-cache: HIT\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Sucuri","description":"Sucuri is a cybersecurity company that provides website security solutions and services.","website":"https://sucuri.net/","common_platform_enumeration":"","icon":"sucuri.svg","categories":["CDN","Security"]}],"data":{"size":22722,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 600x337, components 3","md5":"af51b6f7896fc7d372a01a97181c861a","sha1":"2325cb699690e836439a7e4155dfcc484e080c3d","sha256":"7d422a020831689f1a81a6c839aa98af34f7c1b1ed97b99ff7983bca1506aba8","sha512":"830b40c28431a9d139aa0347e181a484a02304a87cb27901e5c90466d48d6d63f2e0bf6687a4bd98b5bbd0c3c40559934c39923b52ed366c4415658e24a99715","ssdeep":"384:rPoa99Gi1HYiZaRgXTuLR56ko0B+4lYCG2CpXsfzO5CVp1reOBirgK:rPz99eRATuv6kF+4OWMXG2CL1aOBij","tlshash":"a6a2e1df9e00e039c9dd227e5a35989409ef7e0095d5fa23714b33e42b3e1ba32558e1","first_seen":"2024-04-24T08:36:22Z","last_seen":"2026-01-20T15:34:37.831365Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1871,"timings":{"blocked":328,"dns":10,"connect":33,"send":0,"wait":34,"receive":10,"ssl":1440},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timg216.top/videos/190ac1f856a9dff6e48985bf379668d60f6b8455/cover/5_505_259?ih=1","fqdn":"timg216.top","domain":"timg216.top","tld":"top"},"ip":{"addr":"172.66.155.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timg216.top","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 04:28:49 GMT","end":"Wed, 31 Dec 2025 05:27:41 GMT"},"fingerprint":{"sha1":"0A:EF:84:22:E6:0D:56:57:B7:F6:C3:7D:6D:91:EF:17:49:1B:A6:01","sha256":"B5:3B:20:B4:05:8F:49:AA:87:FC:31:5E:8E:7E:0C:C5:77:A9:A2:5E:FA:54:61:41:C2:B4:A3:9D:CA:1B:2B:AA"}}},"request":{"raw":"GET /videos/190ac1f856a9dff6e48985bf379668d60f6b8455/cover/5_505_259?ih=1 HTTP/1.1\r\nHost: timg216.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:46 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 29360\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Mar 2025 09:30:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"67c6c82f-72b0\"\r\nexpires: Tue, 16 Sep 2025 11:18:53 GMT\r\ncache-control: public, max-age=31536000, stale-if-error=7200\r\nt-cache: LHIT\r\naccept-ranges: bytes\r\nage: 2683776\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pd4jkOWRr2Q%2FDiKQZ7lpVvU7%2F6V3Z4p9S8e61n4GhLsuFHWCTROUL2I309rbWxWDu8TcF1HaSygqZ%2BTkUrqaHcQxm1qvTp77IQ%3D%3D\"}]}\r\ncf-ray: 9a2f1263dd1ab505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29360,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc57.107.100\", baseline, precision 8, 505x259, components 3","md5":"a847f92cc4674241bb919be535b7ea2f","sha1":"91d5a9a6f148beefd1b575b4b773bd4905e670a0","sha256":"40dc46808c170d38433ac044dbd54b705d1b7154b7246caf37b38d060f37ff4e","sha512":"9f22770e0dccdc27b3a4b626fb99e67997370cc3de2a937cd31c155f9c6e6a62e7e84bc2a233948b90bc7337fffafb61cc28a5fe827c56ff505555d9c530f551","ssdeep":"768:eEu0JE4IYFO1twaPqUwxIKz3Isr4/PuyoQS7fq8oBXXBXo5MMbZ:eiIYFU3Pqpx7zBr4/Puyod7SlJZwMMl","tlshash":"e4d2d159716a64b2acdc025f123db5cb4a011ba87ba1764c6f3a09b7cb532c3e5358cb","first_seen":"2025-06-02T14:12:55.07548Z","last_seen":"2026-01-21T00:43:43.271945Z","times_seen":70,"resource_available":false,"data":null}},"time_used":1851,"timings":{"blocked":394,"dns":1,"connect":1,"send":0,"wait":8,"receive":1,"ssl":1440},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"timg216.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.av4.cam/","fqdn":"www.av4.cam","domain":"av4.cam","tld":"cam"},"ip":{"addr":"104.21.51.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-23T07:49:42.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"av4.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 04:07:04 GMT","end":"Sat, 10 Jan 2026 05:04:42 GMT"},"fingerprint":{"sha1":"D6:38:0E:09:05:D9:EF:91:D0:F1:4C:A4:33:BB:A0:06:A4:30:65:A8","sha256":"BA:D0:53:BD:83:FB:F8:B6:D0:06:A0:10:1B:52:B2:0F:DC:47:8A:55:A8:BC:A3:6A:73:39:A5:F7:08:0A:68:58"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.av4.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:43 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npdojs-line8: host-www.av4.cam4.194.8.20-myhost-www.av4.cam38.220.248/\r\nphost: www.av4.cam\r\npdojs-line359: notjp--myhost-www.av4.cam-filteron-\r\npdojs-line967: notjp--myhost-www.av4.cam-filteron-/\r\nline1293: URI-/-myhost-www.av4.cam-filteron-\r\nline1430: \r\nline1465: -\r\npdojs-line1520: host-146605\r\npdojs-line1521: host-0\r\npdojs-line1534: ibig--chname--filteron--txtlang--shows-591\r\ncache-control: public, max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=grr686mQmVUAnRkchwTf9ytogMcdBa8ifvebN6xSxGPd3GAr2Z9T%2FqgDHHXCxK5agHeqyH05f%2BUx3mq0v53Th3tshzttsEEKgZXE\"}]}\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Cake\r\nx-proxy-cache-192g-la: HIT\r\nxkey-192la: www./-A-www.av4.cam-www.av4.cam-myzone---yes\r\nx-proxy-cache-g-sg1: HIT\r\nxkey-g-sg1: www./-A-www.av4.cam--my_zone\r\ncf-cache-status: EXPIRED\r\nlast-modified: Sun, 23 Nov 2025 07:49:43 GMT\r\ncontent-encoding: br\r\ncf-ray: 9a2f124cf982b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":180700,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (58609), with CRLF line terminators","md5":"22d68d371b0f9af4411b23620f3cb2a9","sha1":"92c030468d93c76aa0bdb480c08982290e3aaa40","sha256":"d33d7a660e488b94073a244a3b9734236e42a52e63e0643d5f9c30f352422326","sha512":"f56081b5a5c9bc98dbef39703f64c632bb4313073309d2bfb77b2e0d8b8d2dc650e78549b62c5042ed19b56a307acbc5740dda0289883cd99d9acb5cda772184","ssdeep":"1536:TyGYJ/k327sWyLkOPusZVGsbFY8q666d666a666pE6+7bGJ/y+g9jKSzuMWN:Tk8iylPuseK+666d666a666y/NWN","tlshash":"b104b33b9104386b29c341e2f0c652bfe97be21cc6da995cb86e30d173c6e7d95364a4","first_seen":"2025-11-23T07:50:46.53578Z","last_seen":"2025-11-23T07:50:46.53578Z","times_seen":1,"resource_available":false,"data":null}},"time_used":457,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":457,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1259667713.vod2.myqcloud.com/d677a621vodtransth1259667713/3441478a1397757891023612626/sampleSnapshot/sampleSnapshot_20196_1.jpg","fqdn":"1259667713.vod2.myqcloud.com","domain":"myqcloud.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.482Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /d677a621vodtransth1259667713/3441478a1397757891023612626/sampleSnapshot/sampleSnapshot_20196_1.jpg HTTP/1.1\r\nHost: 1259667713.vod2.myqcloud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":2191,"timings":{"blocked":2189,"dns":2,"connect":52,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fqjpg4.top/upload/vod/20250121-1/38630200d4b452f6a4f2ca9fc1ce7ecd.jpg","fqdn":"fqjpg4.top","domain":"fqjpg4.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.495Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20250121-1/38630200d4b452f6a4f2ca9fc1ce7ecd.jpg HTTP/1.1\r\nHost: fqjpg4.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":2175,"timings":{"blocked":2173,"dns":2,"connect":171,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"fqjpg4.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pics.pabporn.com/photos/589/268.jpg","fqdn":"pics.pabporn.com","domain":"pabporn.com","tld":"com"},"ip":{"addr":"104.21.30.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pabporn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 10:27:43 GMT","end":"Tue, 30 Dec 2025 11:24:32 GMT"},"fingerprint":{"sha1":"89:A9:5E:10:81:61:5F:12:5C:E9:1B:E0:71:D5:19:B0:3D:30:5B:08","sha256":"A1:DD:DE:4C:17:99:25:7A:D8:49:52:8E:78:AA:C8:09:49:5D:D4:67:28:86:54:5B:75:DD:32:E1:80:43:00:EA"}}},"request":{"raw":"GET /photos/589/268.jpg HTTP/1.1\r\nHost: pics.pabporn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10163\r\nserver: cloudflare\r\nlast-modified: Tue, 18 Aug 2020 20:47:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"5f3c3e55-27b3\"\r\nexpires: Fri, 28 Nov 2025 04:45:57 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 183827\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AtmYTxkbXvSv8Cgtt2WwW57sqDmcAT196ioDjJzosbv4QvIZdWUYLM6sRtQTj6mrslZu3A5cPZvLusR%2FHo%2F5uAnhWZmshTw0odrKjzxR\"}]}\r\ncf-ray: 9a2f125f883d56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10163,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 300x175, components 3","md5":"1b673537fcab28bfbf1e279c0d149393","sha1":"87bb98a9261f314c36c39a35cfca1e5f328e61ac","sha256":"68379519929ed2f03c264abb0f9f8f08a408ad0971f695d39023e751f7cb2d7b","sha512":"ea0a59f6f8ccf7f7499a7809ed26c47bf3f9aa0c1971f636ed33013407b2bf2e12d2e5d5f62b50d956ca8dcdbb4e2070dc93a287b32c9c71f51ac8ddd30d87e1","ssdeep":"192:Pjd3xCVcKdDQK8SUQchGSApaix4xFevskjdS2sF3dbHfLqh2/gAztPjpZytz/:7VxecU0K8hQcwCJy0r2sldT2WtPjryz/","tlshash":"4122cfae93a75771a5dd25b28b487bd086001251babdcfec1bfdd40e073312a6d81de8","first_seen":"2025-07-10T15:31:53.992675Z","last_seen":"2026-01-20T12:10:26.354507Z","times_seen":35,"resource_available":false,"data":null}},"time_used":1398,"timings":{"blocked":-1,"dns":30,"connect":12,"send":0,"wait":6,"receive":1,"ssl":1324},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filmesporno.xxx/wp-content/uploads/2024/03/colmek-bocil-esde-cff.jpg","fqdn":"filmesporno.xxx","domain":"filmesporno.xxx","tld":"xxx"},"ip":{"addr":"192.124.249.88","port":443,"asn":30148,"as":"SUCURI-SEC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filmesporno.xxx","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Sat, 27 Sep 2025 21:02:33 GMT","end":"Fri, 26 Dec 2025 21:02:33 GMT"},"fingerprint":{"sha1":"79:48:A5:80:40:A8:B4:15:7C:D2:0D:0F:2C:B5:08:E9:3E:EE:BE:D6","sha256":"A9:F3:AE:04:9D:B1:F4:5B:74:59:06:12:D3:B4:02:6B:07:EA:4D:4A:89:66:35:24:F3:6E:01:CE:15:12:66:41"}}},"request":{"raw":"GET /wp-content/uploads/2024/03/colmek-bocil-esde-cff.jpg HTTP/1.1\r\nHost: filmesporno.xxx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:47:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17457\r\nx-sucuri-id: 19032\r\netag: \"66066bf0-4431\"\r\nversion: MS25092703\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-served-by: filmesporno.xxx\r\nserver: Sucuri/Cloudproxy\r\nx-sucuri-cache: HIT\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Sucuri","description":"Sucuri is a cybersecurity company that provides website security solutions and services.","website":"https://sucuri.net/","common_platform_enumeration":"","icon":"sucuri.svg","categories":["CDN","Security"]}],"data":{"size":17457,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100\", progressive, precision 8, 352x198, components 3","md5":"3f24a5bc5f51708ccc510aada0fb6b6a","sha1":"1dbce6fe5518e38433a5f72e52ddf5c2e5bb6b02","sha256":"d0dc744ea843332997f65d05b275596fd97cc8109a1b3f93133516f57ae52cd4","sha512":"7ac79a43ad9bdb291927b61b2b5a0300288c7b7d8d7d0ca3f7961177c6c073be820b83b898948c4b06af1cffcc88f6cca439c1dfce62c0ae355bedae5fcf6f5e","ssdeep":"384:GUD11tnKZSmtka1aCPJFiAfskeEfS7Nw4J6JoYjNQlZrXgR:dLtnKwm2a1TBgAZa7Nw4J6yYjilZrXgR","tlshash":"a672d03b7d29be44e4ed023799a4300ff5c8b87b875c4f8db6116aa8943b88276d1060","first_seen":"2024-12-10T06:27:48.789902Z","last_seen":"2026-03-01T22:32:14.31595Z","times_seen":44,"resource_available":false,"data":null}},"time_used":3051,"timings":{"blocked":1434,"dns":5,"connect":27,"send":0,"wait":36,"receive":23,"ssl":1518},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stickamvids.net/photos/2016/05/9233_0_300.jpg","fqdn":"stickamvids.net","domain":"stickamvids.net","tld":"net"},"ip":{"addr":"176.120.75.27","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stickamvids.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 16:57:17 GMT","end":"Wed, 24 Dec 2025 16:57:16 GMT"},"fingerprint":{"sha1":"D2:71:B6:AD:9A:E3:A7:94:61:10:00:00:11:1F:F6:13:EE:06:62:F2","sha256":"6B:67:31:31:A5:B8:EB:EB:A6:B7:89:2E:24:D5:F6:46:D4:A5:14:A1:5D:CC:28:F8:FA:EC:30:04:BB:46:94:E1"}}},"request":{"raw":"GET /photos/2016/05/9233_0_300.jpg HTTP/1.1\r\nHost: stickamvids.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":2435,"timings":{"blocked":2155,"dns":2,"connect":157,"send":0,"wait":95,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ytimg.com/vi/p-hSORlaaHw/hqdefault.jpg","fqdn":"i.ytimg.com","domain":"ytimg.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.525Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /vi/p-hSORlaaHw/hqdefault.jpg HTTP/1.1\r\nHost: i.ytimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":2147,"timings":{"blocked":2144,"dns":3,"connect":136,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdne-pics.youjizz.com/c/0/c/2/1/c0c21a4c633ca9eeed27c51b0f720a101682947681-29.jpg","fqdn":"cdne-pics.youjizz.com","domain":"youjizz.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:45.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.youjizz.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Dec 2024 00:00:00 GMT","end":"Tue, 06 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:A8:A8:35:DB:C2:7E:35:C3:7E:2A:75:C8:C8:D8:C6:09:86:45:D7","sha256":"B8:B2:2C:F3:DA:14:43:7C:79:64:F3:2C:36:B2:0A:52:EF:A7:AE:C8:FF:5D:57:E2:D1:26:9D:FD:B8:D7:77:B9"}}},"request":{"raw":"GET /c/0/c/2/1/c0c21a4c633ca9eeed27c51b0f720a101682947681-29.jpg HTTP/1.1\r\nHost: cdne-pics.youjizz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.bad.news/images/dm/278ff2abb1c95c8b3890886d34f6f0a3.jpg?secure=BmRx1bWV7yan5bc-xwdpqw==,1734229903","fqdn":"static.bad.news","domain":"bad.news","tld":"news"},"ip":{"addr":"104.26.12.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"323e0cdf.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 11:39:48 GMT","end":"Thu, 25 Dec 2025 12:39:44 GMT"},"fingerprint":{"sha1":"E2:E7:D4:63:E3:68:65:9A:90:D2:DB:8F:EA:7F:17:3D:A9:CF:8A:88","sha256":"5F:22:3E:64:D7:DC:55:D3:E2:7C:AF:7D:83:9A:D0:97:DB:A5:71:24:B7:CC:B5:D1:FC:9D:79:E4:0E:8B:DA:DD"}}},"request":{"raw":"GET /images/dm/278ff2abb1c95c8b3890886d34f6f0a3.jpg?secure=BmRx1bWV7yan5bc-xwdpqw==,1734229903 HTTP/1.1\r\nHost: static.bad.news\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 34709\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncf-bgj: imgq:100,h2pri\r\naccept-ranges: bytes\r\ncf-polished: origSize=36661\r\netag: \"e0b8504b42816cbc60a1511d93d159d3\"\r\nlast-modified: Fri, 13 Dec 2024 23:06:45 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kW3eupiy49TJ33beHgyOIabTQY8khH2EJYBsRFTto12dtc1kDhxCa5bvPyIjaEvdBlSD63%2FMUdEcB2NXhDjpzsdm8Fy4WFEiDdcamf6P\"}]}\r\nage: 5551\r\ncache-control: max-age=31536000\r\ncf-ray: 9a2f12548c69c759-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34709,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x360, components 3","md5":"3045d20e1d4ef698e2aadcfeef09c9a5","sha1":"9fa63ac3dbabd62e7f96fd297900d260ba0b4feb","sha256":"063a04bff9546d539a778243123417019daed96654bfce1a1927c759751f5c0d","sha512":"f2803e3709a5e8a2209b560213aed17a7868e1261f0dc7d3dcb99c2afff7612dfa6905cc668a92b8a8d5118fe03f2f6011cbcb7bb4a63698faea8dba803dfb05","ssdeep":"768:Whpm1B8/X9A3UqTDxMu8IPq5Z8FYMppPaRlgcq8gv:eI1B8f9EUa2aq5ZgYMXPaR65","tlshash":"9ef2e15799257c85eeb775ac530959804b2b1b445221cb3eb4de3edc0ceeab1aa03f10","first_seen":"2025-05-21T07:12:06.567291Z","last_seen":"2026-03-02T16:55:39.900307Z","times_seen":139,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pussyboy.net/thumb/fantastic-teen-with-small-tits-fuck-rough-homemade-sextape.jpg","fqdn":"www.pussyboy.net","domain":"pussyboy.net","tld":"net"},"ip":{"addr":"104.21.95.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pussyboy.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 13:39:51 GMT","end":"Mon, 09 Feb 2026 14:38:38 GMT"},"fingerprint":{"sha1":"04:F6:DF:6F:6D:92:82:53:ED:71:58:5C:A8:C3:0E:E5:2A:C7:72:81","sha256":"94:78:34:52:3C:13:1B:97:5B:8C:06:49:59:D0:6E:0F:E8:63:A4:2D:1E:DB:ED:04:7E:0D:49:65:D7:DF:15:9A"}}},"request":{"raw":"GET /thumb/fantastic-teen-with-small-tits-fuck-rough-homemade-sextape.jpg HTTP/1.1\r\nHost: www.pussyboy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13604\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WWlq1FKvxeJMyMLC%2BT6GhIBJRiVa%2BIE%2FbmK1qEZ4atwQTEm3yS%2BY%2B2QVqTV8Ac2H57CDBL%2BEkTGQTw5QpoDFtx5ROMFzhcVQkzJ6bGq7\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Nov 2025 05:30:38 GMT\r\nlast-modified: Thu, 01 Sep 2022 13:53:40 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 353947\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-ray: 9a2f126278c95693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13604,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85\", progressive, precision 8, 350x200, components 3","md5":"20d8c4561218a840a8fe4b277d29a979","sha1":"fc19a521e9ce2ee855e15646dba137c4f1fafc10","sha256":"e806a96eae52b356decdea67f81b1a6cdc82c633a97fd51811ac37c2fa6dba93","sha512":"7495e14c691b3390137b58e1ce3a766b23746cd6bf4a044c8b432675d2e644ff4723ea0411aa9ed10670aa2ef7f9eda2ea2241281ece03bf79b4bfbc37216c85","ssdeep":"192:JNwAzalnOw4UXVvsCbFXJ4PD+Z3sKpQKu8Zz9uAFNTy2nMvkbegJPNXW4:P1iGdCf4PD+2cGgTyMMsbpX","tlshash":"a052d0a107554b05f50faafa41cf25316f48e08d5f0a1bc7becb7d19eb632919d602c5","first_seen":"2025-10-22T05:41:27.054843Z","last_seen":"2025-11-23T07:50:46.539686Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1785,"timings":{"blocked":345,"dns":2,"connect":15,"send":0,"wait":9,"receive":1,"ssl":1398},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn5-thumbs.motherlessmedia.com/thumbs/6A9CD3C-small-7.jpg","fqdn":"cdn5-thumbs.motherlessmedia.com","domain":"motherlessmedia.com","tld":"com"},"ip":{"addr":"185.107.92.224","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.motherlessmedia.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV SSL CA 2","organization":"GoGetSSL"},"validity":{"start":"Mon, 03 Nov 2025 00:00:00 GMT","end":"Tue, 22 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1C:9C:A7:64:1D:50:C4:66:FC:B5:AE:9C:CB:DF:AC:1E:1F:4B:A0:83","sha256":"FD:6F:CF:79:47:AA:EF:54:72:2A:60:E2:1B:57:6B:D6:33:60:E2:67:DA:83:68:95:02:34:5B:66:53:45:A1:0E"}}},"request":{"raw":"GET /thumbs/6A9CD3C-small-7.jpg HTTP/1.1\r\nHost: cdn5-thumbs.motherlessmedia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: openresty/1.21.4.1\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10742\r\nvary: x-s-token\r\nlast-modified: Wed, 29 Dec 2021 23:07:11 GMT\r\netag: \"29f6-5d450ff718cec\"\r\nx-cache: HIT\r\nx-whom: cdn08\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.21.4.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10742,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3","md5":"8dd84d2a8112106960c90043c108f818","sha1":"5b4e8277fd94c498fc2220b15646e48458c49934","sha256":"4bd0d9f80a90046b3f8ea4ff666310978f7eee87c2d976e2278202a8a397085b","sha512":"13433a2859e1f5362767c6aebc398f9695dd1666a3f3cef308bc1cd7dffa58d5d37eb06a2b9a822719c9f0217555278c49aa68c6a11a7b05da969c8c5ad7dde9","ssdeep":"192:5fZzttx59Z/9m3XTguDsbzHisxGsJoJna8dtvCMf3KZLZE8yOkHMIQIGSzMOg9+T:5fZnH1ajgjzV2xrbfaZa8yZMmGSAY","tlshash":"0c22bf232793ee8ff14d762447625e27c7e4f70e81922e363ec2c9556ee2654480232a","first_seen":"2025-11-09T17:38:07.858135Z","last_seen":"2026-02-06T15:51:51.754678Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1477,"timings":{"blocked":-1,"dns":34,"connect":145,"send":0,"wait":25,"receive":1,"ssl":1197},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdne-pics.youjizz.com/d/8/4/d849edc1862c1ac444f40e58ff96cd8c1607365686-1280-720-1863-h264.mp4-9.jpg","fqdn":"cdne-pics.youjizz.com","domain":"youjizz.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:45.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.youjizz.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Dec 2024 00:00:00 GMT","end":"Tue, 06 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:A8:A8:35:DB:C2:7E:35:C3:7E:2A:75:C8:C8:D8:C6:09:86:45:D7","sha256":"B8:B2:2C:F3:DA:14:43:7C:79:64:F3:2C:36:B2:0A:52:EF:A7:AE:C8:FF:5D:57:E2:D1:26:9D:FD:B8:D7:77:B9"}}},"request":{"raw":"GET /d/8/4/d849edc1862c1ac444f40e58ff96cd8c1607365686-1280-720-1863-h264.mp4-9.jpg HTTP/1.1\r\nHost: cdne-pics.youjizz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":1702,"timings":{"blocked":1656,"dns":46,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fixedjs.4vid.top/av4usimage.png","fqdn":"fixedjs.4vid.top","domain":"4vid.top","tld":"top"},"ip":{"addr":"172.67.181.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4vid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 04:08:57 GMT","end":"Fri, 13 Feb 2026 05:05:33 GMT"},"fingerprint":{"sha1":"99:1F:D8:6E:39:72:6F:D5:11:7F:B0:79:4D:F6:40:0E:A5:37:9F:9A","sha256":"F4:87:3F:1A:B8:E5:52:39:3C:56:29:BB:B7:CD:E0:20:DE:45:F2:30:28:80:C4:8D:AB:CA:AE:DC:24:7C:14:56"}}},"request":{"raw":"GET /av4usimage.png HTTP/1.1\r\nHost: fixedjs.4vid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 2619\r\nserver: cloudflare\r\netag: \"a3b-6437702003080\"\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Cake\r\ncache-control: public, max-age=360000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y8L57JWeTUBAD9qLswBCgGG3acU7YkJ7jnKE3%2FbZFvdOWLuDF9oPVTQ7ct95X371nzxL2Uvsm63f3FUp%2BDfmth73%2F7Dni0D22yBsWQBX\"}]}\r\nage: 98016\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 9a2f12520c7f0b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2619,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 339 x 89, 8-bit/color RGB, non-interlaced","md5":"8267aaadeeeb8c9fa7482f2f9db2d4e3","sha1":"a2ef23d3b5f9d9bb3102c855a8ace072884ba60c","sha256":"998cf9d427c2e322904e89a056ba823b56078fb199b7395883f3eafabaadbea8","sha512":"719215d8ec70b8b36b24277a80e7876be2fa1afe3698c05bbff013b6a2936701f266e694c221756e7306d1a945013986a53e41af0bc90bdd4bbf0dcbe33f7637","ssdeep":"","tlshash":"f5513ccb05b2fdbc657d79976105a79ef3a896c72982b872565c38c14243a0096c1fe1","first_seen":"2025-11-13T21:07:01.541567Z","last_seen":"2026-05-05T00:58:57.944017Z","times_seen":365,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":5,"connect":1,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"fixedjs.4vid.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"timg216.top/videos/e285f3b783c79fc73b21836187a5c1d7600ad9ca/cover/5_505_259?ih=1","fqdn":"timg216.top","domain":"timg216.top","tld":"top"},"ip":{"addr":"172.66.155.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timg216.top","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 04:28:49 GMT","end":"Wed, 31 Dec 2025 05:27:41 GMT"},"fingerprint":{"sha1":"0A:EF:84:22:E6:0D:56:57:B7:F6:C3:7D:6D:91:EF:17:49:1B:A6:01","sha256":"B5:3B:20:B4:05:8F:49:AA:87:FC:31:5E:8E:7E:0C:C5:77:A9:A2:5E:FA:54:61:41:C2:B4:A3:9D:CA:1B:2B:AA"}}},"request":{"raw":"GET /videos/e285f3b783c79fc73b21836187a5c1d7600ad9ca/cover/5_505_259?ih=1 HTTP/1.1\r\nHost: timg216.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 77476\r\nserver: cloudflare\r\nlast-modified: Wed, 12 Mar 2025 14:53:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"67d19ffb-12ea4\"\r\nexpires: Sun, 12 Oct 2025 01:44:13 GMT\r\ncache-control: public, max-age=31536000, stale-if-error=7200\r\nt-cache: LHIT\r\naccept-ranges: bytes\r\nage: 393391\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aqRR4DUhsw6U3VlcY%2F3kHI98ps5xvJ6zLxZHJhhfvW%2FFASlfCTOXewN6I6W8WI25oNS%2BXUxRn4k%2BiFBuamt3w4UMtZRH%2Bx52HA%3D%3D\"}]}\r\ncf-ray: 9a2f12606a95b505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77476,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc57.107.100\", baseline, precision 8, 505x259, components 3","md5":"b84ffb326ce31ee328aea70417c5060d","sha1":"68addb1146d359a73fa33037321ed5833cfa9957","sha256":"0d4b7c286665011ef2974a4513b9daeb58ea650150c32527a1ff20d7ba313cad","sha512":"707cf42bdabd0dcce3972190f04bc6da4b010b1616be91bfc01fc5275edcfee3078e92d6cc87653563539e48dca83b2f2d8097473f294cc88fe2e08d3ec81639","ssdeep":"1536:egRqYeITYeqyFt7cB18e4YwvcYDQLp81CCRfqRr8oRRsFxKM:rFjTCyijCxEUfq2iRsFx5","tlshash":"ef7302b52f718b07cd1180d0857514eaafaf0a35ab141827dbf43584d2ad7b3d2e4eb6","first_seen":"2025-05-21T07:12:06.58688Z","last_seen":"2026-01-24T11:08:05.514876Z","times_seen":87,"resource_available":false,"data":null}},"time_used":1808,"timings":{"blocked":367,"dns":32,"connect":13,"send":0,"wait":15,"receive":2,"ssl":1359},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"timg216.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.2beeg.me/pcz/ba/fa/7f/bafa7ff92ed99eea8c2547f73625c8f2.jpg","fqdn":"cdn.2beeg.me","domain":"2beeg.me","tld":"me"},"ip":{"addr":"172.67.184.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2beeg.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 20:46:54 GMT","end":"Sun, 11 Jan 2026 21:44:35 GMT"},"fingerprint":{"sha1":"4A:7A:CD:2E:E8:26:1B:BC:53:97:00:A6:58:6D:FF:58:81:CA:68:76","sha256":"AA:F6:0E:6D:AB:E4:89:E7:A6:C0:CE:D7:D8:09:21:EB:C6:54:43:E9:A1:6F:F3:01:2D:01:1E:8C:44:65:3D:82"}}},"request":{"raw":"GET /pcz/ba/fa/7f/bafa7ff92ed99eea8c2547f73625c8f2.jpg HTTP/1.1\r\nHost: cdn.2beeg.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6011\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-object-meta-mtime: 1581289449.105888\r\netag: d13cdfabe2e4567c936dc3631d429525\r\nlast-modified: Sun, 09 Feb 2020 23:04:14 GMT\r\nx-timestamp: 1581289453.06612\r\nx-trans-id: tx70258b43b2dd4246b20c3-0066a753b7\r\nx-openstack-request-id: tx70258b43b2dd4246b20c3-0066a753b7\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\ncache-control: max-age=172800\r\nexpires: Tue, 25 Nov 2025 06:04:21 GMT\r\nx-cdn-host-id: ds8140,DS9225\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nage: 6324\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZSUf7AGQ1h7z68z8bKyAFO4C%2ByjVANB%2F8NcWpNwq5Mr9Y8IuZsTSXKnw2jeiBb1V%2BGf2XB1eAWFJWNHB2tBJJX3dpVzGG3rHovXMXQ%3D%3D\"}]}\r\ncf-ray: 9a2f12622b6d75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6011,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 320x180, components 3","md5":"d13cdfabe2e4567c936dc3631d429525","sha1":"9b8df3ae4c6faef8f6a7391d0176b90b6b9ef3ff","sha256":"12c4e564fc49b486884fcc249af5b9fd1bacf74747816a0ad8bc39616f38c639","sha512":"29452e3934487a470e1036fe401cd6cd1782b0d4f75f6c6bfea59bac06acf6a741fe5b90ec40e0e88f7e57ed0e1797bc55406d42f829410f5334bf494c2ca7be","ssdeep":"96:IckZcDlpXHFApkvnyxbKPEBm0KpYGz/JA8EjXeg9BnNN8V5M5Q33Jz1jmxhFIp6q:fDlx+iKDUhJUf9BNW5MO3ZzIDF0l2LM","tlshash":"9fc1bfc7891159d1f8271db9c771dca1b3d2625862834d0f60e068b13748be33947bc2","first_seen":"2024-05-28T00:18:16Z","last_seen":"2026-01-11T15:11:42.442257Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1763,"timings":{"blocked":317,"dns":14,"connect":9,"send":0,"wait":8,"receive":1,"ssl":1410},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pizdauz.cc/files/russkoe_porno/molodaya_russkaya_suchka_trahaetsya_vo_vse_scheli/screen.jpg","fqdn":"pizdauz.cc","domain":"pizdauz.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:45.400Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/russkoe_porno/molodaya_russkaya_suchka_trahaetsya_vo_vse_scheli/screen.jpg HTTP/1.1\r\nHost: pizdauz.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nimg.ws.126.net/?url=http://snapshot.ws.netease.com/v/snapshot/1712/01/FACbT9611/0.jpg\u0026thumbnail=668y375\u0026quality=95\u0026type=jpg","fqdn":"nimg.ws.126.net","domain":"126.net","tld":"net"},"ip":{"addr":"47.246.48.180","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ws.126.net","organization":"NetEase (Hangzhou) Network Co., Ltd"},"issuer":{"commonName":"GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Wed, 12 Nov 2025 00:00:00 GMT","end":"Fri, 11 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:C4:BE:61:05:2D:B2:6D:E8:79:0B:02:57:AF:E9:FF:D3:4A:B1:E3","sha256":"25:CC:DE:0D:D3:79:E7:E7:79:37:AC:C2:37:0B:52:1F:29:F9:9E:10:D9:03:F6:9C:A6:DE:F4:03:BF:F8:0B:01"}}},"request":{"raw":"GET /?url=http://snapshot.ws.netease.com/v/snapshot/1712/01/FACbT9611/0.jpg\u0026thumbnail=668y375\u0026quality=95\u0026type=jpg HTTP/1.1\r\nHost: nimg.ws.126.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: Tengine\r\ncontent-length: 0\r\nlocation: http://snapshot.ws.netease.com/v/snapshot/1712/01/FACbT9611/0.jpg\r\ndate: Wed, 05 Nov 2025 00:45:51 GMT\r\nx-envoy-upstream-service-time: 0\r\nx-horizon-weight: 11\r\nvia: ens-cache38.l2nu20-20[0,12,302-0,H], ens-cache5.l2nu20-20[13,0], ens-cache4.l2hk11[44,44,302-0,M], ens-cache37.l2hk11[45,0], ens-cache2.l2de3[0,0,302-0,H], ens-cache9.l2de3[1,0], ens-cache1.nl3[7,7,302-0,M], ens-cache1.nl3[10,0]\r\nage: 1580635\r\nali-swift-global-savetime: 1762303551\r\nx-cache: MISS TCP_MISS dirn:-2:-2\r\nx-swift-savetime: Sun, 23 Nov 2025 07:49:46 GMT\r\nx-swift-cachetime: 0\r\nx-cache-remote: MISS\r\ncdn-ip: 47.246.48.180\r\ncdn-user-ip: 91.90.42.154\r\ncdn-source: ali\r\ntiming-allow-origin: *\r\neagleid: 2ff6309517638841865906599e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":2857,"timings":{"blocked":-1,"dns":615,"connect":32,"send":0,"wait":51,"receive":7,"ssl":2138},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumb.aporntv.com/thumbs/5/f/2/1/e/5f219b665e55dReal%20Mother%20Daughter%20Incest.mp4/5f219b665e55dReal%20Mother%20Daughter%20Incest.mp4-3.jpg","fqdn":"thumb.aporntv.com","domain":"aporntv.com","tld":"com"},"ip":{"addr":"104.26.1.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aporntv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Oct 2025 20:50:31 GMT","end":"Wed, 14 Jan 2026 20:50:30 GMT"},"fingerprint":{"sha1":"1A:53:66:D8:5B:B7:E8:29:37:40:02:2C:4E:15:FA:CF:D8:50:0C:0D","sha256":"E0:FE:7A:AA:4C:34:05:2A:2C:11:85:67:A0:47:68:FE:F2:FB:27:DF:D4:67:03:5D:AB:5F:DE:E6:91:53:A8:47"}}},"request":{"raw":"GET /thumbs/5/f/2/1/e/5f219b665e55dReal%20Mother%20Daughter%20Incest.mp4/5f219b665e55dReal%20Mother%20Daughter%20Incest.mp4-3.jpg HTTP/1.1\r\nHost: thumb.aporntv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:44 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4444\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=84O7vFOEAW8nq2FaMgK0%2F3JVHOpkiRXrb5I2P7Gg5%2FJJOIvCQX%2BasxDRB3uo4BFo8bOIntKfi5m3oVmFd774RUcov1wweAJj1n%2BTe1CjUVY%3D\"}]}\r\ncache-control: public, max-age=16070400\r\ncf-bgj: imgq:100,h2pri\r\naccept-ranges: bytes\r\ncf-polished: status=not_needed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"5f21eff8-115c\"\r\nexpires: Tue, 25 Nov 2025 03:53:19 GMT\r\nlast-modified: Wed, 29 Jul 2020 21:54:00 GMT\r\ncf-cache-status: HIT\r\nage: 446185\r\nvary: accept-encoding\r\ncf-ray: 9a2f1259688adfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4444,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, baseline, precision 8, 200x150, components 3","md5":"a93bf70b86f6f2a9e51466b875d6a3ae","sha1":"08abe0e6bd699737b1571811127da4b3df36d3c0","sha256":"b8d82f4226ada3448003e4cf90bc0cdf222a948560d3357a2c6a4b48c8d7099b","sha512":"c4a7edcc139e4a382d2aa19048893d23681db2289105c0284ae3b904ebd64bd6ed545396895e4dd0e4ab4d865ebcbf939afca86904a7a86a934d05ef08d641c4","ssdeep":"96:RuLGLJuzUx/ZKk75zurdADeqMf+ZSzI/h/F7iZyx30L6+Fbds2k2DndnY:kupZKk7gdLqMZzIFR3KQ2NDnxY","tlshash":"c2917e323c53a647eae5f4b5aac30127fa49f91487c8fa2110db8b86a0256d98df1349","first_seen":"2025-11-23T07:50:46.544707Z","last_seen":"2026-03-01T19:27:35.422524Z","times_seen":3,"resource_available":false,"data":null}},"time_used":873,"timings":{"blocked":-1,"dns":9,"connect":11,"send":0,"wait":6,"receive":0,"ssl":825},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn5-thumbs.motherlessmedia.com/thumbs/654155E.jpg","fqdn":"cdn5-thumbs.motherlessmedia.com","domain":"motherlessmedia.com","tld":"com"},"ip":{"addr":"185.107.92.224","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.motherlessmedia.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV SSL CA 2","organization":"GoGetSSL"},"validity":{"start":"Mon, 03 Nov 2025 00:00:00 GMT","end":"Tue, 22 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1C:9C:A7:64:1D:50:C4:66:FC:B5:AE:9C:CB:DF:AC:1E:1F:4B:A0:83","sha256":"FD:6F:CF:79:47:AA:EF:54:72:2A:60:E2:1B:57:6B:D6:33:60:E2:67:DA:83:68:95:02:34:5B:66:53:45:A1:0E"}}},"request":{"raw":"GET /thumbs/654155E.jpg HTTP/1.1\r\nHost: cdn5-thumbs.motherlessmedia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: openresty/1.21.4.1\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19368\r\nvary: x-s-token\r\nlast-modified: Thu, 04 Oct 2018 05:50:45 GMT\r\netag: \"4ba8-57760bc705eed\"\r\nx-cache: HIT\r\nx-whom: cdn07\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.21.4.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19368,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 32x27, segment length 16, baseline, precision 8, 640x480, components 3","md5":"bc6be1efdde538cb17889e2171d8580a","sha1":"42f86a0405859be1f3484cf1d27ea03ba11ff757","sha256":"9c31f9e9c0ee707f99be7a93a714d8d8d72c484f62d9f114413011ae24894fce","sha512":"6f607a6713e692f3feb39a717075f68afc45eece66775330a1c4d7d58cd892b8ce7df43e0bd1acfe99717e8bb40d4eeeb691dc00462b2c66608b605162a1d5c5","ssdeep":"384:+a9KfTQKgkXdzgfqyGQDFyeMOwGsLVsLvpntpAbf88VFBlQ3:P9EbgCgfJdDFy/p3cptpABFBq3","tlshash":"6e92c076b40ec93dd5bed8347dab0fa83424247373b8e68d61e7083b614b0c51755ea1","first_seen":"2024-11-08T00:06:42.309222Z","last_seen":"2026-01-16T01:00:02.607493Z","times_seen":28,"resource_available":false,"data":null}},"time_used":1866,"timings":{"blocked":388,"dns":21,"connect":26,"send":0,"wait":28,"receive":9,"ssl":1384},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoobeegnet.z00.monster/scj/thumbs/177/894_with.jpg","fqdn":"zoobeegnet.z00.monster","domain":"z00.monster","tld":"monster"},"ip":{"addr":"148.113.152.129","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoobeegnet.z00.monster","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Oct 2025 04:18:19 GMT","end":"Tue, 30 Dec 2025 04:18:18 GMT"},"fingerprint":{"sha1":"12:D6:A4:6E:47:F3:0F:D0:E9:F4:47:9A:58:D1:4B:CC:7C:3F:83:FD","sha256":"DC:4C:A7:9F:A3:EC:F3:F3:FD:B1:99:FB:DD:7A:F0:7E:6B:E8:88:03:05:B9:14:F6:57:EF:98:68:88:25:2C:2A"}}},"request":{"raw":"GET /scj/thumbs/177/894_with.jpg HTTP/1.1\r\nHost: zoobeegnet.z00.monster\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 07:49:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14726\r\nlast-modified: Fri, 26 Jan 2024 19:52:38 GMT\r\netag: \"65b40d86-3986\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14726,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x71, segment length 16, baseline, precision 8, 320x240, components 3","md5":"2b88e4c020eacfb92bb79822b92b0d10","sha1":"c5c7bb9309b8866364f1ddff736994f6d61813ee","sha256":"a16b18a23efbf44e5ac1de1012ff90e5c1ac0e6935bc7895492c10d83a3ac633","sha512":"afe2bdbb972ee3c1424f8ea8a97acbfbb02ce5d99dae9c410a46d7345ceabbd6652c942fe35a484873c274506d37be7e2a90eb74091c2bb09c5806d1212c12ca","ssdeep":"192:8WyiiwbyQiq28B1fXKHhQSKhdvxhhBJ7lrP8AtMYJpXCJgtK3NVcZPAKnrb:8WCUBv2SfXyhQSeHRxWIclzcZP7nrb","tlshash":"bd62c0df687547c0d90c4aae3c1251c6f72f12b54aabab558fc3490ca722847ee3dc16","first_seen":"2025-06-07T06:19:16.204011Z","last_seen":"2026-03-01T19:27:35.401292Z","times_seen":45,"resource_available":false,"data":null}},"time_used":2284,"timings":{"blocked":300,"dns":4,"connect":105,"send":0,"wait":107,"receive":92,"ssl":1658},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/5f/eb/5d/5feb5d15b0f35011ce3c68e84435a474/5feb5d15b0f35011ce3c68e84435a474.25.jpg","fqdn":"cdn77-pic.xvideos-cdn.com","domain":"xvideos-cdn.com","tld":"com"},"ip":{"addr":"185.76.9.7","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xvideos.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 15 Oct 2025 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3C:93:93:D2:61:40:5B:B9:F9:EB:A2:B0:78:48:57:C0:F2:41:42:42","sha256":"D9:3E:6D:83:C8:0E:74:42:32:A1:4F:A3:9B:CA:3A:9D:E0:D2:60:38:FF:BF:EB:0E:36:AA:3E:41:44:D5:A7:59"}}},"request":{"raw":"GET /videos/thumbs169ll/5f/eb/5d/5feb5d15b0f35011ce3c68e84435a474/5feb5d15b0f35011ce3c68e84435a474.25.jpg HTTP/1.1\r\nHost: cdn77-pic.xvideos-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11812\r\nx-frame-options: sameorigin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Sat, 13 May 2017 03:48:57 GMT\r\ncache-control: max-age=10368000, public\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBuUwJBgH3X9RgAAwBT3/TFQH3YceVAAgBj/Q6jAGB\r\nx-77-nzt-ray: 5451992dac68d2049abc2269f1fe7009\r\nx-accel-expires: @1767906363\r\nx-77-cache: HIT\r\nx-accel-date: 1757538363\r\nx-accel-date-max: 1695324094\r\nx-77-age: 6345823\r\nserver: CDN77-Turbo\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":11812,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 352x198, components 3","md5":"7d102e90bda8d702e962097ab5943925","sha1":"7a334b7449b054c243bac5c238890db6cb051187","sha256":"365669da31538bcec2e8b7a575c25499499bdee6495b718849fe3b0fa5347952","sha512":"99ade2ee90f2dc37f0364fa06b346fca8a7e8e8a4d479dcf848a92e027d30e8b3d9aaa7adf6cc09240d926777ac631dd5504707bdaa05dd084e85092d0311a48","ssdeep":"192:yhbFoN2QnEqNiZHtfN+wJ5QKa08gEBoxsi3xlAPJXfxVf45/bk0f1cmUWb:yhbF07MHVN+e5tlHsmAPJX5x45/B","tlshash":"5a32c03f56528914177ea0c798462ff69ac84f2611f12dc92ad3f5d187304b8fcc859d","first_seen":"2024-12-19T14:13:56.786391Z","last_seen":"2026-01-20T15:34:37.86936Z","times_seen":21,"resource_available":false,"data":null}},"time_used":1823,"timings":{"blocked":343,"dns":4,"connect":16,"send":0,"wait":9,"receive":0,"ssl":1438},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taboodude.com/media/frames/2023-02-11/20635/full_frames_0008.webp","fqdn":"taboodude.com","domain":"taboodude.com","tld":"com"},"ip":{"addr":"172.67.218.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"taboodude.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 11:27:17 GMT","end":"Wed, 28 Jan 2026 12:26:07 GMT"},"fingerprint":{"sha1":"C6:DA:3F:41:D0:5B:E5:90:37:43:AB:01:14:05:E3:DE:1F:73:28:2B","sha256":"BF:1D:EF:5B:54:8D:81:B7:99:80:64:D0:16:5D:AD:B8:FC:23:1E:2D:32:58:A2:F3:92:53:DF:D0:A3:3F:32:62"}}},"request":{"raw":"GET /media/frames/2023-02-11/20635/full_frames_0008.webp HTTP/1.1\r\nHost: taboodude.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21764\r\nserver: cloudflare\r\nlast-modified: Sat, 11 Feb 2023 02:08:24 GMT\r\netag: \"63e6f898-5504\"\r\naccept-ranges: bytes\r\nage: 344\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yRvbj8AI7P%2ByDRwQMikRYztPEAqUQdyjTja4xcXLv95Rmyre0erlbpTEQd9dLzz0pSB2kYXoSD0jGAy9FK1SiaNsZR%2Bq2ogOYk%2Bn\"}]}\r\ncf-ray: 9a2f1260493756b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21764,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 852x480, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f4bbfe1035c9434d7f64b8075f08e606","sha1":"0e1b6c95a18e5795a0074c943e9f470c0a1b2f55","sha256":"ec54edba3d0ab8ee07ceb27988696e5185af842c9bc116910a81f86e1ef5d4e3","sha512":"89c9dcf64afff3f6d26928e24766e1486204d62bd56ce6015f66f7f247a6802f755ec2c9e495dbc98b40c9b08a9a312ea8f668c05cb9ef7b450ae4cec75890ec","ssdeep":"384:/WHehWmYIBYAHa4AQXIRbvM93A+uUO1M4ycQL9Yz7yZw+1qGlx9+iQZfhtbZu:/h8IiIa1UmTM93AIO1LvQLCzGwrZfzb0","tlshash":"21a2e1977722d8a7f72040036e49be6abe9af0c599e0a7295406600da76dd7cc4f312d","first_seen":"2025-11-10T10:21:40.526407Z","last_seen":"2026-01-31T10:39:20.927328Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1148,"timings":{"blocked":1136,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naturismv.com/images/french-birthday-party-part-1-enature-net-russianbare-com.jpg","fqdn":"naturismv.com","domain":"naturismv.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.519Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/french-birthday-party-part-1-enature-net-russianbare-com.jpg HTTP/1.1\r\nHost: naturismv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":2152,"timings":{"blocked":2150,"dns":2,"connect":1,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumb.aporntv.com/thumbs/5/9/9/7/8/5996bbeee094330541/5996bbeee094330541.flv-37b.jpg","fqdn":"thumb.aporntv.com","domain":"aporntv.com","tld":"com"},"ip":{"addr":"104.26.1.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aporntv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Oct 2025 20:50:31 GMT","end":"Wed, 14 Jan 2026 20:50:30 GMT"},"fingerprint":{"sha1":"1A:53:66:D8:5B:B7:E8:29:37:40:02:2C:4E:15:FA:CF:D8:50:0C:0D","sha256":"E0:FE:7A:AA:4C:34:05:2A:2C:11:85:67:A0:47:68:FE:F2:FB:27:DF:D4:67:03:5D:AB:5F:DE:E6:91:53:A8:47"}}},"request":{"raw":"GET /thumbs/5/9/9/7/8/5996bbeee094330541/5996bbeee094330541.flv-37b.jpg HTTP/1.1\r\nHost: thumb.aporntv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20572\r\nserver: cloudflare\r\nlast-modified: Sat, 19 Aug 2017 00:25:53 GMT\r\netag: \"59978591-505c\"\r\nexpires: Fri, 28 Nov 2025 22:12:04 GMT\r\ncache-control: max-age=16070400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5;i,cf-chb=(108;u=5;i=?0)\r\ncf-polished: webp_bigger\r\ncf-bgj: imgq:100,h2pri\r\nage: 121060\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WjnkzSpQA3iIigcpueqm4eDt6pUJSesox6TdY5SSo9zty7TxrF5DL0WkANHfvrwfXm8878cIuQc4872B%2FzWirxpqGDPCz6ZZn86Y%2FlcrXNs%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9a2f125fec0cdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20572,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 670x490, components 3","md5":"fac8643eab737ffd7200e1f78c21cffc","sha1":"ed564f960f7f612840c8ef28d5360f3695c9e6b7","sha256":"31f802112a6589ccfe95ee5236763b8460565b00e4a43011125bb8a9c245149e","sha512":"51ab9a67d7419f923540d338b4e51a2e9c95809b5c2a07c4dbb8f015a0bef8ba80034709ff5439ee65dd527df451c9ecfdb0976560070cea4209d8c873d9433a","ssdeep":"384:HH0jdpKe6vBXfYDCN60YP/xN76iio2Ei3pqasdWHLDHpaH4Bd3s6HQ6JaGu:HHC/ngtfYsIN7fiou8/en0Cd3sUTkGu","tlshash":"1a92f17980319c97cf3216bfdb52603409b49e2a6025fe0b4cb5bb82155bfcce8d865b","first_seen":"2025-05-25T07:14:28.179412Z","last_seen":"2025-12-18T19:07:35.876141Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1827,"timings":{"blocked":399,"dns":19,"connect":22,"send":0,"wait":6,"receive":1,"ssl":1346},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img2.russkoeporno.tv/ruxp/img/9/9258_r2.jpg","fqdn":"img2.russkoeporno.tv","domain":"russkoeporno.tv","tld":"tv"},"ip":{"addr":"172.67.180.196","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"russkoeporno.tv","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 08:15:31 GMT","end":"Mon, 09 Feb 2026 09:13:57 GMT"},"fingerprint":{"sha1":"1C:4F:61:DF:25:96:5A:5E:2E:2E:28:CF:41:9B:AD:26:9B:71:3F:55","sha256":"54:6F:AD:F5:D0:22:36:E9:39:7F:56:8D:0A:28:CE:1C:22:3A:93:47:77:A6:94:3A:8E:63:CB:1C:62:CF:B6:EC"}}},"request":{"raw":"GET /ruxp/img/9/9258_r2.jpg HTTP/1.1\r\nHost: img2.russkoeporno.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14659\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Feb 2025 15:14:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"67aa17d2-3943\"\r\nexpires: Wed, 03 Dec 2025 10:20:01 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccept-ranges: bytes\r\nage: 1718984\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5tS2%2FFMO0TguQU9W5%2Bq%2B5Un2uPVfV6oF%2F%2BAsuGSe1r%2FwtgjLbi8FBX1q8c22QU599Pr9lp0UkUXlHcdTaxBtBq9NKGN76ufY1JY0FGs5MHr2yGqZ\"}]}\r\ncf-ray: 9a2f1262596176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14659,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x224, components 3","md5":"083460558909573a141d88608975a82d","sha1":"9113b4cf0f1a1053e5148d5bc02ae2cb1a51fc22","sha256":"01b11d61f83f557bbc96764e2b70cf500fd29ccab0a281fad852165da92299e5","sha512":"2e02b4fc5d78b5524bed425c94dcae716c1459009021067c2dca06c729ad6a890ec3f03c1360d940cfbae4c353912a89ae337fb4650e34afef8cdf3d627f43ad","ssdeep":"192:/KpyMEe3QGnBGiIa9n2+5W7mMr/7SRhyCRwh16c6LJ+pyDl2d/oJVp916a0THQWN:ypnZQGZ3D5er8yOwh16c6n2Z6ToHBr6k","tlshash":"c462cfdf365a6b4ec0e9e5b2573c8f52fa21b565cbc9cfdc681350887c903226e2061a","first_seen":"2024-04-19T18:14:25Z","last_seen":"2026-01-31T10:39:20.891142Z","times_seen":58,"resource_available":false,"data":null}},"time_used":1791,"timings":{"blocked":337,"dns":6,"connect":3,"send":0,"wait":12,"receive":1,"ssl":1406},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.po-kaki-to.com/wp-content/uploads/2022/02/1644030326.jpg","fqdn":"www.po-kaki-to.com","domain":"po-kaki-to.com","tld":"com"},"ip":{"addr":"172.67.144.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"po-kaki-to.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 08:30:35 GMT","end":"Wed, 07 Jan 2026 09:28:52 GMT"},"fingerprint":{"sha1":"46:A0:A7:82:A8:FC:6F:4E:CF:69:F3:2E:E8:AD:ED:95:0F:24:C9:BD","sha256":"F1:E6:5C:0F:67:3A:87:95:FC:DA:25:3B:AD:26:FC:D2:95:E2:7E:D0:42:A7:6B:2C:86:50:CD:5E:13:EA:AF:A7"}}},"request":{"raw":"GET /wp-content/uploads/2022/02/1644030326.jpg HTTP/1.1\r\nHost: www.po-kaki-to.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 52356\r\nserver: cloudflare\r\nlast-modified: Sat, 05 Feb 2022 03:05:26 GMT\r\netag: \"61fde976-cc84\"\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nexpires: Thu, 19 Feb 2026 02:03:22 GMT\r\ncache-control: max-age=7776000\r\naccept-ranges: bytes\r\nage: 193581\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jxCS756rH4R0nK58Qo%2FGkXUclskT%2FQEX8emOmdKnZCGDugo3k7oMIYhiWxrFZnvbFcCibTGE1s8PEbHt8bPGJuPtliJ%2FIdNLv2dxEmA833M%3D\"}]}\r\ncf-ray: 9a2f12554ddb5688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52356,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, progressive, precision 8, 650x500, components 3","md5":"32bfaf40234c91932ae0700052bfbfa9","sha1":"da154364fefb9cd2fc0bd7a4ae74eddf88c30174","sha256":"b4c85ba31782f842fc507673bdc3d16345c9dcf9ad9ad512fe371bfa6fdc7d14","sha512":"2ce1a9d79500be50f9a1c09f79087b620c87245710da215e02a420abcc7787d88701f96f9b7b0319dbae3468be16a74f8667fd3a26586ba42989f19423206985","ssdeep":"1536:YbG+zuCevHSTXYJJhDhfQ9QUR3VJy6kVgx5A1C/qX:Y7YH95yNRdwC/qX","tlshash":"3e33024d36bad72932286d3d99128235fa8fc8242b4d4d1fd3a47d2785543e26bb7b0c","first_seen":"2025-09-13T05:56:21.970418Z","last_seen":"2026-03-01T22:32:14.175466Z","times_seen":49,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blumpkintube.com/thumbs/166/916_Tight_Teenage.jpg","fqdn":"blumpkintube.com","domain":"blumpkintube.com","tld":"com"},"ip":{"addr":"104.21.79.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blumpkintube.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 16:43:09 GMT","end":"Tue, 06 Jan 2026 17:40:50 GMT"},"fingerprint":{"sha1":"1E:5F:43:D1:62:A9:3B:35:04:2F:A8:7F:C8:C0:55:4E:7C:DE:80:C4","sha256":"DF:89:D0:CE:A3:31:22:68:E9:31:A0:B5:F9:14:C0:4A:DF:2E:12:2E:C1:09:E3:FA:92:B8:02:32:4B:DA:36:A5"}}},"request":{"raw":"GET /thumbs/166/916_Tight_Teenage.jpg HTTP/1.1\r\nHost: blumpkintube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13842\r\nserver: cloudflare\r\nlast-modified: Wed, 26 Aug 2020 13:14:36 GMT\r\netag: \"5f46603c-3612\"\r\nexpires: Thu, 19 Nov 2026 04:44:20 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, no-transform\r\nage: 356725\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B8INrz6QpltEjw9KaGP1mCziv9%2Bw76qDHJ8bTLYS7SkrPDRG2CH%2BHkTmNH5HnLxETe92pTW%2Fw%2BWDwGdhB0UQRp%2FYFOPc4svuLHcx5bI1\"}]}\r\ncf-ray: 9a2f12640e28b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13842,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 312x208, components 3","md5":"d96314f2937285e184ccf305cccb4c59","sha1":"76284a2eafcd552043f0f07a1563ed437e966c89","sha256":"ce546ada704e1f03bf95204139ed7406ab7173891b30914a37aa46bf99ddcde9","sha512":"1fa7c0c302bff1885b71c0b51d463304877e2632ef71fbf5d46bd765ac646ee36479c4408416729a2bf49540ec92438b852d1c25f40118b3b28eeca567c26c14","ssdeep":"384:/soWXLp9Z4w6AENmWNMyz2cFpdNpHPQTI:/soqLrZeN8R7cF7v6I","tlshash":"a052c06c12191cebf6a16ff16b8daf3befc4996244d78caa515e004acd11771ca0780a","first_seen":"2024-12-03T05:34:37.68946Z","last_seen":"2026-01-22T17:07:15.073423Z","times_seen":36,"resource_available":false,"data":null}},"time_used":1877,"timings":{"blocked":400,"dns":2,"connect":1,"send":0,"wait":14,"receive":1,"ssl":1445},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/optimized/2X/b/bff29d3ee653ce9d9538f1d3bfcf47b04b96150d_2_598x1024.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 03:08:59 GMT","end":"Mon, 02 Feb 2026 03:08:58 GMT"},"fingerprint":{"sha1":"E1:A5:18:66:02:A1:30:48:C0:63:B8:0D:A6:A0:6A:4D:49:FB:31:A4","sha256":"F3:EF:EA:51:6F:29:3C:97:1C:9E:B5:C9:DB:69:E9:BE:55:EA:E1:47:AC:EB:1B:EB:A6:2A:5B:B1:74:85:D0:AB"}}},"request":{"raw":"GET /uploads/default/optimized/2X/b/bff29d3ee653ce9d9538f1d3bfcf47b04b96150d_2_598x1024.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 07:49:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 61525\r\nlast-modified: Sun, 24 Aug 2025 01:31:48 GMT\r\nexpires: Mon, 23 Nov 2026 07:49:43 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":61525,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 598x1024, components 3","md5":"676cc58cdf170a2360a803492bdc4021","sha1":"8f739908843859a04ec712a0db6a25ae28ce64d0","sha256":"3bf8ef971cf04b06529d1d3cb68bfff0f2f1e9d0512b790f65cad11eadc0515a","sha512":"da22b6459a44ee24ffd9765f849f72083b0755f194caadf497d763c0ccfd71cebcfec4d367223c45fd2c64aa419826b079b4d73fec0b9e4186f12ba5f9433bc8","ssdeep":"1536:QGj2aW6fhq+EZgQbtGBWvP7Lwl2aOdcRKkyuIstXJGwx/aFAUqemqlB2:Q62X6fhqJVJGBcP70Gdc0kI4Gwx/aGUM","tlshash":"6c53128f07fecce5b5399a5182b6af3db9ef124ca84231c591c439b866ed10eed84170","first_seen":"2025-10-16T15:47:37.689669Z","last_seen":"2026-01-21T08:47:17.58385Z","times_seen":48,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img2.russkoeporno.tv/ruxp/img/1/1002_r2.jpg","fqdn":"img2.russkoeporno.tv","domain":"russkoeporno.tv","tld":"tv"},"ip":{"addr":"172.67.180.196","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"russkoeporno.tv","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 08:15:31 GMT","end":"Mon, 09 Feb 2026 09:13:57 GMT"},"fingerprint":{"sha1":"1C:4F:61:DF:25:96:5A:5E:2E:2E:28:CF:41:9B:AD:26:9B:71:3F:55","sha256":"54:6F:AD:F5:D0:22:36:E9:39:7F:56:8D:0A:28:CE:1C:22:3A:93:47:77:A6:94:3A:8E:63:CB:1C:62:CF:B6:EC"}}},"request":{"raw":"GET /ruxp/img/1/1002_r2.jpg HTTP/1.1\r\nHost: img2.russkoeporno.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16880\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Feb 2025 15:29:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"67aa1b50-41f0\"\r\nexpires: Mon, 22 Dec 2025 02:18:22 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccept-ranges: bytes\r\nage: 106283\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bLPCPOWLkXEByicWvxVuqPaoaXP30PV8HLyy7FDMf%2B2RSj2ovuPBSN5sXQzkgHXoP7J%2BDLYlE8%2Bk7bucKz5NsWxUp4BYRB7V%2FxT%2BAczU9SPCW9PO\"}]}\r\ncf-ray: 9a2f12616f5576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16880,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x224, components 3","md5":"4eff43ebd04b3fd7111bad93e1b5f3a6","sha1":"a13a3106a7ca6bf6ecc2f7ff594b6cedd4ae6f4b","sha256":"97d8a119f7af5aaf17579dd603dd830e65e9e419d808a607e4a569cbdb207019","sha512":"00678119d96b303ea86e1d100ccf99c9a0cec59bf5e5e726b9ee1a42dc86f4b77d54087a9d723f7e18c70abfe2225d9bb19322f9df144bd791c1ed1fedd1667e","ssdeep":"384:KBXcalTEUNlvG31yuNtxJqw5Djqjt05pcrCbz2UnNsEcaZmMvS/xt:aXcUE8SdvxJsocmH2UnEMAn","tlshash":"b472c0493e9eecc1df93deb0eba393e4e7ca56c50280d25c176a038476623a44cc0b59","first_seen":"2024-04-18T20:55:19Z","last_seen":"2026-03-03T08:08:10.194114Z","times_seen":113,"resource_available":false,"data":null}},"time_used":1733,"timings":{"blocked":298,"dns":4,"connect":7,"send":0,"wait":7,"receive":1,"ssl":1401},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"as2.ftcdn.net/v2/jpg/01/69/11/37/1000_F_169113782_Ml4NDNS0tQymYZc5fmRvlfpGVyXSUdlh.jpg","fqdn":"as2.ftcdn.net","domain":"ftcdn.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.556Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /v2/jpg/01/69/11/37/1000_F_169113782_Ml4NDNS0tQymYZc5fmRvlfpGVyXSUdlh.jpg HTTP/1.1\r\nHost: as2.ftcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":2116,"timings":{"blocked":2114,"dns":2,"connect":66,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"erota2.com/files/thumbnail/c4/if/c4ifxs5utjumshuhdclw3rin.jpg","fqdn":"erota2.com","domain":"erota2.com","tld":"com"},"ip":{"addr":"104.26.4.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"erota2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Oct 2025 03:33:06 GMT","end":"Sat, 24 Jan 2026 04:32:41 GMT"},"fingerprint":{"sha1":"7F:AC:30:90:83:E7:CE:2B:4B:0C:3F:A8:2A:50:78:A8:05:D7:0D:99","sha256":"7C:1E:7D:15:D3:B9:F7:03:F4:EC:D2:2D:9B:97:86:C3:3B:0E:4B:24:34:D5:2C:CF:09:36:0D:5D:01:A8:DD:43"}}},"request":{"raw":"GET /files/thumbnail/c4/if/c4ifxs5utjumshuhdclw3rin.jpg HTTP/1.1\r\nHost: erota2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7806\r\nserver: cloudflare\r\nlast-modified: Thu, 25 Mar 2021 05:36:14 GMT\r\netag: \"605c214e-2c9a\"\r\nvary: accept, accept-encoding\r\naccept-ranges: bytes\r\ncache-control: max-age=7200\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1;i=?0,cf-chb=(258;u=3;i=?0 1386;u=5;i=?0 5789;u=6;i=?0)\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: ok\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FyrEKwrDByXyqKzF5gxOIbU7nIeCZQ8mYVeYX7o0TcCpXbNCeks60ENVKohZ5m8Bx7euMG7lwiEBT%2FZO67ifgC6xnnuK79E%3D\"}]}\r\nage: 4229\r\ncf-cache-status: HIT\r\ncf-ray: 9a2f126209ec0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7806,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x169, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2d1e10851a5f675b542be6c072317580","sha1":"fecffe4d64d63ed8846037253d6a15b6aa298797","sha256":"1c3bf3ce9ed9ef61966d2ed11173d72edb31b029f0213bee86779e1250ac7614","sha512":"a33d70161548047283f6d0cc7080a6abf409353ef1f6c18d63ed42796912db14ba4b8819053949ea55cd1ef9c9a591f212fbf76367640e981c59ae9bac1a42cd","ssdeep":"192:NsxIHfKEVQg47+MY8FeQNJqKIJ7uQXt8egTBIcJ/Rju2S:ya/9l2e1DoQXtRgdIK42S","tlshash":"11f1c020b0b1ee252db2b027a2852f821651bfe0fec2f1f186667f510a1ed124f7f244","first_seen":"2025-05-21T07:12:06.527767Z","last_seen":"2026-01-19T21:59:48.109761Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1741,"timings":{"blocked":301,"dns":6,"connect":8,"send":0,"wait":15,"receive":0,"ssl":1405},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img2.gayzyimage.com/image/uploads/e7feb8b2206c0aa1544ef0c0ac165490.png","fqdn":"img2.gayzyimage.com","domain":"gayzyimage.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.617Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /image/uploads/e7feb8b2206c0aa1544ef0c0ac165490.png HTTP/1.1\r\nHost: img2.gayzyimage.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":18,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"img2.gayzyimage.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pornoperso.com/wp-content/uploads/2022/03/follando-con-mi-sobrina-morrita.jpg","fqdn":"pornoperso.com","domain":"pornoperso.com","tld":"com"},"ip":{"addr":"104.21.41.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornoperso.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 13:59:39 GMT","end":"Wed, 14 Jan 2026 14:57:12 GMT"},"fingerprint":{"sha1":"29:72:B8:BE:EB:16:17:AB:56:D1:2C:42:50:1F:A7:7F:38:B4:BA:16","sha256":"93:B0:83:A7:14:75:B0:03:27:01:30:E1:75:EE:9B:65:C7:7B:2C:45:C4:EB:A8:22:2D:2A:D7:B2:7D:E6:11:E4"}}},"request":{"raw":"GET /wp-content/uploads/2022/03/follando-con-mi-sobrina-morrita.jpg HTTP/1.1\r\nHost: pornoperso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:44 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17313\r\nserver: cloudflare\r\nlast-modified: Sat, 26 Mar 2022 11:34:27 GMT\r\netag: \"623efa43-43a1\"\r\nversion: MS25102301\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nx-served-by: pornoperso.com\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ebgk4CXV8HlwBCLaQaIuaDZOKoCsA8%2FW4GUxdl83tfsPEllePqA7nbcYGrQBgAqZ8QzTSsrpl1QKVqdWCjKw4SF%2FhmMKDltejNjOrw%3D%3D\"}]}\r\ncf-ray: 9a2f12596950568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17313,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100\", progressive, precision 8, 600x337, components 3","md5":"56239800d33620883f7b3a39c582ad45","sha1":"868644a55f648e7a78749f15ebb44ac990279cd3","sha256":"8c5ba2d2db8f2db2e233c8e32aac4d636018e7d627b1f3146fa53a46e8bca696","sha512":"086f3207481338dbe841dfd8eae58916d01ec6b1aeb009249fc8c8f294be3bd4468288ebe3c985a2e8ee26d187212392847467688634bf0a27d6b05b0297671a","ssdeep":"384:7cVIYSEEA4M1HcdXVylZNiu+/NEbyRGpBrJ3fvAWSagJ:rA4eHyVIZUuhbnVfv/2","tlshash":"e972cf131bf9039ed2bbeab91fd9a27a93a54e688457ddd841b31844c48f4c84d87b1c","first_seen":"2024-12-10T06:27:48.747125Z","last_seen":"2025-11-23T07:50:46.552972Z","times_seen":21,"resource_available":false,"data":null}},"time_used":1125,"timings":{"blocked":-1,"dns":8,"connect":11,"send":0,"wait":220,"receive":39,"ssl":829},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jsjj.gazo.space/index.php?js=very","fqdn":"jsjj.gazo.space","domain":"gazo.space","tld":"space"},"ip":{"addr":"37.48.77.83","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:45.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gazo.space","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Oct 2025 05:37:08 GMT","end":"Wed, 14 Jan 2026 05:37:07 GMT"},"fingerprint":{"sha1":"42:81:9A:C2:12:76:D2:CD:B1:3B:81:D3:A8:54:DE:A0:E4:93:44:C6","sha256":"62:13:BC:B6:25:04:97:D3:E5:46:00:63:FC:25:8D:3C:FE:B2:8F:AF:89:F2:54:1C:2B:02:01:74:80:F1:3B:3E"}}},"request":{"raw":"GET /index.php?js=very HTTP/1.1\r\nHost: jsjj.gazo.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.av4.cam/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncache-control: max-age=0, private, must-revalidate\r\ncontent-length: 11\r\ndate: Sun, 23 Nov 2025 07:49:46 GMT\r\nlocation: http://ww1.gazo.space\r\nserver: Cowboy\r\nset-cookie: sid=fb1d07a5-c840-11f0-9e20-088893cca29d; path=/; domain=.gazo.space; expires=Fri, 11 Dec 2093 11:03:53 GMT; max-age=2147483647; secure; HttpOnly\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]},{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":1736,"timings":{"blocked":-1,"dns":14,"connect":35,"send":0,"wait":188,"receive":0,"ssl":1496},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"jsjj.gazo.space","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.apian088.sbs/sp/media/videos/tmb/1253/3.jpg","fqdn":"img.apian088.sbs","domain":"apian088.sbs","tld":"sbs"},"ip":{"addr":"172.67.163.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apian088.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 12:00:16 GMT","end":"Sat, 14 Feb 2026 12:44:47 GMT"},"fingerprint":{"sha1":"81:62:5B:8E:F8:D6:89:63:71:73:E3:18:57:53:27:65:B5:AD:00:32","sha256":"1E:DA:15:FE:0A:FF:52:03:D1:A0:EE:60:AD:2A:3A:55:0D:CD:56:3F:75:52:A1:90:E2:E7:70:D3:2A:15:12:5E"}}},"request":{"raw":"GET /sp/media/videos/tmb/1253/3.jpg HTTP/1.1\r\nHost: img.apian088.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14198\r\nserver: cloudflare\r\nlast-modified: Sat, 23 Mar 2024 12:20:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"65fec918-3776\"\r\naccept-ranges: bytes\r\nage: 98551\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7PBjetS0NBAg7EVm04DmPovESSUEyumBXaM9whHqs1Nz6f8OHYCiTrTm0Mk6OsDIuARf3Yd9tUWe1uw0S21ixsdaZ3yaf24D9nYhLzsuPww%3D\"}]}\r\ncf-ray: 9a2f125db8a8c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14198,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 384x214, components 3","md5":"903c43df856b40131c4738b0e4904d49","sha1":"8e47141761c43e2045ee999b4b1004f5962b162f","sha256":"0be5492d9d35283ab2c774532492e212c39059ba40a7c6da78cdb157022c0253","sha512":"11f8d5a01007f5c15bf0d99e578d75baa165848fad8c4809f208d40381f85631497ce1a8cf8ff7aa4e523cbe159a1119f44f981502cc90506cce4f38e523d09e","ssdeep":"384:iE2uId+Oe7RuIKkKrcB1dtFX49toQ8+rIyyN:iXBO7EdkHrWV8+UyS","tlshash":"f452c07b4b3592cbf9140d6291620de0fa8ed5833a895521a7dc7913e3e369d584cc8e","first_seen":"2024-04-26T22:26:49Z","last_seen":"2026-01-20T12:10:26.251759Z","times_seen":38,"resource_available":false,"data":null}},"time_used":1551,"timings":{"blocked":163,"dns":41,"connect":47,"send":0,"wait":25,"receive":1,"ssl":1159},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn1.hotmoza.tv/thumb/b0/55/eb/b055eba55977f455228e8d97428ddbea.jpg","fqdn":"cdn1.hotmoza.tv","domain":"hotmoza.tv","tld":"tv"},"ip":{"addr":"104.21.70.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotmoza.tv","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 17:26:42 GMT","end":"Sun, 18 Jan 2026 18:24:12 GMT"},"fingerprint":{"sha1":"97:87:84:90:04:33:D7:2B:2D:62:4A:94:79:5B:A5:A0:06:A4:36:95","sha256":"E6:C6:55:94:23:61:7D:D3:AC:49:99:8A:0D:38:F8:12:8E:96:5F:0D:3F:E6:1B:CE:EC:1C:AA:49:F0:A5:D0:D2"}}},"request":{"raw":"GET /thumb/b0/55/eb/b055eba55977f455228e8d97428ddbea.jpg HTTP/1.1\r\nHost: cdn1.hotmoza.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9201\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nlast-modified: Sat, 08 Feb 2020 18:32:33 GMT\r\netag: b7308fe6385032ddfe089e67ea3c0b26\r\nx-timestamp: 1581186752.86458\r\nx-object-meta-mtime: 1581186748.901566\r\nx-trans-id: tx0588a54a7fd64a10b31cd-005e648b67\r\nx-openstack-request-id: tx0588a54a7fd64a10b31cd-005e648b67\r\ncache-control: max-age=172800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\nexpires: Mon, 24 Nov 2025 20:37:55 GMT\r\nx-cdn-host-id: ds9225\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nage: 40310\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=04RqYYgYkIFXykGhgt30N0rGWcBtqVy3uFURj8FHcQYIFB%2FqMNx28NUk1iXjon3jYYM8zmmKmpkbcLK1v9EBezsZB34WiTQszwqutfiqTQ%3D%3D\"}]}\r\ncf-ray: 9a2f1262cd9d0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9201,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: \"Lavc56.12.101\", baseline, precision 8, 320x180, components 3","md5":"b7308fe6385032ddfe089e67ea3c0b26","sha1":"a7b1b92a3df02a597dd6ab18fd25bec33acb3000","sha256":"7d8c19aa4d096e58148d5f630a0fadb73e39f48beff7e12db38662840276cc1c","sha512":"e3e87629cb321d667033619dc0fd0309385d0e0388e2dfb02c8388289f43c56f375afe0f956e9b2b301c3d5c0670ecdbf6fe2e4d66a094d7dd185015a4acd334","ssdeep":"192:lzedO5DiFlb2ioINbpBKoyFkphz7uOB8ojEjFGABnVyrSJhHJ+G7r:lzIwiEIVp5dphzas8OwFGApVuOHJ+Gf","tlshash":"dc12af193f0fb6c9fa26467d943c9c14cefa8064b0da51b2b0fb256d463568c9a4be18","first_seen":"2024-08-19T19:45:07.33714Z","last_seen":"2025-11-23T07:50:46.55413Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1792,"timings":{"blocked":339,"dns":9,"connect":12,"send":0,"wait":17,"receive":1,"ssl":1403},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/optimized/2X/d/dd52b90e8917246051a8415f8772ac82e4a9e839_2_576x1024.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 03:08:59 GMT","end":"Mon, 02 Feb 2026 03:08:58 GMT"},"fingerprint":{"sha1":"E1:A5:18:66:02:A1:30:48:C0:63:B8:0D:A6:A0:6A:4D:49:FB:31:A4","sha256":"F3:EF:EA:51:6F:29:3C:97:1C:9E:B5:C9:DB:69:E9:BE:55:EA:E1:47:AC:EB:1B:EB:A6:2A:5B:B1:74:85:D0:AB"}}},"request":{"raw":"GET /uploads/default/optimized/2X/d/dd52b90e8917246051a8415f8772ac82e4a9e839_2_576x1024.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 07:49:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 72180\r\nlast-modified: Sat, 08 Nov 2025 21:48:49 GMT\r\nexpires: Mon, 23 Nov 2026 07:49:43 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":72180,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 576x1024, components 3","md5":"2cec16754eb91fc2891935240401d0a6","sha1":"38545bf61d3bac97da4f8f38ea1fc8d3881a9bf1","sha256":"48f7bbcde4dedce2100101301ba406db46fb769480fcb829d370d906b445d62f","sha512":"bae84c96d554cd50fe4f4a15bc21f5b571aa967579005e3d1cfabdcffb3c1a5bb43fcd35a744cadccb6c7443f60916af21356a2eaf2da1191041805f2737d7df","ssdeep":"1536:Lq8MJ4n8L9/TmRSZOqLAlhVjbODj1UlOFitY10WAgntYiKUWH:KFpTLZmJj6f2QIC10WAg+5UWH","tlshash":"6063128e9a9e70c8b139d67d7f3ba73e856a16227948173d18dd50c4f043c48ebf9990","first_seen":"2025-11-13T04:56:30.301979Z","last_seen":"2025-12-07T01:02:27.100723Z","times_seen":33,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jwplayer.com/v2/media/3oHs3lMD/poster.jpg?width=720","fqdn":"cdn.jwplayer.com","domain":"jwplayer.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:45.294Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /v2/media/3oHs3lMD/poster.jpg?width=720 HTTP/1.1\r\nHost: cdn.jwplayer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.av4.cam/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/original/2X/3/3e127cd23af7d6b6250882f48465ab3ac9d2bde5.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 03:08:59 GMT","end":"Mon, 02 Feb 2026 03:08:58 GMT"},"fingerprint":{"sha1":"E1:A5:18:66:02:A1:30:48:C0:63:B8:0D:A6:A0:6A:4D:49:FB:31:A4","sha256":"F3:EF:EA:51:6F:29:3C:97:1C:9E:B5:C9:DB:69:E9:BE:55:EA:E1:47:AC:EB:1B:EB:A6:2A:5B:B1:74:85:D0:AB"}}},"request":{"raw":"GET /uploads/default/original/2X/3/3e127cd23af7d6b6250882f48465ab3ac9d2bde5.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 07:49:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 56224\r\nlast-modified: Wed, 10 Sep 2025 00:06:50 GMT\r\nexpires: Mon, 23 Nov 2026 07:49:43 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56224,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x848, components 3","md5":"c78cde7dd35ffc35f5d86b5fedeab734","sha1":"3e127cd23af7d6b6250882f48465ab3ac9d2bde5","sha256":"e82eb1549980ce7b34de3951e72a0994c88596a16de35d8ad4828282cba58961","sha512":"093dca15b9f18068bb4c2fe9e171b24621ae836be077b3f1dae4632c6144f0a177c947f2eee55d0d4dfb8c8ee7ae83a94f3637259a2809eabac7c035aff81e70","ssdeep":"1536:KsTxJ1Mh7hisHzjVLiv65Z+zPXZP5vnl1yLla21j:r8PTjMdzPXZP9lAJaej","tlshash":"b443f2b2b601fc463d8013f215fed17716ab90c62c621fa99445fe85fc6ca619fe43a4","first_seen":"2025-11-19T07:30:03.387196Z","last_seen":"2026-03-03T14:10:03.883624Z","times_seen":53,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/optimized/2X/a/a3b3c770d7f063e7dab2010f32b8af74f0fd61da_2_576x1024.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 03:08:59 GMT","end":"Mon, 02 Feb 2026 03:08:58 GMT"},"fingerprint":{"sha1":"E1:A5:18:66:02:A1:30:48:C0:63:B8:0D:A6:A0:6A:4D:49:FB:31:A4","sha256":"F3:EF:EA:51:6F:29:3C:97:1C:9E:B5:C9:DB:69:E9:BE:55:EA:E1:47:AC:EB:1B:EB:A6:2A:5B:B1:74:85:D0:AB"}}},"request":{"raw":"GET /uploads/default/optimized/2X/a/a3b3c770d7f063e7dab2010f32b8af74f0fd61da_2_576x1024.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 07:49:44 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 90442\r\nlast-modified: Wed, 08 Oct 2025 19:10:46 GMT\r\nexpires: Mon, 23 Nov 2026 07:49:44 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":90442,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 576x1024, components 3","md5":"9acf6527b24b5566a91c01292be11271","sha1":"bf892a58d608192af30a79a2cae3b1106979f2e7","sha256":"ce6033c8d634b92315868475f20f22adaf3f16d9bf3461d2475e7916a3b8877b","sha512":"0378569b1e49c7eec9d986dd4f54cd7399ea2073de83462f7ff6daa39a1af67a1cbc277e931a064a826f9100b3b15d6bb71a2da88147a3b9b587eac01a5299e0","ssdeep":"1536:NUDlfsGoOSdrDLL/kOf2KrMXvrdYLtP3NxrPABqclplLc0sM0wvvmDlznhRl:CsLDLL92xvrqLJdxreqqptc0V0w055","tlshash":"2b93022dd1aa2ecbe14de435c64f7838fbe6ea1c00da3df424b1378961a07917958319","first_seen":"2025-10-23T17:25:33.129563Z","last_seen":"2025-11-25T01:16:46.108044Z","times_seen":9,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sorkab.com/wp-content/uploads/2022/01/0000466.jpg","fqdn":"sorkab.com","domain":"sorkab.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.527Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2022/01/0000466.jpg HTTP/1.1\r\nHost: sorkab.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":2144,"timings":{"blocked":2142,"dns":2,"connect":2,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.apian088.sbs/sp/media/videos/tmb/1509/12.jpg","fqdn":"img.apian088.sbs","domain":"apian088.sbs","tld":"sbs"},"ip":{"addr":"172.67.163.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apian088.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 12:00:16 GMT","end":"Sat, 14 Feb 2026 12:44:47 GMT"},"fingerprint":{"sha1":"81:62:5B:8E:F8:D6:89:63:71:73:E3:18:57:53:27:65:B5:AD:00:32","sha256":"1E:DA:15:FE:0A:FF:52:03:D1:A0:EE:60:AD:2A:3A:55:0D:CD:56:3F:75:52:A1:90:E2:E7:70:D3:2A:15:12:5E"}}},"request":{"raw":"GET /sp/media/videos/tmb/1509/12.jpg HTTP/1.1\r\nHost: img.apian088.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11886\r\nserver: cloudflare\r\nlast-modified: Sat, 23 Mar 2024 12:20:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"65fec92b-2e6e\"\r\naccept-ranges: bytes\r\nage: 262910\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DKkWsRVC2Q5ARrkPdkD00%2BWaoNffYxeBSCQneHAcBhuy7i8B5pxs3kFkToeheSaibngU5RAsKK1l3o0c%2F%2FEPww%2FYAI7RFkkBYYWgBCJATWA%3D\"}]}\r\ncf-ray: 9a2f125db8b4c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11886,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 384x214, components 3","md5":"bfce0c55cc4c64ae88a635e183cbade5","sha1":"64660684ed5422ba58d3810bd5fbf2f85276de5e","sha256":"45bc2b8014a00ec8a7c071fae26bbde4c3b40e302e544889fbed6850d91bebe0","sha512":"c85f772cfacf5d7ece06d157232418cc0c605087215ca200313a8a1a95a0d2f59d2ec4bb5199b6a6823e6525d098c5316b02e2cb824e49b786f9d0c69ace7ebe","ssdeep":"192:i6uqFPZ6GiAw32PcP+o6/zdPPRqmmkOVqNuT2MLBBtxh52oBxdC+m5fwO305lqXF:i6tRr1zRRqNkOVqNbML3tX52oBxdC+W7","tlshash":"4632be7c43c16fe07818f175a8728caad7dfa8e141eee85c77cb9506e4a82984b811cd","first_seen":"2024-04-20T22:01:57Z","last_seen":"2026-02-14T16:06:52.935121Z","times_seen":46,"resource_available":false,"data":null}},"time_used":710,"timings":{"blocked":680,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img2.russkoeporno.tv/ruxp/img/1/1166_r2.jpg","fqdn":"img2.russkoeporno.tv","domain":"russkoeporno.tv","tld":"tv"},"ip":{"addr":"172.67.180.196","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"russkoeporno.tv","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 08:15:31 GMT","end":"Mon, 09 Feb 2026 09:13:57 GMT"},"fingerprint":{"sha1":"1C:4F:61:DF:25:96:5A:5E:2E:2E:28:CF:41:9B:AD:26:9B:71:3F:55","sha256":"54:6F:AD:F5:D0:22:36:E9:39:7F:56:8D:0A:28:CE:1C:22:3A:93:47:77:A6:94:3A:8E:63:CB:1C:62:CF:B6:EC"}}},"request":{"raw":"GET /ruxp/img/1/1166_r2.jpg HTTP/1.1\r\nHost: img2.russkoeporno.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16229\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Feb 2025 15:40:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"67aa1df6-3f65\"\r\nexpires: Mon, 22 Dec 2025 02:07:42 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccept-ranges: bytes\r\nage: 106923\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wz7F%2FzIF0CwUMnTXYVompqG7VPsDueTEeJ8OAFuCZb70mZSRyV2wG8%2Fs4hDHOFmyXQN6mjpSOdUmZeUyHkcbY4SEZTNwqNglzlCkJw6PDMr1XT6a\"}]}\r\ncf-ray: 9a2f1262ba3176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16229,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x224, components 3","md5":"81b66d6f2087727d9013ddc673f47480","sha1":"d55a40eba50b04d032f07a9899f22434724ba3e1","sha256":"5650104d9966d2bd79c0763b7786f353c41c8aa7c4761090cf710d9c55709741","sha512":"af712a75d1e86d24ceae1dbc53a2c0159c02bb48666d93607626f70b12706543c13dd2b43be29de77d7f1beaa299603c5205c02242aebb49a4a4660015597737","ssdeep":"384:83B26kn5Nm6PS81BJeKLVk+goeADl9GRnDmqKP+l:sBXk5Nm6PjJtLVk+Xe09wng+l","tlshash":"1a72cfeb35006d15eeb8e270b9671b6f2020e21cbf16e11e1bbd0b425899560bfb359d","first_seen":"2025-06-03T04:10:59.196883Z","last_seen":"2026-01-24T19:30:50.813122Z","times_seen":46,"resource_available":false,"data":null}},"time_used":1789,"timings":{"blocked":349,"dns":11,"connect":9,"send":0,"wait":5,"receive":1,"ssl":1394},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tiam.jp/wp-content/uploads/2015/02/9096-100.jpg","fqdn":"tiam.jp","domain":"tiam.jp","tld":"jp"},"ip":{"addr":"23.27.160.201","port":443,"asn":23338,"as":"ASN-DCS-01","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tiam.jp","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 21:59:29 GMT","end":"Tue, 23 Dec 2025 21:59:28 GMT"},"fingerprint":{"sha1":"36:0A:3F:7A:BA:A5:2D:11:C2:CD:5F:4C:E2:0C:E4:A6:BE:32:37:50","sha256":"B4:E9:49:86:EF:14:30:B8:99:9D:C3:E7:64:28:55:7A:58:0F:58:74:92:E4:4E:28:3B:26:0A:28:5A:5A:84:96"}}},"request":{"raw":"GET /wp-content/uploads/2015/02/9096-100.jpg HTTP/1.1\r\nHost: tiam.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 23 Nov 2025 07:49:45 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 6310\r\nLast-Modified: Mon, 02 Feb 2015 10:41:00 GMT\r\nConnection: keep-alive\r\nETag: \"54cf543c-18a6\"\r\nExpires: Sun, 23 Nov 2025 07:54:45 GMT\r\nCache-Control: max-age=300\r\nX-Frame-Options: SAMEORIGIN\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6310,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 100x100, components 3","md5":"7d35680cb05a7c5e3459f2de3ca02edb","sha1":"52b90e2c52a966c1cc05080430a7bbb3c97ed1c7","sha256":"215d75aa8719c379d9a3197829e892f713428f832f6b747dd17c10fbb9ccca9b","sha512":"3da29b10cdeb1b8d7730a4e27a3ff8a196e8e04d6d3e9ede5bf71e9515c6811e7e79c1344b58b72a233d27fdd26abc96d427d4fbb1e77cbe0215ab1924ca226a","ssdeep":"192:UL9DVC9e9yCB8Vkij8QEfg+9JdkZycG6w:UxVuCfiQQEf798Yzd","tlshash":"2dd18e3759a16d76cae2e231016fc700135f7198c30ff585ba064d0d3caa08f96487ee","first_seen":"2025-09-09T18:47:24.400801Z","last_seen":"2025-11-23T07:50:46.55907Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2092,"timings":{"blocked":-1,"dns":119,"connect":215,"send":0,"wait":173,"receive":0,"ssl":1489},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn5-thumbs.motherlessmedia.com/thumbs/F850CDF.jpg","fqdn":"cdn5-thumbs.motherlessmedia.com","domain":"motherlessmedia.com","tld":"com"},"ip":{"addr":"185.107.92.224","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.motherlessmedia.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV SSL CA 2","organization":"GoGetSSL"},"validity":{"start":"Mon, 03 Nov 2025 00:00:00 GMT","end":"Tue, 22 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1C:9C:A7:64:1D:50:C4:66:FC:B5:AE:9C:CB:DF:AC:1E:1F:4B:A0:83","sha256":"FD:6F:CF:79:47:AA:EF:54:72:2A:60:E2:1B:57:6B:D6:33:60:E2:67:DA:83:68:95:02:34:5B:66:53:45:A1:0E"}}},"request":{"raw":"GET /thumbs/F850CDF.jpg HTTP/1.1\r\nHost: cdn5-thumbs.motherlessmedia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: openresty/1.21.4.1\r\ndate: Sun, 23 Nov 2025 07:49:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 32186\r\nvary: x-s-token\r\nlast-modified: Mon, 08 Oct 2018 02:00:27 GMT\r\netag: \"7dba-577adfc317b97\"\r\nx-cache: HIT\r\nx-whom: cdn05\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.21.4.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32186,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 640x480, components 3","md5":"9b2cd58b5720f4b6c50f970845e0fb87","sha1":"89500bb9ae90c9e5dbbcdc6ec8d1f00e18f226cd","sha256":"4c2ce97d1c9500cfed0475bac42c6dd2939eab482b13d33b5e0427dd6edba89e","sha512":"f9a328fb3d84938010d3d47a42df23886b813c7d66887afac8692d9806791f7139600e8f916ed52d0af4c2a6984b4301369ba411be84bfff3b5f87ae6262fddf","ssdeep":"768:2menGUbYcnSTkAWTopZKoD291TMVJZFkUWsyau6MaY:2rocSYA9t0gTFkfsyfp","tlshash":"aae2e0c171bfd952f75e4e3b05b34d80bef25db84816628d2c2be2a08cde568d8aa411","first_seen":"2025-06-08T07:10:48.281584Z","last_seen":"2025-11-23T07:50:46.560212Z","times_seen":8,"resource_available":false,"data":null}},"time_used":2854,"timings":{"blocked":2798,"dns":0,"connect":0,"send":0,"wait":55,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stickamvids.net/photos/2018/04/9907_0_300.jpg","fqdn":"stickamvids.net","domain":"stickamvids.net","tld":"net"},"ip":{"addr":"176.120.75.27","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stickamvids.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 16:57:17 GMT","end":"Wed, 24 Dec 2025 16:57:16 GMT"},"fingerprint":{"sha1":"D2:71:B6:AD:9A:E3:A7:94:61:10:00:00:11:1F:F6:13:EE:06:62:F2","sha256":"6B:67:31:31:A5:B8:EB:EB:A6:B7:89:2E:24:D5:F6:46:D4:A5:14:A1:5D:CC:28:F8:FA:EC:30:04:BB:46:94:E1"}}},"request":{"raw":"GET /photos/2018/04/9907_0_300.jpg HTTP/1.1\r\nHost: stickamvids.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Sun, 23 Nov 2025 07:49:46 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4467\r\nLast-Modified: Wed, 14 Feb 2024 13:08:39 GMT\r\nConnection: keep-alive\r\nETag: \"65ccbb57-1173\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4467,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", progressive, precision 8, 230x172, components 3","md5":"b42cb18ec5b8d46c0cc0008d2ffceb7e","sha1":"3bf69037a2b4c4f55f59d523a06ee9ceb4d17942","sha256":"59717e9494e2c3a48b6a2f564c52b55d259584898d08daa828feee8f12779f5d","sha512":"9bab5add1461883444e25e999492b664068a7a90b74ec3e5a5a9f0cb69e73772821e3d063b9c2f1d3520052cc670ecc3d9014260a642c5148f7b662742bd851b","ssdeep":"96:LuEiv8P1liClWRHhgZE40GdFV67uFLSymRpUFuwbzXALv:LuEVPCClWp8E40gH678LwXuzQz","tlshash":"66917d4d17468b9cfe8adc3dc9e860512e147503079a7f5834c6291d5f3e6ad64cb0ee","first_seen":"2025-11-23T07:50:46.560979Z","last_seen":"2025-12-02T18:54:01.756066Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2303,"timings":{"blocked":2153,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.dailymail.co.uk/1s/2019/03/14/16/10990304-0-image-a-42_1552580277865.jpg","fqdn":"i.dailymail.co.uk","domain":"dailymail.co.uk","tld":"co.uk"},"ip":{"addr":"2.18.172.250","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dailymail.co.uk","organization":"Associated Newspapers Limited"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Sat, 24 May 2025 00:00:00 GMT","end":"Tue, 26 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F1:EE:A0:E8:EA:F2:ED:1C:6A:AC:0E:BD:56:37:A9:EB:79:5A:E7:6B","sha256":"A1:24:E1:38:B1:6D:B8:2B:F2:B8:20:2A:73:3D:80:50:B7:39:FE:72:EB:3E:BA:D1:41:AF:C3:A9:8B:EF:03:A3"}}},"request":{"raw":"GET /1s/2019/03/14/16/10990304-0-image-a-42_1552580277865.jpg HTTP/1.1\r\nHost: i.dailymail.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 44810\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Thu, 14 Mar 2019 16:17:59 GMT\r\netag: \"b46036e3392412f95c17efa818836be5\"\r\nx-amz-version-id: Sg6WaZ_v31P8nwdiQHVGxptG.zKCZ4vO\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: TZu83I5PmcOjme3xwjbaFYhFXm8k0O0HNbD-30-fgHRaOBGxKZ8ctQ==\r\nedge-cache-tag: /1s/2019/03/14/16/10990304-0-image-a-42_1552580277865.jpg\r\ncache-control: max-age=2592000\r\nexpires: Tue, 23 Dec 2025 07:49:43 GMT\r\ndate: Sun, 23 Nov 2025 07:49:43 GMT\r\ntiming-allow-origin: *\r\nx-origin: cloudfront\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":44810,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: \"Optimized by JPEGmini 3.14.2.84235 0x1331af77\", progressive, precision 8, 636x382, components 3","md5":"b46036e3392412f95c17efa818836be5","sha1":"0f9ad61852cfa2bc003549560d15ceb8b39aab60","sha256":"d522a065be0c26966fff0c83e34d31c4840e9b70b3352634fcefc9b24ee7c1a4","sha512":"ecb0de731c32671ceb41ec310f4946f5babf2e01dd9acebb20a8e719f3511f5d28e083344e8e4382d7ea213d9b453374b018f1534673c3bf8cad2cc2ff06899f","ssdeep":"768:qYymk+fBUSPR1Tb3whyNe8MollNTafdARv+kS+HAJ3JDGgs/0C:q6k+fBUojnMolLTaf6vXt8JCgs/n","tlshash":"fe13f127e735dd12dd93fa3ca9e50e88e207ac3a56504a1db7318f8d53125c896ce2e8","first_seen":"2025-11-23T07:50:46.561793Z","last_seen":"2025-11-23T07:50:46.561793Z","times_seen":1,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":51,"dns":51,"connect":5,"send":0,"wait":21,"receive":2,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/dd.dadipic2024.com/20241104/K7CQnnjz/1.jpg?fit=,\u0026ssl=1","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Oct 2025 19:44:58 GMT","end":"Sat, 03 Jan 2026 19:44:57 GMT"},"fingerprint":{"sha1":"E9:63:7F:0C:6E:C3:A6:C6:27:94:43:17:2D:51:5E:E2:3E:DA:FB:16","sha256":"7A:94:BE:74:03:C4:90:D6:E8:ED:98:EB:0F:DC:60:BE:D8:2A:DF:82:3F:DC:85:70:4F:C1:10:52:E4:F5:75:81"}}},"request":{"raw":"GET /dd.dadipic2024.com/20241104/K7CQnnjz/1.jpg?fit=,\u0026ssl=1 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 07:49:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 110695\r\nlast-modified: Thu, 30 Oct 2025 13:02:35 GMT\r\nexpires: Sun, 31 Oct 2027 01:02:35 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttps://dd.dadipic2024.com/20241104/K7CQnnjz/1.jpg\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"8b208ab0aa81f223\"\r\nx-optim-disabled: true\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 15\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":110695,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x607, components 3","md5":"287badff22b2334fe13009bbc615f0f2","sha1":"d3d22630ba098b78e5e5060e1d0f07e53813d3b6","sha256":"09bfef6574d8d6990f3322342b164cf1a60c8b8c0a3167f58930816e9efdf8ac","sha512":"b5f2314456205d23afcaff731ca64da4d0aa9a91a5f9f0fcc65a35bab7788db094b9fb4b8b15e59cbd1fb4e1555af7568521007e025009f8a42db04f9d051048","ssdeep":"3072:XO3D/BwPvO9IBZC1Se21zYMIEzbV7Bt6i3:+3D6PvpZ9D1z3hX6k","tlshash":"29b3125372880ec4f78b07b490432bbac9ff8b14b5d1f665a88294c3559854cafcd8bb","first_seen":"2024-05-12T00:06:16Z","last_seen":"2026-01-16T19:28:40.294022Z","times_seen":149,"resource_available":false,"data":null}},"time_used":1862,"timings":{"blocked":368,"dns":3,"connect":12,"send":0,"wait":10,"receive":20,"ssl":1438},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icdn05.4kpornvideos.tv/34068/1703395_1.jpg","fqdn":"icdn05.4kpornvideos.tv","domain":"4kpornvideos.tv","tld":"tv"},"ip":{"addr":"45.133.44.6","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icdn05.4kpornvideos.tv","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Oct 2025 02:32:58 GMT","end":"Sun, 25 Jan 2026 02:32:57 GMT"},"fingerprint":{"sha1":"B8:0F:7A:C0:15:D4:62:8C:DD:41:EA:7B:26:9A:EE:35:DA:0C:5C:BC","sha256":"F1:6E:D7:9E:83:2C:B7:E9:17:29:7A:78:8E:57:74:A8:0A:F6:F4:67:57:42:05:F6:58:20:83:E1:F1:AB:A3:9A"}}},"request":{"raw":"GET /34068/1703395_1.jpg HTTP/1.1\r\nHost: icdn05.4kpornvideos.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 47219\r\nserver: nginx/1.24.0\r\nx-object-meta-mtime: 1604930027.66999341\r\netag: 8a5251c9a0b88e6658d6807ee6382999\r\nlast-modified: Sat, 05 Nov 2022 00:21:43 GMT\r\nx-timestamp: 1667607702.13946\r\nx-trans-id: txd252140274064c709e3d1-0066ae6376\r\nx-openstack-request-id: txd252140274064c709e3d1-0066ae6376\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\ncache-control: max-age=2592000\r\nexpires: Tue, 23 Dec 2025 07:49:45 GMT\r\nx-cdn-host-id: ah1004,DS9225\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47219,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x169, components 3","md5":"8a5251c9a0b88e6658d6807ee6382999","sha1":"cc2b3ca89aee3f6b3ec095a2b73bd78546bda25c","sha256":"8892582baf95a3914a3f37cd80221d37931be336ec5f9b142d8ce9c13ff23576","sha512":"1e27232a5a06058dad42665e4a55027a46d4e59baefbc476c9b6eda878c16b001963ec318d4725073a163b6c337414635b6b161aa2cea54bb8c8f7e7db89835d","ssdeep":"768:sWBUpsr6hI0EKk47kVoTaOb6iDUXGf+1FBbIxPDfTpU1z4wVsnDhLXUPep7qG:sWBosPx2JbBDUWyFabfde8gExXU+9","tlshash":"d82302332393558d5d6e38afea573481ae16119ef7de2f64d041465ac083f83b0274a2","first_seen":"2024-12-08T17:47:56.478364Z","last_seen":"2026-03-02T10:40:01.35695Z","times_seen":15,"resource_available":false,"data":null}},"time_used":1706,"timings":{"blocked":234,"dns":9,"connect":29,"send":0,"wait":31,"receive":20,"ssl":1369},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1259667713.vod2.myqcloud.com/fa6ac7b2vodtransuse1259667713/0a705dbb1397757909730677825/sampleSnapshot/sampleSnapshot_20196_0.jpg","fqdn":"1259667713.vod2.myqcloud.com","domain":"myqcloud.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.106Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /fa6ac7b2vodtransuse1259667713/0a705dbb1397757909730677825/sampleSnapshot/sampleSnapshot_20196_0.jpg HTTP/1.1\r\nHost: 1259667713.vod2.myqcloud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":785,"timings":{"blocked":302,"dns":483,"connect":31,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.apian088.sbs/yq2/media/videos/tmb/000/000/250/6.jpg","fqdn":"img.apian088.sbs","domain":"apian088.sbs","tld":"sbs"},"ip":{"addr":"172.67.163.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apian088.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 12:00:16 GMT","end":"Sat, 14 Feb 2026 12:44:47 GMT"},"fingerprint":{"sha1":"81:62:5B:8E:F8:D6:89:63:71:73:E3:18:57:53:27:65:B5:AD:00:32","sha256":"1E:DA:15:FE:0A:FF:52:03:D1:A0:EE:60:AD:2A:3A:55:0D:CD:56:3F:75:52:A1:90:E2:E7:70:D3:2A:15:12:5E"}}},"request":{"raw":"GET /yq2/media/videos/tmb/000/000/250/6.jpg HTTP/1.1\r\nHost: img.apian088.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8482\r\nserver: cloudflare\r\nlast-modified: Sat, 23 Mar 2024 12:21:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"65fec93a-2122\"\r\naccept-ranges: bytes\r\nage: 585371\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oDwc7Iii5JjKH7o9g9SyNlY0m0%2BC2ryi0HXP%2FC3HPpKN5RtcSwt4WMf9tbRsONrYrdjZ1o2mTvCbc52sWoXa02QSTL0tUi90YdLb4GjXfw4%3D\"}]}\r\ncf-ray: 9a2f12647dabc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8482,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x226, components 3","md5":"5507202427c79e90e0e4f30caf4040dc","sha1":"c89e0849c8df5b62928b501062cfa5b78cb3a0ad","sha256":"5c9c69123ff46068e40073b94aaeef8d0dbf647080400c49f67f0579a197d9b1","sha512":"bd81fc8b8fa8e1f487cd6fd1ecf84d4821df7ed5edec9f3e11162d699f9420f392b28d7496346bf3714424dff5025d064d484a641f00c6296e295bcc0863e0ea","ssdeep":"192:jWqK8OFftl6UfNTuVhHGgW2ABeSINArJllvgcM:jWqK8Sff6mNK4UDALlvnM","tlshash":"8c02af4e5128ad61f64d8abb2b5843b8cb58c69d5510fdbb8d88fe8143315e34ce61cd","first_seen":"2025-11-23T07:50:46.56436Z","last_seen":"2025-12-05T22:31:48.349105Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1928,"timings":{"blocked":419,"dns":0,"connect":4,"send":0,"wait":10,"receive":1,"ssl":1488},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn2.geefap.com/uploads/posts/2018-03/thumbs/796093576_363897749.jpg","fqdn":"cdn2.geefap.com","domain":"geefap.com","tld":"com"},"ip":{"addr":"31.10.5.97","port":443,"asn":207728,"as":"EUROHOSTER Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn2.geefap.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV SSL CA 2","organization":"GoGetSSL"},"validity":{"start":"Tue, 07 Oct 2025 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:E2:65:92:08:22:4C:77:09:5B:C9:25:35:0E:A2:CD:89:EA:8C:7C","sha256":"82:2A:A8:8F:E2:B8:A2:CA:01:FD:DC:F1:C1:AD:8F:F7:85:8D:42:56:12:56:8B:70:B2:FD:44:15:88:B2:59:F4"}}},"request":{"raw":"GET /uploads/posts/2018-03/thumbs/796093576_363897749.jpg HTTP/1.1\r\nHost: cdn2.geefap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 23 Nov 2025 07:49:44 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 14989\r\nLast-Modified: Wed, 07 Mar 2018 14:07:54 GMT\r\nConnection: keep-alive\r\nETag: \"5a9ff23a-3a8d\"\r\nExpires: Fri, 28 Nov 2025 07:49:44 GMT\r\nCache-Control: max-age=432000\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14989,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 300x420, components 3","md5":"ecbc2841927c20960413f2aa68ce9a37","sha1":"ced81aab4b8d114c4f0e4192e723aeb391dd9dbe","sha256":"95540c31f6a306b2e77c300aa96d5f38f707ea9ece75c3ed15fae2307d460e2c","sha512":"cdb1d4d6c406f3286c1923c183378fc7694aba513c457a129bcc4a156484a91266d427ef1bca5f6af09bf495b25df383f306ba43d527708300fd87848a3019ec","ssdeep":"192:Db3fT7PWteemwEMskeo3M98ZEgTmXIOZ+mkCO4OigQN4uXcsKbcYst0sqrm0:DLr7uCwEyS8ZZTdOw3CZTGsqT1","tlshash":"ea62c0232d51baf27887c52efe259cf32ff4c2a0a94598366be101a2d541e4dd912ba0","first_seen":"2024-04-24T00:32:00Z","last_seen":"2026-04-12T19:29:51.605824Z","times_seen":61,"resource_available":false,"data":null}},"time_used":2233,"timings":{"blocked":1046,"dns":15,"connect":18,"send":0,"wait":21,"receive":1,"ssl":1125},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fqjpg4.top/upload/vod/20240914-4/3ccf356e5297ab9e10a5f7797217b421.jpg","fqdn":"fqjpg4.top","domain":"fqjpg4.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.726Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /upload/vod/20240914-4/3ccf356e5297ab9e10a5f7797217b421.jpg HTTP/1.1\r\nHost: fqjpg4.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":2028,"timings":{"blocked":355,"dns":28,"connect":114,"send":0,"wait":0,"receive":0,"ssl":1516},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"fqjpg4.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn5-thumbs.motherlessmedia.com/thumbs/68A5C5E.jpg","fqdn":"cdn5-thumbs.motherlessmedia.com","domain":"motherlessmedia.com","tld":"com"},"ip":{"addr":"185.107.92.224","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.motherlessmedia.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV SSL CA 2","organization":"GoGetSSL"},"validity":{"start":"Mon, 03 Nov 2025 00:00:00 GMT","end":"Tue, 22 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1C:9C:A7:64:1D:50:C4:66:FC:B5:AE:9C:CB:DF:AC:1E:1F:4B:A0:83","sha256":"FD:6F:CF:79:47:AA:EF:54:72:2A:60:E2:1B:57:6B:D6:33:60:E2:67:DA:83:68:95:02:34:5B:66:53:45:A1:0E"}}},"request":{"raw":"GET /thumbs/68A5C5E.jpg HTTP/1.1\r\nHost: cdn5-thumbs.motherlessmedia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: openresty/1.21.4.1\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22970\r\nvary: x-s-token\r\nlast-modified: Thu, 04 Oct 2018 07:36:26 GMT\r\netag: \"59ba-577623669e3ce\"\r\nx-cache: HIT\r\nx-whom: cdn06\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.21.4.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22970,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 8000x8001, segment length 16, baseline, precision 8, 640x480, components 3","md5":"f4ef09934687ac926a511903006d44ff","sha1":"ab80123963326789ac5a148047489aaf0dcd6908","sha256":"c0614d55f2235df4e7a4a0b7a76870cb967eb354fe6db9bc055f283db7132e8e","sha512":"ca08ae0b7927cb214dc3efa7ec40fafcd9fce0cc948d3eb842e784255f000337cc653161bd2a82b6680bf2fd44dc1c3f45a8b45b7fd7f3722fdd4bf8938ffc72","ssdeep":"384:RndNk3nad/fHmQWEJj+Dvyc2/Oqpwy91bFCUpxaVypFAHbctcC3Vhzs:RDkq5vmKJ+DvOvwU1LxQy/AwtZ3Vhzs","tlshash":"1ea2e086ff867745c592cdb91018b331329eb93ded00c47d0a60b72975266e68b1cbdc","first_seen":"2024-04-19T18:14:25Z","last_seen":"2025-12-05T22:31:48.405374Z","times_seen":35,"resource_available":false,"data":null}},"time_used":1893,"timings":{"blocked":384,"dns":21,"connect":26,"send":0,"wait":26,"receive":31,"ssl":1394},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xporncool.net/posts_images/pornbox-1334985.webp","fqdn":"xporncool.net","domain":"xporncool.net","tld":"net"},"ip":{"addr":"79.141.164.151","port":443,"asn":59711,"as":"HZ Hosting Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xporncool.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 01:36:17 GMT","end":"Mon, 16 Feb 2026 01:36:16 GMT"},"fingerprint":{"sha1":"78:A8:65:C9:85:40:AE:67:AE:45:96:D2:2D:24:31:BB:E9:10:C0:A5","sha256":"7D:75:E9:C3:B0:9F:DF:E2:C7:7D:4D:9C:34:1A:EE:B0:CB:DE:E6:DB:F9:79:F1:60:B7:33:A2:60:1D:4D:3A:37"}}},"request":{"raw":"GET /posts_images/pornbox-1334985.webp HTTP/1.1\r\nHost: xporncool.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 53040\r\nlast-modified: Sat, 31 May 2025 10:29:00 GMT\r\netag: \"683ad9ec-cf30\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":53040,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x576, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"cf6b3cd30b202132846e0b290d3ac859","sha1":"cab05ce5d43e1c0812c557a44e5f84b93575f10d","sha256":"7434ea913a217320da07bad848bd014c588ecaf446969240a15307145817a9d3","sha512":"387b96af290edaba33e394cfd1de36acfeb9359910d4dea0fe3cbb76b947730324454bf40d4d8a5216a139198ea0c7e1595555bba3721f3458692bf9d0f855e4","ssdeep":"1536:5i15361VdKrgcu5ENOSVLDh75jU84DgqcUiE:HLKr5u4h3pq84DgqcUh","tlshash":"453302cd96d625437150f27130897476a083fcbc4a779ce13f122e9ad512af91dbc86e","first_seen":"2025-07-17T06:11:53.19729Z","last_seen":"2026-01-17T11:45:45.355756Z","times_seen":23,"resource_available":false,"data":null}},"time_used":1815,"timings":{"blocked":312,"dns":7,"connect":36,"send":0,"wait":18,"receive":42,"ssl":1395},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gcore-pic.xvideos-cdn.com/videos/thumbs169ll/3c/db/7a/3cdb7ae3b3155242ced63a3a88d6fd57/3cdb7ae3b3155242ced63a3a88d6fd57.14.jpg","fqdn":"gcore-pic.xvideos-cdn.com","domain":"xvideos-cdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xvideos.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 15 Oct 2025 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3C:93:93:D2:61:40:5B:B9:F9:EB:A2:B0:78:48:57:C0:F2:41:42:42","sha256":"D9:3E:6D:83:C8:0E:74:42:32:A1:4F:A3:9B:CA:3A:9D:E0:D2:60:38:FF:BF:EB:0E:36:AA:3E:41:44:D5:A7:59"}}},"request":{"raw":"GET /videos/thumbs169ll/3c/db/7a/3cdb7ae3b3155242ced63a3a88d6fd57/3cdb7ae3b3155242ced63a3a88d6fd57.14.jpg HTTP/1.1\r\nHost: gcore-pic.xvideos-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 07:49:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15507\r\ntraceparent: 00-405bbd7456fd7bad7ce82d081268d62e-2e0d6759667beca2-01\r\nx-frame-options: sameorigin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Wed, 08 Jul 2020 18:18:27 GMT\r\nexpires: Wed, 26 Mar 2025 05:24:31 GMT\r\ncache-control: max-age=10368000, public\r\naccess-control-allow-origin: *\r\nx-id-shield: am3-hw-edge-gc66\r\nage: 4582398\r\nx-id: osix-hw-edge-gc4\r\ncache: HIT\r\nx-cached-since: 2025-11-21T11:32:47+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15507,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 352x198, components 3","md5":"c1bc110a556752c7261f42b09611b2a7","sha1":"14043ef9bac59f268038d242b00c85ee9577d0a6","sha256":"1b9e8f9cfde41912ecb295bbd0d2f23dd60f492cb6ac2bcd3d58e7c247a31d8d","sha512":"08937bbcc9e83376ad103ae9ec5f7bdb1c740b2f9f1adba10117f09b551385be82c294359d5e3684cf85dd3ef29e68944eeb5605e1d198d6d3c8a3b1028259c5","ssdeep":"384:y9QZSaQygIYLci05USqQKUtmOW8tIOjbQ5VkgX0D:y9ztIYXytmyq6bQ5VrE","tlshash":"9462bf9b8915d11dec9d6242bd1232a767e2aec8b0ccfdc451810f9a4aa1572e2e85a8","first_seen":"2025-11-23T07:50:46.567286Z","last_seen":"2025-11-23T07:50:46.567286Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2277,"timings":{"blocked":300,"dns":10,"connect":14,"send":0,"wait":7,"receive":1,"ssl":1937},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/original/2X/e/e42e67ab4d637f69460c268781d804069b002bea.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 03:08:59 GMT","end":"Mon, 02 Feb 2026 03:08:58 GMT"},"fingerprint":{"sha1":"E1:A5:18:66:02:A1:30:48:C0:63:B8:0D:A6:A0:6A:4D:49:FB:31:A4","sha256":"F3:EF:EA:51:6F:29:3C:97:1C:9E:B5:C9:DB:69:E9:BE:55:EA:E1:47:AC:EB:1B:EB:A6:2A:5B:B1:74:85:D0:AB"}}},"request":{"raw":"GET /uploads/default/original/2X/e/e42e67ab4d637f69460c268781d804069b002bea.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 07:49:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 55742\r\nlast-modified: Wed, 08 Oct 2025 03:31:58 GMT\r\nexpires: Mon, 23 Nov 2026 07:49:43 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55742,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x848, components 3","md5":"dbf0f1924d2d7824ae35a24bed4c219e","sha1":"e42e67ab4d637f69460c268781d804069b002bea","sha256":"86228a3dbf8fbe653b8e1a34c775e5f506396d4dc75d88d724fd43924ae87928","sha512":"e10febf711ad0a266df4a1c394edee11b8647c4b142f8f783b556574db09c20de77e2015d157c4b700e00bbc82e14a2c8a925e68f28d438b09ae117b7dc7844d","ssdeep":"1536:U+XDzx7KjRnR31c/iBvWYdrOJfY6RSNRO:UIBclc/u4fYISLO","tlshash":"484302d031a375734bffd78c87cefe051692cc06d9471a4069c8696d7e52d668510eec","first_seen":"2025-11-10T16:38:05.212189Z","last_seen":"2026-01-31T10:39:20.86919Z","times_seen":28,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn5-thumbs.motherlessmedia.com/thumbs/F96791E.jpg","fqdn":"cdn5-thumbs.motherlessmedia.com","domain":"motherlessmedia.com","tld":"com"},"ip":{"addr":"185.107.92.224","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.motherlessmedia.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV SSL CA 2","organization":"GoGetSSL"},"validity":{"start":"Mon, 03 Nov 2025 00:00:00 GMT","end":"Tue, 22 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1C:9C:A7:64:1D:50:C4:66:FC:B5:AE:9C:CB:DF:AC:1E:1F:4B:A0:83","sha256":"FD:6F:CF:79:47:AA:EF:54:72:2A:60:E2:1B:57:6B:D6:33:60:E2:67:DA:83:68:95:02:34:5B:66:53:45:A1:0E"}}},"request":{"raw":"GET /thumbs/F96791E.jpg HTTP/1.1\r\nHost: cdn5-thumbs.motherlessmedia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: openresty/1.21.4.1\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13408\r\nvary: x-s-token\r\nlast-modified: Mon, 08 Oct 2018 02:36:21 GMT\r\netag: \"3460-577ae7c9166f3\"\r\nx-cache: HIT\r\nx-whom: cdn02\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.21.4.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":13408,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 640x480, components 3","md5":"da0b05758655b1e36e43c3e313471014","sha1":"3d88e737d5d43c22c7ef4eeedc4edae7d77ef540","sha256":"da5d58ab0990e62ae1930e52dc116d74fbd9d07c186fa808a6a592d9ac36ea96","sha512":"e73d4d3421bd78a0163ab03be2cea9458692ef8a6599a9734e74a3065d371cec620cb9380361afba3a20e4bb34f54a1086c7284c4e904dcf1ab0f7df74caa408","ssdeep":"384:dnhUEm0aT3TwD0weW0ciPMRxhCc8Mswb7oSqE5ofEjH:sP3Tw0weWuE/Pzb7oSqzEjH","tlshash":"2b52d1ae741f0b69e9cec275bd538710e8103c8dc689694f7d16188fca182935e74d0f","first_seen":"2024-04-26T00:29:07Z","last_seen":"2026-03-03T14:10:03.869208Z","times_seen":41,"resource_available":false,"data":null}},"time_used":1364,"timings":{"blocked":8,"dns":6,"connect":68,"send":0,"wait":27,"receive":1,"ssl":1207},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.embed-player.space/15/08/18/-wdg2z8ARl-083.jpg","fqdn":"images.embed-player.space","domain":"embed-player.space","tld":"space"},"ip":{"addr":"51.77.85.40","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"images.embed-player.space","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Nov 2025 14:19:29 GMT","end":"Wed, 04 Feb 2026 14:19:28 GMT"},"fingerprint":{"sha1":"36:85:E2:4B:F5:30:AF:1E:F6:9B:A5:0D:24:90:B3:D6:30:1A:23:B1","sha256":"D3:EA:A7:0D:C5:47:DC:53:87:2F:7B:62:36:1B:B2:7C:A0:C8:E2:AC:5B:80:6C:24:A7:76:22:07:70:94:21:BA"}}},"request":{"raw":"GET /15/08/18/-wdg2z8ARl-083.jpg HTTP/1.1\r\nHost: images.embed-player.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Sun, 23 Nov 2025 07:49:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23318\r\nlast-modified: Wed, 12 Mar 2025 21:37:28 GMT\r\netag: \"67d1fe98-5b16\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23318,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 640x360, components 3","md5":"cf78d44577177b2114ea305e2f40cf20","sha1":"284da2006829629a114a129edf7aaf9ad7a37368","sha256":"b13b761b813c1201fa3e7805a77a848a18b5c54ac55dd7a4643a0b57f0ee20ef","sha512":"7dd9340e8b5e42b7800e26c15d2a0421c6df04236b63bf3b3d414dfe9fdf1f5938dac42311f5e8f76ca6da928c6d46c012cddf3f3f11c4dad00176fedb437e53","ssdeep":"384:FDX7yHpdLwdZJZR3ewQN4aNA4FuasxbrXXHGQb/dQKZDmfBtQohp7VvKOK+cQTSf:Fr7yHp1wdjfOZ5bFuasljmQb/JBmfBO/","tlshash":"1ba2ad8af6011cea5fff6ff11443a403d52184b49ea6f86a6d07ade0b211f0c829f715","first_seen":"2025-06-05T17:56:20.503613Z","last_seen":"2025-12-25T10:42:57.743937Z","times_seen":7,"resource_available":false,"data":null}},"time_used":552,"timings":{"blocked":-1,"dns":18,"connect":46,"send":0,"wait":47,"receive":56,"ssl":335},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timg216.top/videos/0ef77719f0bbb119e4571076df3b4658/cover/5_505_259?ih=1","fqdn":"timg216.top","domain":"timg216.top","tld":"top"},"ip":{"addr":"172.66.155.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timg216.top","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 04:28:49 GMT","end":"Wed, 31 Dec 2025 05:27:41 GMT"},"fingerprint":{"sha1":"0A:EF:84:22:E6:0D:56:57:B7:F6:C3:7D:6D:91:EF:17:49:1B:A6:01","sha256":"B5:3B:20:B4:05:8F:49:AA:87:FC:31:5E:8E:7E:0C:C5:77:A9:A2:5E:FA:54:61:41:C2:B4:A3:9D:CA:1B:2B:AA"}}},"request":{"raw":"GET /videos/0ef77719f0bbb119e4571076df3b4658/cover/5_505_259?ih=1 HTTP/1.1\r\nHost: timg216.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:46 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 23390\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Mar 2025 10:01:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"67c6cf96-5b5e\"\r\nexpires: Mon, 08 Dec 2025 18:18:02 GMT\r\ncache-control: public, max-age=31536000, stale-if-error=7200\r\nt-cache: LHIT\r\naccept-ranges: bytes\r\nage: 265544\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C8tyANbsNVBx9aNbPR%2BvQCvOb%2FYe0ibTfiHqHf7bqP0zNAFbhFP5gLq%2FCqjVy5yDxnO8GgHZ3bCyJo363kXwHlPy72vcsMn8yw%3D%3D\"}]}\r\ncf-ray: 9a2f12644d4db505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23390,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc56.60.100\", baseline, precision 8, 505x259, components 3","md5":"45a117ca6ed397fcfabf063acdd6d321","sha1":"fabd4c8148627abbe8075e3a8507886dae810faf","sha256":"094e512f2bed0fabb2a026f08053c3b25b3a8974c38c9758e4768a887eb3e1ed","sha512":"c9580f83dc8b30e2c16ea72716443dbb5a9ec0cda7c3fd587ea308da4937c2f2b43437cde069fb72ad0354b3ccc6c593b5cdc15c801c694dfde726b6accf263a","ssdeep":"384:992xP12FRVgOG1viFIM1jc21a7m9YITU5UMcXQwdrOvaq/oDnT3S6Q+29+H+5O1Q:Kr2pYeIOchmOI4yXFdCQTLzecK3","tlshash":"65b2af5b2d049587f12986a9fd87068d261d3a08f4577dff680b5ed6f6203ab1d4c02d","first_seen":"2025-05-21T16:17:32.682748Z","last_seen":"2026-03-02T07:55:32.786326Z","times_seen":90,"resource_available":false,"data":null}},"time_used":1910,"timings":{"blocked":417,"dns":2,"connect":1,"send":0,"wait":7,"receive":1,"ssl":1465},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"timg216.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.apian088.sbs/sp/media/videos/tmb/3736/1.jpg","fqdn":"img.apian088.sbs","domain":"apian088.sbs","tld":"sbs"},"ip":{"addr":"172.67.163.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apian088.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 12:00:16 GMT","end":"Sat, 14 Feb 2026 12:44:47 GMT"},"fingerprint":{"sha1":"81:62:5B:8E:F8:D6:89:63:71:73:E3:18:57:53:27:65:B5:AD:00:32","sha256":"1E:DA:15:FE:0A:FF:52:03:D1:A0:EE:60:AD:2A:3A:55:0D:CD:56:3F:75:52:A1:90:E2:E7:70:D3:2A:15:12:5E"}}},"request":{"raw":"GET /sp/media/videos/tmb/3736/1.jpg HTTP/1.1\r\nHost: img.apian088.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18600\r\nserver: cloudflare\r\nlast-modified: Sat, 23 Mar 2024 12:21:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"65fec930-48a8\"\r\naccept-ranges: bytes\r\nage: 363004\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PgFPgq%2Fy4ranSHruzP03yE6Uu%2FQj%2FbNMnMapkm40%2BuEdIMgBxWgJzip2HwIQNW9rQoSPJQUjcvCjDgsikekTlpIB%2FLb9kvkiyUUcTig09dE%3D\"}]}\r\ncf-ray: 9a2f125db8b6c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18600,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 384x214, components 3","md5":"71c17ce4c248ae29506189e28dedf5ef","sha1":"6478a47fbb03b7660c744cc54a329252ab80d47d","sha256":"be8010daa5fe260e31ce3b872be06b30a78bf65ef4cbbabc7393e74ed5064267","sha512":"ceab1088c35d25bd769cae838b814265833b9642685bc9d138963245dcc8a03ab83ec432e1b63c4e6a4aa6625458728283907b2a653da843370b465603a123f6","ssdeep":"384:i1Hfxga2Vgy3SO/WheApCMnVMXl/amBHnqiq4Mig:iv+3SOe0A4M2taUqiq4MN","tlshash":"5a82d0a48a6801faba3a8822562f0fb0c17a53571476b40b2af793f3e7f250105751de","first_seen":"2024-05-03T10:41:36Z","last_seen":"2026-01-18T01:21:19.397987Z","times_seen":23,"resource_available":false,"data":null}},"time_used":743,"timings":{"blocked":707,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jwplayer.com/v2/media/htuY62Sb/poster.jpg?width=720","fqdn":"cdn.jwplayer.com","domain":"jwplayer.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:45.182Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /v2/media/htuY62Sb/poster.jpg?width=720 HTTP/1.1\r\nHost: cdn.jwplayer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.av4.cam/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"videopreview.chezcathy.com/ext/pre_3360854939.jpg","fqdn":"videopreview.chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"46.105.70.213","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"videopreview.chezcathy.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Nov 2025 08:27:58 GMT","end":"Mon, 09 Feb 2026 08:27:57 GMT"},"fingerprint":{"sha1":"29:86:03:37:B9:5D:D1:2D:4C:B4:03:D8:1C:3D:46:19:E2:74:DD:C3","sha256":"1B:61:77:19:8B:D9:73:FF:9A:42:C3:7C:48:68:3F:8E:99:31:28:87:FF:91:E4:8A:77:DA:F3:72:92:AB:2D:5F"}}},"request":{"raw":"GET /ext/pre_3360854939.jpg HTTP/1.1\r\nHost: videopreview.chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 07:49:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10489\r\nlast-modified: Tue, 11 Jun 2024 14:17:32 GMT\r\netag: \"66685c7c-28f9\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: Range, DNT, X-CustomHeader, Keep-Alive, User-Agent, X-Requested-With, If-Modified-Since, Cache-Control, Content-Type\r\naccess-control-expose-headers: Content-Length, Content-Range\r\nexpires: Sat, 21 Feb 2026 07:49:43 GMT\r\ncache-control: max-age=7776000\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10489,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x226, components 3","md5":"9a507fd0e66ee7cf2efc511ec906ff4e","sha1":"42d9bff3a734cbb617c238697d91628e00e6a2e4","sha256":"521ed140f5e463e0c86237adf0a10315f94ba193c88add29574b3dbc1b23e9e6","sha512":"cdea8a9a166531091323305f2edadb2f8a618b8250855b37ecae37fef73dd1ada5dbaa83322ad2cddb0090c8d5862ef43ff5f57ba3002e776541076ff3813c89","ssdeep":"192:aW2uCnb/vtRWIcg4C8Mph6cxiH2cSo/WnSb0okC7/JcktSbHDYQqAz4m:aWvCzt8IP9JpxiWcDuSbzJN/Az4m","tlshash":"e522bf9373e0c1befcad067e472b17124b522d578236947bf8b16b1463317e60e90ad2","first_seen":"2025-08-18T05:29:08.669048Z","last_seen":"2026-01-21T05:47:16.473497Z","times_seen":27,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":14,"connect":33,"send":0,"wait":29,"receive":1,"ssl":199},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obmenvsemfiles.net/fo/files_attachments/71e/66e/71e66e425a62b6b2f0d41e8a6d0a18d0.jpg","fqdn":"obmenvsemfiles.net","domain":"obmenvsemfiles.net","tld":"net"},"ip":{"addr":"82.192.80.149","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"obmenvsemfiles.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Nov 2025 20:41:14 GMT","end":"Wed, 11 Feb 2026 20:41:13 GMT"},"fingerprint":{"sha1":"24:C4:83:D7:80:59:0A:E0:DD:B4:99:AD:9F:55:A3:41:9D:9C:F0:AF","sha256":"5A:9B:E6:19:55:DE:66:78:6C:AE:46:BA:16:6C:7D:46:CF:23:CD:DD:27:1B:09:7F:DE:F1:52:71:DF:C8:61:8C"}}},"request":{"raw":"GET /fo/files_attachments/71e/66e/71e66e425a62b6b2f0d41e8a6d0a18d0.jpg HTTP/1.1\r\nHost: obmenvsemfiles.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 138\r\nlocation: http://ds.nashobmenfiles.com/fo/files_attachments/71e/66e/71e66e425a62b6b2f0d41e8a6d0a18d0.jpg\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":1887,"timings":{"blocked":376,"dns":22,"connect":36,"send":0,"wait":40,"receive":0,"ssl":1398},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realincestvideos.org/thumbs/970/3824942639621101970_0.jpg","fqdn":"realincestvideos.org","domain":"realincestvideos.org","tld":"org"},"ip":{"addr":"104.21.1.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"realincestvideos.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 04:52:41 GMT","end":"Sun, 08 Feb 2026 04:55:53 GMT"},"fingerprint":{"sha1":"14:6E:55:97:20:69:A0:95:6E:D4:F4:9B:ED:F9:7F:AE:F2:C7:00:6B","sha256":"22:8B:AD:95:0B:BF:16:8C:B0:03:EF:6E:77:63:3E:F4:B0:73:C8:77:6F:19:CA:CF:68:62:45:F2:72:D8:D1:8D"}}},"request":{"raw":"GET /thumbs/970/3824942639621101970_0.jpg HTTP/1.1\r\nHost: realincestvideos.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10272\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Feb 2020 16:27:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"5e554af4-2820\"\r\nexpires: Tue, 25 Nov 2025 02:09:28 GMT\r\ncache-control: max-age=259200\r\naccept-ranges: bytes\r\nage: 106816\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V2epfiwcZ0Yi35XSNxfs%2BXMn5OLxEjWusHQLebW7h53pa7RH8KMQvsj22LJDwpYzRY0XizHqgmarbVYORE8a%2Fp77T8jnY%2FIFdKZw3Vjv2OWdEg%3D%3D\"}]}\r\ncf-ray: 9a2f125cd82db4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10272,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 240x180, components 3","md5":"df9640571f32a92ca04af356412a71f4","sha1":"e7426a31be23115259796c21fe764d98111f7803","sha256":"63da2d279b00f8b0ab8fbdd6ba41f3e4551b3ea92ac5de759111c16cf8debfb8","sha512":"10112dd8324d420dbb1402a7bbb9c5169d71ab3dbb9d3368ff341739b8ad590478547a2f1389df0212a0cba8b8aca8578a67897a6f5c6e77f49f2b56833ac2f1","ssdeep":"192:ETLk+9dnui+ZdqnzG6zPSol+KkcFmfxOBqFC5ZOQ8t3k/:EPk+j+3qnL0SF+sqqZOQ8t3k/","tlshash":"6122b01d3f554e7ef4afd630ed5780596a2e75a43d02b3c944c35088db7ad69a0ca2e0","first_seen":"2024-04-21T01:09:15Z","last_seen":"2026-05-12T22:12:52.502723Z","times_seen":156,"resource_available":false,"data":null}},"time_used":1328,"timings":{"blocked":-1,"dns":3,"connect":54,"send":0,"wait":12,"receive":1,"ssl":1146},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn5-thumbs.motherlessmedia.com/thumbs/EDE242B.jpg","fqdn":"cdn5-thumbs.motherlessmedia.com","domain":"motherlessmedia.com","tld":"com"},"ip":{"addr":"185.107.92.224","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.motherlessmedia.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV SSL CA 2","organization":"GoGetSSL"},"validity":{"start":"Mon, 03 Nov 2025 00:00:00 GMT","end":"Tue, 22 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1C:9C:A7:64:1D:50:C4:66:FC:B5:AE:9C:CB:DF:AC:1E:1F:4B:A0:83","sha256":"FD:6F:CF:79:47:AA:EF:54:72:2A:60:E2:1B:57:6B:D6:33:60:E2:67:DA:83:68:95:02:34:5B:66:53:45:A1:0E"}}},"request":{"raw":"GET /thumbs/EDE242B.jpg HTTP/1.1\r\nHost: cdn5-thumbs.motherlessmedia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: openresty/1.21.4.1\r\ndate: Sun, 23 Nov 2025 07:49:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21118\r\nvary: x-s-token\r\nlast-modified: Sun, 07 Oct 2018 20:00:35 GMT\r\netag: \"527e-577a8f536a728\"\r\nx-cache: HIT\r\nx-whom: cdn02\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.21.4.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21118,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 640x480, components 3","md5":"de721f7454e7f797e73f1b8752e5956e","sha1":"3ff097bcdb1de88e2eacc2adda0508ce6bfa8a3e","sha256":"5bdb30c5961e213cd5c67bbec4fee3a7c3082164ecb09a7c2a128c1da7bddcae","sha512":"a61cdc51c2537f3992df7ae6946515f919d532341769bed7521b2acf87f821ae2369adcd8bfd3dddcf738e23a43ba71176b87db3a7d708cb4b37a21813c1df35","ssdeep":"384:8wnUeY82KV2JaxUvv10phtTnjGhQNZgR29IzA1yrqBGs5O13DskQ:H9YCV2J0y2xTnjwnMUG3mDsn","tlshash":"eb92e0bbb628c4aa6502cf73c90bd32837eb3fd18135480fa7b51b97806a72d1f46521","first_seen":"2025-11-19T07:30:03.341649Z","last_seen":"2025-12-22T08:22:21.75897Z","times_seen":7,"resource_available":false,"data":null}},"time_used":2324,"timings":{"blocked":2271,"dns":0,"connect":0,"send":0,"wait":52,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"159i.net/uploads/allimg/2501/D-01020FS0aK46b2H93.jpg","fqdn":"159i.net","domain":"159i.net","tld":"net"},"ip":{"addr":"104.21.68.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"159i.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 10:41:42 GMT","end":"Wed, 11 Feb 2026 11:39:18 GMT"},"fingerprint":{"sha1":"B3:A5:30:B2:B7:22:58:8C:B7:42:E3:BE:DB:E3:E6:CC:4E:D9:F1:76","sha256":"1F:28:A1:B8:F6:B6:FA:3A:44:F5:D0:2A:BA:55:AE:E1:3A:D4:B8:27:F2:0C:FC:32:BE:39:46:72:C2:57:6F:8D"}}},"request":{"raw":"GET /uploads/allimg/2501/D-01020FS0aK46b2H93.jpg HTTP/1.1\r\nHost: 159i.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 65620\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 14 Mar 2025 16:33:15 GMT\r\naccept-ranges: bytes\r\nage: 4914\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zoJTkCi8FphhEV%2B%2Bn%2BS6WnjlFw6OTiEguFufhR1%2FNDU3DboksNXQ9k4H%2BQanafDiu40HCa4irMGlgji%2FleKzzgT4WSsz4A%3D%3D\"}]}\r\ncf-ray: 9a2f1264bc8d56c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65620,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 718x404, components 3","md5":"9352d4e980aa5b32d4c16886297d5236","sha1":"df09bc1307be5043ee1dd72d8ef787b2d4ffb30b","sha256":"43ee9bf7c228160ef6820e2cfd62eb827c439d254fe943c4da55aa3b0b363e32","sha512":"8ec8256ce15511b519c4fff79c1958c833d747847f17149172276b012458afc9331fd86267448d738131a4013746a57052912165b1deb306f3f6878ede6b5d56","ssdeep":"1536:3vLHt22dy229hiHhAzpioh3KMKnH2R7jezFJHHfbk:zHdy229hiHhA+MyH2RP4bk","tlshash":"d453022c18f0c0239bfdbca5798dade74a4b7f707d461792320ba626d685e54cd284ce","first_seen":"2025-07-22T04:45:17.11483Z","last_seen":"2026-01-31T10:39:20.972075Z","times_seen":16,"resource_available":false,"data":null}},"time_used":1958,"timings":{"blocked":492,"dns":3,"connect":4,"send":0,"wait":14,"receive":2,"ssl":1436},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avatars.mds.yandex.net/i?id=f846d75d8aec5cf3be5af9adc257ffc41120_rt-2142356-video_thumb_fresh\u0026shower=30\u0026blur=30\u0026w=564\u0026h=318","fqdn":"avatars.mds.yandex.net","domain":"yandex.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:45.293Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /i?id=f846d75d8aec5cf3be5af9adc257ffc41120_rt-2142356-video_thumb_fresh\u0026shower=30\u0026blur=30\u0026w=564\u0026h=318 HTTP/1.1\r\nHost: avatars.mds.yandex.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/original/2X/9/99c4a4422c11844686cf71f7e7dabb0d8e2700e1.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 03:08:59 GMT","end":"Mon, 02 Feb 2026 03:08:58 GMT"},"fingerprint":{"sha1":"E1:A5:18:66:02:A1:30:48:C0:63:B8:0D:A6:A0:6A:4D:49:FB:31:A4","sha256":"F3:EF:EA:51:6F:29:3C:97:1C:9E:B5:C9:DB:69:E9:BE:55:EA:E1:47:AC:EB:1B:EB:A6:2A:5B:B1:74:85:D0:AB"}}},"request":{"raw":"GET /uploads/default/original/2X/9/99c4a4422c11844686cf71f7e7dabb0d8e2700e1.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 07:49:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 62501\r\nlast-modified: Sun, 12 Oct 2025 15:36:21 GMT\r\nexpires: Mon, 23 Nov 2026 07:49:43 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62501,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 464x848, components 3","md5":"f13cd29ca688ca0ac6fd174acc6d91d4","sha1":"99c4a4422c11844686cf71f7e7dabb0d8e2700e1","sha256":"7c2a4d070ca4b7f73f0cd088dbddf2e17b873bdd4432d22c657a5d906b79de20","sha512":"f9bdeb15fdb0ffdbd7712924d4a63b49c8de32231f48088cd8bd3e33f1ef605db128e458cb50b74b80dcd233d545418b218f2fbaf57f69678cb551dd30ab7886","ssdeep":"1536:TOt+J7U9hwOmLNMEUAccjkqRD55P2xGCIBb7ly0dq:yMo+VNMPSjpRD55Phj9hxE","tlshash":"9053020a7271393790f6977495248e0f2d7323b3221e5c44db28ccbca6f588865976f9","first_seen":"2025-11-10T03:02:14.740571Z","last_seen":"2026-01-21T19:38:09.622552Z","times_seen":30,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/optimized/2X/f/f7a849bd9dcf69cdb19a452f735d077614798ce7_2_593x1024.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 03:08:59 GMT","end":"Mon, 02 Feb 2026 03:08:58 GMT"},"fingerprint":{"sha1":"E1:A5:18:66:02:A1:30:48:C0:63:B8:0D:A6:A0:6A:4D:49:FB:31:A4","sha256":"F3:EF:EA:51:6F:29:3C:97:1C:9E:B5:C9:DB:69:E9:BE:55:EA:E1:47:AC:EB:1B:EB:A6:2A:5B:B1:74:85:D0:AB"}}},"request":{"raw":"GET /uploads/default/optimized/2X/f/f7a849bd9dcf69cdb19a452f735d077614798ce7_2_593x1024.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 07:49:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 58895\r\nlast-modified: Tue, 12 Aug 2025 05:18:43 GMT\r\nexpires: Mon, 23 Nov 2026 07:49:43 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58895,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 593x1024, components 3","md5":"750972ae1b4b0ecdd2f7762465d1b475","sha1":"3bb7fa408ec937c8731f5823f72d59ba15d30867","sha256":"6156a7d53e5b94ddf66ed74060a3673527691664094fa8e0abd32e01d08a80a3","sha512":"a0da3a59b698e605b1af3912e4b1c04be566ccb10829f23411f1d0fd62686c4e90a523b32f1b3aa071fb1429ad8b3e8614ec82c018910978a7a7d652bf759cf5","ssdeep":"1536:Ds5V9KLAzaWtHwoqiH0L3TIg7ZReRvvGPu8qpN9N:DspDcLkgtR0VJrz","tlshash":"c843029606866ff3352f523f20f2ded397b4931a01f203a5d299066a38f9e63c647715","first_seen":"2025-08-05T22:57:38.058007Z","last_seen":"2026-01-13T21:12:37.282099Z","times_seen":17,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pix.simozo.net/thumbs/000/117/117014/117014_320x180.jpg","fqdn":"pix.simozo.net","domain":"simozo.net","tld":"net"},"ip":{"addr":"172.67.151.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"simozo.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 22:49:44 GMT","end":"Mon, 09 Feb 2026 23:47:29 GMT"},"fingerprint":{"sha1":"69:E6:56:38:C4:27:F0:16:9B:24:FC:F6:29:CE:65:51:F8:D7:12:8A","sha256":"0F:E9:AE:61:1B:22:55:52:0F:D0:E6:2E:AC:23:0E:D4:3B:1A:AE:1B:1D:7B:1A:FA:EF:11:07:AB:AC:66:37:F4"}}},"request":{"raw":"GET /thumbs/000/117/117014/117014_320x180.jpg HTTP/1.1\r\nHost: pix.simozo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14929\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\netag: 61936b8c421926045e10de4da1f45cd7\r\nlast-modified: Thu, 02 Jun 2022 13:35:38 GMT\r\nx-timestamp: 1654176937.03871\r\nx-trans-id: tx004a81df29bb409880562-0065fb8991\r\nx-openstack-request-id: tx004a81df29bb409880562-0065fb8991\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\nexpires: Mon, 24 Nov 2025 16:59:37 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: DS9225\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nage: 53407\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=urHRi06iwrWzj%2FhKS5zWcWeySuzPx2IlSWVgR5zY7dCjPzU4hhap0Vnzsweu%2BLsDkvJ82Ez5S6U1XgPIvuf6f8oRnRlHO82H0lhTPw%3D%3D\"}]}\r\ncf-ray: 9a2f126078b556ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14929,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 320x180, components 3","md5":"61936b8c421926045e10de4da1f45cd7","sha1":"cb8b53ef1473998693c186532644570bab004b8b","sha256":"8fc8a677d424b7320eaaddbebc0fc67860f034415d1878335d4ee3e46e43451a","sha512":"1b804cac28cddbf4ba5f636bd0462e3c39ad5b5b2dbe7b487ee55d9873072401b3c4537acda1ed2811347bc1209e1d3104ebac8da4de3a77e84d7fa0731973ec","ssdeep":"384:XkL5KNSyimUweszUp7C3fX72LViJL7OeUJ/0oPTYRga9:XkL5KNSLkesgpW3kiJLSeK0oMB9","tlshash":"7862cf520c4610d8b29ae9b7f5a65f579be40b1827cb0f88badc1db3c879f120219d74","first_seen":"2025-06-02T14:12:00.73721Z","last_seen":"2026-03-02T16:55:39.650012Z","times_seen":16,"resource_available":false,"data":null}},"time_used":1800,"timings":{"blocked":356,"dns":33,"connect":13,"send":0,"wait":13,"receive":1,"ssl":1369},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"okashik.atype.jp/images/106-taskj-032/c1.jpg","fqdn":"okashik.atype.jp","domain":"atype.jp","tld":"jp"},"ip":{"addr":"39.110.237.221","port":443,"asn":2527,"as":"Sony Network Communications Inc.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.atype.jp","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 03:56:50 GMT","end":"Sun, 30 Nov 2025 03:56:49 GMT"},"fingerprint":{"sha1":"35:D3:F1:EA:C4:13:C8:5F:BB:2E:D7:ED:08:2F:AE:2A:BB:70:9D:AC","sha256":"02:63:0F:CF:0D:CB:4A:C4:A4:34:07:E2:4E:AF:3C:80:B3:7D:5C:6A:27:15:A4:73:EB:18:69:68:87:58:B5:45"}}},"request":{"raw":"GET /images/106-taskj-032/c1.jpg HTTP/1.1\r\nHost: okashik.atype.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 23 Nov 2025 07:49:45 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 08 Jun 2021 04:47:13 GMT\r\nETag: \"e801d6-1436b-5c439da0a51e5\"\r\nAccept-Ranges: bytes\r\nContent-Length: 82795\r\nAccess-Control-Allow-Origin: *\r\nConnection: close\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":82795,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x225, components 3","md5":"01dffceab6782ccd515def7599007b5b","sha1":"52bba317d71c79ad6f4a8f0fa55ae7734d11beaa","sha256":"b7f38ff974bec20a6b471eeb2ca9337af295e583d3ea9f6fb142381f77307fd8","sha512":"9a03c6fe2917e8e155ebe789ad374df10e2a8fa4dbf7a148eedcf22e4c176966ad9747ec1b58fca5070fdacd47375c0ecd556367080d7d40471cb79b944ca48e","ssdeep":"1536:OcyyHbmEvwShA6TUYkzc8VUPswEdAUnOVoi6j3Gl9YuscHlK7K1HKoa0WXOr/:EynI+JTUYkzzVUP0ABoXhusAlB1Da0WK","tlshash":"1083121d9355d3944425c1641eec2322f27985d502ff3a60833becaeedca487395baaf","first_seen":"2025-09-25T20:42:45.176216Z","last_seen":"2025-11-23T07:50:46.577155Z","times_seen":14,"resource_available":false,"data":null}},"time_used":4256,"timings":{"blocked":1558,"dns":13,"connect":258,"send":0,"wait":261,"receive":747,"ssl":1381},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.vidmo.pro/thumbs_320/ef/f0/eff08ac68228ee71018d8c91b1d72e73/12018140.jpg","fqdn":"en.vidmo.pro","domain":"vidmo.pro","tld":"pro"},"ip":{"addr":"89.248.193.244","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"en.vidmo.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Nov 2025 20:48:10 GMT","end":"Thu, 19 Feb 2026 20:48:09 GMT"},"fingerprint":{"sha1":"B8:8B:9C:2B:E9:53:D3:85:0E:57:74:8D:32:07:72:DF:38:F3:91:DA","sha256":"9B:B3:9F:DD:FB:1B:36:C3:04:60:BF:DF:87:AA:AB:5D:F6:0D:45:20:77:9B:29:19:5F:C4:B6:F1:04:C9:23:3E"}}},"request":{"raw":"GET /thumbs_320/ef/f0/eff08ac68228ee71018d8c91b1d72e73/12018140.jpg HTTP/1.1\r\nHost: en.vidmo.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9136\r\nlast-modified: Sun, 21 Jun 2020 10:20:30 GMT\r\nexpires: Mon, 28 Oct 2024 22:11:42 GMT\r\ncache-control: max-age=604800, public, no-transform\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9136,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc58.35.100\", baseline, precision 8, 320x240, components 3","md5":"816df7fbca6bd4121fc04a0003e6b2a8","sha1":"38cc0a1ce3f02e686e1ef0c60652799d70f9d55a","sha256":"baba4100281f1e2cf40190536cec5019d4e782d0534376264008739c7809bac5","sha512":"183e9453652b527fdcd011b3f4696f201dd7d1d71b204ab59946bed87e28b635d7faae346548e53723d1954089d84b12642fd96bb0f2845a3bd3a1fe8ed6683a","ssdeep":"192:tIOvOe8UYYbb3GXnIrHiCWPXTMreJlilkFsm8Bx:HO0GnI1WPXTMreJlilkFvsx","tlshash":"fc12be93d162f709a2ad191a78af10a70187032d4384cf7c9353eac709bde613e80f9b","first_seen":"2025-11-23T07:50:46.578032Z","last_seen":"2025-11-23T07:50:46.578032Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1838,"timings":{"blocked":251,"dns":8,"connect":57,"send":0,"wait":63,"receive":1,"ssl":1438},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-22","alert":"Sinkholed","trigger":"en.vidmo.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gcore-pic.xvideos-cdn.com/videos/thumbs169ll/e5/81/11/e5811153fdb30ab18db422a50b98ce17/e5811153fdb30ab18db422a50b98ce17.25.jpg","fqdn":"gcore-pic.xvideos-cdn.com","domain":"xvideos-cdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xvideos.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 15 Oct 2025 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3C:93:93:D2:61:40:5B:B9:F9:EB:A2:B0:78:48:57:C0:F2:41:42:42","sha256":"D9:3E:6D:83:C8:0E:74:42:32:A1:4F:A3:9B:CA:3A:9D:E0:D2:60:38:FF:BF:EB:0E:36:AA:3E:41:44:D5:A7:59"}}},"request":{"raw":"GET /videos/thumbs169ll/e5/81/11/e5811153fdb30ab18db422a50b98ce17/e5811153fdb30ab18db422a50b98ce17.25.jpg HTTP/1.1\r\nHost: gcore-pic.xvideos-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 07:49:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13762\r\ntraceparent: 00-c50d2c3cdd0b59476ccffcdc276fe978-3a039c143e75d2eb-01\r\nx-frame-options: sameorigin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Fri, 06 Sep 2024 15:34:07 GMT\r\nexpires: Mon, 24 Mar 2025 15:39:39 GMT\r\ncache-control: max-age=10368000, public\r\naccess-control-allow-origin: *\r\nx-id-shield: am3-hw-edge-gc68\r\nage: 6636638\r\nx-id: osix-hw-edge-gc4\r\ncache: HIT\r\nx-cached-since: 2025-11-19T16:00:56+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13762,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100\", progressive, precision 8, 352x198, components 3","md5":"526df8ff4dc59529d3f018efa31cc577","sha1":"58bfa52ae2139e124f4336fc43a51abf10995f2e","sha256":"f51c79cb5f0d4d89dd7e328d7fee3c46e4aac48895d687a8edb7fe2de5375193","sha512":"f39dea283f5d57a50f4c4a07459f0af6ddaa3a0ced733074405992dc94f8f898200b52f877537117338c923e67857306e896ec7046a1bf1bc776c5d96b80ff23","ssdeep":"384:Jrl5C4cyfrHuchdKnRkbN7q7QZjF8GbM2+yis:Jr24cir1ERMFqSJpM7yb","tlshash":"8c52df5d4f9a74d4f1527ff806079951e30be821aa81b1f9089743d90ec76a3f6ddb04","first_seen":"2025-06-26T17:45:10.393627Z","last_seen":"2026-01-10T18:51:40.921695Z","times_seen":32,"resource_available":false,"data":null}},"time_used":1925,"timings":{"blocked":1913,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ds2.obmenvsemfiles.net/fo/files_attachments/651/ccd/651ccd537","fqdn":"ds2.obmenvsemfiles.net","domain":"obmenvsemfiles.net","tld":"net"},"ip":{"addr":"85.17.28.50","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ds2.obmenvsemfiles.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Nov 2025 08:47:02 GMT","end":"Fri, 30 Jan 2026 08:47:01 GMT"},"fingerprint":{"sha1":"E5:95:B6:EC:9E:FB:2C:01:07:7C:D1:31:0A:C7:C1:F0:B4:2C:CA:90","sha256":"EA:78:31:B8:82:F1:32:8F:AA:D6:B1:0C:54:16:14:16:2C:B9:98:B3:4F:0E:EF:33:91:12:DD:5D:0A:46:50:3E"}}},"request":{"raw":"GET /fo/files_attachments/651/ccd/651ccd537 HTTP/1.1\r\nHost: ds2.obmenvsemfiles.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 07:49:46 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":1945,"timings":{"blocked":1893,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"ds2.obmenvsemfiles.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pornyc.com/thumbs/66/665_hot.jpg","fqdn":"pornyc.com","domain":"pornyc.com","tld":"com"},"ip":{"addr":"104.21.2.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornyc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 17:26:59 GMT","end":"Sun, 18 Jan 2026 18:23:29 GMT"},"fingerprint":{"sha1":"A7:79:C5:0C:95:BB:F2:4E:3E:04:BE:89:CA:42:99:47:2A:11:08:A5","sha256":"FB:58:78:F3:EE:01:A2:13:DF:A4:67:81:4B:4A:5E:87:7A:B2:1C:5D:49:66:A6:69:AF:AC:DA:CE:7E:DD:54:D8"}}},"request":{"raw":"GET /thumbs/66/665_hot.jpg HTTP/1.1\r\nHost: pornyc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:44 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12453\r\nserver: cloudflare\r\nlast-modified: Fri, 17 Sep 2021 16:44:24 GMT\r\netag: \"6144c5e8-30a5\"\r\nexpires: Fri, 23 Oct 2026 04:36:55 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, no-transform\r\nage: 2689968\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X97rSEN34l2rdmtXfyN5RVLJibvmVNMrSuogAPVFF2mOp1NWd%2FSZn%2BYDFuY1rv70Kp98z3hGWDNjU2ceqdFynRQDx0Zp%2Bb69\"}]}\r\ncf-ray: 9a2f12589cdc7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12453,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 312x208, components 3","md5":"03a325dce2b1052ea1cc806bbd49d021","sha1":"5164c00427d34f4ed2ba5db43f3a6bb80bb6c774","sha256":"e834120d507cbee63dc0ee8e15796582d92a31b63b24afd5c0dabbd8d2843c9a","sha512":"6e834eced21205730d6aa1805cbe157fb249e5d6c80d7c27b0f1480c927a20f29a1b7d613237f237d15abffeeb7a68b404a829af19ae2f82f6c1733550156f23","ssdeep":"384:XJ1xCXtrVkgSkQtkooCnA3zsn6iVN0mDZ76HE3l:XJ78rQiFC8G6iX06QHE1","tlshash":"8342c04dc1dba3c971155f2ee50e9cd517cdabf28135130d14ca2994e8c9d134b92ee8","first_seen":"2024-04-21T18:54:08Z","last_seen":"2026-03-02T07:55:32.538402Z","times_seen":89,"resource_available":false,"data":null}},"time_used":798,"timings":{"blocked":-1,"dns":21,"connect":19,"send":0,"wait":16,"receive":1,"ssl":722},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ds.nashobmenfiles.com/fo/files_attachments/71e/66e/71e66e425a62b6b2f0d41e8a6d0a18d0.jpg","fqdn":"ds.nashobmenfiles.com","domain":"nashobmenfiles.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:46.881Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /fo/files_attachments/71e/66e/71e66e425a62b6b2f0d41e8a6d0a18d0.jpg HTTP/1.1\r\nHost: ds.nashobmenfiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":77,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/optimized/2X/a/a2378e605fb096726883fea77f35fa2ea8643927_2_1024x606.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 03:08:59 GMT","end":"Mon, 02 Feb 2026 03:08:58 GMT"},"fingerprint":{"sha1":"E1:A5:18:66:02:A1:30:48:C0:63:B8:0D:A6:A0:6A:4D:49:FB:31:A4","sha256":"F3:EF:EA:51:6F:29:3C:97:1C:9E:B5:C9:DB:69:E9:BE:55:EA:E1:47:AC:EB:1B:EB:A6:2A:5B:B1:74:85:D0:AB"}}},"request":{"raw":"GET /uploads/default/optimized/2X/a/a2378e605fb096726883fea77f35fa2ea8643927_2_1024x606.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 07:49:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 103960\r\nlast-modified: Tue, 12 Aug 2025 06:19:09 GMT\r\nexpires: Mon, 23 Nov 2026 07:49:43 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":103960,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x606, components 3","md5":"cf4f1e5ae429c7ebb8daec0ce63d86df","sha1":"9375aa3df152bb1794f1fb6677e819fd26fe3c9f","sha256":"feda40353168bdb70d62ec3381b399366c8a91a81ded883ec00d5e0ec37e1931","sha512":"918dea53880010760936b419c2973efd613b3050ceba611bdc9745c83d5c4d9f67f4f08f65d17ad2b514b30a2818bf15e4c7e026b5156e387a73942d79dc2913","ssdeep":"1536:VsUIQ9KBoPO6N53n4uoy61w74uE5bcMjlVDl2uqA5AqnTAk2Be2GO:VcBoPNN53dolw74TcWVDlzqA5YkO/","tlshash":"f6a3128a8b0b39c10baa1dd44fbb8db0fb46bf71094a733ca6f25d95099ca6473f1145","first_seen":"2025-09-05T05:21:28.83106Z","last_seen":"2025-12-07T01:02:27.052223Z","times_seen":35,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn5-thumbs.motherlessmedia.com/thumbs/009ECB0.jpg","fqdn":"cdn5-thumbs.motherlessmedia.com","domain":"motherlessmedia.com","tld":"com"},"ip":{"addr":"185.107.92.224","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.motherlessmedia.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV SSL CA 2","organization":"GoGetSSL"},"validity":{"start":"Mon, 03 Nov 2025 00:00:00 GMT","end":"Tue, 22 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1C:9C:A7:64:1D:50:C4:66:FC:B5:AE:9C:CB:DF:AC:1E:1F:4B:A0:83","sha256":"FD:6F:CF:79:47:AA:EF:54:72:2A:60:E2:1B:57:6B:D6:33:60:E2:67:DA:83:68:95:02:34:5B:66:53:45:A1:0E"}}},"request":{"raw":"GET /thumbs/009ECB0.jpg HTTP/1.1\r\nHost: cdn5-thumbs.motherlessmedia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: openresty/1.21.4.1\r\ndate: Sun, 23 Nov 2025 07:49:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 56014\r\nvary: x-s-token\r\nlast-modified: Mon, 01 Oct 2018 17:52:38 GMT\r\netag: \"dace-5772e7890217c\"\r\nx-cache: HIT\r\nx-whom: cdn03\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.21.4.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":56014,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 8000x8001, segment length 16, baseline, precision 8, 640x480, components 3","md5":"a6f43bd7a5921525cac8480e89552ecf","sha1":"49d239a74368ea7c2cc066e6aba5551f92ce4728","sha256":"d05c546f9823ae2acf86e8e89f0f600173076fb62aec4baf5625fb535ad4fcb8","sha512":"b0dc1f4985acd850448f031cf1f89ff609dd4a39178f3339d82e23713e2c68f2fc52222eb9138b33696136bbd4643b04f3a67743eb772b45a7fcfc1d3d4dc9dd","ssdeep":"1536:h73kysZDCEprUw/AAtyDiNZE/kqkdSl9U+T5cs:x3yvxUwy4EMqkQ9U+tcs","tlshash":"4043f12b79bfc0e1792f5bf04c3d5202b93f2e5a8251351e06252a44dd8c6d3fa917e8","first_seen":"2024-08-20T01:52:11.193541Z","last_seen":"2026-03-01T22:32:14.154037Z","times_seen":20,"resource_available":false,"data":null}},"time_used":2216,"timings":{"blocked":2161,"dns":0,"connect":0,"send":0,"wait":54,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pussyboy.net/thumb/backroom-casting-couch-molly.jpg","fqdn":"www.pussyboy.net","domain":"pussyboy.net","tld":"net"},"ip":{"addr":"104.21.95.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pussyboy.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 13:39:51 GMT","end":"Mon, 09 Feb 2026 14:38:38 GMT"},"fingerprint":{"sha1":"04:F6:DF:6F:6D:92:82:53:ED:71:58:5C:A8:C3:0E:E5:2A:C7:72:81","sha256":"94:78:34:52:3C:13:1B:97:5B:8C:06:49:59:D0:6E:0F:E8:63:A4:2D:1E:DB:ED:04:7E:0D:49:65:D7:DF:15:9A"}}},"request":{"raw":"GET /thumb/backroom-casting-couch-molly.jpg HTTP/1.1\r\nHost: www.pussyboy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18154\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YHKJvk3dYKg6VkvYH6vgC4%2F354F5mH9rqNY%2BXx9BWPBNpL1mz9VRAoak2J2ozmGarJ8RWb17CmRE%2FyMYYTw4kRq4zdsUylZzQ5GgqNab\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 29 Nov 2025 03:25:57 GMT\r\nlast-modified: Mon, 13 Mar 2023 23:30:40 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 102228\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-ray: 9a2f125fff335693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18154,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85\", progressive, precision 8, 350x200, components 3","md5":"8f374a34d6647304c8530b6887404278","sha1":"91c9eede214d45a5d2b092446e018d325ad07b3e","sha256":"235364997740e49bcc69124ab36a10812e3a7ace9b2c410ebe87adef040de912","sha512":"d2a520ad56b0a8f2eaae708eacebcd336e0d6ce97a50b7ffa88359e28ac248a255a3f573eb152b059b7e11365e197b19fa9e7856c39c528b883cfe199676d761","ssdeep":"384:qW3HV9qryHvyyK+QbkeTbegR/yxtMEVebnrL4:q+HJjmbkEH2tMxw","tlshash":"ec82d00d40aea782dd1ce13bbbad252a531326a2e52f02f19950c369cb3f6940c856f9","first_seen":"2025-11-23T07:50:46.58134Z","last_seen":"2025-11-23T07:50:46.58134Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1822,"timings":{"blocked":381,"dns":20,"connect":21,"send":0,"wait":11,"receive":1,"ssl":1351},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"media.beastythumbs.com/5/2/522270824/content/40000.jpg","fqdn":"media.beastythumbs.com","domain":"beastythumbs.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.529Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /5/2/522270824/content/40000.jpg HTTP/1.1\r\nHost: media.beastythumbs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":2142,"timings":{"blocked":2140,"dns":2,"connect":3,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.vidmo.pro/thumbs_320/1f/00/1f0022664ad335fd5a507cc1343abfc4/14585218.jpg","fqdn":"en.vidmo.pro","domain":"vidmo.pro","tld":"pro"},"ip":{"addr":"89.248.193.244","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"en.vidmo.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Nov 2025 20:48:10 GMT","end":"Thu, 19 Feb 2026 20:48:09 GMT"},"fingerprint":{"sha1":"B8:8B:9C:2B:E9:53:D3:85:0E:57:74:8D:32:07:72:DF:38:F3:91:DA","sha256":"9B:B3:9F:DD:FB:1B:36:C3:04:60:BF:DF:87:AA:AB:5D:F6:0D:45:20:77:9B:29:19:5F:C4:B6:F1:04:C9:23:3E"}}},"request":{"raw":"GET /thumbs_320/1f/00/1f0022664ad335fd5a507cc1343abfc4/14585218.jpg HTTP/1.1\r\nHost: en.vidmo.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16433\r\nlast-modified: Sat, 21 May 2022 18:22:30 GMT\r\nexpires: Wed, 18 Dec 2024 04:19:28 GMT\r\ncache-control: max-age=604800, public, no-transform\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16433,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3","md5":"47562a4a52148fb756cab9bbbc80c05e","sha1":"6032f0cc8c8b2b884f996778a39de407daaa4f7f","sha256":"451d33e1bd7e3bd777c31b111655af4239adbd6fa6354719a586e1f7a202e9a1","sha512":"eb9667abb1c29300b13623e5a6de9b31fa9769a6733e35861c519afb7dc5b256821f4d911cdf7f44db52b5b0b0d0c2fefdc26149f871c6eb1c973307c9ccc28b","ssdeep":"384:m2c4jBEhGY+E50JAwezUhPjXZwMukuPgrRKXxhLKrmx4JO3:m2jjBEZ+EeJUzUVw9/Tx4JO3","tlshash":"4672e0236822c208aebeeae5794f032feda375512f0ea6469405d0753f125000ecc74f","first_seen":"2025-03-17T03:14:34.807848Z","last_seen":"2026-01-14T21:59:06.754958Z","times_seen":14,"resource_available":false,"data":null}},"time_used":1168,"timings":{"blocked":1016,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-22","alert":"Sinkholed","trigger":"en.vidmo.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pornodiler.com/imgs/ph59a9b69f5967e.jpg","fqdn":"pornodiler.com","domain":"pornodiler.com","tld":"com"},"ip":{"addr":"91.227.144.56","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:45.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornodiler.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 21:34:39 GMT","end":"Thu, 05 Feb 2026 21:34:38 GMT"},"fingerprint":{"sha1":"26:C3:B5:EF:C1:52:D5:DD:C9:4C:E7:4D:ED:F9:C6:8E:66:16:B3:E2","sha256":"85:1D:ED:BE:A6:C7:D4:A7:BC:58:80:9D:0B:CC:BE:A7:23:4F:FC:50:39:88:FE:05:A0:F6:2C:46:69:C2:81:CF"}}},"request":{"raw":"GET /imgs/ph59a9b69f5967e.jpg HTTP/1.1\r\nHost: pornodiler.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Angie\r\nDate: Sun, 23 Nov 2025 07:49:46 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 34854\r\nLast-Modified: Tue, 10 Mar 2020 10:57:48 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=30\r\nETag: \"5e6772ac-8826\"\r\nExpires: Sat, 21 Feb 2026 07:49:46 GMT\r\nCache-Control: max-age=7776000\r\nX-Request-ID: a929d2ff1b412a0e6ad6120c492e8d98\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":34854,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x360, components 3","md5":"e9849a7e785627f9d1a0ea96446a359b","sha1":"2aba44b1bbcc566976c130cd9bec900e4ed0e9fa","sha256":"1f2eeffd16e7ec2e136807739863e9d1d3f73d415d23ae00a097d78d24f5e4e8","sha512":"76e42c0a17fbc2effee4a0d90e3cd6a87acd32b10583776f886eafd0e44ac46827e89bb0c826de6ea5d3cc5f4a12b9681bbefc02d269ec4376da99e551a0d6e8","ssdeep":"768:zA0X4+SKgfQmK/jEOiIQDmy16mjTZZmxy8cOyYBpeEhP8++1u3EL3qoQOpa:RX4+SHfQ5/7qwAFOySZp+1u0L3qoQOg","tlshash":"2ef2e1800ff418d9a2a9156e2d742f453f9dc227ccda76cf81d3927d20455f93d66a0a","first_seen":"2025-11-05T02:43:45.993111Z","last_seen":"2026-01-02T09:22:28.294189Z","times_seen":11,"resource_available":false,"data":null}},"time_used":3485,"timings":{"blocked":1630,"dns":1,"connect":22,"send":0,"wait":140,"receive":1,"ssl":1458},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avatars.mds.yandex.net/i?id=bf336ca5b392fbeebafc12a0d7e414e0-1006065-vthumb\u0026shower=30\u0026blur=30\u0026w=564\u0026h=318","fqdn":"avatars.mds.yandex.net","domain":"yandex.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:45.313Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /i?id=bf336ca5b392fbeebafc12a0d7e414e0-1006065-vthumb\u0026shower=30\u0026blur=30\u0026w=564\u0026h=318 HTTP/1.1\r\nHost: avatars.mds.yandex.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avatars.mds.yandex.net/get-vthumb/3210795/a91ec35ce2014be473a3493dbe84957b/564x318_1","fqdn":"avatars.mds.yandex.net","domain":"yandex.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:45.336Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /get-vthumb/3210795/a91ec35ce2014be473a3493dbe84957b/564x318_1 HTTP/1.1\r\nHost: avatars.mds.yandex.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jsjs.jpg4.icu/index.php?js=very","fqdn":"jsjs.jpg4.icu","domain":"jpg4.icu","tld":"icu"},"ip":{"addr":"104.21.18.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jpg4.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 12:55:24 GMT","end":"Mon, 29 Dec 2025 13:47:12 GMT"},"fingerprint":{"sha1":"96:85:BD:ED:76:A2:73:09:97:53:FA:59:74:7A:3B:21:78:1E:B0:55","sha256":"F2:46:44:0F:FB:CD:4B:FF:7C:0E:8B:3C:20:1A:52:F4:2B:40:FE:06:E3:6A:64:8F:01:48:F0:28:37:C6:95:6C"}}},"request":{"raw":"GET /index.php?js=very HTTP/1.1\r\nHost: jsjs.jpg4.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 23 Nov 2025 07:49:43 GMT\r\ncontent-type: text/html\r\nlocation: https://jsjj.gazo.space/index.php?js=very\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ng-jp-very1: /index.php?js=very\r\ncache-control: public, max-age=14400\r\nage: 201\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CKUvu8ez3iC8D8S75F%2FpF2iZIjQmhIChRiGcUrOekvVo0pT8RotFjqjIfdPVbF6bv%2BREPlVUh6%2FBUkDfIZEhKT9fGBf6hfZjIVtX\"}]}\r\ncf-ray: 9a2f1251fb855690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":5,"connect":1,"send":0,"wait":6,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.bad.news/images/dm/c760d5628ab03e53460bc2e9fd8a5c3b.jpg?secure=FbEfYZztm0BS3vgy-RnlDg==,1702608694","fqdn":"static.bad.news","domain":"bad.news","tld":"news"},"ip":{"addr":"104.26.12.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"323e0cdf.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 11:39:48 GMT","end":"Thu, 25 Dec 2025 12:39:44 GMT"},"fingerprint":{"sha1":"E2:E7:D4:63:E3:68:65:9A:90:D2:DB:8F:EA:7F:17:3D:A9:CF:8A:88","sha256":"5F:22:3E:64:D7:DC:55:D3:E2:7C:AF:7D:83:9A:D0:97:DB:A5:71:24:B7:CC:B5:D1:FC:9D:79:E4:0E:8B:DA:DD"}}},"request":{"raw":"GET /images/dm/c760d5628ab03e53460bc2e9fd8a5c3b.jpg?secure=FbEfYZztm0BS3vgy-RnlDg==,1702608694 HTTP/1.1\r\nHost: static.bad.news\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 35353\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kYkYYf3eGks3iCLGXHs%2B%2FjM3GeFkFzHcVG97ZFGNFdMVCdLSUAYDcIUOlW5XGoExe8kQLotXSOFxUuDhqQCj7IwyXVMnyUjCow7ZUgVi\"}]}\r\nage: 3876\r\ncf-bgj: imgq:100,h2pri\r\naccept-ranges: bytes\r\ncf-polished: origSize=36095\r\netag: \"4c318b490ba47460692dbdf985c4c34d\"\r\nlast-modified: Fri, 13 Dec 2024 23:26:56 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\ncf-ray: 9a2f12529893c759-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35353,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], progressive, precision 8, 640x360, components 3","md5":"214eaaa6278c3dc12fe3db25c240973f","sha1":"3c2dc0220b3641f6beeeeeb89abed6a27454aa9f","sha256":"cb054880d43e175fa2360457f948d1a5cb58765f8f4ced33f62af56d4cf25e02","sha512":"25957996847d6602a5f6e0e16d9d593f7da5fdac81c8d21c0854328d9123948a715977aaf6a56012a5c6aa267f2c51443ba373042c7a20c8bef5e66c0c27f495","ssdeep":"768:wpEmYy7GDg17ehi9/u+/fsw9fsDV2DBVaT7bWgrPALHLffLJzf1PZ:wpEmT17ii9/F/d9fsDoDPafbWWsrftjj","tlshash":"82f2e015ebf3b120ffa335b93ba9c2583a345f612aa452ef9280168218b55d0dd4b61b","first_seen":"2025-05-26T16:44:39.307473Z","last_seen":"2026-01-21T08:47:17.608884Z","times_seen":56,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":8,"connect":1,"send":0,"wait":20,"receive":2,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets-jpcust.jwpsrv.com/thumbs/htuY62Sb-720.jpg","fqdn":"assets-jpcust.jwpsrv.com","domain":"jwpsrv.com","tld":"com"},"ip":{"addr":"151.101.2.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /thumbs/htuY62Sb-720.jpg HTTP/1.1\r\nHost: assets-jpcust.jwpsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nretry-after: 0\r\nlocation: https://cdn.jwplayer.com/v2/media/htuY62Sb/poster.jpg?width=720\r\naccept-ranges: bytes\r\ndate: Sun, 23 Nov 2025 07:49:43 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410026-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1763884184.668651,VS0,VE0\r\nserver: nginx\r\ncache-control: max-age=900\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":7,"connect":19,"send":0,"wait":18,"receive":0,"ssl":218},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.po-kaki-to.com/wp-content/uploads/2024/12/1734093466.jpg","fqdn":"www.po-kaki-to.com","domain":"po-kaki-to.com","tld":"com"},"ip":{"addr":"172.67.144.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"po-kaki-to.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 08:30:35 GMT","end":"Wed, 07 Jan 2026 09:28:52 GMT"},"fingerprint":{"sha1":"46:A0:A7:82:A8:FC:6F:4E:CF:69:F3:2E:E8:AD:ED:95:0F:24:C9:BD","sha256":"F1:E6:5C:0F:67:3A:87:95:FC:DA:25:3B:AD:26:FC:D2:95:E2:7E:D0:42:A7:6B:2C:86:50:CD:5E:13:EA:AF:A7"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/1734093466.jpg HTTP/1.1\r\nHost: www.po-kaki-to.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 63913\r\nserver: cloudflare\r\nlast-modified: Fri, 13 Dec 2024 12:37:46 GMT\r\netag: \"675c2a9a-f9a9\"\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nexpires: Thu, 19 Feb 2026 07:00:22 GMT\r\ncache-control: max-age=7776000\r\naccept-ranges: bytes\r\nage: 175761\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VzyAa7ZXZm6FD5kZIvs0tQUjbQISPWZQjYKwy5EINtXZJmeG0AVNPYgcj0abTx5D%2FHbCtsmbJn0JXFfKURjDLgiBHbbGbTb4bfics07hPB0%3D\"}]}\r\ncf-ray: 9a2f12545d4b5688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63913,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 47x47, segment length 16, progressive, precision 8, 650x600, components 3","md5":"26daf5319fbcdad8e6e284a758e35f63","sha1":"046cbfd531a51b164f6aea5ee87d1edc619889ed","sha256":"761075ac865afa62c51b82f5af3d81c7b06c59b0ae313ef44dc4bf027519aa4e","sha512":"36377a96b9b608a1443f00947a19da5b785de68120c5e8aa197789a47083c0e4befe8e4084f45ab73de4314aa5cd64c4a806fbce1c974243ccf47633fd9bb95c","ssdeep":"1536:koehaFWLm4cD8MA/m2ujHyz0DNYuX0Jja6i:kodjHK0DZCjS","tlshash":"595302d273f226cbe29128f6345477618357774eba2379abc3b108cf8dd2575a24289c","first_seen":"2025-09-07T14:03:48.79954Z","last_seen":"2026-01-24T10:59:54.290159Z","times_seen":57,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blumpkintube.com/thumbs/51/179___13.jpg","fqdn":"blumpkintube.com","domain":"blumpkintube.com","tld":"com"},"ip":{"addr":"104.21.79.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blumpkintube.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 16:43:09 GMT","end":"Tue, 06 Jan 2026 17:40:50 GMT"},"fingerprint":{"sha1":"1E:5F:43:D1:62:A9:3B:35:04:2F:A8:7F:C8:C0:55:4E:7C:DE:80:C4","sha256":"DF:89:D0:CE:A3:31:22:68:E9:31:A0:B5:F9:14:C0:4A:DF:2E:12:2E:C1:09:E3:FA:92:B8:02:32:4B:DA:36:A5"}}},"request":{"raw":"GET /thumbs/51/179___13.jpg HTTP/1.1\r\nHost: blumpkintube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14128\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Oct 2019 19:42:38 GMT\r\netag: \"5d93ac2e-3730\"\r\nexpires: Sat, 24 Oct 2026 04:55:37 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, no-transform\r\nage: 2602448\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rFzALcjA2ziDhusCZ9mRzHS169PEFrqV42hOZq%2FouQMOw5gbdtfK1Ju6yQR2gOkEP3kMcm6lRVB7D2JRSCLL7wWk9fMESe5kn3I%2Fub9x\"}]}\r\ncf-ray: 9a2f12649e9bb503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14128,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 312x208, components 3","md5":"442b10c86f6ac3ebc911964f48d42e83","sha1":"2bf4cac9beb3016a780e270f2a664891d8ddfff8","sha256":"4bdf48424fc03260b3f8ea4ac3760f50f1f0807209d9e2b721569469029c0c90","sha512":"99e61e25a1685175e7db8eca424f5b30d015893285ea26c32aa2f2e1323a735a6d49c16846c735c0b90f9b969129a3ad5aa079f5898c425ee762e2bb4d158606","ssdeep":"384:SXrwGTUXD2XCAJhxNUG5IcNAXocrd5wwqLrzjqlc0FmlYrwy:S7wGADIVJh3NXTcrdELrPqlc0Fss","tlshash":"6b52cf87a79f17c7f99cc02b2c396ec415c628d3a4973389c7f0968189626f6c977521","first_seen":"2024-05-07T21:21:18Z","last_seen":"2026-01-19T20:25:46.294147Z","times_seen":46,"resource_available":false,"data":null}},"time_used":1867,"timings":{"blocked":420,"dns":4,"connect":5,"send":0,"wait":11,"receive":1,"ssl":1412},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ekkofilm.dk/media/dyn/film/still/generated/2535_1200x630.png","fqdn":"www.ekkofilm.dk","domain":"ekkofilm.dk","tld":"dk"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.513Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /media/dyn/film/still/generated/2535_1200x630.png HTTP/1.1\r\nHost: www.ekkofilm.dk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":2159,"timings":{"blocked":2157,"dns":2,"connect":78,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"555.tourismdaily.ru/roxtube/wp-content/uploads/2019/03/%E0%B8%84%E0%B8%B9%E0%B9%88%E0%B8%A7%E0%B8%B1%E0%B8%A2%E0%B8%A3%E0%B8%B8%E0%B9%88%E0%B8%99-%E0%B9%82%E0%B8%A3%E0%B8%87%E0%B9%80%E0%B8%A3%E0%B8%B5%E0%B8%A2%E0%B8%99%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B9%84%E0%B8%9B-%E0%B9%81%E0%B8%AD%E0%B8%9A%E0%B8%A1%E0%B8%B2%E0%B9%80%E0%B8%A2%E0%B9%87%E0%B8%94%E0%B8%97%E0%B8%B5%E0%B9%88%E0%B8%9A%E0%B9%89%E0%B8%B2%E0%B8%99-%E0%B9%80%E0%B8%AB%E0%B9%87%E0%B8%99%E0%B8%AB%E0%B8%99%E0%B9%89%E0%B8%B2%E0%B8%8A%E0%B8%B1%E0%B8%94%E0%B9%81%E0%B8%88%E0%B9%8B%E0%B8%A7.png","fqdn":"555.tourismdaily.ru","domain":"tourismdaily.ru","tld":"ru"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:45.295Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /roxtube/wp-content/uploads/2019/03/%E0%B8%84%E0%B8%B9%E0%B9%88%E0%B8%A7%E0%B8%B1%E0%B8%A2%E0%B8%A3%E0%B8%B8%E0%B9%88%E0%B8%99-%E0%B9%82%E0%B8%A3%E0%B8%87%E0%B9%80%E0%B8%A3%E0%B8%B5%E0%B8%A2%E0%B8%99%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B9%84%E0%B8%9B-%E0%B9%81%E0%B8%AD%E0%B8%9A%E0%B8%A1%E0%B8%B2%E0%B9%80%E0%B8%A2%E0%B9%87%E0%B8%94%E0%B8%97%E0%B8%B5%E0%B9%88%E0%B8%9A%E0%B9%89%E0%B8%B2%E0%B8%99-%E0%B9%80%E0%B8%AB%E0%B9%87%E0%B8%99%E0%B8%AB%E0%B8%99%E0%B9%89%E0%B8%B2%E0%B8%8A%E0%B8%B1%E0%B8%94%E0%B9%81%E0%B8%88%E0%B9%8B%E0%B8%A7.png HTTP/1.1\r\nHost: 555.tourismdaily.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":1376,"timings":{"blocked":1374,"dns":2,"connect":3,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.vidmo.pro/thumbs_320/15/e3/15e379be1b66e8554ed81acd5aadcb0d/12376954.jpg","fqdn":"en.vidmo.pro","domain":"vidmo.pro","tld":"pro"},"ip":{"addr":"89.248.193.244","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"en.vidmo.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Nov 2025 20:48:10 GMT","end":"Thu, 19 Feb 2026 20:48:09 GMT"},"fingerprint":{"sha1":"B8:8B:9C:2B:E9:53:D3:85:0E:57:74:8D:32:07:72:DF:38:F3:91:DA","sha256":"9B:B3:9F:DD:FB:1B:36:C3:04:60:BF:DF:87:AA:AB:5D:F6:0D:45:20:77:9B:29:19:5F:C4:B6:F1:04:C9:23:3E"}}},"request":{"raw":"GET /thumbs_320/15/e3/15e379be1b66e8554ed81acd5aadcb0d/12376954.jpg HTTP/1.1\r\nHost: en.vidmo.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9959\r\nlast-modified: Tue, 13 Oct 2020 07:27:34 GMT\r\nexpires: Sun, 02 Feb 2025 17:08:29 GMT\r\ncache-control: max-age=604800, public, no-transform\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9959,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc58.35.100\", baseline, precision 8, 320x240, components 3","md5":"057070f4acd82c53361f21fd82eaf81a","sha1":"b81bb91338a8befe123bb9268881879a6366f9ec","sha256":"83e82928f9fdf342f07daf0d9d268675ebff61411058ecd4c51140e88199ff92","sha512":"af05aea6106bd8450faeee1bc6f37b0636d077b5c8777749f6c49e0c89e786b21d46538de7e2a7d4348fe541ee7909d1c0a66731f9882891d3ac770bfb83d589","ssdeep":"192:tBp9bykrP9CzQTdxBn+kU5pKhLpHnZ3sS4dNGg6BOe4cfSd4efxGynWi8v:/qeL+L5cLZnJwIOe4CK4gx/W1","tlshash":"9822bf0e890bced758694633af3149241fc77f6d5b419b6aec853078cab9ef6948c344","first_seen":"2025-05-02T17:12:39.931546Z","last_seen":"2026-01-20T05:39:08.063818Z","times_seen":17,"resource_available":false,"data":null}},"time_used":1920,"timings":{"blocked":278,"dns":42,"connect":67,"send":0,"wait":151,"receive":0,"ssl":1358},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-22","alert":"Sinkholed","trigger":"en.vidmo.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ak-br-pic.kwai.net/upic/2025/06/18/09/BMjAyNTA2MTgwOTE4MzVfMTUwMDAxNDk5NzQ2Mzc5XzE1MDEwOTAzNDYzMzQwNl8yXzM=_oscn2_B8b3bbca6a58811506579c4d81165d5d3.webp","fqdn":"ak-br-pic.kwai.net","domain":"kwai.net","tld":"net"},"ip":{"addr":"95.101.11.72","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kwai.net","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 16 Apr 2025 08:08:20 GMT","end":"Mon, 18 May 2026 08:08:19 GMT"},"fingerprint":{"sha1":"88:41:08:16:B1:09:65:11:BC:B7:74:9F:3C:2B:7F:E4:B7:29:47:FC","sha256":"A7:08:07:07:A1:B9:AB:05:EF:83:67:DA:40:EB:1F:28:60:07:40:83:60:0A:E5:69:22:53:7E:B8:ED:61:8B:E7"}}},"request":{"raw":"GET /upic/2025/06/18/09/BMjAyNTA2MTgwOTE4MzVfMTUwMDAxNDk5NzQ2Mzc5XzE1MDEwOTAzNDYzMzQwNl8yXzM=_oscn2_B8b3bbca6a58811506579c4d81165d5d3.webp HTTP/1.1\r\nHost: ak-br-pic.kwai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 7846\r\netag: \"157C55FAE192A1C0FBE07AAEDDEA0112\"\r\nx-bs-hash-crc64ecma: 2094491353276059049\r\nx-bs-object-status: 0\r\nlast-modified: Wed, 18 Jun 2025 01:20:11 GMT\r\nx-nws-log-uuid: 1351121405235578964\r\nx-amz-cf-pop: SIN2-P10\r\nx-amz-cf-id: XT7jdWfNViXFmOUwRJvBui5CWuZ2kIBuhnc0ntcese4xScVj1G9mig==\r\nx-ks-cache: Hit from 23.53.119.216, Hit from 23.53.119.204, Hit from 23.64.122.197, Hit from 23.64.122.221, Hit from 23.64.122.197, Hit from 23.64.122.221, Hit from 23.64.122.197, Hit from 23.64.122.221, Hit from 23.53.119.204, Hit from 23.53.119.216, Hit from 23.64.122.197, Hit from 23.53.119.216, Hit from 23.64.122.221, Hit from 23.64.122.197, Hit from 23.64.122.207, Miss from 23.64.122.197, Hit from 2.21.240.96, Miss from 95.101.11.72\r\nx-mai-cache-status: Y0-L1-0\r\ncache-control: max-age=31536000\r\nexpires: Mon, 23 Nov 2026 07:49:46 GMT\r\ndate: Sun, 23 Nov 2025 07:49:46 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nakamai-mon-iucid-del: 1859565\r\nx-ks-request-id: 0.440b655f.1763884186.10d3504f\r\nx-ks-client-ip: 91.90.42.154\r\nkwaisign: null\r\ntiming-allow-origin: *\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Server,range,hdntl,hdnts,Akamai-Mon-Iucid-Ing,Akamai-Mon-Iucid-Del,Akamai-Request-BC\r\naccess-control-allow-headers: origin,range,hdntl,hdnts\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":7846,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 350x640, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"157c55fae192a1c0fbe07aaeddea0112","sha1":"c4fe5336857c93dd21fa0b5bf52d175cc8087f9b","sha256":"e448717cc0ae46f3b14ba2517ee8439963e8de5d049579a2574e6c0ee2ed0bc9","sha512":"de02bdbeb97ca0122df5370b651afd1bfcdcb6c2b824f589758186ea60367388e4ed29267a8415560118a549aa724426a600ecd8f798c1ea8e13544f44965559","ssdeep":"192:atI9Vj/dl2ICIK+NNlmseoXBDe+JKSMNmMmClYHQ5Y37BRaIda4K:aEVzd4ICI3NLeeFpJ/RO5Y37VdvK","tlshash":"e2f1cf164a7f5c1f38a5cb4bcfb2429910810f1b8a78c97567d0c43f40ed9ca5e7e258","first_seen":"2025-11-23T07:50:46.585912Z","last_seen":"2026-01-11T15:11:42.472172Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1832,"timings":{"blocked":344,"dns":3,"connect":15,"send":0,"wait":47,"receive":0,"ssl":1411},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ds2.obmenvsemfilesec.com/fo/files_attachments/c07/805/c07805cefa7c0f250fef326b38a93cb5.jpg","fqdn":"ds2.obmenvsemfilesec.com","domain":"obmenvsemfilesec.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.505Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /fo/files_attachments/c07/805/c07805cefa7c0f250fef326b38a93cb5.jpg HTTP/1.1\r\nHost: ds2.obmenvsemfilesec.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":2166,"timings":{"blocked":2164,"dns":2,"connect":87,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ansuko.net/wp-content/uploads/2024/12/ajemssbu_header.jpg","fqdn":"ansuko.net","domain":"ansuko.net","tld":"net"},"ip":{"addr":"104.21.54.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ansuko.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 11:42:18 GMT","end":"Tue, 06 Jan 2026 12:39:58 GMT"},"fingerprint":{"sha1":"F5:7A:D2:13:21:CE:EB:03:E2:D6:BE:F2:03:73:1F:55:8F:6B:68:4A","sha256":"4E:51:47:18:74:38:C5:CD:59:59:6B:15:27:21:87:E4:21:5C:E7:A4:96:C3:F6:7A:F3:06:9F:82:BE:6B:3A:65"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/ajemssbu_header.jpg HTTP/1.1\r\nHost: ansuko.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:44 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 993280\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nlast-modified: Tue, 11 Nov 2025 19:55:03 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JrdTOyNf3rc%2B24v8FO6GZ5Bqe1LjJ%2FYz41%2FzgsrirmRQ1yWt31BeT5Jde4n516d9%2FNLArKTt%2BW2lj5RYFADESjThElaUoESz\"}]}\r\ncf-ray: 9a2f12567aebb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":349957,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 1320x1320, components 3","md5":"09a1a0a566154f0a80434ea27907395c","sha1":"7a5dc4fbe8afc66f6a14d02b158110c88961ef4b","sha256":"0aebd70035c00a45f953cc8e5b25dcca280faa3bfe5bfd4b6df301658bca73df","sha512":"dc43a398fc11f46a5d012261793e79c8bc7d5c7801e28bf9842e89b19e092b436668450dc77d88e4385f4131691a78f46cd75d7535c3c32a186cf6e87c9f79bc","ssdeep":"6144:LG/QhmOSiPzOeAhGP9cOiaBldqwJC/PLgUnG249pVaxo4+e/Xdo8awo5b:C/pvidHFDBldC/PLgmX4XVyhzto8awO","tlshash":"207422360632ee0d63186a9ebdc08fdf7fc5038a05d9b4f9844bc9a975da7b16710e18","first_seen":"2025-11-23T07:50:46.586659Z","last_seen":"2026-01-14T19:38:43.25203Z","times_seen":8,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/optimized/1X/1b6b8566e32e89a38f1a106baa9f6896f811b12a_2_581x1024.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 03:08:59 GMT","end":"Mon, 02 Feb 2026 03:08:58 GMT"},"fingerprint":{"sha1":"E1:A5:18:66:02:A1:30:48:C0:63:B8:0D:A6:A0:6A:4D:49:FB:31:A4","sha256":"F3:EF:EA:51:6F:29:3C:97:1C:9E:B5:C9:DB:69:E9:BE:55:EA:E1:47:AC:EB:1B:EB:A6:2A:5B:B1:74:85:D0:AB"}}},"request":{"raw":"GET /uploads/default/optimized/1X/1b6b8566e32e89a38f1a106baa9f6896f811b12a_2_581x1024.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 07:49:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 66398\r\nlast-modified: Tue, 12 Aug 2025 05:24:30 GMT\r\nexpires: Mon, 23 Nov 2026 07:49:43 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":66398,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 581x1024, components 3","md5":"9e5fedf94f2a4a6535884dd0ecfa5e98","sha1":"42731a604a6cbcf52b96bb816d37e57a4f65790c","sha256":"dde957917e3dd3d19b8e5e9d4d1f2d70cb2c041561610198c53f49ab7901e9e4","sha512":"a0df1035eabb55cbd1e342fbefdf8a697256bb9ad39330c9492fde011c45f237e901ee3843ef7ed4cea4fe47e35d551f2d45e0ef4aac868f953871826a309f83","ssdeep":"1536:iRx0b7aB8OcbMHLhzcrZu6ThYiDQN15xvhfE5VqExQ7WmUiYKbjc:kxAuBybMHL6rHThnQN15bE3pVFWc","tlshash":"bc530128033a35f8f3391c274757f12276d2a9846a961ab5ccd860e44bd81fc7a6a5cf","first_seen":"2025-06-15T07:12:42.932687Z","last_seen":"2025-11-25T10:56:18.772267Z","times_seen":26,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1259667713.vod2.myqcloud.com/fa6ac7b2vodtransuse1259667713/4e28536e5145403692994452962/sampleSnapshot/sampleSnapshot_20196_0.jpg","fqdn":"1259667713.vod2.myqcloud.com","domain":"myqcloud.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.525Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /fa6ac7b2vodtransuse1259667713/4e28536e5145403692994452962/sampleSnapshot/sampleSnapshot_20196_0.jpg HTTP/1.1\r\nHost: 1259667713.vod2.myqcloud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":2147,"timings":{"blocked":2145,"dns":2,"connect":52,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fqjpg4.top/upload/vod/20250708-1/afbb269fc5be428c316cac0a4e5859d1.png","fqdn":"fqjpg4.top","domain":"fqjpg4.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.532Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20250708-1/afbb269fc5be428c316cac0a4e5859d1.png HTTP/1.1\r\nHost: fqjpg4.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":2138,"timings":{"blocked":2136,"dns":2,"connect":170,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"fqjpg4.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/optimized/2X/6/6cf421072541373606705490ee51da7ce4d4088e_2_566x1024.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 03:08:59 GMT","end":"Mon, 02 Feb 2026 03:08:58 GMT"},"fingerprint":{"sha1":"E1:A5:18:66:02:A1:30:48:C0:63:B8:0D:A6:A0:6A:4D:49:FB:31:A4","sha256":"F3:EF:EA:51:6F:29:3C:97:1C:9E:B5:C9:DB:69:E9:BE:55:EA:E1:47:AC:EB:1B:EB:A6:2A:5B:B1:74:85:D0:AB"}}},"request":{"raw":"GET /uploads/default/optimized/2X/6/6cf421072541373606705490ee51da7ce4d4088e_2_566x1024.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 07:49:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 58999\r\nlast-modified: Tue, 12 Aug 2025 05:18:36 GMT\r\nexpires: Mon, 23 Nov 2026 07:49:43 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58999,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 566x1024, components 3","md5":"26d7d48fc1c8825cbebb0f08622095f8","sha1":"17fa12e6c4a897d2340908678551a2faf048a27e","sha256":"520a3c710bd9c63fcd68d5e4209e845a6c1a6ffc8804c230f7cec000a4fc1d90","sha512":"af7b4318684c00a8b171335edf37cf1e3d164d43f8f6d53836e929c547b2541549369bdaee0e73bb22ca7a90a348b9bc4a6eeeabc01086ffb63ce3bac37b08fb","ssdeep":"1536:pRzK0QeNKgcM3oqYuE3emtJr04nWO50NjE5WK4pSqgyTD:pRzKvLgj3oDcErRnX50NjEzWhTD","tlshash":"6343f133d67e0f528d49ab069b854e6e42d7cf28bc85ef824d1ae33a74c7c064a54761","first_seen":"2025-07-25T10:57:15.008468Z","last_seen":"2026-01-08T19:23:00.273701Z","times_seen":40,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filmesporno.xxx/wp-content/uploads/2024/05/bocil-ngewe-ibu-nyaa-abb.jpg","fqdn":"filmesporno.xxx","domain":"filmesporno.xxx","tld":"xxx"},"ip":{"addr":"192.124.249.88","port":443,"asn":30148,"as":"SUCURI-SEC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filmesporno.xxx","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Sat, 27 Sep 2025 21:02:33 GMT","end":"Fri, 26 Dec 2025 21:02:33 GMT"},"fingerprint":{"sha1":"79:48:A5:80:40:A8:B4:15:7C:D2:0D:0F:2C:B5:08:E9:3E:EE:BE:D6","sha256":"A9:F3:AE:04:9D:B1:F4:5B:74:59:06:12:D3:B4:02:6B:07:EA:4D:4A:89:66:35:24:F3:6E:01:CE:15:12:66:41"}}},"request":{"raw":"GET /wp-content/uploads/2024/05/bocil-ngewe-ibu-nyaa-abb.jpg HTTP/1.1\r\nHost: filmesporno.xxx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:47:10 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10191\r\nx-sucuri-id: 19032\r\netag: \"6650e5cb-27cf\"\r\nversion: MS25092703\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-served-by: filmesporno.xxx\r\nserver: Sucuri/Cloudproxy\r\nx-sucuri-cache: HIT\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Sucuri","description":"Sucuri is a cybersecurity company that provides website security solutions and services.","website":"https://sucuri.net/","common_platform_enumeration":"","icon":"sucuri.svg","categories":["CDN","Security"]}],"data":{"size":10191,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", progressive, precision 8, 352x198, components 3","md5":"a627f9e3794269a6dc0fec12852647a4","sha1":"955e08e51fb3c728e753d2c563b6c7b821bc7886","sha256":"adfa3c0b67cf18e4ae17e9f31d3849bae5ce40add207ba9a1986ac76d9f83be8","sha512":"2d5385399ebaebafd49d7fb4f5570b306ee7c8d7bf774c0e7326d1b95ff818a351346fe06d863d38a11380e8b3715d9979a1c16c91eded9e621345c0dfa5d086","ssdeep":"192:H2icxqGw9RpE5Eo9LvZWe1SbB9NgK/IilimgakLDGJWkvuW92i2l0anu:9N9FuFWeo1j7lipakX4HAtu","tlshash":"4222bf3eca0e4196f5b610775b6ad730348799c65cc0b949aac41abc4cb0c1a6cc398e","first_seen":"2025-02-26T09:30:37.090429Z","last_seen":"2026-03-02T16:55:39.814755Z","times_seen":12,"resource_available":false,"data":null}},"time_used":2323,"timings":{"blocked":-1,"dns":17,"connect":50,"send":0,"wait":32,"receive":1,"ssl":2191},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chezcathy.com/ext/pre_5824385990.jpg","fqdn":"chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"138.199.36.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chezcathy.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 08:11:44 GMT","end":"Thu, 08 Jan 2026 08:11:43 GMT"},"fingerprint":{"sha1":"9A:4C:4E:E8:A3:79:B0:5B:71:90:4A:26:72:7F:2D:C8:C2:F3:14:A0","sha256":"EB:A3:32:86:C1:B0:23:E9:CE:1C:20:4A:94:7B:04:CD:37:94:7D:63:8F:88:EC:BD:2F:48:A3:42:E5:C8:95:49"}}},"request":{"raw":"GET /ext/pre_5824385990.jpg HTTP/1.1\r\nHost: chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11902\r\nserver: BunnyCDN-DE1-1054\r\ncdn-pullzone: 4336709\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=7776000\r\netag: \"66698d89-2e7e\"\r\nexpires: Tue, 10 Feb 2026 18:15:53 GMT\r\nlast-modified: Wed, 12 Jun 2024 11:59:05 GMT\r\nx-cache-status: HIT\r\nx-cache-type: MEDIA-SHARED\r\ncdn-proxyver: 1.40\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 11/12/2025 18:15:53\r\ncdn-edgestorageid: 1334\r\ncdn-requestid: 3e1568de4fd464b51e74a42e2b91749d\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":11902,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x226, components 3","md5":"847320e8fdc205ce2efa1c9b0e507d6a","sha1":"f04c4a16c50283fbd25490f5a06e0b1987407a37","sha256":"06f73914a314abc99dc81023b6b5c9eba09c7b34eb4f5633b0f5f0329dc32752","sha512":"3c606ede86c5333e4dbb56ab9772db32a0cc76348008be21dd9c457d537eba26a19f3fff39c12bc4fa528c5be28f0a2f6be44222e0530f6beaed1c1dc2621406","ssdeep":"192:GsZqz3en7tKU4UdLCB3684nGRIQdux7ntj0M+qmq8UOpvjKE3ErsB0u7oJZ:OKhKgLkK84noI3tV+Fp93Er1b","tlshash":"d732c0489fddb440f0bfb071f68a77022914e84157e3aa578e8935a94710ee78d7b351","first_seen":"2024-12-07T02:02:28.179655Z","last_seen":"2026-03-01T22:30:17.190698Z","times_seen":56,"resource_available":false,"data":null}},"time_used":1769,"timings":{"blocked":274,"dns":11,"connect":30,"send":0,"wait":33,"receive":0,"ssl":1409},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.dgpot.com/uploader/10649/cb4bf794-9647-43bf-8eb7-cfc55d475614.jpg","fqdn":"i.dgpot.com","domain":"dgpot.com","tld":"com"},"ip":{"addr":"104.21.14.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dgpot.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 11:26:21 GMT","end":"Wed, 07 Jan 2026 12:25:07 GMT"},"fingerprint":{"sha1":"97:71:3F:0F:C6:E7:0F:21:1D:A4:C9:DB:27:68:E7:B5:D0:96:9B:BE","sha256":"31:D7:E3:2A:DF:8B:F9:6C:07:8C:3F:33:C8:4F:60:B8:2C:03:3B:5A:24:CF:E7:D9:F2:AA:45:CC:12:BE:0D:35"}}},"request":{"raw":"GET /uploader/10649/cb4bf794-9647-43bf-8eb7-cfc55d475614.jpg HTTP/1.1\r\nHost: i.dgpot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 69500\r\nserver: cloudflare\r\nlast-modified: Fri, 21 Sep 2018 06:56:18 GMT\r\nexpires: Thu, 27 Nov 2025 12:06:36 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 243789\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u0iOUjV5oWpSxOqbMvLeyaGBVzZrkiYE%2B7EvtTKxOcJ2WaMLCluCHjiIDfF4EnPM6GhrD3DVxVxKQEgy1CdxV6%2FjUvzIQ19kdA%3D%3D\"}]}\r\ncf-ray: 9a2f1263383ab500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69500,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 750x674, components 3","md5":"b2306d02b0b987f51ed61c721a90c12e","sha1":"87b5a754c9d25d343f6c69baa1a8c4ea3b83243a","sha256":"94a871769d47acf4a5a6fe8768f34d7cfb0399743ba056d3b6b5a7a5cdf9ed57","sha512":"92248353a0a25e2032216b9fc783dd9570fd5c816cc5564650bc9e01df7ea6f6838b63663b694c41a573b5ef57ddaca0eb47f3fb402688a7fcc2801bb724c124","ssdeep":"1536:pWiZCXugfdmdxAEc8OBbtcFATQpCRZJWiHdnhX/S4E9lfaB:Ds3fdrEc8OIFA8I3Ui7X/S79lfM","tlshash":"bb6302ec3385874fd1add83e436b8485bdbf7d808ef8568a6cc370682b950e4958dd46","first_seen":"2025-11-19T08:51:47.637846Z","last_seen":"2026-01-16T19:28:40.248735Z","times_seen":15,"resource_available":false,"data":null}},"time_used":1783,"timings":{"blocked":339,"dns":4,"connect":1,"send":0,"wait":13,"receive":3,"ssl":1422},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"media.afterrape.net/9/5/957963346/content/40000.jpg","fqdn":"media.afterrape.net","domain":"afterrape.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.528Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /9/5/957963346/content/40000.jpg HTTP/1.1\r\nHost: media.afterrape.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":2143,"timings":{"blocked":2141,"dns":2,"connect":3,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.vidmo.pro/thumbs_320/dd/13/dd130265a0a19559ba4f43ba9d00a776/11958111.jpg","fqdn":"en.vidmo.pro","domain":"vidmo.pro","tld":"pro"},"ip":{"addr":"89.248.193.244","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"en.vidmo.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Nov 2025 20:48:10 GMT","end":"Thu, 19 Feb 2026 20:48:09 GMT"},"fingerprint":{"sha1":"B8:8B:9C:2B:E9:53:D3:85:0E:57:74:8D:32:07:72:DF:38:F3:91:DA","sha256":"9B:B3:9F:DD:FB:1B:36:C3:04:60:BF:DF:87:AA:AB:5D:F6:0D:45:20:77:9B:29:19:5F:C4:B6:F1:04:C9:23:3E"}}},"request":{"raw":"GET /thumbs_320/dd/13/dd130265a0a19559ba4f43ba9d00a776/11958111.jpg HTTP/1.1\r\nHost: en.vidmo.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27795\r\nlast-modified: Fri, 05 Jun 2020 14:31:30 GMT\r\nexpires: Wed, 10 Apr 2024 11:06:25 GMT\r\ncache-control: max-age=604800, public, no-transform\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27795,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 320x240, components 3","md5":"4ad15afd38b9a6bbc5ed19033185b265","sha1":"94a198c741580eac3212d822e5d7a81f8dc7e3a2","sha256":"a5e932c7c359e9e9a410908d03f35643b83d209708c350d2f5d6466fbb50a6f8","sha512":"c0e649b73cc9bfc6389a098964a2a4d218802e731ba9307e6a2ab85666415dd475fa10b4516e25e4e646cfcdba8e09fbae12f4c9cb0abe99b8945b2b68a663ea","ssdeep":"768:Ys/Tfk2eVr/gbOogP4znNJo6h7tph6/3tWHfv:Y6TVeVzIOdSNJo0k/dQv","tlshash":"44c2d07b4c991a0394b1433d7f43892d66caee2c2d4174ae940ade45fe962e1da0c0ad","first_seen":"2024-08-19T23:53:21.324111Z","last_seen":"2026-04-12T19:29:51.757199Z","times_seen":30,"resource_available":false,"data":null}},"time_used":1974,"timings":{"blocked":396,"dns":10,"connect":65,"send":0,"wait":83,"receive":1,"ssl":1402},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-22","alert":"Sinkholed","trigger":"en.vidmo.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"timg216.top/videos/97dbd1d3250027940b6d0ceb0fa8305360ecdd05/cover/5_505_259?ih=1","fqdn":"timg216.top","domain":"timg216.top","tld":"top"},"ip":{"addr":"172.66.155.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timg216.top","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 04:28:49 GMT","end":"Wed, 31 Dec 2025 05:27:41 GMT"},"fingerprint":{"sha1":"0A:EF:84:22:E6:0D:56:57:B7:F6:C3:7D:6D:91:EF:17:49:1B:A6:01","sha256":"B5:3B:20:B4:05:8F:49:AA:87:FC:31:5E:8E:7E:0C:C5:77:A9:A2:5E:FA:54:61:41:C2:B4:A3:9D:CA:1B:2B:AA"}}},"request":{"raw":"GET /videos/97dbd1d3250027940b6d0ceb0fa8305360ecdd05/cover/5_505_259?ih=1 HTTP/1.1\r\nHost: timg216.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 74470\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Mar 2025 14:57:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"67c714f6-122e6\"\r\nexpires: Fri, 21 Nov 2025 17:33:33 GMT\r\ncache-control: public, max-age=31536000, stale-if-error=7200\r\nt-cache: LHIT\r\naccept-ranges: bytes\r\nage: 283079\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QujiHgtvwTmzirBXvsFj77j9sFxLNaPypw1o2SmIKDNIKRLvKtP%2Bw401pnELXrycyYwnWe4O8x%2Fb1rNv0YlSAR27uV5VLrgZ%2Bg%3D%3D\"}]}\r\ncf-ray: 9a2f12624bddb505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74470,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc57.107.100\", baseline, precision 8, 505x259, components 3","md5":"2e1def3c76ec3baef35e8d2d265552b9","sha1":"b6caf97c4bb812b1fe1b2bb2cfbc65564130c070","sha256":"f134feccbd84aef9620c10d2bba7727c0649a4e861b5a1d5bcdf8aa7e76b3d96","sha512":"65828e7d5259283dadb81fcae56a8bcf375f8f29e5b7750157232eed71e89c68c7f1d03c41e30e0e3bee51c34fec2e7b448f639255d8f2860a6d45e6ed057606","ssdeep":"1536:eoZj6nF6OfTdrInSdu94qylMwMoSYaA13mKhXqfq/ovzEFKo:Qn7QSwpkM9oCA1WKhayhQo","tlshash":"077312bae986e4a2c65ca74dff2d0038ec63c612f6c7a737e7ae581cb112603c14d854","first_seen":"2025-02-26T09:30:37.25813Z","last_seen":"2026-01-21T08:47:17.568261Z","times_seen":29,"resource_available":false,"data":null}},"time_used":1757,"timings":{"blocked":332,"dns":2,"connect":3,"send":0,"wait":12,"receive":2,"ssl":1394},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"timg216.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zh.pornoingyen.net/media/thumbs/9/v08259.webp?1618487897","fqdn":"zh.pornoingyen.net","domain":"pornoingyen.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.505Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /media/thumbs/9/v08259.webp?1618487897 HTTP/1.1\r\nHost: zh.pornoingyen.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":2167,"timings":{"blocked":2165,"dns":2,"connect":160,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cav105.com/contents/videos_screenshots/6000/6857/preview.jpg","fqdn":"cav105.com","domain":"cav105.com","tld":"com"},"ip":{"addr":"45.145.72.132","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cav102.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Oct 2025 10:48:19 GMT","end":"Sat, 17 Jan 2026 10:48:18 GMT"},"fingerprint":{"sha1":"82:94:6E:AC:FA:1B:B3:AD:3A:52:F3:44:5C:22:68:8E:3A:C1:15:86","sha256":"C9:61:FC:04:4A:41:13:4F:00:A5:6F:C2:6B:3D:0E:B4:B1:C6:5B:C5:42:BF:0A:4E:EF:27:16:51:8C:26:96:EA"}}},"request":{"raw":"GET /contents/videos_screenshots/6000/6857/preview.jpg HTTP/1.1\r\nHost: cav105.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 07:49:44 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 86314\r\nlast-modified: Sat, 24 Sep 2022 09:10:11 GMT\r\netag: \"632ec973-1512a\"\r\nexpires: Sun, 23 Nov 2025 07:50:44 GMT\r\ncache-control: max-age=60\r\nstrict-transport-security: max-age=31536000\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":86314,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc57.89.100\", baseline, precision 8, 720x1280, components 3","md5":"6ca964852b4a4837d0db1b710da4f99c","sha1":"51edf0f3694b857b4ff45fff3e1f75c693c7365c","sha256":"47009292c0635b1829fc1cea67993ccdb54e790855c7dcf949130ebc7bde47e2","sha512":"64fca821f8ea8ad5b485858d70a18d3a8767360af7c0766e7acfb561bab7beb37eab0865fbcfae8111788c4dff744c53376475f6c8aa80c0afbccb8b7433e7aa","ssdeep":"1536:a+pm8g0qKaS2XYfWZXiiS820+Qlr0XyhJhGrr1CPYuOQZU/5ZOYFItPqd:a+puKAaWZq85rNmrr133B/bxIPqd","tlshash":"5883f249b8b3cb16c080f731b66daf4634c51e65b8e88b1bdb18193365125dbc3d867e","first_seen":"2024-04-24T05:35:28Z","last_seen":"2026-03-02T16:55:39.770379Z","times_seen":74,"resource_available":false,"data":null}},"time_used":1856,"timings":{"blocked":-1,"dns":25,"connect":201,"send":0,"wait":171,"receive":498,"ssl":935},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ymlporn1.net/http://img-egc.xvideos-cdn.com/videos/thumbs/c9/2a/af/c92aaf9614c890ca7d6885cb7813ef68/c92aaf9614c890ca7d6885cb7813ef68.15.jpg","fqdn":"ymlporn1.net","domain":"ymlporn1.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.499Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /http://img-egc.xvideos-cdn.com/videos/thumbs/c9/2a/af/c92aaf9614c890ca7d6885cb7813ef68/c92aaf9614c890ca7d6885cb7813ef68.15.jpg HTTP/1.1\r\nHost: ymlporn1.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":2172,"timings":{"blocked":2170,"dns":2,"connect":3,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i1.wp.com/fmtu.sltututu.com/upload/vod/20240402-1/5d9157a39127259220d113396c0b9d99.jpg","fqdn":"i1.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Oct 2025 19:44:58 GMT","end":"Sat, 03 Jan 2026 19:44:57 GMT"},"fingerprint":{"sha1":"E9:63:7F:0C:6E:C3:A6:C6:27:94:43:17:2D:51:5E:E2:3E:DA:FB:16","sha256":"7A:94:BE:74:03:C4:90:D6:E8:ED:98:EB:0F:DC:60:BE:D8:2A:DF:82:3F:DC:85:70:4F:C1:10:52:E4:F5:75:81"}}},"request":{"raw":"GET /fmtu.sltututu.com/upload/vod/20240402-1/5d9157a39127259220d113396c0b9d99.jpg HTTP/1.1\r\nHost: i1.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8047\r\nlast-modified: Thu, 30 Oct 2025 12:11:45 GMT\r\nexpires: Sun, 31 Oct 2027 00:11:45 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttp://fmtu.sltututu.com/upload/vod/20240402-1/5d9157a39127259220d113396c0b9d99.jpg\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"9c93c06826c6802a\"\r\nx-optim-disabled: true\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 15\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8047,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc57.89.100\", baseline, precision 8, 320x240, components 3","md5":"b80a1fbbc61052584c2e51b707dc32fb","sha1":"4dc6b28435cc05f627c7f4ca4c8cd527765cc8ba","sha256":"164881d39592550ec2a3cc2819e2878ce95daf303f2a51c6f9227544fbb5b840","sha512":"9c341d6de11f3889ae18731f86e8eacdffbe2a1a66d734422882e114ad1b3a29723868ecf32532355066b2c8cce74bdf6deb9055e7132002556a3463190f13ed","ssdeep":"192:HGfsq9xDRImNlpED5gi5dLHbRODPrutZEIHiajjlI3YqK7g0xuxatw3:HG797VWD5fHhtq8ZqYqUg0vw3","tlshash":"a5f19e611038d6755921f47804fa135313cabf58a88c7c964e9635cdcd8e22abde3b36","first_seen":"2025-11-01T01:57:38.136154Z","last_seen":"2025-11-23T07:50:46.593007Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1441,"timings":{"blocked":-1,"dns":29,"connect":36,"send":0,"wait":10,"receive":0,"ssl":1338},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uqetyzxa.com/20221002/KhNnhdOy/1.jpg","fqdn":"uqetyzxa.com","domain":"uqetyzxa.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.533Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /20221002/KhNnhdOy/1.jpg HTTP/1.1\r\nHost: uqetyzxa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":2138,"timings":{"blocked":2135,"dns":3,"connect":171,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidmo.pro/thumbs_320/5f/0c/5f0c190932fe0d34124ef97ce3340f3b/15125168.jpg","fqdn":"vidmo.pro","domain":"vidmo.pro","tld":"pro"},"ip":{"addr":"89.248.193.244","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"en.vidmo.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Nov 2025 20:48:10 GMT","end":"Thu, 19 Feb 2026 20:48:09 GMT"},"fingerprint":{"sha1":"B8:8B:9C:2B:E9:53:D3:85:0E:57:74:8D:32:07:72:DF:38:F3:91:DA","sha256":"9B:B3:9F:DD:FB:1B:36:C3:04:60:BF:DF:87:AA:AB:5D:F6:0D:45:20:77:9B:29:19:5F:C4:B6:F1:04:C9:23:3E"}}},"request":{"raw":"GET /thumbs_320/5f/0c/5f0c190932fe0d34124ef97ce3340f3b/15125168.jpg HTTP/1.1\r\nHost: vidmo.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 07:49:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10467\r\nlast-modified: Thu, 24 Nov 2022 03:26:20 GMT\r\nexpires: Fri, 08 Nov 2024 19:18:56 GMT\r\ncache-control: max-age=604800, public, no-transform\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10467,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3","md5":"48fcbf4f978e137fea9d5383ca5d9171","sha1":"2d9552034af2b26c1eb42f3f3e24e57229e2fede","sha256":"884c07c4d9616488ddb4fe08c1285f73d28bb77ba9a13cd9e5da71d87e6cecee","sha512":"147e410896fc837d5706cae4e7bb9c91a50cccb3b0df89b835a5a59e364a293fb99a29e730e9f23730fdc555753c5af3e82982502f6f0c83804087d8ae10ae4b","ssdeep":"192:mpKnMu/s8HK9ZUTtgrv++lsJsdci88wn0d09RaNbMX55M1Swa0lN:mivUjDjlslFuesZMXj5glN","tlshash":"35227d77ad46ae23a51c876ebe174dbc371a0e0ce48177f900315d89af18d556c0b1ae","first_seen":"2024-11-21T20:23:14.986352Z","last_seen":"2026-03-03T14:10:03.876214Z","times_seen":73,"resource_available":false,"data":null}},"time_used":2296,"timings":{"blocked":2146,"dns":3,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timg216.top/videos/43e3667d4a8622b97a5a98567033cc6f40e3ac87/cover/5_505_259?ih=1","fqdn":"timg216.top","domain":"timg216.top","tld":"top"},"ip":{"addr":"172.66.155.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timg216.top","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 04:28:49 GMT","end":"Wed, 31 Dec 2025 05:27:41 GMT"},"fingerprint":{"sha1":"0A:EF:84:22:E6:0D:56:57:B7:F6:C3:7D:6D:91:EF:17:49:1B:A6:01","sha256":"B5:3B:20:B4:05:8F:49:AA:87:FC:31:5E:8E:7E:0C:C5:77:A9:A2:5E:FA:54:61:41:C2:B4:A3:9D:CA:1B:2B:AA"}}},"request":{"raw":"GET /videos/43e3667d4a8622b97a5a98567033cc6f40e3ac87/cover/5_505_259?ih=1 HTTP/1.1\r\nHost: timg216.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 102012\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Mar 2025 09:31:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"67c6c879-18e7c\"\r\nexpires: Fri, 07 Nov 2025 02:21:53 GMT\r\ncache-control: public, max-age=31536000, stale-if-error=7200\r\nt-cache: LHIT\r\naccept-ranges: bytes\r\nage: 2516370\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XkdqG%2FUwNksC0i%2F7YDNeFTsgnAt4kZT2P67wqoV0jVSC0Tp5SCDZuLK%2FnWbzS8bV65%2B3b7nKJSrVjiXa96eQMmaeiYQWc7GhAQ%3D%3D\"}]}\r\ncf-ray: 9a2f125d3829b505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102012,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc57.107.100\", baseline, precision 8, 505x259, components 3","md5":"ac2cf4d3883f6c939564a99b5cc738a3","sha1":"9864900d0bfaafd544852a720c54ac39213dd9a2","sha256":"f6fdefc1b445a881ffc349ddad06a414e4901ddb048b5600681e9b340aac176b","sha512":"1293f5a87c64c9e5103038aa8eb50a0b4896f3db3569fcb563439d18ffcb5a8f935f93593fdea7d5f7a861592ab27f2cb50fd84c9e3536c1a17bb5c1af2bbca6","ssdeep":"1536:eKy+JzgCPYFcp1oJepCZvuDtCshqzVBUuA6HTbtOfJZZrf6h/O4Ale5v+o/HoIQQ:FFYFiCmEshR6HTUbrfcAle9+on9qM","tlshash":"dea312d386660a1749579f76ba6cc704fc3d06034c8f9a0a3b46a43df90e86bf196ad1","first_seen":"2025-03-10T03:32:23.610554Z","last_seen":"2026-01-20T20:48:24.016507Z","times_seen":32,"resource_available":false,"data":null}},"time_used":1375,"timings":{"blocked":-1,"dns":80,"connect":71,"send":0,"wait":21,"receive":4,"ssl":1092},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"timg216.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fqjpg4.top/upload/vod/20250216-1/9ac8f88c6f8b4cb176a878ac6e9b8704.jpg","fqdn":"fqjpg4.top","domain":"fqjpg4.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.806Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20250216-1/9ac8f88c6f8b4cb176a878ac6e9b8704.jpg HTTP/1.1\r\nHost: fqjpg4.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":2865,"timings":{"blocked":376,"dns":2489,"connect":2604,"send":0,"wait":0,"receive":0,"ssl":-1},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"fqjpg4.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.tnaflix.com/a16:8q80w500r/108/74/30/7430033/thumbs/10.jpg","fqdn":"img.tnaflix.com","domain":"tnaflix.com","tld":"com"},"ip":{"addr":"156.146.33.140","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tnaflix.com","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Dec 2024 00:00:00 GMT","end":"Tue, 16 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"B0:1D:B1:2D:91:C8:A2:E5:E1:CC:05:C1:20:F1:52:8E:61:AB:B3:FF","sha256":"DC:ED:80:AD:A9:A9:FF:97:B7:90:84:B7:0F:E6:26:C6:32:64:AA:98:4B:D6:85:55:40:7B:4E:A7:10:33:10:72"}}},"request":{"raw":"GET /a16:8q80w500r/108/74/30/7430033/thumbs/10.jpg HTTP/1.1\r\nHost: img.tnaflix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20934\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-77-nzt: EgwBnJIhiwH3xlTbAAwBT3/LFAHXyuYFAA\r\nx-77-nzt-ray: cf878727038cd1e099bc226970b82a32\r\nx-77-cache: HIT\r\nx-77-age: 14374086\r\nserver: CDN77-Turbo\r\naccess-control-allow-origin: *\r\nx-77-pop: frankfurtDE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":20934,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 500x250, components 3","md5":"da968ad4c17d5c68c4e4e75b0ecac2ce","sha1":"74ba6f6c2d032595def6f51a9507a7f337901ede","sha256":"cae9184d8b202691f01b3be5056fe65bdae039af1e1ef3a6f297705f760e1acd","sha512":"5da41ce7790818f768b82c491a4f4503d6ff6a540caece0d547d1408869eb351196b3666dfb7fc91c80b6e9945e75e0b180b5825840705f8451e5d86da5ed45f","ssdeep":"384:NWgdkbxoIV3A6COmSWF86AzGS3LKRm7vMXYdnY1G7z7UMcJpuGS9EeqFJCDp:/dQNhQEvMXYcCCrS90CDp","tlshash":"0892bf213712d486f836e5750035a3b43b7b3cb5a115bfdd305058580a7dafb7aa4ad8","first_seen":"2025-11-23T07:50:46.594764Z","last_seen":"2026-03-01T22:30:17.296865Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1774,"timings":{"blocked":260,"dns":16,"connect":24,"send":0,"wait":28,"receive":16,"ssl":1422},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i1.wp.com/fmtu.sltututu.com/upload/vod/20240507-1/496d34ab19a8057cadfe7eb544d12457.jpg","fqdn":"i1.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Oct 2025 19:44:58 GMT","end":"Sat, 03 Jan 2026 19:44:57 GMT"},"fingerprint":{"sha1":"E9:63:7F:0C:6E:C3:A6:C6:27:94:43:17:2D:51:5E:E2:3E:DA:FB:16","sha256":"7A:94:BE:74:03:C4:90:D6:E8:ED:98:EB:0F:DC:60:BE:D8:2A:DF:82:3F:DC:85:70:4F:C1:10:52:E4:F5:75:81"}}},"request":{"raw":"GET /fmtu.sltututu.com/upload/vod/20240507-1/496d34ab19a8057cadfe7eb544d12457.jpg HTTP/1.1\r\nHost: i1.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 07:49:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6132\r\nlast-modified: Thu, 22 May 2025 17:30:31 GMT\r\nexpires: Sun, 23 May 2027 05:30:31 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttp://fmtu.sltututu.com/upload/vod/20240507-1/496d34ab19a8057cadfe7eb544d12457.jpg\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"04792861103791f6\"\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 15\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6132,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x320, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"161f98daadac16c6e710cc19d4af5fb4","sha1":"f0aeb011ca77c1488f7f1c3a50a05ae55a7507ea","sha256":"0aea46cb3629457d752bd27743912b38366cf02a4a2c7cde3e6a6afaad0e2d90","sha512":"9f4194561a0a99941c140b447b98b17bd75820b78e0a38be002f3ed833d705ae8999162ca84e5344cf24151230240c3fb404b37039d4e1106af488665dc3363d","ssdeep":"96:Db2xtif2xv7LsKy8pqdmeWz7bOAO+b2tK/4G9WlcqLvX5OiNzBfaDZlQ:ws2ZLzkkeUOAL2IR9INLvnBiDTQ","tlshash":"d9c1ae80c99d18bb9004b76b4b1d8721905efbc79724a5b484a584fe6e23277fdbca30","first_seen":"2025-06-06T07:13:00.590488Z","last_seen":"2026-02-25T10:38:27.021004Z","times_seen":95,"resource_available":false,"data":null}},"time_used":1864,"timings":{"blocked":368,"dns":11,"connect":11,"send":0,"wait":13,"receive":8,"ssl":1446},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.porn100.tv/thumbs/890/5211340033_0.jpg","fqdn":"www.porn100.tv","domain":"porn100.tv","tld":"tv"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.514Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /thumbs/890/5211340033_0.jpg HTTP/1.1\r\nHost: www.porn100.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":2158,"timings":{"blocked":2156,"dns":2,"connect":2,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xvideosrei.com/wp-content/uploads/2021/06/pagando-peitinho-na-escola.jpg","fqdn":"xvideosrei.com","domain":"xvideosrei.com","tld":"com"},"ip":{"addr":"192.124.249.3","port":443,"asn":30148,"as":"SUCURI-SEC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xvideosrei.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Thu, 16 Oct 2025 23:45:52 GMT","end":"Wed, 14 Jan 2026 23:45:52 GMT"},"fingerprint":{"sha1":"86:57:5A:8E:7C:27:50:E1:50:45:99:F1:E6:B2:D0:AC:B1:97:6F:AB","sha256":"20:59:54:6A:7A:85:C1:96:E7:77:D6:A4:45:FC:A0:DE:AF:07:2E:4D:04:79:F1:6C:17:E9:B6:6F:0A:56:BF:37"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/pagando-peitinho-na-escola.jpg HTTP/1.1\r\nHost: xvideosrei.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:45:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16196\r\nx-sucuri-id: 19002\r\nlast-modified: Fri, 18 Jun 2021 13:15:27 GMT\r\netag: \"60cc9c6f-3f44\"\r\nversion: MS25102301\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nx-served-by: xvideosrei.com\r\nserver: Sucuri/Cloudproxy\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nx-sucuri-cache: HIT\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Sucuri","description":"Sucuri is a cybersecurity company that provides website security solutions and services.","website":"https://sucuri.net/","common_platform_enumeration":"","icon":"sucuri.svg","categories":["CDN","Security"]}],"data":{"size":16196,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85\", baseline, precision 8, 600x337, components 3","md5":"8d6af1458088266c0d0c88b583b42803","sha1":"0def048cd715845293b6a4415972b2e066322ce6","sha256":"43bc44532c8d474ba97f27ea9eb76a91792013dd23201d62572f2d1f3b1d546c","sha512":"0d32647bdd4546c966baa9955ebd0f66431292524f28b066f0225194f46f7560a0d4978d50f9df975e10a5a5a05ebfef900c29247cbcdc7bd9d877cbc21f32fa","ssdeep":"192:qS3enLzSQ5Y/N4Ylu3i0QCR/9bbUXrU0d2Ue/ly1oegsS+KcNMj0rk7KgP0wD6:qHyQuyYlu3+Vglkngb+gckOAD6","tlshash":"03724b13580e4a96e86d4ae2bd470f9d2e0a6f4cf9632aff00911ed93f302931d9d55a","first_seen":"2024-04-24T03:52:56Z","last_seen":"2026-01-06T02:11:17.608273Z","times_seen":48,"resource_available":false,"data":null}},"time_used":2048,"timings":{"blocked":125,"dns":39,"connect":169,"send":0,"wait":34,"receive":43,"ssl":1564},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets-jpcust.jwpsrv.com/thumbs/3oHs3lMD-720.jpg","fqdn":"assets-jpcust.jwpsrv.com","domain":"jwpsrv.com","tld":"com"},"ip":{"addr":"151.101.2.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /thumbs/3oHs3lMD-720.jpg HTTP/1.1\r\nHost: assets-jpcust.jwpsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nretry-after: 0\r\nlocation: https://cdn.jwplayer.com/v2/media/3oHs3lMD/poster.jpg?width=720\r\naccept-ranges: bytes\r\ndate: Sun, 23 Nov 2025 07:49:43 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410026-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1763884184.799471,VS0,VE0\r\nserver: nginx\r\ncache-control: max-age=900\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":403,"timings":{"blocked":-1,"dns":10,"connect":32,"send":0,"wait":80,"receive":0,"ssl":248},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jwplayer.com/v2/media/86xIKFg4/poster.jpg?width=720","fqdn":"cdn.jwplayer.com","domain":"jwplayer.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:45.291Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /v2/media/86xIKFg4/poster.jpg?width=720 HTTP/1.1\r\nHost: cdn.jwplayer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.av4.cam/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"media.crazyshit.com/content/2020/06/6fc08ff7.jpg","fqdn":"media.crazyshit.com","domain":"crazyshit.com","tld":"com"},"ip":{"addr":"45.133.44.3","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"media.crazyshit.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Sep 2025 02:32:42 GMT","end":"Fri, 26 Dec 2025 02:32:41 GMT"},"fingerprint":{"sha1":"29:50:F0:B9:A2:CA:FE:80:44:45:00:A2:95:68:4A:73:E6:9E:5C:F4","sha256":"BA:98:1C:61:77:77:BE:AC:D5:18:45:30:01:AB:3E:40:5A:79:70:DD:E8:44:E6:25:EB:16:B6:69:C6:EE:82:F3"}}},"request":{"raw":"GET /content/2020/06/6fc08ff7.jpg HTTP/1.1\r\nHost: media.crazyshit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 207449\r\nserver: nginx/1.26.0\r\nx-object-meta-mtime: 1591170209.37689578\r\netag: 97e733a08a067bb1f3122af382ffe27e\r\nlast-modified: Mon, 05 Apr 2021 12:05:16 GMT\r\nx-timestamp: 1617624315.22098\r\nx-trans-id: tx5c8cc8ea0b80478189fcd-0068a57a7c\r\nx-openstack-request-id: tx5c8cc8ea0b80478189fcd-0068a57a7c\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\nexpires: Tue, 25 Nov 2025 07:49:45 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":207449,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 720x540, components 3","md5":"97e733a08a067bb1f3122af382ffe27e","sha1":"79df2f3dce5d641fefa1f5c7aab71ad73e2c1bd9","sha256":"050fee4bee78c6edf80cf416c09aeb1e9d895844f4d35b52426d3cefffade38a","sha512":"93e96d4e5a0cb7a4e6d54ed65e659f6ddfafacf64989e2e5af362132416c36bdb11004adb0187a83fe22cc64073cd78ded644175c96577079c550b00cae754a0","ssdeep":"3072:GPzF4uVpLaQDnklziSRoHRIS8ri8CNtc9KpYVDYI5rr6MHSNrJuU+:uzF46GUkZiSRoHRIRW8CNWQYVDsMGI7","tlshash":"811412f486915738b5f670c238ab9af77851ce362611b4ec462f8210c677b90bb9d3d8","first_seen":"2025-11-23T07:50:46.59746Z","last_seen":"2025-11-23T18:32:40.765082Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1710,"timings":{"blocked":278,"dns":43,"connect":60,"send":0,"wait":21,"receive":85,"ssl":1214},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/optimized/2X/a/aabdabe7ddb2e1b3f9d36b1ce51393004eec48fc_2_581x1024.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 03:08:59 GMT","end":"Mon, 02 Feb 2026 03:08:58 GMT"},"fingerprint":{"sha1":"E1:A5:18:66:02:A1:30:48:C0:63:B8:0D:A6:A0:6A:4D:49:FB:31:A4","sha256":"F3:EF:EA:51:6F:29:3C:97:1C:9E:B5:C9:DB:69:E9:BE:55:EA:E1:47:AC:EB:1B:EB:A6:2A:5B:B1:74:85:D0:AB"}}},"request":{"raw":"GET /uploads/default/optimized/2X/a/aabdabe7ddb2e1b3f9d36b1ce51393004eec48fc_2_581x1024.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 07:49:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 65831\r\nlast-modified: Tue, 12 Aug 2025 05:13:35 GMT\r\nexpires: Mon, 23 Nov 2026 07:49:43 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65831,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 581x1024, components 3","md5":"024033f316dd82f74edb7d912926f683","sha1":"14f1df143194890f5ffcde286217c35f175ba857","sha256":"2bc24f46bcc7cf28cdadf3d59363c09465891e61af7ca2995c77aea5a0fe3e57","sha512":"141ecbf78d68b43d988f17013c335dcc29f2c8ab45d94421cfd5eaf3310643ec3bf0a09622df3c2f1cfe4dc8329b1c0a4c1923478694f65c17ce5fb43e47e65a","ssdeep":"1536:WRHKviQObKAheC9ncdtdzy4efdQsBU6XbRi:VqQkx9nwFR5sW6rRi","tlshash":"005302104e2f67c0ce493d5be1dc4bf1aeaba23c5c45159ab3aca8527943c0f98f495e","first_seen":"2025-09-01T12:19:53.030831Z","last_seen":"2026-03-03T08:08:10.233897Z","times_seen":11,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":17,"connect":68,"send":0,"wait":96,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.bad.news/images/dm/dc69066613934d580dba73e5654f7a73.jpg","fqdn":"static.bad.news","domain":"bad.news","tld":"news"},"ip":{"addr":"104.26.12.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"323e0cdf.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 11:39:48 GMT","end":"Thu, 25 Dec 2025 12:39:44 GMT"},"fingerprint":{"sha1":"E2:E7:D4:63:E3:68:65:9A:90:D2:DB:8F:EA:7F:17:3D:A9:CF:8A:88","sha256":"5F:22:3E:64:D7:DC:55:D3:E2:7C:AF:7D:83:9A:D0:97:DB:A5:71:24:B7:CC:B5:D1:FC:9D:79:E4:0E:8B:DA:DD"}}},"request":{"raw":"GET /images/dm/dc69066613934d580dba73e5654f7a73.jpg HTTP/1.1\r\nHost: static.bad.news\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:44 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 51636\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: max-age=31536000\r\ncf-bgj: imgq:100,h2pri\r\naccept-ranges: bytes\r\ncf-polished: origSize=53791\r\netag: \"5c99e89602fb98dbac8da7800d10f55f\"\r\nlast-modified: Sat, 07 Oct 2023 09:52:23 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f2JjiYqqGLFX1C7jqVSWnCaOzI%2BmbNli%2B5Wr6JJZmMx5XF6dBm03p9sXOnwsTvuBXAMdq5yOju3EYmIXzf0QDy9q8lPITTPmNVGyVNMH\"}]}\r\ncf-ray: 9a2f12568943c759-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51636,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 268x394, components 3","md5":"92ce652c04c49dccec38d45d91360023","sha1":"0d6017ea094f4fe79e240c57f86a42ee4ee64e85","sha256":"294a61ba8f74c19692c0e9f2d0b10ebd9a8e2efea762a1e8d262480f49506a15","sha512":"a4013acd2d62c66fba3c75ef6454bf894d88236737eb96033175264095ab7003d3687ee55d514c107de42a20bc3115c24cb6c4aac1e1f344ddd28c9c13c35fc6","ssdeep":"1536:BfK4V2QSEGqHlpFbe9TWMqq9g7Hkb2qUEsB61Xdb:YoHYTWP+g7EbPJ","tlshash":"3b33f25980a250bf71b2222b4ea1fcf15fe16cb868ff4a4a07df1f17ea075914521f46","first_seen":"2025-11-05T17:08:45.034125Z","last_seen":"2026-01-11T16:31:17.640351Z","times_seen":3,"resource_available":false,"data":null}},"time_used":805,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":804,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"matureanimalxxx.com/tmbs/163/985_plowing-behind.jpg","fqdn":"matureanimalxxx.com","domain":"matureanimalxxx.com","tld":"com"},"ip":{"addr":"185.162.130.18","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"matureanimalxxx.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Oct 2025 03:08:37 GMT","end":"Thu, 15 Jan 2026 03:08:36 GMT"},"fingerprint":{"sha1":"0E:AB:AA:42:08:2D:62:5A:FC:D1:D1:8E:ED:7B:D8:C5:33:17:38:0E","sha256":"1F:51:1B:98:A1:A0:FF:F7:2D:98:09:48:3A:0A:A4:FF:5F:BD:D3:83:DE:D7:DE:D7:89:63:E5:99:FF:C1:9D:6B"}}},"request":{"raw":"GET /tmbs/163/985_plowing-behind.jpg HTTP/1.1\r\nHost: matureanimalxxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.23.3\r\nDate: Sun, 23 Nov 2025 07:49:43 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 10377\r\nLast-Modified: Fri, 11 Feb 2022 22:16:57 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=30\r\nETag: \"6206e059-2889\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nCache-Control: max-age=315360000\r\nX-Request-ID: cbd4c0efc3bb97e2a335105c66b48bb5\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.23.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10377,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 320x230, components 3","md5":"522543a77046246e53af69d29737e417","sha1":"0fcfd31a5e82cd6c8d889843e242c758dee444f2","sha256":"c563665ba2bfadd54d5417ba4f99d8e86cc1cdb1afdef62c332c7c2e674506eb","sha512":"928166ff9a2ca3fd088fd7357ca78fb65fb9f5cfc30a0443798f2726fbce42240da6122b09bda8818cacde226be908f3f1b28a782a2b98223e6ddb5aa968193c","ssdeep":"192:UHa6YtMgTk3h3+qcf/5e3VOy/JrYdJ+M06d/Xxo9RHzlFftgB:f6A2xOpfBki061Xm9RHzls","tlshash":"d022a069cb6a8f22b59d9de29fc9a13bef9d04d930b0c34984286d411778dfac401739","first_seen":"2024-08-19T19:45:07.434051Z","last_seen":"2026-03-03T14:10:03.927004Z","times_seen":35,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":7,"connect":26,"send":0,"wait":25,"receive":1,"ssl":132},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fqjpg4.top/upload/vod/20250624-1/6af7bf31b64f6d7cd8485fac14dcd1b1.png","fqdn":"fqjpg4.top","domain":"fqjpg4.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.490Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /upload/vod/20250624-1/6af7bf31b64f6d7cd8485fac14dcd1b1.png HTTP/1.1\r\nHost: fqjpg4.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":720,"timings":{"blocked":701,"dns":19,"connect":131,"send":0,"wait":0,"receive":0,"ssl":1525},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"fqjpg4.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dojki.biz/screen/!Ogromnyy_chlen_zastavlyaiet_sosat_devushku_v_podyezde!.mp4.jpg","fqdn":"dojki.biz","domain":"dojki.biz","tld":"biz"},"ip":{"addr":"207.180.194.251","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dojki.biz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Nov 2025 05:02:36 GMT","end":"Wed, 18 Feb 2026 05:02:35 GMT"},"fingerprint":{"sha1":"22:05:71:D6:22:39:F2:CC:8B:FD:57:10:50:39:15:90:2F:28:30:B5","sha256":"D6:99:82:B1:6F:F3:81:17:2F:7D:A4:99:6F:63:E8:54:C8:7E:74:AB:21:D7:57:4F:8C:64:C4:2C:38:F1:54:35"}}},"request":{"raw":"GET /screen/!Ogromnyy_chlen_zastavlyaiet_sosat_devushku_v_podyezde!.mp4.jpg HTTP/1.1\r\nHost: dojki.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 23 Nov 2025 07:49:44 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 6494\r\nLast-Modified: Sat, 01 Jan 2022 18:05:56 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nETag: \"61d09804-195e\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nCache-Control: max-age=315360000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6494,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 300x200, components 3","md5":"9a0cb15051a7f34a7a9bc96d3df18517","sha1":"a78f74526999770c2ed6b8ee6ce79478878ecd9c","sha256":"15385e5e68f4ab337a2e23da3fb6cf05a7232747551ddd89c5fbe890d986412b","sha512":"925010d1723684d79f01f2d7fd0df4a47123ffd75c73e22a5c80baec6b754d0912608a28be124785a37c1edf0bd013d12b747d2a54f28ef3b58195ecb75df0fb","ssdeep":"192:WEJPALfiYuGlRTCWPnR1ZLoz4kV2EpyoWD:XtALfiYHPzPnzpk59A","tlshash":"39d19042b37f13dcccc7d8b2ccaa748653594852e23789be394632e71443c930d1a324","first_seen":"2025-02-26T09:30:37.259556Z","last_seen":"2026-01-13T03:01:30.652514Z","times_seen":41,"resource_available":false,"data":null}},"time_used":707,"timings":{"blocked":-1,"dns":13,"connect":61,"send":0,"wait":46,"receive":0,"ssl":563},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ansuko.net/wp-content/uploads/2024/12/poster-422.jpg","fqdn":"ansuko.net","domain":"ansuko.net","tld":"net"},"ip":{"addr":"104.21.54.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ansuko.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 11:42:18 GMT","end":"Tue, 06 Jan 2026 12:39:58 GMT"},"fingerprint":{"sha1":"F5:7A:D2:13:21:CE:EB:03:E2:D6:BE:F2:03:73:1F:55:8F:6B:68:4A","sha256":"4E:51:47:18:74:38:C5:CD:59:59:6B:15:27:21:87:E4:21:5C:E7:A4:96:C3:F6:7A:F3:06:9F:82:BE:6B:3A:65"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/poster-422.jpg HTTP/1.1\r\nHost: ansuko.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:43 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 279993\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nlast-modified: Thu, 20 Nov 2025 02:03:10 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vpCCDxvTJW7LyF37vIC8NUuCKLL4YqQrpd8Hhkuw1efizOOyv9cx6LkEgK1%2FBiAkEtjJqWzjYOZN70sxkezsLgwpBfexs7ba\"}]}\r\ncf-ray: 9a2f125498f7b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":145447,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 720x540, components 3","md5":"23151815d0a62887649a2a89badb9a3c","sha1":"88fce1cc8c2bdc7bf9cf61b9a1d2472941f09b20","sha256":"52ae24fa6af7ca2a1544fc0453184a28aec14ca24d6c2d029593fb453ba88261","sha512":"f5aa0134267dec7eaecae47a93681100cac914be4e15103a737a30756bb65da394255031087d338f80f80f55024a7535eec01a4858958901747ee965decaf00f","ssdeep":"3072:QMYvDuOwfsLsFeg3dUuPdeVTkQrQszPE/szyrlSnWNeVjn0qtP+:QM6u9FtNUp4SpzPEwUNijnnB+","tlshash":"60e312f373bf716490c8e3b4096541ad08f9990a7296cc00d6c1b9b774ebdfb69da029","first_seen":"2025-10-19T05:57:44.457371Z","last_seen":"2026-01-09T07:48:48.500579Z","times_seen":14,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chezcathy.com/ext/pre_5995059770.jpg","fqdn":"chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"138.199.36.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chezcathy.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 08:11:44 GMT","end":"Thu, 08 Jan 2026 08:11:43 GMT"},"fingerprint":{"sha1":"9A:4C:4E:E8:A3:79:B0:5B:71:90:4A:26:72:7F:2D:C8:C2:F3:14:A0","sha256":"EB:A3:32:86:C1:B0:23:E9:CE:1C:20:4A:94:7B:04:CD:37:94:7D:63:8F:88:EC:BD:2F:48:A3:42:E5:C8:95:49"}}},"request":{"raw":"GET /ext/pre_5995059770.jpg HTTP/1.1\r\nHost: chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11163\r\nserver: BunnyCDN-DE1-1054\r\ncdn-pullzone: 4336709\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=7776000\r\netag: \"68e6d31e-2b9b\"\r\nexpires: Tue, 10 Feb 2026 18:25:27 GMT\r\nlast-modified: Wed, 08 Oct 2025 21:09:50 GMT\r\nx-cache-status: HIT\r\nx-cache-type: MEDIA-SHARED\r\ncdn-proxyver: 1.40\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 11/12/2025 18:25:27\r\ncdn-edgestorageid: 723\r\ncdn-requestid: 0baeb61bbfdf727dc40d41922f6ce740\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":11163,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x226, components 3","md5":"3e75f674239f8bf2b5291cc36efe3174","sha1":"de714eaa05c56fa77e0bf25a72beb29832913e1d","sha256":"7ae9b76be33b55b5087cd2fc30bdc9c1571b49e377440291ddad507ec56b7dec","sha512":"74ae0aa749fe908923e2dab0373c9fdcf4f2f4c2691680159456601ede0ce9de6f2b755b21dc9cb06328284ed6d1bb0eb1a9674d94ae9dc4544726b396edb0a7","ssdeep":"192:L36tbasvgjtuZ9gdQAscvnsZBRFbsQp2x+/n6PfO5b/odWZqu/:T6tu9K9gdHC2xFX0Zqu/","tlshash":"ed32aed09ba142a1878aa7f68101663df1099ece3fe47c722237a4764a54ff477129a8","first_seen":"2025-11-21T22:46:48.265489Z","last_seen":"2025-12-10T13:06:46.271898Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1282,"timings":{"blocked":-1,"dns":3,"connect":52,"send":0,"wait":30,"receive":5,"ssl":1081},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blumpkintube.com/thumbs/649/702_play_with.jpg","fqdn":"blumpkintube.com","domain":"blumpkintube.com","tld":"com"},"ip":{"addr":"104.21.79.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blumpkintube.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 16:43:09 GMT","end":"Tue, 06 Jan 2026 17:40:50 GMT"},"fingerprint":{"sha1":"1E:5F:43:D1:62:A9:3B:35:04:2F:A8:7F:C8:C0:55:4E:7C:DE:80:C4","sha256":"DF:89:D0:CE:A3:31:22:68:E9:31:A0:B5:F9:14:C0:4A:DF:2E:12:2E:C1:09:E3:FA:92:B8:02:32:4B:DA:36:A5"}}},"request":{"raw":"GET /thumbs/649/702_play_with.jpg HTTP/1.1\r\nHost: blumpkintube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7135\r\nserver: cloudflare\r\nlast-modified: Sun, 08 Nov 2020 11:36:35 GMT\r\netag: \"5fa7d843-1bdf\"\r\nexpires: Wed, 18 Nov 2026 18:45:12 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, no-transform\r\nage: 392673\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IsqsX8iogiU1fitf2RAf5I%2BZcSHV3esnkZggzndw2NHRaf3omxR2AKZtNjfIDSdTMrV4x6mmmK4b2bfqHxFMB3rDhYd8LNk3vgg8R6yu\"}]}\r\ncf-ray: 9a2f125eea0cb503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7135,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 312x208, components 3","md5":"3f07d13ab20a730f9b4a9c6cb4e16fac","sha1":"c8a04a6e48457a1b7e3e24690d053053d5b61167","sha256":"5422fc0ce7870ea10d81bfecf31dac5f82dae0664f33b3b10d3083610c30168e","sha512":"83c7ba340f0eab98c7e3b83882d3066cd707bfabe98b43d0c71efcfc588fc2d9f81dbfa295075e57e87967debe916755436b2a24d9ca5c00ca06a69f2fed9362","ssdeep":"96:dgt1othHELJVyKaN46TiRfn4CpP5Z3RVnSs4e3MARGjoWhtF1jnsmHq:dUiZ217Csv4C7Z3R8sx3Q1BxsOq","tlshash":"48e19e7366121bfbf0050e73b0105c6dabf77f14b96a06f812e2703a681c33a99311a2","first_seen":"2024-04-24T10:38:26Z","last_seen":"2026-03-03T09:47:11.013496Z","times_seen":85,"resource_available":false,"data":null}},"time_used":957,"timings":{"blocked":943,"dns":0,"connect":0,"send":0,"wait":6,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxxdino.com/upload/69e6bf5b27c13bb5786c9099dfed606f.jpg","fqdn":"xxxdino.com","domain":"xxxdino.com","tld":"com"},"ip":{"addr":"104.21.65.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxxdino.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Oct 2025 12:25:26 GMT","end":"Thu, 22 Jan 2026 13:24:05 GMT"},"fingerprint":{"sha1":"8A:8E:18:24:6A:7E:FD:A9:0E:BF:A9:19:B8:7A:22:6E:A2:40:4E:59","sha256":"EA:76:0F:0E:DF:E7:60:6C:F4:D2:30:A7:8E:1D:7A:66:9B:D8:27:1D:8F:3C:D0:DA:52:80:1C:A4:00:3E:50:49"}}},"request":{"raw":"GET /upload/69e6bf5b27c13bb5786c9099dfed606f.jpg HTTP/1.1\r\nHost: xxxdino.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24923\r\nserver: cloudflare\r\nlast-modified: Fri, 26 Mar 2021 18:31:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"605e286f-615b\"\r\nexpires: Mon, 22 Dec 2025 06:04:01 GMT\r\ncache-control: max-age=2678400\r\naccept-ranges: bytes\r\nage: 92743\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lVcKRtEvb6Z3HXyN5dn2VWOEdU6wqMwqC%2BgNQDinzlGAn9V53yy9ZMd3SJFOOnAydHqTkop%2FhzI5sUvJYEiyDFS1yif4I7HEcA%3D%3D\"}]}\r\ncf-ray: 9a2f125d8c16b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24923,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 95\", baseline, precision 8, 350x197, components 3","md5":"842ae3bb66b278cef8856a59c92f9884","sha1":"dbbb63da239f982382107fcd23dfc52ef68f57d2","sha256":"ddf4051b170aa70951cf0a618d5a28195c531aa8fa3ba558968c0c02279f4687","sha512":"58a34252a229bc9a14fa409b6289d22ba1582b237d4e1613b11f9304a85399a39fe8828eb16803568cbb9080492aaa7d280e2f2190e8d6e64c8978d62e44b127","ssdeep":"768:EtlkhGuAjPPDhKG/qpdLeTSL44Kh6XibvkzFKg:EnYAr/qpdLMS3TibQFKg","tlshash":"7fb2d1dde2596080ef3630fc9d6af5bbf61dd999e85d0194833303629283d9693423ae","first_seen":"2025-06-21T12:29:51.782519Z","last_seen":"2026-04-03T21:47:16.572698Z","times_seen":43,"resource_available":false,"data":null}},"time_used":1515,"timings":{"blocked":165,"dns":41,"connect":47,"send":0,"wait":18,"receive":1,"ssl":1136},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.abcotvs.com/dip/images/5600472_100719-kfsn-11p-kassidy-salas-vid.jpg?w=1600","fqdn":"cdn.abcotvs.com","domain":"abcotvs.com","tld":"com"},"ip":{"addr":"184.25.3.167","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn1.edgedatg.com","organization":"The Walt Disney Company"},"issuer":{"commonName":"COMODO ECC Organization Validation Secure Server CA","organization":"COMODO CA Limited"},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"ED:8A:51:A9:A5:5E:9E:4F:61:F8:1B:C1:89:17:4E:2F:76:1C:BC:E3","sha256":"FC:6B:F9:C6:0F:FB:69:DF:9F:82:12:B7:F1:2F:46:A1:5B:CC:2A:99:17:6D:C2:A8:A8:8B:D0:B7:52:A2:34:DE"}}},"request":{"raw":"GET /dip/images/5600472_100719-kfsn-11p-kassidy-salas-vid.jpg?w=1600 HTTP/1.1\r\nHost: cdn.abcotvs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/jpeg\r\nContent-Length: 370830\r\nX-Varnish: 260034371 260034321\r\nAccept-Ranges: bytes\r\nDate: Sun, 23 Nov 2025 07:49:46 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":370830,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1600x900, components 3","md5":"3293dcca0563ecdd69cbd456cbc60f82","sha1":"c904509d6c826f4777dd9d4187164f57a5b6117e","sha256":"8bb04b4cc96ba97684f4830d2f792dd16f4228b693875f195f6e84b589070117","sha512":"23a9a901b6e06c86fde91ec56b3015461488818affe00c0f8b0f7db3b06224ac7472f9f9a6f4676f00c945019538436308b2d5195d72c4b9d1006a28f3e86476","ssdeep":"6144:MJAkDzDYzFlWrcm0QtINQwQxxqLaicuQuaJvUeW1U7/+6xnCJpZBcOnNRM:MJvAzFqAQtRwQOLaicuRaqB1WCvZBpnU","tlshash":"717423d1b0fde604e51eb0aebc42516840f1d595fc6b3b2a5805fc7b5bac54a0ab8ecc","first_seen":"2024-12-08T18:32:56.264289Z","last_seen":"2026-03-01T22:30:17.140309Z","times_seen":57,"resource_available":false,"data":null}},"time_used":1924,"timings":{"blocked":380,"dns":5,"connect":1,"send":0,"wait":15,"receive":54,"ssl":1451},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"18-girls-av.com/wp-content/uploads/2025/04/d_112912-0.avif","fqdn":"18-girls-av.com","domain":"18-girls-av.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.400Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2025/04/d_112912-0.avif HTTP/1.1\r\nHost: 18-girls-av.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":443,"timings":{"blocked":442,"dns":1,"connect":300,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.arabysexy.mobi/anJPI2Y4Zjgz/30/c8/32/30c832cef650b512f6df4b0cb4a71e8f_270x152.webp","fqdn":"cdn.arabysexy.mobi","domain":"arabysexy.mobi","tld":"mobi"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.534Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /anJPI2Y4Zjgz/30/c8/32/30c832cef650b512f6df4b0cb4a71e8f_270x152.webp HTTP/1.1\r\nHost: cdn.arabysexy.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":2138,"timings":{"blocked":2136,"dns":2,"connect":2,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fmtu.sltusl.com/upload/vod/20220903-4/47376860ab56a310df28c86e5d69faba.jpg","fqdn":"fmtu.sltusl.com","domain":"sltusl.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.479Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /upload/vod/20220903-4/47376860ab56a310df28c86e5d69faba.jpg HTTP/1.1\r\nHost: fmtu.sltusl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":26,"dns":22,"connect":68,"send":0,"wait":0,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn2.geefap.com/uploads/posts/2018-04/thumbs/834063320_957318055.jpg","fqdn":"cdn2.geefap.com","domain":"geefap.com","tld":"com"},"ip":{"addr":"31.10.5.97","port":443,"asn":207728,"as":"EUROHOSTER Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn2.geefap.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV SSL CA 2","organization":"GoGetSSL"},"validity":{"start":"Tue, 07 Oct 2025 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:E2:65:92:08:22:4C:77:09:5B:C9:25:35:0E:A2:CD:89:EA:8C:7C","sha256":"82:2A:A8:8F:E2:B8:A2:CA:01:FD:DC:F1:C1:AD:8F:F7:85:8D:42:56:12:56:8B:70:B2:FD:44:15:88:B2:59:F4"}}},"request":{"raw":"GET /uploads/posts/2018-04/thumbs/834063320_957318055.jpg HTTP/1.1\r\nHost: cdn2.geefap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 23 Nov 2025 07:49:45 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 25089\r\nLast-Modified: Mon, 16 Apr 2018 09:08:43 GMT\r\nConnection: keep-alive\r\nETag: \"5ad4681b-6201\"\r\nExpires: Fri, 28 Nov 2025 07:49:45 GMT\r\nCache-Control: max-age=432000\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25089,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 300x420, components 3","md5":"6f548ddc64147bbd858b54c182b1e9b5","sha1":"71d7220ca44e450c79445d0579205acac989cc1c","sha256":"3548e9f6b645660374e2b4efbcd3f75b0b8126fa98c3bfa37bc6fd1bb8488976","sha512":"25d2a880381bcd85db98cebe3fff3dba3748c378288b2f38717d683d786bc239829c9d0c74e583834175680db2ec905f0187c773d59fb686db39d98ef4af9007","ssdeep":"768:DStihxwgHiPb8RIB9tYr+6KCY4/XSfIi/Ao:DS8TwgHiD8iB4LKCY4qfJAo","tlshash":"7eb2f1b60e871b4abc453610f9cd0d8dc2c4be6d49195a2e7af802f8825ca34a0bc7dd","first_seen":"2025-07-05T12:25:41.424163Z","last_seen":"2025-12-25T10:42:57.674748Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1869,"timings":{"blocked":394,"dns":19,"connect":50,"send":0,"wait":36,"receive":1,"ssl":1348},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mypornhere.com/contents/videos_screenshots/98000/98117/preview.mp4.jpg","fqdn":"www.mypornhere.com","domain":"mypornhere.com","tld":"com"},"ip":{"addr":"51.91.119.144","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mypornhere.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Oct 2025 12:40:19 GMT","end":"Tue, 30 Dec 2025 12:40:18 GMT"},"fingerprint":{"sha1":"45:4D:49:EB:4E:BC:0F:3E:54:31:54:93:BD:CF:EB:04:DA:6E:4A:BF","sha256":"E9:17:59:E8:5F:CA:7D:C2:17:B9:21:B8:0C:F5:E0:1B:A5:57:1F:38:6F:D7:3E:B4:A1:70:BE:69:1B:7C:23:90"}}},"request":{"raw":"GET /contents/videos_screenshots/98000/98117/preview.mp4.jpg HTTP/1.1\r\nHost: www.mypornhere.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sun, 23 Nov 2025 07:49:44 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 87334\r\nLast-Modified: Sun, 03 Nov 2019 06:27:06 GMT\r\nConnection: keep-alive\r\nETag: \"5dbe733a-15526\"\r\nCache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":87334,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc56.60.100\", baseline, precision 8, 1280x720, components 3","md5":"d637052dabb9683e9b5a609477dd75cb","sha1":"d7eebb81f7e507cc3d927c20fbd96a6a49be110b","sha256":"51c8b304e8ebc09f0786bb0de0e941e77278be901fce0aa520cdacc65f78c8ac","sha512":"07a766f368bbbb9a42a4d08ff8e1be666d1f3b681578fe67c7238fb50afb6f37e1603223c1c07f2e883933e7852a338bd0e1a050e0945c3afbb0b6a1980a4187","ssdeep":"1536:fNC1QoccLKKMiGUhaOw9JuKL1qameiq3CSu1Ax/g87tnAsky/H1s4K+Wo6:eQ2LKwfaOwvBEq31mO7tnAc/Vs4k","tlshash":"47831210a51b9201d62bebb1a97f6d9f383f19750ea260de219b8d73c5c3c39c27315a","first_seen":"2025-11-03T22:11:18.300495Z","last_seen":"2026-01-14T20:02:26.383226Z","times_seen":7,"resource_available":false,"data":null}},"time_used":995,"timings":{"blocked":-1,"dns":11,"connect":40,"send":0,"wait":41,"receive":50,"ssl":814},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cav105.com/contents/videos_screenshots/6000/6873/preview.jpg","fqdn":"cav105.com","domain":"cav105.com","tld":"com"},"ip":{"addr":"45.145.72.132","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cav102.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Oct 2025 10:48:19 GMT","end":"Sat, 17 Jan 2026 10:48:18 GMT"},"fingerprint":{"sha1":"82:94:6E:AC:FA:1B:B3:AD:3A:52:F3:44:5C:22:68:8E:3A:C1:15:86","sha256":"C9:61:FC:04:4A:41:13:4F:00:A5:6F:C2:6B:3D:0E:B4:B1:C6:5B:C5:42:BF:0A:4E:EF:27:16:51:8C:26:96:EA"}}},"request":{"raw":"GET /contents/videos_screenshots/6000/6873/preview.jpg HTTP/1.1\r\nHost: cav105.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 07:49:44 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 63023\r\nlast-modified: Sat, 24 Sep 2022 09:40:05 GMT\r\netag: \"632ed075-f62f\"\r\nexpires: Sun, 23 Nov 2025 07:50:44 GMT\r\ncache-control: max-age=60\r\nstrict-transport-security: max-age=31536000\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63023,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc57.89.100\", baseline, precision 8, 720x1280, components 3","md5":"e22708e9ca43f8b23e915d44e773c9b4","sha1":"72b3b2e614900c1bd29d07cb73789090392f193d","sha256":"0343caacda66f45c951d7b32ffbf3bdf611d5d864d1bbb38d034441a7fae8a68","sha512":"8d2f5411dce5ce5f2ad96943e66b4275caae1353cd18f7c1657df26483a4dff153a9d10e04c3daf0da5a3b00327ec3e0949a5fa318f09a161c1b8084e5ab344e","ssdeep":"1536:GxyddOv//rviVfy3+ENHS2yqFTfUQ2raQ42SzCH/xxn:1dO3/+6OMKqFTstra32SEF","tlshash":"1953f2093f5aaf853102c87d644fe343f3de98af64c9962d4ed1090a29f57e74b67228","first_seen":"2024-05-06T04:33:03Z","last_seen":"2026-03-03T09:47:10.866521Z","times_seen":61,"resource_available":false,"data":null}},"time_used":889,"timings":{"blocked":195,"dns":0,"connect":0,"send":0,"wait":509,"receive":185,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumb.aporntv.com/thumbs/5/d/c/a/8/5dca7b4edb569Brother%20Sister%20(Real%20Incest).mp4/5dca7b4edb569Brother%20Sister%20(Real%20Incest).mp4-3.jpg","fqdn":"thumb.aporntv.com","domain":"aporntv.com","tld":"com"},"ip":{"addr":"104.26.1.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aporntv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Oct 2025 20:50:31 GMT","end":"Wed, 14 Jan 2026 20:50:30 GMT"},"fingerprint":{"sha1":"1A:53:66:D8:5B:B7:E8:29:37:40:02:2C:4E:15:FA:CF:D8:50:0C:0D","sha256":"E0:FE:7A:AA:4C:34:05:2A:2C:11:85:67:A0:47:68:FE:F2:FB:27:DF:D4:67:03:5D:AB:5F:DE:E6:91:53:A8:47"}}},"request":{"raw":"GET /thumbs/5/d/c/a/8/5dca7b4edb569Brother%20Sister%20(Real%20Incest).mp4/5dca7b4edb569Brother%20Sister%20(Real%20Incest).mp4-3.jpg HTTP/1.1\r\nHost: thumb.aporntv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5238\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ES44pbL35ykb8cGDdBwlMvqxLslLbln2DelF6xdjglGnjf92nFbZEt%2BZECd2K0ipOfU5Gj2ryPBaHsxD3VFF%2Bk8eu%2FkxsX9b8T1Y1KUTNf4%3D\"}]}\r\ncache-control: public, max-age=16070400\r\ncf-bgj: imgq:100,h2pri\r\naccept-ranges: bytes\r\ncf-polished: origSize=5261\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"5dca84ee-148d\"\r\nexpires: Tue, 25 Nov 2025 12:39:54 GMT\r\nlast-modified: Tue, 12 Nov 2019 10:09:50 GMT\r\ncf-cache-status: HIT\r\nage: 414591\r\nvary: accept-encoding\r\ncf-ray: 9a2f125dcfdfdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5238,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 200x150, components 3","md5":"e280293db8cbde55550c5a4d903f8f54","sha1":"889c25f680dbb8c57c219ddf24582b4abc8bbd8e","sha256":"f79e0f787b853e31e93bd448cc3c72f9bf1fc5fa19b45468b8c7721b45ea59ec","sha512":"329385f1f88fc2cd1034c3668e185795736a9a9ce99815837d8423be516f06e8c67ed83267e734196efc1ea3dfd4f0700ff548ed74ad5943e62961572bf813e1","ssdeep":"96:Zw7pPxpRcjxkjManR/CmI8mINZRuJfbHyzd/n7edcDjO8MHm9Z3a75whZPFhq:2P3Rc+jMWEYNjefrKJ7iqPfK750ZPFs","tlshash":"28b17c372216a99abeb171be2e0401191cfb7feb63660b6a2d7c1913dc7d0c4c191033","first_seen":"2025-01-21T19:08:02.582937Z","last_seen":"2025-11-23T07:50:46.613518Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1309,"timings":{"blocked":-1,"dns":10,"connect":116,"send":0,"wait":14,"receive":1,"ssl":1085},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.155pic.com/upload/vod/2023/10/yscmla4djpy.jpg","fqdn":"www.155pic.com","domain":"155pic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.484Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/2023/10/yscmla4djpy.jpg HTTP/1.1\r\nHost: www.155pic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":2187,"timings":{"blocked":2185,"dns":2,"connect":2,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sex2021.com/thumbs/c81905dbbe9228cee6ee5886ae7a5ab2.jpg","fqdn":"www.sex2021.com","domain":"sex2021.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.512Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /thumbs/c81905dbbe9228cee6ee5886ae7a5ab2.jpg HTTP/1.1\r\nHost: www.sex2021.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":2160,"timings":{"blocked":2158,"dns":2,"connect":1,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/optimized/2X/f/f238df1990ebefa3a2609b1552fd228daa72a714_2_582x1024.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 03:08:59 GMT","end":"Mon, 02 Feb 2026 03:08:58 GMT"},"fingerprint":{"sha1":"E1:A5:18:66:02:A1:30:48:C0:63:B8:0D:A6:A0:6A:4D:49:FB:31:A4","sha256":"F3:EF:EA:51:6F:29:3C:97:1C:9E:B5:C9:DB:69:E9:BE:55:EA:E1:47:AC:EB:1B:EB:A6:2A:5B:B1:74:85:D0:AB"}}},"request":{"raw":"GET /uploads/default/optimized/2X/f/f238df1990ebefa3a2609b1552fd228daa72a714_2_582x1024.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 07:49:44 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 93596\r\nlast-modified: Tue, 12 Aug 2025 05:13:17 GMT\r\nexpires: Mon, 23 Nov 2026 07:49:44 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93596,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 582x1024, components 3","md5":"cbbccf525bb85b717e1cd18a3d44d17a","sha1":"5dc9e792cf1a5473eb57baa3d1413fb5b17e9968","sha256":"fe3f1a6309aadcec04bb2576804a508b4325950c0133f3d4c5e4e226cac8aefb","sha512":"a16e737a7def311dd4b2bbf1ba4feeeea6248daefff07307b093c99b57073e11f8531e6f6c89bfa4b5b4cd0b3a4297ea877f1fd415f34845507c5dc8c060f8f4","ssdeep":"1536:/2zKxkSr+n1g0qePNUUHy6Phz7aeFefncWt+yXjcPrLVM3gpeBV3PqXa:/2G2gF4UtuhLE97eZRkD3Wa","tlshash":"3593123a891cd740e8c96700d826c8f91bfb948061d65ddaa9c73d766827f6290e373b","first_seen":"2025-07-27T03:07:07.163336Z","last_seen":"2026-03-03T14:10:03.830164Z","times_seen":57,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avatars.mds.yandex.net/get-vthumb/468995/78b19ba841f5a64a966d9f60cd4f9297/564x318_1","fqdn":"avatars.mds.yandex.net","domain":"yandex.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:45.287Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /get-vthumb/468995/78b19ba841f5a64a966d9f60cd4f9297/564x318_1 HTTP/1.1\r\nHost: avatars.mds.yandex.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ds2.obmenvsemfiles.net/fo/files_attachments/f48/49b/f4849b5b568560d7599ab3057c94f9e1.jpg","fqdn":"ds2.obmenvsemfiles.net","domain":"obmenvsemfiles.net","tld":"net"},"ip":{"addr":"85.17.28.50","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ds2.obmenvsemfiles.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Nov 2025 08:47:02 GMT","end":"Fri, 30 Jan 2026 08:47:01 GMT"},"fingerprint":{"sha1":"E5:95:B6:EC:9E:FB:2C:01:07:7C:D1:31:0A:C7:C1:F0:B4:2C:CA:90","sha256":"EA:78:31:B8:82:F1:32:8F:AA:D6:B1:0C:54:16:14:16:2C:B9:98:B3:4F:0E:EF:33:91:12:DD:5D:0A:46:50:3E"}}},"request":{"raw":"GET /fo/files_attachments/f48/49b/f4849b5b568560d7599ab3057c94f9e1.jpg HTTP/1.1\r\nHost: ds2.obmenvsemfiles.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 07:49:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17257\r\nlast-modified: Sat, 07 May 2016 17:08:19 GMT\r\netag: \"572e2103-4369\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17257,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3","md5":"f4849b5b568560d7599ab3057c94f9e1","sha1":"9540c3ca5ae5528a63f75ed9fe93b2dd1cbe84dd","sha256":"f1ff8b859f2e36adb5b4234f5d26502de66b5e1494988872fc2b72fad4198a7e","sha512":"e9066604e09e41aa6d04399007d690ff9f993516ae506151b89901335a05246c08e7ca36265f2205ec9a1aca39e7906d681b71c15b442d378eaefe72d8d5f7ab","ssdeep":"384:c1pMWHEA78LecNLVi1NYiVMdupzGuDoIbP667dg3QNVBeCl3l:MppkMRWVkaiV71G+oIbP6S5r8Ml","tlshash":"7a72e08e316559c9f0b30af6cb33be8903cb4e5f5a14621c94da9b3bc8b24d92c570b4","first_seen":"2024-05-09T10:30:15Z","last_seen":"2026-01-21T00:43:43.260837Z","times_seen":57,"resource_available":false,"data":null}},"time_used":2090,"timings":{"blocked":492,"dns":4,"connect":35,"send":0,"wait":44,"receive":5,"ssl":1490},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"ds2.obmenvsemfiles.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ansuko.net/wp-content/uploads/2024/12/poster-393.jpg","fqdn":"ansuko.net","domain":"ansuko.net","tld":"net"},"ip":{"addr":"104.21.54.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ansuko.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 11:42:18 GMT","end":"Tue, 06 Jan 2026 12:39:58 GMT"},"fingerprint":{"sha1":"F5:7A:D2:13:21:CE:EB:03:E2:D6:BE:F2:03:73:1F:55:8F:6B:68:4A","sha256":"4E:51:47:18:74:38:C5:CD:59:59:6B:15:27:21:87:E4:21:5C:E7:A4:96:C3:F6:7A:F3:06:9F:82:BE:6B:3A:65"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/poster-393.jpg HTTP/1.1\r\nHost: ansuko.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:43 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 178757\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nlast-modified: Fri, 21 Nov 2025 06:10:26 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ziPXBvpN9VUnYSLstW7P2sqdEXe7bldwx4RZn8LauxHDLTkkUXSYYC8Ptr3ycwOmsJSTV7F99KTxIDg7fJv1sG4nK0Fe98QF\"}]}\r\ncf-ray: 9a2f125549aeb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23496,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 480x270, components 3","md5":"de9507f69cf82ea5e40c1663ffc80e2f","sha1":"aa0a5604f9bc5d0bee45cbe919064e70e4907af1","sha256":"98e1d2728853f6f2ea5029899a16ed26b297270db75fcdfda2d25d543dbdd94c","sha512":"0f09fd0f9bbf100ad25794ef522bb09e1cea7e9d41263d5f4a54bb867d7e9a64fa981eea5ce9d3fecd4975b9e8b8fe3fb750dd58afd452cdacf934c2b1d9d914","ssdeep":"384:pxuNR286TgKYyxeptwbRtJ6cTt0pzQNoIGOT7C24la42HmuTq7E+sE2aEHn2u:pxdfEtkUQt0poo724A4MhTqw+sxpn2u","tlshash":"b0b2e1679702b6d9f4e6d03ae3f96cdbf1fa44c0929093003899f8388811b6a0e94f1d","first_seen":"2025-11-13T05:34:52.781327Z","last_seen":"2026-04-03T21:47:16.485746Z","times_seen":21,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn5-thumbs.motherlessmedia.com/thumbs/CC6E977.jpg","fqdn":"cdn5-thumbs.motherlessmedia.com","domain":"motherlessmedia.com","tld":"com"},"ip":{"addr":"185.107.92.224","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.motherlessmedia.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV SSL CA 2","organization":"GoGetSSL"},"validity":{"start":"Mon, 03 Nov 2025 00:00:00 GMT","end":"Tue, 22 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1C:9C:A7:64:1D:50:C4:66:FC:B5:AE:9C:CB:DF:AC:1E:1F:4B:A0:83","sha256":"FD:6F:CF:79:47:AA:EF:54:72:2A:60:E2:1B:57:6B:D6:33:60:E2:67:DA:83:68:95:02:34:5B:66:53:45:A1:0E"}}},"request":{"raw":"GET /thumbs/CC6E977.jpg HTTP/1.1\r\nHost: cdn5-thumbs.motherlessmedia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: openresty/1.21.4.1\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24042\r\nvary: x-s-token\r\nlast-modified: Sun, 07 Oct 2018 00:58:37 GMT\r\netag: \"5dea-57799013abd3c\"\r\nx-cache: HIT\r\nx-whom: cdn08\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.21.4.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":24042,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 640x480, components 3","md5":"1dfad77f486d98446b4e9c4c752f26d0","sha1":"ce264c63916b1c94cc59bbf01606fe64a8cc0888","sha256":"d54844046aba94f432b1e843ca7c81fbb6d531fc148a19790b27b23e37c0cce2","sha512":"f39d7173b320c860762ff73ba5383c6465a83f8e45f0c568053c0b299988bdf36b0c86f38137a5a0adc4e31689ef2a28deb3f32373fd16462a278c22c8742a57","ssdeep":"384:eZ6k+EiopMtvqoqdlp31tvLBvSTNSDjxErf4pDmN25FQhs9HRLBT7kfJTnTtGhWu:eZl+Eiothdlp33BvA8Dj6rApDDHQh6qO","tlshash":"7eb2d1ebbd88ca79e827e17761ce11d295657234ec3c5a0d7ecd1c088a6dc321bd1c5a","first_seen":"2024-05-10T17:13:40Z","last_seen":"2026-01-24T11:08:05.452304Z","times_seen":56,"resource_available":false,"data":null}},"time_used":1747,"timings":{"blocked":-1,"dns":9,"connect":24,"send":0,"wait":28,"receive":14,"ssl":1663},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn1.hotmoza.tv/thumb/d3/c4/f8/d3c4f8b9b0c6e431ccd094e179510b00.jpg","fqdn":"cdn1.hotmoza.tv","domain":"hotmoza.tv","tld":"tv"},"ip":{"addr":"104.21.70.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotmoza.tv","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 17:26:42 GMT","end":"Sun, 18 Jan 2026 18:24:12 GMT"},"fingerprint":{"sha1":"97:87:84:90:04:33:D7:2B:2D:62:4A:94:79:5B:A5:A0:06:A4:36:95","sha256":"E6:C6:55:94:23:61:7D:D3:AC:49:99:8A:0D:38:F8:12:8E:96:5F:0D:3F:E6:1B:CE:EC:1C:AA:49:F0:A5:D0:D2"}}},"request":{"raw":"GET /thumb/d3/c4/f8/d3c4f8b9b0c6e431ccd094e179510b00.jpg HTTP/1.1\r\nHost: cdn1.hotmoza.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:44 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21554\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-object-meta-mtime: 1581304657.258632\r\netag: 8210d1939985b0e9112b73416df1e61d\r\nlast-modified: Mon, 10 Feb 2020 03:17:42 GMT\r\nx-timestamp: 1581304661.83348\r\nx-trans-id: tx7626b8f6664a40e689feb-0063d1ec1e\r\nx-openstack-request-id: tx7626b8f6664a40e689feb-0063d1ec1e\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\ncache-control: max-age=172800\r\nexpires: Tue, 25 Nov 2025 01:09:55 GMT\r\nx-cdn-host-id: DS9225\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nage: 23989\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tM3mYP%2B5v00xWqtEczO1Al5bt2Q%2B1Gh%2FavKNtFbvSYm2Ns3g4Zt88wUXgV21YrDX2VJywHJ%2Bdc3NosBY1H4bh5XXJbZUcrUuAksfDTTOaQ%3D%3D\"}]}\r\ncf-ray: 9a2f125bdd3e0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21554,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", progressive, precision 8, 320x180, components 3","md5":"8210d1939985b0e9112b73416df1e61d","sha1":"ac894ff570ddcd3bdbf8ffc0c8dfabb4d2de6674","sha256":"e0beea472ade34970aea860a8380a7dde76f4c3a0324c89b4fb337f5395391ac","sha512":"ade7b1643b78be02dc522917fbc98931fdf82695bbffc8bf6a155b5e33a40366fd7f08b327275bbd210b1d838f28358a3c3b03c92510fcc05c0663a5c8a6e602","ssdeep":"384:e5z1BUZx0mht0C1lh3kw8hkBBQ4R0tFzBC+aGFyYrv9JqEszR:e5z1B+/0C1lh7dQ00tFzBCETLbqTR","tlshash":"58a2df87129e3f00e2dffb33d2a3560e41bc1a99ee431ae351865d96526332d4c8b597","first_seen":"2024-05-11T10:58:16Z","last_seen":"2026-03-03T08:08:10.17834Z","times_seen":15,"resource_available":false,"data":null}},"time_used":1247,"timings":{"blocked":-1,"dns":27,"connect":51,"send":0,"wait":18,"receive":1,"ssl":1099},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blumpkintube.com/thumbs/241/916_a.jpg","fqdn":"blumpkintube.com","domain":"blumpkintube.com","tld":"com"},"ip":{"addr":"104.21.79.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blumpkintube.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 16:43:09 GMT","end":"Tue, 06 Jan 2026 17:40:50 GMT"},"fingerprint":{"sha1":"1E:5F:43:D1:62:A9:3B:35:04:2F:A8:7F:C8:C0:55:4E:7C:DE:80:C4","sha256":"DF:89:D0:CE:A3:31:22:68:E9:31:A0:B5:F9:14:C0:4A:DF:2E:12:2E:C1:09:E3:FA:92:B8:02:32:4B:DA:36:A5"}}},"request":{"raw":"GET /thumbs/241/916_a.jpg HTTP/1.1\r\nHost: blumpkintube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11106\r\nserver: cloudflare\r\nlast-modified: Sat, 05 Sep 2020 23:56:53 GMT\r\netag: \"5f5425c5-2b62\"\r\nexpires: Fri, 20 Nov 2026 02:02:43 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, no-transform\r\nage: 280022\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C%2BP7tH7oLu1KpEHLZmK3h51nzWMYyhIeasnxuP28Qfqk8t%2BaCSFo2%2B6mbvBLKRQGs4sidzM5vayKr7Cnjhm%2FrW1IBHrypYrc%2BjRAHUSq\"}]}\r\ncf-ray: 9a2f125eda0bb503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11106,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 312x208, components 3","md5":"8f7398334486af0aaad3fdf1f1362767","sha1":"b985c860c218365bf9eecd6e2285925e10193b18","sha256":"c457c49465bd22bd7f67a115d8ab465d1d384a5ca2022dab42bce8c61850d77b","sha512":"6169acce817b6e87a7fe8216ae6c226b5a9f9c8768f8b2528f14faf534c12a266ec83393c278ba7cb712b3807cd101a8e68f74c5033f35a88a6b3dd5a52b5b76","ssdeep":"192:s29mE6g7OqNhrVKYZ3znOJtkh25dThi2CoCJgDZJ6hVHeq1bIqkzj:v9oIHhpKW3znWQ2YkUgFJ6Dvizj","tlshash":"2032c0b7dac255fab83698f4262f3c11c6d194443993e41143ca0f5fcaa3af658b39a0","first_seen":"2024-05-13T04:18:38Z","last_seen":"2026-01-12T02:36:25.940486Z","times_seen":43,"resource_available":false,"data":null}},"time_used":1655,"timings":{"blocked":367,"dns":28,"connect":12,"send":0,"wait":7,"receive":1,"ssl":1223},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.vidmo.pro/thumbs_320/cc/a1/cca1b99a784cff8d8a2f8eb5af630b4d/13624512.jpg","fqdn":"en.vidmo.pro","domain":"vidmo.pro","tld":"pro"},"ip":{"addr":"89.248.193.244","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"en.vidmo.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Nov 2025 20:48:10 GMT","end":"Thu, 19 Feb 2026 20:48:09 GMT"},"fingerprint":{"sha1":"B8:8B:9C:2B:E9:53:D3:85:0E:57:74:8D:32:07:72:DF:38:F3:91:DA","sha256":"9B:B3:9F:DD:FB:1B:36:C3:04:60:BF:DF:87:AA:AB:5D:F6:0D:45:20:77:9B:29:19:5F:C4:B6:F1:04:C9:23:3E"}}},"request":{"raw":"GET /thumbs_320/cc/a1/cca1b99a784cff8d8a2f8eb5af630b4d/13624512.jpg HTTP/1.1\r\nHost: en.vidmo.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13377\r\nlast-modified: Wed, 01 Dec 2021 15:34:34 GMT\r\nexpires: Fri, 11 Oct 2024 20:01:26 GMT\r\ncache-control: max-age=604800, public, no-transform\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13377,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3","md5":"5f99c1592a804a8621bf5dd974f58a8f","sha1":"b35172aafa260b0b9e613aee0bab1d1cad8a542f","sha256":"058d83d37bcc89a7dbeaf1efafee28969478c0a773ff7a8cc15eb93ef222b17e","sha512":"e87146fd4288d031f5cc7debb8064def4c2c29d8d3a36c5cf1b3d3afd56c8daf08cc5a5968d2a0be43a9568556c6628eee05f2bb791cdb514b1452e1db72b771","ssdeep":"384:m6vp3+iXWPr5c0LiRYLj1huFCt0jY2W1p1ARLPkle:m6vp39XWr5liKvuFCtUWZKk8","tlshash":"4c52bf2fac190ae49d2eb1d1154b4e3f78836568b304a87394e00a5b2fe6e594bfd11f","first_seen":"2025-11-01T01:57:38.077051Z","last_seen":"2026-03-03T09:47:10.893066Z","times_seen":15,"resource_available":false,"data":null}},"time_used":1677,"timings":{"blocked":-1,"dns":21,"connect":171,"send":0,"wait":96,"receive":0,"ssl":1372},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-22","alert":"Sinkholed","trigger":"en.vidmo.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets-jpcust.jwpsrv.com/thumbs/86xIKFg4-720.jpg","fqdn":"assets-jpcust.jwpsrv.com","domain":"jwpsrv.com","tld":"com"},"ip":{"addr":"151.101.2.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /thumbs/86xIKFg4-720.jpg HTTP/1.1\r\nHost: assets-jpcust.jwpsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nretry-after: 0\r\nlocation: https://cdn.jwplayer.com/v2/media/86xIKFg4/poster.jpg?width=720\r\naccept-ranges: bytes\r\ndate: Sun, 23 Nov 2025 07:49:44 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410026-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1763884184.013637,VS0,VE0\r\nserver: nginx\r\ncache-control: max-age=900\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avatars.mds.yandex.net/i?id=654cb1d203ac516307319f8b2cb9d3bf-3162467-vthumb\u0026shower=30\u0026blur=30\u0026w=564\u0026h=318","fqdn":"avatars.mds.yandex.net","domain":"yandex.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:45.203Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /i?id=654cb1d203ac516307319f8b2cb9d3bf-3162467-vthumb\u0026shower=30\u0026blur=30\u0026w=564\u0026h=318 HTTP/1.1\r\nHost: avatars.mds.yandex.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":1654,"timings":{"blocked":1609,"dns":45,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cndata.jpg4.top/index.php?oldhot=all\u0026cf=US","fqdn":"cndata.jpg4.top","domain":"jpg4.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-23T07:49:47.364Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /index.php?oldhot=all\u0026cf=US HTTP/1.1\r\nHost: cndata.jpg4.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":7980,"timings":{"blocked":7980,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"cndata.jpg4.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.empflix.com/a16:8q80w500r/200/27/44/2744390/thumbs/12.jpg","fqdn":"img.empflix.com","domain":"empflix.com","tld":"com"},"ip":{"addr":"156.146.33.140","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.empflix.com","organization":""},"issuer":{"commonName":"RapidSSL Global TLS RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Tue, 18 Feb 2025 00:00:00 GMT","end":"Sat, 21 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:B1:D7:D9:2B:14:E2:65:B6:57:54:58:3B:18:22:AD:29:87:CF:11","sha256":"46:D0:89:06:08:EC:65:95:26:1B:C3:62:17:00:0E:4A:21:EC:4A:1C:E8:4D:C3:CE:AC:1F:F8:07:17:28:54:25"}}},"request":{"raw":"GET /a16:8q80w500r/200/27/44/2744390/thumbs/12.jpg HTTP/1.1\r\nHost: img.empflix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15053\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-77-nzt: EgwBnJIhiwH3TczJAAwBT3/LFAH3aG4AAA\r\nx-77-nzt-ray: cf8787276584f9dd99bc2269a3323c25\r\nx-77-cache: HIT\r\nx-77-age: 13225037\r\nserver: CDN77-Turbo\r\naccess-control-allow-origin: *\r\nx-77-pop: frankfurtDE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":15053,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 500x250, components 3","md5":"7e528a5aadbc7c300db8fa6c3e1523f6","sha1":"41fa892e0658503aeafd691a86d8c7bc98d6beb4","sha256":"e95d49b5ca3996e2285fd6b388ece11b6cc020e8fe14de4f2b57441b3bee2ba8","sha512":"99a7c9e0bc496cd5730485a87d10350e7248deb018ef8b75318818474c94cd6ad62efef1f8162c4929e99bc6151d1bc2fafcd9ed65c072254ae326846046379b","ssdeep":"192:NIuUdHv/EZSaTFPQptOofApu+7IdteZWk1/lv51I9RdGlHWXzHk/rBMRmpkY4yVZ:NIuUdMFqtvAA+kQPRlv5W4VWDSBpkx09","tlshash":"1b62ae13b3a66403f600e9389020560176a7f01df9dcb66fba5aba29cf6d4654c893ec","first_seen":"2025-11-09T20:01:59.795008Z","last_seen":"2026-02-06T15:51:51.868697Z","times_seen":13,"resource_available":false,"data":null}},"time_used":2010,"timings":{"blocked":-1,"dns":26,"connect":101,"send":0,"wait":26,"receive":21,"ssl":1798},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chezcathy.com/ext/pre_1623849707.jpg","fqdn":"chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"138.199.36.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chezcathy.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 08:11:44 GMT","end":"Thu, 08 Jan 2026 08:11:43 GMT"},"fingerprint":{"sha1":"9A:4C:4E:E8:A3:79:B0:5B:71:90:4A:26:72:7F:2D:C8:C2:F3:14:A0","sha256":"EB:A3:32:86:C1:B0:23:E9:CE:1C:20:4A:94:7B:04:CD:37:94:7D:63:8F:88:EC:BD:2F:48:A3:42:E5:C8:95:49"}}},"request":{"raw":"GET /ext/pre_1623849707.jpg HTTP/1.1\r\nHost: chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7439\r\nserver: BunnyCDN-DE1-1054\r\ncdn-pullzone: 4336709\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=7776000\r\netag: \"6668e94f-1d0f\"\r\nexpires: Tue, 10 Feb 2026 18:17:51 GMT\r\nlast-modified: Wed, 12 Jun 2024 00:18:23 GMT\r\nx-cache-status: HIT\r\nx-cache-type: MEDIA-SHARED\r\ncdn-proxyver: 1.40\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 11/12/2025 18:17:51\r\ncdn-edgestorageid: 1334\r\ncdn-requestid: 076a5c556f59dcdc1eb5bb6511293aca\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":7439,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x226, components 3","md5":"4d9ef6b933c33f97afe86a673193a455","sha1":"b9a10b358618c9777481388a0b0061ea7d1353b8","sha256":"2efc51091b7464d76016eb9ad76e2b1a688cb06fec58e2e96c2527b63c1c896a","sha512":"4e6cc023a3e67ef2fa8406f30518d6e7d450af2610552e07042ff6736f5c7b6cadde7af08d992b909f54d283f1511b858e067ef74ebf425f5504cbbb8ec301c4","ssdeep":"96:ZOuYOl1I0eXIMaRAHkKaLjFhcZ/UxiNN2ZZiLJOm+gp50a7VCYvrKl5iH3xPXhFM:Zb31YwAEXj/cZBN79Wck/uBPhFdJq5l","tlshash":"b0e1af2ee70a8036dcff277e0718a38c6664dde28a145213b08f238817ef0b55467ad5","first_seen":"2025-09-15T19:17:31.260253Z","last_seen":"2026-01-08T07:58:02.029219Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1640,"timings":{"blocked":270,"dns":43,"connect":60,"send":0,"wait":29,"receive":1,"ssl":1222},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.elog-ch.com/news/images/201201/20120119-1s.jpg","fqdn":"www.elog-ch.com","domain":"elog-ch.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.elog-ch.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 02:08:41 GMT","end":"Fri, 23 Jan 2026 02:08:40 GMT"},"fingerprint":{"sha1":"1E:21:8A:4E:BC:77:47:33:BF:4E:DD:A2:9F:33:D4:F7:63:90:08:EE","sha256":"9E:3E:0C:75:E1:C5:07:BA:CF:34:35:66:A0:E9:1F:C4:6F:64:FA:06:DD:80:CC:A2:73:78:D7:B2:B8:DA:49:2E"}}},"request":{"raw":"GET /news/images/201201/20120119-1s.jpg HTTP/1.1\r\nHost: www.elog-ch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":2273,"timings":{"blocked":293,"dns":2,"connect":263,"send":0,"wait":0,"receive":0,"ssl":1713},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vdo.x4men.com/Img/285.jpg","fqdn":"vdo.x4men.com","domain":"x4men.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.524Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Img/285.jpg HTTP/1.1\r\nHost: vdo.x4men.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":2147,"timings":{"blocked":2145,"dns":2,"connect":3,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn5-thumbs.motherlessmedia.com/thumbs/17FF370.jpg","fqdn":"cdn5-thumbs.motherlessmedia.com","domain":"motherlessmedia.com","tld":"com"},"ip":{"addr":"185.107.92.224","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.motherlessmedia.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV SSL CA 2","organization":"GoGetSSL"},"validity":{"start":"Mon, 03 Nov 2025 00:00:00 GMT","end":"Tue, 22 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1C:9C:A7:64:1D:50:C4:66:FC:B5:AE:9C:CB:DF:AC:1E:1F:4B:A0:83","sha256":"FD:6F:CF:79:47:AA:EF:54:72:2A:60:E2:1B:57:6B:D6:33:60:E2:67:DA:83:68:95:02:34:5B:66:53:45:A1:0E"}}},"request":{"raw":"GET /thumbs/17FF370.jpg HTTP/1.1\r\nHost: cdn5-thumbs.motherlessmedia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: openresty/1.21.4.1\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 34937\r\nvary: x-s-token\r\nlast-modified: Tue, 02 Oct 2018 11:59:09 GMT\r\netag: \"8879-5773da6419015\"\r\nx-cache: HIT\r\nx-whom: cdn03\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.21.4.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":34937,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 650x633, segment length 16, baseline, precision 8, 640x480, components 3","md5":"8cf42f10e5a64390d4717cdceaac38e4","sha1":"129b2745fac60dec889d7881ffcaf756fad5e8e5","sha256":"b8caf92218475b17b1d6a0ba2f66ebe1b1ebe73b2ad20802d2765136ea1dc4cb","sha512":"82d329c9641c61719b7d80eb240e67c07176288baff26f64c6af202bb3cbe83a448c0ab47d47a4581661120a9e8ed817cb2552c2ebae84425dd589859de9b793","ssdeep":"768:RRlOZCJTl09F+eEz94Yo5ZieRiqErk5rTgMbksbCHOO:JOZC+XMIvyqErihbCZ","tlshash":"2cf2d0953b960834e6fecefe4b0b1391d200e8715530f5bcea89911c929637e9f54e31","first_seen":"2024-05-05T06:04:20Z","last_seen":"2025-12-16T06:19:44.003986Z","times_seen":23,"resource_available":false,"data":null}},"time_used":1453,"timings":{"blocked":-1,"dns":17,"connect":26,"send":0,"wait":33,"receive":3,"ssl":1347},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdne-pics.youjizz.com/c/1/9/c19b14406af896454deb6f186028e77b1606645687-1280-720-1075-h264.mp4-9.jpg","fqdn":"cdne-pics.youjizz.com","domain":"youjizz.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:45.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.youjizz.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Dec 2024 00:00:00 GMT","end":"Tue, 06 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:A8:A8:35:DB:C2:7E:35:C3:7E:2A:75:C8:C8:D8:C6:09:86:45:D7","sha256":"B8:B2:2C:F3:DA:14:43:7C:79:64:F3:2C:36:B2:0A:52:EF:A7:AE:C8:FF:5D:57:E2:D1:26:9D:FD:B8:D7:77:B9"}}},"request":{"raw":"GET /c/1/9/c19b14406af896454deb6f186028e77b1606645687-1280-720-1075-h264.mp4-9.jpg HTTP/1.1\r\nHost: cdne-pics.youjizz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornogids.cc/contents/videos_screenshots/23000/23666/preview.jpg","fqdn":"pornogids.cc","domain":"pornogids.cc","tld":"cc"},"ip":{"addr":"104.21.65.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornogids.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 09:57:34 GMT","end":"Mon, 09 Feb 2026 10:53:20 GMT"},"fingerprint":{"sha1":"10:AF:A7:7D:03:41:4C:06:86:B7:DE:38:7B:C1:7F:C0:D7:B8:B6:A0","sha256":"A2:F8:01:C2:0E:CE:5B:81:8B:78:F3:E0:39:E0:5B:4D:C9:60:55:B8:5B:D7:4C:BA:B9:D7:BF:EB:11:22:E4:B7"}}},"request":{"raw":"GET /contents/videos_screenshots/23000/23666/preview.jpg HTTP/1.1\r\nHost: pornogids.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sun, 23 Nov 2025 07:49:46 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nIIGPRf9O9VcRb6zANMOxuwq8Y5oI%2B8xlFm8Ikhm1djvWYtF81HclS26yhr%2Fnh3LwCQzw6HpfgfarZ5zbelffCfIlNZ0FvH7CmTWBg%3D%3D\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\ncf-ray: 9a2f1262fc125ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":1802,"timings":{"blocked":306,"dns":4,"connect":9,"send":0,"wait":67,"receive":0,"ssl":1405},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/optimized/2X/1/19296b5523eeff612f32e6bee482bf840415e315_2_582x1024.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 03:08:59 GMT","end":"Mon, 02 Feb 2026 03:08:58 GMT"},"fingerprint":{"sha1":"E1:A5:18:66:02:A1:30:48:C0:63:B8:0D:A6:A0:6A:4D:49:FB:31:A4","sha256":"F3:EF:EA:51:6F:29:3C:97:1C:9E:B5:C9:DB:69:E9:BE:55:EA:E1:47:AC:EB:1B:EB:A6:2A:5B:B1:74:85:D0:AB"}}},"request":{"raw":"GET /uploads/default/optimized/2X/1/19296b5523eeff612f32e6bee482bf840415e315_2_582x1024.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 07:49:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 56198\r\nlast-modified: Tue, 12 Aug 2025 05:15:36 GMT\r\nexpires: Mon, 23 Nov 2026 07:49:43 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56198,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 582x1024, components 3","md5":"657d51d412bfb15ad5fe73257bc2da1a","sha1":"8cc2f5f7a14b7da21d69a4fcd447b1fbf3c47dc3","sha256":"ef3061aefe5707aa1ab069bfff2d9f4e6d114103b087bfb788468a9e39b8cc4c","sha512":"e719033c65e0e11b0d95b50ee4b3f0137496b6b76908ed12bf5267148933d168232384e34c44c4d438681c716040a65a382ae8e9c1e137764d6153f3aa0207a7","ssdeep":"1536:JV6zqSp3lPX8YFdc3E6AKXdiThy6OVEyj+vqMrVdwUFMFN6Ln:Kzzp1/8a6ndH6kjq7Jd/FWN6j","tlshash":"9743f184346b14ea12b305f7c74293a309dd512198c290aba7885ac9ad6d18cedfbda7","first_seen":"2025-09-05T05:21:15.545068Z","last_seen":"2026-03-01T22:30:17.207616Z","times_seen":20,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":24,"connect":29,"send":0,"wait":23,"receive":47,"ssl":169},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20250811-1/1ec949f2a1ddc0c1841236c4a2c1152e.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"154.44.14.125","port":3519,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lsbzytp.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 04:38:27 GMT","end":"Tue, 17 Feb 2026 04:38:26 GMT"},"fingerprint":{"sha1":"E4:F9:B0:0D:A6:D5:62:18:90:A0:35:EC:FE:C5:C3:B7:58:5F:FA:FC","sha256":"A9:67:6C:45:38:00:A8:62:13:FB:F8:36:D1:46:10:72:D6:E4:51:56:CB:ED:4F:0A:71:02:C9:9C:74:53:22:0B"}}},"request":{"raw":"GET /upload/vod/20250811-1/1ec949f2a1ddc0c1841236c4a2c1152e.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-encoding: br\r\ncontent-type: text/html\r\ndate: Sun, 23 Nov 2025 07:49:44 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nx-cache: BYPASS, Status: 404\r\ncontent-length: 88\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":1973,"timings":{"blocked":-1,"dns":8,"connect":191,"send":0,"wait":691,"receive":139,"ssl":899},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.redwap-cdn.com/098/98255/98255_320x180.jpg","fqdn":"img.redwap-cdn.com","domain":"redwap-cdn.com","tld":"com"},"ip":{"addr":"172.67.128.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redwap-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 01:34:07 GMT","end":"Mon, 09 Feb 2026 23:35:35 GMT"},"fingerprint":{"sha1":"67:91:E0:E4:9C:18:AD:BE:A4:1E:D4:E0:65:CA:24:48:D8:F4:44:02","sha256":"0B:E4:FD:D7:7F:00:A4:80:41:07:B5:C0:4D:30:17:3E:31:43:14:9E:EB:49:98:C8:43:B5:6C:73:91:F7:E5:6C"}}},"request":{"raw":"GET /098/98255/98255_320x180.jpg HTTP/1.1\r\nHost: img.redwap-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22630\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Apr 2019 07:51:54 GMT\r\netag: 8332388678af97f6f6da9a951f3cef91\r\nx-timestamp: 1554277913.94073\r\nx-object-meta-mtime: 1451033035\r\nx-trans-id: tx3e79e6e1d71247e3b90f4-005e647bf5\r\nx-openstack-request-id: tx3e79e6e1d71247e3b90f4-005e647bf5\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\nexpires: Tue, 25 Nov 2025 05:27:28 GMT\r\nx-cdn-host-id: DS9225\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nage: 8537\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uHJthDi63vnLRb80A8SR%2BEp2EeyI3Y8TVa9E7pUU111%2B6oxrdJTAzAdH7YKRWQ1TFQiQOyAmYvsw%2BLhZacZ%2Fu%2BYkSl3oiHhWAtF0gQL%2BL0c%3D\"}]}\r\ncf-ray: 9a2f125f7ec856ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22630,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, comment: \"Lavc55.18.102\", baseline, precision 8, 320x180, components 3","md5":"8332388678af97f6f6da9a951f3cef91","sha1":"139d2e8c45dae8f7af25a96670bd7f5c2ef0a645","sha256":"ddf406b58591b84b7100ca20082b1173f5e4d47db489a9d770f93fdc3a1bcd07","sha512":"46cb8de338d49146d0ecd803c583af6055a5bca2d90be9388e40daeee52b60c12fbb5720aaf811eab883faf8c77b90ebd4bde7964ed609e8ddc780e9749909d2","ssdeep":"384:vpKDic6plRITXZ0aMHUVLyfeMatUhzm2n6K6SJ5UrwpFdY2AcnbLf5UdNGHrGBT6:vwDiX86fe3tURhDJ9c2rnvBUmq8FJ","tlshash":"cea2e12f1a2be86bc6c07b3d16708fbac7d325769613198a30054a7ebe985c540ea587","first_seen":"2024-05-12T08:11:25Z","last_seen":"2025-11-23T07:50:46.627999Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1386,"timings":{"blocked":-1,"dns":29,"connect":12,"send":0,"wait":7,"receive":2,"ssl":1313},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdne-pics.youjizz.com/f/6/7/7/e/f677e00934d3f5fae552811acf69afa91712556842-74.jpg","fqdn":"cdne-pics.youjizz.com","domain":"youjizz.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:45.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.youjizz.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Dec 2024 00:00:00 GMT","end":"Tue, 06 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:A8:A8:35:DB:C2:7E:35:C3:7E:2A:75:C8:C8:D8:C6:09:86:45:D7","sha256":"B8:B2:2C:F3:DA:14:43:7C:79:64:F3:2C:36:B2:0A:52:EF:A7:AE:C8:FF:5D:57:E2:D1:26:9D:FD:B8:D7:77:B9"}}},"request":{"raw":"GET /f/6/7/7/e/f677e00934d3f5fae552811acf69afa91712556842-74.jpg HTTP/1.1\r\nHost: cdne-pics.youjizz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":1646,"timings":{"blocked":1600,"dns":46,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cn.xszav.club/logo.png","fqdn":"cn.xszav.club","domain":"xszav.club","tld":"club"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xszav.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 23:21:55 GMT","end":"Sun, 15 Feb 2026 00:20:31 GMT"},"fingerprint":{"sha1":"B3:CD:27:E3:C3:95:A6:93:A7:A3:A1:20:E6:02:C0:3B:7B:9B:66:B2","sha256":"3A:DA:87:AF:30:67:8F:32:C6:8F:D5:6A:E9:4D:66:73:D3:12:05:7B:DE:4C:B7:9E:F4:22:E0:21:0C:AA:41:33"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: cn.xszav.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 31835\r\naccept-ranges: bytes\r\netag: \"ddbxe1eyexogokb\"\r\nlast-modified: Tue, 07 Oct 2025 07:52:46 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: BYPASS\r\ncf-ray: 9a2f1261ef42b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31835,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1080 x 1080, 8-bit/color RGBA, non-interlaced","md5":"befa63d8ce163451b7c0d437c6f125a2","sha1":"b485d47f67010eb951acde613d3688801109f114","sha256":"5361647e56a57b7dec4b3a224588635bbcb7794995ee3d23bd2dd36d6b3088da","sha512":"ccf0787913995bced780ea03bd9ccdf3526f0887b7e2e4a368bd020e975edbca5963d9878c63c4fdcfa186ef18a8f378190962c295ae9c23bc84e0b17ca301d9","ssdeep":"768:6yIK3n2dDshf3u8Fkk9BA1GDuO6fuC3Yr7+8J0:6yIKKDshfhF99+1G76mCIr7O","tlshash":"5ce229c4ca5b1dd7c28fa669c1af0c51b43d0891d8cdb1e77f3eb0988e6452992439de","first_seen":"2024-12-08T17:47:56.355638Z","last_seen":"2026-01-19T21:59:48.02994Z","times_seen":36,"resource_available":false,"data":null}},"time_used":1818,"timings":{"blocked":305,"dns":8,"connect":12,"send":0,"wait":73,"receive":1,"ssl":1408},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sex-studentki.live/images/16729_screen.webp?0","fqdn":"sex-studentki.live","domain":"sex-studentki.live","tld":"live"},"ip":{"addr":"104.20.23.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sex-studentki.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 20:47:56 GMT","end":"Fri, 26 Dec 2025 21:45:00 GMT"},"fingerprint":{"sha1":"5D:B0:C3:42:4B:2A:B2:57:09:62:9D:46:FF:AE:66:52:21:C9:FE:1F","sha256":"83:7D:76:B8:4B:F4:BF:80:6E:F7:DF:A2:40:A4:B8:0F:89:6F:2C:26:24:65:6E:9A:C3:72:D4:58:2F:13:05:CB"}}},"request":{"raw":"GET /images/16729_screen.webp?0 HTTP/1.1\r\nHost: sex-studentki.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 69230\r\nserver: cloudflare\r\nlast-modified: Sat, 23 Dec 2023 02:16:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"658642f4-10e6e\"\r\nexpires: Fri, 28 Nov 2025 07:01:03 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 175722\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fwjdpf0Go8i14rHrCXWabL4bVTws44Jw%2FUrhk1l46w2EkmT26x0EQ6xu8TJH1HUT%2Bac%2BhDMNeW0bA0mReHoFiEy3paEipsxGadaw%2FMK9KgJfHQ%3D%3D\"}]}\r\ncf-ray: 9a2f125e289232fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69230,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"35bbd1f00a553b96db42a28ad410fc30","sha1":"695e996bbc4f6c5c86bdd7a0b533e9e31ef9174a","sha256":"a30f2e8b80cd37448e73301418a0c7b1eb24288524f8877594cb2efb4acf2375","sha512":"b48055fa658e543bb3d74bf760c944775f3a53a90462ac5d5d6330eec58387aec84be5a0b796bdbc354825461b2e02ac056067a631076047913a400df4c9df2a","ssdeep":"1536:kBcUvyd2iRKspLcwept84MfzlIh7ov3dD9NO/:kBcUvyd2Uvxept84iIVofNO/","tlshash":"6b63014b0bd582f64616d92949f9b2072eb3880d7befb1f61c40f86644f26ecc1597b8","first_seen":"2025-06-15T23:41:16.092898Z","last_seen":"2026-01-15T02:36:37.255947Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1321,"timings":{"blocked":-1,"dns":10,"connect":71,"send":0,"wait":7,"receive":4,"ssl":1155},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fqjpg4.top/upload/vod/20240914-13/929569976706fedb950c688867930404.jpg","fqdn":"fqjpg4.top","domain":"fqjpg4.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.521Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20240914-13/929569976706fedb950c688867930404.jpg HTTP/1.1\r\nHost: fqjpg4.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T15:33:13.162002Z","times_seen":15117490,"resource_available":true,"data":null}},"time_used":2150,"timings":{"blocked":2148,"dns":2,"connect":170,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"fqjpg4.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.apian088.sbs/media/videos/tmb/000/000/534/3.jpg","fqdn":"img.apian088.sbs","domain":"apian088.sbs","tld":"sbs"},"ip":{"addr":"172.67.163.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:44.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apian088.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 12:00:16 GMT","end":"Sat, 14 Feb 2026 12:44:47 GMT"},"fingerprint":{"sha1":"81:62:5B:8E:F8:D6:89:63:71:73:E3:18:57:53:27:65:B5:AD:00:32","sha256":"1E:DA:15:FE:0A:FF:52:03:D1:A0:EE:60:AD:2A:3A:55:0D:CD:56:3F:75:52:A1:90:E2:E7:70:D3:2A:15:12:5E"}}},"request":{"raw":"GET /media/videos/tmb/000/000/534/3.jpg HTTP/1.1\r\nHost: img.apian088.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7854\r\nserver: cloudflare\r\nlast-modified: Sat, 23 Mar 2024 12:21:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"65fec959-1eae\"\r\naccept-ranges: bytes\r\nage: 273733\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pc2Zq%2B1R8ETCpRvYCoiQzgDaHyGJ%2Fe72x5BwZHi5HMywJnROPTWnR4MnFS3czyU%2F%2FDVgy5tRxknR%2F5q0G1Nl%2BxveXXEPaQ%2FnevghtgV15Ng%3D\"}]}\r\ncf-ray: 9a2f125df90fc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7854,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x226, components 3","md5":"cc1c3f43acc242b2600f29f8c8a001f4","sha1":"1b450bf469c9026b740a831a6232b1b747662c98","sha256":"5b30b6a495ca5beb7861c87a5a9781e66916046fe6bd9169e2407287e7addd9e","sha512":"1f1c1245dcf3c0d806d5d9d819e93b07e49c8337369b1550c34c9a224ae609ca2e618b890e0e9fad4d32aad4203bc0c2153586b06f745c115602c96c6ccd815c","ssdeep":"192:Kb15yXYU7EJoD8Po/ZkPSx2OSIA2jTOcTlfZyaZ:KhK77Em6oBEpO42WcBhyaZ","tlshash":"96f18e3837509842f98da3f213289b297b27dbc87a0e091fdcd1734deba54f5164a1e9","first_seen":"2025-05-23T07:10:10.181813Z","last_seen":"2026-01-20T12:10:26.317276Z","times_seen":54,"resource_available":false,"data":null}},"time_used":758,"timings":{"blocked":737,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taboodude.com/media/frames/2023-02-13/25795/full_frames_0008.webp","fqdn":"taboodude.com","domain":"taboodude.com","tld":"com"},"ip":{"addr":"172.67.218.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4.cam/","date":"2025-11-23T07:49:43.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"taboodude.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 11:27:17 GMT","end":"Wed, 28 Jan 2026 12:26:07 GMT"},"fingerprint":{"sha1":"C6:DA:3F:41:D0:5B:E5:90:37:43:AB:01:14:05:E3:DE:1F:73:28:2B","sha256":"BF:1D:EF:5B:54:8D:81:B7:99:80:64:D0:16:5D:AD:B8:FC:23:1E:2D:32:58:A2:F3:92:53:DF:D0:A3:3F:32:62"}}},"request":{"raw":"GET /media/frames/2023-02-13/25795/full_frames_0008.webp HTTP/1.1\r\nHost: taboodude.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 07:49:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16596\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Feb 2023 17:31:26 GMT\r\netag: \"63ea73ee-40d4\"\r\naccept-ranges: bytes\r\nage: 2052\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pBt11G7QNLHq2mN5%2BRTtABY1ICk18UQAVo9iywMo%2FIkBZsfn990pSLdr5KtmR0C%2B%2FlYqTPnhspxHTddE0YZzoe27E459r2cKnbSJ\"}]}\r\ncf-ray: 9a2f1260493556b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16596,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7f08e443c7d29ea6fa0a52f4da7558aa","sha1":"6ce61851d09b579484ed01283701e3e2b13705b6","sha256":"0527e4c3fabcbb24c797e861e5b54a0c384d4a21a56bcdbc9e3dc3265cee1531","sha512":"b1829e0dfbb3c4e71bf0f72be51cdc3858c070e7c0563f61fe86eaa50e133ec8592991d62b532442f75c023227fe49430e377b193f2f4f4217f8d64ee1a97f57","ssdeep":"384:315BFBxko8Xwzw1KtEoAojEOXQZsh8Uf9/R0nCAqYtE:/fiAzzEotgahxf9R0CAqYW","tlshash":"c872e1cb3f476488a1abbdcab65cc594591cd1b6019ca6af04c2759270fd70d43cfac2","first_seen":"2024-04-30T01:16:03Z","last_seen":"2026-02-14T16:06:52.854081Z","times_seen":73,"resource_available":false,"data":null}},"time_used":1803,"timings":{"blocked":376,"dns":4,"connect":23,"send":0,"wait":20,"receive":1,"ssl":1351},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}